Posts by TallCool1

My friend sent me his Hp pavilion ZT1000 for me to fix...
1. laptop randomly crashes whenever it feels like it (1 sec- 3 hrs)
2. While it's crashed, the lcd still displays the last image, but no form of imput works.
3. Sometimes, it boots up to a blank screen, but everything works (can hear fan, hd, and even cd rom spin up, but blank screen)
4. When plugged into annother monitor, it behaves the same way as the lcd screen.

Have you tried a memory tester like MemTest86? It's on the newer Knoppix discs, or it can be downloaded either as a floppy-disk image or as an ISO bootable CD-ROM image.

i have a dell dimension 8300 with xp how would i overclock it. The processor is a pentium 4 ht 3ghz (and something about 2 cpu's it said in dxdiag but i do not have 2 processors).

The "two processors" sensing and the "ht" reference is because of hyperthreading. As far as I know, it's almost impossible to overclock a Dell--the motherboard and BIOS simply do not support it. Most Dells of this series use an Intel-manufactured motherboard, which is great for corporate IT applications but lousy for home users; as I'm sure you can imagine, Intel doesn't support overclocking as a matter of policy. It's one of many reasons why I don't recommend Dell computers or, for that matter, Pentium 4 processors.

Must I do this in safe mode?

It's certainly best to do it that way. Many newer malware programs of any type try to block removal--or reinstall themselves right away. Working in Safe Mode ensures that they are not running interference as you work on the problems. (EDIT) Just make sure to reboot and run HijackThis in normal mode after the repair to ensure all is fixed.

Also, turn off System Restore to clear the restore points, then turn it back on again. It has been corrupted and must be reinitialized.

I guess this is my log...what do I do?

You need the new version. You can update before you do the fixes...
Logfile of HijackThis v1.97.7

Aaack! You are waaay behind on your patches. These are the original, unpatched Windows versions--but let's clean up the mess, first.
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Not good... remove this later.
C:\WINDOWS\dzmrkz.dat

Here's the baddies. Everything from here out should be removed using the updated HijackThis in Safe Mode:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\sgvbh.dll/sp.html#29126
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {2762540F-4027-464D-8A3D-AD282EE653AB} - C:\WINDOWS\system32\ipcb.dll

This seems to be your main problem.
O4 - HKLM\..\Run: [Plug And Play] msnmsg.exe
O4 - HKLM\..\RunServices: [Plug And Play] msnmsg.exe
O4 - HKCU\..\Run: [Plug And Play] msnmsg.exe

O4 - HKLM\..\Run: [nthp32.exe] C:\WINDOWS\nthp32.exe
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchmiracle.com
O16 - DPF: {07637823-C894-4A52-B3F9-5D777FD8E36A} -

I am trying to install JAVA JRE so I can run a program. But when I try downloading it it says Installer cannot proceed with the current proxy settings.

Have you tried downloading the "offline" version instead? It's about 15MB, but I have found that it's a more reliable install. The new version (1.5.0) is available, too. Look for the Windows Offline Installation, Multi-language download link.

I installed Firefox 0.9.3 in a Dell running XP/SP2 with dial-up internet access set to dial automatically.

The curent version of Firefox is 1.0 Preview (get the newly-patched version). Start with that, then ask questions. I must admit that I don't know what the problem is, yet.

I am running a Windows 98 OS and am having problems loading Windows at startup. The wallpaper loads but that's it!!! No desktop items and no taskbar. I can run things through the task manager but I still don't know why my desktop won't load. I ran HijackThis and was hoping someone could help me understand the log file. Please help before I throw this computer off my balcony!!!!

Gotta go. Check here. If it's Windows 98, why all the Registry references to WinNT? SmileyCentral is an adware source, dump it and all references.

I am running Windows 98 on a slow computer. My problem is when I try to shut down or restart, my computer locks up completely on the "Windows 98 Shutting Down Please Wait" screen. I have waited for long periods of time and it does not respond. I have to manually turn off my computer.

Quite likely, this is actually a hardware problem, either a loose board/dirty contact in the system itself or a corrupted driver ("slow" = "old" so dust/dirt can cause problems). At shutdown, each hardware device "signs off." If the board has a dirty contact (for example) or a corrupted driver it can't always properly acknowledge the shutdown command. It's still possible for it to boot up and run normally in this situation. First, check that all boards are properly seated in their sockets. Second, it's not a bad idea to pull each board and clean the edge-contacts with isopropyl alcohol, 91-99% pure (70% rubbing alcohol is not appropriate; an isopropanol "drygas" such as Iso-HEET works well for this). Last, check to ensure that all drivers are as up-to-date as possible.

I ended up on a forum called "Techsupportguy.com". I had downloaded HJT from a link there and wrote a thread to someone else asking for a .zip opener. I used a spell checker on the TSG site and noticed about:blank on a passing pop up.

I don't think you got a problem from TSG--it's likely a coincidence. It's a reputable site; if I wasn't here, I might very well be there myself. I sometimes check threads there to ensure that I'm not talking out my nether orfice when giving advice.

As far as a Zip opener, WinZip continues to have known security problems, so I recommend the free 7-Zip instead. After installation, run 7-Zip, go to Tools->Options and check all the boxes to associate the program with the filetypes.

Please View My Log.

Looks clean, what's the problem? Some folks have problems with C:\WINDOWS\System32\taskswitch.exe -- but it's not malware.

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
None of these are malware, though I'd get rid of them. I replace igfxtray.exe with MultiRes.

I Have Norton Internet Security 2004 With Me. I Came To Know That One Should Not Have Both Firewalls Working At The Same Time.

You absolutely should only run one firewall at a time--in your case, use the Norton firewall only. Though it is better than nothing, the Windows firewall is still deliberately crippled and nearly useless compared to anything else. It should only be used if nothing else is installed; even then, the free Kerio, ZoneAlarm, or Sygate firewalls are each far better and one should be downloaded immediately if a retail program is not available.

My brother's pc is recently hijacked. The error reads:-
Error loading C:\Windows\Downloaded Program Files\bridge.dll.

You should have started by reading the messages at the top of the Security Forum page: UPDATED: DO NOT POST ABOUT BRIDGE.DLL BEFORE READING THIS and Helping yourself: What to do before starting a new thread or posting a HiJackThis log, but we are here to help.

You should read those posts before continuing, as well as updating your copy of HijackThis, which can be updated from within the program. It's easy to to do: click the Config button in the lower-right corner of the program window, then click Update.

You need to run Spybot - Search & Destroy. Make sure that you update the datafiles during installation (be sure you're online). Follow the instructions carefully. Your biggest problem seems to be MyWebSearch, but some other notes follow, as well.

After following the instructions in those two posts and running S-S&D, run the updated HijackThis to see how you are doing. Then, and only then, re-post your cleaned log.

Watch out for the problem denoted in this line:
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Windows\System32\wsaupdater.exe

Remove these (useless):
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\PROGRA~1\Java\J2RE14~1.2\bin\jusched.exe

Get rid of Kazaa. It's one of the worst security risks out there. Find a different, safer network with similar functionality--they do exist.

hey i have a problem. I know i have a radeon 9600 128 mb graphics card but i dont know what kind it is. Any way of finding out? My dxdiag says its the radeon 9600 series chipset but i dont know.

As far as I can tell, it's a 9600SE.

In the future, please post just the relevant parts of output text like this. Not only is it hard to wade through, but it takes up w-a-a-y too much space. Out of all of what you posted this was all that was of use:

Card name: RADEON 9600 SERIES
Manufacturer: ATI Technologies Inc.
Chip type: RADEON 9600 Series AGP (0x4150)

Thanks.

Internet Explorer interrupts my word processor and brings itself back "on top" of my computer screen. I like the auto refresh, but I don't like to lose a few keystrokes as the computer suddenly switches to Internet Explorer. How can I disable this feature?

Actually, this is pretty easy, no Registry tweaking is required.

There's a tool for this purpose, TweakUI. A good explanation with details is available at Annoyances.org, but here's how you solve this specific problem (partially quoted from my own article):

The semi-official tool for modifying the user interface is TweakUI. It comes from Microsoft, but is officially not supported--that does not diminish its usefulness. Download it to a convenient place; if you are unfamiliar with downloading, save it to the Desktop. The file is a self-extracting Zip archive; double-click the icon. A small window pops up on the desktop with the extract directory presented as C:\Windows\TEMP. You can leave this as-is (bleah), or change this to just a period, a dot (to Windows, a single period means "current directory", so that's where it will extract to), then click on the Unzip button. After extraction, one of the icons will look like a little notebook and be titled tweakui.inf--right-click on that icon and select Install from the pop-up menu. This will bring up an installation window and a help window. I recommend that you at least look over the help file for a bit of orientation--but my instructions will be pretty …

I have a home movie file which is supposed to be an AVI file but it has the word esoteric in it. I tried to view it with all the usual windows XP stuff like real player and windows media player but all i see is a black screen. Is there any way I can convert this file to an ordinary .AVI file or something else so as to be able to watch it on my PC

This is probably a DiVX file, an MPEG-4 variant. Apple QuickTime or WinAmp 5 (preferred) should be able to play it. You can also search for a DiVX-compatible codec for WMP. The "free" version of the "official" DiVX player is adware and not recommended.

I need help in how to solve the above message. It is telling me the system cannot find the file specified.

You will have to download and use HijackThis (see the malware links in my signature) and post the log to the Security Forum. You will also likely need a utility called LSPfix. Also, take a look at this thread.

Internet explorer script error 1386 char1: object required how do i get rid of it, it interferes with my printer.

This is caused by a DLL mismatch and is fixed by making sure that your Windows and Internet Explorer patches are up-to-date. Run Windows Update.

I am trying to upgrade my version of Internet Explorer to version 6. I have tried to install from the Microsoft upgrade site and I have also downloaded the appropriate file to My Documents, however, when I try to install it I keep getting a message that I need to reboot as an earlier upgrade has pending work requiring a reboot.

At this point, you are going to need to download and run HijackThis (see my malware links below) and post a log to the Security Forum.

I'm pretty sure that what's happening is that you have a virus or Trojan that's abusing the RunOnce function. This function is normally used, for example, when you install software and have to reboot; because of the abuse, Windows always thinks that a reboot is pending. This serves two purposes for the virus writer: it blocks upgrades, and ensures that the scumware is harder to remove.

I think I have the same problem as you. Please give me some help!!!

First of all, you have to obtain a newer version of Internet Explorer. v5.5 is no longer supported or updated. v6.0 is more secure by a good margin. You can find IE 6.0 on an AOL disc, if they have those in Argentina...

You also need a newer version of HijackThis, as well.

Copy these instructions to Notepad or another text editor, then print them out. You should not have any browser windows open when you are following the procedures below.

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also.

Reboot into Safe Mode by pressing the [F8] key repeatedly until the boot menu shows up.

Make sure to close any open browser windows. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn’t be – but double check them):

C:\WINDOWS\LOADQM.EXE
C:\ARCHIVOS DE PROGRAMA\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\ARCHIVOS DE PROGRAMA\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\NTCH.EXE
C:\WINDOWS\APICH32.EXE (all instances)

I'll list what, in my opinion, should be dumped. Realize that not all of these are malicious--some are merely superfluous, "excess baggage." Some companies (Real and Apple among them) seem to think their software should run all the time... bleah!

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar …

Can anyone tell me what to delete please.

Your main problem is , but you also have Gator and a first-timer:

[firstfastrealthat] C:\Documents and Settings\All Users\Application Data\license bolt first fast\PileOwns.exe

for which I have found NO references on Google--if you know what this is, keep it. If not, dump it! Remove the directory when you determine it to be unneeded.

Copy these instructions to Notepad or another text editor, then print them out. You should not have any browser windows open when you are following the procedures below.

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also.

Reboot into Safe Mode by pressing the [F8] key repeatedly until the boot menu shows up.

Make sure to close any open browser windows.

I'll list what, in my opinion, should be dumped. Realize that not all of these are malicious--some are merely superfluous, "excess baggage." Some companies (Real and Apple among them) seem to think their software should run all the time... bleah!

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - C:\Windows\questmod.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [firstfastrealthat] C:\Documents and Settings\All Users\Application Data\license bolt first fast\PileOwns.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exe
O4 - Global Startup: Microsoft Office.lnk …

I've upgraded HijackThis and re-run a log after the fixes. I've attached it below for completeness.

I think that you still have a problem--I'm not sure if I can pinpoint it exactly, but the symptom is the line F:\WINDOWS\System32\RUNDLL32.EXE under Running Processes. This indicates a problem, because under the Windows NT family RUNDLL32 is run-and-release, so it should never show up as a running process--that's what Svchost is for.

Copy these instructions to Notepad or another text editor, then print them out. You should not have any browser windows open when you are following the procedures below.

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also.

Reboot into Safe Mode by pressing the [F8] key repeatedly until the boot menu shows up.

Make sure to close any open browser windows. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn’t be – but double check them):

F:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\WINDOWS\System32\RUNDLL32.EXE
F:\Documents and Settings\Richard\My Documents\My Applications\WinZip90\WZQKPICK.EXE
F:\WINDOWS\System32\CTsvcCDA.EXE

I'll list what, in my opinion, should be dumped. Realize that none of these are malicious--they are merely superfluous, "excess baggage" or potential security risks. Some companies (Real and Apple among them) seem to think their software should run all the time... bleah!

O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime

Have lost the header from Word 2000.
Deleted and re-installed.
Removed all references from registry.
On re-install, same problem!

What do you mean by "header?" That word has several meanings in this context, and the differences matter.

Worst-case, of course, you could install instead... :idea:

i recently tried to install a wireless cardbus adaptor on my thinkpad, & during the process, I received a lot of messages saying that files were missing. This computer was given to me used & do not have the win98se disc, but it is a licensed/registered version. is there any way to fix this problem?

This is a common problem, as the installer is looking for files from the installation CD--but you may already have the cabinet (.CAB) files on the machine. The default location is Windows\Options\CABs--but they may be elsewhere. If they are not in the default location, use the Windows Find function or the DOS command lines
CD \
Dir *.cab /s /p
to find them. If you do not have the CAB files, get a Windows 98SE CD from somewhere and use it. In either case, see my article Corrupt 98 to find out more.

I have Windows 98 on my laptop computer, and still do, but it started to messing up, and I am in need of installing it again. What do you suggest? And what is the best way to go about doing it? I don't have a reconfiguration disk.

"Messing up" in what way? Some problems, such as malware, won't be solved with a re-install. You may wind up posting a HijackThis log to the Security Forum.

That having been said, if you really do need to re-install, you may already have the cabinet (.CAB) files on the machine. The default location is Windows\Options\CABs--but they may be elsewhere. If they are not in the default location, use the Windows Find function or the DOS command lines
CD \
Dir *.cab /s /p
to find them. If you do not have the CAB files, get an appropriate Windows 98 CD from somewhere and use it. In either case, see my article Corrupt 98 to find out more.

When my computer starts up I get a message that say....
common name tool bar /cnbabe did not start properly then I click OK..
now when I try to use my msconfig it only pops up on the screen for about 1 sec and disappears

In addition to Common Name, which is spyware, you probably have a virus or Trojan that is disabling MSConfig and, likely, Regedit. In the long term, you will need to download and run a spyware killer such as Spybot - Search & Destroy or Adaware followed by running HijackThis and posting the log to the Security Forum. See my Malware article (link below) for details on all of this. In the short term, a decent substitute for MSConfig is Codestuff Starter. It can be used to look at or kill startups and processes, as well as save the lists as text for further analysis.

Should I upgrade my Windows XP with SP2?

What are the pros and cons of doing that?

In my opinion, there are more pros than cons. I have done about a dozen XP-SP2 installs with no problem. In fact, I have written an article about this very subject. Please read it carefully!

I have two issues with WIN98: When I double click on the “Date/Time function in the Control Panel or in the Task Bar the screen flashes briefly then nothing happens. I don’t see the panel which allows me to adjust the date and time.

• When starting up WIN98 I get an error message which states:
  “Cannot find a device that maybe needed to run Windows. The registry or SYSTEM.INI file refers to this device file, but the device file no longer exists.

I'm not sure about the date/time problem, but it might be a good idea to read my article on Windows 98. A temporary work-around would be to adust the time from a DOS command line using the time command.

For the boot-time error: back up the Registry. Open Regedit and do a search on VSHINIT.VXD. Remove the reference that you find there. That file is part of McAfee anti-virus software. If you still have it and it's current, you could try a re-install. If not, you are running anti-virus software of some sort, right?

Hey guys. I recently had this stupid thing known as my personal horoscope installed without my permission..how do i delete it?

Copy these instructions to Notepad or another text editor, then print them out. You should not have any browser windows open when you are following the procedures below.

Actually, System Restore is probably infected at this point, so the restore points must be flushed. To do this, turn off System Restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and have verified that it’s clean, you may turn it back on and create a new restore point.

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also.

Reboot into Safe Mode by pressing the [F8] key repeatedly until the boot menu shows up.

Make sure to close any open browser windows. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn’t be – but double check it):

C:\Program Files\Athan\Athan.exe
C:\documents and settings\owner\local settings\temp\57TIl76D.exe
C:\Documents and Settings\Ragheb\Application Data\eber.exe
C:\WINDOWS\system32\t?skmgr.exe
C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
C:\Program Files\Common Files\WinTools\WSup.exe
C:\Program Files\Common Files\WinTools\WToolsS.exe

Be sure to note these files and locations for future deletion.

…

I am having trouble doing anything on my PC because it keeps changing home pages.

In order to properly clean out your problems, you must turn off System Restore first. Turn it back on only after performing the following repairs. If you do not understand System Restore or how to deal with it, consult Windows Help. The east way to bring up Windows Help is to click on an empty area of the Desktop and press the [F1] key.

HijackThis should be run in Safe Mode to improve the chances of a good fix.

Here's the bad processes:

C:\WINDOWS\system32\crjw32.exe
C:\WINDOWS\system32\cvpss.exe
C:\WINDOWS\msbi32.exe
C:\WINDOWS\System32\cvss.exe
C:\WINDOWS\System32\?ttrib.exe

and one you should remove as useless:

C:\WINDOWS\System32\CTsvcCDA.exe

Here's what you should check and fix using HijackThis:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\rhgms.dll/sp.html#96676
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\rhgms.dll/sp.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\rhgms.dll/sp.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\rhgms.dll/sp.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\rhgms.dll/sp.html#96676
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\rhgms.dll/sp.html#96676
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {E8A21F6F-CE35-C5F4-D125-77B47648F1A3} - C:\WINDOWS\netoh32.dll
O4 - HKLM\..\Run: [Aplune Service] svchosd.exe
O4 - HKLM\..\Run: [Settings] svchosd.exe
O4 - HKLM\..\Run: [msbi32.exe] C:\WINDOWS\msbi32.exe
O4 - HKCU\..\Run: [Vmoufokx] C:\WINDOWS\System32\?ttrib.exe

ok, the os is win 95 on a compaq deskpro pentium II inside.Some of the programs that I was opening are add/remove programs,wordpad among others. Something else is that this machine started to say its out of memory.It has very few programs installed on it and has 32 mb of ram

Win 95 has a limited amount of RAM available for system resources (even less than Win 98/Me), regardless of how much RAM the system has (though 32 MB is not enough system RAM, even for Win 95). If there are too many programs running, the system will lock up or crash. You may have a virus or Trojan running and sucking up resources. You should add 128 MB of memory and upgrade to Win 98SE as soon as possible.

Bring up the Task Manager with the [Ctrl]+[Alt]+[Del] key combination and note what's running. Take notes and post them here.

Help!!! Pls kindly assist. Cant even used hijackthis to fix those checked box on my pc cos the 'worm' may have caused the application close promptly after few seconds. Where got time to react to check those boxes???

You are not without recourse. Try running HijackThis in Safe Mode and see if that gives you enough time to delete the offending startups. There are also alternative tools available to kill the offending processes, including CodeStuff Starter and PrcView. Either of them should work; Starter has a "nicer" interface and can also be used to delete stuff from the startup list, like HijackThis or MSConfig.

Kill the following process and delete the file: C:\Documents and Settings\Admin\Desktop\AAAA.exe

Get rid of the following (use HijackThis to check these off and "fix checked"):

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://zfpyjv.outhost.info/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://zfpyjv.outhost.info/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://zfpyjv.outhost.info/sp.php

All the lines beginning with 01 - Hosts

O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - C:\WINDOWS\questmod.dll
O2 - BHO: Tubby - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - …

do you know of decent power supply brands?

For example, this one, while slightly over your limit, is a brand known to me, and a 120mm fan turns slower--so it runs quieter and lasts longer.

Hi,
I have that bloody Blank Trusted start Page.

These are the bad processes:

C:\WINDOWS\System32\csrs.exe
C:\WINDOWS\System32\bling.exe
C:\index.exe

You are going to have to stop these processes before going further, because they deliberately interfere with the tools neded to deal with them. For example, Task Manager and Regedit are probably disabled while they run.

Fortunately, there are alternative tools available, including CodeStuff Starter and PrcView. Either of them should work; Starter has a "nicer" interface.

Once those processes are stopped, get rid of the following (use HijackThis to check these off and "fix checked"):

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by iPrimus
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [SSER] sser.exe
O4 - HKLM\..\Run: [Microsoft Security Management] csrs.exe
O4 - HKLM\..\Run: [MSNMSGR5] bling.exe
O4 - HKLM\..\Run: [REEGRUN] C:\index.exe
O4 - HKLM\..\RunServices: [Microsoft Security Management] csrs.exe
O4 - HKLM\..\RunServices: [MSNMSGR5] bling.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/113a9ba...ip/RdxIE601.cab

Once fixed, use the Windows Find function to track down the files and remove them. The IgfxTray utility can be replaced by the better MultiRes.

hi, i've been surfing around the internet for drivers, tips, help, etc for over a week now trying to get this fixed so far nothing. So far i'm stumped i never had any resolution problems before then for some reason the screens just got blurrier.

Blurring is not a vid-card problem. It sounds like a monitor problem. The focus has shifted over time (a common problem), and needs to be readjusted. It's not going to be cost-effective unless you do it yourself. I'm not sure if either of those monitors has externally-adjustable focus; I'm pretty sure that both monitors have dual focus controls.

Don't worry about refresh rates. both monitors can handle whatever you throw at them.

there is this machine that had its mouse working but showed many illegal operation whenever you try to run some programs and afterwards the mouse stopped working and even the cursor can been seen anywhere.I have restarted several times with no success.the mouse is plugged in correctly.where could the problem be?

There are many possibilities. Modern mouses have microcontrollers (stripped-down microprocessors), and driver or hardware errors can cause lockups. USB or PS/2 mouse? It makes a difference in this case.

I found this laptop at my job. I turned it on first there was a problem with the bios time and set i set that all up,and then they said operating system not found,so i popped in my windows xp cd,but i dont think the laptop detected my disc drive what am i suppose to do?

A lot depends on how old, what brand, what model, what processor speed, etc. It sounds like the clock battery is dead (not keeping time), so you need to determine that aspect. This might also affect whether or not it recognizes the hard drive. It's also possible the drive might have stiction due to long-term non-use. In any case, more information is needed.

...everytime i boot my machine in the morning, or anytime during the day if i restart it, it takes almost 3 min (maybe more) to have my desktop icons finally appear. and even though my task bar and systray all load up right away, nothing can be used till my icons appear.

How much memory do you have? Drive space? Combine low memory with a fragmented, nearly-full hard drive and things slow w-a-a-a-y down at boot-time.

i appologize if this is in the wrong section. Lately my computer fan has been turning on and when it runs it is very loud. I let my copmuter sit over night and i turned it on and within 10 minutes the fan came on and is loud as can be. How do i stop this? i dont think it would be overheating that fast. maybe it need a dusting inside? or something else? please help...thanks

Bearing wear is a problem with cheap DC fans, noise is a major symptom. Actually you can replace the fan yourself, based on the physical measurements and the current rating--it's pretty easy. Most are 80mm x 80 mm square x 25mm thick. This is a pretty typical power supply replacement fan. You may be able to find a similar one locally at a computer store or trade show.

Make sure the supply is unplugged for an hour or more before you open it to discharge the capacitors.

My PC has been spontaneously rebooting over the past few days. I've been running a hardware monitor to check temperatures, memory, and voltages, and everything is normal except the +12 V reading, which has been reading upwards of +13.1 V and higher. Could this be the problem, and if so, how can I fix it?

Yes. There is a signal line from the power supply to the motherboard called PSG (power supply good). If the voltage goes out-of-bounds, the system may well shut down. the upper bound on the 12V line is about 13.5V, so it's entirely possible.

Replacing the power supply is probably your best bet. They are no longer economical to repair.

Ok, heres my story, my current 420watt powersupply is shot, it powers my pc, but sometimes it starts making static sounds and my pc restarts, so I was wondering

I found a ultra 400-watt power supply

3 questions

1) is Ultra a good brand for power supplies
2) is 400 watts enough to run a 64 3400+ cpu, with a mobo, and 9600XT
3) Are staticy sounds coming from your PS normal?

I have a bit of a background in this; I used to repair switching power supplies when it was economical to do so, going back 30 years .

1) The Ultra brand is unknown to me, but it looks OK from the picture and other info I've seen. If I had one in hand, I could trace it to the OEM (original equipment manufacturer) from the UL recogition code (the backwards UR followed by the letter E and a series of numbers). You can usually Google that code and find out more.
2) 400 watts is a bit low these days. The minimal incremental extra cost of a 500-watt supply is a good investment.
3) No :-)

Here is the log

You, too, have been clobbered pretty hard.

Start by running Spybot - Search & Destroy to get rid of as many of them as possible automatically. Make sure that it is v1.3 and up-to-date (it updates itself during installation, but you have to be on-line). Also, your HijackThis version needs an update (note: embedded links).

Once you have run Spybot - Search & Destroy and the new version of HijackThis, post the new list and we will provide further assistance

Here's the bad stuff. Understand that you may not be able to fix it all with HijackThis--a follow-up search on Google may be in order. for example, Tvm.exe.

Also, note the filenames with paths for the stuff you disable here so you can delete the files later.

There are several hijackers that manipulate your TCP/IP stack in such a way that removal of the infecting software leaves a gap. Think of it as a chain with a broken link. The fix may lie in a utility called LSPFix which can repair the TCP/IP stack.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.websearch.com/ie.aspx?tb_id=50188
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\wnpmg.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\wnpmg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\wnpmg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\wnpmg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\wnpmg.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet …

Here is the new HjT log...

You still have a number of problems. Some are nastyware, some are simply useless & worthless. The following should be removed:

O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
O2 - BHO: PowerSearch - {4E7BD74F-2B8D-469E-A3FA-F161A787AD2D} - C:\PROGRA~1\POWERS~1\Toolbar\pwrsmnd1\pwrsmnd1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: SirSearch - file://C:\Program Files\PWRSMND1\Cache\SelectedContextSearch.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

Here's a bit of justification for removing some of these.

IgfxTray is an Intel graphic-chipset utility. The better replacement is the free MultiRes.

SunJavaUpdateSched is not needed.

WinZip has serious security flaws. Unless you have paid for a copy, I recommend uninstalling WinZip and replacing it with the free 7-Zip. Note: Once installed, run 7-Zip, go to the Tools -> Options menu and check off the boxes to associate 7-Zip with the filetypes.

As far as not getting on-line, there are several hijackers that manipulate your TCP/IP stack in such a way that removal of the infecting software leaves a gap. Think of it as a chain with a broken link. The fix may lie in a utility called LSPFix which can repair the TCP/IP stack.

Here is the log

You have been clobbered, but good. I count at least six malware programs, maybe more.

Start by running Spybot - Search & Destroy to get rid of as many of them as possible automatically. Make sure that it is v1.3 and up-to-date (it updates itself during installation, but you have to be on-line). Also, your HijackThis version needs an update (note: embedded links).

Once you have run Spybot - Search & Destroy and the new version of HijackThis, post the new list and we will provide further assistance

When I run adaware and spybot I lose my internet connection.

You have a couple of problems. First, run HijackThis again and "fix" the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [OSS] c:\windows\system32\ossproxy.exe -boot
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O10 - Broken Internet access because of LSP provider 'osmim.dll' missing

Be sure to remove the file c:\windows\system32\ossproxy.exe, as well.

There are several hijackers that manipulate your TCP/IP stack in such a way that removal of the infecting software leaves a gap (note the reference to "osmim.dll" above). Think of it as a chain with a broken link. The fix may lie in a utility called LSPFix (link) which can repair the TCP/IP stack.

Everytime I run ad aware/spybot it keeps deleting my internet connection.

I assume that you are on a broadband connection. There are several hijackers that manipulate your TCP/IP stack in such a way that removal of the infecting software leaves a gap. Think of it as a chain with a broken link. The fix may lie in a utility called LSPFix (link) which can repair the TCP/IP stack.

When booting up, this message appears "The ALUNOTIFY.EXE file is linked to missing export MFC42.DLL:6453".

This means that the version of MFC42.DLL on your system is missing, corrupted, or incompatible with the Norton/Symantec software that you are running. It's not unusual for something you installed or updated to clobber system files. Try a search: http://www.symantec.com/search with "MFC42.DLL" as the search term, for starters.

The only remaining issue is that I can't seem to change the color or dimension settings beyond 16 color and 640x480.

Open your Device Manager window. The easy way to do this is to use the key combination of one of the Windows-logo keys + [Pause/Break] to bring up the System Properties window, or right-click the My Computer icon and select Properties.

Select the Device Manager tab, then click on the [+] symbol next to Display Adapters and see what it reports. If it has a mark next to it, or the reported video card does not match what you have, you will have to correct the problem. Double-click on the adapter listing; this will bring up the Properties window. Click on the Driver tab and click the Update Driver button. This brings up the Update Device Driver Wizard window. Click the Next button, then the Display a list option from the next screen and click Next. If your correct display card shows on the list, click on the name and then the Next button again. Let the system install the correct drivers, and you should be good to go. You may want to update the drivers as well, but get the system working first.

You may find MultiRes a useful utility, as well. See my Best Free list for the link.

I have a problem.On my computer is a file named WFunk dead mix.exe". And I think i got it from MEssenger Plus. Can anybody help me how to get rid of it?

WFUNK is a SHOUTcast streaming audio station, and the file may be associated with that--it's probably not malware.

No, it does not keep any of the settings. If I unplug the machine for more then a few seconds it forgets everything. it will come back thinks it's january 1999 and the processor is a PII 233mhz but when its up it runs great.

Then the board "thinks" that the battery is dead or not connected. Check the battery itself and the jumper setings.

The bridge.dll problem is a new one and didn't come with either one of those programs which have been on my computer for a year.

Your log looks pretty clean, overall. You have the bridge.dll entry, but no associated BHO (browser helper object) entry. This is good!

You do have GMT, which is Gator/Claria adware and should be removed--see if it's listed in the Add/Remove Programs menu first. The utility for that purpose that I keep coming back to is Atomic Clock Sync.

Weatherbug is adware, but I tolerate it because it's useful. You be the judge.

Here's what to remove:

O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINNT\Downloaded Program Files\bridge.dll",Load

O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe

Then reboot, follow the paths, and remove:

C:\WINNT\Downloaded Program Files\bridge.dll (file only, but probably missing)

C:\Program Files\Common Files\GMT (whole directory)