A.S.C. V.3.3.4 Crashes and reboots itself

[VodkaIce]

It crashes at about 1/4 into Security Analyzer (at times) - unable to save report (I believe it's because of some trojan hijacking windows explorer yet again) and IOBIT software has yet to find the culprit.

 

ry Describe

Process System No Record

Process SMSS.EXE Session Manager Subsystem

Process csrss.exe Client/Server Runtime Server Subsystem

Process winlogon.exe Windows Logon Process

Process SERVICES.EXE Windows Service Controller

Process lsass.exe Local Security Service

Process SVCHOST.EXE Service Host Process

Process SVCHOST.EXE Service Host Process

Process SVCHOST.EXE Service Host Process

Process SVCHOST.EXE Service Host Process

Process SVCHOST.EXE Service Host Process

Process spoolsv.exe Printer Spooler Service

Process SVCHOST.EXE Service Host Process

Process cisvc.exe Microsoft Index Service Helper

Process is360srv.exe No Record

Process alg.exe Application-Level Gateways

Process hpztsb08.exe No Record

Process jusched.exe "jusched.exe" belongs to Java - this is an OS independent application environment.(http://java.sun.com: Java technology is a portfolio of products that are based on the power of networks and the idea that the same software should run on many different kinds of systems and devices.)

Process qttask.exe Quick Time Tray Icon

Process is360tray.exe No Record

Process AWC.exe Advanced WindowsCare

Process SVCHOST.EXE Service Host Process

Process opera.exe No Record

Process EXPLORER.EXE Windows Explorer

Process cidaemon.exe No Record

Services IS360srv.exe No Record

Start UP startup No Record

Start UP hpztsb08.exe No Record

Start UP jusched.exe Checks with Sun's Java updates site to see if newer Java versions are available. Visit http://java.sun.com or just run the Java Plug-In Control Panel

Start UP qttask.exe -atboottime No Record

Start UP Reader_sl.exe Speeds up the launch of Adobe (Acrobat) Reader 7

Start UP IS360tray.exe No Record

BHO 18DF081C-E8AD-4283-A596-FA578C2EBDC3 No Record

Button {08B0E5C0-4FCB-11CF-AAA5-00401C608501} No Database

Button {FB5F1910-F110-11d2-BB9E-00C04F795683} No Database

ActiveX 00000161-0000-0010-8000-00AA00389B71 No Record

ActiveX 072D3F2E-5FB6-11D3-B461-00C04FA35A21 http://www.netbenefit.com/Tags/lr2_040.htm

ActiveX 0FC817C2-3B45-11D4-8340-0050DA825907 No Record

ActiveX 166B1BCA-3F9C-11CF-8075-444553540000 http://www.macromedia.com/software

ActiveX 3334504D-0000-0010-8000-00AA00389B71 No Record

ActiveX 6414512B-B978-451D-A0D8-FCFDF33E833C http://v5.windowsupdate.microsoft.com

ActiveX 8AD9C840-044E-11D1-B3E9-00805F499D93 http://java.sun.com/j2se

ActiveX 8FFBE65D-2C9C-4669-84BD-5829DC0B603C No Record

ActiveX B8BE5E93-A60C-4D26-A2DC-220313175592 http://messenger.msn.com

ActiveX CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA http://java.sun.com/j2se

ActiveX CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA No Record

ActiveX CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA No Record

ActiveX CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA No Record

ActiveX CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA No Record

ActiveX CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA No Record

ActiveX CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA No Record

ActiveX D27CDB6E-AE6D-11CF-96B8-444553540000 http://www.macromedia.com/software

 

(old clunker, but when you have been out of work for eight years - it's better than nada)

[VodkaIce]

Well, Microsoft Security crap tends to bomb your pc with bunch of FAKE TROJANS and FAKE HIJACKINGS and it's endlessly streaming. Their goal is to force the PC user into a FEAR PANIC, so that you purchase their Security crap.

 

Well, after researching the internet, I found two things: wsnctfy.exe (not sure if this spelling ic right on, but close enough) and osa.exe. So I deleted them, includes the registry. Voila the majority of my woes were solved. Though Microsoft decided to hit me with AVENGENCE.

 

I just found the deeply embedded Visio in one of Microsoft subdirectories, and OSA.EXE rewritted in a PREFETCH SCRIPT.

 

I renamed the prefetch script, and voila Advance System Care is not crashing. Neither is Iobit 360, but I feel that someone has hijacked my keyboard, and perhaps watching over my shoulder as I type.

 

But I have a suspicion which script might be hijacking my windows explorer,and will look into myhaunches tommorrow.

[enoskype]

You can use KeyScrambler until you solve who is watching you over your shoulder.

 

Cheers.