PCTech Forums

by **lilpinkflower** » Thu Jun 03, 2004 9:52 am

is it a memory problem when i can hear alert 'sound' a couple of secs b4 the alert appears on the screen??
it never used to happen ...i'm sure tis to do with memory but i'm jus chekkin lol

Lilpink x

by **brad** » Thu Jun 03, 2004 11:25 am

Are you talking about "beeps"? How many do you hear?
brad

by **lilpinkflower** » Thu Jun 03, 2004 11:37 am

i mean just ordinary alerts....say for example...Norton alerting me of a Subseven attack (a regular occurence lol)... well the alert box comes up on the screen accompanied by an alert sound

but i am gettin the sound first.....and a lagged alert box by about a sec or so

happens with windows alerts too....generally the sound is coming first...

ta

Lilpink x

by **Restek** » Thu Jun 03, 2004 6:59 pm

by **lilpinkflower** » Thu Jun 03, 2004 11:31 pm

to be honest it's one of many things that r weird bout my comp at mo

i'm hoping it's memory....altho i dont kno why it shud all suddenly happen? i seem to have sum trubs with Norton Internet Security n its auto update... but im scared to manually update cos i may 4get
but then i wonder if the problem thats causin all the other fings is causin norton trubs too...cos norton used to run fine

n if its memory then why is it happenin all of a sudden?
i am virus chekkt and spyware chekkt to the hilt....so i kno tis not that... i run trojan cheks too

Lilpink x

by **noby** » Fri Jun 04, 2004 8:37 am

by **lilpinkflower** » Fri Jun 04, 2004 11:40 am

ta noby....n restek

lookt at memtest n was bit scared i didnt understand wot to do...so i downloaded something called Docmemory wich seemed to do the same thing but had more Lilpink-friendly instructions lolz

anyway....my comp passed all the tests so i guess ur right

here are some of the weird things happening.... (intermittently for a month or so poss longer)

-the above 'sound coming b4 alert'

-stuff not deselecting.... for example i clik on something on my desktop and it remains selected sooo if i then goto somethin els on my desktop it givs me the info for the first item i selected...wich was a lil spooky at 1st til i realised wot was happenin lol....i.e go to recycle bin n u cant access it cos its tellin u the properties of sum other item on desktop.
and if u try to deselect by clikkin on more things u end up wid loadsa stuff selected and mad random stuff happenin pertainin to any one of the number of things selected....oh wot fun

hehe

-this is the most annoyin one... the way the keyboard is used can sometimes change constantly...i can be happily typin and the next minute all the keys function as shortcuts and nuthin els !!! OR they start to type accented letters etc.....or nuthin at all.....i tuk my multimedia keyboard off start-up cos of it.... but tis nuthin to do with the keyboard...ho hum

-applications dont start straight away sum of the time.. the worst offender bein Incredimail....i will dubble clik to start it up and nothin appens...then if i look on my task list i can see the 2 incredimail functions there but nuthin is happenin....so i end both the tasks... n then double clik incredimail agen n it always starts ok the 2nd time round....v frustrating !!

-text size settings for IE change quite alot...so i go onto IE n see my text 5 miles high n wide lolz....gets a bit tedious havin to change it bak all da time lol..... also i have my homepage set on blank but have noticed it keeps making itself MSN ....not sure wetha this was the default one?

-i dont think this is a problem in itself...i dunno ? but if stuff isnt openin like incredimail (altho its not always the case.... sumtimes the following isnt apparent wen i cant get summat to work)...then i look at my tasklist.... and bout 50% of the time Norton seems to be doin sum kind of update.... but it will always say 'ccapp not responding' and 'lucomserver' is also there too......now if i end the lucomserver task my whole comp leaps into action like a dream....n then norton alerts me to allow lucomserver its rights agen n i do....n everythin is ok
i googled ccapp/lucomserver this morn and there was a link to a symantec page sayin the w32 opasa worm sumtimes uses those names....even tho they r genuine Norton tasks too...so i downloaded the worm removal prog...ran it in safe mode...but lo n behold no worm was present...i almost wish there had have bin

so it feels like memory problem but it musnt b.... n i have just about got used to all the crap my comp is throwing at me...but at first i was convinced there was summat sinister goin on...but ive chekkt it n scanned it for everythin i can fink of n it always comes up clear

ta Lilpink x

by **teststrips** » Fri Jun 04, 2004 12:42 pm

weird stuff like that could mean virus or spyware. Did you double check your system for viruses with something like housecall antivirus (the web based virus scanner)

I'm betting you did spybot/adaware, but they sometimes miss stuff... try posting your HiJackThis log

by **lilpinkflower** » Fri Jun 04, 2004 12:52 pm

will try the housecall thing n post my log..... i'm 99% certain nuthin will be found tho...spyware/virus wise.....although i wish it wud

i'm a bit of a spyware/virus obsessive lol....hehe

btw sins i rebooted out of safe mode b4 my comp has run like a dream...then next time i reboot twill be bobbins...wich is english 4 crap hehe

ta sweet

will report bak

Lilpink x

by **Gecko** » Fri Jun 04, 2004 2:47 pm

by **Restek** » Fri Jun 04, 2004 3:32 pm

Some of the symptoms you describe could also be explained if the control key is getting 'stuck' down. This could be physically (take the key off & make sure there isn't any gunk down there) or due to a driver problem. Are there specific drivers for your keyboard?

by **lilpinkflower** » Fri Jun 04, 2004 5:23 pm

thanks Gecko....ive seen that particular link b4.... but ta....daft thing is i have got firewall and anti-virus combined from Norton so hopefully they r gonna work well together....well i shud hope so !! i'll still keep it in mind tho...ta

thanks teststrips.......I HAD A TROJAN !!!!! i know u shudnt be happy to find one but i was v v happy to see it.....it remains to be seen whether it is the cause of my problems but i hope so
it was Trojan Briss A....and i did a bit of research on it and it fones home n stuff so i rekkon it cud have sapped my resources....anyway tis deleted now with the help of Housecall..... dont kno why Norton didnt find it tho

it took me 2 n a half hours to zap it....cos im ill today....n me concentration isnt wot it shud b...and i clikkt off the scan report without deletin it !! so it was just over an hour for the first scan... then i had to scan AGAIN to delete it.....cos i couldnt find the trojan on my own in the place they sed it was....doh!

thanks to restek.....hahahahaha.... u wont believe ow much ur comment will make my friends laff lol
my keyboard is held together wid gunk most of the time....i may av a spring clean sumtime soon...wen im feelin better....the keyboard came with software but i think ive disabled its extra functions by knokkin it off my startup n ive still got the same problems....but its bin fine sins the trojan removal so im crossin me fingers !!

thanks everyone....i ope it was the trojan....i'll be bak if it wasnt !!!

Lilpink x

nearly forgot !! i fink my log file is clean...if anyone wants to chek...feel free

hehe

Logfile of HijackThis v1.97.7
Scan saved at 17:08:16, on 04/06/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\MESSENGER PLUS! 2\MSGPLUS.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPROXY.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\ptsnoop.exe
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\E_S10IC2.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\EPROMPTER\EPROMPTER.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\NORTON ANTIVIRUS\OPSCAN.EXE
C:\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Lilpinkflower

P
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [PTSNOOP] ptsnoop.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccProxy] C:\PROGRA~1\COMMON~1\SYMANT~1\CCPROXY.EXE
O4 - HKLM\..\RunServices: [SndSrvc] C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSRVC.EXE
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM\E_SRCV02.EXE
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O9 - Extra button: Real.com (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: ICQ 4.0 (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shoc ... tor/sw.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/sh ... wflash.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://www.webcamnow.com/broadcast/ActiveXWebCam.cab
O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetupml.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 3912847222
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: LiveWorld EZTalk 3.0 - http://bizchat.liveworld.com/java/ezmed/ezmed.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200 ... taller.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... Client.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... owdown.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/c ... potc_x.cab
O16 - DPF: {9F637568-E5F7-4CB2-BD01-818CF6C561F9} (PhotosCtrlUK Class) - http://uk.f1.pg.photos.yahoo.com/ocx/uk ... r1_9uk.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/se ... loader.cab
O16 - DPF: {B160422D-0A48-11D4-BD9B-00A0C9B0AB7B} (Download Class) - http://expressit.broderbund.com/plugin/Download.cab
O16 - DPF: {20AD521D-3A3E-11D4-BC32-0050040D952B} (SwIcdInstall Class) - http://www.picturebuzz.com/common/programs/swicdad.cab
O16 - DPF: {4DB79B88-84B2-11D3-81B4-525400E7AB54} (Axe Control) - http://www.picturebuzz.com/picturebuzz/ ... se/axe.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsup ... veData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsup ... mAData.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/7b77 ... scan53.cab

by **brad** » Fri Jun 04, 2004 9:36 pm

Wow. a clean Log File. Congrats!

brad

by **lilpinkflower** » Fri Jun 04, 2004 10:28 pm

i could make a dirty one jus for u

hahahahahaahha

mind u ....not sure me comps fixed...keepin eye on it

*sighs*

Lilpink x

PCTech Forums

memory problem?

memory problem?

Who is online