1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

system activity

Discussion in 'Hardware' started by seahawk, Apr 10, 2004.

Thread Status:
Not open for further replies.
  1. seahawk

    seahawk Thread Starter

    Apr 9, 2004
    Since running Windows XP I have experienced system activity on my machine. The yellow light on my case resembles a heartbeat and some of the time an annoying round disc accompanies my curser that when active follows in time with the light. There appears to be no activity through my cable router. I disabled temporarily all my start-up programs in ms-config to find a cause. I have Si Meter running and it shows blips of processor activity. It is becoming like fingernails over a chalkboard. From Belarc Advisor:

    Operating System System Model
    Windows XP Home Edition Service Pack 1 (build 2600) VIA Technologies, Inc. VT8367-8235
    Processor a Main Circuit Board b
    2.00 gigahertz AMD Athlon XP
    128 kilobyte primary memory cache
    256 kilobyte secondary memory cache Board: VT8367-8235
    Bus Clock: 133 megahertz
    BIOS: Phoenix Technologies, LTD 6.00 PG 06/18/2003
    Drives Memory Modules c,d
    61.48 Gigabytes Usable Hard Drive Capacity
    56.61 Gigabytes Hard Drive Free Space

    AOPEN DVD1648/AAP [CD-ROM drive]
    ATAPI CDRW 52X32 [CD-ROM drive]
    3.5" format removeable media [Floppy drive]

    HDS722580VLAT20 [Hard drive] (61.49 GB) -- drive 0, s/n xxxxxxxxxxxxxxxx rev V32OA60A, SMART Status: Healthy
    IOMEGA ZIP 100 [Hard drive] -- drive 1 512 Megabytes Installed Memory

    Slot 'A0' has 256 MB
    Slot 'A1' has 256 MB
    Slot 'A2' is Empty
    Local Drive Volumes

    c: (on drive 0) 61.48 GB 56.61 GB free

    Network Drives

    Users Printers
    local user accounts last logon
    Owner 4/10/2004 6:56:48 PM (admin)
    local system accounts
    Administrator never (admin)
    Guest never
    HelpAssistant never
    SUPPORT_388945a0 never

    Marks a disabled account; Marks a locked account APOLLO P2500/2600 Series on USB001

    Controllers Display
    Standard floppy disk controller
    Primary IDE Channel [Controller]
    Secondary IDE Channel [Controller]
    VIA Bus Master IDE Controller NVIDIA GeForce4 MX 440 with AGP8X [Display adapter]
    CTX 16.3 [Monitor] (16.3"vis)
    Default Monitor
    Bus Adapters Multimedia
    Standard Enhanced PCI to USB Host Controller
    VIA Rev 5 or later USB Universal Host Controller
    VIA Rev 5 or later USB Universal Host Controller
    VIA Rev 5 or later USB Universal Host Controller Unimodem Full-Duplex Audio Device
    Vinyl AC'97 Codec Combo Driver (WDM)
    Communications Other Devices
    HSP56 MR [Modem]
    1394 Net Adapter
    VIA Rhine II Fast Ethernet Adapter
    Network Card MAC Address: xxxxxxxxxxxxx
    Network IP Address: xxxxxxxxxxxxxxx NEC OHCI Compliant IEEE 1394 Host Controller
    Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
    PS/2 Compatible Mouse
    USB Root Hub
    USB Root Hub
    USB Root Hub
    USB Root Hub
    Virus Protection
    Norton AntiVirus Version 10.00
    Virus Definitions Version 4/7/2004 Rev 17
    Last Disk Scan on Friday, April 02, 2004 5:10:38 AM
    Realtime File Scanning On

    Installed Microsoft Hotfixes [Back to Top]
    Q832483 on 3/25/2004 (details...)
    DX819696 (details...)
    Internet Explorer
    Q330994 (details...)
    Q832894 (details...)
    SP1 (SP1)
    Windows Media Player
    Q828026 (details...)
    WM817787 (details...)
    WM819639 (details...)
    Q828026 on 3/25/2004 (details...)
    Windows XP
    KB810243 on 3/26/2004 (details...)
    KB817778 on 3/26/2004 (details...)
    Windows XP
    SP2 (continued)
    KB820291 on 3/26/2004 (details...)
    KB821253 on 3/26/2004 (details...)
    KB822603 on 3/26/2004 (details...)
    KB823182 on 3/25/2004 (details...)
    KB824105 on 3/25/2004 (details...)
    KB824141 on 3/25/2004 (details...)
    KB824146 on 3/25/2004 (details...)
    KB825119 on 3/25/2004 (details...)
    KB826939 on 3/25/2004 (details...)
    KB828028 on 3/25/2004 (details...)
    KB828035 on 3/25/2004 (details...)
    Q322011 on 3/26/2004 (details...)
    Q327979 on 3/26/2004 (details...)
    Q814995 on 3/26/2004 (details...)
    Q819696 on 3/25/2004 (details...)

    In addition I have Anti-Keylogger running with Spy-Bot SnD.
    I know of no more to add. Please head me in the right direction.
  2. mobo


    Feb 23, 2003
    First question: Do you have a cdrom in the drive that isn't being used ? If not then lets have a look at startup:
    Download 'Hijack This!'. http://www.tomcoyote.org/hjt/ and save it to a folder on your desktop.
    Unzip, doubleclick HijackThis.exe, and hit "Scan".

    When the scan is finished, the "Scan" button will change into a "Save Log" button.
    Press that, save the log, load it in Notepad, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.
  3. seahawk

    seahawk Thread Starter

    Apr 9, 2004
    I double checked the disk idea and am sure there is nothing there. Below is the scan you requested.
    Logfile of HijackThis v1.97.7
    Scan saved at 2:46:52 PM, on 4/11/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Si Meter\SiMeter.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Ahead\InCD\InCD.exe
    C:\Program Files\Microsoft Works\WksSb.exe
    C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Documents and Settings\Owner\Desktop\UNUSED DESKTOP ICONS\FreeRAM XP Pro 1.40.exe
    C:\Program Files\WinRoll\winroll.exe
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
    C:\Program Files\3M\PSN2Lite\Psn2Lite.exe
    C:\Program Files\PrintKey2000\Printkey2000.exe
    C:\Program Files\A!K Research Labs\NotesHolder\NotesHolder.exe
    C:\Program Files\Microsoft Office\Office\OSA.EXE
    C:\WINDOWS\Screen Scapes Task.exe
    C:\Program Files\Yo!Utilities IIII\YoIIII.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Documents and Settings\Owner\My Documents\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.foxnews.com/
    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Si Meter] C:\Program Files\Si Meter\SiMeter.exe
    O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb02.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
    O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
    O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
    O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
    O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
    O4 - HKCU\..\Run: [Anti-keylogger check] C:\Program Files\Anti-keylogger\AntiKey.exe /checkautorun
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [FreeRAM XP] "C:\Documents and Settings\Owner\Desktop\UNUSED DESKTOP ICONS\FreeRAM XP Pro 1.40.exe" -win
    O4 - HKCU\..\Run: [WinRoll] C:\Program Files\WinRoll\winroll.exe
    O4 - Startup: NotesHolder.lnk = C:\Program Files\A!K Research Labs\NotesHolder\NotesHolder.exe
    O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O4 - Startup: PowerReg SchedulerV2.exe
    O4 - Startup: Screen Scapes Task.lnk = C:\WINDOWS\Screen Scapes Task.exe
    O4 - Startup: Yo!Utilities IIII.lnk = C:\Program Files\Yo!Utilities IIII\YoIIII.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
    O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSN2Lite\Psn2Lite.exe
    O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
    O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
    O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB

  4. mobo


    Feb 23, 2003
    What you can do is look at the cpu time in task manager and watch for the offending program to initiate the cpu spike and watch the numbers going in sync to it..
  5. seahawk

    seahawk Thread Starter

    Apr 9, 2004
    I feel I have solved the flashing disk issue at my cursor. There was a conflict with Office 97 and word 2000. Since I uninstalled and reinstalled Word 2000 the disk no longer appears on screen. The light still does it's thing but I can live with that since I don't look directly at it. I will keep at it though and see what the cpu is up to.
    Thanks, seahawk
  6. mobo


    Feb 23, 2003
    Thanks for your response as well. First time i have heard of such so thats good info.
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/219164

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice