!!!!!!!!999!!!!!EMERGANCEY!!!!!!!!!DESPERATE HELP!!!!!!!!!!!

[Jay Smith]

Hi all my computer is screwing me over it suddenley started running slower than a 3 year old trying to type!!!

Ive done everything defragmented it run adawre, spybot, bazooka, im uterly in trouble!!!
Id installed java, kill regian, regian killer+CSS, please help here my hijack this log:


Logfile of HijackThis v1.98.2
Scan saved at 20:51:37, on 25/08/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYSTEM\MOSEARCH\BIN\MOSEARCH.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE
C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NTL\BROADBAND MEDIC\SMARTBRIDGE\MOTIVESB.EXE
C:\WINDOWS\SYSTEM\CTFMON.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\RESTORE\RSTRUI.EXE
C:\PROGRAM FILES\NTL\BROADBAND MEDIC\BIN\MPBTN.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\UNUSED DESKTOP ICONS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ntlworld.com/broadband
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER COMPANION\CCHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: IEPlugin Class - {CF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRAM FILES\ADVANCED SYSTEM OPTIMIZER\IEHELPER.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pop-Up Stopper &Companion - {8F05B1A8-9D77-4B8F-AF54-6B2202066F95} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER COMPANION\POPUPUS.DLL
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [PMXInit] C:\WINDOWS\SYSTEM\pmxinit.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\ADVTOOLS\ADVCHK.EXE
O4 - HKLM\..\Run: [NPROTECT] C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\NTL\BROADB~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\Run: [CheckRegDefragOnce] regopt.exe -checkdefrag
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [MOSearch] C:\PROGRA~1\COMMON~1\SYSTEM\MOSEARCH\BIN\MOSEARCH.EXE
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [NPROTECT] C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: broadband medic.lnk = C:\Program Files\ntl\broadband medic\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/apop/defaul ... der_v5.cab



PLease help!!
Jay

[Geekgirl]

Settle down Jay

I don't see much in the logfile but we will leave that up to the "boss"...lol
Have you tried using ?

[PCguy]

Do me a favor tough guy, dont post with a topic like that. Its not nice and everyone needs help. Please be more descriptive.

Thanks

[lilpinkflower]

Take no notice of the nasty man Jay

hehe

also try

lilpink x

[Cactus]

Hey Jay...

This behavior may be caused by the Indexing Service.

Turn off the Indexing Service
To turn off the Indexing Service, follow these steps:
Start an Office XP program or Publisher 2002.
On the File menu, click Search.
Under Other Search Options, under Fast searching is enabled, click Search options.

NOTE: If Fast searching is enabled does not appear, fast searching is not installed.
To turn off the Indexing Service and leave the catalog files intact, click No, do not enable Indexing Service, and then click OK.

-or-

To turn off the Indexing Service and delete the catalog files, click Advanced, click Delete, and then click Yes.

NOTE: In Windows 2000, Delete appears on the Action menu. Select the catalog and then click Delete.
Uninstall the "Support for Fast Searching" Feature
In addition to disabling the indexing service, you can uninstall the fast searching support for Office. Unless you have a custom need for Office fast searching, you can continue using built-in searching, and you can uninstall the "support for fast searching" feature from all Office XP products that are installed.

NOTE: This only applies to computers running Microsoft Windows 98, Microsoft Windows Millennium Edition, or Microsoft Windows NT 4.0. To uninstall the "support for fast searching" feature, follow these steps:
Quit all Office programs.
Click Start, point to Settings, and then click Control Panel.
In Control Panel, double-click the Add/Remove Programs icon.
On the Install/Uninstall tab, click to select Microsoft Office XP product, where Office XP product is the name of the specific Office product being used. If you are using a standalone version of one of the Office programs, click to select the appropriate product in the list. Click Add/Remove.
In the Maintenance Mode Options dialog box, select Add or Remove Features, and then click Next.

This displays the Choose installation options for all Office applications and tools dialog box.
Click the plus sign (+) next to the Office Tools, click the icon next to Support for fast searching, and then select the Not Available installation state from the shortcut menu that appears.
After you change the installation state for Support for fast searching, click Update.
Repeat steps 2 through 7 for all other Office XP products installed.
NOTE: After you perform these steps, search for the Mosearch.exe and Mosdmn.exe files. You should not find them. If you do find them, you can safely delete these two files.

For more info read this:
http://support.microsoft.com/default.as ... bContent=1

Cactus

[Jay Smith]

[Geekgirl]

Just a thought but have you concidered Last Known Good Configuration? Take back to just before the firmware update or to a date where you knew it wasnt giving you trouble?

As for uninstalling Java and warez P2P make sure you removed them from Add/Remove Programs. Then in your C:\Program Files may be some left over folders just delete them. After that go to Run> type in regedit. Once you bring up the Registry Editor click on Edit then Find. Type in Java and have it search for files and keys and delete them you can do the same with the warez P2P. PLEASE BACKUP YOUR REGISTRY BEFORE EDITING

[Jay Smith]

yes i have. After trying many things i found out tht i have a crosslinked file somewhere on my pc! Ive tried using scan disk but when i try to do it after about 30 seconds it starts all over again, after 10 times of this happening a message appears saying scandisk has had to restart because windows or another program is writing to the hard drive?? can anyone please help me to get past this?

Jay

[Cactus]

Boot to DOS prompt...

Type scandisk hit Enter

Should run ok now.....

Cactus