[mommyoffive]

Okay, I've come to the conclusion that you're all right that I will need a new hard drive soon. I've finally got my computer going the way I want it too......been messing with it for three days now! Anyway, I don't want to waste any more of your time with this. I finally got the Windows Updates going. And so far everything seems to be working pretty well. I ran the eventvwr.msc again, and had NO errors this time!! WOOHOO! I'm posting one more hijack log since my last clean install just to be sure everything looks good to ya'll. I do have a few questions though if you don't mind answering them for me! I would appreciate it very much!

1. I've re-configured my boot sequence so many times doing the installs.....now I don't know what order they should be in? What sequence should my computer boot up in? hard drive first, etc.?

2. Now that I finally got all the windows updates downloaded, I see that there are over 60 updates. Is it a good idea to install all of them, or should I pick and choose? I'm worried, because I did them all last night and when I shut down and restarted my computer, I couldn't get it back up! Which lead me to do yet another clean install this morning!

3. Can anyone suggest a good "free" antivirus program to use? I've used AVGFree on and off and have always had problems with either the resident shield not loading or the antivirus program not loading. I have Spybot S&D already on it, which I've always had good luck with. Any other "clean-up" programs ya'll can suggest?

4. Also, since I have practically NO memory in this computer, someone said something about if you have insufficient memory, you can set your "swapping" something to a different level of memory usage.....or something like that? Anyone have a clue what I'm talking about, and how do I change the setting for that?

I want to try and keep the computer as "clean" as possible now, so I don't have to go through all of this again!! Hopefully, I can get a new computer soon! LOL Thanks so much to everyone that helped me!!

Logfile of HijackThis v1.99.1
Scan saved at 5:31:12 PM, on 6/30/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN\MSNCoreFiles\msn6.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\WINDOWS\SoftwareDistribution\Download\b3ba2a040ecf3ac2cd2da399851bda00\u pdate\update.exe
C:\WINDOWS\System32\dwwin.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1183228420435
O17 - HKLM\System\CCS\Services\Tcpip\..\{98B0EC9D-7C42-421D-BC38-FD2CA30CE723}: NameServer = 68.87.75.194

[Cookiegal]

You need to install all of the updates and as quickly as possible or you will be infected again. You should get SP2 right away. You can set a restore point before installing them.

Get an anti-virus program on board. AVG is good.

I recommend using Ad-Aware, Spybot Search & Destroy and SpywareBlaster as well as AVG Anti-Spyware and you should also get a third party firewall such as Zone Alarm.

[Soundy]

1. Boot sequence isn't generally important to normal operations. If you have the floppy set to boot before the hard drive, and you leave a non-bootable disk in the drive, you'll get an error when you start up the machine, but that's easily cured by ejecting the disk and restarting. Same with a bootable diskette or CD if either drive is listed first, the system will try to boot off that instead of your hard drive, but you'll see right away that it's not starting off the hard drive, and again, all it requires is to eject the offending disk, and restart.

2. Generally, yes, install all the updates. If your drive is corrupting files, or you have bad RAM, then installing anything can lead to those new files being corrupted; if a Windows update is replacing system files, then corrupted replacement files can leave the system non-bootable. But at that point, you have bigger issues in the failing hardware.

3. I personally use Avast! Antivirus Free Home Edition. www.avast.com, very clean and trouble-free (it's likely that your AVG problems were caused by the same disk errors though).

5. Think of a swapfile this way: your hard disk is your fridge, your RAM is your kitchen counter. If you want to prepare dinner on a small counter, you have to be constantly putting one thing away to pull out another as you work; it's time consuming and can lead to a real clutter in the fridge. Adding more RAM is like having a bigger counter space, where you can pull out all your ingredients at once, prepare dinner quickly and efficiently with all your materials close at hand, and then put them all away once you're done.

With that in mind, you can set the system to use a larger swapfile, but in most cases, leaving it as "System managed size" is sufficient. Swapping uses pre-allocated hard disk space as "virtual memory" to temporarily move data through, but hard disk access is over 1000 times slower than RAM access, so while you can work around some memory issues with this, it won't improve your speed at all... in fact, on a smaller drive, the lack of free space can lead to worse fragmentation and poorer performance.

[mommyoffive]

Thanks so much for the information! I have downloaded the Avast Antivirus, Ad-aware 2007, Super Anti-Spyware, and Spybot S&D. I've got almost everything cleaned up on my pc now, except for a couple minor things, which I'm putting in a new thread. Thanks again! This can be considered closed finally. LOL

[mommyoffive]

Some of you have been working with me in another thread for days! I had gotten alot of infection on my computer, which threw it completely out of whack!! Now, it's finally up and running well again, except for this very annoying problem.

When I was finally able to get my Windows Updates to install, I started getting a pop-up that is constant whenever I try to open MSN Explorer. It says the following:

MSN6.exe ~ The procedure entry point onexiv could not be located in the dynamic link library msvcrt.dll.

It's driving me crazy! I did a search for the problem, and it said that it's an old file, but it doesn't tell you how to get rid of it and begin using MSN Explorer again! It even popped up a couple times when I tried to open Spybot S&D.

Also, I have made several attempts to download and install the SP2 for XP Pro, but every time it says it's failed. Any suggestions?

[ozrom1e]

To download HJTsetup.exe from SpyKiller To Download HijackThis go to the following at the File Repository
Click on the link below to Download HijackThis Self Installer:

http://www.thespykiller.co.uk/files/HJTsetup.exe

Save the file to your desktop.
Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\HijackThis.
Continue to click Next in the setup dialog boxes until you get to the Select Additional Tasks dialog.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialog box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
At the top of the Notepad HJT log screen, hit Edit then Select All then click Edit and then click Copy doing that copies the text to the clipboard, you won't see it yet....
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
A security expert with a gold shield to the right of their name should take a look at your log - please be patient.

[mommyoffive]

Okay, here it is.....

Logfile of HijackThis v1.99.1
Scan saved at 7:48:26 AM, on 7/1/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\System32\mdm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/micr...?1183256015449
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1183247278968
O17 - HKLM\System\CCS\Services\Tcpip\..\{98B0EC9D-7C42-421D-BC38-FD2CA30CE723}: NameServer = 68.87.75.194
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

[Blackmirror]

ozrom1e
the thread is here

there is no need for another hjt log as that has been cleared by Cookiegal

http://forums.techguy.org/windows-nt...clue-need.html

[Blackmirror]

What updates did you manage to install

[mommyoffive]

There were about 60 all together. Several Updates for Windows XP, Security Updates for Windows XP, Windows Genuine Advantage Notifications, Windows Installer 3.1, and several Windows XP Hotfixes. It went through the download process for SP2, but then failed before it could install. That happened 3 times.

I have a question too.......once I get SP2 installed, does that automatically install or update MSN Explorer or do I have to install that myself? I really hate not having that program right now. IE is so much slower on my computer.

[Blackmirror]

I dont actually use MSN explorer but i would think any updates will be in the sp2 pack

Where did you try to download from

[mommyoffive]

I originally went to Microsoft Updates, because their icon on my desktop said that the version I have is no longer secure. I also tried to download from Windows Updates.

Any clue on that MSN6.exe popup? I've also been getting "do you wish to debug?" popups since I downloaded Script Debugger. So, I uninstalled it, but I still get them sometimes.

[Blackmirror]

Did you try to download from that link i gave you

http://www.microsoft.com/downloads/d...displaylang=en

[mommyoffive]

Yep, I just tried. While it was extracting files, it gave me this error message and stopped.

Extraction failed ~ File is corrupt. The file it was on when the error popped up was:

I386 Logon

[Blackmirror]

ozrom1e, got a clue lol
as my mind is blank