Hi All :-)

I am still having some problems.  Last month, something slipped in 
under Norton's radar, and I had to have my computer worked 
on.  Supposedly it was restored to factory specs, with the original 
restore disks from the company.  I was thrilled, now I am not so much.

I am running an emachine T2796, with 512 MG RAM and an 2.70 GHz Intel 
Celeron processor.  I am using a legal copy of Windows XP Home, 
version 2002, service pack 2.  My IE, which I use mostly for updates 
and sometimes for school (it has been hanging more lately) is 6.0 
with SP2.  For some reason, I did not get a Big Fix program for 
emachines when the techs set my computer back to factory specs; I am 
asking emachines for another copy.

I have run the memory test suggested in the files, it says my memory 
is fine.  I ran the Startup Control Panel 2.8 by Mike Lin.  The only 
thing I didn't understand is a 
kernelfaultcheck  %systemroot%\system32\dumpprep 0 -k     The rest I 
can tie in to Zone Alarm, Trend Micro, Spy Sweeper, or OmniPage.

Last night I was in the middle of chatting and working away, and got 
another system stop, blue screen with white letters, and had to 
completely power off and back on.  This is the third or fourth time 
this has happened since I got the computer back.  I was not and had 
not been running anything unusual, no new installs of hardware or software.

This time I was smart, and wrote the message down.  It 
read  Cancel_state_in_completed_IRP   Stop: 0x0000000048 
(0x820FDBES)  After I restarted, these were the error codes that were 
sent to Microsoft:  BCCode: 48 BCP1:820FDBE8 BCP2: 00000000 
BCP3:00000000  BCP4:00000000 OSVer:5_1_2600 SP:2_0  Product 768_1

c:\docume~1\Ramseyer\LOCALS~1\Temp\WER66cb.dir00\Mini072206-01.dmp
c:\docume~1\Ramseyer\LoCALS~1\Temp\WER66cb.dir00\sysdata.xml

While doing this, I realized that I had not seen a Windows or 
Microsoft update icon in the tray bar for a while. I have tried many 
times to update with no success.  Microsoft's error messages say it's 
a proxy/firewall problem, and give a few sites to add to the 
exception list on my firewall and to make sure are in the trusted 
zone in IE.  They are in the trusted zone in IE.  I have no idea how 
to set up the exception list on the firewall in Zone Alarm Security 
Suite ( I am using only the firewall portion of that), plus I have 
had ZA completely off while attempting to update without success. ZA 
will also not allow me to add those sites into the site list, it says 
the sites cannot be found.

Here is what Microsoft suggests  (2 error messages)

When accessing the Update site, you receive the 0x80072EE2 or 
0x80072EFD error (Resolution 1)
A misconfigured Proxy/Firewall can cause this problem... Add the 
following urls to the exception list within your Firewall/Proxy
http://*.update.microsoft.com
https://*.update.microsoft.com
http://download.windowsupdate.com

When accessing the Update site, you receive the 0x80072EE2 or 
0x80072EFD error (Resolution 2)
Check trusted sites, clear require verifications, add button to add 
these websites
http://*.update.microsoft.com
https://*.update.microsoft.com
http://download.windowsupdate.com

The homepage for IE is in the registry as 
http://www.emachines.com/     I can not change it or the 
Windows/Microsoft Update through IE.  I found out the homepage was in 
the registry as that when I ran hijack this!

Here is the last hijack this log I ran:
Logfile of HijackThis v1.99.1
Scan saved at 12:33:14 PM, on 7/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\Antivirus\Tmntsrv.exe
C:\Program Files\Trend Micro\Antivirus\tmproxy.exe
C:\Program Files\Trend Micro\Antivirus\pccguide.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Trend Micro\Antivirus\PCClient.exe
C:\Program Files\Trend Micro\Antivirus\TMOAgent.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Caere\OmniPagePro90\opware32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\XNote Stopwatch\xnsw.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Qualcomm\Eudora\Eudora.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Downloads\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
http://www.emachines.com/
O2 - BHO: Adobe PDF Reader Link Helper - 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program 
Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - 
C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} 
- C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend 
Micro\Antivirus\pccguide.exe"
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend 
Micro\Antivirus\PCClient.exe"
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend 
Micro\Antivirus\TMOAgent.exe" /run
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy 
Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone 
Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [OmniPage] "C:\Program 
Files\Caere\OmniPagePro90\opware32.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program 
Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program 
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Copy to Semagic - C:\Program 
Files\Semagic\copy.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - 
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - 
res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - 
res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - 
res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program 
Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Semagic - C:\Program Files\Semagic\link.htm
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - 
C:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - 
{6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} 
- C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - 
C:\PROGRA~1\aim\aim.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} 
- C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - 
{B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} 
- C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} 
- C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} 
- C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - 
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.apollolibrary.com
O15 - Trusted Zone: http://*.apollolibrary.com
O15 - Trusted IP range: 204.202.23.223
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl 
Class) - 
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1151434527062
O16 - DPF: {A82C3A33-5C0E-466C-B020-71585433A7E4} 
(PhxStudent.OeSetup15) - https://mycampus.phoenix.edu/secure/PhxStudent15.CAB
O17 - 
HKLM\System\CCS\Services\Tcpip\..\{BFA3D10B-95AF-41D8-B053-CA6B8329EA3E}: 
NameServer = 207.69.188.187 207.69.188.186
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates 
International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - 
c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro 
Incorporated. - C:\Program Files\Trend Micro\Antivirus\Tmntsrv.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro 
Incorporated. - C:\Program Files\Trend Micro\Antivirus\tmproxy.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - 
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) 
- Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

I can not find it again, but I think I saw something somewhere that 
my Java was corrupted, if that will help any.   I have 1.3.1 and 
1.3.1_02 Java.

I am at a loss.  Up until this virus or whatever struck, this was a 
good machine.  I feel like I need to get some memory and a DVD 
read/writer instead of the DVD reader that it came from. On the other 
hand, I am not where I can spend that money if getting another or 
newer machine will be a better idea.  I can always create a home 
network :-).  I am in school online until February, so any time 
without a computer and/or Internet access needs to be minimal.

At the least I need to be able to get updates easily, and stop IE 
from hanging so much.  I can reach the Windows Marketplace, what 
updates do I need to download and install?  The last time the Control 
Panel says any updates was installed was 6/27/06, before the virus hit.

I really appreciate any assistance.

Thanks
Theresa


>

Gentlemen, I believe we have much to discuss.
(Robert Lansing as Control, the Equalizer, "Trial By Ordeal" )  



------------------------ Yahoo! Groups Sponsor --------------------~--> 
Check out the new improvements in Yahoo! Groups email.
http://us.click.yahoo.com/6pRQfA/fOaOAA/yQLSAA/67folB/TM
--------------------------------------------------------------------~-> 

If you have any questions or problems with any aspect of this site, please feel 
free to contact me directly [EMAIL PROTECTED] Please do not post personal 
issues directly to the group.

To unsubscribe from this list, send an email to [EMAIL PROTECTED]

Thank you for using A-1 Computer Tech 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/A-1-Computer_Tech/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 


Reply via email to