[SpiritWind]

:D Hi Susan :

As you probably realize, neither of your 2 Process Explorer Screenshots are currently in the Forum .

I have spent over an hr investigating "S3apphk.exe" with nothing definitive about it, ending with an

"association" with "oem12.CAT"; IF anybody like RGreen and/or MPH have Info about this, feel free to

Post it . Susan : Feel free to Post what the "Properties" said about "S3apphk.exe" .

Your problem(s) MAY be related to having BOTH Windows Defender AND Spybot S & D on your

computer !? On this Forum at least 2 People having High CPU problems have had that problem

resolved by completely removing 1 or 2 programs and "replacing" them with very good Alternatives .

However, neither Windows Defender or Spybot were the programs "removed" . I, personally, would

NOT have either Windows Defender or Spybot on my computer since their Presence caused problems

on my computer in the Past . A General Principle is should NOT have 2 different antiSPYWARE

providing "real-time" protection since they would most likely "conflict" with One another, causing

problems . I am concerned in your Situation because IF Spybot's "Resident SD Helper" and/or

"TeaTimer" is "active", either one or both could possible be conflicting with some of the Windows

Defender "Real-Time Protection Options" you have "active". Info on Spybot's "Options" are at

forums.spybot.info/showthread.php?t=281 ; I tried on the Windows Defender Site to find a

description of their "Options", but it appears unavailable. Therefore, I recommend, IF possible, print out

the Info from the Spybot link I provided and compare it with the Description of the Windows Defender

"Options" ; IF any "match" you definitely should "disable" that "Feature" in One of the programs .

I think you would be better off removing both and installing the FREE Ver of SUPERAntiSpyware

from [http://www.superantispyware.com] .

[mphenterprises]

Hi AuTiger. Yes, as SpiritWind mentioned previously, very good job with all the screen shots. Now, this s3apphk executable file is very ominous and should be investigated fully. According to several sites, this executable file appears benign; however, depending on the file's location, should be investigated as a potential viral infection.

According to this site, S3apphk.exe "...is a tool installed alongside the drivers for your S3 Video output device, and gives access to additional configurations and diagnostics." Also, according to this site, S3apphk.exe "...provides a number of tools that are useful when diagnosing problems or configuring your S3 hardware." So my first questions to you are:

- ...have you, at any time, installed any other hardware to your computer such as a camcorder, camera, or anything of that nature?

- ...did you install a graphics (video) card into this computer?



Furthermore, according to this site, "...if a "non-Microsoft" .exe file is located in the C:Windows or C:WindowsSystem32 folder, then there is a high risk for a virus, spyware, trojan or worm infection." According to your second screen shot, this executable file is located in the C:WINDOWSsystem32 folder. You may want to seriously investigate this application as a malicious file.

As Spirit suggested, I would advise using SuperAntiSpyware in conjunction with what you use now to find any malicious files that may be hidden in your computer. It may behoove you to run your scans in Safe Mode. Now, if you are not sure how to access Safe Mode, please follow the steps laid out within this Document. Additionally, before you start this scan, please temporarily disable System Restore. To do this, Right Click on My Computer and select Properties. Within the new window, click the System Restore tab. In the upper left hand corner of that section, you will see "Turn off System Restore on all Drives" or some variation of that statement. Put a check in the box to the left of that statement and click Apply and then click OK.

Unfortunately, I could not find anything definitive about oem12.cat. The only reference that I found said that it is a catroot subdirectory.

[SpiritWind]

:D Hi Susan :

I see those 2 Screen Shots have "appeared" in your Post that were NOT there yesterday . First off ,

when investigating a "suspect" Process, should be very careful and use the EXACT spelling . There is

a BIG Difference between "S3apphk.exe", "s3apphk.exe" & "S3APPHK.exe" . The 2nd appears related

to "S3 Video output device(s)" & the 3rd is DEFINITELY Spyware. In my Opinion, some Sites carelessly

think "S3apphk.exe" & "s3apphk.exe" are the SAME . I viewed about 10 Logs from the HijackThis

program Posted on about the same number of Forums staffed by reliable Expert Malware-Fighters and

NOT one recommended its "removal" . The Operating Systems of those Posting the HijackThis Logs

ranged from Win ME through Win XP SP2, so it has been around for quite some time. In addition, the

"Properties" Page you Posted showed an Installation date of Mar 2002 and the correct "Path".

When looking over your latest Screen Shots, I became more concerned after investigating

"Itmsg.exe" ( the 1st letter is a Capital "i" ), assuming I have the correct spelling when it comes to

discerning Capital & small letters using a magnifying glass. This Process is "linked" to Agere Systems,

which no longer exists, and appears "linked" to a "Win Modem driver" and when I discovered the Info at

http://en.wikipedia....wiki/Softmodem] & "designed to use a host computer's resources (mostly [CPU

power and RAM.....) is when I became concerned .

I have used the Online Scanner of Secunia Software Inspector ( secunia.com/software_inspector )

to check the "Status" of my software; since this should rarely be done, I recommend you uninstall your

Secunia PSI since it MAY be contributing to your High CPU Usage and rely on the Online Scanner .

Lastly, I see you have Sun's Java but the Screen Shot does NOT tell me WHICH "Version"; since

should ONLY have ONE "Update/Version" for security purposes, you could go to

[http://www.javatester.org/version.html] and let me know WHAT it says in the Pink "box" !?

[autiger]

Hi, Susan here again with some of the answers asked for and some questions of my own. The Java test site listed "Java Version 1.6.0_03 from Sun Microsystems Inc." in the pink box. S3apphk.exe is the correct spelling and case form for the application. Should I send it to the recycle bin and see what happens and should I do the same with Itmsg.exe? I do have two cameras installed. One is a Canon Powershot S500 and the other is a VGA Pen Cam. I haven't used the Canon yet -just got it before Christmas, and have rarely used the other, but have had it installed for over a year. I also have an Intel digital microscope that I installed last Sept. I'll uninstall the Secunia and see if that helps, if not then I'll do the same for Spybot and see if that does the trick. I was wrong in the last post Spybot didn't catch the trojans, AVG did. I checked the virus vault and it lists 2 trojans and 2 viruses. I'll post a snapshot of that page because I'm not sure if I should do anything about them. There are buttons at the top of the screen - one for wipe items and one for heal items- should I use them or just leave the listings as they are? Now about Superantispyware - is it very safe, does it take up much room, and can it be easily uninstalled if it causes problems? I ask because when I got this computer it had Norton antivirus on it and it gave me all kinds of problems and was nearly impossible to clean out of my machine. Someone also asked for a snapshot of the "process". I guess they mean a shot of freeze up in progress so the second one posted is just that. Right after I logged on today one happened and I quickly pressed printscreen. When the freeze was over the shot came up. I'll let you guys know how it goes after the uninstalls, maybe then we'll have this problem licked.

[SpiritWind]

:D Hi Susan :


You have the lastest "Version" of Sun's Java. I was recommending you do NOTHING about

"S3apphk.exe" . To COMPLETELY REMOVE Norton so it causes no future Problems, its

"Removal Tool", which is available at

http://www.majorgeeks.com/NortonRemovalToolSymNRTd4749.html] should be "run"; has this ever


been done ? IF NOT a definite "Yes", do it . Norton "Remnants" can cause serious problems when


another security program is installed .


Your Screen Shot of the AVG AV Virus Vault contained interesting Info; both a AVG FREE Forum


"Search" AND a Google "Search" revealed no "matches" except a Comment about the "Trojan" .


Antivirus companies occasional have "false-positive(s)" in their Scan Results that are later "corrected"


and I suspect ALL 4 are in that "category" since they are 5/06 & 1/07 "Detections". So I recommend


you remove ALL of them from "Quarantine". Then run AVG's "Fullest" Scan possible. IF any are


"detected" again, I want you to check the authenticity of the "Detection" by uploading the file to


[http://www.virustotal.com . It is then checked against the databases of many virus-fighting companies

and a "Report" issued as to WHO, if anyone, "detects" this file. IF AVG is the only 1, it is a 99%

probability it is a "False-Positive"; if 2-4 "Detect" the "File", the Odds drop to around 90%. Feel free to

Post a Screen Shot of any VirusTotal "Report" that shows at least 3 companies "detecting" the file .





AND SUPERAntiSpyware is my TOP Recomendation for a antiSPYWARE/antiTROJAN program . IF

unwanted, it should be as easily "uninstallable" as Spybot or "Windows Defender" .

And WHAT is AND WHERE did that Zone Alarm "Spy Blocker" I see in your 2nd Screen Shot !?

[autiger]

Ok, I've gone to "Add/Remove programs" and have uninstalled Spybot and Secunia today. I've installed SuperantiSpyware and ran a total system scan with it. It found 122 cookies but no other threats. I had it delete all the cookies. I went into AVG virus vault and deleted all the entries and then ran a full scan with it. It found no threats. I ran the Norton removal tool as suggested. The Zone Alarm Spy Blocker was loaded with the one of the last update of Zone Alarm's Firewall that I did. It blocks you from going to known dangerous sites for spyware and porn. I have not had it warn me or try to block any of the sites I go to. I am not a heavy surfer though and try to only go to well known sites I can trust. I am the only user on my computer except for nieces and nephews checking emails and grades when they visit. I am still having some freeze ups as I am typing, but they are not as bad today, not as many are happening.

[SpiritWind]

:D Hi Susan :



After doing all the "things" you mentioned in your last Post has there been any change in the frequency

of the "freeze-ups and/or slow downs" !? Info from the highly regarded Wilders Security Forums

indicates that Zone Alarm's "Spy Blocker" is an undesirable "Item" to have on One's computer; see

www.wilderssecurity.com/showthread.php?p=1166232 . "Ask.com" is an adware company; would

recommend "Removing" it . Also : [http://www.malwarebytes.org/forums/index.php?showtopic=3143] .

How often do you clean Items like Temporary Internet Files, Temporary Files, History, and Java Cache ?

I do it often using the FREE "ATF Cleaner", developed by antiSPYWARE Expert "ATribune" and

available at HIS Site at [http://www.atribune.org/content/view/19/2/] . Perhaps "they" are bogging down

your system !?

[autiger]

Hi Spirit, I have CCleaner and run it at least once a week to clean out the clutter. When I use it to clean up the registry I am always asked if I want to do a backup on the files found. Should I aways do one? I am posting two shots of it so you and others can see what all it checks. Since it checks for cookies I don't understand how the "Super" found 122 of them in its scan. The shots show scan results with the first being an analysis of my registry. When I click on the "fix issues" button that is when I am asked if I want to backup each. The second shot shows only some 19 found, there are usually around 50 . I just ran a scan on Fri. These freezes are starting to increase now with cusor stopping every few letters and I have to wait for it to catch up. Thanks for your help every one.

[mphenterprises]

Hi AuTiger. Okay, a couple of things. First, when posting screen shots, please remember to put a space between the exclamation points. Your last several submissions had to be adjusted so that they were visible within the forum.

Now, I believe Spirit has provided just about all the security suggestions he can. He is very good with digging and finding the root cause of security related situations. Since you are still having freeze-up problems, and the freeze-ups are occurring more frequently, we should really look at hardware conflicts. Initially, you provided us with these specifications:

XP with Serv. Pk 2. running on a HP pavilion 513n, with 504 mb RAM. It has an Intel ® Celeron 1.8GHz.

The main hardware concern in a situation like yours is either lack of memory or lack of power. According to Hewlett Packard, this computer came with 256MBs of memory. If someone installed either another memory chip or took out the 256MB memory chip and installed the 512MB memory chip, the specifications of that chip is a factor. Also, the fact that your computer does not read the entire 512MBs of memory is an indication that, at the very least, there may be a memory leakage in your system. Here is a selection of memory chips compatible with your computer.

Additionally, the Power Supply in this computer is probably less than 200Watts. If that is the case, you may want to consider increasing the Power Supply as well. This process is not harder than increasing the memory. However, there are more steps involved. If you feel comfortable, please open your computer and read the sticker that is on the Power Supply. The maximum peak wattage number will tell us how strong your Power Supply is.

[SpiritWind]

:D Hi Susan :



I know about CCleaner; I primarily do NOT recommend this program because of the "Registry Cleaning"

portion of its programming. Should ALWAYS use the "BackUp" Feature while using ANY "Registry

Cleaner" . The Expert "Microsoft Most Valuable Professionals" on the Forums at aumha.net generally

recommend NOT using ANY "registry cleaner" on computers with Operating Systems with Win XP or

later . There is little benefit and a lot of potential downside on using them . There is a small possibility

that using CCleaner's "Registry" "Fixer" MAY have caused your current "freezing/slow down" problem .

Regarding "Cookies" : Perhaps SUPERAntiSpyware finding 122 "Tracking Cookies" is the amount that

accumulated since you ran your last CCleaner scan !? Would trust SUPERAntiSpyware more than

CCleaner in this area .

And MPH has touched on the next area of possible Cause of your "Freezing,etc", namely Hardware .

I have read Reports of Items like mobile phones connected using a serial port, lexmark printer being

"OFF", connected USB Devices, & using the "Power Saver Mode" of a Printer causing the System

"Process" to soar to high levels. Would recommend you disconnect such hardware, including the

camera(s) you mentioned, along with the "microscope" and "test" each ONE individually to see IF

"it" is the cause of your high System "Process" . This is a good Possibility since you mentioned

your friend who installed Process Tamer had no problems while he had your computer in his

possession. I doubt he connected any hardware to your computer while you most likely did .

[autiger]

Hi again, I finally am able to get back to you guys. I have been using my computer nearly all day and have had such a hard time with it. I've had to reboot it some 6 to 7 times because of the freezes and hangs. I was offline most of the day doing data entry on files I keep on our farm records and what should have taken only an hour took me six. There were no other programs openly running except for Micro. works. The only hardware I have hooked up is my printer and scanner, and they are turned off unless in use. The cameras and microscope are not hooked up unless I'm using them and I haven't for about a month. I had to use the printer today and because of the constant freezes had major problems with it. I got rid of ZA spyware blocker. I have a program called Everest Home Edition that will list my system properties. I used it to collect info that is in the attached shots. Mph, in one of them you can see what kind of memory chips I have and that there are two of them. I didn't see any listing for the amount of power wattage available. You can also see other things I can get info on listed on the left. If you want a shot of any of them let me know. Spirit, I have backed up the last ten or so times that I ran the registry cleaner. Those files are listed in "My Documents". Should I reinstall them (I guess that is what you call it)? When I right click on one of them, the menu lists "Merge" at the top not "Open" so how do I get them back in the running if I need to? Should I use System restore and simply set my computer back to an earlier date?

[mphenterprises]

autiger said:

>

Quote

I have a program called Everest Home Edition that will list my system properties....in one of them you can see what kind of memory chips I have and that
there are two of them. I didn't see any listing for the amount of power wattage available. Maybe you know how I should check? You can also see other things > I can get info on listed on the left. If you want a shot of any of them let me know.

>
>



Well, I have never heard of this application; however, if you want to submit information based on your system specification, I will be happy to decipher the information for you. Additionally, you can go to http://www.crucial.com/ to let this site scan your computer directly.

For the Power Supply, the most conclusive way to find out the peak wattage is to open the case and read the sticker on the Power Supply. I am not really sure of any application that will list the Power Supply wattage.

[autiger]

I just posted my last report with the attached picts. Mph, I know you asked me to space between the ! marks. but when I attach them they don't showup on the bottom of my post written out. Instead a large blank area opens in the post. If I preview the post I can see them as a listing but not in the post I can edit. Should I post them as a thumbnail? For some reason I can't even open them when I come back to view my own posting. Thanks for your help - Susan

[mphenterprises]

Okay, I am not sure how you are configuring the screen shots. However, for simplicity sake, you may want to follow the steps laid out within this Document. This will guide you through how to submit screen shots and images within the forum.

I downloaded Everest myself to see how detailed the information on another computer. The information is pretty thorough but you may want to reconsider what utility you use to analyze your computer. Everest has discontinued its free utility and they no longer support it. If you want support from the vendor, Lavalys, you would have to purchase either the Corporate or the Ultimate Edition. Instead, this forum lives by the free Belarc Advisor. Unfortunately, neither application provides information on the maximum wattage of the Power Supply. For this piece of information, you will have to read the sticker on the Power Supply itself.

As for the memory, I believe there is a problem. According to memories2shot, your computer has four banks of memory slots with a capacity of 256MBs each. According to memoryshot, your total memory is 503MBs. There is no combination of memory chips that would add up to 503MBs. According to HP, your computer's integrated video card may share memory with the computer. Now, if your computer truly has two 256MBs memory chips (512MBs of memory total), that would mean your video card is using about 9MBs of memory. The only way to confirm this is to turn off the computer, open the case, and take out both memory chips.

[SpiritWind]

:D Hi Susan :



Restoring the BackUps of your CCleaner Registry Scan(s) should be done ONLY after you & MPH

explore Other Options; I seriously doubt using System Restore will resolve your "freezing" . Recently

MPH encouraged me to find the Amount of Wattage of my Power Supply and I sent an Email Request

to the manufacture who responded with Specifics; turned out it was 300 watts. Opening the Case

requires avoiding potential electrostatic discharge problems . You MAY want to consider contacting

Hewlett Packard for the info !? To do so, click the "Hewlett Packard" in MPH's Post of Jan 22 at

7:50 AM; then in the "Question or Keywords" block near the top of the Site, put something like

"Name & Amount of wattage of Power Supply" and click the ">>". On the next page, go to the bottom

and click the "Contact HP >>". On next page, re-enter your "Request" and Select either the Chat

and/or Email Option .

As MPH has surmised, I am just about out of ideas. Most likely this will be my Last post in this Thread.

IF your continuing conversation with MPH ends up fruitless, I will mentioned that I came across the

possibility of using something called "System Monitor" that is supposed to be somewhere within your

computer; beginning Info about it is at support.microsoft.com/kb/248345 . I got the impression

the use of it is best done under the guidance of a Volunteer "Microsoft Most Valuable Professional";

there are many of those on the Support Forums at [http://aumha.net] .

Good Luck, Susan .

[autiger]

Hi, I'm finally back. Had to get those records done and boy did it take a while. First of all I want to thank Spirit for all the time and effort you have put in trying to help me solve my problem. You are A #1 as far as I am concerned.

Mph, I went to the HP site as directed by Spirit and asked for the powere supply wattage for my machine. They have not gotten back to me yet except to say they got the email. I don't open my PC case because I am afraid of doing damage. Let me tell you what happened today. I booted up and after everything loaded (Zone alarm is always the last thing to load) went online. The freezing started almost immediately when I tried to open or delete messages. I went offline and started running a game (Text Twist). Again it would freeze and even shut down and went to the bottom bar. I then shut my computer off, waited 3 minutes and rebooted. I have had it on for two and ahalf hours now, spent the first two hours playing the same game and have been online now for 30 minutes. There have been no freeze ups yet during this session. Why the difference in the two sessions and what could cause this ? Thank You for your help.

[mphenterprises]

Hi Autiger. I would not get too excited about this situation just yet. Your system may be unstable at this point. If you can go a full day or two without freezing, you can then start to breathe a bit easier. If you can continue to go without freezing for upwards of a week or so, then you can consider this issue resolved.

However, to be honest, I expect that this situation is not over. I am still searching for an application that can determine a computer's Power Supply rating so you do not have to open the case. Being as this is the weekend, I doubt you are going to hear from HP until Monday at the earliest. Additionally, as I stated previously, your memory worries me a bit and may be partly the reason why you are experiencing this freeze-ups and shut downs. I will follow-up with this post when I find an application that can detail your Power Supply rating.

[smax013]

mphenterprises said:

As for the memory, I believe there is a problem. According to memories2shot, your computer has four banks of memory slots with a capacity of 256MBs each. According to memoryshot, your total memory is 503MBs. There is no combination of memory chips that would add up to 503MBs. According to HP, your computer's integrated video card may share memory with the computer. Now, if your computer truly has two 256MBs memory chips (512MBs of memory total), that would mean your video card is using about 9MBs of memory. The only way to confirm this is to turn off the computer, open the case, and take out both memory chips.

Actually, according to both the motherboard specification and computer specifications on HP's site, the computer has two DIMM slots. Thus, there is something potentially "wonky" with the program used to get the computer information.



As to the 503 mb vs. 512 mb, that does not concern me. The computer has integrated graphics, which it appears uses shared memory (i.e. using installed RAM for video memory). According to the HP specs, that can be up 48 mb of shared memory. When integrated graphics shares memory, that RAM is no longer included in the listed available memory for the OS to use. Thus, it is perfectly reasonable to conclude that the "missing" 9 mb of memory is being grabbed by the integrated video graphics.

[mphenterprises]

Hi SMax. Yes, I was pretty sure that this computer has an integrated video; however, I am more concerned with the memory itself. Since autiger is not comfortable with opening the case, the only options we have to determine the memory specification is via the applications she uses.

Although thorough, I do not fully trust the Everest application. I have this sneaky suspicion that one or both of those memory chips may not be to the system recommendations, especially if the chips were installed after the computer was purchased. Additionally, as we all know, the Power Supply in basic manufactured computers is no where near sufficient enough to run multiple applications at once. I opened up a Dell 4300S and it only had an 80Watt Power Supply.

I think these two factors may be the prime reasons why this computer is failing. Spirit pretty much squashed any potential viral infestation.

[smax013]

mphenterprises said:

Additionally, as we all know, the Power Supply in basic manufactured computers is no where near sufficient enough to run multiple applications at once. I opened up a Dell 4300S and it only had an 80Watt Power Supply.

I would disagree with this to some degree. You tend to offer that minimum power supplies should be 500W. While I don't see a problem with this philosopy with custom built computers, I don't buy that is the minimum for all computers. Your run of the mill typical computer without a dedicated graphics card, only one hard drive, and maybe two optical drives generally does not need anywhere near a 500W power supply. While many power supplies included with manufactured computers are pathetic for use when doing some upgrades (especially heavy duty graphics cards), they are perfectly fine for what a typical user will encounter. I will note that my old Dell 4100 with a PIII and two hard drives and two optical drives ran perfectly fine with two graphics cards (one AGP Radeon and one PCI Radeon All-in-Wonder with tuner) off of the standard 200W maximum Dell power supply. I would leave it running 24/7 and have multiple applications running all the time.



My guess is that an 80 W power supply, while rather pathetically low powered, would likely be just fine for a Dell 4300S. It is a slimline machine, which DRAMATICALLY limits what kind of expansion cards you can use. I don't believe you could even get a reasonably powerful graphics card to fit in it, thus there is not really that much need for too much power in the power supply. Plus, I will note that according to the Dell website, 4300S supposedly come with a 180 W power supply, so you might have missed a 1 in there somewhere.



My point is that there are LOTS of typical, run of the mill computers that run just fine with 200 to 300 watt power supplied with users who are running multiple applications all the time. My current Dell has a 350 W power supply, if I recall correctly, and it runs just fine with nominally maxed out memory, two optical drives, a reasonably powerful graphics card, a dedicated sound card, two hard drives, and a P4 processor. And I have no doubt that I have room to up the graphics card somewhat (it would not likely handle today's nVidia 8800 cards too well without an uppage in power supply, but it can handle more). If what you said was true, then HP, Dell, Gateway, etc would have been LONG out of business for selling computers that were unuseable.



Don't get confused between what might be needed for a custom build computer (which has a good possibility of being upgraded with more powerful graphics cards) and a typical computer to be used for typical consumer uses.