HijackThis Scan

lyndal · Trooper Joined: Mar 21, 2004 Posts: 20 Location: Australia

I have my P3 partitioned into XP and Win98. I only use Win98 for access to XP when there are problems. Last week i tried to install upgraded ZoneAlarm but it froze at 14% installation. Since then have managed to remove/delete all related files but now have trouble with most applications. Whatever i am doing, CPU usage goes up to 100%.. sometimes Explorer, sometimes Incredimail, sometime MSNmsgr. Sometimes Google disappears. I'm having a lot of memory problems and have to keep bailing out because everything freezes. I have gone into Win98 and run the HijackThis scan... log below... but it doesn't tell me if it has scanned XP as well as Win98. I couldn't get it to open on XP, had to send it to Win98. How do i get it to scan XP from my Win98 partition?

Logfile of HijackThis v1.97.5
Scan saved at 5:06:33 PM, on 3/21/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\RF WIRELESS MOUSE\RF WIRELESS MOUSE\1.1\MOUSE32A.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\AHEAD\INCD\INCD.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\GSICON.EXE
C:\WINDOWS\SYSTEM\DSLAGENT.EXE
C:\WINDOWS\SYSTEM\ICSMGR.EXE

Mosaic1 · Posted: Sun Mar 21, 2004 2:58 am Post subject:

You can't. It only accesses the Operating System which is running.

If you have a restore point from a date before you tried the failed upgrade try a system Restore.

lyndal · Trooper Joined: Mar 21, 2004 Posts: 20 Location: Australia

Whatever is wrong with my computer also destroyed all restore points before March 17th, which is when the trouble started.

Do you have any idea why HijackThis won't open using XP?

Mosaic1 · Posted: Sun Mar 21, 2004 3:09 am Post subject:

Let's start at the beginning. When did your problems start. Before you tried the Zone Alarm upgrad or after?

Go here and download This little utility and run it. See if you can open Hijackthis now.
http://www.computercops.biz/downloads-file-332.html

The truth is I dont know if this is a virus, spyware or Operating system problem.

100% CPU OSA? Have you tried an Office Repair install?

Mosaic1 · Posted: Sun Mar 21, 2004 3:15 am Post subject:

Also, when you run that you have to be running XP. We can't help if you are running 98. We need you to sign into the problem Operating System. It's late here and I am about to sign off. But either myself or someone else will pick up with you.

lyndal · Trooper Joined: Mar 21, 2004 Posts: 20 Location: Australia

I don't think i explained properly. The problem wasn't extracting the files.. it's opening them after extraction. The "egg timer" shows up as if they are opening but nothing visible ever happens.... even though Task Manager shows that at the moment HijackThis is running at 98% :-S

The problems started after the failed Zone Alarm upgrade.

What is Office Repair install? It's not always OSA.EXE that is 100%... as i said, at the moment it's HijackThis, even though it's obviously doing nothing.

Mosaic1 · Posted: Sun Mar 21, 2004 3:23 am Post subject:

I wasn't speaking of Extracting. There is a ansty which prevents HT and the Shredder from running. This little utility overcomes that. But I see, nothing wants to run right.
What are you running at this moment? 98 or XP?

So it is not Office but the entire Operating System then.

What happens if you boot to XP Safe mode. Can you run Hijackthis? Are things any better there?

Mosaic1 · Posted: Sun Mar 21, 2004 3:25 am Post subject:

I would perform a Repair install. Next question. What kind of a computer is this? And do you have a regular install CD or a restore disk? If a restore disk then your choices are limited. No Repair install.

lyndal · Trooper Joined: Mar 21, 2004 Posts: 20 Location: Australia

I'm running XP (everything works fine on 9 Cool

I haven't tried booting in Safe Mode. I'll try that and then try running HijackThis and CWShredder again. I'll let you guys know what happens...you can be sure of that :-S

Mosaic1 · Posted: Sun Mar 21, 2004 3:38 am Post subject:

Ok Running in Safe Mode less will be loaded. We'll have to see what happens and what else is running. But this may be something only a reinstall can cure. We'll see.

Mosaic1 · Posted: Sun Mar 21, 2004 3:54 am Post subject:

I am going to remove your other post about this same problem. No one has answered it yet. Keep working in this topic until your problem has been resolved.

lyndal · Trooper Joined: Mar 21, 2004 Posts: 20 Location: Australia

Well, i put the XP in safe mode but HijackThis and CWShredder still wouldn't run, either would the mini program i downloaded. While i was at it i ran Spybot Hunter and AVG again, but they found nothing. I am curious about why Task Manager shows HijackThis running at almost 100% when it doesn't even open up.

What else can i try?

Mosaic1 · Posted: Sun Mar 21, 2004 6:51 am Post subject:

That is very odd. To be honest I don't know.

Can you start Notepad from the icon inside the Windows folder? Do your control panel icons work?

Can you start solitaire?

I have a couple scripts and batch files to look at a limited number of startups and the current running processes.

What we need to know is what kind of reinstall you have. A regular install disk or do you use a recovery disk?

Mosaic1 · Posted: Sun Mar 21, 2004 6:54 am Post subject:

Here's a link to the Windows XP exe file association fix. Run it and see if there is any change.

http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

Mosaic1 · Posted: Sun Mar 21, 2004 7:02 am Post subject:

I am attaching a text file.Download and rename it
listprocesspaths.vbs

Double click on listprocesspaths.vbs to run the script. If you have script blocking instale,d youu will get a warning. Allow this to run. It will create and open a text file with a list of all running processes. Copy and paste the contents into your next reply here.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 704 pages served in previous 5 minutes. Page Generation: 1.158 seconds.