[liquid89]

I keep getting "xyz has encountered a problem and needs to close. We are sorry for the inconvenience."

This started a year ago but it was very rare. Nowdays I can not keep any programs open for more then a couple of minutes before I get the dialog that the program has performed an illegal operation and needs to close” Its sooo annoying. I ran Norton and found no virus, I ran ad-aware and Spyboot and cleaned all the spyware but nothing. Here is the hijack log if it helps:

Logfile of HijackThis v1.99.1
Scan saved at 9:19:54 PM, on 12/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\htpatch.exe
C:\PROGRA~1\Lexmark\PHOTOC~1\LXBLKsk.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\DTI Performance\Desktop\HijackThis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [LXBLKsk] C:\PROGRA~1\Lexmark\PHOTOC~1\LXBLKsk.exe
O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

 

[ozrom1e]

Welcome to TSG....

One thing we are going to need is the correct error message for xyz. As for the log file a HJT expert with the little gold shield is going to have to help in that area.

 

[liquid89]

xyz stand for any program. It happens with whatever program I have open: internet explorer, outlook, skype, word, etc

How do i get the correct error message?

 

[ozrom1e]

That is what was not said in the first post.
You might have to remove the hard drive from this computer and install it in another computer as a slave drive and after it is able to be accessed by Windows on that computer you will have to manually backup all of your important data that you have to another media like CD-R's, DVD or Thumb drive. Then when this is done return it to the original computer as a master drive on the primary IDE cable and do the following:

REGISTRY WARNING: The details that follow require an above-average understanding of the technical topics involved. If you do not understand the Registry material presented here, either find a technically-knowledgeable friend or do not attempt to repair your system Registry yourself. Improper changes in the System Registry can render all data on your hard disk inaccessible.

I hope you have the Windows software for this machine. Please give this a try and print it out for reference

How to perform a repair installation of Windows XP if Internet Explorer 7 is installed

http://support.microsoft.com/default.aspx/kb/917964

How to Perform a Windows XP Repair Install = http://www.michaelstevenstech.com/XPrepairinstall.htm

Here is a link to a registry backup program that is absolutely fantastic it is called ERUNT

http://www.larshederer.homepage.t-online.de/erunt/

Remember to always keep a backup of two things:

Your registry and your data. You will never be sorry.

Post another HJT log after doing the repair.

 

[liquid89]

That’s my main problem. I would have to buy another hard drive of equal or greater capacity to backup all my data otherwise I would’ve formatted the hard drive a long time ago. I also think I misplaced my windows xp cd. I am hoping this is something I can fix without having to erase any of my files.

Here it happned again:

Error signature:
AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: unknown
ModVer: 0.0.0.0 Offset: 06bbec09

I can not copy the technical information about the error report with a simple copy/paste. Is it stored somewhere else?

 

[1101doc]

XP is very flexible, and with enough available memory and processing power can do what seems like magic-often several tricks at once. Unfortunately, I cannot offer XP enough physical resources to do magic. If I ask it to do too much in my limited system, sometimes all it can do are the simple basic tricks: sit/stay/rollover/playdead. Because I have an older laptop I found it necessary to forgo some of the more resource demanding features of XP. I went to "Services" and right clicked on 'Messenger." Then I set it to "Disable." True, I no longer could use that feature, but other things now had less competition. I also decided that I could spend a little more time waiting for windows to do searches for me. I went up to Indexing Service and disabled that one as well. Although I had Norton System Works, and liked the Speed Disc feature, it didn't seem like too much work to visit "Services" before and after running Speed Disc and first starting, and then after, stopping "Speed Disc Service." Goodbye NOPD. I decided that I could live without the advanced language features offered through ctfmon.exe. I would just stay stuck in English. I went to Control Panel>Regional and Language Options>Languages>Details>Advanced and checked the box that said "Turn off advanced text services." Goodbye ctfmon.exe. I figured that It wasn't too much manual labor to update most of my programs manually. Using the free utility What's Running I turned off all my updaters and autostarting programs except for my Anti-virus, anti-spyware, and firewall. Goodbye jusched, appleupdate, and a bunch of others. Boy, the list of processes in Taskmanager was way shorter now, and things seemed to work much better. At present when I first boot up I have only 20 processes showing in Taskmanager. If I don't want to go online I can go to work on my files and data very quickly. When it's time to "Beam up," I load the rest of my protection, plug in my cable and take off. Perhaps if you take a look at your system you will decide to ask XP to do fewer things all the time so that it can do the one thing that you want it to do now a little better. Good luck and please post back with your progress.

 

[liquid89]

tried all the suggestions with no luck

 

[1101doc]

OK. If you've gone through your system and cleaned and trimmed to the best of your ability and still have a problem, I suggest you go to the security section of this forum and read all the "stickies." Use the tools offered there and then post a new HighJackThis log in that Thread. No one wants to believe that their system is hosting malware, but even the best security programs don't find/stop everything. That is why malware removal experts (like those you will find in Security) use several different scanners/tools to make sure the job gets done. Something is using your processor. Find out what and stop it. If it turns out not to be malware, at least you'll have the peace of mind that comes from knowing that your computer is clean and safe.