gerryd77

Hi I would appreciate any info regarding my favorites list in XP being altered. Occasionally my individual webpages (as oppossed to folders) are sent to the bottom of the list. As far as i am aware i have not done anything for this to happen. Any ideas ? Cheers

thanx for that

sorry all. last post should have read svchost.exe not scvhost.exe

Hi Running xp and it has slowed down a lot recently. Have noticed that i have scvhost.exe running 5 times. 1 comes under 'local service', 2 under 'network service' and 2 under 'system'. what is this and any advice as to what i should do ? thanx in advance.

Hi All Recently had a problem with 98se freezing on me. No new hardware or software has been installed. If the pc is left inactive for a few mins it will almost certainly freeze, and sometimes it does so whilst booting up. Ctrl, alt del doesn't work when it freezes. Don't know if it is the same problem, but scan disk and defrag no longer work. Get a message along the lines of 'scandisk has restarted 10 times...' I am only using this system in the house to surf the web and don't really want to buy a new pc for a while yet. Any ideas would be very welcome. Thanx

was away for a while hence not getting back to you guys. managed to learn a few things thanx to the info you gave me and was able to sort the problem myself. thanx for your help

thanks for your time guys. i will not get the chance to do anything til tomorrow night, but will do a suggested asap. cheers

hi i ran hijack this and did a little research into using it. the log below shows the line: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wvww.us/ but every time i remove it it keeps reappearing. when i save the log and open it in notepad it shows a lot of lines that start: C:\PROGRAM or c:\ however the log in hijack this does not show any of these and i can't, therefore, delete any of these even though i believe that the line: C:\WINDOWS\ptsnoop.exe needs deleted. Here is the log anyway and i would be grateful for any thoughts. cheers Logfile of HijackThis v1.98.2 Scan saved at 18:23:17, on 05/10/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\MDM.EXE C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\MOUSE\SYSTEM\EM_EXEC.EXE C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE C:\PROGRAM FILES\NETROPA\MULTIMEDIA KEYBOARD\MMKEYBD.EXE C:\WINDOWS\LOADQM.EXE C:\WINDOWS\ptsnoop.exe C:\PROGRAM FILES\PCI AUDIO APPLICATIONS\MIXER.EXE C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\WINDOWS\SYSTEM\SVCSYS.EXE C:\PROGRAM FILES\NETROPA\MULTIMEDIA KEYBOARD\MMUSBKB2.EXE C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\RNATHCHK.EXE C:\PROGRAM FILES\NETROPA\MULTIMEDIA KEYBOARD\TRAYMON.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://hotlola.b3.nu R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.btopenworld.com/searchpane R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wvww.us/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://bt.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bbc.co.uk R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=webcache.cableinet.co.uk:8080;https=webcache.cableinet.co.uk:8080;ftp=webcache.cableinet.co.uk: 8080;gopher=webcache.cableinet.co.uk:8080; R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.cableinet.co.uk;*.cableinet.net;*.telewest.co.uk;<local> O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [scanRegistry] c:\windows\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe O4 - HKLM\..\Run: [systemTray] SysTray.Exe O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [EM_EXEC] c:\mouse\system\em_exec.exe O4 - HKLM\..\Run: [Onscreen Display] C:\Program Files\Netropa\Onscreen Display\OSD.exe O4 - HKLM\..\Run: [Multimedia Keyboard] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe /launchpad O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [CountrySelection] pctptt.exe O4 - HKLM\..\Run: [C-Media Mixer] C:\Program Files\PCI Audio Applications\Mixer.exe /startup O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [schedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE O4 - HKLM\..\RunServices: [HC Reminder] hc.exe O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe" O4 - HKCU\..\Run: [MSSVC] "C:\WINDOWS\SYSTEM\svcsys.exe" 8192 O4 - HKCU\..\Run: [X-Cleaner Freeware] "C:\PROGRA~1\X-CLEA~1\XCleaner_free.exe" -turbo -autostart -NOREBOOT O4 - HKCU\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0 O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Freeserve - {3D0573C0-AD0B-11D4-A398-A7F33692D641} - http://www.freeserve.net/packard-bell/ (file missing) (HKCU) O9 - Extra button: PB Home - {3D0573C1-AD0B-11D4-A398-A7F33692D641} - http://www.packardbell-europe.com/ (file missing) (HKCU) O12 - Plugin for .avi: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O12 - Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O12 - Plugin for .bmp: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O12 - Plugin for .au: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll O14 - IERESET.INF: START_PAGE_URL=http://bt.yahoo.com O15 - Trusted Zone: http://chat.msn.co.uk O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://jcs.chat.dcn.yahoo.com/v45/yacscom.cab

Thanks i'll give it a go. I'm using a laptop on a Mac network.

Hi Would be grateful for advice regarding the quick launch toolbar. Everytime i turn off my laptop i lose it and have to right click to bring it back. running xp. any ideas ? cheers

Thanx for the advice guys. will give it a go. cheers

Hi I would appreciate any advice on how to get rid of the i-search spyware that has taken over my homepage. I have ran both Adaware and Spybot but neither as helped on this occasion. Does anyone have a (hopefully free) solution. Cheers

will do. thanx

hi spud. only got AVG 6.0 running. i am on a lan

Hi, I am running XP and everyday when i boot up my laptop i cannot get a connection to the web. The IP address etc is deemed unavailable. After running spybot it shows a problem entitled: VX2/f Settings_HKEY_LOCAL_MACHINE\SOFTWARE\VENDOR when i fix this my connection is re-established. Does anyone have any advice? Cheers