whats seems to b the problem (laptop)

[Liz]

my file explorer closes on its own if i highlighted 20 or more files and when i right click on it. what seems to be the problem?

[Horsepower]

Virus. Reformat it.

[Alanstatic]

Virus indeed!

[KrisKros]

Solutions? Try Spybot, Malware, and if you don't have an antivirus, go with AVG its free.

Download all, and update all programs after downloading. Restart computer in Safe mode, and do a virus scan and spyware search with each program (one at a time). It may take a long time to scan, but let it do its job. Then see how it goes. Goodluck!!

[Lucius]

Download CrapCleaner hahaha www.ccleaner.com

or

Go to Start - Run - type "msconfig" - then "Startup" tab. Baka may application na nagki-kill sa process.

[A121]

you could also hijackthis to see all running applications

[KrisKros]

you could also hijackthis to see all running applications

Yep, Download HiJackThis Scan and save the log file. Copy n paste the log file here, so we can get a better look at it if you'd like

[Liz]

Here is the logfile, hope this will solve the problem.

Logfile of HijackThis v1.99.1
Scan saved at 12:52:07 PM, on 2/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\wallchanger\CMWallpaperChanger.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Adobe\Adobe Photoshop CS2\Photoshop.exe
C:\DOCUME~1\Ken\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\Ken\LOCALS~1\Temp\Adobelm_Cleanup.0001
C:\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [CMWallpaperChanger] C:\wallchanger\CMWallpaperChanger.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: *btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: *btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: *xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q306&bd=pavili on&pf=laptop
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1167745063222
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE88E362-B151-44AF-9AF4-9CBF91B7AA83}: NameServer = 58.69.254.3,58.69.254.8
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

[KrisKros]

http://www.hijackthis.de/ Go to that site,and also enter your log file there, and click on analyze. It will show you what's running, and what's unneccessary.

It could be that another IP or Spam is in your computer, limiting your control on the computer. Such as O17-
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE88E362-B151-44AF-9AF4-9CBF91B7AA83}: NameServer = 58.69.254.3,58.69.254.8

It seems another IP has access to your computer. Just put check marks next to the ones that you would like to fix according to your analyzed Log File. I hope that helps in cleaning up your computer a little bit.

Also:
When you click on Analyze Log..will notice X's and Check marks and Question Marks, you can click on those to get an item description if there is one available

[roninblade]

Virus. Reformat it.

hwag naman mag-reformat agad.
meron naman online tools.

http://www.symantec.com/home_homeoff...ndex_virus.jsp
http://housecall.trendmicro.com/

or download avg free or avast.

[KrisKros]

^^ Yep..dont need to reformat. Its also good to DIY, so you're knowledgeable on how to fix these problems.

Boss, also try this. This will scan your computer performance. You can see where you're having problems with this also. http://www.pcpitstop.com/ Try the test n see how it goes.

[SnakeEyes]

baka naman may problem sa shells lang? Kase di ba pag nagright click niloload nya ang shells scripts ng files na highlighted? Try to download ShellExView.

[Liz]

how will i correct the problem using shellexview?

[roninblade]

hindi mo pa din ba nare-resolve 'to, Liz?

[Hanren]

Kaya pa ba ng System Restore yan? Pwede mo siguro irestore dun sa last configuration na maganda ang takbo ng system mo.
And maybe for future protection, pwede ka mag install ng "deep freeze" program next time.

I have other info (copied and pasted from Win XP Service Pack 3) taken which i think might help. Good luck.
[SIZE=2]Understanding Data Execution Prevention[/SIZE]

Data Execution Prevention (DEP) helps prevent damage from viruses and other security threats that attack by running (executing) malicious code from memory locations that only Windows and other programs should use. This type of threat causes damage by taking over one or more memory locations in use by a program. Then it spreads and harms other programs, files, and even your e-mail contacts.
Unlike a firewall or antivirus program, DEP does not help prevent harmful programs from being installed on your computer. Instead, it monitors your programs to determine if they use system memory safely. To do this, DEP software works alone or with compatible microprocessors to mark some memory locations as "non-executable". If a program tries to run code—malicious or not—from a protected location, DEP closes the program and notifies you.
DEP can take advantage of software and hardware support. To use DEP, your computer must be running Microsoft Windows XP Service Pack 2 (SP2) or later, or Windows Server 2003 Service Pack 1 or later. DEP software alone helps protect against certain types of malicious code attacks but to take full advantage of the protection that DEP can offer, your processor must support "execution protection". This is a hardware-based technology designed to mark memory locations as non-executable. If your processor does not support hardware-based DEP, it's a good idea to upgrade to a processor that offers execution protection features.

[swordsman]

Virus. Reformat it.

After all's said and done, i think you'll end up with this suggestion. Unless you have very valuable data na di mo ma-backup and some setup with sentimental values

But go ahead and follow first all the other suggestions, malay mo one of them might help...at least for a while. That is if you have time to burn and enjoy late night troubleshooting.

Install a good antivirus and a firewall, when you fixed your problem.

[SnakeEyes]

how will i correct the problem using shellexview?

This is more of trial and error. First, you have to determine kung anong file types ba nagcaucause ng ganong problem. Or kung like sa case mo na 20 or more files, ano yung file type ng file kung san nakapoint yung mouse pointer mo at the time na nag right click ka. Then sa shellexview, didisable mo yung other programs or possible actions for that file type. What I suggest is disable mo muna lahat ng programs for that file type. Then try to highlight everything again and right click. If it still errors out, then sorry to say wala ng point e use ang shellexview kase pwedeng hindi lang sa shells ang problem. Pero kung di naman nagerror sa pagright click, then one by one e-enable mo ang programs. Tapos select all and right click again. Continue doing this until you find the culprit. After you find what is causing the problem to happen, then I guess you have to uninstall or reinstall that certain program. It's up to you.

[Horsepower]

You can go on and on trying to fix it but in the end, reformatting it is the best way to fix it. Virus infects and destroys system files. Even if you get rid of the virus, you can't regenerate destroyed or corrupted system files. The system will then be buggy.

Imagine the time wasted on trying to fix it then eventually reformatting it anyway (which only takes 30mins on the average).

Been there, done that.

[Liz]

ok na, bigla nlng pede na mag right click at lumalabas na ung property menu at d na ng sshutdown, tried all the suggestions dati pero hindi parin naayos, give up nako trying to fix it and leave it that way nlng tapos one day bigla pwede na. weird. hehe. tnx anyway.

[buraot]

baka natakot kasi ire-reformat mo sya?