[marlagx]

I downloaded PC tools firewall and PC tools Threatfire which was included. I had a lot of difficulties while downloading with pc freezing up, but at last I got it downloaded. That Generic Process error only popped up once.

[Advertisements]

KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, June 22, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, June 22, 2008 15:49:03
Records in database: 880217
Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes
Scan area My Computer
A:\
C:\
D:\
E:\
F:\
Scan statistics
Files scanned 34808
Threat name 1
Infected objects 2
Suspicious objects 0
Duration of the scan 01:08:09

File name Threat name Threats count
C:\Documents and Settings\Owner\My Documents\My Downloads\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1
C:\Documents and Settings\Owner\My Documents\My Downloads\SmitfraudFix.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1
The selected area was scanned.

[marlagx]

KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, June 22, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, June 22, 2008 15:49:03
Records in database: 880217
Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes
Scan area My Computer
A:\
C:\
D:\
E:\
F:\
Scan statistics
Files scanned 34808
Threat name 1
Infected objects 2
Suspicious objects 0
Duration of the scan 01:08:09

File name Threat name Threats count
C:\Documents and Settings\Owner\My Documents\My Downloads\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1
C:\Documents and Settings\Owner\My Documents\My Downloads\SmitfraudFix.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f 1
The selected area was scanned.

[fenzodahl512]

May I know what's the exact error stated on that "Generic Process"?


Only PCTools firewall is fine..

[marlagx]

Error Signature

Generic Host Process for Windows 32 Services encountered a problem and need to close.
szAppName: svchost.exe szAppVer: 5.1.2600.2180
szModName:adsldpdll szModVer:5.1.2600.2180 offset:0.0.0.0 c 769

C:\DOCUME~1\LOCALS~1\Temp|WER 009c. dir00\svchost.exe.mdmp

C:\DOCUME~1\LOCALS~1\Temp|WER 009c. dir00\appcompat.txt


I copied the error down quickly yesterday, so I hope I copied it correctly. I haven't seen this particular error pop up again. Also I had tried to get into Moxilla firefox, and a virus message popped up but I wasn't able to quaranteen since the popup only allowed me to close out of Moxilla firefox. The popup occurred around three times trying to open Moxilla, so I rebooted and now I don't see the virus popup. It's strange. Anyway, I have been scanning for malware and viruses, but haven't located any yet. I also defragged system, which it was in need of. Would it conflict with my other anti-virus programs if I kept Threat-fire. I don't know which would be the better anti-virus program. Which anti-virus program/programs should I keep? PC is still running very slow and sluggish. I did an analysis only of the registry integrity with the CC Cleaner, looks like there are lots of registry issues going on.

Edited by marlagx, 23 June 2008 - 01:22 PM.

[marlagx]

I uninstalled Avast antivirus, pc was freezing up bad. I'm posting another Hijack this log just in case anything might show up. Thanks



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:01:35 PM, on 6/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ThreatFire\TFService.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\PROGRA~1\MICROI~1\INTERN~1\KEMailKb.EXE
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapp...rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?.home=msgr
R3 - URLSearchHook: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O3 - Toolbar: Yahoo! ¤u¨ã¦C - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [KEMailKb] C:\PROGRA~1\MICROI~1\INTERN~1\KEMailKb.EXE
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe
O24 - Desktop Component 0: (no name) - http://us.f524.mail....e...ead=b&Idx=0

--
End of file - 5638 bytes

[fenzodahl512]

CCleaner is an excellent tool and I used it myself.. However, before you use the Registry Integrity functions, or any other registry cleaner/optimizer programs, please back-up your Registry via ERUNT..

Please navigate below link on how to back-up Registry via ERUNT

http://www.winxptutor.com/regback.htm



Just make sure you back-up your Registry first!! Then tell me more about your computer here after using CCleaner Registry Integrity functions



Regards
fenzodahl512

Edited by fenzodahl512, 24 June 2008 - 12:51 AM.

[marlagx]

Thank you for info. I downloaded and installed erunt. I personally am afraid to fool too much with the registry, but will try to clean up some registry keys if I keep getting errors. Although I don't have a clue which registry keys to clean up. I scanned registry with the CC cleaner and I have multiple missing shared DLL's, unused file extensions, active X and class issues, applications, application paths, installer reference issues, a couple missing startup software, and multiple missing MUI references. What do you suggest, cleaning up all the registry issues, or specific ones, or just leaving well enough alone?

[fenzodahl512]

Thank you for info. I downloaded and installed erunt. I personally am afraid to fool too much with the registry, but will try to clean up some registry keys if I keep getting errors. Although I don't have a clue which registry keys to clean up. I scanned registry with the CC cleaner and I have multiple missing shared DLL's, unused file extensions, active X and class issues, applications, application paths, installer reference issues, a couple missing startup software, and multiple missing MUI references. What do you suggest, cleaning up all the registry issues, or specific ones, or just leaving well enough alone?

Well.. leave the unused file extensions.. You may clean up the others.. Then, tell me about your computer condition

[marlagx]

I cleaned up registry but kept the unused file extensions. Now I get a:
Windows-no disk error
Exception Processing Message
c 0000013 Parameters 75b6bf9c 4 75b6bf9c 75b6b9f


I tried restoring registry but it's still there.

[fenzodahl512]

Please restore your registry now. Please go to C:\WINDOWS\ERDNT or where ever you save the backup registry before and look for the latest date of registry backup that you perform before. Double click on that file and press Ok at prompt.

The ERUNT backup file should look like this:



NEXT


Please navigate below website and do all the suggested step.. Then please report to me back about your computer condition..

http://www.consuming...processing.html

[marlagx]

Sorry I haven't been able to work on my pc or reply in the past few days, been very sick. I've tried to localize this error message ( trying to find out what drive is affected). When I do a scan with SuperAntiSpyware and check for scanning A:\Removable- the error occurs. I tried to change the letter assignments but there isn't any A:\Removable disk in computer-disk management. So I'm stumped on what to do. I'm really nervous about uninstalling any device drivers. I also restored backup but the error still occurs only when I scan for spyware with SuperAntiSpyware

Edited by marlagx, 01 July 2008 - 10:26 AM.

[fenzodahl512]

Sorry I haven't been able to work on my pc or reply in the past few days, been very sick. I've tried to localize this error message ( trying to find out what drive is affected). When I do a scan with SuperAntiSpyware and check for scanning A:\Removable- the error occurs. I tried to change the letter assignments but there isn't any A:\Removable disk in computer-disk management. So I'm stumped on what to do. I'm really nervous about uninstalling any device drivers. I also restored backup but the error still occurs only when I scan for spyware with SuperAntiSpyware

From what I understand, below error only happens when you scan with SUPERAntispyware (SAS) right? It doesn't happen if you do not scan with SAS?

Windows-no disk error
Exception Processing Message
c 0000013 Parameters 75b6bf9c 4 75b6bf9c 75b6b9f

By the way, A:\ drive is usually for floppy disk.. Do you have floppy drive at your computer?

[marlagx]

Yes, I have a floppy disk drive, and yes, error only shows up when I scan with Superantispyware. The error never came up before when I had previously scanned A drive.

[fenzodahl512]

Yes, I have a floppy disk drive, and yes, error only shows up when I scan with Superantispyware. The error never came up before when I had previously scanned A drive.

Sorry to ask you again.. Can you see your floppy drive A:\ drive at My Computer?


Please go to below website.. refer to the step No.3.. Maximize your Disk Management window >> Take a screenshot and attach it here so I can have a look at it..


Thank you

[marlagx]

When I left click on My Computer, 3 1/2 Floppy (A:) is listed under Devices with removable storage. Could you please give me the website link again to take a screenshot? It didn't show up in your reply post. Thank you