Gladiolus Silvermoon Posted September 13, 2004 Report Share Posted September 13, 2004 Hi,I've got a RAM of 256MB and a large hard disk. But recently, I have got big memory usage, the weird thing is very few programs are running in the background. So far, I have tried to close the running programs but there is still a big amount of memory used - but what, I do not know. I've tried run Ad-aware SE, Norton Anti-virus, but nothing helps. I don't have the habit of running too many programs simultaneously, so I am puzzled over the memory usage. :blink:Other programs are having program running due to insufficient memory. Please help. :unsure: Thanks. Quote Link to comment Share on other sites More sharing options...
-pops- Posted September 13, 2004 Report Share Posted September 13, 2004 Which operating system?256MB is not very much for an XP setup. Quote Link to comment Share on other sites More sharing options...
expertec Posted September 13, 2004 Report Share Posted September 13, 2004 -pops-: An XP system can run just fine on 256.Gladiolus Silvermoon: Go to http://www.windowsforum.org/forum/index.php?showforum=53 and read the pinned topics, then post a Hijackthis log. Quote Link to comment Share on other sites More sharing options...
-pops- Posted September 13, 2004 Report Share Posted September 13, 2004 Note I didn't say it couldn't run, I said it wasn't very much - which it isn't.What I was asking for specifically was information on the system under consideration - this has not been revealed Quote Link to comment Share on other sites More sharing options...
expertec Posted September 13, 2004 Report Share Posted September 13, 2004 OK.A Hijackthis log will tell us the OS, and a lot more as well. Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 13, 2004 Author Report Share Posted September 13, 2004 -pops-: An XP system can run just fine on 256.Gladiolus Silvermoon: Go to http://www.windowsforum.org/forum/index.php?showforum=53 and read the pinned topics, then post a Hijackthis log.Sorry, I forgot to say that I am running on XP Home Edition, mine's a Pentium 4.BTW, what's a "Hijackthis log"? :dontgetit: How do I go about it? Quote Link to comment Share on other sites More sharing options...
expertec Posted September 13, 2004 Report Share Posted September 13, 2004 Click on the link I gave you, there are instructions for Hijackthis. Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 13, 2004 Author Report Share Posted September 13, 2004 Note I didn't say it couldn't run, I said it wasn't very much - which it isn't.What I was asking for specifically was information on the system under consideration - this has not been revealedDownloading "Hijack This" as advised by expertec... hope it helps. I'm quite a dummy... :blush: Quote Link to comment Share on other sites More sharing options...
madboy33 Posted September 13, 2004 Report Share Posted September 13, 2004 Have you looked in "start up"?Just in case it is something like M$ office hogging resourses Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 13, 2004 Author Report Share Posted September 13, 2004 Hi,Have just downloaded and scanned my computer with Hijack This. Can't upload the notepad file. Error message from forum "Upload failed. You are not permitted to upload a file with that file extension." :o Please help. Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 13, 2004 Author Report Share Posted September 13, 2004 Have you looked in "start up"?Just in case it is something like M$ office hogging resoursesI don't have M$ Office... Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 13, 2004 Author Report Share Posted September 13, 2004 Hi all,Will be logging off soon. It's late night here in Shanghai and I'm seeing stars... :blink: Appreciate if you help me out with my problem. I'll check the post soon.Thank you. :D Quote Link to comment Share on other sites More sharing options...
madboy33 Posted September 13, 2004 Report Share Posted September 13, 2004 Have a look in "start up" to see if there is anything Are you logged on as an administrator in XP? Quote Link to comment Share on other sites More sharing options...
expertec Posted September 13, 2004 Report Share Posted September 13, 2004 Don't post the log as an attatchment, copy the contents and paste them into a post instead. :) Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 15, 2004 Author Report Share Posted September 15, 2004 Have a look in "start up" to see if there is anything Are you logged on as an administrator in XP?Yes. There's nothing in Startup except Norton Disk Doctor - that's showing me the usage status of my computer.Yes. I'm logged in as the system administrator. Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 15, 2004 Author Report Share Posted September 15, 2004 Don't post the log as an attatchment, copy the contents and paste them into a post instead. :)OK. Here it is. :) Logfile of HijackThis v1.98.2Scan saved at 10:50:25 PM, on 9/13/2004Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\Program Files\Canon\MultiPASS4\MPSERVIC.EXEC:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\System32\mqsvc.exeC:\WINDOWS\System32\mqtgsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\rundll32.exeC:\Program Files\Creative\ShareDLL\CtNotify.exeC:\WINDOWS\System32\CTHELPER.EXEC:\Program Files\Creative\Prodikeys\Prodload.exeC:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exeC:\Program Files\Ahead\InCD\InCD.exeC:\Program Files\Canon\MultiPASS4\monitr32.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\TECSTORM\TECSTORM - TSMO1 -Mini Optical 1 Mouse\5.3\MOUSE32A.EXEC:\Program Files\Creative\ShareDLL\Mediadet.exeC:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXEC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\Kingsoft\Powerword 2003\XDICT.EXEC:\WINDOWS\System32\inetsrv\inetinfo.exeC:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXEC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\WINDOWS\system32\ZONELABS\vsmon.exeC:\Program Files\Outlook Express\msimn.exeC:\Program Files\Internet Explorer\iexplore.exeC:\PROGRA~1\WINZIP\winzip32.exeC:\Documents and Settings\User\Local Settings\Temp\HijackThis.exeO1 - Hosts: 62.189.6.85 _sip._tls.sip5.phoneserve.comO1 - Hosts: 62.189.6.85 _sip._ssl.sip5.phoneserve.comO1 - Hosts: 62.189.6.86 _sip._tls.sip6.phoneserve.comO1 - Hosts: 62.189.6.86 _sip._ssl.sip6.phoneserve.comO1 - Hosts: 62.189.6.93 _sip._tls.sip7.phoneserve.comO1 - Hosts: 62.189.6.93 _sip._ssl.sip7.phoneserve.comO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: REALBAR - {4E7BD74F-2B8D-469E-C0FF-FD60B590A87D} - C:\PROGRA~1\COMMON~1\Real\Toolbar\realbar.dllO2 - BHO: 3721CMail - {6231D512-E4A4-4DF2-BE62-5B8F0EE348EF} - (no file)O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dllO3 - Toolbar: REALBAR - {4E7BD74F-2B8D-469E-C0FF-FD60B590A87D} - C:\PROGRA~1\COMMON~1\Real\Toolbar\realbar.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNCO4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMENameO4 - HKLM\..\Run: [siSUSBRG] C:\WINDOWS\SiSUSBrg.exeO4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exeO4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXEO4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /runO4 - HKLM\..\Run: [ProdikeysAutorun] "C:\Program Files\Creative\Prodikeys\Prodload.exe"O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exeO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exeO4 - HKLM\..\Run: [monitr32] C:\Program Files\Canon\MultiPASS4\monitr32.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\TECSTORM\TECSTORM - TSMO1 -Mini Optical 1 Mouse\5.3\MOUSE32A.EXEO4 - HKLM\..\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXEO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dllO4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - HKCU\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXEO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exeO4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXEO4 - Global Startup: Powerword 2003.lnk = C:\Program Files\Kingsoft\Powerword 2003\XDICT.EXEO8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.htmlO8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.htmlO9 - Extra button: Short Message - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm (file missing)O9 - Extra button: Instant Messenger - {0F7DE07D-BD74-4991-9D5F-ECBB8391875D} - http://cn.rd.yahoo.com/home/messenger/bjk/...nger.yahoo.com/ (file missing)O9 - Extra button: 3721CMail - {5D73EE86-05F1-49ed-B850-E423120EC329} - http://cmail.3721.com?fb=client (file missing)O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct1_x.cabO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...etup1.0.0.6.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/0869815b44c37dc80806/...ip/RdxIE601.cabO16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cabO16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl...ArcadeRdxIE.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup...er/imloader.cabO18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - C:\Program Files\Kingsoft\Powerword 2003\XDictExB.dll Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 21, 2004 Author Report Share Posted September 21, 2004 Don't post the log as an attatchment, copy the contents and paste them into a post instead. :)Hi expectec and people out there,:dummies3:Pasted the hijack this content onto the last reply post. Don't know if it helps. :blink: Can anyone help to diagnose the problem? :1zhelp: Don't tell me I need to increase my RAM :dontgetit: Please help. Thanks. :) Quote Link to comment Share on other sites More sharing options...
nellie2 Posted September 21, 2004 Report Share Posted September 21, 2004 Hello Gladiolus SilvermoonI'm sorry but you seemed to have slipped by us.. if you still need help would you run hijackthis again and post a fresh log please. Quote Link to comment Share on other sites More sharing options...
Gladiolus Silvermoon Posted September 22, 2004 Author Report Share Posted September 22, 2004 Hello Gladiolus SilvermoonI'm sorry but you seemed to have slipped by us.. if you still need help would you run hijackthis again and post a fresh log please.Hi,Am I correct at doing what I did? Copy the whole logfile and paste onto a post (Is it supposed to be a new post?) :blink: Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.