[billinrhodes]

Help please...Hi, I am a newbie here. I am not real swift with this computer stuff and I am 61 yrs old and sometime may not know what you are talking about. My computer gives me an error message that says......This program has performed an illegal action and will be terminated. The computer will do nothing when this happens..keyboard dead, mouse dead. I have to use power button on tower. It does this mostly when I am running a screensaver and I go to use it a second time. If I am running it manually or setting it up. It will do it with several different screensavers from different scources. It usually is the Aquarium screensavers with all the very good graphics. They are screensavers I have downloaded and paid for the full program. Like I say, I can run them once and want to go back to desktop properties screen and change some settings thats when it happens. When I open properties and click on screensaver.....thats when I does it. Thanks, Bill

[Advertisements]

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[Smokey]

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[billinrhodes]

Logfile of HijackThis v1.97.7
Scan saved at 2:40:23 PM, on 3/13/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.00 (5.00.2614.3500)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLLhttp://www.geekstogo.com/forum/index.php?showtopic=575&view=getnewpost
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\BUYPIN SOFTWARE\ADVERTISING KILLER\AKILLER.EXE
C:\PROGRAM FILES\SIBER SYSTEMS\AI ROBOFORM\ROBOTASKBARICON.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOTDD01.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOHMR08.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOEVM08.EXE
C:\WINDOWS\SYSTEM\HPZIPM12.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\DIGITAL IMAGING\BIN\HPOSTS08.EXE
C:\PROGRAM FILES\SPYWAREBLASTER\SPYWAREBLASTER.EXE
C:\WMCONNECTA\WWM.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mailaka.net/portal/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchalot.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.searchalot.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: 12.108.162.119 www.penny-arcade.com ##
O1 - Hosts: 12.96.161.183 www.guru3d.com ##
O1 - Hosts: 128.11.45.131 www.hotfiles.com ##
O1 - Hosts: 129.42.16.99 www.ibm.com ##
O1 - Hosts: 137.82.195.9 careerowl.ca ##
O1 - Hosts: 139.95.253.1 www.amd.com ##
O1 - Hosts: 143.166.82.178 www.dell.com ##
O1 - Hosts: 159.33.1.85 cbc.ca ##
O1 - Hosts: 166.70.10.23 www.computerhope.com ##
O1 - Hosts: 166.90.143.6 www.3dfx.com ##
O1 - Hosts: 192.102.198.160 www.intel.com ##
O1 - Hosts: 192.151.52.13 www.hp.com ##
O1 - Hosts: 192.18.97.241 www.sun.com ##
O1 - Hosts: 192.216.191.42 www.acer.com ##
O1 - Hosts: 192.41.18.142 www.savagenews.com ##
O1 - Hosts: 193.125.199.4 www.icqplus.org ##
O1 - Hosts: 195.112.52.247 www.register.co.uk ##
O1 - Hosts: 195.224.197.67 www.q3f.com ##
O1 - Hosts: 195.97.246.136 www.1001icqskins.com ##
O1 - Hosts: 198.186.203.44 miranda-icq.sourceforge.net ##
O1 - Hosts: 198.235.69.50 www.expressvu.com ##
O1 - Hosts: 199.105.102.131 www.happypuppy.com ##
O1 - Hosts: 202.139.235.147 netkills.qgl.org ##
O1 - Hosts: 204.180.41.10 www.reactorcritical.com ##
O1 - Hosts: 204.187.152.33 www.canada.com ##
O1 - Hosts: 204.50.136.43 www.matrox.com ##
O1 - Hosts: 204.71.200.75 www.yahoo.com ##
O1 - Hosts: 205.181.112.65 www.zdnet.com ##
O1 - Hosts: 205.181.128.80 www.geek.com ##
O1 - Hosts: 205.188.137.185 members.aol.com ##
O1 - Hosts: 205.188.160.121 www.aol.com ##
O1 - Hosts: 205.188.245.120 www.winamp.com ##
O1 - Hosts: 205.188.247.66 www.netscape.com ##
O1 - Hosts: 205.214.169.2 www.acerlabs.com ##
O1 - Hosts: 205.229.72.80 www.hothardware.com ##
O1 - Hosts: 205.252.89.157 www.deskmod.com ##
O1 - Hosts: 206.132.131.50 www.gamespot.com ##
O1 - Hosts: 206.132.163.111 www.nbc.com ##
O1 - Hosts: 206.161.202.96 www.skinz.org ##
O1 - Hosts: 206.253.217.38 www.metacrawler.com ##
O1 - Hosts: 206.253.222.67 www.2cooltek.com ##
O1 - Hosts: 206.47.148.163 www.pccanada.com ##
O1 - Hosts: 206.96.221.169 www.hardocp.com ##
O1 - Hosts: 207.0.114.195 www.tabworldonline.com ##
O1 - Hosts: 207.115.70.83 www.3dspotlight.net ##
O1 - Hosts: 207.153.102.7 www.3dchipset.com ##
O1 - Hosts: 207.153.207.173 www.tech-junkie.com ##
O1 - Hosts: 207.167.207.71 www.ati.com ##
O1 - Hosts: 207.168.8.2 www.onsale.com ##
O1 - Hosts: 207.168.8.2 www.egghead.com ##
O1 - Hosts: 207.170.251.31 www.tweaktown.com ##
O1 - Hosts: 207.188.7.125 www.real.com ##
O1 - Hosts: 207.199.1.102 www.planethalflife.com ##
O1 - Hosts: 207.199.1.103 www.planetquake.com ##
O1 - Hosts: 207.199.1.105 www.gamespy.com ##
O1 - Hosts: 207.199.1.110 www.planetblood.com ##
O1 - Hosts: 207.199.1.118 www.3dactionplanet.com ##
O1 - Hosts: 207.199.1.121 www.planetdiablo.com ##
O1 - Hosts: 207.199.1.129 www.planetunreal.com ##
O1 - Hosts: 207.199.1.147 www.planetdreamcast.com ##
O1 - Hosts: 207.199.1.201 www.fileplanet.com ##
O1 - Hosts: 207.228.228.14 www.98lite.net ##
O1 - Hosts: 207.46.197.102 www.microsoft.com ##
O1 - Hosts: 207.68.172.254 www.msn.com ##
O1 - Hosts: 207.88.208.225 WWW.logitech.com ##
O1 - Hosts: 208.185.132.200 www.be.com ##
O1 - Hosts: 208.185.239.10 sdnews.net ##
O1 - Hosts: 208.185.239.10 sdn.fgnetwork.com ##
O1 - Hosts: 208.228.126.53 www.express.com ##
O1 - Hosts: 208.249.124.215 www.overclockers.com ##
O1 - Hosts: 208.47.252.43 www.bootdisk.com ##
O1 - Hosts: 208.51.196.21 www.customize.org ##
O1 - Hosts: 209.10.46.171 www.diamondmm.com ##
O1 - Hosts: 209.116.0.210 www.litestep.net ##
O1 - Hosts: 209.137.157.25 www.canon.com ##
O1 - Hosts: 209.197.121.2 www.tomshardware.com ##
O1 - Hosts: 209.207.250.33 www.somethingawful.com ##
O1 - Hosts: 209.213.198.80 www.nvidia.com ##
O1 - Hosts: 209.226.137.53 www.qnx.com ##
O1 - Hosts: 209.247.194.100 babelfish.altavista.digital.com ##
O1 - Hosts: 209.249.164.210 gxs.n3.net ##
O1 - Hosts: 209.249.33.4 www.msicomputer.com ##
O1 - Hosts: 209.43.76.142 www.ixbt-labs.com ##
O1 - Hosts: 209.66.74.94 www.techbargains.com ##
O1 - Hosts: 209.67.181.21 www.buy.com ##
O1 - Hosts: 209.68.32.183 www.storagereview.com ##
O1 - Hosts: 209.68.58.104 motherboards.org ##
O1 - Hosts: 209.73.164.92 www.altavista.com ##
O1 - Hosts: 209.87.55.145 www.a-power.com ##
O1 - Hosts: 212.227.109.34 www.urban-terror.net ##
O1 - Hosts: 212.35.226.50 www.eurogamer.net ##
O1 - Hosts: 213.207.14.141 zoiah.m3dzone.com ##
O1 - Hosts: 216.105.162.18 www.voodooextreme.com ##
O1 - Hosts: 216.15.188.70 www.3dgpu.com ##
O1 - Hosts: 216.151.100.102 www.anandtech.com ##
O1 - Hosts: 216.165.161.17 www.theonion.com ##
O1 - Hosts: 216.167.19.67 www.3dhardware.net ##
O1 - Hosts: 216.18.6.150 www.chalk.com ##
O1 - Hosts: 216.200.159.128 www.asus.com ##
O1 - Hosts: 216.200.247.132 www.cnet.com ##
O1 - Hosts: 216.200.57.12 www.firingsquad.com ##
O2 - BHO: (no name) - {004A5840-FF59-11d2-B50D-0090271D3FD4} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: (no name) - {C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} - C:\PROGRAM FILES\NAVEXCEL\NAVHELPER\V2.0.4\NHELPER.DLL
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
O4 - HKCU\..\Run: [AKiller] "C:\PROGRAM FILES\BUYPIN SOFTWARE\ADVERTISING KILLER\AKILLER.EXE"
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: hpoddt01.exe.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - Startup: hp psc 1000 series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
O4 - Startup: Wal-Mart Connect Tray Icon.lnk = C:\wmconnecta\wmtray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to White List - C:\PROGRAM FILES\ADVANCED SEARCHBAR\addtolist.js
O8 - Extra context menu item: Delete from White List - C:\PROGRAM FILES\ADVANCED SEARCHBAR\delfromlist.js
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Searchalot (HKCU)
O9 - Extra button: Downloads (HKCU)
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...B?1077988924800
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...swflash5r42.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yaho...talls/yinst.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installen...gine/isetup.cab
O16 - DPF: {79B96C72-C0D0-4DC8-BC7E-9F314A918228} - http://ak.imgfarm.co...etup1.0.0.7.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg...ntrol_v1-32.cab
O16 - DPF: {4855C21B-E452-4661-A702-ED3493CE74DF} - http://sp.ask.com/do...askbar-inst.cab
O16 - DPF: {DBAE7000-01EC-4162-8FEB-8A27AC937CA0} (HDPluginCtrl Class) - http://webpdp.gator....ndle43v2d12.cab