1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Several problems with my laptop running ME

Discussion in 'Security and Privacy' started by Mustangnut, 2004/07/17.

Thread Status:
Not open for further replies.
  1. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    Well, I have several issues that I am contending with, but the one that is causing the most problems I will explain first. (Scratches head and wonders where to even start...)

    Ok, if I leave my laptop idle, after about 20 minutes the fan will turn on as if the cpu is under a heavy compute load. However, no matter what I check, I can not find what extra is running to make the fan kick on. (I use AnitVir Guard for AntiVirus and have scanned with HouseCall, hard drive is clean. I also use Ad-Aware 6.0 to clean up spyware etc. and run it periodically to keep this clean, oh I also use RAM Idle as well) I frequent a java based online game, and once the computer has set like this, the java progam will not run, I have to reboot the computer for it to run.

    Actions taken: I thought that the screen saver might be corrupted so, I turned it off to see if that was the case (I use to leave the laptop on for long periods of time, and let the screenscaver and power management settings take care of things, but would periodically get error messages from the screensaver). That did not solve the problem.

    I also moved the power management setting way out to like an hour to see if that was the case... again that did not correct the problem either.

    When booting up there is an option to hit F10 for system diagnostic, which I hit, and an message came back that there was a bad stick of RAM. I thought "That must be the problem ", I had upgraded from 125 to 256 about 18 months ago and the new memory stick went bad. I bought a new stick, put it in, ran the diagnostic, everything was fine - no error messages. But, after about 20 minutes, the fan kicked on and sure enough, I tried going to the site to test... so the stick of memory was not the problem either.

    I recently purchased a program called Registry Mechanic to do some deep registry scans/repairs. The first pass there was over 100 errors that needed to be repaired, which it did. Still didn't fix the problem.

    I went into Msconfig, and turned off a few unnecessary programs in the startup section, but I pretty much stayed away from everything else.

    I have tried to use the restore points on with ME to no avail... I was about to spend a day, and copy all the needed files on my laptop to my desktop and then reformat the hard drive, but a friend suggested coming here first.

    This is the main problem, I will address all the IE crashes, and inability to do updates on a later thread, this is my main concern now.

    Any and all help will be greatly appreciated.
     
    Last edited: 2004/07/17
  2. 2004/07/17
    OGLETHORPE

    OGLETHORPE Inactive

    Joined:
    2004/07/17
    Messages:
    1
    Likes Received:
    0
    problems with "me "

    your os (ME) is the worst made by microsoft
    clean install xp pro and most problems will be solved
     
    Last edited: 2004/07/17

  3. to hide this advert.

  4. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    That does not help but thanks anyway... I knew someone would say that...

    I have a 10 gig hard drive that at 50% capacity, and that is with me triming it down to bare bones...

    I run XP on my desktop, I will keep ME on my laptop...

    I was hoping for a warmer welcome than this...

    Edit: Ah, but I see that you chose to make your first post answering my first post... I wish you wouldn't have...

    Also, I don't think you read the "Posting Rules on WindosBBS.com "

    Rule 9. Irrelevant and/or Inflammatory Postings - While we certainly don't discourage productive and useful debate relating to a particular topic at issue, posts that are made in a nonproductive or inflammatory manner are not permitted.

    Because I must say, your post surely did not help me in the least...

    Again, I will add any and all help would be appreciated.
     
    Last edited: 2004/07/17
  5. 2004/07/17
    LDTate

    LDTate Inactive

    Joined:
    2004/06/29
    Messages:
    284
    Likes Received:
    0
    Some of the laptop's I've worked on have two fans. One is a CPU cooling fan that kicks on by itself located on the left side if you are looking from the back.
    If it is the cooling fan that's kicking on, I've never heard of this making you reboot. Have you checked the manufactor's web site? Just a thought.
     
  6. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    Yes, I tried using their FAQ, to no avail. I don't think the problem is the fan. The fan running is an indication that the CPU is under a heavy compute burden because when I am at the Java website (see first post - the fan kicks on because of the compute cycles needed to run the game). This is also the case when I run Ad-aware, the fan will kick on because of the burden on the CPU, but will turn off as soon as the program is finished.

    I know this, because when the fan is running, and I go to the Java site, and add more burden to the CPU, the game will not load at all... and some of the graphics slow to a crawl, so I know that there is something causing the CPU to work extra hard. (the fan is a symptom of a real problem).

    So, when, the laptop is idle, after a certain period of time, something starts running in the background that eats up compute cycles that is not a virus... and I can only get to stop by rebooting the computer.

    Hope this clarifies further.
     
  7. 2004/07/17
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Welcome to WindowsBBS :)

    Quite a job on a laptop, but you might consider a cleaning of the insides. Dust may be gathering and causing some extra heat buildup. With the mention of IE crashes and update problems, I would also not rule out spyware/virus yet. Not everything is detected and removed. New stuff coming along all the time too. Try a RAV scan, and post a HijackThis log so we can see if there is something else present.
     
  8. 2004/07/17
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hello Mustangnut and welcome,

    Have you done the ctrl - alt - del to see what is running after the "20 minute" period? Anything not recognized? Unfortunately 9X OSes don't have XP's diagnostic capability in that regard. I have a number of ways to tell me what's running in detail but they are all Shareware apps.



    To give you moral support when presented with gratuitus comments such as the one above: http://www.windowsbbs.com/showthread.php?t=32038 Posts #6 & 7

    Regards - Charles
     
  9. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    Ok, I ran RAV... found a trojan, and deleted it... but it had a recent date, so I doubt that would be the cause...

    Below is the log from HijackThis

    Logfile of HijackThis v1.97.7
    Scan saved at 2:19:46 PM, on 7/17/2004
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v5.50 (5.50.4134.0100)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\SSDPSRV.EXE
    C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
    C:\PROGRAM FILES\RAM IDLE\RAMIDLE.EXE
    C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE
    C:\WINDOWS\SYSTEM\HPZTSB04.EXE
    C:\PROGRAM FILES\AVPERSONAL\AVGCTRL.EXE
    C:\HP\DRIVERS\AUDIO\ESSD.EXE
    C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\DESKTOP\DOWNLOADS\STUFF\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.runevillage.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [RAM Idle] C:\Program Files\RAM Idle\RAMIdle.exe
    O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE "
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb04.exe
    O4 - HKLM\..\Run: [AVGCtrl] "C:\PROGRA~1\AVPERS~1\AVGCTRL.EXE" /min
    O4 - HKLM\..\Run: [ESS Daemon] C:\HP\DRIVERS\AUDIO\ESSD.EXE
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
    O4 - HKLM\..\Run: [winupd] C:\WINDOWS\SYSTEM\winupd.exe
    O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE10\EXCEL.EXE/3000
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E9F4DF12-E82E-4177-8B82-ED7355ED4362} (DownloadX Control) - http://j.cdrdev.com/wkrc/downloadX.ocx
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
     
  10. 2004/07/17
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Was this the one found and deleted?
    O4 - HKLM\..\Run: [winupd] C:\WINDOWS\SYSTEM\winupd.exe
    More info here. Remove all associated files and registry entries. Fix the above with HJT. Close ALL other windows first.
    http://uk.trendmicro-europe.com/ent..._detail.php?id=58106&VName=PE_BAGLE.N&VSect=T

    Fix these too.
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime <<< not needed at startup.
    O16 - DPF: {E9F4DF12-E82E-4177-8B82-ED7355ED4362} (DownloadX Control) - http://j.cdrdev.com/wkrc/downloadX.ocx <<< unknown ActiveX control
     
  11. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0

    Yes it was.

    Here is the new HJT log after suggested corrections. I am also going to leave my laptop set for a while to see if anything happens to it.

    Log:

    Logfile of HijackThis v1.97.7
    Scan saved at 3:42:14 PM, on 7/17/2004
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v5.50 (5.50.4134.0100)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\SSDPSRV.EXE
    C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPLPR.EXE
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
    C:\PROGRAM FILES\RAM IDLE\RAMIDLE.EXE
    C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE
    C:\WINDOWS\SYSTEM\HPZTSB04.EXE
    C:\PROGRAM FILES\AVPERSONAL\AVGCTRL.EXE
    C:\HP\DRIVERS\AUDIO\ESSD.EXE
    C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\WINDOWS\DESKTOP\DOWNLOADS\STUFF\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.runevillage.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [RAM Idle] C:\Program Files\RAM Idle\RAMIdle.exe
    O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\DPPS2.EXE "
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\SYSTEM\hpztsb04.exe
    O4 - HKLM\..\Run: [AVGCtrl] "C:\PROGRA~1\AVPERS~1\AVGCTRL.EXE" /min
    O4 - HKLM\..\Run: [ESS Daemon] C:\HP\DRIVERS\AUDIO\ESSD.EXE
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "
    O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE10\EXCEL.EXE/3000
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab


    Edit: Nope that has not solved anything so far... As I set here typing, the fan is running... having set about 10 - 15 minutes idle, the fan has kicked on, RAM idle went from 120 megs, down to 80 megs...

    What do you suggest next?

    Also, I thought that I would post a pic of what programs where running when I hit Ctrl+Alt+Del, click link below, there is a screen shot.
    [​IMG]
     
    Last edited: 2004/07/17
  12. 2004/07/17
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    I would first clean it out (dust). Open up and shoot it with compressed air. If no change, uncheck Ramidle, dpps2, essd, taskmon, mstask, stimon and hpztsb04 in msconfig and reboot, then check again. Next step would be Zone Alarm. There have been some recent issues with it. What seems to be the problem with windows Update? Fixing that and getting updated could make alot of difference.

    Some info on RamIdle at the link below. Follow the link to the further reading on that page too.
    http://www.windowsstartup.com/wso/browse.php?l=18&start=75&end=100
     
  13. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    Ok, I followed your suggestion...

    Cleaned out my laptop with compressed air, and that did not help.

    Unchecked: Ramidle, dpps2, essd, taskmon, mstask, stimon and hpztsb04 in msconfig and rebooted... that did not work either.

    Then Unchecked ZoneAlarm too, and that did not work either.

    To answer your question about the problem with the update: When I scan for updates it says that I need Microsoft IE 6 Service Pack 1 and Windows Media Player Script Commands (KB828026)... Well, the Service pack says I have to do it seperately, so I do the Media player one first... Well looking at the history, I have successfully loaded the Media Player one 5 times... so what is up with that? And when I try do do the Service Pack, the history actually shows that I have successfully done it 8 times... and when I hit check for updates, it will say that I need those updates again... In reality I had an error message on my laptop said that the install was not successfull when I rebooted would I like to retry, which I said I would... blah blah blah...

    So, can you help with this too? Or would you like to contine to tackle the other problem?
     
  14. 2004/07/17
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Go to Windows Update and in the left pane click 'personalize windows update', then check the box to show catalog and save. Now click Windows Update Catalog in the left pane, then 'find updates for OS' and select your OS. Click search and locate IE6 SP1 and add it to your basket. Save it to the drive and try installing from there. If I remember right, you will need internet access when installing.
     
  15. 2004/07/17
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    Well, I did as you said, but I that SP1 is not in the list of choices to download... the updates are but the actual SP1 Q810847 is not there.

    Now what?
     
  16. 2004/07/18
    Mustangnut

    Mustangnut Inactive Thread Starter

    Joined:
    2004/07/15
    Messages:
    16
    Likes Received:
    0
    Sorry, edit button was not there, but I failed to mention that when I downloaded the other updates, it said that I needed to have the SP1 installed... But could not find it on the list to install it...
     
  17. 2004/07/20
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    I moved this as all threads with a HJT log now go into this section.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.