jassuji Posted July 2, 2005 Report Share Posted July 2, 2005 hiiiiiiii there guys,i'm new here but i've heard abt u guys a lot.i need some serious help with my windows XP pro with sp2 n all the updates installed.my explorer.exe gets restarted if i try to browse my drives.sometimes it crashes ne program runnin like if i'm usin windows media player 10 n browse my drives it either crashes my explorer or crashes the media player.i get an error sayin explorer.exe has crashed then click send n don't send. after that i get a error message sayin drwatson.exe has crashed n had to closed down.i'm gonna copy n paste the event logs that have been generated in the event log manager.i have a P4 2.8 HT with 256mb ram.i've got a 80GB SATA harddisk which is nearly full.hey sometimes my taskmanager get crashed.hey i have ewido security suite installed n i've also got microsoft's antispyware beta 1 too.everytime when i try to scan with ewido in normal mode i get an error n it crashes too.here's my even log................Faulting application taskmgr.exe, version 5.1.2600.2180, faulting module tmp22.tmp, version 0.0.0.0, fault address 0x0000120e.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Faulting application explorer.exe, version 6.0.2900.2180, faulting module unknown, version 0.0.0.0, fault address 0xec1a12e0.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.hey i'm sendin u my hijackthis log too.........Logfile of HijackThis v1.99.1Scan saved at 12:03:13 AM, on 7/3/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\Program Files\ewido\security suite\ewidoguard.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\SOUNDMAN.EXEC:\WINDOWS\ALCWZRD.EXEC:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXEC:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXEC:\Program Files\Common Files\InterVideo\FastTVSync\FastTVSync.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Microsoft ActiveSync\WCESCOMM.EXEC:\Program Files\Microsoft AntiSpyware\gcasDtServ.exeC:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXEC:\Program Files\InterVideo\DVD5R\SchSvr.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\PowerMenu\PowerMenu.exeC:\Program Files\Nokia\PC Suite for Nokia 6600\connmngmntbox.exeC:\Program Files\Nokia\PC Suite for Nokia 6600\ectaskscheduler.exeC:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXEC:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exeC:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exeC:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXEC:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exeC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\WINDOWS\explorer.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Yahoo!\Messenger\ypager.exeC:\unzipped\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.zdnetindia.comO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exeO4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXEO4 - HKLM\..\Run: [FastTVSync] "C:\Program Files\Common Files\InterVideo\FastTVSync\FastTVSync.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"O4 - HKCU\..\Run: [DirectX shell driver] C:\WINDOWS\sammp32.exeO4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXEO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: InterVideo Scheduler server.lnk = C:\Program Files\InterVideo\DVD5R\SchSvr.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: PowerMenu.lnk = C:\Program Files\PowerMenu\PowerMenu.exeO4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htmO9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXEO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXEO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.zdnetindia.comO16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1107144957275O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{EDEEEEFF-2B06-4515-816B-25186F0D199B}: NameServer = 202.138.103.100 202.138.96.2O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exeO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: NTLOAD - Unknown owner - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: NTSVCMGR - Unknown owner - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: SuperProServer - Unknown owner - C:\Tally\spnsrvnt.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exehey i forgot to ask.my explorer.exe got renamed to explorer.EXE in the task manager????is it normal????just let me know????? Quote Link to post Share on other sites
blim Posted July 3, 2005 Report Share Posted July 3, 2005 Hi jassuji,I'm afraid I'm a nooby and of no help, but I just want to welcome you to Besttechies (and bump this up so the experts will see your post ) There are a lot of helpful and friendly folks here who I'm sure will solve your problems with the computer!! This is a busy weekend so it may take a bit of time to get a response, but the wait will be worth it.And my complements for such a through description of your problem--you are well prepared!IF you don't hear from anyone after the weekend, you might want to repost this information in the "hijack this" forum. That's where the "brains" live Hope to hear more from you, say "Hello" in the Open Chat forum!Liz Quote Link to post Share on other sites
murtu52 Posted July 3, 2005 Report Share Posted July 3, 2005 hey i forgot to ask.my explorer.exe got renamed to explorer.EXE in the task manager????is it normal????just let me know?????<{POST_SNAPBACK}>Just to answer your question, explorer.EXE is the legit file, it appears like that in hijackThis to differentiate it from malware under the same name. Also, if you want you log to be check (if you think malware is behind it) I think a better place to post it would be here, the HijackThis board. Quote Link to post Share on other sites
jassuji Posted July 3, 2005 Author Report Share Posted July 3, 2005 hey there blim,thanx for the compliment but i really need a fix for this problem or i'm gonna have to reinstall my windows again n that's a pain in the ASS .here's another log of hijackthis.the log that i've posted is'nt complete coz i had removed some of the memory hoggin processes .so here's the log of my system after it takes ages to start up. .i hope some techie here would help me soon.i'm really gettin tired of clickin on don't send. Logfile of HijackThis v1.99.1Scan saved at 1:11:11 PM, on 7/3/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\Program Files\ewido\security suite\ewidoguard.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exec:\windows\system32\dllcache\win32\winlogon.exec:\windows\system32\dllcache\win32\csrss.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\SOUNDMAN.EXEC:\WINDOWS\ALCWZRD.EXEC:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXEC:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXEC:\Program Files\Common Files\InterVideo\FastTVSync\FastTVSync.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Microsoft ActiveSync\WCESCOMM.EXEC:\Program Files\Microsoft AntiSpyware\gcasDtServ.exeC:\Program Files\InterVideo\DVD5R\SchSvr.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\PowerMenu\PowerMenu.exeC:\Program Files\Nokia\PC Suite for Nokia 6600\connmngmntbox.exeC:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXEC:\Program Files\Nokia\PC Suite for Nokia 6600\ectaskscheduler.exeC:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exeC:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exeC:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXEC:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exeC:\Program Files\Messenger\msmsgs.exeC:\unzipped\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.zdnetindia.comO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exeO4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXEO4 - HKLM\..\Run: [FastTVSync] "C:\Program Files\Common Files\InterVideo\FastTVSync\FastTVSync.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"O4 - HKCU\..\Run: [DirectX shell driver] C:\WINDOWS\sammp32.exeO4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXEO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: InterVideo Scheduler server.lnk = C:\Program Files\InterVideo\DVD5R\SchSvr.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: PowerMenu.lnk = C:\Program Files\PowerMenu\PowerMenu.exeO4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htmO9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXEO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXEO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.zdnetindia.comO16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1107144957275O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cabO20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exeO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: NTLOAD - Unknown owner - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: NTSVCMGR - Unknown owner - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: SuperProServer - Unknown owner - C:\Tally\spnsrvnt.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe Quote Link to post Share on other sites
Dragon Posted July 3, 2005 Report Share Posted July 3, 2005 hello and welcome to Besttechie.netas stated before this is a holiday weekend in the states so things are a little busy as we are all volunteers here.your log is pretty much clean there are two files i have included that are spyware, but not a cause for your crashing issues.I am also going to list below for Hijack this removal resource hogs, once those are gone that will clear up more of your memory issues. First off, just so you know, once a Harddrive starts getting to the point of almost being full you will run into these issues. the reason is because anytime you are browsing your drives, or if you have to send a Dr Watson report, it uses more disk space to temporarily store the information in part of your hard drive called a swap file, even thought it doesn't show up as a standard partition on your partition manager it is still there.To help in clearing this issue up I would highly recommend removing any and all programs that you dont' use very often. if every program you have on your computer is used either daily or weekly, then it would be a good idea to do one of two things. A.) get a larger Hard drive then 80 gigs, I know you can pick up a 160 gig hard drive for around $80 USD.B.)install a second hard drive for storage purposes, this is a fairly simple task and you would be able to use a second 80 gig hard drive for this purpose. or even a 40 gig what ever your budget can handle.as for the Hijack this fixes.You may wish to print out a copy of these instructions to follow while you complete this procedure.Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.These are spyware:O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEThese are resource hogs, and programs not needed at startup.O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXEO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: InterVideo Scheduler server.lnk = C:\Program Files\InterVideo\DVD5R\SchSvr.exeO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?Reboot your PC.If you would please, rescan with HijackThis and post a fresh log in this same topic, and let us know how your system's working. Quote Link to post Share on other sites
jassuji Posted July 4, 2005 Author Report Share Posted July 4, 2005 hey efwis m8,i tried what u told me to do n my startup speed have increased up but the browsing is just too slow.even when i right click on a file it take upto 10 sec to open up n i'm still getting those errors again.my explorer still keeps on crashing n i'm getting the same drwatson error too.i'm gonna paste my hijackthis log again including the event logs.so here they r.............Logfile of HijackThis v1.99.1Scan saved at 3:21:04 PM, on 7/4/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\Program Files\ewido\security suite\ewidoguard.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Microsoft ActiveSync\WCESCOMM.EXEC:\Program Files\Microsoft AntiSpyware\gcasDtServ.exeC:\Program Files\PowerMenu\PowerMenu.exeC:\WINDOWS\system32\drwtsn32.exeC:\WINDOWS\system32\drwtsn32.exeC:\WINDOWS\explorer.exeC:\Program Files\Yahoo!\Messenger\YPager.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Messenger\msmsgs.exeC:\unzipped\HijackThis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.zdnetindia.comO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exeO4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"O4 - HKCU\..\Run: [DirectX shell driver] C:\WINDOWS\sammp32.exeO4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXEO4 - Global Startup: PowerMenu.lnk = C:\Program Files\PowerMenu\PowerMenu.exeO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htmO9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLLO9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htmO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXEO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXEO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.zdnetindia.comO16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/LSSupCtl.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1107144957275O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{EDEEEEFF-2B06-4515-816B-25186F0D199B}: NameServer = 202.138.103.100 202.138.96.2O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dllO23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exeO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: NTLOAD - Unknown owner - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: NTSVCMGR - Unknown owner - c:\windows\system32\dllcache\win32\winlogon.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: SuperProServer - Unknown owner - C:\Tally\spnsrvnt.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeFaulting application explorer.exe, version 6.0.2900.2180, faulting module unknown, version 0.0.0.0, fault address 0x00f0f5f9.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module dbghelp.dll, version 5.1.2600.2180, fault address 0x0001295d.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Faulting application taskmgr.exe, version 5.1.2600.2180, faulting module tmp27.tmp, version 0.0.0.0, fault address 0x0000120e.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Faulting application taskmgr.exe, version 5.1.2600.2180, faulting module tmp27.tmp, version 0.0.0.0, fault address 0x0000120e.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Hanging application taskmgr.exe, version 5.1.2600.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Hanging application taskmgr.exe, version 5.1.2600.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Hanging application explorer.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.i also have a problem with my internet explorer 6.i have ie6 sp1 installed.i dunno when this kindda problem happened but when i start my computer n open up internet explorer, either my homepage is changed to www.zdnetindia.com (as u can see in my hijackthis log) n also when i open my internet options, my general n security tabs r missing!!!!!!!.i've found out a way to get those missing tabs back by editing the registry but when i restart my computer, the tabs go away n i have to regedit again the entries to get them back.under the security tab my secuity level under the internet goes to minimum.also when i try to scan in normal mode with ewido security suite, it crashes too.somebody plzz help me!!!!!!!!!!!!!!!! Quote Link to post Share on other sites
Dragon Posted July 4, 2005 Report Share Posted July 4, 2005 Download rkfiles.zip and unzip it to its own permanent folder.Important! Reboot in SAFE MODE !!Start in Safe Mode Using the F8 method: * Restart the computer in Safe Mode. * As soon as BIOS is loaded begin tapping the F8 key until the Advanced Options menu appears. * Use the arrow keys to select the Safe Mode menu item. * Press the Enter key.Locate the rkfiles.bat file and double-click it to run it. It will start scanning your computer and could take a little while so be patient. When the DOS window closes, reboot back to normal mode.Post the contents of C:\log.txt back here and I will review it when it comes in. Quote Link to post Share on other sites
jassuji Posted July 5, 2005 Author Report Share Posted July 5, 2005 hey m8,i've done what u've told me to do n here's my log...........C:\unzipped\rkfiles PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files Found in system Folder............ ------------------------C:\WINDOWS\system32\dhtmlexe.exe: UPX!C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213C:\WINDOWS\system32\DivX.dll: PEC2Files Found in all users startup Folder............ ------------------------Files Found in all users windows Folder............ ------------------------C:\WINDOWS\sammp32.exe: FSG!Finishedbye Quote Link to post Share on other sites
Dragon Posted July 5, 2005 Report Share Posted July 5, 2005 before we proceed any further, could you please find this file and submit it to http://virusscan.jotti.orgC:\WINDOWS\system32\dhtmlexe.exeand then post back here what the results were. the next step will be taken after that. Quote Link to post Share on other sites
jassuji Posted July 5, 2005 Author Report Share Posted July 5, 2005 hey there m8,i've done an online malware scan as u told me n here's the result of it.i think the problem is not in this file.i think the file that's giving me the problem is called csrss.exe which is located in the c:\windows\system32\dllcache\csrss.exe.there r two process in the taskmanager, one is CSRSS.EXE which is a microsoft certified process n another is this csrss.exe whose maker is catsoft ( i found out this by the process explorer software).i've also tried deleting it by hijackthis after rebooting but it still shows the file is still there.the process explorer says its a FTP serv-U daemon n i can't figure out the rest associated DLLs with it.i hope this info helps in solving my problem coz i really need to fix my computer.Service load: 0% 100% File: dhtmlexe.exe Status: INFECTED/MALWARE MD5 713bb989112f9b17c58b66221b93ed75 Packers detected: UPX Scanner results AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found Dialer-324 Dr.Web Found nothing F-Prot Antivirus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found probably a variant of Win32/Dialer.Egroup application (probable variant) Norman Virus Control Found nothing UNA Found nothing VBA32 Found Dialer.EGroup.1 (probable variant) Quote Link to post Share on other sites
jassuji Posted July 5, 2005 Author Report Share Posted July 5, 2005 hey m8,its me again n here the online scan log of the file i mentioned in my previous post.Service load: 0% 100% File: csrss.exe Status: INFECTED/MALWARE (Note: only non-destructive malware has been found. Considering the non-destructive nature of samples like these - although they can be a pain -, results will not be stored in the database.) MD5 6a716f7094fd4c76a4c1e4255e70c0bf Packers detected: - Scanner results AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found Trojan.Servu.1 Dr.Web Found not a virus Program.ServUServer.60 F-Prot Antivirus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found not-a-virus:Server-FTP.Win32.Serv-U.gen NOD32 Found nothing Norman Virus Control Found nothing UNA Found nothing VBA32 Found nothing Quote Link to post Share on other sites
martymas Posted July 10, 2005 Report Share Posted July 10, 2005 hey m8,its me again n here the online scan log of the file i mentioned in my previous post.Service load: 0%    100% File: csrss.exe Status: INFECTED/MALWARE (Note: only non-destructive malware has been found. Considering the non-destructive nature of samples like these - although they can be a pain -, results will not be stored in the database.) MD5 6a716f7094fd4c76a4c1e4255e70c0bf Packers detected: - Scanner results AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found Trojan.Servu.1 Dr.Web Found not a virus Program.ServUServer.60 F-Prot Antivirus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found not-a-virus:Server-FTP.Win32.Serv-U.gen NOD32 Found nothing Norman Virus Control Found nothing UNA Found nothing VBA32 Found nothing<{POST_SNAPBACK}>you may have a power prpblem.you may be using more resources than your compt can handle if it isnt a virus or spyware than i suggest it could be your power options need to be controled if you go to power options on the toolbar look for the tab APM open it and check the box power management support .ok apply if the tab isnt there post back because it needs to be enabled in the bios i still feel it is a virus or bad malware if you follow Efwisinstructionsyou will be ok i suggest you get a virus scanner as soon as possable or you will be a permenant posterto the section marty Quote Link to post Share on other sites
Pierce Posted July 10, 2005 Report Share Posted July 10, 2005 is just too slow.even when i right click on a file it take upto 10 sec to open up<{POST_SNAPBACK}>its not mallware, its not spyware, and its not a virus, Microsoft has posted an article about the system slowing down, and what the problem is that the registry is so damn big that it cant load it into memory to make right clicks cache etc etc and keep them operating quickly. even looking at your hjt log's you have an awfull lot of stuff running.the way i solved it on my system was using a program called registry mechanic, which will remove any unnesicary or broken links in the registry, be sure to make backups and remember we dont take any liability . If that doesnt solve the problem, well you might just want to try uninstalling some software that you dont use. also if you have less than 15% free hard drive space then your performace is going to be crap.Explorer restarting is typical, it runs out of memory to write to or hdd space and crashes, and considering exploerer is tangled with everything you can understand how its soo fragile.Pierce Quote Link to post Share on other sites
martymas Posted July 11, 2005 Report Share Posted July 11, 2005 is just too slow.even when i right click on a file it take upto 10 sec to open up<{POST_SNAPBACK}>its not mallware, its not spyware, and its not a virus, Microsoft has posted an article about the system slowing down, and what the problem is that the registry is so damn big that it cant load it into memory to make right clicks cache etc etc and keep them operating quickly. even looking at your hjt log's you have an awfull lot of stuff running.the way i solved it on my system was using a program called registry mechanic, which will remove any unnesicary or broken links in the registry, be sure to make backups and remember we dont take any liability . If that doesnt solve the problem, well you might just want to try uninstalling some software that you dont use. also if you have less than 15% free hard drive space then your performace is going to be crap.Explorer restarting is typical, it runs out of memory to write to or hdd space and crashes, and considering exploerer is tangled with everything you can understand how its soo fragile.Pierce<{POST_SNAPBACK}>thanks guys ive just looked in my task managerand i have it as wellso i will follow those in striuctionstho my task list programs appli says it isnt a high priority.but like you i worry marty Quote Link to post Share on other sites
Dragon Posted July 11, 2005 Report Share Posted July 11, 2005 First off, just so you know, once a Harddrive starts getting to the point of almost being full you will run into these issues. the reason is because anytime you are browsing your drives, or if you have to send a Dr Watson report, it uses more disk space to temporarily store the information in part of your hard drive called a swap file, even thought it doesn't show up as a standard partition on your partition manager it is still there.Explorer restarting is typical, it runs out of memory to write to or hdd space and crashesi would say the answer is listed above. as I stated in my first response, if every program you have on your computer is used either daily or weekly, then it would be a good idea to do one of two things.A.) get a larger Hard drive then 80 gigs, I know you can pick up a 160 gig hard drive for around $80 USD.B.)install a second hard drive for storage purposes, this is a fairly simple task and you would be able to use a second 80 gig hard drive for this purpose. or even a 40 gig what ever your budget can handle. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.