Home / Software / Computer viruses and spyware / CA Security Says clean but pc keeps freezing..
0 Members and 2 Guests are viewing this topic. « previous next »
Pages: 1 2 [All] - (Bottom) Print
Author Topic: CA Security Says clean but pc keeps freezing..  (Read 3504 times)
wittymomma
Guest
« on: October 27, 2007, 06:04:24 PM »

Okay SO I update and run my antivirus all the time (every day...) and it is the CA Security Anti Virus program... Yes I paid for it. Just for the jump drive that came with it for free  :P

So this is a Dell... Dimension 5150 Running Windows XP... We just got it about a week ago (the 17th of October to be exact)

Ever since we got it it will freeze if it is not being used...

Example... If we leave it alone for about 15 minutes (havent timed it) we will come back and can move the mouse cursor but nothing else works.. Cant click on anything and cant use the keyboard to access anything. You HAVE to restart it (ctrl, alt & del dont work either)

This happens all the time.. even over night if left on it does it...  Oh and I dont use Norton. But they (Aarons rental place) said if I remove any software it will be a 75.00 charge! which sucks cause I HATE norton and it is VERY annoying and keeps popping up at start up..

So I am asking for help... please...  

here is my Hi Jack log thingy...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:02:15 PM, on 10/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe


*part 2 in next post... *
IP logged
wittymomma
Guest
« Reply #1 on: October 27, 2007, 06:04:40 PM »

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Winzy Assistant - {039AF219-4B6F-4AC6-8763-7BF5BBD481B3} - C:\Program Files\Winzy\Winzy IE Toolbar\winzyietoolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Winzy Toolbar - {5B327C15-C1B7-4d1f-A5B7-A2F5FFDF2881} - C:\Program Files\Winzy\Winzy IE Toolbar\winzyietoolbar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IS CfgWiz] C:\Program Files\Norton Internet Security\cfgwiz.exe /GUID {257BBC47-1B26-432e-9F84-188603799DD3} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RevHDD] C:\WINDOWS\SYSTEM\RevHDD.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://chat2.j2.com/Media/Visitorchat/TLIEFlash.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{040BE378-13EE-4509-8ED8-57765CFD5899}: NameServer = 209.221.54.65 209.221.54.66
O17 - HKLM\System\CS1\Services\Tcpip\..\{040BE378-13EE-4509-8ED8-57765CFD5899}: NameServer = 209.221.54.65 209.221.54.66
O17 - HKLM\System\CS3\Services\Tcpip\..\{040BE378-13EE-4509-8ED8-57765CFD5899}: NameServer = 209.221.54.65 209.221.54.66
O18 - Filter hijack: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

--
End of file - 9678 bytes
IP logged
Broni
Mastermind


Thanked: 610
Posts: 28,751

Computer: Specs
Experience: Experienced
OS: Windows Vista


Kraków my love :)

Computer Help Forum
« Reply #2 on: October 27, 2007, 06:21:21 PM »

Quote
We just got it about a week ago (the 17th of October to be exact)
Why don't you return it?
We may try to fix your problem for now, but what will happen when your warranty expires?
IP logged

wittymomma
Guest
« Reply #3 on: October 27, 2007, 06:32:01 PM »

mainly because I am using it to try and fix my other pc (also on this forum lol) so I dont want to be without it... Once I get my pc fixed I will return it and have them repair it but I cant be without a pc.. we use it for online schooling..

So for now I just want it to stop freezing then I will fix it perm later (well they will...)
IP logged
patio
Moderator
Genius



Thanked: 1069
Posts: 11,354

Experience: Beginner
OS: Windows 7


Maud' Dib

« Reply #4 on: October 28, 2007, 09:42:44 AM »

Anything you may try to resolve the issue may in fact Void your Warranty which is why Broni is being cautious and rightfully so.
A machine that new should not be freezing and it is probably a hardware issue.
IP logged

   
"
All generalizations are false, including this one.  "
cyborg3
Beginner



Posts: 76




« Reply #5 on: October 29, 2007, 10:13:12 AM »

If you are running two anti virus programs at the same time, get rid of one of them.
IP logged
Broni
Mastermind


Thanked: 610
Posts: 28,751

Computer: Specs
Experience: Experienced
OS: Windows Vista


Kraków my love :)

Computer Help Forum
« Reply #6 on: October 29, 2007, 06:37:25 PM »

Quote
If you are running two anti virus programs at the same time, get rid of one of them.
This is NOT the point made in previous posts.
IP logged

CBMatt
Mod & Malware Specialist
Prodigy



Thanked: 160
Posts: 6,033

Experience: Experienced
OS: Windows 7


Sad and lonely...and loving every minute of it.

1
« Reply #7 on: October 30, 2007, 12:53:45 AM »

Anything you may try to resolve the issue may in fact Void your Warranty which is why Broni is being cautious and rightfully so.
A machine that new should not be freezing and it is probably a hardware issue.

I agree.  Try running the computer in Safe Mode for awhile.  Does it still give you problems?
IP logged

Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey

Actually, the name's Chris...
wittymomma
Guest
« Reply #8 on: October 30, 2007, 02:28:46 PM »

Anything you may try to resolve the issue may in fact Void your Warranty which is why Broni is being cautious and rightfully so.
A machine that new should not be freezing and it is probably a hardware issue.

I agree.  Try running the computer in Safe Mode for awhile.  Does it still give you problems?

Okay I ran it all day in safe mode... leaving it alone for about 7 hours which would normally lock up the pc in a heart beat. But it didnt...

Oh and I understand about the warrenty issue. But I am 100% possitive that they arent going to care because if I call them on it they will just reformat the hard drive like they always do. My inlaws screw up their pc about once every 2 weeks and they keep fixing it lol.

And to the pp no there is only 1 antivirus running :-) I am about to say screw the 75 dollars we are planning on keeping this pc so I am real close to deleting out stupid norton LOL
IP logged
Broni
Mastermind


Thanked: 610
Posts: 28,751

Computer: Specs
Experience: Experienced
OS: Windows Vista


Kraków my love :)

Computer Help Forum
« Reply #9 on: October 30, 2007, 05:10:51 PM »

Quote
if I call them on it they will just reformat the hard drive like they always do.
Quote
We just got it about a week ago
As far, as I know, you have 30 days to return your computer, and get a new one.
This is your best option, but if you insist, your computer is bad "just a little bit", go ahead, and try to fix it.
I hope, when 30 days pass, you won't regret your decision. :'(
IP logged

wittymomma
Guest
« Reply #10 on: October 30, 2007, 06:45:24 PM »

Quote
if I call them on it they will just reformat the hard drive like they always do.
Quote
We just got it about a week ago
As far, as I know, you have 30 days to return your computer, and get a new one.
This is your best option, but if you insist, your computer is bad "just a little bit", go ahead, and try to fix it.
I hope, when 30 days pass, you won't regret your decision. :'(

Nope until I am  done paying for it (2 years) they will fix it or replace it if it is not fixable LOL. I just want to try and get it so I can use the dang thing without having to hard boot it everytime I have to fix my kid a sippy cup!
IP logged
Broni
Mastermind


Thanked: 610
Posts: 28,751

Computer: Specs
Experience: Experienced
OS: Windows Vista


Kraków my love :)

Computer Help Forum
« Reply #11 on: October 30, 2007, 07:00:37 PM »

First of all, looking at your HJT log, you're running TWO antivirus programs:

- Norton - C:\Program Files\Common Files\Symantec Shared\ccApp.exe

and

- Etrust - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe

I can see some other bad entries, as well, but start with disabling one AV program.
Then, we'll go from there.

On one condition:
We won't bear any responsibility, if any of our advices will screw your warranty.
IP logged

wittymomma
Guest
« Reply #12 on: October 31, 2007, 06:32:45 AM »

I 100% agree that you guys are NO way responsible for anything I screw up on my pc  lol. even if someone on the internet told me to do so or not LOL.

With all that said... I have dissabled the dumb norton thing about 100 times. it is now removed. It aggravated me to the point it is gone lol. So now there is only the ca one...
IP logged
Broni
Mastermind


Thanked: 610
Posts: 28,751

Computer: Specs
Experience: Experienced
OS: Windows Vista


Kraków my love :)

Computer Help Forum
« Reply #13 on: October 31, 2007, 01:19:09 PM »

I need to see your new HJT log, just to make sure it's gone.
IP logged

patio
Moderator
Genius



Thanked: 1069
Posts: 11,354

Experience: Beginner
OS: Windows 7


Maud' Dib

« Reply #14 on: October 31, 2007, 03:20:13 PM »

Quote
Nope until I am  done paying for it (2 years) they will fix it or replace it if it is not fixable LOL. I just want to try and get it so I can use the dang thing without having to hard boot it everytime I have to fix my kid a sippy cup!

If this is the arrangement you have with them i would just return it and have them take it back to Day One condition with a clean install...
IP logged

   
"
All generalizations are false, including this one.  "
Broni
Mastermind


Thanked: 610
Posts: 28,751

Computer: Specs
Experience: Experienced
OS: Windows Vista


Kraków my love :)

Computer Help Forum
« Reply #15 on: October 31, 2007, 03:28:40 PM »

I totally agree with patio, so I'd rather not proceed here any further.
IP logged

wittymomma
Guest
« Reply #16 on: November 01, 2007, 05:42:41 AM »

Nevermind. I fixed it myself.

Feel free to lock this post and delete it. Sorry for any trouble.
IP logged
JB 007
Guest
« Reply #17 on: November 20, 2007, 11:09:58 AM »

How was it fixed??


JB 8)
IP logged
Pages: 1 2 [All] - (Top) Print 
Home / Software / Computer viruses and spyware / CA Security Says clean but pc keeps freezing.. « previous next »
 


Login with username, password and session length

Old Forum Search | Forum Rules
Copyright © 2010 Computer Hope ® All rights reserved.
Powered by SMF 2.0 RC3 | SMF © 2006–2010, Simple Machines LLC
Page created in 0.161 seconds with 19 queries.