• Welcome to Free PC Help, a free PC Help forum to get help with your computer problems.

    Free PC Help is a community that offers free computer help and support for all users, all ages, worldwide.

    In order to start asking questions or contribute on someone else's post you will first need to register. Don't worry - it's quick and easy and once you have registered you will have instant access to the entire forum.

    If you do decide to join the forums you will not have the option to send Private Messages [ PMs ] or add a Signature until you have made 5 posts or more. This is an attempt to try to stop Spammers using the PM system or adding links to their Signature.

XP Startup - Password Screen - Keys/Mouse Pad Not Working

cwaddell27

FPCH Member
Joined
Sep 10, 2008
Location
Geneva, Switzerland/ England
PC Experience
Some Experience
I have an Acer Aspire 5672 with Windows XP Home Edition.
Yesterday I started up my laptop and it did a disk check and found no problems then went to the password screen. Once it got to that screen none of the keys on my laptop worked and neither did my mouse pad so couldn't put the password in. I could only move the cursor with my mouse which plugs into the usb - it is has a fingerprint scanner on the reciever end which was also not working. When I put the cursor over the password box it changed to a hand and I couldn't click in it so still cant put in the password. The mouse also only works if it is plugged in when I turn it on and not if it's plugged in once it gets to the password screen.

During startup I pressed F2 and saw under PhoenixBIOS Setup Utility that Password on Boot was Disabled and Set User Password wasnt able to be clicked on.

I restarted it over 10 times now and have taken out the battery and put it back in, left it overnight and tried again and still no difference. I also did a system restore to 3 days ago when it was working fine but the same thing is still happening.

I did manage to start up in safe mode and once it has started the mouse pad works and I can access everything so cant figure out why it is having problems at the password screen.

I am running all anti-virus programs I have (avg/symantec/avast) and am also defragmenting to see if it'll help. I have just changed the settings so I dont have to enter the password to see if it'll let me in but am still waiting for all scans to finish.

Also during safe mode when I plugged in my flash drive it didn't show up but dont know if that was just because its in safe mode.

Does anyone know what the problem is and how to fix it?
 
W

Wolfeymole

Why are you running multiple anti virus programs?

Uninstall AVG and Norton and just run with Avast.
 

Dalo Harkin

FPCH Member
Joined
May 27, 2008
Location
Stockport near Manchester
PC Experience
Elite PC Guru
Seeing as though it came up with check disk then chances are the PC didnt shut down properly or the OS detected an error with the HDD - as you are saying that system restores dont work and neither do the mouse or Keyboard - these are drivers that load with Windows - the HDD is either on the way out or the OS is corrupt.
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Location
Canada
During startup I pressed F2 and saw under PhoenixBIOS Setup Utility that Password on Boot was Disabled and Set User Password wasnt able to be clicked on.
Those passwords preclude XP and have nothing to do with the log in password.
 

Goku

FPCH Long Term Member
Joined
Jun 6, 2008
Location
India
Seth said:
Those passwords preclude XP and have nothing to do with the log in password.
Hello and Welcome to Free PC Help Wad. :)

I completely agree with Seth on this. Do not enable / disable those settings to attempt to correct your problem. It may result in you being locked out of your own problem.

As for your problem, it is very strange. Why did the disk check run automatically on boot? Had you scheduled it for next boot? If not, then was the computer improperly shut down?

For the symptoms you are mentioning, I would blame them on a corruption in the registry, user account or the operating system itself. Also, like Dalo already suspects, it might be that the hard drive might be dying.

Please answer the above questions so we may advise you accordingly.

-- Goku
 

cwaddell27

FPCH Member
Joined
Sep 10, 2008
Location
Geneva, Switzerland/ England
PC Experience
Some Experience
My laptop didnt have any problems shutting down before it had the disk check, and it hadnt been scheduled. My parents went into a computer shop to see if they could take a look at it but arent able to yet but said it might be a problem with the mouse driver and that I should try to uninstall it. I tried to uninstall something earlier in safe mode and it doesnt uninstall so does anyone know how I can remove it in safe mode?

Also tried removing the password in safe mode so I dont have to type it in but it didnt work either - the screen now only says welcome in the center and doesnt show my user icon or the shut down button so will try and put it back on.

I dont think there is a problem with the hard drive because I can still access all of my files in safe mode.

After restarting again the disk check came up again and said:

volume serial number is 320-180E
windows is verifying files and folders...
\documents and settings/ christopher waddell\local settings\application data\microsoft\credentials\5-1-5-21-631266650-4171102236-2605988554-1006\credentials first allocation unit is not valid. the entry will be truncated.

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ strtab_eManager.ini first allocation unit is not valid. the entry will be truncated.

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ ACER ELOCK.CHM first allocation unit is not valid. the entry will be truncated.
 

Dalo Harkin

FPCH Member
Joined
May 27, 2008
Location
Stockport near Manchester
PC Experience
Elite PC Guru
My laptop didnt have any problems shutting down before it had the disk check, and it hadnt been scheduled. My parents went into a computer shop to see if they could take a look at it but arent able to yet but said it might be a problem with the mouse driver and that I should try to uninstall it. I tried to uninstall something earlier in safe mode and it doesnt uninstall so does anyone know how I can remove it in safe mode?

Also tried removing the password in safe mode so I dont have to type it in but it didnt work either - the screen now only says welcome in the center and doesnt show my user icon or the shut down button so will try and put it back on.

I dont think there is a problem with the hard drive because I can still access all of my files in safe mode.

After restarting again the disk check came up again and said:

volume serial number is 320-180E
windows is verifying files and folders...
\documents and settings/ christopher waddell\local settings\application data\microsoft\credentials\5-1-5-21-631266650-4171102236-2605988554-1006\credentials first allocation unit is not valid. the entry will be truncated.

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ strtab_eManager.ini first allocation unit is not valid. the entry will be truncated.

\documents and settings\ all users\ application data\ acer\ eManager\__languagefiles\ ACER ELOCK.CHM first allocation unit is not valid. the entry will be truncated.
They seem like your fingerprint scanner drivers :eek:
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Location
Canada
Those errors indicate a corruption in the XP files. Whether or not it's being caused by a failing drive or something else, is yet to be determined.

From the safe mode menu, choose last Known Good Configuration and see if it helps.

If not, i would attempt a system restore from safe mode.
 

cwaddell27

FPCH Member
Joined
Sep 10, 2008
Location
Geneva, Switzerland/ England
PC Experience
Some Experience
Those errors indicate a corruption in the XP files. Whether or not it's being caused by a failing drive or something else, is yet to be determined.

From the safe mode menu, choose last Known Good Configuration and see if it helps.

If not, i would attempt a system restore from safe mode.

I tried system restore and last known good configuration but same thing is still happening. Someone in a computer shop said to uninstall the mouse/fingerprint scanner too but not sure how to do that in safe mode as it wasnt letting me before.
 

Goku

FPCH Long Term Member
Joined
Jun 6, 2008
Location
India
Is USB Legacy Support enabled in the BIOS? If not, then please enable it and see if the Keyboard and Mouse work or not.

-- Goku
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Location
Canada
I tried system restore and last known good configuration but same thing is still happening. Someone in a computer shop said to uninstall the mouse/fingerprint scanner too but not sure how to do that in safe mode as it wasnt letting me before.
Whoever told you that should not be a computer tech.

I'm reviewing the thread...
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Location
Canada
Do the following in Safe Mode With Networking. That instruction is based on your statement that all is fine in Safe Mode. Correct?

Please download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.
  • Doubleclick HJTInstall.exe to install HijackThis.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log by copying and pasting in your next reply.
Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.
Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.
 

cwaddell27

FPCH Member
Joined
Sep 10, 2008
Location
Geneva, Switzerland/ England
PC Experience
Some Experience
Tried restarting in safe mode and now it doesnt seem to be going into it. I pressed f8 - start in safe mode... Then it goes to black screen with white writing which it did before but doesn't seem to be starting up.

All lines start with:
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS\system32\DRIVERS\
then the ends are:

ohcil394.sys
1394BUS.SYS
compbatt.sys
BATTC.SYS
pciide.sys
PCIIDEX.SYS
pcmcia.sys
MountMgr.sys
ftdisk.sys
ACPIEC.sys
OPRGHDLR.SYS
PartMgr.sys
UBHelper.sys
VolSnap.sys
atapi.sys
disk.sys
CLASSPNP.SYS
fltmanager.sys
sr.sys
PXHelp20.sys
Fastfat.sys
KSecDD.sys
NDIS.sys
Mup.sys

this is the second time trying to start it in safe mode again. Only thing I changed earlier was taking password off but it only showed welcome on the screen. managed to get into safe mode again after that but now its not working
 

cwaddell27

FPCH Member
Joined
Sep 10, 2008
Location
Geneva, Switzerland/ England
PC Experience
Some Experience
Do the following in Safe Mode With Networking. That instruction is based on your statement that all is fine in Safe Mode. Correct?


Please download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.
  • Doubleclick HJTInstall.exe to install HijackThis.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log by copying and pasting in your next reply.
Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.
Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.

Got safe mode working but cant find the networking and in network connections it's blank. Also cant get internet connection to work and flash drive didnt work in usb ports - tried in different ones. So cant get the Hijack This folder onto my laptop.
 

cwaddell27

FPCH Member
Joined
Sep 10, 2008
Location
Geneva, Switzerland/ England
PC Experience
Some Experience
Ok got Hijack This working.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:55:29, on 10/09/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Safe mode
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\DigitalPersona\Bin\DPWinLct.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://portal.uwe.ac.uk/proxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Verball] "C:\Program Files\Verball\VerballSkypeApp.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BLUEWIN\QUICKH~1\SMARTB~1\QuickHelpAlert.exe
O4 - HKLM\..\Run: [BLUEWIN_McciTrayApp] C:\Program Files\BLUEWIN\WLAN Assistant\McciTrayApp.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: Quick Help.lnk = C:\Program Files\Bluewin\Quick Help\bin\matcli.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
--
End of file - 14456 bytes
 
W

Wolfeymole

IMPORTANT We notice there are signs of one or more P2P (Person to Person) File Sharing Programs on your computer.

Please note that as long as you are using any form of Peer-to-Peer networking and downloading files from non-documented sources there is a high probability that you will be infested with malware.

Once upon a time, P2P file sharing was fairly safe. That is no longer true. You may continue to use P2P sharing at your own risk; however, please keep in mind that this practice may be the source of your current malware infestation.

References for the risk of these programs can be found in these links:
Malware: Help prevent the Infection
IM And P2P Malware Threats Nearly Triple - Technology News by TechWeb
How to Prevent Online Invation of Spyware, Adware and Malware

We would recommend that you uninstall these P2P programs, however that choice is up to you. If you choose to remove these programs, you can do so in the Control Panel via Add/Remove Programs. If you have Vista it's Programs and Features.

However in order for us to provide future assistance on this matter you must remove the P2P first as it would be fruitless to continue unless the possible cause is ruled out first and to prevent future infestations.
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Location
Canada
The log shows quite a number of problems.

Are you willing to take the time to pursue this?
 
Top Bottom