Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

HiJackThis log computer slow on start up/shut down

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

HiJackThis log computer slow on start up/shut down

Unread postby EdithB » September 5th, 2006, 3:58 pm

This computer hasn't been on the internet very often. (I plug in a ethernet cord from this computer to the Linksys box every once in awhile to get updates for my AV) Otherwise it sits independantly, not networked in any way to the other computers. We homeschool and it is used for computer school classes and games my kids play.

I want to get it ready to go on the internet regulaly because this year, we need to access the web with one of our school programs. I hadn't dl SP2 for My Windows XP :oops: so I did that first. I updated the AV, windows updates, and got Adaware, Spybot and CCleaner, ran all of them as well as the AV scan.

The computer started having a problem about midyear last year--slow on shutdown because something was still running in the background and always had to be shut down (end task). We thought it was the school program. (We used AlphaOmega's Switched-On School, if that is necessary to know) I just uninstalled everything to do with it, including deleting the folders. I need to instell this year's program soon, but the computer is still very slow at start up and shut down. When I hit ctl-alt-del, it seems an awful lot of processes are running--maybe too much?

Don't know if you needed all that info, but just in case you did, and here's my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 3:27:11 PM, on 9/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customi ... ch/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.c ... 040510.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 7313823984
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
EdithB
Active Member
 
Posts: 9
Joined: March 4th, 2006, 9:59 pm
Location: Atlanta, GA
Advertisement
Register to Remove

Unread postby Navigator » September 5th, 2006, 6:10 pm

Hello EdithB, welcome to Malware Removal!

I do not see anything sinister in your HJT log, but there are a few things to 'fix' to see if they speed up the machine a bit. Are you having any other potential malware symptoms? You can read here to check: Symptoms of Infection.

Oh, and your Java program is way out-of-date and a security risk, so we'll update that too:



1. Please re-open HiJackThis and choose scan only. Check the boxes next to all the entries listed below.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customi ... ch/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: PowerReg Scheduler.exe


Now close all windows other than HiJackThis, then click Fix Checked.

2. Update Java and Remove old Java Versions
  • Download the latest version of Java Runtime Environment (JRE) 5.0 Update 8.<== scroll down the list to find THIS entry
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Remove older Java Versions:
  • Close any programs you may have running - especially your web browser.
  • Go to Start >> Control Panel double-click on Add/Remove Programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
Install latest Java Version:
  • From your desktop, double-click on jre-1_5_0_08-windows-i586-p to install the newest version.

3. Let's do an online scan to check for any unseen problems:

Please go HERE to run Panda's ActiveScan
  • Once you are on the Panda site click the Scan your PC button
  • A new window will open...click the Check Now button
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • When download is complete, click on My Computer to start the scan
  • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.


4. Post the contents of the ActiveScan report and let me know how your computer is running....
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Unread postby EdithB » September 5th, 2006, 8:42 pm

Thank you, Navigator, for your help.

I read the Symptoms of infection page. It seemed This computer showed no signs of that type, except whatever it is that is running in the background slows the computer in it's shut down. I also got rid of the entries in the HiJack this, got rid of the old Java, installed the new, then went to Panda. And then I ran into a big problem. When I click the "scan your computer" button, the little window pops up for a split second, and disappears! :roll:

I've clicked on it several times, rebooted, tried again, and that window won't open. Am I missing something? There is another thing I could click--it's in the upper right, a pink link that says "Free use ActiveScan" should I try that?

Thanks
EdithB
Active Member
 
Posts: 9
Joined: March 4th, 2006, 9:59 pm
Location: Atlanta, GA

Unread postby Navigator » September 5th, 2006, 10:16 pm

Are you using Internet Explorer? Firefox is not supported...

The other thing to check is your security/Active-X settings...if you have them set too high, you cannot download the active-x control to run the scan:

    To check the active-x settings while in IE click tools>>internet options>>security>>default level and check to see that it is set to medium (propmpt before downloading active-x). If they are set to block all active-x controls, you cannot run the scan


The other free online scan button you see I believe is to run the scan in IE via Javascript...this would be OK too.

See if this helps that problem, and let me know if it doesn't...
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Panda Scan

Unread postby EdithB » September 7th, 2006, 11:19 am

Hi Navigator
Sorry it took me so long to get back. As I said, this is a school computer, and it was in use most of the day yesterday, and I didn't get to iy last night. I figured out the problem with the Panda scan-- I have popup blocker enabled both in IE and from the yahoo toolbar. (btw, the yahoo toolbar came when I installed CCleaner. I don't really want the toolbar, but didn't know if it would affect the installation or usage of the CCleaner--can I get rid of that in Add/Remove Programs now without affecting the CCLeaner?)

I ended up running the scan from the other button on the page--the Javascript, because I hadn't figured out the pop up problem yet. My security settings are on medium for now.



The Panda scan:


Incident Status Location

Spyware:spyware/searchcentrix Not disinfected Windows Registry
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Owner\Cookies\owner@2o7[1].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Owner\Cookies\owner@mediaplex[1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[1].txt
Potentially unwanted tool:Application/PRScheduler Not disinfected C:\hijackthis\backups\backup-20060905-194958-781-PowerReg Scheduler.exe
Potentially unwanted tool:Application/HideWindow.A Not disinfected C:\hp\bin\FondleWindow.exe
Potentially unwanted tool:Application/KillApp.B Not disinfected C:\hp\bin\KillIt.exe
Another question; I have automatic updates, but I went to Windows updates, to see if there are any "non-critical" updates needed. There are 7 software and 2 hardware items. I wonder if these would have anything to do with my school program that won't install properly. I'm getting a "unhandled exception error", and the "details" button says something about the JIT debugging. I'd like to know if you can explore this with me after we deal with the other scans.

Thanks :wave:
EdithB
Active Member
 
Posts: 9
Joined: March 4th, 2006, 9:59 pm
Location: Atlanta, GA

Re: Panda Scan

Unread postby Navigator » September 7th, 2006, 5:39 pm

EdithB wrote:Hi Navigator
Sorry it took me so long to get back. As I said, this is a school computer, and it was in use most of the day yesterday, and I didn't get to iy last night. I figured out the problem with the Panda scan-- I have popup blocker enabled both in IE and from the yahoo toolbar. (btw, the yahoo toolbar came when I installed CCleaner. I don't really want the toolbar, but didn't know if it would affect the installation or usage of the CCleaner--can I get rid of that in Add/Remove Programs now without affecting the CCLeaner?)


No problem. You can check in Add or Remove Programs to see if Yahoo toolbar is listed...if it is you can remove it that way, but I'm not sure. I always warn people to uncheck the install Yahoo Toolbar box before installing CCleaner.
EdithB wrote:I ended up running the scan from the other button on the page--the Javascript, because I hadn't figured out the pop up problem yet. My security settings are on medium for now.


That Panda Scan is actually pretty clean...only a stray registry without an associated file or location (that may not even be there) and some cookies that are relatively harmless..these can be removed if you wish through IE via tools>>internet options. But as soon as you go back online you'll get more...

EdithB wrote:
Another question; I have automatic updates, but I went to Windows updates, to see if there are any "non-critical" updates needed. There are 7 software and 2 hardware items. I wonder if these would have anything to do with my school program that won't install properly. I'm getting a "unhandled exception error", and the "details" button says something about the JIT debugging. I'd like to know if you can explore this with me after we deal with the other scans.

Thanks :wave:


You're welcome.

You can always try to add the 'non-critical' updates and see if they help with your program installation, but I'm not too hopeful that this is the problem. I also do not think your problem is malware or security related as your HJT log is 'clean' and so is the Panda Scan.

To try and resolve that installation problem, I would do a few things:

1. Google search the exact error message you are getting, and also search that error message along with the programs title...sometimes you can find others with similiar problems and see potential solutions.

2. Check and see if the program's developer has a website with a help forum or message board...many do. If they do not, call the programs technical support # and explain the situation.

3. Make sure that you have all the necessary 'requirements' on your system (hardware and software) to properly install/run the program...sounds innocuous, but you'd be surprised how often people buy programs without making sure their system can 'handle' them.

Beyond that, I'm not sure I can be of much help...while I'm trained in security/malware issues, I am not a 'computer' professional by trade. I know that at another site that I also trained at there is an excellent software applications forum, and it can be found here: http://www.geekstogo.com/forum/Applications-f12.html

They would in all likelihood be a lot more helpful with your software installation problem than me.

Otherwise, how is the system running? Has it sped up any or is it still 'slow'?
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Unread postby EdithB » September 10th, 2006, 6:26 pm

Hi Navigator
Thanks again for your assistance. Sorry I'm so long in getting back again. We have to share the 'puter time! LOL!

I kinda thought that Panda scan looked pretty harmless except that Registry entry. I get the heebie-jeebies just thinking about the Registry and had no idea what that meant! Glad to read it's probably harmless also.

I got rid of Yahoo's toolbar--sneaky lil bugger tries to install with a lot of things as I discovered when updating my son's musicmatch jukebox a couple days ago! I'll have to pay attention.

I went ahead and dl the other updates at Windows updates. Not much of a difference IMO, but my son says it is running faster. What I don't understand is what is running in the background that has to be shut down before windows shuts down? (the little box that pops up saying windows can't shut down til it ends some program that is running--it never tells what program that is) I believe you that it probably isn't malware or security related, or something would have shown up on the scans.

I appreciate the link to the site for checking about the possible software issue. I will do the exact google search first and check with the software developer. (there is a live support window--I tried it the other day, but was a couple hours early for their timezone)


Thanks for looking at my log and for all your help. We have 4 computers here, and I try to maintain what I have learned--running the scans for Adaware, Spybot and the other antispyware porgrams in the "How Did I Get Infected.." article, but I get stumped frequently!! :tard: I appreciate the time you've given me to help!



THANK YOU VERY MUCH!!!!! :thumbright:
EdithB
Active Member
 
Posts: 9
Joined: March 4th, 2006, 9:59 pm
Location: Atlanta, GA

Unread postby Navigator » September 10th, 2006, 6:34 pm

EdithB wrote:Hi Navigator
What I don't understand is what is running in the background that has to be shut down before windows shuts down? (the little box that pops up saying windows can't shut down til it ends some program that is running--it never tells what program that is) I believe you that it probably isn't malware or security related, or something would have shown up on the scans.

I appreciate the link to the site for checking about the possible software issue. I will do the exact google search first and check with the software developer. (there is a live support window--I tried it the other day, but was a couple hours early for their timezone)


Thanks for looking at my log and for all your help. We have 4 computers here, and I try to maintain what I have learned--running the scans for Adaware, Spybot and the other antispyware porgrams in the "How Did I Get Infected.." article, but I get stumped frequently!! :tard: I appreciate the time you've given me to help!



THANK YOU VERY MUCH!!!!! :thumbright:


You are welcome Edith....

When the computer tries to shut down and says it's waiting for a program to end.... it usually, in the 'box' that comes up, tells you what the filename is that is holding up the process. I've had this problems before with an AV program file.

The filename will usually be at the 'top' of the box, or in the error message.

If you can tell me the file name, I can point you in the general direction of the program involved that is holding up 'shutdown'. This may help solve your problem...
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Unread postby EdithB » September 11th, 2006, 1:49 pm

Hi Navigator
I wasn't looking for the name of the app at the top of the box, only in the message. First couple times I tried to get the name, it flashed up on the screen so fast and was gone, I couldn't read it. So I set my son to the task. He finally got it it's ccApp no numbers, nothing else. The box came up twice, with each one taking a little longer to end the process.

I googled it. This is something to do with Symantec/Norton. The advice given to another person who was asking about it, was to go to Symantic and do an update and that should fix it. :roll: hmmmm, I'll try that, but I already have it checking for automatic updates every time this computer goes online.

As to the software problem with my school program, I did two things. I have two application discs for the two subjects from this provider. (AlphaOmega Switched onSchool). I had installed one of them, then ran into the problems (Long story short problem: the teacher program won't open properly to allow me to set up my school and install the subjects--gets to a certain point and then the "unhandled exception" box).
I googled that. It seems to be a problem with "Net.Framework2.0" and maybe the JIT debugging, also, but it was all "Geek" to me and I couldn't figure out what I was supposed to do--I think I was supposed to get into the Registry :shock: YIKES! RUN AWAY!! :D I'm gonna have to get help with that. I will be calling tech support for the school program right after I'm done typing here.

I realize it's not their problem--it's my computer, but maybe they are familiar with this? I hope! I uninstalled the first application disc and installed the other one--the exact same problem. :roll:

Again, I thank you for your help and your time. :cya:
EdithB
Active Member
 
Posts: 9
Joined: March 4th, 2006, 9:59 pm
Location: Atlanta, GA

Unread postby Navigator » September 11th, 2006, 3:20 pm

With regard to the ccApp error, this is the Symantec reference:

http://service1.symantec.com/SUPPORT/na ... ar_sch_nam

I had a similar problem with a Symantec product a few years ago, and the only thing that corrected the problem was to uninstall/re-install the software...but removing Symantec products is no small task so I would go through the steps outlined in the link above first. I believe Symantec has a online help forum also which you can find via this link: http://www.symantec.com/techsupp/

With regard to your teaching program installation problems, the tech support for the programs themselves should have an answer for you....I'm sure they've seen this issue before. Actually, it IS their problem because if people buy the product and then cannot use it they will lose business.

One other thing you can try is to visit this forum which deals with software issues...it is another forum where I also trained at and they have some real smart people there: http://www.geekstogo.com/forum/Applications-f12.html

You'll have to register at G2G before posting, but it's free and perfectly safe...it's another great self-help forum!

Hope this helps and good luck....
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

She's baaaaaccckkk!

Unread postby EdithB » September 13th, 2006, 12:06 pm

Hi again, Navigator,
The SOS (school) problem is solved--thanks for your direction. I didn't understand it would be their problem--sure enough, when I called them, it WAS! (I was on hold for 45 min waiting for the techs to answer--heavy call volume-- :x grrr!) Something with their 2.0 program having a problem with WinXP SP2. I needed a patch from them. (Which explains why I hadn't had this trouble with it last year, I was still on SP1) School's working fine, and evidently the shut down slowdown was always the Norton. (My son remembers seeing the ccapp before in the "ending program" box)

I followed the directions from Symantec in the link you gave. It went away for a short time (maybe the next few shutdowns), and it's back--with a friend. (Shellcon Hidden Window--I looked it up--it's Musicmatch 10) I'm considering dumping Norton and going back to a free AV program. I have used AVG (??--the one from Grisoft), and didn't find it very user friendly. Any advice? (I need to go with a free program for now). I hesitate to dump the Norton because it has the anti spy and pop up blocker--and I think a firewall.

As to the Shellcon Hidden window, I discovered that is from the upgrade we just did on Musicmatch. From the stuff i read, one suggestion was to go to msconfig, and uncheck musicmatch from the startup list. (the computer complained about changing anything in that start up list, and has itself on "selective Startup"--I think I can hear it muttering now :D )

Well the ending program popup went away--once. It's back now, and the box in startup is still unchecked. The other solution I'd read about was to go back to an earlier version. My son doesn't want that because he wanted the choices of colorful skins in Musicmatch 10!! LOL! We may HAVE to go back, or something, because as of this morning, he can't even get a cd to play. (I'm wondering if it is the drive, because when I went to my computer>>E drive>>properties>>autoplay tab, checked the "select an action"; I still couldn't get it to play. Musicmatch says there's nothing in the drive. I've checked several cds this morning--nuttin!)

Guess it's time to register at G2G, huh? :lol:


Anyhoo, thank you again for helping!
EdithB
Active Member
 
Posts: 9
Joined: March 4th, 2006, 9:59 pm
Location: Atlanta, GA

Re: She's baaaaaccckkk!

Unread postby Navigator » September 13th, 2006, 5:14 pm

EdithB wrote:Hi again, Navigator,
The SOS (school) problem is solved--thanks for your direction. I didn't understand it would be their problem--sure enough, when I called them, it WAS! (I was on hold for 45 min waiting for the techs to answer--heavy call volume-- :x grrr!) Something with their 2.0 program having a problem with WinXP SP2. I needed a patch from them. (Which explains why I hadn't had this trouble with it last year, I was still on SP1) School's working fine, and evidently the shut down slowdown was always the Norton. (My son remembers seeing the ccapp before in the "ending program" box)

I followed the directions from Symantec in the link you gave. It went away for a short time (maybe the next few shutdowns), and it's back--with a friend. (Shellcon Hidden Window--I looked it up--it's Musicmatch 10) I'm considering dumping Norton and going back to a free AV program. I have used AVG (??--the one from Grisoft), and didn't find it very user friendly. Any advice? (I need to go with a free program for now). I hesitate to dump the Norton because it has the anti spy and pop up blocker--and I think a firewall.

As to the Shellcon Hidden window, I discovered that is from the upgrade we just did on Musicmatch. From the stuff i read, one suggestion was to go to msconfig, and uncheck musicmatch from the startup list. (the computer complained about changing anything in that start up list, and has itself on "selective Startup"--I think I can hear it muttering now :D )

Well the ending program popup went away--once. It's back now, and the box in startup is still unchecked. The other solution I'd read about was to go back to an earlier version. My son doesn't want that because he wanted the choices of colorful skins in Musicmatch 10!! LOL! We may HAVE to go back, or something, because as of this morning, he can't even get a cd to play. (I'm wondering if it is the drive, because when I went to my computer>>E drive>>properties>>autoplay tab, checked the "select an action"; I still couldn't get it to play. Musicmatch says there's nothing in the drive. I've checked several cds this morning--nuttin!)

Guess it's time to register at G2G, huh? :lol:


Anyhoo, thank you again for helping!


You are welcome!

Good news about the school program...people usually think that they're the only ones with certain software glitches, but often they are not and the developers know all about it.

If you are looking for 'free' AV programs, there is a link to three of them here: http://www.geekstogo.com/forum/Free-Ant ... s-t38.html

AVG, Avast and Anti-vir all have free versions, and different people prefer different ones. Take your pick if that is the way you choose to go.

The G2G link I gave you for application problems earlier would probably be your best source (outside the manufacturer of the software) to get your questions answered. The problem with a lot of programs (I know that QuickTime does this in particular in association with ITunes) is that even if you 'turn it off' from startup via msconfig, when you manually run the program it adds itself back into the startup menu. I don't know a way around this.

I found this regarding the Shellcon Hidden Window problem at a respected site called Bleeping Computer:

http://www.bleepingcomputer.com/forums/ ... 30433.html

They discuss uninstalling and then reinstalling MM10...searching on MM10 gives a lot of threads reporting 'bugs'. Here is the MM tech support site:
http://www.musicmatch.com/form/support/

If you're still having problems after visiting the Symantec and MM tech sites, try G2G...
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Unread postby Nick-YF19 » September 28th, 2006, 2:45 am

Glad we could be of assistance.

This topic is now closed. If you wish it
reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.


You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid,
working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
Nick-YF19
Admin/Teacher Emeritus
 
Posts: 4036
Joined: May 17th, 2005, 12:42 am
Location: California
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 290 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware