Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Is this a spyware/malware/virus problem? Problem shutting down  (Read 16610 times)

0 Members and 1 Guest are viewing this topic.

Drd

    Topic Starter


    Hopeful

    Thanked: 1
    Hello: I've been having some trouble with my computer recently. Specifically, I use an XP with service pack 2. And I have 9.0.733 version of AVG free. 
     Here is what I've noted:
    1. When the computer does its usual weekly or biweekly scans, it finishes really quickly. It never worked that fast before. And it never finds all those things it used to find, not huge problems but littler issues it used to mention, I don't remember what they call them. Sorry  :-[ Also,l sometimes it comes back saying there was an error when doing the scan but doesnt say what the error is.

    2. Another problem, and this one worries me more, is that for past two days, when I try to shut down, I click the start button on the bottom left of the computer, and then the red "turn off computer" button. Then my cursor turns to that hour glass thing and never brings up the choices of "close stand by reset".  It just stays at the hour glass and either I have to put the button on the computer box itself, hold it in for a few seconds to shut down, or it goes into screen savers and just waits for me.

     Plus, sometimes when I try to sign in, instead of opening up, I get the "task manager" box, which is just locked there and you can't do anything with it. So, I have to reset to get going.

    Are these signs of malware and such? What do you suggest I do now?

    Thanks

    Dr. D.

    evilfantasy

    • Malware Removal Specialist


    • Genius
    • Calm like a bomb
    • Thanked: 493
    • Experience: Experienced
    • OS: Windows 11
    Re: Is this a spyware/malware/virus problem? Problem shutting down
    « Reply #1 on: April 05, 2010, 10:18:05 AM »
    We need the logs to give an educated answer. Anything else would just be speculation. ;)

    Drd

      Topic Starter


      Hopeful

      Thanked: 1
      Re: Is this a spyware/malware/virus problem? Problem shutting down
      « Reply #2 on: April 05, 2010, 03:00:14 PM »
      Thank you Mr. EvilFantasy. I'm glad you are here to help. Can you tell me what logs should I get? Where should I begin?

      Thank you.
      Dr. D.

      Drd

        Topic Starter


        Hopeful

        Thanked: 1
        Re: Is this a spyware/malware/virus problem? Problem shutting down
        « Reply #3 on: April 05, 2010, 05:53:17 PM »
        Hello: Can someone tell me where to start, Please?

        Should I just follow the information in that general post or will someone be guiding me along the way?

        Thanks

        evilfantasy

        • Malware Removal Specialist


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11

        Drd

          Topic Starter


          Hopeful

          Thanked: 1
          Re: Is this a spyware/malware/virus problem? Problem shutting down
          « Reply #5 on: April 05, 2010, 06:12:42 PM »
          OK. I'm on the downloads of the firewall and the CCslim now. I'll get back to you when I have some results. Thanks!

          evilfantasy

          • Malware Removal Specialist


          • Genius
          • Calm like a bomb
          • Thanked: 493
          • Experience: Experienced
          • OS: Windows 11
          Re: Is this a spyware/malware/virus problem? Problem shutting down
          « Reply #6 on: April 05, 2010, 06:13:46 PM »
          Sounds good. I'll be here whenever you get the logs ready. ;)

          Drd

            Topic Starter


            Hopeful

            Thanked: 1
            Re: Is this a spyware/malware/virus problem? Problem shutting down
            « Reply #7 on: April 06, 2010, 01:36:33 AM »
            I did the superantispyware but can't get the logs. Here is what happened. I downloaded it and did the scans. It showed some things, about ten or so,  and it quarantined them and asked me to reboot and I said yes.

             But, you may recall that the whole problem with my computer is in shutting down; so when I clicked reboot, it just stalled and stalled, so I pushed the reset button on my computer box. Then, the computer came back up, I wanted to take the next step:

            "After reboot, double-click the SUPERAntiSpyware icon on your desktop.
            Click Preferences. Click the Statistics/Logs tab."

            I have two superantispyware icons on my desktop. One looks like  a computer, and is labelled superantispyware; the other has the icon of a computer screen with a red slashed circle in it, and is labelled SASdefinitions.  Neither of these opens when I click on them, no matter how much I click. And I tried right clicking on them too, and then clicking the OPEN option, but nothing happens.
              So I don't know what to do next.
             I look forward to your advice.

            Thanks
            DrD


            Drd

              Topic Starter


              Hopeful

              Thanked: 1
              SUPERAntiSpyware Scan Log
              http://www.superantispyware.com

              Generated 04/06/2010 at 03:41 PM

              Application Version : 4.35.1002

              Core Rules Database Version : 4773
              Trace Rules Database Version: 2585

              Scan type       : Complete Scan
              Total Scan Time : 00:44:26

              Memory items scanned      : 530
              Memory threats detected   : 0
              Registry items scanned    : 6420
              Registry threats detected : 0
              File items scanned        : 107703
              File threats detected     : 9

              Adware.Tracking Cookie
                 C:\Documents and Settings\Irani\Cookies\irani@media6degrees[2].txt
                 C:\Documents and Settings\Irani\Cookies\[email protected][2].txt
                 C:\Documents and Settings\Irani\Cookies\irani@realmedia[1].txt
                 C:\Documents and Settings\Irani\Cookies\irani@insightexpressai[1].txt
                 C:\Documents and Settings\Irani\Cookies\irani@statcounter[2].txt
                 C:\Documents and Settings\Irani\Cookies\irani@247realmedia[2].txt
                 C:\Documents and Settings\Irani\Cookies\irani@doubleclick[1].txt
                 C:\Documents and Settings\Irani\Cookies\irani@apmebf[1].txt
                 C:\Documents and Settings\Irani\Cookies\irani@mediaplex[2].txt

              evilfantasy

              • Malware Removal Specialist


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: Is this a spyware/malware/virus problem? Problem shutting down
              « Reply #9 on: April 07, 2010, 09:18:20 AM »
              How about the other scans?

              Drd

                Topic Starter


                Hopeful

                Thanked: 1
                Malwarebytes' Anti-Malware 1.45
                www.malwarebytes.org

                Database version: 3966

                Windows 5.1.2600 Service Pack 2
                Internet Explorer 8.0.6001.18702

                4/7/2010 9:05:20 PM
                mbam-log-2010-04-07 (21-05-20).txt

                Scan type: Quick scan
                Objects scanned: 106697
                Time elapsed: 3 minute(s), 57 second(s)

                Memory Processes Infected: 0
                Memory Modules Infected: 0
                Registry Keys Infected: 0
                Registry Values Infected: 0
                Registry Data Items Infected: 2
                Folders Infected: 0
                Files Infected: 0

                Memory Processes Infected:
                (No malicious items detected)

                Memory Modules Infected:
                (No malicious items detected)

                Registry Keys Infected:
                (No malicious items detected)

                Registry Values Infected:
                (No malicious items detected)

                Registry Data Items Infected:
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

                Folders Infected:
                (No malicious items detected)

                Files Infected:
                (No malicious items detected)

                Drd

                  Topic Starter


                  Hopeful

                  Thanked: 1
                  Re: Is this a spyware/malware/virus problem? Problem shutting down
                  « Reply #11 on: April 09, 2010, 11:59:14 AM »
                  While waiting to hear from you on the MBAM log report, I tried to update my Java.  I get the dialog box, but nothing comes up in it. And I can't cancel the dialog  box. It just sits there. I tried turning off my Windows firewall but that didn't help. Any suggestions on this?
                    I really need to settle this problem because I can't shut my computer down safely.  Yesterday I used the button on the computer to shut it down and when I turned it on, it almost didn't come up. the power turned on but the screen stayed black and the fan stayed loud. I turned it off again and it came up the second time, but I'm worried that I'm ruining my computer.

                   Also, I had JetAudio on my computer and something strange was happening. When I turned on a piece of music to listen to, the jet audio application could not be accessed to turn it off.  Usually the jet audio application would be minimized in my bottom toolbar and I could access it anytime, like to turn off the music, or lower the sound or whatever. But then from a few days ago, I see that the music just keeps playing and playing and there is no way to stop it (without turnign off the computer which we all know I can't do very easily). So, I deleted Jet Audio, but the music that was playing in it, just keeps on and on!

                  Thanks again and I hope there is someone out there who will help.

                  Dr D

                  evilfantasy

                  • Malware Removal Specialist


                  • Genius
                  • Calm like a bomb
                  • Thanked: 493
                  • Experience: Experienced
                  • OS: Windows 11
                  Re: Is this a spyware/malware/virus problem? Problem shutting down
                  « Reply #12 on: April 09, 2010, 07:58:05 PM »
                  Go ahead and get the HijackThis log so I can see what it shows.

                  Drd

                    Topic Starter


                    Hopeful

                    Thanked: 1
                    Re: Is this a spyware/malware/virus problem? Problem shutting down
                    « Reply #13 on: April 09, 2010, 09:12:40 PM »
                    will do
                    thanks

                    Drd

                      Topic Starter


                      Hopeful

                      Thanked: 1
                      Re: Is this a spyware/malware/virus problem? Problem shutting down: HJT log
                      « Reply #14 on: April 09, 2010, 09:19:25 PM »
                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 7:53:31 AM, on 4/10/2010
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\Program Files\AVG\AVG9\avgchsvx.exe
                      C:\Program Files\AVG\AVG9\avgrsx.exe
                      C:\Program Files\AVG\AVG9\avgcsrvx.exe
                      C:\Program Files\AVG\AVG9\avgwdsvc.exe
                      C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
                      C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
                      C:\Program Files\Java\jre6\bin\jqs.exe
                      C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                      C:\WINDOWS\system32\nvsvc32.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
                      C:\WINDOWS\RTHDCPL.EXE
                      C:\Program Files\XpertVision\TBPanel.exe
                      C:\Program Files\QuickTime\QTTask.exe
                      C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
                      C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
                      C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                      C:\PROGRA~1\AVG\AVG9\avgtray.exe
                      C:\WINDOWS\vsnphv71.exe
                      C:\Program Files\Oracle\Information Rights Management\Desktop\sealmon.exe
                      C:\Program Files\Google\Google Talk\googletalk.exe
                      C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\Quick-Drop.exe
                      C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
                      C:\Program Files\Nero\Nero 7\InCD\InCD.exe
                      C:\Program Files\Common Files\Java\Java Update\jusched.exe
                      C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
                      C:\WINDOWS\system32\RUNDLL32.EXE
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Messenger\msmsgs.exe
                      C:\Program Files\Skype\Phone\Skype.exe
                      C:\Program Files\Salaat Time\SalaatTime.exe
                      C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
                      C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
                      C:\Identity Cloaker\IDC.exe
                      C:\Program Files\AVG\AVG9\avgnsx.exe
                      C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                      C:\Program Files\Common Files\InterVideo\Common\Bin\WinCinemaMgr.exe
                      C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
                      C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
                      C:\Program Files\Slim Multimedia Keyboard\MagicKey.exe
                      C:\Program Files\WinZip\WZQKPICK.EXE
                      C:\Program Files\Slim Multimedia Keyboard\OSD.EXE
                      C:\WINDOWS\explorer.exe
                      C:\Identity Cloaker\plink.exe
                      C:\Program Files\Skype\Plugin Manager\skypePM.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
                      C:\Program Files\Trend Micro\HijackThis\sniper.exe.exe

                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
                      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
                      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                      O4 - HKLM\..\Run: [TBPanel] C:\Program Files\XpertVision\TBPanel.exe /A
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                      O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
                      O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
                      O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
                      O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                      O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
                      O4 - HKLM\..\Run: [SNPHV71] C:\WINDOWS\vsnphv71.exe
                      O4 - HKLM\..\Run: [sealmon.exe] C:\Program Files\Oracle\Information Rights Management\Desktop\sealmon.exe
                      O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
                      O4 - HKLM\..\Run: [Ulead Quick-Drop] "C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 5 Plus\Ulead DVD MovieFactory 5\Quick-Drop.exe" WINDOWCALL
                      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                      O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
                      O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
                      O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                      O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                      O4 - HKCU\..\Run: [SalaatTime] C:\Program Files\Salaat Time\SalaatTime.exe
                      O4 - HKCU\..\Run: [lightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
                      O4 - HKCU\..\Run: [Identity Cloaker] C:\Identity Cloaker\IDC.exe -AutoStart
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\Common Files\InterVideo\Common\Bin\WinCinemaMgr.exe
                      O4 - Global Startup: NCProTray.lnk = ?
                      O4 - Global Startup: Slim Multimedia Keyboard.lnk = C:\Program Files\Slim Multimedia Keyboard\MagicKey.exe
                      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                      O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
                      O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
                      O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
                      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                      O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
                      O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1270841828205
                      O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://taskstream.webex.com/client/T27L/event/ieatgpc.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{AAE8AE96-E412-424E-9926-AF273388C441}: NameServer = 85.15.1.10,85.15.1.12
                      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
                      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
                      O20 - Winlogon Notify: !SASWinLogon - F:\SASWINLO.dll
                      O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
                      O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
                      O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
                      O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                      O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
                      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

                      --
                      End of file - 10801 bytes

                      evilfantasy

                      • Malware Removal Specialist


                      • Genius
                      • Calm like a bomb
                      • Thanked: 493
                      • Experience: Experienced
                      • OS: Windows 11
                      Re: Is this a spyware/malware/virus problem? Problem shutting down
                      « Reply #15 on: April 09, 2010, 09:36:47 PM »
                      I'm not seeing anything to indicate a malware issue.

                      When was the last time you updated Windows?

                      Drd

                        Topic Starter


                        Hopeful

                        Thanked: 1
                        Re: Is this a spyware/malware/virus problem? Problem shutting down
                        « Reply #16 on: April 09, 2010, 09:42:25 PM »
                        I have the Automatic Updates turned on and I just assumed that the computer was doing everything itself.

                         Also, in terms of the original problem, which was that the computer was not shutting down properly, I recently noted that one of the programs I  use to listen to music, a Cowan program called jetAudio, was acting weirdly.  When I turned on the music, usually the program itself would appear minimized at the bottom of the page so I could shut off the music when I wanted. But recently this stopped happening--the program never minimized but the music kept playing! 

                         So I thought that maybe the reason I couldn't shut down was because this program maybe kept on and on, even though it didn't show up in  my "task manager" which made me feel even more suspicious toward it.  Also, I kept looking around and somewhere in the microsoft site I think it was I saw a note that said to disable screen savers.
                          Anyway, I both deleted this jet audio program (wait till my son finds out!) and turned off the screen saver (a Microsoft one), and now I don't have trouble shutting down.

                         I do want to thank you for looking at these logs. If you say there is no malware, then my heart is totally at ease!
                         Thanks and have a great weekend.

                        Dr. D.

                        evilfantasy

                        • Malware Removal Specialist


                        • Genius
                        • Calm like a bomb
                        • Thanked: 493
                        • Experience: Experienced
                        • OS: Windows 11
                        Re: Is this a spyware/malware/virus problem? Problem shutting down
                        « Reply #17 on: April 09, 2010, 09:58:29 PM »
                        You are still using XP SP2 when you should be at SP3 now. SP3 was released a few years ago so not all of the updates are there. You should get SP3.

                        Drd

                          Topic Starter


                          Hopeful

                          Thanked: 1
                          Re: Is this a spyware/malware/virus problem? Problem shutting down
                          « Reply #18 on: April 09, 2010, 10:17:04 PM »
                          OK I will try to do that. Anything else I need to do?

                          Dr. D.

                          evilfantasy

                          • Malware Removal Specialist


                          • Genius
                          • Calm like a bomb
                          • Thanked: 493
                          • Experience: Experienced
                          • OS: Windows 11
                          Re: Is this a spyware/malware/virus problem? Problem shutting down
                          « Reply #19 on: April 10, 2010, 07:02:51 AM »
                          Not that I can see.

                          Drd

                            Topic Starter


                            Hopeful

                            Thanked: 1
                            Re: Is this a spyware/malware/virus problem? Problem shutting down
                            « Reply #20 on: April 10, 2010, 07:05:24 PM »
                            Thanks so much for everything.

                            Dr.D.