Weird message on startup

[Carlos]

Every time I reboot I get the same little window stating
that There is insufficient memory to perform the requested
task (or something to that effect). I close the window and
keep going fine. However, since this window does not allow
me to verify anything (as far as the message and what
program is trying to run) I have no idea of 1)what is
causing this and 2)How to get rid of the message.
Any ideas?
Thanks all.

[Mike M]

Have you checked your system for unwanted guests? If not do so. When did
this problem first start? What changes did you make to your system
immediately prior to this problem starting?

First I would recommend that you check your system for possible viruses using
your preferred anti virus application equipped with an updated set of viral
signatures. However you might first want to check your PC using one of the
online virus checks such as McAfee's online checker
(http://us.mcafee.com/root/mfs/default.asp) or Trend Micro's Housecall
(http://housecall.antivirus.com).

Next download yourself a copy of the free Ad-Aware 6.0 from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot
(http://www.safer-networking.org/) and scan your system for and remove all
unwanted parasites, adware and spyware that might be hiding on your PC.

I would also suggest you download and run merijn's CWShredder which targets
the CoolWebSearch parasite. CWShredder can be downloaded from
(http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip). Details of the many
forms of the CoolWebSearch hijacker can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html and also
http://www.pestpatrol.com/pestinfo/c/cws.asp.

Other useful tools include BHODemon
(http://www.definitivesolutions.com/bhodemon.htm that checks for
unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help prevent
some parasites getting a grip on your PC.

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html). Create a
folder called hijackthis on C: and copy the file you downloaded to that
folder. Close as many applications as you can including all instances of
Internet Explorer and then run hijackthis.exe and post back the log, provided
that it isn't too long, to this thread, otherwise to the HijackThis Forum at
http://www.spywareinfo.com/forums/ and hopefully this will enable someone to
identify the cause of your problem.
--?
Mike Maltby MS-MVP



Carlos > wrote:

> Every time I reboot I get the same little window stating
> that There is insufficient memory to perform the requested
> task (or something to that effect). I close the window and
> keep going fine. However, since this window does not allow
> me to verify anything (as far as the message and what
> program is trying to run) I have no idea of 1)what is
> causing this and 2)How to get rid of the message.
> Any ideas?
> Thanks all.

[Carlos]

Thank you for your help. I have AdAware installed, also i
subscribed to McAffee and runs constantly, besides I have
Spy Bot and Cshredder. The only thing I didn't do is
Hijackthis. Since My system is out of warranty I can't even
get help from MS (they want about $40 a pop).
Because of this, and the miriad of messages I see here with
so many problems, I've decided to use Mozilla 1.6. Runs
smoothly and creates no problems. So much for my loyalty to
MS products :) Any comments on Mozilla?
Bunch of good luck to everyone and again, thank you for
your efforts.
Regards,
Carlos

>-----Original Message-----
>Have you checked your system for unwanted guests? If not
do so. When did
>this problem first start? What changes did you make to
your system
>immediately prior to this problem starting?
>
>First I would recommend that you check your system for
possible viruses using
>your preferred anti virus application equipped with an
updated set of viral
>signatures. However you might first want to check your PC
using one of the
>online virus checks such as McAfee's online checker
>(http://us.mcafee.com/root/mfs/default.asp) or Trend
Micro's Housecall
>(http://housecall.antivirus.com).
>
>Next download yourself a copy of the free Ad-Aware 6.0
from Lavasoft
>(http://www.lavasoftusa.com/software/adaware/) and also SpyBot
>(http://www.safer-networking.org/) and scan your system
for and remove all
>unwanted parasites, adware and spyware that might be
hiding on your PC.
>
>I would also suggest you download and run merijn's
CWShredder which targets
>the CoolWebSearch parasite. CWShredder can be downloaded from
>(http://www.zerosrealm.com/downloads/CWShredder.zip or
>http://www.spywareinfo.com/~merijn/files/cwshredder.zip).
Details of the many
>forms of the CoolWebSearch hijacker can be found at
>http://www.spywareinfo.com/~merijn/cwschronicles.html and also
>http://www.pestpatrol.com/pestinfo/c/cws.asp.
>
>Other useful tools include BHODemon
>(http://www.definitivesolutions.com/bhodemon.htm that
checks for
>unwanted Browser Help Objects and SpywareBlaster
>(http://www.wilderssecurity.net/spywareblaster.html) which
can help prevent
>some parasites getting a grip on your PC.
>
>Finally if you still continue to experience problems
download a copy of
>HijackThis from
(http://www.spywareinfo.com/~merijn/downloads.html). Create a
>folder called hijackthis on C: and copy the file you
downloaded to that
>folder. Close as many applications as you can including
all instances of
>Internet Explorer and then run hijackthis.exe and post
back the log, provided
>that it isn't too long, to this thread, otherwise to the
HijackThis Forum at
>http://www.spywareinfo.com/forums/ and hopefully this will
enable someone to
>identify the cause of your problem.
>--=81
>Mike Maltby MS-MVP

>
>
>Carlos > wrote:
>
>> Every time I reboot I get the same little window stating
>> that There is insufficient memory to perform the requested
>> task (or something to that effect). I close the window and
>> keep going fine. However, since this window does not allow
>> me to verify anything (as far as the message and what
>> program is trying to run) I have no idea of 1)what is
>> causing this and 2)How to get rid of the message.
>> Any ideas?
>> Thanks all.
>
>
>.
>

[Mike M]

I suggest that you download and run HijackThis you might be surprised at what
you find.
--
Mike Maltby MS-MVP



Carlos > wrote:

> Thank you for your help. I have AdAware installed, also i
> subscribed to McAffee and runs constantly, besides I have
> Spy Bot and Cshredder. The only thing I didn't do is
> Hijackthis. Since My system is out of warranty I can't even
> get help from MS (they want about $40 a pop).
> Because of this, and the miriad of messages I see here with
> so many problems, I've decided to use Mozilla 1.6. Runs
> smoothly and creates no problems. So much for my loyalty to
> MS products :) Any comments on Mozilla?
> Bunch of good luck to everyone and again, thank you for
> your efforts.

[Carlos]

OK, since you were kind enough to go the extra mile on
this, I've run Hijackthis as suggested. I'm including the
log file should you like to review it. Many, many thanks!
Regards,
Carlos

Logfile of HijackThis v1.97.7
Scan saved at 4:31:55 PM, on 5/19/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\DEVGULP.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\CPQS\BWTOOLS\SCCENTER.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\PROGRAM FILES\MOTIVE\MOTMON.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL
PANEL\ATIPTAXX.EXE
C:\PROGRAM FILES\BROADJUMP\CLIENT FOUNDATION\CFD.EXE
C:\PROGRAM FILES\MICROSOFT WORKS\WKSSB.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\WINDOWS\WINHLP32.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\SYSTEM\E_S4I2C1.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS
SHARED\WKCALREM.EXE
C:\PROGRAM FILES\MICROSOFT BROADBAND NETWORKING\MSBNTRAY.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\HIJACK\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName =3D=20
O2 - BHO: (no name) -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM
FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
(disabled by BHODemon)
O3 - Toolbar: McAfee VirusScan -
{BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM
FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio -
{8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe
/autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth]
C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy
Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy
Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [Digital Dashboard] C:\Program
Files\Compaq\Digital Dashboard\DevGulp.exe
O4 - HKLM\..\Run: [Service Connection]
c:\cpqs\bwtools\sccenter.exe
O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [MotiveMonitor] C:\Program
Files\Motive\motmon.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI
Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client
Foundation\CFD.exe
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft
Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program
Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [VSOCheckTask]
"C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
O4 - HKLM\..\Run: [VirusScan Online]
"C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe]
C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe]
C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
O4 - HKLM\..\Run: internat.exe
O4 - HKLM\..\Run: [CleanRam] C:\PROGRAM FILES\CLEAN
RAM\CLEANRAM.EXE
O4 - HKLM\..\Run: [EPSON Stylus C64 Series]
C:\WINDOWS\SYSTEM\E_S4I2C1.EXE /P23 "EPSON Stylus C64
Series" /O7 "EPUSB1:" /M "Stylus C64"
O4 - HKLM\..\Run: [CleanUp]
C:\PROGRA~1\MCAFEE.COM\SHARED\MCAPPINS.EXE /v=3D3 /cleanup
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr]
C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [StillImageMonitor]
C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
O4 - HKLM\..\RunServices: [ATISmart]
C:\WINDOWS\SYSTEM\ati2s9ag.exe
O4 - HKLM\..\RunServices: [SSDPSRV]
C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [McVsRte]
C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
O4 - HKCU\..\Run: [SpyKiller] C:\Program
Files\SpyKiller\spykiller.exe /startup
O4 - Startup: Microsoft Works Calendar Reminders.lnk =3D
C:\Program Files\Common Files\Microsoft Shared\Works
Shared\wkcalrem.exe
O4 - Startup: Compaq Knowledge Center.lnk =3D C:\Program
Files\Compaq Knowledge Center\bin\silent.exe
O4 - Startup: EPSON Status Monitor 3 Environment Check
2.lnk =3D C:\WINDOWS\SYSTEM\E_SRCV02.EXE
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Startup: Microsoft Broadband Networking.lnk =3D
C:\Program Files\Microsoft Broadband Networking\MSBNTray.exe
O4 - Startup: Microsoft Office.lnk =3D C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: BHODemon.lnk =3D C:\Program
Files\BHODemon\BHODemon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet
Explorer\Control Panel present
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O12 - Plugin for .mp3:
C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mpeg:
C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mov:
C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .mid:
C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B}
(InstallShield Setup Player 2K2) -
http://www.ipswitch.com/_installs/wsftp_le/setup.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
(McAfee.com Operating System Class) -
http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389}
(DwnldGroupMgr Class) -
http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38009.325856=
4815
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479}
(EPSImageControl Class) -
http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab


>-----Original Message-----
>I suggest that you download and run HijackThis you might
be surprised at what
>you find.
>--=20
>Mike Maltby MS-MVP

>
>
>Carlos > wrote:
>[i]
>> Thank you for your help. I have AdAware installed, also i
>> subscribed to McAffee and runs constantly, besides I have
>> Spy Bot and Cshredder. The only thing I didn't do is
>> Hijackthis. Since My system is out of warranty I can't even
>> get help from MS (they want about $40 a pop).
>> Because of this, and the miriad of messages I see here with
>> so many problems, I've decided to use Mozilla 1.6. Runs
>> smoothly and creates no problems. So much for my loyalty to
>> MS products :) Any comments on Mozilla?
>> Bunch of good luck to everyone and again, thank you for
>> your efforts.
>
>
>.
>

[Mike M]

Carlos,

My apologies for the delayed response. I can't see anything that particularly
strikes me as odd in your Hijack log but then again I'm not that skilled in
interpreting what I see. :-) I do however have a few comments:

SSDPSRV.EXE You only need this running if you are accessing UPnP enabled
device which you may well be doing if using a UPnP capable router. If not you
may want to remove this (Add/Remove Programs | Windows Setup | Communications
| Details and uncheck "Universal Plug and Play" towards the bottom of the
list, then click OK and then Apply.

You appear to have a number of support tools installed and running used to
allow third party access to your system such as MOTMON.EXE, SCCENTER.EXE and
CFD.EXE. Unlikely to cause the problem on which you originally posted but
more than I would want to have running.

PCTPTT.EXE I don't think this needs to be launched each time your boot your
PC once you have configured your modem.

O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
Personally I find this entry quite unnecessary as the data collected is of
little or no use. If you choose to uncheck this entry you need also to
disable the associated entry in the Task Scheduler.

I'm also not familiar with the R0 entry but assume this simply means you've
removed the Links entry in the Registry. Likewise the O6 entry which could
mean that there is a policy preventing you accessing your Control Panel. If
not intended and you cannot access the control panel you might want to
consider checking this.

One entry though with which I am not familiar and appears only to run when you
boot your PC (which is when you see the error) is:
O4 - HKLM\..\Run: [CleanRam] C:\PROGRAM FILES\CLEAN RAM\CLEANRAM.EXE
I'm not certain what this is supposed to achieve and can find little of any
relevance about this application on the net. I would suggest that you see
whether temporarily unchecking this entry solves your problem.

Please let us know how you get on.
--
Mike Maltby MS-MVP



Carlos > wrote:

> OK, since you were kind enough to go the extra mile on
> this, I've run Hijackthis as suggested. I'm including the
> log file should you like to review it. Many, many thanks!
> Regards,
> Carlos
>
> Logfile of HijackThis v1.97.7
> Scan saved at 4:31:55 PM, on 5/19/2004
> Platform: Windows ME (Win9x 4.90.3000)
> MSIE: Internet Explorer v5.50 (5.50.4134.0600)
>
> C:\WINDOWS\SYSTEM\SSDPSRV.EXE
> C:\WINDOWS\SYSTEM\HIDSERV.EXE
> C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
> C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
> C:\WINDOWS\SYSTEM\WMIEXE.EXE
> C:\COMPAQ\CPQINET\CPQINET.EXE
> C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\DEVGULP.EXE
> C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
> C:\CPQS\BWTOOLS\SCCENTER.EXE
> C:\WINDOWS\PCTVOICE.EXE
> C:\PROGRAM FILES\MOTIVE\MOTMON.EXE
> C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
> C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL
> PANEL\ATIPTAXX.EXE
> C:\PROGRAM FILES\BROADJUMP\CLIENT FOUNDATION\CFD.EXE
> C:\PROGRAM FILES\MICROSOFT WORKS\WKSSB.EXE
> C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
> C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
> C:\WINDOWS\WINHLP32.EXE
> C:\WINDOWS\SYSTEM\INTERNAT.EXE
> C:\WINDOWS\SYSTEM\E_S4I2C1.EXE
> C:\WINDOWS\SYSTEM\SPOOL32.EXE
> C:\WINDOWS\SYSTEM\DDHELP.EXE
> C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS
> SHARED\WKCALREM.EXE
> C:\PROGRAM FILES\MICROSOFT BROADBAND NETWORKING\MSBNTRAY.EXE
> C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
> C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
> C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
> C:\HIJACK\HIJACKTHIS.EXE
>
> R0 - HKCU\Software\Microsoft\Internet
> Explorer\Toolbar,LinksFolderName =
> O2 - BHO: (no name) -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM
> FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
> (disabled by BHODemon)
> O3 - Toolbar: McAfee VirusScan -
> {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM
> FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
> O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio -
> {8E718888-423F-11D2-876E-00A0C9082467} -
> C:\WINDOWS\SYSTEM\MSDXM.OCX
> O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe
> /autorun
> O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
> O4 - HKLM\..\Run: [PCHealth]
> C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
> O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
> O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
> powrprof.dll,LoadCurrentPwrScheme
> O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
> O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy
> Access Button Support\cpqeadm.exe
> O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy
> Access Button Support\eaclean.exe
> O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
> O4 - HKLM\..\Run: [Digital Dashboard] C:\Program
> Files\Compaq\Digital Dashboard\DevGulp.exe
> O4 - HKLM\..\Run: [Service Connection]
> c:\cpqs\bwtools\sccenter.exe
> O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
> O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
> O4 - HKLM\..\Run: [MotiveMonitor] C:\Program
> Files\Motive\motmon.exe
> O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI
> Technologies\ATI Control Panel\atiptaxx.exe
> O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client
> Foundation\CFD.exe
> O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft
> Works\wkfud.exe
> O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program
> Files\Microsoft Works\WksSb.exe /AllUsers
> O4 - HKLM\..\Run: [VSOCheckTask]
> "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
> O4 - HKLM\..\Run: [VirusScan Online]
> "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
> O4 - HKLM\..\Run: [MCAgentExe]
> C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
> O4 - HKLM\..\Run: [MCUpdateExe]
> C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
> O4 - HKLM\..\Run: [internat.exe] internat.exe
> O4 - HKLM\..\Run: [CleanRam] C:\PROGRAM FILES\CLEAN
> RAM\CLEANRAM.EXE
> O4 - HKLM\..\Run: [EPSON Stylus C64 Series]
> C:\WINDOWS\SYSTEM\E_S4I2C1.EXE /P23 "EPSON Stylus C64
> Series" /O7 "EPUSB1:" /M "Stylus C64"
> O4 - HKLM\..\Run: [CleanUp]
> C:\PROGRA~1\MCAFEE.COM\SHARED\MCAPPINS.EXE /v=3 /cleanup
> O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
> powrprof.dll,LoadCurrentPwrScheme
> O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
> O4 - HKLM\..\RunServices: [*StateMgr]
> C:\WINDOWS\System\Restore\StateMgr.exe
> O4 - HKLM\..\RunServices: [StillImageMonitor]
> C:\WINDOWS\SYSTEM\STIMON.EXE
> O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
> O4 - HKLM\..\RunServices: [ATISmart]
> C:\WINDOWS\SYSTEM\ati2s9ag.exe
> O4 - HKLM\..\RunServices: [SSDPSRV]
> C:\WINDOWS\SYSTEM\ssdpsrv.exe
> O4 - HKLM\..\RunServices: [McVsRte]
> C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
> O4 - HKCU\..\Run: [SpyKiller] C:\Program
> Files\SpyKiller\spykiller.exe /startup
> O4 - Startup: Microsoft Works Calendar Reminders.lnk =
> C:\Program Files\Common Files\Microsoft Shared\Works
> Shared\wkcalrem.exe
> O4 - Startup: Compaq Knowledge Center.lnk = C:\Program
> Files\Compaq Knowledge Center\bin\silent.exe
> O4 - Startup: EPSON Status Monitor 3 Environment Check
> 2.lnk = C:\WINDOWS\SYSTEM\E_SRCV02.EXE
> O4 - Startup: PowerReg SchedulerV2.exe
> O4 - Startup: Microsoft Broadband Networking.lnk =
> C:\Program Files\Microsoft Broadband Networking\MSBNTray.exe
> O4 - Startup: Microsoft Office.lnk = C:\Program
> Files\Microsoft Office\Office\OSA9.EXE
> O4 - Startup: BHODemon.lnk = C:\Program
> Files\BHODemon\BHODemon.exe
> O6 - HKCU\Software\Policies\Microsoft\Internet
> Explorer\Control Panel present
> O9 - Extra button: Messenger (HKLM)
> O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
> O12 - Plugin for .mp3:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
> O12 - Plugin for .mpeg:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
> O12 - Plugin for .mov:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
> O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
> O12 - Plugin for .mid:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
> O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B}
> (InstallShield Setup Player 2K2) -
> http://www.ipswitch.com/_installs/wsftp_le/setup.exe
> O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
> (McAfee.com Operating System Class) -
> http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
> O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389}
> (DwnldGroupMgr Class) -
> http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
> O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
> (Shockwave Flash Object) -
> http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
> O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
> Class) -
>
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38009.3258564815
> O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479}
> (EPSImageControl Class) -
> http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab

[Rick T]

You've got a pretty hefty startup.


You might want to look at your swapfile settings: with all that stuff
trying to wedge it way through the door at startup, the swapfile's
probably working overtime...

ControlPanel/System/Performance/VirtualMemory

Unless you're running an application far outside the normal 'consumer'
range, your settings should be:

"Let Windows Handle It"
Total Available should be (in your case) over 1GB(ie: 1000MB)
Min should be Zero
Max should be the same as Total Available.

As Mike suggested, you don't need the PCHealth program: uncheck that
from Start/Run/msconfig.exe/Startup and also from ScheduledTasks.


Then trim your startups - it's almost certainly a small glitch in one of
them that's causing the error message. Use the built-in functions (eg:
Options/Preferences) to stop your programs from loading at startup, as
much as possible. For the time being uncheck the AutoUpdate features, too.


RAMClean you may want to hang onto (and will need) if your PC is going
to be on for more than 3 days at a time without being rebooted. *But* it
can be run anytime, it doesn't need to be resident.

ATI Control Panel? Great idea if you have one of their All-In-Wonders or
are constantly switching monitor/TV, resolutions, GL Settings, etc.,
otherwise...

Adobe Acrobat? Super program, the full Reader version is a total hog.
The only reason you want it in your startup list is because it takes so
freakin' long to load. They have a slightly lighter version on their
website (but you have to hunt for it). Either way, for testing purposes,
disable it from autostarting.

McAfee - if you can keep the firewall up, while disabling any Active
Virus Scanning, for troubleshooting purposes, do so.

Compaq Support?.... what are you doing here? <grin>


Rinse, Lather and Repeat until you find the "culprit". Reinstall said
culprit onto your system using the latest from their website.




Rick
'course you may want to do that backwards... disable Autorunning
everything then bring them back in one by one.



Carlos wrote:
> OK, since you were kind enough to go the extra mile on
> this, I've run Hijackthis as suggested. I'm including the
> log file should you like to review it. Many, many thanks!
> Regards,
> Carlos
>
> Logfile of HijackThis v1.97.7
> Scan saved at 4:31:55 PM, on 5/19/2004
> Platform: Windows ME (Win9x 4.90.3000)
> MSIE: Internet Explorer v5.50 (5.50.4134.0600)
>
> Running processes:
> C:\WINDOWS\SYSTEM\KERNEL32.DLL
> C:\WINDOWS\SYSTEM\MSGSRV32.EXE
> C:\WINDOWS\SYSTEM\mmtask.tsk
> C:\WINDOWS\SYSTEM\MPREXE.EXE
> C:\WINDOWS\SYSTEM\MSTASK.EXE
> C:\WINDOWS\SYSTEM\STIMON.EXE
> C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
> C:\WINDOWS\SYSTEM\SSDPSRV.EXE
> C:\WINDOWS\EXPLORER.EXE
> C:\WINDOWS\TASKMON.EXE
> C:\WINDOWS\SYSTEM\SYSTRAY.EXE
> C:\WINDOWS\SYSTEM\HIDSERV.EXE
> C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
> C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
> C:\WINDOWS\SYSTEM\WMIEXE.EXE
> C:\COMPAQ\CPQINET\CPQINET.EXE
> C:\PROGRAM FILES\COMPAQ\DIGITAL DASHBOARD\DEVGULP.EXE
> C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
> C:\CPQS\BWTOOLS\SCCENTER.EXE
> C:\WINDOWS\PCTVOICE.EXE
> C:\PROGRAM FILES\MOTIVE\MOTMON.EXE
> C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
> C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL
> PANEL\ATIPTAXX.EXE
> C:\PROGRAM FILES\BROADJUMP\CLIENT FOUNDATION\CFD.EXE
> C:\PROGRAM FILES\MICROSOFT WORKS\WKSSB.EXE
> C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE
> C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
> C:\WINDOWS\WINHLP32.EXE
> C:\WINDOWS\SYSTEM\INTERNAT.EXE
> C:\WINDOWS\SYSTEM\E_S4I2C1.EXE
> C:\WINDOWS\SYSTEM\SPOOL32.EXE
> C:\WINDOWS\SYSTEM\DDHELP.EXE
> C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS
> SHARED\WKCALREM.EXE
> C:\PROGRAM FILES\MICROSOFT BROADBAND NETWORKING\MSBNTRAY.EXE
> C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
> C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
> C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
> C:\HIJACK\HIJACKTHIS.EXE
>
> R0 - HKCU\Software\Microsoft\Internet
> Explorer\Toolbar,LinksFolderName =
> O2 - BHO: (no name) -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM
> FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
> (disabled by BHODemon)
> O3 - Toolbar: McAfee VirusScan -
> {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM
> FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
> O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio -
> {8E718888-423F-11D2-876E-00A0C9082467} -
> C:\WINDOWS\SYSTEM\MSDXM.OCX
> O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe
> /autorun
> O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
> O4 - HKLM\..\Run: [PCHealth]
> C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
> O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
> O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
> powrprof.dll,LoadCurrentPwrScheme
> O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
> O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy
> Access Button Support\cpqeadm.exe
> O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy
> Access Button Support\eaclean.exe
> O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
> O4 - HKLM\..\Run: [Digital Dashboard] C:\Program
> Files\Compaq\Digital Dashboard\DevGulp.exe
> O4 - HKLM\..\Run: [Service Connection]
> c:\cpqs\bwtools\sccenter.exe
> O4 - HKLM\..\Run: [CountrySelection] pctptt.exe
> O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
> O4 - HKLM\..\Run: [MotiveMonitor] C:\Program
> Files\Motive\motmon.exe
> O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI
> Technologies\ATI Control Panel\atiptaxx.exe
> O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client
> Foundation\CFD.exe
> O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft
> Works\wkfud.exe
> O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program
> Files\Microsoft Works\WksSb.exe /AllUsers
> O4 - HKLM\..\Run: [VSOCheckTask]
> "C:\PROGRA~1\MCAFEE.COM\VSO\MCMNHDLR.EXE" /checktask
> O4 - HKLM\..\Run: [VirusScan Online]
> "C:\PROGRA~1\MCAFEE.COM\VSO\mcvsshld.exe"
> O4 - HKLM\..\Run: [MCAgentExe]
> C:\PROGRA~1\MCAFEE.COM\AGENT\mcagent.exe
> O4 - HKLM\..\Run: [MCUpdateExe]
> C:\PROGRA~1\MCAFEE.COM\AGENT\MCUPDATE.EXE
> O4 - HKLM\..\Run: internat.exe
> O4 - HKLM\..\Run: [CleanRam] C:\PROGRAM FILES\CLEAN
> RAM\CLEANRAM.EXE
> O4 - HKLM\..\Run: [EPSON Stylus C64 Series]
> C:\WINDOWS\SYSTEM\E_S4I2C1.EXE /P23 "EPSON Stylus C64
> Series" /O7 "EPUSB1:" /M "Stylus C64"
> O4 - HKLM\..\Run: [CleanUp]
> C:\PROGRA~1\MCAFEE.COM\SHARED\MCAPPINS.EXE /v=3 /cleanup
> O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
> powrprof.dll,LoadCurrentPwrScheme
> O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
> O4 - HKLM\..\RunServices: [*StateMgr]
> C:\WINDOWS\System\Restore\StateMgr.exe
> O4 - HKLM\..\RunServices: [StillImageMonitor]
> C:\WINDOWS\SYSTEM\STIMON.EXE
> O4 - HKLM\..\RunServices: [ATIPOLL] ati2evxx.exe
> O4 - HKLM\..\RunServices: [ATISmart]
> C:\WINDOWS\SYSTEM\ati2s9ag.exe
> O4 - HKLM\..\RunServices: [SSDPSRV]
> C:\WINDOWS\SYSTEM\ssdpsrv.exe
> O4 - HKLM\..\RunServices: [McVsRte]
> C:\PROGRA~1\MCAFEE.COM\VSO\mcvsrte.exe /embedding
> O4 - HKCU\..\Run: [SpyKiller] C:\Program
> Files\SpyKiller\spykiller.exe /startup
> O4 - Startup: Microsoft Works Calendar Reminders.lnk =
> C:\Program Files\Common Files\Microsoft Shared\Works
> Shared\wkcalrem.exe
> O4 - Startup: Compaq Knowledge Center.lnk = C:\Program
> Files\Compaq Knowledge Center\bin\silent.exe
> O4 - Startup: EPSON Status Monitor 3 Environment Check
> 2.lnk = C:\WINDOWS\SYSTEM\E_SRCV02.EXE
> O4 - Startup: PowerReg SchedulerV2.exe
> O4 - Startup: Microsoft Broadband Networking.lnk =
> C:\Program Files\Microsoft Broadband Networking\MSBNTray.exe
> O4 - Startup: Microsoft Office.lnk = C:\Program
> Files\Microsoft Office\Office\OSA9.EXE
> O4 - Startup: BHODemon.lnk = C:\Program
> Files\BHODemon\BHODemon.exe
> O6 - HKCU\Software\Policies\Microsoft\Internet
> Explorer\Control Panel present
> O9 - Extra button: Messenger (HKLM)
> O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
> O12 - Plugin for .mp3:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
> O12 - Plugin for .mpeg:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
> O12 - Plugin for .mov:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
> O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
> O12 - Plugin for .mid:
> C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
> O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B}
> (InstallShield Setup Player 2K2) -
> http://www.ipswitch.com/_installs/wsftp_le/setup.exe
> O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
> (McAfee.com Operating System Class) -
> http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab
> O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389}
> (DwnldGroupMgr Class) -
> http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab
> O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
> (Shockwave Flash Object) -
> http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
> O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
> Class) -
> http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38009.3258564815
> O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479}
> (EPSImageControl Class) -
> http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab
>
>
>
>>-----Original Message-----
>>I suggest that you download and run HijackThis you might
>
> be surprised at what
>
>>you find.
>>--
>>Mike Maltby MS-MVP

>>
>>
>>Carlos > wrote:
>>
>>[i]
>>>Thank you for your help. I have AdAware installed, also i
>>>subscribed to McAffee and runs constantly, besides I have
>>>Spy Bot and Cshredder. The only thing I didn't do is
>>>Hijackthis. Since My system is out of warranty I can't even
>>>get help from MS (they want about $40 a pop).
>>>Because of this, and the miriad of messages I see here with
>>>so many problems, I've decided to use Mozilla 1.6. Runs
>>>smoothly and creates no problems. So much for my loyalty to
>>>MS products :) Any comments on Mozilla?
>>>Bunch of good luck to everyone and again, thank you for
>>>your efforts.
>>
>>
>>.
>
>>