software probs with new system

robgunner

ive had my new system running a couple of weeks now, been getting a few teething probs, but now i got 1 thats puzzling me..
my system is listed below, i only have 1 gig of ram and every now and then my system freezes and if i manage to get into task manager it says im using 2.3gig of ram and thats why its freezing, i think its got something to do with IE , not a 100% sure.
ive double checked bios all settings fine, ive got latest windows updates, i was thinking of upgrading bios..
any1 had similar probs or know what could be causing probs

Donut

Might be time for a spyware/anti-virus scan. (if you haven't tried them already.)

robgunner

thanks for advice but i do adware/spyware scans regually and have done hijack this and its all fine and with netgear router secured up and nod32 running im fairly safe

profdlp

It sounds like the 2.3GB figure includes both your physical RAM and your Page File. Post a screenshot of the Processes and Performance tabs in Task Manager - we might be able to spot the problem for you.

It could be a bad driver or a corrupt file or program screwing things up, but I'm inclined to go along with Donut; if IE is the culprit there is likely something rotten going on behind your back. The screenshots of Task Manager will probably help us narrow it down. A HijackThis log wouldn't be a bad idea, either.

robgunner

hello profdlp, heres pics of task manager i hope you can see ok






see if you can see any probs in their

thanks for help

robgunner

profdlp

There doesn't seem to be anything using an extraordinarily large amount of memory there, but I wasn't able to read some of the processes. See if you can get the screenshots again the next time the problem crops up.

The HijackThis log would be helpful, too.

robgunner

and hijak this log.....

Logfile of HijackThis v1.99.1
Scan saved at 22:11:11, on 12/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
C:\Program Files\ABIT\ABIT uGuru\GuruClock.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ABIT\ABIT uGuru\uGuru_Event_Receiver.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\My Received Files\hijackthis\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
O4 - HKLM\..\Run: [GuruClock] C:\Program Files\ABIT\ABIT uGuru\GuruClock.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1141066600125
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{02928CF6-68F4-4365-8781-19E33DE12A82}: NameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{02928CF6-68F4-4365-8781-19E33DE12A82}: NameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{02928CF6-68F4-4365-8781-19E33DE12A82}: NameServer = 192.168.0.1
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: csrcs - C:\WINDOWS\SYSTEM32\csrcs.dll
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

robgunner

ok profdlp cheers, ive posted hijack this log and also earlier i updated bios from vers24 to vers26 see if that helps as ive been having a few teething probs since install of board and proc.

Kwitko

Remove this:

O20 - Winlogon Notify: csrcs - C:\WINDOWS\SYSTEM32\csrcs.dll

It's known as Trojan.Natspammer.

robgunner

thanks Kwitko have got rid off, where can i get a copy of CWShredder from and what does it do
thanks for help

robgunner

its ok ive found it and run it and it was clean(non found)

cheers mate