services doesnt stop when shutdown!

[legolas]

hi,

i had some problems with my windows(as usual) and i formatted(quick) and reinstalled. its windows XP MCE sp2. and after that, i disabled some of the services that r not of absolute necessity like "messenger", "alerter", as recommended in this forum and on other external sites... i also had the same services disabled earlier(before the format)... it seems that disablng might be a problem, coz at times, programs like o&o defrag, opera, windows media player.. or any other installer i use to install some program.. doesnt seem to terminate when i close the program.. i hav to go to task manager and end it... it doenst happen all times.. but i doubt its coz of these service disabling.. or is there any other reason? coz i installed jus now.. i cudnt figure out any possible reasons.. i hav zone alarm firewall also installed.. thou i dont hav any antivirus, i check them periodically online as well as by installign(and updating). i am sure this aint a virus.. can this be a hardware issue? or any installed program problem? pls give ur suggestions. i hav listed the services listed below and also pasted the hijack this file report.

alerter = disabled
computer browser = disabled
error reporting service = disabled
indexing service = disabled
machine debug manager = manual
media center receiver service = disabled
media center scheduler service = disabled
messenger = disabled
remote registry = disabled
secondary log on = disabled
server = disabled
TCP/IP netbios helper = disabled
wireless zero configuration = disabled

==================

Logfile of HijackThis v1.99.1
Scan saved at 5:43:28 PM, on 12/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\AIRTEL\AIRTEL-Broadband\fts.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\BitComet\BitComet.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\system32\mmc.exe
D:\aragorn\_softwares\!!!\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [%FP%AIRTEL fts.exe] "C:\Program Files\AIRTEL\AIRTEL-Broadband\fts.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download Using &BitSpirit - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CB549AE-CDCD-4B1D-8CF8-D71B691D11BB}: NameServer = 203.145.184.13,202.56.250.5
O17 - HKLM\System\CCS\Services\Tcpip\..\{B9F59973-6024-4909-8E7B-A4631D37BE3B}: NameServer = 203.145.184.13 202.56.250.5
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: iolo System Guard (IOLO_SRV) - Unknown owner - C:\Program Files\iolo\System Mechanic Professional 6\IoloSGCtrl.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

/legolas

 

[vijay_7287]

i think this has been posted very recently
please search for it

 

[legolas]

i cudnt understand what you meant... did u read my post??? explan what has been posted recently??

/legolas

 

[anandk]

ur logfile appears to be clean.

regarding services, pls check ur list with the following :

The following applies to Home Users; ie who have a stand-alone pc /
are not conncted to a Network, but may be having an Internet
Connection.

The following must always be set on AUTOMATIC :

Application Layer Gateway
Automatic Updates
Background Intelligent Transfer Service
Cryptographic Services
Com+ Event System
DCOM Server Process Launcher
DHCP Client
DNS Client
Event Log
IPSEC Services
Logical Disk Manager
Network Connections
Plug and Play
Print Spooler
Protected Storage
Remote Access Connection Manager
Remote Procedure Call (RPC) (NEVER disable this)
Security Center
Security Accounts Manager
Shell Hardware Detection
System Event Notification
System Restore Service
Task Scheduler (if you dont use Norton or Bootvis,
it can be made into Manual)
Themes
Windows Audio
Windows Firewall/Internet Connection Sharing
Windows Management Instrumentation


The following may be DISABLED (or set to MANUAL as reqd) :

Alerter
ASP.NET State Service
Clipbook
Distributed Link Tracking Client
Error Reporting Service
Fast User Switching Compatibility
Help and Support (Manual)
HID Input Service
IMAPI CD-Burning COM Service
Indexing Service
Infrared Monitor
Machine Debug Manager
NetMeeting Remote Desktop Sharing
Network DDE
Network DDE DSM
Network Location Awareness (NLA)
Performance Logs and Alerts
Portable Media Serial Number Service
QoS RSVP
Remote Desktop Help Session Manager
Remote Registry
Routing and Remote Access
Secondary Logon
Security Center
Smart Card
SSDP Discovery Service
TCP/IP NetBIOS Helper
Telnet
Terminal Services
Upload Manager
Uninterruptible Power Supply
Volume Shadow Copy
WebClient
Windows Time
Windows User Mode Driver Framework
Wireless Zero Configuration
WMI Performance Adapter

You can use WinPatrol for this purpose or start>control panel>administrative tools>services.

 

[sakumar79]

In the above post, a few of the services that are said to be Automatic may be disabled...

Print Spooler if you dont have a printer (but that is rare)

Security Center and Windows Firewall/ICS if you have a third party firewall and dont need to share your internet connection with another computer.

System Restore service if you dont want to use System Restore (not recommended unless you know what you are doing)

Arun

 

[legolas]

everything u told is right on my system anandk... stil to locate the problem! but for past 2 days i amnt facing the problem.. its jus comes at times.. and sometimes it is way too frequent..! to sum it up.. its random! :d

/legolas