75 replies to this topic

[arTech]

How to Turn Windows Vista Automatic Updates On and Off

How to Turn Off Automatic Updates on Windows Vista

Select "Never Check For Updates" for test.

Edited by arTech, 01 March 2010 - 02:42 PM.

[Jacee]

Jacee--I think the M is supposed to be part of "Angela M," which is an account on my computer.

I don't know anything about the ASPNET account. I didn't put it there nor do I know how it got there. Is that something I should try to delete? Also, it is not an option for me to log into when I turn on my computer and it lists the users I can log in under.

arTech--Is there a way that I can turn off automatic updates in Safe Mode? I can't figure it out if there is one. I tried to do it in normal mode, but my computer doesn't work long enough in normal mode for me to do that.

Yes, delete that account .... that's the one that looked like it was running a keylogger. Is your router passworded? Change the password to make sure no one else is using your network.

[arTech]

Try on this way.

When you have booted in Safe Mode

Push Win + R
Type services.msc / Enter
Right-click on Automatic Updates, select Properties.
Click the Stop button
Change the Startup Type to "Disabled".

or

Control Panel / Administrative Tools / Services
Right-click on Automatic Updates, select Properties.
Click the Stop button
Change the Startup Type to "Disabled"

[Angel2121]

Well, I've done what both of you have suggested. My computer still has the 100% CPU usage. Still from svchost.exe, but under the threads page the TID is 852. The module is still the same, though. I deleted the ASPNET account, and I'm glad to be rid of that keylogger. Although I don't remember how to change the router's password, but perhaps I will figure it out later. Any further suggestions would be very much appreciated.

Edited by Angel2121, 01 March 2010 - 04:05 PM.

[arTech]

Run Process Explorer

Select svchost.exe

Ctrl+L,

Ctrl+D

In Lower Pane click on Company name tab

Which 3rd Party dlls you can see (if any) and what is Description?

[Angel2121]

Okay. There are a bunch of things that say "catdb" with two "locale.ns" things interspersed in between. They have neither a company name nor a description. The rest of the things listed have the company name as "Microsoft Corporation." Here's what's listed for them: svchost.exe Host Process for Windows Services Microsoft Corporation 6.0.6001.18000 ntdll.dll NT Layer DLL Microsoft Corporation 6.0.6001.18000 kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.0.6001.18215 msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.6001.18000 ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.0.6001.18000 RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.0.6001.18247 NTMARTA.DLL Windows NT MARTA provider Microsoft Corporation 6.0.6001.18000 USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.0.6001.18000 GDI32.dll GDI Client DLL Microsoft Corporation 6.0.6001.18159 WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.0.6001.18000 WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.0.6001.18000 NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.0.6001.18000 PSAPI.DLL Process Status Helper Microsoft Corporation 6.0.6000.16386 SAMLIB.dll SAM Library DLL Microsoft Corporation 6.0.6001.18000 ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.0.6001.18000 IMM32.DLL Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.0.6001.18000 MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.0.6001.18000 LPK.DLL Language Pack Microsoft Corporation 6.0.6001.18000 USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.6001.18000 dnsrslvr.dll DNS Caching Resolver Service Microsoft Corporation 6.0.6001.18000 DNSAPI.dll DNS Client API DLL Microsoft Corporation 6.0.6001.18000 dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.0.6001.18000 Secur32.dll Security Support Provider Interface Microsoft Corporation 6.0.6001.18272 WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.0.6001.18000 dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.0.6001.18000 IPHLPAPI.DLL IP Helper API Microsoft Corporation 6.0.6001.18000 mswsock.dll Microsoft Windows Sockets 2.0 Service Provider Microsoft Corporation 6.0.6001.18000 wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.0.6001.18000 nlasvc.dll Network Location Awareness 2 Microsoft Corporation 6.0.6001.18000 wevtapi.dll Eventing Consumption and Configuration API Microsoft Corporation 6.0.6001.18000 NETAPI32.dll Net Win32 API DLL Microsoft Corporation 6.0.6001.18157 ncsi.dll Network Connectivity Status Indicator Microsoft Corporation 6.0.6001.18000 WINHTTP.dll Windows HTTP Services Microsoft Corporation 6.0.6001.18315 SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.0.6001.18000 WTSAPI32.dll Windows Terminal Server SDK APIs Microsoft Corporation 6.0.6001.18000 bcrypt.dll Windows Cryptographic Primitives Library Microsoft Corporation 6.0.6001.18000 CFGMGR32.dll Configuration Manager Forwarder DLL Microsoft Corporation 6.0.6001.18000 setupapi.DLL Windows Setup API Microsoft Corporation 6.0.6001.18000 OLEAUT32.dll Microsoft Corporation 6.0.6001.18000 comctl32.dll User Experience Controls Library Microsoft Corporation 6.10.6001.18000 CRYPT32.dll Crypto API32 Microsoft Corporation 6.0.6001.18000 MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.0.6001.18326 USERENV.dll Userenv Microsoft Corporation 6.0.6001.18000 credssp.dll TS Single Sign On Security Package Microsoft Corporation 6.0.6001.18000 schannel.dll TLS / SSL Security Provider Microsoft Corporation 6.0.6001.18272 ssdpapi.dll SSDP Client API DLL Microsoft Corporation 6.0.6000.16386 WINSTA.dll Winstation Library Microsoft Corporation 6.0.6001.18000 wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.0.6001.18000 cryptsvc.dll Cryptographic Services Microsoft Corporation 6.0.6001.18000 VSSAPI.DLL Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL Microsoft Corporation 6.0.6001.18000 ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.2 vsstrace.dll Microsoft® Volume Shadow Copy Requestor/Writer tracing DLL Microsoft Corporation 6.0.6001.18000 AUTHZ.dll Authorization Framework Microsoft Corporation 6.0.6001.18000 XmlLite.dll Microsoft XmlLite Library Microsoft Corporation 1.2.1009.0 MPR.dll Multiple Provider Router DLL Microsoft Corporation 6.0.6001.18000 ESENT.dll Extensible Storage Engine for Microsoft® Windows® Microsoft Corporation 6.0.6001.18000 SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.0.6001.18062 svchost.exe.mui Host Process for Windows Services Microsoft Corporation 6.0.6000.16386 setupapi.dll.mui Windows Setup API Microsoft Corporation 6.0.6001.18000

[Ztruker]

ASPNET is installed when MS Dotnet is installed. Good info on it here: http://forums.asp.ne...994/758994.aspx

[Jacee]

I don't see ASPNET (as a user) on my Vista computer Ztruker, but I think it's time that I bow out of this topic.

My main concern was and still: is *someone* not authorized, using Angela's network?

Whose accounts are these.....

Accounts on this computer:
Administrator
Angela
M <---------
ASPNET<--------
Backup
Guest

[Angel2121]

I deleted the ASPNET user earlier today. Ztruker, I followed the instructions for uninstalling Microsoft.NET that were in the link you provided. It actually helped a good deal with the 100% CPU usage. And, finally, I can operate, at least a little bit, in normal mode. I was able to uninstall the old Javas and install the newest one. I also stopped a bunch of programs from beginning at startup, but I could only do that under Safe Mode. The CPU usage hovers around 20-30%, but sometimes it does spike up to 100%, so I'm wary for now. I'll keep monitoring things so as to see whether the computer gets that slow again. I'm a bit hesitant to declare the problem gone yet since I've had it for more than two weeks. If anyone has any other ideas of things that I should do, I'd love to hear them. I'll report back tomorrow on whatever the computer is doing.

Edited by Angel2121, 01 March 2010 - 09:07 PM.

[Angel2121]

My computer is still working normally. Yay! Uninstalling Microsoft.NET did work. That seems random to me, but I'm happy. I guess I should go install that service pack now. My computer still kind of overheats a little sometimes, though. Does anyone have any tips for that? Or is this the wrong place to ask about it? Anyway, the computer functions in normal mode again, so the key problem is solved.

[Don't Spam Me]

My computer still kind of overheats a little sometimes, though. Does anyone have any tips for that?

When you turn your notebook computer over and take a look both at the air intake slots of the cooling fan and at the other areas where it normally would blow out the hot air, are any of these areas clogged with dust, pet hair or any other material or objects?

To remove dust, a can of compressed air is quite helpful. Please do NOT push with your finger nails, paper clips, Q-tips or any other objects against the fan and/or fan blades. It's bearings are rather fragile and could easily get damaged resulting in diminished fan performance.

Some laptops are much more prone to dust build-up than others. My old Toshiba never had a problem with it, whereas my Acer laptop routinely needs to have the dust blown off its air intake at least every other week in order to not run into thermal problems.

There's one utility I found to be quite helpful in that respect, the free version of HD Tune. It monitors the temperature of the internal hard disk drive and can be adjusted to alert you once a certain temperature threshold has been exceeded.

That way you receive an early warning when your computer becomes too hot for its own good.

[Angel2121]

Ah, okay, thanks for the information, Don't Spam Me. I've tried installing Service Pack 2 but my computer keeps stalling on every attempt, right at the point where it says "Preparing your computer." Is there anything I can do?

[Ztruker]

I think you are going to have to either take your computer to a reputable service shop or see if you can find information on how to disassemble it. I've had two laptops in the last month that were overheating and when I took them apart, the radiator (elongated set of cooling fins) was completely blocked so very little air was getting through. Once I cleaned that out the overheating problem was gone. Interestingly enough both were fairly new Toshiba's. This is not a simple task and you have to be very methodical about doing it or I guarantee you will end up with left over screws and no idea where they go.

[arTech]

Angela don’t forget to turn on Automatic Updates and enable Automatic Updates service.

[Don't Spam Me]

I've tried installing Service Pack 2 but my computer keeps stalling on every attempt, right at the point where it says "Preparing your computer." Is there anything I can do?

If everything else fails, consider making a backup to a USB stick, CD-R, DVD-R, or similar of any of the data (documents, photos, music, etc.) you want to keep.
Once that is done and you have verified that your backup is good (read: files can be accessed and opened from it), you could then use your system recovery partition as well as the respective install media for any other applications you might be using to rebuild your system from scratch, thereby eliminating virtually any misconfiguration and/or malware that might have crept in.

Quite obviously this is a last resort, but then again, it would enable you to start over with a clean slate. Just make sure that your computer is free of any dust clogging its vents and its heat pipes.