Please Help!!

[MysticalKnight]

If someone is available to answer a quick question regarding why my computer keeps freezing up when I try to play my audio files, I would greatly appreciate it.

 

[eddie5659]

Hiya

First off, lets try a cleanup:

http://www.piersontech.com/07-CleanHardDrive.htm

Also, what have you got running at startup? Go to Run and type MSINFO32. On the left choose Software Enviroment, then Startup Programs. Copy/paste the list. If you cannot, Actions | Save as Text File, and copy/paste that way.

Regards

eddie

 

[MysticalKnight]

*StateMgr c:\windows\system\restore\statemgr.exe All Users HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
AIM c:\program files\instant messenger\aim.exe -cnetwait.odl MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AIM c:\program files\instant messenger\aim.exe -cnetwait.odl .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Cheyenne Realtime Monitor c:\program files\cheyenne\antivirus\realmon.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Cheyenne Scanning Service c:\program files\cheyenne\antivirus\isrv95.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ConMgr.exe "c:\program files\earthlink 5.0\conmgr.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ExciteMessengerEXE "c:\program files\excite\messenger\em.exe" MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
FreeLane by Excite "c:\program files\freelane client\colibri.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Gator "c:\program files\gator.com\gator\gator.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
icwpcEXE c:\progra~1\imagec~1\icwpc.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
LoadPowerProfile rundll32.exe powrprof.dll,loadcurrentpwrscheme All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
LoadPowerProfile rundll32.exe powrprof.dll,loadcurrentpwrscheme All Users HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
LoadQM loadqm.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Mirabilis ICQ c:\program files\icq\ndetect.exe MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msbb c:\program files\n-case\msbb.exe MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS "c:\program files\messenger\msmsgs.exe" /background MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS c:\program files\messenger\msmsgs.exe /background .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
New.net Startup rundll32 c:\windows\newdot~2.dll,newdotnetstartup All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PCHealth c:\windows\pchealth\support\pchschd.exe -s All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RealJukeboxSystray "c:\program files\real\realjukebox\tsystray.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RealTray c:\program files\real\realplayer\realplay.exe systemboothideplayer All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Reminder c:\program files\microsoft money\system\reminder.exe MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Reminder c:\program files\microsoft money\system\reminder.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SaveNow c:\progra~1\savenow\savenow.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ScanRegistry c:\windows\scanregw.exe /autorun All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SchedulingAgent mstask.exe All Users HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
SystemTray systray.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Taskbar Display Controls rundll deskcp16.dll,quickres_rundllentry MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Taskbar Display Controls rundll deskcp16.dll,quickres_rundllentry .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
TaskMonitor c:\windows\taskmon.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
TimeSink Ad Client "c:\program files\timesink\adgateway\tsadbot.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
UpdateMgr.exe "c:\program files\earthlink 5.0\updatemgr.exe" -/nocm All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WeatherAloud c:\program files\weatheraloud\weatheraloud.exe -auto MICHAEL ANSON HKU\MICHAEL ANSON\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WeatherAloud c:\program files\weatheraloud\weatheraloud.exe -auto .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

I'm not sure if that' what you requested but that is what I got under MSINFO32...Thanks for your assistance

 

[beach51]

Hi MysticalKnight,while your waiting your Eddie to go over this list for you,go to this site and download a free program called Ad-aware5.6.You have some real nasty spyware on your computer,which is probably what is causeing your problem.Download this program but dont run it until Eddie goes over the list with you because some of them take some extra steps to get rid of.

http://www.lavasoftusa.net

Once you download this program also download the lastest signature file and unpack it to the Ad-aware folder.

Let us know when you have that program download.

 

[MysticalKnight]

Ok, I am in the process of downloading the software that you suggested...by the way, what is "spyware"???

 

[beach51]

You can go to this site and read all about spyware,and what it does to your computer here.


www.cexx.org

 

[MysticalKnight]

I just read the information on "spyware" and all I can say is WOW!! My question is how do I keep this type of stuff from infiltrating my computer??? I've already downloaded the software that was suggested, will this help??

 

[beach51]

Ad-aware will remove alot of spyware componnets for you but will not remove some of the real nasty ones,am sure Eddie will explain which ones need to be taken care of first before you run this program.Alot of this spyware comes bundled in with downloads from the internet,just read everything before you download something.Alot of this comes from file sharing programs,like kazza,bearshare,limewire,etc.Plus alot of other programs.Just read everything like i said before you download from the internet.

 

[eddie5659]

Hiya

Lets have a look. It seems to be pretty long, so lets start at the top.

*StateMgr: WinME. Windows default for System Restore. Do NOT disable

AIM: AOL Instant Messager. If connected to the internet, automatically runs up AIM. Convenience more than anything. AIM can be started from Start -> Programs

Cheyenne Realtime Monitor: Is that your AV? I think it is, so keep.

Cheyenne Scanning Service: again, AV

ConMgr.exe: Starts WinFax Pro at startup. Required for Winfax to answer incoming faxes. You decide

ExciteMessengerEXE: not sure, but according to here http://messenger.excite.com/ its not supported anymore. Remove.

FreeLane: Seems to be a free ISP. Is that the one you use to dialup with?

Gator: Spyware. Remove via AddRemove, then, at the end of all this run AddAware

icwpcEXE: not sure, leave till the end.

LoadPowerProfile: keep

LoadQM: Loads the MSN Explorer Query Manager--a waste of resources and bandwidth.

Mirabilis ICQ: ICQ. Optional, but you can start from Programs.

msbb: spyware. Web3000 one. Removing Web3000

Warning: Do not use AD-aware to remove Web3000 without first removing the host software. Web3000 replaces wsock32.dll (C:\Windows\System\Wsock32.dll) and possibly other Windows system files. These will not be restored if AD-aware is used first. By default, users of Windows Millennium, may be protected. Windows Me stores files in protected form. The System File Protection (SFP) prevents a user from installing software that might make the operating system unstable. Go to AddRemove and uninstall. Then, do the MSCONFIG

MSMSGS: MSN Messenger utility starts up automatically every time you start Windows. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs - not required. Need to delete a registy key relating to msmmsge.exe if you disable it.

New.net: Uninstall via AddRemove, then uncheck in MSCONFIG as later. See here: http://www.cexx.org/newnetfix2.htm

PCHealth: This is a part of Windows ME which provides Restore functionality. keep

RealJukeboxSystray: This is the Jukebox counterpart to Real Player. It makes no discernible difference if it is not running.

RealTray: A similar program to Real Jukebox Systray for RealPlayer v7.

Reminder: Used with Microsoft Money. Not needed at Startup.

SaveNow: spyware. http://support.microsoft.com/support/kb/articles/q302/4/63.asp

ScanRegistry: keep

SchedulingAgent: Keep this if Task Scheduler is being used. I not, it can be eliminated.

SystemTray: keep

Taskbar Display Controls: Only appears in MSCONFIG if you have a Display Settings icon in the System Tray allowing resolution changes on the fly. Can also be disabled under Start -> Settings -> Control Panel -> Display -> Settings -> Advanced -> General

TaskMonitor: The Task Monitor the disk-access patterns of programs when they are started and stores this information in log files in the Applog folder. Task Monitor also records the number of times you use a program. The Disk Defragmenter tool uses this information to optimize your hard disk so that programs that you use frequently are loaded faster. Not required - but can be useful

TimeSink Ad Client: spyware. http://www.cexx.org/tsadkill.htm

UpdateMgr.exe: Once a month, your EarthLink 5.0 Update Manager contacts EarthLink's servers to check for software updates. If an update is available for your EarthLink software, Update Manager will inform you and, with your permission, download and install the update. Not required. Can go to http://www.earthlink.net and download the updates manually

WeatherAloud: Not sure, maybe this http://www.nextup.com/WeatherAloud/

Phew!!!, that was fun

Okay, remove all the spware as mentioned. First, use the AddRemove to see if that gets rid of the programs. Then, go to each of the links as they all say about editing different stuff. The main one to worry about is the Web3000 one. Do that one first. Then, when you've done the AddRemove and unchecked the files as I will show in a sec, Run AddAware.

Okay, to remove the ones that you don't want, go to Run and type MSCONFIG. Startup Tab. Uncheck all that you don't want, apply and restart. If you're unsure, do them seperately, but apply and restart after each one.

I'll be here all night if you need more help, as will Beach I assume.

This is a good places to check up on programs:

http://www.suttondesigns.com/EnigmaBrowser/infospyware.html

Regards

eddie

 

[MysticalKnight]

Ok, I've completed the removing process of this problem. I removed the following:
conMgr.exe
excitemessengerExe
Gator
loadqm
Mirabilis ICQ
New.net
Real Jukebox SysTray
Real Tray
Reminder
SaveNow
WeatherAloud
TimSink Ad Client

There are 2 that I'm uncertain about, maybe you can help me with these 2:

msbb/Web3000: I'm not sure how I should remove this one. There is nothing in ADD/REMOVE for it.

FreeLane: You said this was a free ISP and asked whether I used it for dialup. I use AOL to dialup, is this connected to AOL?

What's next?

 

[beach51]

I found this about freelane,have a look.I would remove it from msconfig.



http://www.zdnet.com/products/stories/reviews/0,4161,2616667,00.html

 

[eddie5659]

Okay

The problem with the Web3000 is finding the little blighter that has it in the software. Also, if you remove the Web3000 program that is loaded at startup, this will help.

As a rule, I don't like using AddAware until the program has been found. Have you seen any of your programs at that site I gave you? Here is a list of Web3000 programs:

1st Contact
100 Proof Cocktail Planner
!Glance
Afreet SiteViewer
An Online Secretary
AOL Anti-Timer
Ariadne Browser
Auction Station
Beeline
Bio-Rhythms
Buddy Pad
Calendar+
Calendar+ 2000
CD Extractor
Email Extractor
EpAssist
EZSurfer 2000
eWork S
File & MP3 Renamer
GenoPro
GPL
Gimme IP
HiClock
JSoft Mail
KFK
KFTP
Kmail
Kmp3
Maxiimus
Media Player
My To Do
Netcaptor
NetMonitor
NetSonic
NotePad+
Password Manager
PCDJ
ShellGem
SpyTech
Time Manager
TypeItIn
Validate CC
Web Resume Wizard
Web Word Wrestle
WebSurfAce

As for the msbb, that may just be part of a programs component. You can uncheck that at the end.

FreeLane I'm not sure, as I don't use AOL.

eddie

 

[MysticalKnight]

As of now everything you asked me to remove in MSCONFIG has been removed with an exception of MSBB. What is my next step?

By the way, please apologize to BrianF for me for my inpatience and for sending that other email where I was complaining about not being help.

My initial concern was that my computer would freeze up before I heard from anyone and I was afraid that I would never be able to get the assistance that I needed.

 

[eddie5659]

Thats okay.

If you type MSBB into here, it comes up with Web3000.

http://www.spychecker.com/

Can you not see any of your programs in that list that I gave?

eddie

 

[MysticalKnight]

I don't have any of the programs that you listed....