PC Pals Forum
Technical Help & Discussion => Windows PCs & Software: Help, News & Discussion => Topic started by: Pwilsonscott on December 08, 2003, 22:46
-
Hello. I sent in this problem a few weeks ago, and thought it had been resolved, but it is happening again. Several games attempt to start and then are sent to the task bar. If i press Control/Alt/Delete the Device Manager says it is running and occasionally choosing the "switch to" option allows the game to run, sometimes right clicking on the programme on the task bar runs the programme and sometimes restarting the computer allows the game to run ok. I think i have the latest driver for my graphics card and the screen resolution has not changed from previously. This is so frustrating because of the intermittent nature of the problem.
I am running windows xp. It seems there may be something else running that may be causing a conflict but i have very few things installed as it is a new system.
-
Has this one been missed ? I just saw it sitting here all alone and lonely. ;D
-
All I can suggest is a total Anti Virus scan, first updating your AV software, and also a spyware scan with either Ad Aware or Spybot, or both. PWS, are you sure that you don't have a pop up stopper running? Maybe incorporated in your AV software, or any other ad blocking utilities you may have? Hopefully someone more technical may be able to help further.
-
Thank-you. How can i tell if a pop-up stopper is running ?
-
Usually you have to install them, PWS, so you would know if you had one, but it should appear as an icon in your system tray (by your clock), if one is running. Thinking about it, if your problem is intermittent, it may well be something totally different, but until one of our techies has a better idea, anything might be worth a try. Sorry if this isn't much help.
-
Thanks. The intermittent nature of the problem makes me think it is not the graphics driver causing the problem as i would expect it to occur all the time. I am not sure how to do a spyware scan, but i have Norton antivirus and there are no viruses detected. There is a box just above the task bar which says "Allowing Pop-Ups" I have also noticed when i right click on the programme that has been sent to the task bar, the screen will flicker a number of times and the music for the game can sometimes be heard in the background. Agsin, shutdown and re-start sometimes cures the problem, sometimes not. To be honest, it is driving me mad but i am at a loss to know what to do. I am grateful for any suggestions, and i am fairly new to using a PC.
-
Just another thought, could it be a screen resolution issue ?
-
If you have something which is saying "Allowing Pop Ups", that would indicate that you do have a pop up stopper installed, but if it's allowing them, that shouldn't cause the problems you are having. Just as an experiment, can you right click the icon where it says "Allowing Pop Ups" and see if you can Exit, or Disable it, then try your games? That will then eliminate the Pop Up Stopper as being the culprit, or prove that it's guilty.
It doesn't really sound like a Spyware issue, but if you want to see what's lurking on your machine, you could download and run a program called Ad Aware (http://download.com.com/3000-2144-10214379.html?tag=lst-0-1), which will find and allow you to remove any spyware on your PC. Make sure, before you run the scan, you click "Check For Updates", and download the latest definitions.
I'm still hoping someone more technical will show up soon! ::) ;)
-
So do I Simon, its got me stumped :(
Intermittent problems are always the worst to fix as you think its sorted then all of a sudden it does it again.
Check Direct X is the latest version, possibly uninstall and reinstall the graphics card are all that I can think of at the moment to try ???
-
Thank-you Sandra and Simon.
1. I have Direct X 9.0
2. I previously removed and re-installed the graphics card driver from the CD, and everything was fine for a while until now
3. If i click on the down arrow by the "allowing Pop-Ups box there is an option to turn pop-up controls on (then the box says "blocking pop-ups" ), then the option changes to turn pop-up controls off which is the one currently selected. I do not remember installing this but could it be part of AOL because the other option is "set up Pop-up control preferences" which is an AOL box gives me the option to block pop ups from AOL sites, which is not selected. There does not seem to be an option to turn the whole thing off
4. When i started up my system this morning, i got a message which i have see from time to time which says " Debug Assertion ffailed " and a message about "Natural Colorload.exe" I am given the option to Cancel, Retry, or Ignore. If i ignore, i can see nothing wrong, if i re-try then i get a message about sending an error report to microsoft.
5. Strangely, all programmes i try seem to be running fine this morning, ie not returning me to the desktop, and i have changed nothing since last night.
I appreciate how difficult this may be to resolve. Thanks very much for your interest.
-
Just in case the screen resolution could be a factor in the problem, it is currently at 1024 x 768 Colour quality highest (32 bit). I am not sure if games will select their own screen resolution.
-
Now you have mentioned AOL, PWS, I'm wondering if that could be something to do with the problem. AOL does tend to do funny things sometimes, and not always what you want. To be honest, never having used it, I'm not even sure how AOL works. Do you actually have to have it running to be able to use your PC at all, or could you possible try to run the games without AOL running?
-
I am fairly sure that the problem still occurs even when i am not connected to the internet via AOL.
-
Well, I haven't any more suggestions, but I'm sure someone will come up with an answer sooner or later.
:-\
-
I cant find anything at all about the Natural Colorload.exe
Nothing helpful about the debug failure either although it appears to be something to do with a coding problem but I cant see that being relevant to your current problem ???
-
I think you are right about the debug assertion failure not being connected to the problem, since that message this morning the problem has not re-occurred, but with intermittent problems you never know when they are fixed. Do you know what my screen resolution should be set to ? (if this is connected to the problem at all)
-
Just another thought, along the "anything is worth a try" theory, assuming you run your games from shortcut icons on your desktop, how about right clicking the icon, then selecting the 'Shortcut' tab, and change the 'Run' option to 'Maximised'? Below is a screenshot of what I mean. That particular example is set to 'Normal Window', but you can change them, so that whenever you launch the shortcut, the window opens Maximised.
-
The only shortcut icons i have on my desktop are internet explorer and msn explorer. All the problems i have had are from games that try to run when i insert the CD for the game that is already installed, or for games that are installed and have an entry visible when i click the start button in the bottom left hand corner which lists some frequently used programmes.
-
At this time ( 9-10 PM) no programmes will run, they are all sent to the task bar and i am returned to the desk top. In one programme i can hear the sart up music playing but i cant see the game. At various times during today, all programmes were running fine. Could there be a task the computer is performing at certain times, not allowing these games to run ?( Although Control/Alt/Delete shows me the only programme running is the game itself)
-
Having said that, i just tried another game and it works fine. Its so frustrating !!
-
Its so frustrating !!
Yes, it is, when you can't find the answer to something, especially as it will probably turn out to be something silly! ::)
-
"frustrating"
Yes I know that feeling :P
-
I thought that I had replied about the screen res just after Simon posted that screenshot but its disappeared ???
I cant see it being anything to do with the screen res as most games set it to their requirements and if the rest of the stuff on your pc look ok then I should leave it alone.
Its possibly still a direct X/graphic card driver issue so maybe try unistalling again and reinstalling ???
-
Yes, i have tried that before but since then the problem has re-occured. Do you think i should look for the latest driver for my card on the internet (even though my system is new) and download it. and should i un-install the old one before doing so.
Another thing i noticed last night was that one game which appeared above the start menu when to the task bar when i single clicked on it (then would not run from there) and ran OK when i double clicked on it.
This morning all games are working fine, even when connected to the internet.
-
I would definately look for the latest drivers on the manufacturers site as even though you have a new PC, the card that is fitted could have been in stock for a few months before the PC was actually built :)
-
it sounds like EXPLORER is taking focus from all other applications.
Do you have active desktop running?
Perhaps there is some malicious software that takes the focus (but is invisible).
I have heard of this before, but alas, cannot remember the solution.
-
Can you explain what active desktop is and how i tell if it is running ? Can i remove explorer ?
-
I really feel that this is at the heart of the problem, something else running and "pushing the intended programme aside" if that makes any sense, but not all the time - leading to the intermittent nature of the problem. I guess its just a case of finding out what it is and making it stop. I am not sure what active desktop is though.When the problem occurs, it really seems as if the game is trying to show itself, ie the screen flickers a number of times before returning to the desktop. I mentioned before that double clicking on one game in particular on the start menu makes it run ok, but a single click sends it to the task bar- which seems very odd to me.
-
If you have a wallpaper set on your desktop then it is "Active".
Right click on an empty space on your desktop and select peoperties then Desktop from the tab at the top of the box that appears, then None from the list and apply.
That will remove the wallpaper and stop it being active.
If that solves the problem maybe we can work around it in some way.
If it doesnt and you want your wallpaper back then just select the wallpaper option again :)
-
If you press the Ctrl + Alt + Delete keys together, just once, when the problem occurs again, you should then get the Windows Task Manager come up. If you click the Processes tab, it will tell you what else is running on your system at that point in time.
-
There was a picture as my desktop, which i have removed ( slected none ). The problem is still there, still on this particular game which a single left click sends to the task bar, a double left click runs ok. Other games at the moment are all being sent to the taskbar, all them ran fine this morning. The above mentioned game is a darts demo which was on a free CD. Do you think i should remove it ?
-
Just for extra information, the problem has just occured and a pressed Cntrl/Alt/Delete. Under processes, there are about 40 entries, under CPU they all say 0 except for the game itself which says 99, although this flickers between 97 and 99.
Under Mem usage all entries have figures in k values, some change in value eg explorer.exe
Thanks again for your interest.
-
Hope this means something. I have just tried to run a game and it went to the task bar and i was returned to the desktop. When i pressed Cntrl/Alt/Delete to pull up the Windows Task Manager, and select processes, all the entries had 0 under CPU heading except the last entry which was called System Idle Process.
Image name = system idle process
User Name = SYSTEM
CPU = 99
Mem usage = 20 k
When i tried to end the process there was a warning message about causing undesired results so i left it alone,
Could this be connected to the intermittent problem ?
-
Sorry PWS, the System Idle Process is what your PC does when it doesn't have anything better to do :-\
This problem is taxing our best brains here. We only have two teccies left, who haven't made a contribution yet - so hopefully they will be able to help soon.
Dack and Lobo where are you?
-
Currently involved in a murder case (honest!) and house repair so will try and have a look at the problem in the morning :)
Does sound like an explorer or DirectX related issue from the cursory glance I've had.
Firstly worth checking your direct X setup.
From the Start menu choose RUN and then type DXDIAG and press return
This will then carry out the Direct X test - important to note the status/versions of the drivers you have installed (are they certified etc. and does the full screen option work correctly).
I also notice you haven't said what graphics card etc you have installed - I'd guess at a Kyro 2 based one as the Naturalcolor.exe line mentioned earlier seems vaguely familiar. Also worth mentioning what games are showing the problem.
Now off to bed before the girlfriend kills me :)
-
Then again :)
Could you download and run Hijack this from tomcoyote.org/hjt/ (http://tomcoyote.org/hjt/)
Hit the scan key, save the log anfd then post it here. Just found a similar problem someone had when they had some spyware installed......always best to check.
-
@Pwilsonscott
It seems to me that it is a graphics problem, is your Video Card up to game specification, also if your CPU is working at 99% all the time that will make any game difficult to run, fitting additional memory may help and allocating more virtual memory would help also
Make a new profile as a games profile and only load necessary drivers and programs and see if that helps (open user accounts in my control panel)
Brian
:o
-
Here are the results from running dxdiag
Under display tab -
Name:Radeon 9200SE, Manufacturer:ATI technologies
Chip type:Radeon 9200 SE AGP(0 x 5964)
DAC type:Internal DAC (400 Mhz)
Approx total memory:128.0 Mb
Current display mode:1024x768(32bit)(35Mhz)
Monitor:Syncmaster753DF(X)
Under drivers tab -
Main driver:ati2dvag.dll
version:6.14.0010.6368(English)
Date:25/06/2003 21:40:44
WHQL Logo'd:n/a
Mini VDD:ati2mtag.sys
VDD:n/a
DDI Version 9(or higher)
Under Direct X features -
Direct Draw Acceleration:Enabled
Direct 3D Acceleration:Enabled
AGP texture Acceleration:Enabled
There are options to test direct draw and direct 3D
Notes:no problems found
There is no mention of the drivers being certifed or not, and i cannot find mention of a full screen option.
Under the system tab, at the bottom it says Direct X version 9.0(4.09.000.0900)
I have not yet downloaded and run Hijack from the address given earlier, but i can do that and send you the results after you have seen the above information. Hope it means something to you.
-
It's under the 'Display' option of dxdiag. You need to press the buttons marked "test directdraw" and "test direct3d".
It will then carry out a few tests - one of these is the full screen option.
The Hijackthis log will give information on what applications you have running at startup etc.
-
I pressed test direct draw, it carried out some tests and asked me what i saw. The full screen test showed a white bouncing box although it did not travel to the edges of the screen.
I pressed the test direct 3D option, it said it would test various things, but each time i clicked on them, it reurned with the message - "you cancelled the test by pressing a key" but i did not touch anything. Is this significant ?
-
Yes :)
This sound familiar:
http://oldlook.experts-exchange.com/Web/Graphics/Q_20808658.html (http://oldlook.experts-exchange.com/Web/Graphics/Q_20808658.html)
Definately think you need to run Hijack this now - just do the scan - don't try and fix anything yet.
-
I cant find where the option is on mine, maybe its because I have a different graphics card in since the last time I saw it, or maybe its because I am not usually awake at this time of day ???
Thers an option to reduce the hardware acceleration in case of display problems, if I remember correctly.
If you can find it try dropping it to between half and two thirds of maximum and see if that helps :)
-
1. I can get into the tomcoyote.org site but when i try the hijack this option (tomcoyote.org/hjt/ it says the web site is not responding
2. When i run dxdiag, under the Sound 1 tab there is Hardware sound acceleration set to full, the same under the Sound 2 tab. Are these the settings i should reduce ?
-
It looks like the link Dack posted may offer a solution. I did suggest scanning with Ad Aware and Spybot earlier on, did you get round to doing that, PWS?
-
Curiouser and curiouser - I just tried downloading from there and it all worked correctly.
Try here instead:
http://mjc1.com/mirror/hjt/ (http://mjc1.com/mirror/hjt/)
Failing that:
http://www.merijn.org/files/hijackthis.zip (http://www.merijn.org/files/hijackthis.zip)
-
That link definitely works. To prove it, here's mine:
Logfile of HijackThis v1.97.7
Scan saved at 11:11:17, on 14/12/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\System32\GSICON.EXE
C:\WINDOWS\System32\dslagent.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Anti-Trojan-55\ATWatch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\mozilla.org\Mozilla\Mozilla.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\TrayMin\traymin.exe
C:\Program Files\Star Downloader\stardown.exe
C:\Documents and Settings\Simon\Desktop\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2EF37A01-884F-11d5-AC99-B112050ECB4F} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6754A456-BAD9-11D4-93D3-00B0D03A2F91} - (no file)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [EPSON Stylus C62 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C62 Series" /O5 "LPT1:" /M "Stylus C62"
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Anti-Trojan-Watch] C:\Program Files\Anti-Trojan-55\ATWatch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [EPSON Stylus C62 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /A "C:\WINDOWS\System32\E_S17.tmp"
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: TrayMin.lnk = C:\Program Files\TrayMin\traymin.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: Customize Menu &4 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms &] - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Fill from Passcard &' - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillPass.html
O8 - Extra context menu item: Save Forms &[ - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: ieSpell (HKLM)
O9 - Extra 'Tools' menuitem: ieSpell (HKLM)
O9 - Extra 'Tools' menuitem: ieSpell Options (HKLM)
O9 - Extra button: Fill Forms (HKLM)
O9 - Extra 'Tools' menuitem: Fill Forms &] (HKLM)
O9 - Extra button: Save (HKLM)
O9 - Extra 'Tools' menuitem: Save Forms &[ (HKLM)
O9 - Extra button: RoboForm (HKLM)
O9 - Extra 'Tools' menuitem: RF Toolbar &2 (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 (HKLM)
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 (HKLM)
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4BEE3896-4820-48D1-85EA-5A9A9ECD3D95} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://D:\Resources\IntraLaunch.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A25D365E-A502-4B5D-B3D3-F0FE15E5B553}: NameServer = 158.43.240.3 158.43.240.4
-
I read the link and it seems that it is just like my problem. It mentions Norton firewall, and i have Norton antivirus software installed.
I am unsure how to scan with adware and spybot. Can you take me through it (sorry if you have already explained, i am feeling a little confused)
I will also try the hijack this site you gave me after your reply, but i dont know how to send you the whole report without typing it in.
-
Do the Hijack This thing first, PWS, as that will give Dack the info he needs. When you've run the scan, click the 'Save Log' button, and it will save as a notepad text file, which you can then copy and paste onto here.
-
Spybot can be downloaded from:
security.kolla.de (http://security.kolla.de)
Download, install, run, then check for updates (this is very important as there will be some), download the updates.
Then close all explorer windows (another important point)
Then 'check for problems' and wait a while :)
By default it will select all the nasties it can find - then just click 'fix selected'.
You may need to reboot and scan again if anything is in memory when you run Spybot.
Then worth doing a HijackThis as it could find any that Spybot has missed.
Click the scan button and you will notice it turns into "save to log".
Click the save to log button and save it somewhere, this will also open the log in notepad. In notepad select 'edit' and then 'select all'. Then choose 'edit' 'copy'. This copies the log into your clipboard.
When you come back to this site then make a new post and you can simply right click over the post entry window and select 'paste' from the pop up menu.
-
Logfile of HijackThis v1.97.7
Scan saved at 11:22:52, on 14/12/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AOL 8.0\aoltray.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\AOL 8.0\waol.exe
C:\Program Files\AOL 8.0\shellmon.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\unzipped\hijackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microlanduk.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.microlanduk.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: AOL 8.0 Tray Icon.lnk = C:\Program Files\AOL 8.0\aoltray.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NaturalColorLoad.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.microlanduk.com
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37891.1008912037
O17 - HKLM\System\CCS\Services\Tcpip\..\{B4A668E8-8C00-4A99-A191-9B6AD0C11818}: NameServer = 195.93.50.13
Hope this is OK. I am not very good with copy and paste. I scanned with hijack this, saved the report, opened it, highlited all the text and selected copy, the selected paste onto this area.
-
Sorry. i missed the very last digit where it says Nameserver =. It should read 195.93.50.134
-
I will now follow the instructions for spybot.
Shall i post the Hijack this report again after it has run ?
-
Yes - initial look at the above log doesn't show anything strange. Do you have two firewalls installed though? (Agnitum and Norton)
-
Yes, i believe so. I think the agnitum one was on a free CD. Shold i remove it ?
Meanwhile i have installed spybot, i will now run it, and let you know what i find.
-
Any thoughts on the hardware acceleration thing Dack ?
I know GK had problems playing DVDs on his pc and mangaed to get them playing smoother by dropping it a bit while playing DVDs then returning to full for normal use ???
-
I have run spybot. There were 21 problems found(i have printed out a list) and i fixed them. I re-booted and re-ran it, it said 0 problems found. I have re-run Hijackthis and here are the results -
Logfile of HijackThis v1.97.7
Scan saved at 12:39:26, on 14/12/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Norton Internet Security\ccPxySvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AOL 8.0\aoltray.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\AOL 8.0\waol.exe
C:\Program Files\AOL 8.0\shellmon.exe
C:\unzipped\hijackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microlanduk.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.microlanduk.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: AOL 8.0 Tray Icon.lnk = C:\Program Files\AOL 8.0\aoltray.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NaturalColorLoad.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Real.com (HKLM)
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.microlanduk.com
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37891.1008912037
O17 - HKLM\System\CCS\Services\Tcpip\..\{B4A668E8-8C00-4A99-A191-9B6AD0C11818}: NameServer = 195.93.51.134
-
Got to go out for a while so will have a good look later - nothing really out of the ordinary at first glance.
Would consider uninstalling one of the firewalls, probably agnitium, as 'odd' things can happen when trying to run two (apart from the performance impact on the system). Did the problem manifest itself after the installation of agnitium?
(Personally I'd throw Norton out of the window as I don't really rate their stuff :))
Then try running the games and see what happens.
One thing though - could you navigate to the naturalcolor program and right click on it to see if there is any information on it. It's always good to know what applications are.
@Sandra - reason I'm disinclined to think it's a graphics issue is because of the fact it was running OK after an install and the problem only appeared after a few weeks. A possible cause could be that the AGP drivers have been updated and are causing a problem - may be worth dropping the AGP speed down to 4x in the bios and seeing what happens, or dropping the acceleration in display settings, settings, advanced, troubleshoot.
-
I don't remember if the problem occured before installing agnitum firewall, but i will remove it now, i am sure i don't need both. I am happy to remove the Norton anti virus software, can you recommend something better ? The previous link with the same problem suggested the problem could be solved by removing Norton. I will also try to find the Naturalcolor load programme and right click on it to found out something that might help. Thanks again
-
Firewall and Anti Virus are two separate things, PWS. I would leave Norton Anti Virus alone, as that offers valuable protection. Obviously there are others available, but as you've got Norton, and presumably your subscription is paid up for the year, you might as well keep it, in my opinion.
Second guessing Dack, I think he was probably referring to Norton Internet Security, which you also appear to have running. This would have Norton Firewall integrated within, which should be all you need, providing it's running correctly.
Don't take my word for it though, hang on for Dack's confirmation - he's the expert! :)
-
Yes i thought anti virus and firewall were the same thing. Sorry. I do have norton internet security, which appears as an icon on the task bar by the clock, and when i click on it gives options for virus scan and someother things including personal firewall. Also i have found the naturalcolor programme, right clicking gives information. What would be useful to you - I will await further instructions. Thank-you
-
As asked for earlier, here is a list of games i have just tried and how they are running
Rallisport challenge - Runs fine ( this has allways run fine ) but i got a message, which i have seen with this game before which says "The last time you started Rallisport challenge it did not exit succesfully - recommend you run with low graphics detail" (which i allways do)
Curse of Monkey Island - runs fine
Emperor Rise of Middle Kingdom - Sent to taskbar
Dart m Up (free demo)- Runs OK with a double click, but sent to taskbar with a single click(and when i try to restore it from the taskbar the screen seems to be in a different resolution but it wont run)
Tiger Woods PGA 2003 - sent to task bar
Destroyer Command - sent to taskbar
Silent Hunter 2 - sent to taskbar (Control/Alt/Delete says that SH2 screen blanker running)
-
Firstly - looks like it's not a Spyware related issue. Your logs are clean. (You may want to run Spybot and choose the immunise options however)
Secondly - You are not alone (bet that makes you feel better :) )
For rise of middle kingdom:
http://forums.belution.com/en/directx/000/002/03s.shtml (http://forums.belution.com/en/directx/000/002/03s.shtml)
For Tiger Woods:
http://www.vapournet.com/~danny/starwraith/viewthread.php?tid=72 (http://www.vapournet.com/~danny/starwraith/viewthread.php?tid=72)
and
http://forums.belution.com/en/directx/000/001/72.shtml (http://forums.belution.com/en/directx/000/001/72.shtml)
etc....
Looks like its a direct X issue with the ATI drivers >:( Games that use open GL seem unaffected.
I'm guessing that recently you've done a windows update which installed direct X 9 and it's this that is causing the problems.
Solutions:
1. One theory is that it is caused by the ATI keypoller service so you can disable it :)
Start -> Run -> services.msc
Find the ati hotkey poller service (near the top) right click select properties and in startup type change it to disabled, click apply and reboot.
Or
2. Try and 'rollback' XP until the time before Direct X 9 was installed.
I'd try 1 first and then try the DirectX tests again.
-
And for a list of other ATI related driver issues:
http://www.rage3d.com/board/showthread.php?s=&threadid=33705231 (http://www.rage3d.com/board/showthread.php?s=&threadid=33705231)
There are other related issues that may need addressing:
1. Shutting down the ATI icon.
Bring up the Display Properties->Advanced dialog, select the Options tab, and uncheck "Enable ATI taskbar icon application". This will automatically disable "Show ATI icon on taskbar". Click Apply/OK
2. Disabling the XP Sticky Keys.
Goto the control panel and open the accessibilty options. There are several things that will need to be configured; for each feature (in XP there are 5 of them), select settings, and deselect "Use Shortcut". Just deselecting the feature is not enough since it watches the keys. Now on the general tab, you'll want to deselect the "Give warning message" option since this causes a dialog to pop up prompting you on if you want to enable the accessibility feature. If that dialog pops up while you are in a full screen game or something, then this dialog will force you to jump to the desktop (which in some games is not a problem, you just go back, but in some it causes the game to hang or even close).
Taken from http://www.rage3d.com/board/showthread.php?s=&postid=1332318213 (http://www.rage3d.com/board/showthread.php?s=&postid=1332318213)
Both of these have been implicated in the minimize problem and the fact you have got two firewall installed may have been enough to start triggering the problem mentioned in 2.
-
Thank-you, i will try each of those in turn and let you know the outcome tomorrow, although with intemittent problems its difficult to know when the problem has been fixed, but if anything it seems to be getting worse. I dont recall installing direct X 9.0 but i have done a windows update, or i think it might have come with the Tiger woods game, though that may have been version 8.0.
Just to clear up something, the earlier link you gave me where someone else had the same problems, including the test direct 3D issue about being cancelled by pressing a key (even though i pressed nothing) pointed to 2 things
1) Uninstalling Norton firewall - i have Norton Internet security, which i think has a firewall as part of it, can i just remove the firewall or the whole thing, and what to replace it with
2) It mentioned msconfig.exe and disactivating gd_chost0000_el - i have run msconfig from the start menu and i cannot find mention of gd_chost_0000el
-
The earlier link looks as if it was a bit of a red herring - sorry. I'd hazzard a guess that they'd 'fixed' it by rolling back to when the firewall was uninstalled.
This time, knowing some of the software affected and the fact it was a Radeon, I went to rage3d.com which is pretty much the definitive resource for Radeon/Ati issues.
From your earlier posting, with dxdiag information, you have definitely got Direct X 9 installed.
Probably best to do all the 3 suggestions made in the last two posts of mine and then see if the software works correctly. (Shut down Icon, shut down service, stop the sticky keys).
As to firewalls I do not have any experience of Norton firewall (I use Kerio as I like twiddling :) ) so could not tell you how to use Norton internet security or what else it affects. (Just looked at the advertising blurb and seen it includes anti-spam software, anti-virus and a firewall so probably a good idea to just stick with it and remove agnitum).
Remember to do the immunize on Spybot though.
-
Thanks. I will do all the previous suggestions when i get home from work tonight. This thing about NaturalColorload came up again when i started up this morning. The exact message is :
Debug Assertion Failed !
Program : C:\Program Files\SEC\Natural Color\NaturalColorload.exe File : C :\WORK\nc2_20020220\iu1R\NaturalColorload\SystemTray.cpp Line:124
For information on how your program can cause an assertion failure, see the visual C++ documentation on asserts. Press retry to debug the appplication
There are 3 options, Abort,Retry,Ignore
Retry gives NaturalColor load.exe has encountered a problem and needs to close, and something about sending an error report to Microsoft which i have done.
Note : where above says iu1R it should read greek letter u (ie with a tail on the left hand side and in italics) the 1 is small and to the upper right of the u, and the R is in a circle.
I will report back on the other suggestions this evening. Many thanks
-
Just 1 more thing before i go to work, not sure if its connected but but i want to give you all the information that i can. As i am looking at the screen now, there is a light blue bar at the bottom of the window, just above the task bar, that says Done if the left hand corner when a site has been found and a box towards the right corner which say Allowing Pop-Ups with a down arrow, and the number 0 next to it. The bottom portion of this whole bar is masked by the task bar, and if i click on the dark blue bar at the top where it says PC Pals Forum and darg upwards, the whole bar becomes visible but some of the dark blue bar at the top becomes masked by the place where i type in Web site adresses.
-
IF you right click on Naturalcolor.exe and get the properties on it (date, time) and any extra info e.g. Copyright information etc. then it could be useful. Possibly installed with either a printer or the graphics card.
Not sure about your blue bar but what happens when you right click on that - sound a bit popup stopper/Norton like.
-
Dack, could it be something to do with AOL, which I believe also has a built in pop up stopper?
-
Remove Naturalcolor from the PC unless it is essential for your operating system
Brian ;D
-
I have run Spybot and chosen immunize
I have disabled ati hotkey poller service by running services.msc
All games and programmes i have tried this evening are running perfectly !! The Direct X tests (both of them) are fine - no problem with the second test saying i cancelled it by pressing a key as before.
I guess its hard to say the problem is solved as its intermittent but i am so grateful for your help so far.
Is it OK to leaves the ati hotkey poller service disabled ?
Shall i still look at the other issues mentioned -
1) Running Ad Aware
2) Shutting down the ATI icon
3) Disabling the XP sticky keys
4) Rolling back XP until the time before Direct X 9 was installed
Many thanks again for all your help
I will let you know if anything re-occurs
Happy Christmas !
-
Sounds like thats the problem sorted (for now at least :) ) so don't really need to do anything else at the moment.
The keyboard service problem is apparently a known bug that has existed from driver version 3.5 onwards - they just haven't fixed it. You should be perfectly safe leaving it disabled.
(Probably worth checking that any further updates to your system don't re-install the ATI keyboard service though :) )
ATI icon and sticky keys - I wouldn't bother with those at present.
AdAware does a similar job to Spybot but each picks up things the other doesn't. That was the fix in case it was spyware related. Always good to have at least one of those products installed anyways.
Not worth rolling back - would keep that as a last resort if the problem reappears at some point in the future. (And shutting down the keyboard service, icon and sticky keys have failed to fix).
One other thing you may want to consider doing, unrelated to your problem but should improve your internet surfing. If you haven't done so already - run the services.msc again and STOP and then DISABLE the 'Messenger' service. This is not internet messenger but a 'feature' of XP thats intended to be used by network printers etc. for putting alerts on your screen. Unfortunately Microsoft don't check that these messages come from your local network and so spammers have been sending messages using it. These then pop-up on your screen with such great titles as "click here to find out how you can spam thousands of people" >:(. Disabling it stops that little exploit.