Go Back   Cyber Tech Help Support Forums > Operating Systems > Older Windows Versions > Windows XP

Notices

Windows XP Problem solving for the Windows XP Operating System

Reply
 
Topic Tools
  #1  
Old August 29th, 2003, 10:08 PM
llrsprince llrsprince is offline
New Member
 
Join Date: Jan 2003
Age: 71
Posts: 13
Advice on windows programs needed

Can anyone tell me if Generic Host for win 32 and svchost are bona fide windows programs please? Thanks!
Reply With Quote
  #2  
Old August 29th, 2003, 10:24 PM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
 
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
Yes they are llrsprince. Have a look here for more information on these processes.

Do you have a problem?
Reply With Quote
  #3  
Old August 29th, 2003, 10:38 PM
tramtwo's Avatar
tramtwo tramtwo is offline
CTH Subscriber
 
Join Date: Sep 2000
Location: N'Awlinz
Age: 56
Posts: 2,421
Yes. oopz the phone rang and I didn't see you there AM.
Reply With Quote
  #4  
Old August 29th, 2003, 10:59 PM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
 
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
LOL..I was hiding tram
Reply With Quote
  #5  
Old August 30th, 2003, 02:35 PM
llrsprince llrsprince is offline
New Member
 
Join Date: Jan 2003
Age: 71
Posts: 13
Re: Advice on windows programs needed

Quote:
Originally Posted by AnnMarie
Yes they are llrsprince. Have a look here for more information on these processes.

Do you have a problem?
Thank you for your reply, I just wanted to be sure because I have had this blaster worm infecting my pc and it's been a game to get rid of it and have become a little paranoid about things now! Zone Alarm keeps alerting me to those two progs accessing the net and wasn't sure about them! Thanks again!
Reply With Quote
  #6  
Old August 31st, 2003, 02:49 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
 
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
You are welcome llrsprince. As long as you have installed all your critical updates and especially this patch, you should be OK.
Reply With Quote
  #7  
Old August 31st, 2003, 09:31 PM
llrsprince llrsprince is offline
New Member
 
Join Date: Jan 2003
Age: 71
Posts: 13
Re: Advice on windows programs needed

Quote:
Originally Posted by AnnMarie
You are welcome llrsprince. As long as you have installed all your critical updates and especially this patch, you should be OK.
Thank you AnnMarie, I downloaded all the patches from Microsoft and have installed that one you sent just to make sure! Lets hope it keeps the same thing from happening again!
Best Regards
Reply With Quote
  #8  
Old September 1st, 2003, 07:25 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
 
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
You should be fine but post back if you have anymore problems.
Reply With Quote
  #9  
Old September 1st, 2003, 06:16 PM
llrsprince llrsprince is offline
New Member
 
Join Date: Jan 2003
Age: 71
Posts: 13
Re: Advice on windows programs needed

Quote:
Originally Posted by AnnMarie
You should be fine but post back if you have anymore problems.
Hello AnnMarie, I wonder if you could check out my start up log and see if I have anything suspicious in there? I'm a not too sure about this one:
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
Many thanks for you help!

Logfile of HijackThis v1.96.4
Scan saved at 13:12:42, on 01/09/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\SAGEM\SAGEM F@st800\DSLMON.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
C:\Program Files\AdsGone\adsgone.exe
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC 2.EXE
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\Documents and Settings\Robert\My Documents\Downloads\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trafficswarm.com/cgi-bin/...002bb1fc5b458b
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cust...//my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/cust...//my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://messenger.msn.com/Help/Upgrades.aspx
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\ycomp5_1_6_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5_1_6_0.dll
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O4 - Startup: AdsGone.lnk = C:\Program Files\AdsGone\adsgone.exe
O4 - Global Startup: AdsGone 2003.lnk = C:\Program Files\AdsGone\adsgone.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st800\DSLMON.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV0 2.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: ZoneAlarm Pro.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...862.1569907407
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yaho...ymmapi_416.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{F1566950-7C7D-424E-A6A5-EFCB3CEDC126}: NameServer = 212.74.112.66 212.74.112.67
Reply With Quote
  #10  
Old September 2nd, 2003, 01:55 AM
AnnMarie's Avatar
AnnMarie AnnMarie is offline
CTH Subscriber
 
Join Date: Oct 2001
O/S: Windows Vista 32-bit
Location: New Zealand
Posts: 59,810
Hi llrsprince - O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize is nothing to worry about but may not be required at startup. The entry is placed in your registry by your nVidia based graphics card. I dont think that you need all of the below entries though. Run Hijack This again and this time, select the below entries and click on Fix Selected. Reboot afterwards.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/cus...rch/search.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cus...://my.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus...rch/search.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/cus...://my.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cus...//www.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cus...//www.yahoo.com

The below entry is optional, it's a reminder to upgrade Messenger

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://messenger.msn.com/Help/Upgrades.aspx


You could trim your startups back a bit if you wanted to via msconfig (Start > Run and type msconfig. Click on the Startup Tab and uncheck unwanted entries) then reboot.

Have a look here for help in deciding whether or not you need a program running at startup.
Reply With Quote
Reply

Bookmarks

Topic Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Topics
Topic Topic Starter Forum Replies Last Post
security programs advice needed jcchev Applications 4 July 16th, 2006 08:48 PM
help, advice needed smithyjim Windows 98 2 May 9th, 2005 06:25 AM
Advice needed.. hypnotizeminds Open Discussion 13 January 3rd, 2005 08:11 AM
Advice needed!!!!!!! henry.medley Applications 1 October 18th, 2004 12:41 PM
Advice needed... Audone MacOS 18 February 13th, 2001 06:16 AM


All times are GMT +1. The time now is 10:05 AM.