[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
hi guys,

once again i need your help. since 2 days ago, my pc takes a lot longer to load everything when i start it. with that i mean in the task bar, the little logos ont he right side take ages to load. now, since 2day my machine doesnt load the norton anti virus and firewall, which sux. i checked with this msconfig thing, and most what is supposed to be launched at windows start is not listed there?? however, it used to be there. also, i turned off the index thing once, but next day i turned it on again. my virus scan ws negative. also, i had a problem with a BAD_POOL_HEADER some days ago. but windows told me what program caused that and i uninstalled it.

i thought it could be my ram, cuz its old and suspect that is screwed up bigtime.

if anymore info is neede, just ask, ill post that.

thx for your help, means alot to me!!



1on1killa

Last edited by [S.P.S]1on1killa (2006-04-25 11:12:24)

Towelly
It's A State Of Mind
+399|7026|Your attic
ermm, hate to sound like an old discarded scratched up record, but anti-virus and spyware checks could be the problem, before you start your PC remove your internet cable and begin your checks
[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
thx man, ill try that out

1on1killa
WarmPudgy
Member
+41|7023|Arkansas
usually its better to disable almost all the programs listed on the startup tab in msconfig
its usually better to leave just the essential items, your AV for example

also, some items that are starting up may be running as a service instead of the regular start up

go to start>run>type in services.msc
and browse thru there for anything that looks suspicious

if theres something on there that doesnt look right, google it and determine if its bad or not
if its bad, right click it and choose properties, and in the startup type select the disabled option

another thing you can do is get Hijack This http://www.majorgeeks.com/download3155.html
do a system scan, this will tell you things that startup that windows will not report

if anything looks suspicious here, google it, then delete it if its bad

let me know what you find
BellusEndus
Make love not war
+59|7059|Edinburg
Have you checked task manager to see if the AV process is running? It could be that the service is starting, its just the GUI thats failing to load. I had that problem once, on random days the GUI for F-Secure wouldn't load, not that I managed to figure it out but since the service was running I just lived with it until a reformat.
[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
hi guys,

thx alot for your support, ill try what u gyus have suggested and then post if it worked or not. i uninstalled my anti virus and firewall and reinstalled it, and now it loads up properly.


1on1killa
WarmPudgy
Member
+41|7023|Arkansas
might i suggest AVG for your AV, its the best ive ever used

http://free.grisoft.com/doc/1
[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
thx warmpudgy, u have been a great help. i used the hijack this programm. ill post my log file below, be nice if u could tell me what excatly isw rong with it. i already deleted two entries from a programm i already uninstalled ages ago (party poker that was). in addition, i deleted "great offers displayer", im not sure bout the two entries above that, they look suspicious to me...

Logfile of HijackThis v1.99.1
Scan saved at 20:08:16, on 26.04.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\MSI\Core Center\CoreCenter.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
C:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis2\kernel.exe
C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis2\sc_watch.exe
C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE
C:\PROGRA~1\T-Online\T-ONLI~1\Notifier\Notifier.exe
C:\WINDOWS\System32\dllhost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programme\Messenger\msmsgs.exe
C:\Dokumente und Einstellungen\Yves und Carsta\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.t-online.de/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Great Offers Displayer - {CE05B815-6F98-4ADD-AEB7-60BB2D4264F1} - c:\WINDOWS\bh.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Programme\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - Global Startup: CoreCenter.lnk = C:\Programme\MSI\Core Center\CoreCenter.exe
O4 - Global Startup: Erinnerungen in Microsoft Works-Kalender.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\Party Poker\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\Party Poker\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Shar … vSniff.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftup … 0514587140
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar … /cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup … 0514569343
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/softwar … launch.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe … loader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{BEA62512-5828-405A-9A51-B72FAF34836E}: NameServer = 217.237.151.33 217.237.149.225
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: T-Online DSL-Manager (TODslService) - T-Systems International GmbH - C:\Programme\T-Online\DSL-Manager\TODslSvc.exe
WarmPudgy
Member
+41|7023|Arkansas
jeez, thats why i like AVG better than anything else
does all the same things as norton, but only loads 3 things instead of like 20
and its free

you have alot of unnecessary programs starting up
half of them seem to be just norton

but nothing really seems to be suspicious, id say your computer is fairly safe
though id recomend you delete some of those start ups for the sake of speeding up performance
(personally, id remove almost all those options, im all about quick startups)

any thing that says file missing, is safe to remove
any thing that says unknow file, is safe as well

if something is not starting up and youd like it to, chances are that if you open up the program and browse around thru their options you'll be able to find an option to add it to the windows start up

if you cant find the option to do so you can simply make a shortcut to the desktop and drag the icon to the start button then maneuver it around to the start up menu

or another way is to create a shortcut to the folder:
C:\Documents and Settings\YOUR USER NAME\Start Menu\Programs\Startup
[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
thx again for your help, im just wondering, i f i turn off alot of the stuff listed above, isnt that gonna affect system stability? also, im not sure if it is a good idea to delete the norton files...lol



thx though for yout time spend on my problems!!!
The Stillhouse Kid
Licensed Televulcanologist
+126|7077|Deep In The South Of Texas

WarmPudgy wrote:

usually its better to disable almost all the programs listed on the startup tab in msconfig
its usually better to leave just the essential items, your AV for example
Here's a link to an excellent guide as to which Windows processes you can disable:

http://majorgeeks.com/page.php?id=12

Also, if you're unsure about a process, Google it(alg.exe for example) and click the result from liutilities.com. They have an extensive list of which processes are necessary and which are nonessential or just plain useless.

[S.P.S]1on1killa wrote:

thx again for your help, im just wondering, i f i turn off alot of the stuff listed above, isnt that gonna affect system stability? also, im not sure if it is a good idea to delete the norton files...lol
Following the guide linked above should be harmless to your system. Much of what is disabled will be processes with possible security holes and stuff that offers little or no benefit but eats up a good bit of memory.

If you're going to get rid of Norton and use other AV and firewall, which is a good idea since Norton is such a resourse hog, then by all means get rid of that junk! The best way to get rid of Norton is to boot into safe mode with F8, disconnect your internet to be safe, and uninstall any Norton software. Then install a good free firewall like Zone Alarm and antivirus like AVG.

Last edited by The Stillhouse Kid (2006-04-26 12:48:41)

[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
any thing that says file missing, is safe to remove
any thing that says unknow file, is safe as well



that means i can delete those?
WarmPudgy
Member
+41|7023|Arkansas
if its an unknown file dont delete the file its self, some programs may need to use it
but in hijack this, just check the box next to it and hit fix, then it will just remove the startup registry for it
the safe thing about hijack is, it makes a backup of everything you do automatically, so if you screw something up you can repair it fairly easily

obviously if it says the file is missing then it means its not there
you can just check its box to remove it from the list
{CN}420
Member
+30|7113
http://www.ewido.com

Great program for getting rid of trojans, adware/spyware/malware.
[S.P.S]1on1killa
Member
+28|7176|Germany, Berlin
i want to thank everyone for their comitment and time spend on helping me out. i uninstalled the entire norton security thing.....time to move on to a better security programm...



1on1killa

Board footer

Privacy Policy - © 2025 Jeff Minard