Tech Support Guy banner
Status
Not open for further replies.
1 - 9 of 9 Posts

· Registered
Joined
·
113 Posts
Discussion Starter · #1 ·
Evening All!

I'm running Win XP on an Athlon 1.9 GHz Comp with 1 Gb of ram.

The screensaver does nor kick in after any preset time.
It will pre-view OK
I cannot see any prog running in the background that could cause this problem.
Running progs are 1)V. Killer 2) Firewall 3) cookie and ad blockers
It also happens if I start with a clean boot (ie only services etc running)

Any ideas welcome!


RMD
 

· Super Moderator
Joined
·
38,011 Posts
Hiya

Is the screensaver the one that was pre-installed with Windows, or one that you have downloaded? If the latter, can you show us where from?

Lets have a look at what is running at startup anyway:

Go to Run and type MSINFO32
On the left choose Software Enviroment, then Startup Programs. Copy/paste the list here.

In the Control Panel | Display icon, Screensaver tab. What is the Wait set for, as in minutes?

Regards

eddie
 

· Registered
Joined
·
113 Posts
Discussion Starter · #3 ·
Hi Eddie,
Thanks for replying to my post. The problem occurs whatever S/Saver I use. Normally it is set for 10 mins, but to test it, I have reduced it to 1 min.

I have pasted the result of MSINFO32 (startup) below. Hope it throws some light on it.

I did think of a virus or trojan, but Norton finds nothing (and it is up to date) nor does an on-line scan from the Symantec site.
I was suspicioius because I have also lost the icon for the Norton Protected Recycle Bin and the Recycle bin just shows as a folder on the Desktop.

Thanks again for replying

Result od MSINFO32

AdSubtract d:\comms\adsubt~1\adsub.exe DESKTOP\Rob Startup
AHQInit c:\program files\creative\sblive\program\ahqinit.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
C-Media Mixer mixer.exe /startup All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Cacheman d:\program files\utils1\cacheman\cacheman.exe DESKTOP\Rob HKU\S-1-5-21-1275210071-152049171-1343024091-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Calendarium d:\progra~1\multim~1\calend~1\calend~1.exe DESKTOP\Rob Startup
ccApp "c:\program files\common files\symantec shared\ccapp.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ccRegVfy "c:\program files\common files\symantec shared\ccregvfy.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CleanTemp c:\progra~1\cleant~1\cleant~1.exe DESKTOP\Rob Startup
CookieWall d:\comms\cookiewall\cookie.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CT HotSpot98 d:\comms\hotspot\hotspot.exe DESKTOP\Rob Startup
ctfmon.exe c:\windows\system32\ctfmon.exe DESKTOP\Rob HKU\S-1-5-21-1275210071-152049171-1343024091-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe NT AUTHORITY\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe NT AUTHORITY\LOCAL SERVICE HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe NT AUTHORITY\NETWORK SERVICE HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
desktop desktop.ini NT AUTHORITY\SYSTEM Startup
desktop desktop.ini .DEFAULT Startup
FileBox eXtender d:\progra~1\misc\filebx\filebx.exe DESKTOP\Rob Startup
Firewall c:\progra~1\norton~2\iamapp.exe /load All Users Common Startup
HPDJ Taskbar Utility c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
iamapp c:\program files\norton personal firewall\iamapp.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Microsoft Works Portfolio c:\program files\microsoft works\wkssb.exe /allusers All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Microsoft Works Update Detection c:\program files\microsoft works\wkdetect.exe DESKTOP\Rob HKU\S-1-5-21-1275210071-152049171-1343024091-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MoneyStartUp10.0 "d:\program files\microsoft\money\system\activation.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
mspwr c:\windows\system32\pupxpman.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NvCplDaemon rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NvMediaCenter rundll32.exe c:\windows\system32\nvmctray.dll,nvtaskbarinit All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
nwiz nwiz.exe /install All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
POINTER c:\program files\microsoft intellipoint 4.0\mouse\setup\msh\mouse\point32.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PwrUpTweakMe c:\windows\system32\pupxptwk.exe /tweak All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
QD FastAndSafe "c:\program files\common files\symantec shared\ccregvfy.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
QuickTime Task "d:\program files\multimedia\quick time\qttask.exe" -atboottime All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RoxioAudioCentral "c:\program files\roxio\easy cd creator 6\audiocentral\rxmon.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RoxioDragToDisc "c:\program files\roxio\easy cd creator 6\dragtodisc\drgtodsc.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
RoxioEngineUtility "c:\program files\common files\roxio shared\system\engutil.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Share-to-Web Namespace Daemon c:\program files\hewlett-packard\hp share-to-web\hpgs2wnd.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SigChanger V2.1.0 d:\comms\sigcha~1\sigcha~1.exe DESKTOP\Rob Startup
TabUserW.exe c:\windows\system32\wtablet\tabuserw.exe All Users Common Startup
UpdReg c:\windows\updreg.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinampAgent "d:\program files\multimedia\winamp\winampa.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinFast_2K c:\windows\system32\wf2k.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinFast2KLoadDefault rundll32.exe wf2kcpl.dll,dllloaddefaultsettings All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
WinRescueXP d:\progra~1\utils1\winres~1\rescuexp.exe bootup DESKTOP\Rob Startup
WorksFUD c:\program files\microsoft works\wkfud.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


RMD
 

· Super Moderator
Joined
·
38,011 Posts
Okay, lets see.....

AdSubtract: AdSubtract blocks ads, cookies, pop-up windows, animations, music, and more. Can be disabled from within AdSubtract. Available via Start -> Programs. Up to you

AHQInit: Part of AudioHQ for the Soundblaster Live!. Appears as though it makes the AudioHW toolbar drop down from the top of the desktop and isn't required. Not needed

C-Media Mixer: C-Media produce audio chipsets that are often found on popular motherboards with on-board audio. Provides System Tray access to change audio settings. Available via Start -> Settings -> Control Panel or Start -> Programs. Not needed

Cacheman: Freeware disk cache tweaker from Outer Technologies. Should only be run once and not loaded at start-up. Not needed.

Calendarium: Not sure, could be a calender.

ccApp: Part of Norton AntiVirus 2003. Auto-protect and E-mail check will not function without this. Keep

ccRegVfy: Part of Norton AntiVirus 2003. "ccRegVfy.exe is responsible for checking the integrity of the NAV registry entries to make sure that the information has not been changed by a malicious threat or a hack". Keep

CleanTemp: CleanTemp - deletes the contents of the TEMP directory when Windows starts and then closes - using no memory. Up to you

CookieWall: CookieWall from Analog X. Allows you to decide which internet sites can add "cookies" related to their sites for the next time you return. Up to you

CT HotSpot98: Looks like its something to do with screensavers:

http://www.freedownloadscenter.com/Shell_and_Desktop/Screen_Saver_Hotspot_Tools/CT_HotSpot98.html

Could this be the cause


ctfmon.exe: CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don't need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services

http://support.microsoft.com/default.aspx?scid=kb;en-us;282599

Up to you

FileBox eXtender:

http://www.hyperionics.com/files/index.asp

Do you need it at startup??

Firewall: AtGuard personal firewall engine. As Atguard was bought by Symantec some time ago, it's now the Norton Personal Firewall executable as well. Keep

HPDJ Taskbar Utility: (1) Ghostscript device driver for printers understanding Hewlett-Packard's Printer Command Language - see here for more info

http://home.t-online.de/home/Martin.Lottermoser/pcl3.html

or

(2) Creates 1 or all 3 icons on taskbar. The 1st one has a yellow border around it warning that ink is low on the printer. The 2nd one is HP Device Detection Software and the 3rd one is about a card being inserted into the Hp printer

Up to you

Microsoft Works Portfolio: The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program.Can be prevented from starting from a setting within Portfolio. Not needed

Microsoft Works Update Detection: Checks for updates to MS Works. Not needed.

MoneyStartUp10.0: Part of MS Money 2002. Available via Start -> Programs. Not needed

mspwr: "Transparent icon background" feature of Ashampoo's PowerUp XP (WinNT/2K/XP) and PowerUp Deluxe (Win98/Me) . Up to you

NvCplDaemon: Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card. Up to you

NvMediaCenter: System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties. Up to you

nwiz: Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system. Not needed

POINTER: Microsoft Intellipoint software for their Intellimouse series of mice - required if you use non-standard Windows driver features. Up to you

PwrUpTweakMe: "Ashampoo PowerUp XP is a convenient tool for fine-tuning your Windows® NT4, 2000 and XP configuration to suit your precise needs and wishes. It gives you direct access to many frequently-required settings and parameters, enabling you to make your operating system behave the way you want." Boot-up options won't work if disabled. Up to you

QD FastAndSafe: Automatically runs Fast & Safe clean-up from Norton/Quarterdeck Cleansweep. Deletes safe to remove files such as Temporary Internet Files (cache). Recommended you run it manually. Not needed

QuickTime Task: If it was Qttask, that legit, but its qttask, which is CoolWebSearch parasite related. See end

RoxioAudioCentral: Part of Roxio EasyCD Creator 6.0 - places the Roxio AudioCentral icon in you system tray. "Includes a player, media manager, ripper, tag and sound editor - integrated in a single application". Not required for Roxio to work properly. . Not needed

RoxioDragToDisc: Part of Roxio EasyCD Creator 6.0 - places the Roxio Drag-to-Disc icon in you system tray. "Easily drag and drop files for burning to CD or DVD. Disc formatting and burning will happen automatically". Not required for Roxio to work properly. Not needed

RoxioEngineUtility: Part of Roxio EasyCD Creator 6.0 - corrects any modification made to the Roxio Engine, it exits after checking. Keep

Share-to-Web Namespace Daemon: "HP's exclusive Share-to-Web software makes it easy to share content with others through our affiliate Internet websites." In other words an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs. Not needed

SigChanger V2.1.0: http://www.phranc.nl/

Not sure if you need this at startup??

TabUserW.exe: Wacom pen tablet driver. Keep

UpdReg: Reminder to register Creative Labs SoundBlaster Live! cards. Not needed

WinampAgent: Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don't take over as default player for various media types. Available via Start -> Programs. Up to you

WinFast_2K: System Tray application that starts up the Winfox utility for a Leadtek Winfast grpahics card to restore settings. Can be started manually from Start -> Settings -> Control Panel Display. Only needed if you wish to run things like the hardware monitor or overclock your card. Up to you

WinFast2KLoadDefault: Loads default settings for Leadtek Winfast graphics cards. Up to you

WinRescueXP: No idea

WorksFUD: A marketing program for MS Works. Not needed

Now, apart from that Quicktime one, go to Start | Run and type in MSCONFIG, startup tab. Uncheck all you don't want, apply and restart.

Also, look at the one in Bold

Go here and get CWShredder:

http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder

Close all browser windows,UnZip the file, click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do it's thing.

When it is finished restart your computer

eddie
 

· Registered
Joined
·
113 Posts
Discussion Starter · #5 ·
Evening eddie!

Thanks for the info re: my startup progs. Sorry I haven't replied sooner, but I've been away from home for a couple of weeks.
I'll let you know how I get on!!

Regards,
RMD
 

· Registered
Joined
·
113 Posts
Discussion Starter · #6 ·
Evening,

I finally managed to get down to trying to sort out my comp!!

I disabled all items suggested, and ran cwshredder.
The comp. is starting faster, and is behaving well - but the problem remains.
What I have noticed is that even though power management is enabled and set, the comp. remains permanently as I left it. Tried the BIOS, and power management is enabled in that.
The problem also persists in safe mode.

No big deal I don't suppose, but I would like to fix it if only to know that the cause is.!!!!!!

All the Best

RMD
 

· Super Moderator
Joined
·
38,011 Posts
Sorry for the late reply.

go to www.spychecker.com/program/hijackthis.html , and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and please copy & paste its contents to the forum.

It will possibly show other issues deserving our attention, but most of what it lists will be harmless or even required, so do NOT fix anything yet.
Someone here will be happy to help you analyze the results.

eddie
 

· Registered
Joined
·
113 Posts
Discussion Starter · #8 ·
It's a long time since I started trying to sort out this problem. Nothing seemed to make a difference so I thought I would have to live with It.

I am using a WACOM graphics tablet with a pen and mouse. A couple of days ago, the Screensaver started working OK. I noticed that the mouse was not resting on the tablet as normal. I tried leaving it on the Tablet, and the S/Saver stopped working again (Also the Power saving options did not cut in after any period) - removed it and the S/Saver worked OK again!!
It appears that with the mouse on the tablet, the comp. is sensing mouse activity and disabling the S/Saver.

So, problem solved at last!1
 
1 - 9 of 9 Posts
Status
Not open for further replies.
Top