I Need Help :-)

Discussion in 'Malware Help (A Specialist Will Reply)' started by juliemackenzie, Mar 6, 2005.

  1. juliemackenzie

    juliemackenzie Private E-2

    Hello-

    I have a problem with my computer, it crashes anytime I try to run a virus scan on it and now when I run Spybot S&D and also when I try to defrag or anything else like that.

    I think I have a virus, I have reinstalled McAfee but it is acting weird as well.

    Can someone steer me in the right direction. I do have hijack this if someone whats to look at that.

    I appreciate any help anyone could help me with.

    I have a P4, 512 ram, sp2 xp, any other info you need let me know.

    Julie
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Hi Julie,

    Welcome to MGs!
    See how much of the below you can complete. I prefer you try to do as much of the up front scans as possible. If you cannot do them, just jump down to the HijackThis log section and post your log. Make sure you tell me which scans you were able to do.

    To help us to best help you, please follow the steps below closely and in the order given and do not skip anything. If you have any difficulty, please post back letting us know what steps you have completed, what you found while doing the scans if anything along with details about any problems you may have encountered in completing the steps. The more details you can provide the better. Don't be afraid to ask for additional help if you don't understand something!

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download
    HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following: your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message.(Do NOT copy/paste the log into your post).
     
  3. RayDunne

    RayDunne Corporal

    Just a note, I had issues like that and turned out to be a bad memory stick! I dont want to step on any toes so just bear with me, but if you have trouble doing the routine here, check memory.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That can be an issue too! If you want to test memory, check this out: http://www.majorgeeks.com/downloads26.html

    Lot's of memory testing apps there!
     
  5. juliemackenzie

    juliemackenzie Private E-2

    ok-I downloaded all of the software and every single step I took, my computer crashed, it didnt work in safe mode or regularmode.

    I could not do any online scans or my mcafee virus scan, crashed during stinger, crashed on all spyware scans - this has been hapening intermittently I have adawarem s&d and pest patrol that usually run fine, without finding much more than tracking cookies. Crashed during crap cleaner and cw shredder.

    I also downloaded one memory test, Memtest and it crashed as well, I guess I will do hijack this next.

    Any other thoughts?

    Julie
     
  6. juliemackenzie

    juliemackenzie Private E-2

    ok-

    here is the hijack this log. Any help would be much appreciated.

    Julie
     

    Attached Files:

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You must remember to exit all browsers before using HijackThis. You had IE running:
    C:\Program Files\Internet Explorer\iexplore.exe

    The below line can be fixed using HijackThis but it is not the cause of your problems.
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    Do you know what the below line is for? Do you have any antitrojan software like ATS or PC Doorguard installed?
    O4 - HKCU\..\Run: [supervisor.exe] C:\WINDOWS\supervisor.exe



    Other than that, you log is clean. The only other comment I would make is that there is a heck of a lot of stuff being loaded at run time. You may have a hardware problem or another incompatibility. The only other thing I would suggest trying is to:
    - disconnect from the internet (unplug your cable)
    - exit all programs & close every item in your system tray
    - run Task Manage and kill all processes that are not necessary to keeping Windows running. This includes all you AV stuff and laptop stuff. Basically all of the below:

    C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
    C:\WINDOWS\System32\DVDRAMSV.exe
    c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
    C:\WINDOWS\System32\Tablet.exe
    C:\Program Files\EzButton\CplBTQ00.EXE
    C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
    C:\Program Files\ltmoh\Ltmoh.exe
    C:\Program Files\Toshiba Controls\CpRmtKey.EXE
    C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
    C:\WINDOWS\System32\ezSP_Px.exe
    C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
    C:\toshiba\ivp\ism\pinger.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
    C:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
    c:\progra~1\mcafee.com\vso\mcvsescn.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Hewlett-Packard\HP Mobile Printing\HPBMOBIL.EXE
    C:\Program Files\Adobe\Acrobat 4.0\Distillr\AcroTray.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\RAMASST.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
    C:\WINDOWS\system32\Wtablet\TabUserW.exe
    c:\progra~1\mcafee.com\vso\mcvsftsn.exe
    c:\PROGRA~1\mcafee.com\vso\mcshield.exe

    - Now see if you can run any of the items that were failing to run (including the memory test).
     
  8. juliemackenzie

    juliemackenzie Private E-2

    I did what I could and the computer still crashed. I didnt know what supervisor was, so I got rid of it.

    I do have something that looks weird to me, look at this file attach, it is a print scteen of explorer. It shows I hace 4 different administators. I dont know how this would happen. It may be nothing, but I dont know.

    Thanks, Julie
     

    Attached Files:

  9. romyrob

    romyrob Private E-2


    Edit by chaslang: Please do not post links to sources outside of MGs when the applications you are talking about are downloadable here. RAM Boost and RAM Boost Pro
    Well, one way and the easiest way to check your memory is to go to "external ref deleted" or "external ref deleted" and search for (RAMBooster) This assists when you are running many progrmas in windows and when you reach a certain amount or critical amount of memory, instead of your computer shutting down or doing a memeory dump, this RAMbooster will refresh your meomory. Try it out. It may save you money in the long run
     
    Last edited by a moderator: Mar 14, 2005
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I seriously doubt that thes are going to help! First she cannot run anything and RAM Boost is not a memory tester. Unless the problem Julie is having is related to insufficient memory being available (and I doubt that since I had her shut down all applications) trying to use this application will serve no purpose.
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Any user account can be an administrator! If you did not create the other Administrator accounts and you do not need them, delete them. But they are not the source of your problem.

    How much memory do you have in your PC? If you have multiple memory chips, you could try taking one out and see what happens. Try to locate a possible bad memory part by switching between them.

    This really sounds like a hardware issue not a Spyware/malware issue.
     
  12. juliemackenzie

    juliemackenzie Private E-2

    Thanks, 512 ram, I have a laptop. I wil probably send it to Toshiba and see what they can do, I have perhaps gone past my trouble shooting potential.

    Thanks alot.

    Julie
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! Let us know the results when you get it fixed. Pop back into this thread and leave a message.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds