Suspishio 32 Posting Virtuoso Team Colleague

....@suspicio - "Memory usage comparisons show static positions - not "performance drainage". As I said in my earlier post, idle stuff gets heaved out if there is insufficient physical RAM to hold everything in RAM, leaving the target application to run at normal performance."

Now this is where you have me a little confused. You refer to "static positions" & "idle". The stats I gave were in reference to Memory Usage, tallied in total by the Task Manager in the "Physical Memory" usage. Also, in relation to some of the heaviest hitters - media players, Firefox esp. - their memory usage is nothing further from static or idle. Now firstly, my understanding is that only "idle" processes will be heaved out of RAM, meaning if apps are chewing up the RAM, and are active not idle, then they won't be "heaved out" at all (without risk of crashing an app)... and there are only so many idle processes Windows can heave out to accommodate them. Secondly, if a x86 app is showing far more memory usage (both "working set" and "private working set") than a x64 equivalent, how does this not relate to usage of Physical Memory (or RAM)?? If system memory is being chewed up, does this not class as "resource drainage" as memory is part (not all, I know) of the core system resources?

I do come to computers primarily through a graphic/digital arts back-ground, so if this is one of those "black holes", do feel …

Suspishio 32 Posting Virtuoso Team Colleague

Possibly from the Recycle folder.

Suspishio 32 Posting Virtuoso Team Colleague

It'll teach you not to download anything that's got anything to do with Torrent. Hacked software often punishes pirateers because it has itself been tojaned.

Serves you right - to labour the point.

TheBeast32 commented: lol nice :P +2
Suspishio 32 Posting Virtuoso Team Colleague

ok last thing of help for me man OK these are my temperature right now

gpu-44c
-cpu-38c
local-39c
hdo-38c
core-44c what is these temperature in f
AmBIENT-0c

What are all these temperature in f?
could you find me that info my friend and thanks

These temperatures are perfect.

flaco commented: thank you man +3
Suspishio 32 Posting Virtuoso Team Colleague

The on-board graphics will be automatically disabled when you install the 9800.

sleepygamer commented: Great help! +3
Suspishio 32 Posting Virtuoso Team Colleague

Well done. The cleaning is on old trick I learned on the PS2.

Anyway, you only took two cards out. So put the Video card in first and get the worst over with. What should happen is that it will detect the card and ask for drivers. If Windows doesn't find them and you don't have them, get them from the web- but you need to know the exact make and model of your video card.

Re-boot and run the PC without the modem card doing stuff with the display settings you would normally have.

I expect this to work because something happened to take your system out of a state of grace when it was previously stable. The re-install would have done the trick, fortunately.

Huh - a dirty XP disk!

thaner12000 commented: couldn't have done it without him +1
Suspishio 32 Posting Virtuoso Team Colleague

The classic symptoms of a fried mobo are:
1 PC dies in mid-operation
2 When powering up, fans and disks whirr
3 No beeps if RAM taken out

I should have read your first post more carefully. You got BIOS beeps when you took the RAM out. So BIOS is doing its stuff or some of it at least. So:

a. With everything in, do the disks whirr? Any disk lights?
b. On boot attempt, do the keyboard lights flash

If there was a power glitch that didn't fry your mobo, then you could have been in the middle of a disk operation and the MBR got zapped.

It's a difficult diagnosis over the web!

ide commented: thanks +3
Suspishio 32 Posting Virtuoso Team Colleague

I think you could do with cleaning your registry out to deal with those "file missing" cases.

I would also remove BitCometHO.dll from your system and registry as this snoops on you.

XAUDIO.EXE - well I would suppress it. Better gurus than me would know whether there is something in there that kicks in to terminate a session - I rather think not, though you could look at your Internet settings in Tools - but you've already done all that I'm sure.

I couldn't see anything in the HJT that isn't covered above and, of course, we all lose the internet from time to time when the ISP glitches.

tuse commented: ty for your repy, cool nick! +2
Suspishio 32 Posting Virtuoso Team Colleague

Did your PST file reach the 2GB limit? If it did, SCANPST.EXE might save what it can, but some will be lost. Read up on SCANPST carefully as it sometimes doesn't produce the expected result (not so in my case, I'm happy to say).

Outlook 2007 lets you set up a 20GB PST space, btw. I hoe that 2GB issue is what happened to you because it's well understood.

In the meantime, can you not get e-mails via some form of web-mail? Like with MSN & Hotmail?

Blog Dog commented: very helpful +1
Suspishio 32 Posting Virtuoso Team Colleague

I suggest that you trawl through this lot
http://www.eventid.net/display.asp?eventid=51&eventno=793&source=Disk&phase=1

In the above link it'll tell you about Event ID 51; you can then look up the others and put together a set of reasons that fit your combination.

I presume all the jumpers on the new disk are correctly set with regard to prefetch and buffering or whatever BIOS options you may be offered. There may also be a Windows drivers issue if you've changed drives.

gaurav_indian commented: thanks - gaurav_indian +1
Suspishio 32 Posting Virtuoso Team Colleague

The problem is still happening though; when I click on a thread I noticed that the CPU goes up to 100% and apparently that is why I can't scroll anything because the CPU is busy. It stays at around 100% for several seconds while loading something; that's why I suspect the ads; the threads shouldn't use all that CPU to load should they? Anyway, I don't think this should be normal but I wonder if adding more memory would help?

Clicking on the process shouldn't excite the CPU at all other than the Windows process servicing the act you have just performed.
Sure more RAM will help - but you need so much more than it is economical to buy unless you can get it cheap somewhere. And always suspect nything of this type offered on Ebay.

Suspishio 32 Posting Virtuoso Team Colleague

I'm so pleased you fixed it. So many people fail to see the importance of matching the date/time of the first event with unsigned DLLs, EXEs or SYS or INF files in the System32 folder.

You did and you got the problem solved. Great.

explodinghead75 commented: good malware troubleshooting advice +2
Suspishio 32 Posting Virtuoso Team Colleague

Presumably you've checked that the read only property is unser.

You could try deleting it from the CMD windows, putting double quotes around the path name if it contains spaces.

Otherwise there are file unlock programs available - google that.

kylethedarkn commented: Answer was quick and effective. Thanks +3
Suspishio 32 Posting Virtuoso Team Colleague

....

BTW my BIOS is very limited, i can choose boot devices, set time and date, and enable/disable USB legacy and the on-board NIC. That's all of the options this COMPAQ bios has choices for.... what a POS!

Best of luck.

I'm really surprised that the COmpaq BIOS doesn't enable you to disable power management (whether or not it's called ACPI by Compaq I don't know).

bigozone commented: thanks for your time and advice... +1
Suspishio 32 Posting Virtuoso Team Colleague

If it's gone too far te=hen you'd be wise to remake your system.

My own method is to put the hard drive onto another PC as a USB slave and sus it all out there. That way the trojan can't spread, nor persist.

ANyway - cut your losses if you can.

robga commented: great help :) +1
Suspishio 32 Posting Virtuoso Team Colleague

Well, we don't know what you mean by a blinking screen. Screens don't blink. Cursors blink.

So a fuller description of what's happening is necessary. Including the URL concerned.

otherwise how can we help you?

DarkRubicant commented: Smart and concise wording of the needs of the forum. +1
Suspishio 32 Posting Virtuoso Team Colleague

You can buy a voltage transformer that steps you up from 110v 60Hz to 230v 50Hz. When you plug in 110v I don't think anything'll happen or go phut - but that's a reasonable guess. You could simply replace the PSU with the same output wattage and form factoe local brand. Perhaps 30 minutes work but with care.

On Windows install, just buy a US/Canada keyboard and set your region and language settings in the currently installed Windows.

The two LCD screens I have use a DC transformer which has a 100-v-240v/50-60Hz range. If that's the same with yours, just stick a Canadian plug on the end and cut off the European end; or plug a mains adapter into your plug and pplug the screen in directly. Do check that you have this transformer as part of the mains chain or else it'll go flash.

None of this is a big deal and you're nearly ready to go once you've dealt with the computer's PSU.

Omni commented: quick and insightful +4
Suspishio 32 Posting Virtuoso Team Colleague

Thanks for your cognisance! Much appreciated and kind of you to bother.

You say you're back on line, I presume because the ISP gave you a public IP address and/or DNS servers details to use in your TCP/IP settings.

You can't get to the Belkin page, I suspect, because of your static IP address link to your ISP.

I don't know about this port forwarding you mention; it can't be done on your computer so far as I know, but the computer can be used when connected as admin to the Belkin router to set up Port forwarding so that people on the router could be preventing from going out on a particular port to the Internet.

Now the strange thing is that your hard reset on the router was the start of your problem. That means the stuff I have written in the following paragraphs probably isn't now set up in the router but was or might have been. So it's what they've done to your PC that is the likely problem. It might be as simple as resetting your TCP/IP settings to Obtain IP address automatically now that the router is in default state. I would then run the IPCONFIG stuff I mentioned earlier, but finishing with IPCONFIG /flushdns.

If the foregoing doesn't work, digging into the router is warranted, although if other PCs can use the router normally, then the problem is definitely with your PC.

You could get onto the …

Suspishio 32 Posting Virtuoso Team Colleague

If you can't get onto the internet, you have a problem unless you have a second PC and a portable drive to download remedial stuff.

The Anti-Spyware forum here will take you through what to do and it's long winded.

You might also consider my manual method which is described in a post in the spyware forum dated 24-Aug-2007. This also needs a secoind PC for you to operated on the screwed up system disk.

Good luck.

Danarchy commented: Timely reply with good info. +4
Suspishio 32 Posting Virtuoso Team Colleague

You can keep fingers crossed and hope that user Administrator (in SAFE Mode) has no password.

Otherwise perhaps try (at your own risk)http://www.loginrecovery.com/