1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

[Resolved] mouse freezing

Discussion in 'Virus & Other Malware Removal' started by jm100dm, Feb 10, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. jm100dm

    jm100dm Thread Starter

    Joined:
    May 26, 1999
    Messages:
    994
    I have been having a few problems lately. My mouse freezes often requiring a restart. Yesterday when it froze I had four instances of mmtask running when I hit Alt-ctrl-del. Just now froze when I did that to see what currently is running. Wow I got it back. I ran norton and found nothing . Spybot only finds a few cookies. So I enclosed highjack this list hoping someone might find the cause.

    Second problem may or may not be related. I keep finding my default e-mail and a friends in the blocked senders list.

    Logfile of HijackThis v1.91.2
    Scan saved at 7:21:32 PM, on 2/10/03
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://home.netscape.com/home/winsearch.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.americasbest.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://home.netscape.com/home/winsearch200.html
    O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRAM FILES\FLASHGET\JCCATCH.DLL
    O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
    O4 - HKLM\..\Run: [RegProt] c:\regprot\regprot.exe /start
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [Norton eMail Protect] C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\POProxy.exe
    O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
    O4 - HKCU\..\Run: [3D Clipboard] C:\clipboard viewer 3d\3dClip.exe
    O4 - Startup: Taskmon.lnk = C:\WINDOWS\TASKMON.EXE
    O4 - Startup: CapsLockOff.lnk = C:\unzipped\CapsLockOff1\CapsLockOff.exe
    O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    O8 - Extra context menu item: &2 Customize Menu - res://C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll/ComCustomIEMenu.html
    O8 - Extra context menu item: &7 Fill Forms - res://C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll/ComFillForms.html
    O8 - Extra context menu item: &8 Save Forms - res://C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll/ComSavePass.html
    O8 - Extra context menu item: Download using FlashGet - C:\PROGRAM FILES\FLASHGET\jc_link.htm
    O8 - Extra context menu item: Download All by FlashGet - C:\PROGRAM FILES\FLASHGET\jc_all.htm
    O8 - Extra context menu item: &Check Spelling - res://C:\PROGRAM FILES\IESPELL\IESPELL.DLL/SPELLCHECK.HTM
    O8 - Extra context menu item: &ieSpell Options - res://C:\PROGRAM FILES\IESPELL\IESPELL.DLL/SPELLOPTION.HTM
    O9 - Extra button: Real.com (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
    O9 - Extra button: RF Toolbar (HKLM)
    O9 - Extra 'Tools' menuitem: &9 Robo Toolbar (HKLM)
    O9 - Extra button: Fill Forms (HKLM)
    O9 - Extra 'Tools' menuitem: &7 Fill Forms (HKLM)
    O9 - Extra button: Save (HKLM)
    O9 - Extra 'Tools' menuitem: &8 Save Forms (HKLM)
    O9 - Extra button: FlashGet (HKLM)
    O9 - Extra 'Tools' menuitem: &FlashGet (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O9 - Extra button: ieSpell (HKLM)
    O9 - Extra 'Tools' menuitem: ieSpell (HKLM)
    O9 - Extra 'Tools' menuitem: ieSpell Options (HKLM)
    O9 - Extra button: AIM (HKLM)
    O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {38578BF0-0ABB-11D3-9330-0080C6F796A1} (Create and Print ActiveX Plug-in) - http://www.americangreetings.com/cnp/Install/AxCtp.cab
    O16 - DPF: {0D6451B3-FDDA-11D3-BFEC-00D0B725EB0B} (Yahoo! Vision) - http://download.yahoo.com/dl/fv/yv.cab
    O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.141/code/PWActiveXImgCtl.CAB
    O16 - DPF: {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} (VoilaXctl Class) - http://www.belarc.com/Programs/advisor.exe
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003012801/housecall.antivirus.com/housecall/xscan53.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {5242A5A1-EF1E-11D5-B3EE-0050DAC5EBD0} (printQuick Browser Add In (Ver4)) - http://www.pqpc.com/plugin/axversion/1410/printQuick1410.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) -
    O16 - DPF: {3FC76754-41A5-11D2-9370-00A0C9B1E042} (ColoringCtl Class) - http://www.kiddonet.com/lapware/actmenu/coloring/Coloring.ocx
    O16 - DPF: {0C3F7D74-ADA5-4976-8908-A8189590DAFA} (3DGreetings.com Player 2.0) - http://expressit.broderbund.com/Plugin/3DGreetings/vroom.CAB
    O16 - DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} (Microsoft Office Tools on the Web Control) - http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37641.1581365741
    O16 - DPF: {D6016EE7-A8FF-11D1-B37E-A4759ECD7909} (AxPulse Class) - http://www.pulse3d.com/players/english/PulsePlayerAxWin.cab
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (sys Class) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
    O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
    O18 - Protocol: ebk - {1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06} - C:\WINDOWS\SYSTEM\EBKP.DLL
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    I don't see anything there that you are probably not aware of, having installed it yourself.

    Except perhaps this, do you know what installed it?

    O18 - Protocol: ebk - {1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06} - C:\WINDOWS\SYSTEM\EBKP.DLL

    Have you tried reinstalling your mouse drivers? Sometimes just reseating the plug may help if it has loosened.

    mmtask would be associated with a multimedia program of some kind, possibly a sound file being called.
     
  3. jm100dm

    jm100dm Thread Starter

    Joined:
    May 26, 1999
    Messages:
    994
    Thanks Rog,
    I'll remove with highjackthis and see what happens.
    I was curious about that one but when I looked at the date I thought that it was a needed in windows\system.

    May be part of mailwasher. See attachment.

    Opened it in notepad and this was at the end of the file.

    KERNEL32.DLL ADVAPI32.dll ole32.dll OLEAUT32.dll SHLWAPI.dll USER32.dll LoadLibraryA GetProcAddress RegCloseKey CoTaskMemFree StrCmpNIW CharNextA ~({< Ú     ¨  ¼  Ð  t € ™ ¨ · ã  ó  
     
     %
         ebkp.DLL DllCanUnloadNow DllGetClassObject DllGetVersion DllRegisterServer DllUnregisterServer À Ý=
    I'll remove tomorrow and see if it effects mailwasher.
     

    Attached Files:

  4. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Well you have something called EBK reader there, and that looks like it. Is that E-Books? You may have to reinstall the application if you remove the protocol.

    It doesn't seem very likely it is causing the freeze, I was just wondering about it.

    I would suspect the mouse drivers or hardware itself, or perhaps the video drivers.

    Is it a standard ps/2 mouse or USB? If wireless, maybe a battery problem?
     
  5. jm100dm

    jm100dm Thread Starter

    Joined:
    May 26, 1999
    Messages:
    994
    I have a usb trackball. I'll check further into this after work.
     
  6. jm100dm

    jm100dm Thread Starter

    Joined:
    May 26, 1999
    Messages:
    994
    I put a new ps2 mouse on today and will see if that stops the freezing. My trackball may need replaced. It gets a lot of use and the cord gets pulled from time to time possibly causing mis-communications.

    If it continues I'll check the video display drivers.

    EBKP -- I did have ebook reader installed at one time and I think this was left behind after it was un-installed. I had an empty EBKreader folder and have put it in the recycle bin along with EBKP.DLL. Mail-washer still works fine so I would say it wasn't related to it.

    Thanks for your help.

    Jeff
     
  7. jm100dm

    jm100dm Thread Starter

    Joined:
    May 26, 1999
    Messages:
    994
    Well it looks like it was the USB trackball or drivers for it. A regular mouse has worked fine for two days. I'll still try re-installing the drivers before purchasing a new track ball. I guess you can mark this solved. Thanks Rog.
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Fair enough, will do.
     
  9. jm100dm

    jm100dm Thread Starter

    Joined:
    May 26, 1999
    Messages:
    994
    During the freezing I tried running housecall but had to leave for work before it finished. My wife told me it was frozen in the morning and she had to restart without getting any info from housecall. I found this file while doing a general cleanup in windows\temp. I still have to search through it and see if I can find any obvious problems. House call did find several problem files. Any suggestions will be appreciated.

    Thanks
     

    Attached Files:

  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/118147

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice