Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

2O7 or other spyware or ?


  • Please log in to reply

#1
DGS

DGS

    Member

  • Member
  • PipPip
  • 13 posts
7-24-2005
Our Computer information is as follows:
- Compaq Presario SR1230NX
- 512 MB Ram
- 220GHz Processer
- 140 GB Hard Drive
- Windows XP SP2
- SBC Yahoo Dial up ISP 56K (DSL is not available)
- Norton Internet Security 2005 with Firewall & Auto Daily antivirus scan and Auto Updates
In system tray
- Microsoft AntiSpyware with Daily antivirus scan and Auto Updates
In system tray
====================================================
Our computer is running VERY Slow!

It also freezes some programs quite often and we cannot use task manager to stop them.
The Start-Turnoff and Start-Restart options do not work at all (we get a very fast glimpse of
a box when we try to re-boot or turnoff --so fast we cannot read it.
We also have problems of web pages loading very very slowly or not at all. Often they show
a message of cannot find server. Pages with scripts give "do you wish to debug" messages.
Bulletin boards often show gobble-d-gook.
Now my printer is not even "found"!

I suspect perhaps a virus, browser hijacker, spyware or trojan horse.
But I have tried to be very careful and proactive with my protection measures.
I really need some help here. If not spyware, virus etc. Then what?

Any advice or help you can give me would be appreciated.
Thanks in advance.

Sharon

#################################################################################
I tried to follow your instructions - Here are my "results":
#################################################################################

- Cleanup - downloaded file - it found 3914 files and deleted and emptied recycle bin
rebooted ~ ~

- **Ad Aware** uninstalled old and downloaded and installed new - did update and configured as
advised. Ran scan and scan found only 3 entries. Deleted them.
(I usually run 2 or three times a week with weekly updates manually)

- CW Shredder - downloaded - I ran and it found one file which I allowed it to delete
but then it froze....so I don't know if it actually worked.

- **SpyBot Search and Destroy **
Configured to do auto updates in task scheduler and Tea Timer is in System tray
Ran update today (no new updates available)
Ran Scan. Found nothing today.
Set immunize.
Downloaded DSO exploit as well - but I don't know if it is working.
I got some sort of error msg about updates???

- Rogue Suspect files/programs ~ ~ I checked through the lists and didn't find any that I
recognized on the lists.

- Ewido - downloaded and ran complete scan - it found a few files and I set it to "quarantine"


- Trend Housecall - Online Scan - found 1 file (uncleanable) that I have had for about a year -
but I allowed it to be deleted by Housecall.

- PandaActiveScan - Online Scan - downloaded files but when I tried to run a scan - it gave
me an error on page with a yellow "yield"sign with an exclamation point in the gray status
bar at the bottom of the "window page".

- AVG - we already have Norton Antivirus in our Internet Security 2005 Suite


_______________________________________________________
! ! !IMPORTANT NOTE! ! !
_______________________________________________________
- TDS has been discontinued ! ! !
you may want to edit this part of the instructions ! !
========================================================

- Windows Update - We have XP SP2 & auto update is on for Windows update

- Spyguard is installed and set on "Auto" in System Tray

- Spyblaster is installed and I went through all of the steps to "enable" but it freezes when
I try to do an update
===========================

NEW HJT LOG after reboot:
===========================

Logfile of HijackThis v1.99.1
Scan saved at 6:28:08 AM, on 7/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\ps2.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Accessories\Utilities\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Canon\ScanSoft\opware32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\My Downloads\Utilities\Spybot New 2005\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Accessories\Utilities\Microsoft AntiSpyware\gcasDtServ.exe
C:\My Downloads\Utilities\SpywareGuard\sgmain.exe
C:\My Downloads\Utilities\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\My Downloads\Utilities\Hijack This\HijackThis.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...ario&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...ario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_1.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\My Downloads\Utilities\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_1.dll
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Accessories\Utilities\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\Canon\ScanSoft\opware32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\My Downloads\Utilities\Spybot New 2005\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: SpywareGuard.lnk = C:\My Downloads\Utilities\SpywareGuard\sgmain.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: (no name) - {9239E4EC-C9A6-11D2-A844-00C04F68D538} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .MID: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.t...all/xscan60.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} -
O16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1120370489968
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} -
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} (Java Plug-in 1.4.2_03) -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{0CA70DDF-E6DF-4B55-A430-FC5D860A09E4}: NameServer = 151.164.1.8 206.13.28.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{0CA70DDF-E6DF-4B55-A430-FC5D860A09E4}: NameServer = 151.164.1.8 206.13.28.12
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: MpService - Canon Inc. - C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • 0

Advertisements


#2
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
I don't see many bad things in your log, so let's start by giving you a decent TaskManager.

Download and install http://www.sysintern...ssExplorer.html

When you run it you will find Options > Replace TaskManager
Put a checkmark before that line.

I would disable either TeaTimer or SpywareGuard AND Microsoft AntiSpyware

One of these three is more then enough and since they work very similar they might conflict.

Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:

O9 - Extra button: (no name) - {9239E4EC-C9A6-11D2-A844-00C04F68D538} - (no file)

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} -
O16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) -
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) -

O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} -
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} -

Then reboot.

If you still have problems download and run:
http://www.sysintern...itRevealer.html

Post the log it makes.

Regards,
  • 0

#3
DGS

DGS

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Metallica,
Thank you for your review of our situation.

I am logging the results from your suggestions:

1 -
I have downloaded and attempted to install Process Explorer as you advised.
I got the following error message at the very beginning when I first began the install process:
=========================================
Process Explorer Warning
-----------------------------------------
(Yellow Yield Sign with Exclamation point at left of warning box.)
............The version of Dbghelp.dll configured does not support the Microsoft Symbol Server.
............Please download and install the "Microsoft Debugging Tools for Windows" to get a
............version that does.
....Only option available is "OK".
--------------------------------------
I clicked the OK and the task manager installed. I also clicked the Options,
and clicked "replace task manager."

Should I download the Microsoft debugging Tools?

(Debugging scares me because we get these script error messages quite often and "do you wish to debug?"
I usually just say no, and end up rebooting and not using that page.
Please respond to this question?)

2 -
I have disabled TeaTimer AND Microsoft AntiSpyware

3 -
I have checkedmarked and allowed HiJackthis to Fix the 8 entries you suggested.

4 -
Then I clicked Start and Restart.

===========
RESULTS: after above
===========
It still took about 4 minutes to shutdown and the box I mentioned before flashed very quickly.

I do notice a significant difference in the speed of the webpages loading.
Also, I tried MS WOrd and it shows a little better performance.
MS Photo editor is still very touchy as is Windows Explorer and Outlook.

So I downlowded RootkitRevealer and ran a scan - Here are the results of that scan:
-------------------------------------
HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 7/25/2005 8:32 PM 80 bytes Data mismatch between Windows API and raw hive data.
C:\System Volume Information\catalog.wci\00010003.ci 7/25/2005 8:42 PM 12.00 KB Hidden from Windows API.
C:\System Volume Information\catalog.wci\00010003.dir 7/25/2005 8:42 PM 376 bytes Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffc.000 7/25/2005 8:42 PM 240 bytes Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffc.001 7/25/2005 8:42 PM 768.00 KB Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffc.002 7/25/2005 8:42 PM 768.00 KB Hidden from Windows API.
C:\System Volume Information\catalog.wci\CiFLfffd.000 7/25/2005 8:22 PM 240 bytes Visible in Windows API, but not in MFT or directory index.
C:\System Volume Information\catalog.wci\CiFLfffd.001 7/25/2005 8:22 PM 768.00 KB Visible in Windows API, but not in MFT or directory index.
C:\System Volume Information\catalog.wci\CiFLfffd.002 7/25/2005 8:22 PM 768.00 KB Visible in Windows API, but not in MFT or directory index.
--------------------------------------

What do these entries mean?

Do you have any more advice? There is definitely something hanging up at shutdown/or restart.

If this is not spyware or security related, can you please move my post to the appropriate forum?

I really appreciate the time you have spent helping me.
Thank you in advance for any further help you can give.

Thanks
Sharon
  • 0

#4
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Hi Sharon,

Let's tackle these one by one and see what does the trick.

Yes, please install the debugger from here:
http://www.microsoft...installx86.mspx

To get rid of the error messages: http://www.pcmag.com...,1566840,00.asp

To turn off such notifications, select Internet Options from the Tools menu and click on the Advanced tab. Make sure the box Disable script debugging is checked. Find Display a notification about every script error and make sure it is not checked. Then click on OK.


Regards,
  • 0

#5
DGS

DGS

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Okay,

Thank you for tackling things "one at a time" - that makes a lot of sense.


I "unchecked" BOTH:
Disable Script debugging (Internet Explorer)
and
Disable Script debugging (Other)
as well as
Display a notification about every script error

I downloaded and installed the debugger as advised.
Then I rebooted.

Box still shows up (very fast flash) at shutdown.
Shutdown still takes about 4 - 5 minutes.
I didn't try anything else because download of file took 4 hours.

What should we do next?

Sharon
  • 0

#6
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
OK Next step is to see if your computer can identify and skip the missing file itself.

Click Start > Run > copy &paste this command in the box: Rundll32.exe advapi32.dll,ProcessIdleTasks > OK

Then reboot. The first reboot might be slower since there will be some analysis done during the boot sequence.

So Reboot again once it has gone through all the startups.

Let me know if that cures the "flashing box"

Regards,
  • 0

#7
DGS

DGS

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Okay! At first that seemed to have worked! The box was gone and the system rebooted promptly.
But after 3 reboots, The box returned. I ran the dll again and the box disappeared again.
Why does it keep coming back? I wish I could read it to tell you what it is.


Also--------
I still am unable to print. Error message:
============================
Unable to communicate with the device.
Please start "MPService" from the Services applet in the Control panel.
Then please right-click on the StatusMonitor to Reconnect and try again.
==============================
I was able to print up until the day before I contacted this web forum....
and I haven't knowingly changed anything.
I just thought it had something to do with the spyware problem.

Now when I try to start the MPService it says it is running.
Yesterday, when I tried to start it, it said unable to start MPService.
Should I reinstall my printer from the CD?

Thank you again for sticking with me on this.

Sharon
  • 0

#8
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
The MPService was put there by Canon, so that makes sense.

Reinstalling the printer drivers might help although I would expect XP to have the correct drivers by default.

Click Start > Run type services.msc > OK
In the list of services find:
MpService
Rightclick that line and choose Properties.
On the dependencies tab check the system components the service depends on.
Maybe one of those has gone haywire.

Regards,
  • 0

#9
DGS

DGS

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
I did the services.msc and there are <no dependencies>
Should there be?
When you say "the MPService was put there by Canon, so that makes sense."
Do you mean it makes sense to reinstall the printer from the CD?
I haven't done that yet, because I wasn't entirely sure that the problem was not one of spyware or whatever. So shall I do that at this point?

-----------------------------
The box (at shutdown) flashed and hung just long enough this afternoon for me to see the name of the "program" is CCApp. Does that help to know why it slows down the shutdown/restart so much?
--------------------------------------------
When the box doesn't flash, the shutdown/restart is very prompt. when it flashes, the shutdown hangs for several minutes. (3 or 4 easily).
--------------
Waiting for your advice on the next step.
Thanks again
Sharon
  • 0

#10
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
ccApp is a process that belongs to Symantec products.

It may be a good idea to re-install that as well.

Regards,
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP