Author Topic: [Resolved] Programs 'deselecting' themseves...  (Read 5008 times)

0 Members and 1 Guest are viewing this topic.

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #30 on: December 22, 2009, 11:06:46 AM »
Hi Hoov,

After I posted the previous message I selected 'normal startup' and restarted.  As of yet the problem has not occured.  While I'm happy about the fact that it seems to be fixed I am very curious about what has fixed the problem because it has me totally baffled  ???

Anyway, I suppose I should just be grateful that it's fixed.  Maybe this is santa's earlier delivery because I have been (mostly) good this year  ;D.

I appreciate you are probably a very busy person at the best of times, let alone at christmas, so I would like to say a big Thank You! again for all your time helping me with this problem.  If it's ok maybe you could leave the thread open for a couple more days while I confirm the problem has gone?  I don't mind when you get around to answering my next post which, hopefully, will just be confirming the computer is working properly.

Thanks again  :)

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22649
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #31 on: December 22, 2009, 11:50:29 AM »
What could have happened was there was an update that got stuck partially done, and with the partial startup configurations, got a chance to finish. I have seen things get fixed for no good reason whatsoever, before, so I am not too surprised.

We generally leave these threads open for about 10 days before marking them inactive. So if you could run your computer for a couple days, make sure that you reboot a couple times at least during that period, that will give any problem a chance to come back.

I am going to give you the all clear speech. There are a few things for you to do, and there is some information that you may find useful in the future.

Cleaning out Temporary Files etc. There are several different products that you can use for this. You can go thru the Internet Options in the windows Control Panel. There are several programs that also do the job better than windows does it, in my opinion. There is System Security Suite, EasyCleaner, Ccleaner. Also sometimes other program sometimes do it as well as what you originally got it for like ZoneAlarm Security Suite. Just make sure to keep them updated and use them regularly.

Disable and Enable System Restore.
I recommend you turn off System restore, and then turn it back on so that you will not be able to restore your problems to a clean computer.
For XP use these instructions, Windows XP System Restore Guide
Reboot
Re-enable system restore with instructions from tutorial above
Create a System Restore Point
Go to all programs, then to accessories, then to system tools, then to system restore. Check the box for create restore point (not select a restore point), then click next and follow the instructions.

Make your Internet Explorer more secure - This can be done by following these simple instructions: (unless you are using ZoneAlarm Security Suite or something similar, then you would secure the browser thru the firewall). There are some good basic instructions for that here.

Use a different browser other than  IE (most exploits are pointed towards IE). One of them is
Firefox.
It is also worth trying Thunderbird for controlling spam in your e-mail.

Always use an UPDATED anti-virus program Make sure you update this at least weekly, if not more often. This is one thing that may Ave you more than anything else.

Run malware scanners. Three free ones are Spybot Search and Destroy, and AdAware and Malwarebytes' Anti-Malware

Always use a firewall.
Any firewall is better than none, and you should pick a firewall that you will use, as even the best firewall is worthless if you turn it off.
 
Learn how to use your firewall Only programs that need it should have access to the net. But these are specific to the firewall you use, so you will need to learn how. Several firewalls have support forums here. My page will help you with ZoneAlarm if that is what you choose. 


Never run two Antivirus programs or two Firewalls  at the same time. They can interfere with each other and cause problems. Some people swear that more protection is provided, but the reverse is true. They tend to argue amongst themselves and end up leaving holes. Now I have more than 1 AV installed on my computer, and I keep them up to date. I only run one at a time, but each program has weakness's, so I keep a backup in case my computer starts acting up.


 MOST IMPORTANT : Windows and IE, and whatever other software that you have that connects to the net, needs to be kept updated. The reason is, these programs connect to the net, and if there is an internal security problem, you have already told your firewall to allow the communication, and thus you will have allowed a hole. UPDATES are important. I suggest that you make sure that Windows Updates and the updates for your antivirus and antimalware programs are set for automatic updates. I also suggest running Secunia PSI. It will monitor the software you have installed and let you know when something needs to be updated.

Don't ever use P2P or filesharing software Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The reason for this is simple. File sharing relies on its members giving and gaining unfettered access to computers across the P2P network. However, this practice can make you vulnerable to data and identity theft. Even if you change those risky default settings to a safer configuration, the act of downloading files from an anonymous source greatly increases your exposure to infection. That is because the files you are downloading may actually contain a disguised threat. Many very malicious worms and trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities.

Before using any malware detection / removal software Check with Rogue/Suspect Spyware List and Rogue Applications List That way you will know if the program you are looking at is on the up and up. If you want to know how it stacks up against other programs check out SpywareWarrior

We have a good guide here at Spyware Hammer on how to prevent Malware in the Future. You might want to peruse this and follow the recommendations in there.
PLEASE READ IT AND FOLLOW THE RECOMMENDATIONS TO PROTECT YOURSELF.

Let us know if you have any more problems, either new or old.
Have a good time surfing the net, but stay safe.
If you have no more problems, let me know and I will mark this as resolved. Or if you have more questions, ask away, that is why I am here.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #32 on: December 30, 2009, 06:50:37 AM »
Hi Hoov,

Firstly, I hope you had a good christmas and thanks for your help so far  :) .

Thanks for reopening the thread for me.  As I previously posted - the original problem I wanted to get fixed has now gone.  Programs no longer 'deselect' themselves  :) .

Sadly I seem to be having more of a problem now with the 'DHCP' error that is disconnecting me from my wireless router.  You mentioned this error while helping me fix the original problem and I think it was disconnecting me beforehand but I didnt realise this was the cause.  I'm not sure whether it's related to the first problem but it seems to be a bit worse now and when I get disconnected the error occurs several times in a row and lasts for 3-5+ minutes.

The wireless router I am connected to has another laptop connected to it and this is not having the same error so I don't think it's a problem with the router.

EVENT ID : 1003
SOURCE : DHCP

Your computer was not able to renew it's address from the network (from the DHCP server) for the Network Card with network address 001302A18621.  The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.


If you could help I would appreciate it.

Thanks

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #33 on: December 30, 2009, 10:17:22 AM »

Just thought about some other things that may be part of the problem.  I am get ntdll.dll errors sometimes and this is shortly followed by Drwatson Postmortem errors and explorer.exe crashing.

This is mainly happening when I am running Firefox.  I don't know if it's causing the problem but I have just removed a Microsoft addon - I think it was Netwaiting 1.1 but I can't remember and I uninstalled it without writing it down.  I'll let you know if it helps.

Thanks again

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #34 on: December 30, 2009, 12:17:11 PM »
Sorry... it was Net Framework 1.1 (not Net waiting).  Got mixed up with something I'd seen on the startup list.

Wanted to edit my last post but can't see an option to do that...

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22649
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #35 on: December 30, 2009, 03:35:06 PM »
Can you give me a copy of your event viewer logs?

I need you to go to the administration tools in XP. They are in the Control Panel. Open the Admin tools, then open the event viewer. Over on the left hand side and click on System. Then up at the top click on Action and then click on Save Events As, type in system as the file name,  make sure file type EVT is selected, and then navigate so it will save the file to your desktop, then click save. Over on the left hand side and click on Application. Then up at the top click on Action and then click on Save Events As, type in application as the file name,  make sure file type EVT is selected, and then navigate so it will save the file to your desktop, then click save. Zip them both up into a single zip file, post them back here in your next reply as attachments.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #36 on: December 30, 2009, 04:18:21 PM »
Hi Hoov,

Sorry, I should have thought about that before I posted and attached them for you.  They are zipped and attached below.

Thanks for your help.


Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22649
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #37 on: December 30, 2009, 06:20:11 PM »
Can you tell me about your internet connection? Is it wired or wireless? Any other computers on the network (if there are any) having the same problem?

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #38 on: December 31, 2009, 09:14:29 AM »
Hi Hoov,

Internet connection is wireless to a Netgear router.

2 laptops are regularly connected to the router (this one that's having the disconnection problem and another one) - the other laptop never has the error and never loses connection.  The error occurs regardless of whether the other laptop is on and connected to the router - it happened a short while ago and at the time only this laptop was connected to the router.

The router is secure - it's password protected etc.  I've checked it and it's not being accessed by anyone else.

Thanks for your help and Happy New Year!!!   ;D  ;D  ;D


PS.  I've had the problems occur again after removing that Net Framework 1.1 addon so I don't think that was responsible - today I've had the 1003 disconnection error and ntdll.dll / Drwatson errors...
« Last Edit: December 31, 2009, 09:22:29 AM by Shaiya »

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22649
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #39 on: December 31, 2009, 10:37:16 AM »
Try resetting the Winsock.

Click Start. click run, type: cmd, and press Enter
Type: netsh winsock reset, and then press the ENTER key.
Type: Exit and press ENTER.
Restart the computer.

See how it acts after that.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #40 on: January 02, 2010, 08:43:11 AM »
Hi Hoov,

I had done this previously trying to fix the other problem but I tried it again anyway.  Sadly it hasn't fixed it - not long after I reset the winsock and restarted it happened again... 18 dhcp errors within about 5mins.  I think that's even a new record  :o

Thanks for your help.

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22649
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #41 on: January 02, 2010, 03:40:54 PM »
From your logs, this started happening about the 24th of December. Did something happen then? Try unplugging the connection to the router and plugging it back in. Is there something new in the area that was put in around the 24th?

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #42 on: January 03, 2010, 05:29:45 AM »
Hi Hoov,

It does look that way from the recent logs I posted but I think that's down to some programs being disabled in the startup menu.  If you look at the event logs I posted at the bottom of the first page this error was also repeatedly happening prior to me using 'selective startup' and disabling some programs.

What I am going to do is try and find out which process it is using the 'selective startup' / disabling programs.  I think the program responsible will be one of the last I enabled so I'll go backwards through my list and hopefully I can isolate it reasonably quickly.

Thanks for you help

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22649
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #43 on: January 03, 2010, 09:53:20 AM »
Try this,

Open a command prompt (all programs > Accessories > Command Prompt) and type in
Ipconfig /all > ipconfig.txt and then hit enter. Then type in ipconfig.txt to open notepad with the log. Copy it and paste it in to your next response.

That will tell us how long the lease time is. I have mine set for the longest allowable time, so my DHCP server doesn't have to renew constantly like yours does.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline Shaiya

  • Bronze Member
  • Posts: 30
Re: [In Progress] Programs 'deselecting' themseves...
« Reply #44 on: January 03, 2010, 03:34:50 PM »
Hi Hoov,

Here's the Ipconfig text

Windows IP Configuration
        Host Name . . . . . . . . . . . . : Louby
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Mixed
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Wireless Network Connection:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Intel(R) PRO/Wireless 3945ABG Network Connection
        Physical Address. . . . . . . . . : 00-13-02-A1-86-21
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.0.3
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.0.1
        DHCP Server . . . . . . . . . . . : 192.168.0.1
        DNS Servers . . . . . . . . . . . : 192.168.0.1
        Lease Obtained. . . . . . . . . . : 03 January 2010 19:58:41
        Lease Expires . . . . . . . . . . : 04 January 2010 19:58:41

Which I think means it's only supposed to renew every 24 hours.  Meantime I'm still checking off programs to see if I can narrow it down that way just incase.

Thanks for the help.