Member Avatar for iaboy12

Hi! I am running windows 2000 and seem to be having some fairly common problems. I get the GStartup error, random restarts, freezing, and just lots of program errors. I was wondering if somebody could take a look at my log and tell me if i can fix it. also, could you tell me how to read it and what to look for so i can do it on my own in the futere? Thanks!

Logfile of HijackThis v1.97.7
Scan saved at 9:50:46 PM, on 2/13/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\essspk.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINNT\System32\svchost.exe
C:\Documents and Settings\Administrator\Desktop\downloads\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://my.juno.com/s/sp?r=al&cf=sp&mem=iaboy12&key=49caeab7cda2ff7bce2e65e2afff3c36&ts=3fdaa3e3&A=0&B=1046160000000&C=1029394800000&D=0&I=6.2B4JU&L=g%236&M=1029394800000&N=PL&O=I
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Singles Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Tools Menu Item (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: AIM (HKLM)
O16 - DPF: ConferenceRoom Java Client -
O16 - DPF: Yahoo! Chat -
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {132BDF97-4059-46E6-BB76-9BFD2527226F} (CChat Class) - http://chat.cuteandsingle.com/downloads/cc.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
O16 - DPF: {C1C2AC28-5E4B-4228-B7A0-05E986FFCE14} (TIBSLoader Class) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

  • 2 Contributors
  • 3 Replies
  • 235 Views
  • 17 Hours Discussion Span
  • Latest Post Latest Post by caperjack

Dani AI

Generated

's cleaned HijackThis log (as handled by ) removed the obvious startup clutter, so the continuing random restarts and freezes point away from a simple spyware/startup problem and toward hardware, driver, file-system, or core-system corruption. HijackThis only shows registry/startup entries; it does not test memory, disks, power, or thermal behaviour, so those areas need a focused diagnostic pass.

Suggested diagnostic sequence (quick, ordered checks that isolate the cause):

  • Check Windows Event Viewer (System and Application) for error events timestamped at crashes; disable automatic restart on system failure so any stop code stays visible and enable crash dumps if possible.

  • Repair and verify system files and disk integrity:

    chkdsk C: /r
    sfc /scannow

    Both may require the Windows 2000 CD and a reboot; run them before replacing hardware.

  • Isolate software/drivers: boot to Safe Mode and test stability. Perform a clean boot (minimal services/startup) to see if a particular service or driver triggers the faults. Update video and chipset drivers only after confirming stability in Safe Mode.

Hardware-focused checks (common causes of the symptoms seen):

  • Run a full boot-time memory test (Memtest86 or equivalent) for several passes; test individual DIMMs and different slots if errors appear.
  • Inspect cooling and power: confirm all fans spin, reseat heatsinks, check for visible swollen/leaking capacitors, and consider swapping the PSU if restarts correlate with load or temperature.
  • Use a bootable Live environment to run the machine under load outside Windows; persistent crashes there point to hardware.

Practical plan: Event Viewer -> Memtest -> chkdsk/SFC -> Safe Mode / clean boot -> driver updates -> hardware swap/tests -> repair install or clean reinstall as a last resort. Back up important data before invasive steps. 's suggestion to remove suspicious startup items and to try individual RAM sticks was a correct first move; the steps above complete the diagnostic path toward a root-cause fix.

Recommended Answers

All 3 Replies

Member Avatar for caperjack

First I want you to put the hijackthis .exe into its own folder on C:\ i suggest c:\HJ,
then run hijack and fix these .

O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe

O4 - HKLM\..\Run: [LoadQM] loadqm.exe


[loadqm.exe] ,you decide here is a defenition of what it is and does
[Installed with MSN Explorer and loads the MSN Queue Manager. Required to enable the WU

AutoUpdate feature. Note that disabling this can sometimes prevent internet sharing working

on Win2K Pro SP2. Reports also suggest that removing it will re-enable internet access -

hence the "users choice" recommendation. If you have problems leave it, otherwise I

recommend you disable it]


this one is not bad but is are real resource hog .

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.

EXE


O16 - DPF: {C1C2AC28-5E4B-4228-B7A0-05E986FFCE14} (TIBSLoader Class) -

browser.com/tl4000.dll


boot into safe mode and delete this file ,

C:\Program Files\Common Files\GMT\GMT.exe----file

you may need to set windows to show hidden files to find the abpve file,heres how to:

http://www.xtra.co.nz/help/0,,4155-1916458,00.html#4


Reboot and post new log :)

Member Avatar for iaboy12

ok, i did all that. i don't get the GStartup error, but all the other probs are still there. here is the new log!

Logfile of HijackThis v1.97.7
Scan saved at 7:14:46 PM, on 2/14/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\essspk.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://my.juno.com/s/sp?r=al&cf=sp&mem=iaboy12&key=49caeab7cda2ff7bce2e65e2afff3c36&ts=3fdaa3e3&A=0&B=1046160000000&C=1029394800000&D=0&I=6.2B4JU&L=g%236&M=1029394800000&N=PL&O=I
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Singles Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Tools Menu Item (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: AIM (HKLM)
O16 - DPF: ConferenceRoom Java Client -
O16 - DPF: Yahoo! Chat -
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {132BDF97-4059-46E6-BB76-9BFD2527226F} (CChat Class) - http://chat.cuteandsingle.com/downloads/cc.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

Member Avatar for caperjack

Log is clean ,lockup and freezes can be caused by any number of hardware/software issues ,like bad ram /video card /cpu ,Heat is a big cause are all the fans working ,power supply is its fan clean and working ,If you have 2 or more sticks of ram you could try removing one and using the computer and if still the same try the other stick!Look inside computerand make sure all fans are working .

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.