Computer Locks Up and Error Messages

Geri,
I did go to Jotti's malware scan and followed your instructions.

The results were from all the vendors that "they found nothing. "

But when I scrolled the page and looked at the Statistics, I saw this:
Scanner: Bit Defender Trojan Generic 26098

All the rest had an X in the Malware name.

I wasn't sure if I needed to do the rest of your instructions so I will wait until you reply to this.

Thank you.

Jean

P. S. Just for your information, I uninstalled AVG Anti Virus because the first time I tried to access the Scan site my computer hung up. It was also doing a scan of my computer from AVG and I decided I would see if the AVG Virus Checker was too powerful for Windows 98. Right now I have no Virus Checker on the computer but will try to find a free Windows 98 Anti Virus Checker.

 

Hi Jean
Do you still have the log from Jotti's?
If so please post it, or run the scan again and post the results.

OK, That is not good.
Go here and download Avast
http://www.windowsbbs.com/showthread.php?t=67958

It's down the page a little ways.

Let me know if this helps stop your computer from hanging...After you uninstalled AVG has your computer had the problem?

Geri

 

Geri,

No I do not have a log file from Jotti's. I tried to run the scan again and find a way to save it but nowhere on the page is a spot to save the log file. Am I missing something?

I have downloaded Avast Virus Checker and will now see how this works.

Where do I get a log from Jotti's?

Thanks.

Jean

P.S. Computer still is hanging up sometimes.

 

Geri,

I ran another HiJack This and it is as follows. I also installed Avast and ran the scanner and it found no viruses.

Computer still hangs up now mostly at startup. I have to restart it a couple of times.

I still have that file in C:Windows/System/m1rmmon.exe. I didn't delete it. Should I?

Thank you.

Jean

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:58:15 PM, on 11/28/07
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\WINDOWS\GWHOTKEY.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\TREND MICRO\HIJACKTHIS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_14\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [ICSDCLT] C:\WINDOWS\rundll32.exe C:\WINDOWS\SYSTEM\icsdclt.dll,ICSClient
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [GRA] C:\Program Files\Gateway\gra\GRA.exe
O4 - HKLM\..\Run: [Multi-function Keyboard] GWHotKey.exe
O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_14\BIN\SSV.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRAM FILES\JAVA\JRE1.5.0_14\BIN\SSV.DLL
O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gateway.com/support/serialharvest/gwCID.CAB
O16 - DPF: Win32 Classes - file://C:\WINDOWS\Java\classes\win32ie4.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - https://support.gateway.com/support/profiler//PCPitStop.CAB

--
End of file - 3322 bytes

 

Hi Jean
Sorry, I was asking for the Jotti log, not a HJT log.

Have you modify the default Control Panel -> Power Options settings? or are the power options set to the default settings?

Markp62 said this.

I do also recommend disabling these two items with Msconfig.
Taskmon
SSDPSRV (This is Universal PlugnPlay for 98)
I would follow his advice, He knows windows 98 machines.

Geri

 

I recommended removing Taskmon.Exe from startup as it really isn't necessary for 98. It monitors every executable that is run, and creates logfiles in C:\Windows\Applog, slightly slowing the system while it does this. This is for when you Defrag the drive, files are rearranged for the purpose of starting them faster, all in all it saves you about .25 to .4 of a second or less, not noticeable with the faster machines. It also increases the time to Defrag the drive, as files are shuffled around according to the info in the logfiles. After you disable from startup, delete all files in the C:\Windows\Applog folder, and you'll notice a faster Defrag time.

This SSDPSRV usually appears after someone has run the Network Setup utility [Netsetup.Exe] from an XP or ME system copied onto a floppy, it is not part of the Win98 system. It is Universal Plug&Play (not to be confused with Plug&Play) and can bog down the system while it is constantly trying to network with anything it finds. If it doesn't find anything, it keeps looking. After you disable it from startup these two files will not be running.
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
If you were to right click on these two files, and select Properties, you will find that they are actually from Win ME.

 

Whew! I think I'm about ready to put this computer in the junk pile. The more I do with it, the worse it is getting. It is now hanging up on Startup and Shutdown. Nothing is consistent though, sometimes it starts and shuts down and other times it hangs up.

I have disabled Taskmon and SSDPSRV. There were no files in C: Windows: Applog.

I really feel this computer needs to be reformated and start over. I don't really have anything left on the computer worth saving. Also, do you think I can load Windows XP on this computer. It has 384 mb of RAM. Will it be too slow?

Also, now I get an error message that it can't open Outlook Express, it says:
"Outlook Express could not be started because MSOE.DLL could not be loaded.

Thanks for the help.

Jean

 

Hi Jean
Wow, sorry to hear things just keep getting worse
I am out of ideas myself.

Going to windows xp would really be the way to go.
Here is what Microsoft says is needed,
http://support.microsoft.com/kb/314865

XP likes RAM, so the more the better, I would add as much as your system limit lets you.

If you need help, the people on the windows 98 form would be willing to help you with it I'm sure.

Good luck
Geri

 

Geri,
Thank you for all your help. I'm exhausted with this machine. I might just get rid of it. Although it was interesting today because when I started the computer Avast warned me that I had a virus: speedy.bat. I couldn't believe that it was back again. These were the error messages that came up when Windows was booting up.
1st - "speedy.bat - Cannot find the file 'speedy.bat' (or one of its comonents). Make sure the path and filename are correct and that all required libraries are available. "
2nd - "esktop" - Could not load or run 'speedy.bat' specified in the WIN.INI file. Make sure the file exists on your computer or remove the reference to it in the WIN.INI FILE.

I couldn't believe what I saw because I thought we took care of this awhile back. Well I did some research on the internet and I read that if you have more computers on the network, you should stop all sharing before you get rid of this. (I forgot what site I was on now). In any case we have two XP computers and two Windows 98 computers. I proceeded to stop the sharing on all the computer and try to return to the previous help to see what to do next. In any case, that site also said that this problem doesn't affect XP computers.

Well, now since I have stopped the sharing on all the computers, I have a problem with one of my XP computers. That is another problem that I will deal with later. It is just affecting my Office program and Mozilla Thunderbird. I'll worry about that later.

IN any case, I'm sick of working on this problem so I'll drop it for awhile.

I can't tell you how much I appreciate all your and the other people's help.

Jean

 

Jean:

I hate to see you giving up but sometimes, knowing when enough is enough, is a true sign of wisdom. Since it appears that you still have a problem with your "speedy.bat ", I'd certainly try fixing this before throwing in the towel however.

You referenced the possibility of installing XP and the fact that you have 384MB of installed memory but the real threshold to consider is your processor speed. If you have anything less than a 500MHz system, don't even think about it - yes it can be done but its so slow that you'll wish you hadn't. 850-900MHz is a more realistic threshold that won't bore you to death while waiting for things to load.

Factoring in a $139 price for an OEM copy of XP, one would be smarter to buy a newer refurbished machine in the $225 range complete with an OS. Donate your problem child to Goodwill, take the tax write-off and don't think twice about looking back over your shoulder. Or .......... wipe the HDD and load Ubuntu - you'll have a nice functional toy to play with and you will be surprised how much life is still left in that computer.

Good Luck.

 

Hi Everyone,

Sorry I haven't written for awhile but my big Windows XP computer got corrupted somehow and after working with it for awhile and getting nowhere, with the help of Gateway I reformatted and reinstalled Windows XP. It is working great again although I'm still not finished re-installing all my software.

Well, now I will go back to my old Gateway computer that was the one in trouble originally.

I guess I won't try to install XP on this computer as I ran Belarc Advisor and this is the information they gave me:
Windows 98 (build 4.10.1998)
400 megahertz Intel Pentium II
32 kilobyte primary memory cache
512 kilobyte secondary memory cache
10.25 Gigabytes Usable Hard Drive Capacity
384 Megabytes Installed Memory

I guess the processor isn't fast enough as you said anything less than a 500MHz would be too slow.

Thank you for all your help. I will just donate this computer and start looking for a new Vista replacement. I think I will also get a laptop.

Jean

 

Hi Jean

That sounds like the best way to go. You will be much happier in the long run.

Geri