pc keeps crashing helpppp

[cazzyd]

please help... my pc keeps crashing, mostly just as screensaver is about to start, but it occurs anytime... i installed a desktop theme a while back, it comes on as the computer is booting up, instead of windows 98 theme... I have tried to uninstall it, but it says that there are files lost so cannot delete... I think this is the cause of the pc crashing... i took the screen saver off, to reduce the problem, but it still crashes.... it also crashes alot when im watching flash clips.... any suggestions, im not very technically inclined so simple english please..... many thanx... cazzyd

 

[TonyKlein]

Hi,

Would you do this please?

Go to http://www.spywareinfo.com/downloads.php#startup , and download 'Startuplist'.

Unzip, doubleclick it, and it will generate a text file that will list all running processes, all applications that are loaded automatically when you start Windows, and more.

Go to Edit > select all, copy it and post the contents here.

 

[cazzyd]

i clicked on the link, but unsure what to do next... im sorry, you,ll have to give me step by step instructions...please... thanx!

 

[cazzyd]

ok, i have copied the list, but i dont know how to post it....

 

[TonyKlein]

Go back to the forum thread, and click "Post Reply".

In an empty area click your RIGHT mouse button, and choose 'Paste' from the context menu.

And voila, there's your Startuplist log.

 

[cazzyd]

StartupList report, 18/01/03, 13:29:27
StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST[1]\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v5.00 (5.00.2614.3500)
* Using default options
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\IRMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\FMCTRL.EXE
C:\PROGRAM FILES\A4TECH\KEYBOARD\IKEYMAIN.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INCREDIMAIL\BIN\INCREDIMAIL.EXE
C:\PROGRAM FILES\WILDTANGENT\APPS\GAMECHANNEL.EXE
C:\WINDOWS\WT\UPDATER\WCMDMGR.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\UNZIPPED\STARTUPLIST[1]\STARTUPLIST.EXE

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\WINDOWS\Start Menu\Programs\StartUp]
WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
IrMon = IrMon.exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SystemTray = SysTray.Exe
Q3dctlTray = Fmctrl.EXE
iKeyWorks = C:\PROGRA~1\A4TECH\KEYBOARD\IKEYMAIN.EXE
IncrediMail = C:\PROGRA~1\INCRED~1\bin\IncrediMail.exe /c
wcmdmgr = C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch
WT GameChannel = C:\Program Files\WildTangent\Apps\GameChannel.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

eZstub = C:\WINDOWS\SYSTEM\EZSTUB.EXE /Uninstall2 C:\Program Files\eZula

--------------------------------------------------

C:\WINDOWS\WININIT.INI listing:
(Created 18/1/2003, 10:39:26)

[rename]
NUL=C:\WINDOWS\TEMP\GLB1A2B.EXE

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 8/1/2003, 20:15:48)

[rename]
NUL=C:\WINDOWS\TEMP\GLB1A2B.EXE

--------------------------------------------------

C:\AUTOEXEC.BAT listing:

SET BLASTER=A220 I5 D1 T4
C:\CFG801
C:\DOS801
mode con codepage prepare=((850) C:\WINDOWS\COMMAND\ega.cpi)
mode con codepage select=850
keyb uk,,C:\WINDOWS\COMMAND\keyboard.sys

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Tune-up Application Start.job
Maintenance-Defragment programs.job
Maintenance-ScanDisk.job
Maintenance-Disk cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash5r42.cab

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT45.OCX
CODEBASE = http://fdl.msn.com/public/chat/msnchat45.cab

[PWMediaSendControl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PWACTIVEXIMGCTL.DLL
CODEBASE = http://216.249.24.142/code/PWActiveXImgCtl.CAB

[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37629.2636921296

[WONWebLauncher Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FLIPSI~1.OCX
CODEBASE = http://62.39.141.135/tools/FlipsideWebLauncherControl.cab

[Hi2Lobby Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\HI2LOBBY.OCX
CODEBASE = http://80.253.105.3/lobby/atlclient.cab

--------------------------------------------------
End of report, 5,306 bytes
Report generated in 1.257 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

 

[TonyKlein]

You have some spyware.

Please do this:

Download Spybot - Search & Destroy

It looks for spyware, but also targets dialers, keyloggers, and other nasties, and it's freeware.

After installing, press Online, and search for, put a check mark at, and install all updates.

Next, go to the Settings tab > File Sets, and uncheck 'System Internals' and 'Tracks' .
These aren't needed for our present purpose, and you can always experiment with them later on.

Finally, after closing down Internet Explorer, hit 'Check for Problems', and have SpyBot remove all it finds.

And it would be a good idea to upgrade your version of Internet Explorer.
I recommend <A HREF="http://www.microsoft.com/windows/ie/downloads/recommended/ie55sp2/default.asp?%20FinishURL=%2Fdownloads%2Frelease%2Easp%3Freleaseid<br%20/>%20%3D31770%26area%3Dtop%26ordinal%3D5%26redirect%3Dn<br%20/>o">Internet Explorer 5.5 SP 2 </A>

 

[cazzyd]

ok ive installed spybot, and follwed the procedure, ie, settings tab, filesets and unchecked "system internals" & "tracks". then i closed down explorer nothing happened, no "check for problems message, do i have to restart windows?.. thanx

 

[TonyKlein]

If you don't press "Check for problems" yourself, obviously nothing will happen.

 

[cazzyd]

sorry about that..lol. right it found loads of problems and has fixed them, ive tried to remove the free theme program again, but i got this message... !could not open logfile'C:\Program files\Freetheme\ST4UNST.LOG' and the start up theme is still there.... any ideas?... thanx.. cazzy.d

 

[TonyKlein]

What happens if you simply disable that desktop theme in Display Properties?

 

[cazzyd]

I cant disable it, because its not there. its not a screen saver.... dunno what it is...i,ll try to describe it...... you know when you start your pc, and say for instance, mine is ibm... well i get ibm screen then the free theme comes on....(ALIEN NOW PLAYING ON THIS COMPUTER)thats all it does.... instead of windows 98, then desktop comes on.(my chosen choice of wallpaper)... but my problems started since this was downloaded into the pc......i dont know how to locate the file/program whatever it is.... cazzyd

 

[TonyKlein]

If you can, try installing the theme again (on top of itself)

That should restore the missing files, allowing you to uninstall it the correct way.

 

[cazzyd]

oh now what have i done!!!!!!!thanx i,ll see if i can locate the site that i got it from....ive just pressed something and dunno what ive done...... i have a dr watson icon on my bar that goes across the bottom of the pc screen...NEW PROBLEM I THINK. i was browsing in !MY COMPUTER! looking for the file program to delete free theme off..clicked on c drive, and on one of the boxes that said file0000 pressed dr watson, and now have the icon on the bar.. also all the other boxes have this icon on them where it used to be a windows 98 flag..... what have i done?

 

[TonyKlein]

I can't help but notice notice you seem to panic easily...

Rightclick your DrWatson icon in the System tray.

You ought to see a "close" or "exit" DrWatson option.