# Dr. Watson Postmortem Debugger--Computer Problems--help! **URL:** \ **Category:** Factual Questions\ **Created:** [May 22, 2005, 9:07pm UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988 "2005-05-22T21:07:46Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![La\_Llorona](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@La\_Llorona](https://boards.straightdope.com/u/La_Llorona)\ **Post date:** [May 22, 2005, 9:07pm UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988/1 "2005-05-22T21:07:46Z")
I know, I know, as per the sticky, I might be better off at a computer forum, but I’ve asked this question at several and gotten no response yet; then I got yet _another_ Dr. Watson Postmortem Debugger alert and got desperate. Can any computorially-inclined Dopers help me? I’ve gotten this alert three times, and ran Norton AntiVirus, Microsoft AntiSpyware, CCleaner, AdAware, Spybot, AboutBuster, and CWShredder after the first one. No major problems detected. Then I got two more alerts! What shall I do? Here’s my HijackThis log: Logfile of HijackThis v1.99.1 Scan saved at 5:13:45 PM, on 5/22/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\MDC\AEGIS Client\mgr8021x.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Java\j2re1.4.2\_03\bin\jusched.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\dla fswctrl.exe C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe C:\Program Files\Dell\AccessDirect\dadapp.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\WINDOWS\System32\DSentry.exe C:\Program Files\Dell\AccessDirect\DadTray.exe C:\Program Files\Dell\Media Experience\PCMService.exe C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm\_tray.exe C:\Program Files\Common Files\Dell\EUSW\Support.exe C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\Program Files\HP\HP Software Update\HPWuSchd.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\QuickTime\qttask.exe c:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe C:\Program Files\Microsoft AntiSpyware\gcasServ.exe C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe C:\Program Files\AIM\aim.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Symantec AntiVirus\DefWatch.exe C:\WINDOWS\System32 vsvc32.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\Verizon Online\bin\mpbtn.exe C:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\System32\wbem\wmiapsrv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\La Llorona\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default\_Page\_URL = [http://www.dell.com](http://www.dell.com) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [Microsoft Explorer Bookmark Redirects update | Verizon Support](http://cgi.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=6.1&bm=ho_search) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [http://www.cnn.com/](http://www.cnn.com/) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [http://channels.aimtoday.com/search/aimtoolbar.jsp](http://channels.aimtoday.com/search/aimtoolbar.jsp) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\PROGRA~1\COMMON~1\VERIZO~1\SFP\vzbb.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla fswshx.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\PROGRA~1\COMMON~1\VERIZO~1\SFP\vzbb.dll O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM…\Run: [BCMSMMSG] BCMSMMSG.exe O4 - HKLM…\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2\_03\bin\jusched.exe O4 - HKLM…\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM…\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM…\Run: [dla] C:\WINDOWS\system32\dla fswctrl.exe O4 - HKLM…\Run: [UpdateManager] “C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe” /r O4 - HKLM…\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe O4 - HKLM…\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe O4 - HKLM…\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe O4 - HKLM…\Run: [PCMService] “C:\Program Files\Dell\Media Experience\PCMService.exe” O4 - HKLM…\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm\_tray.exe O4 - HKLM…\Run: [DwlClient] c:\Program Files\Common Files\Dell\EUSW\Support.exe O4 - HKLM…\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe O4 - HKLM…\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe” O4 - HKLM…\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM…\Run: [HP Software Update] “C:\Program Files\HP\HP Software Update\HPWuSchd.exe” O4 - HKLM…\Run: [HP Component Manager] “C:\Program Files\HP\hpcoretech\hpcmpmgr.exe” O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [gcasServ] “C:\Program Files\Microsoft AntiSpyware\gcasServ.exe” O4 - HKLM…\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe O4 - HKCU…\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [MoneyAgent] “C:\Program Files\Microsoft Money\System\mnyexpr.exe” O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\bin\matcli.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - [http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,83/mcinsctl.cab](http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,83/mcinsctl.cab) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb\_site.cab?1094596263692](http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094596263692) O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - [http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab](http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab) O20 - Winlogon Notify: mdc - C:\WINDOWS\SYSTEM32 otification.dll O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32 vsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE What can I safely delete? Thank you kindly for any responses you might care to make. Godspeed! 🙂 ---
**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\ **Post date:** [May 22, 2005, 9:35pm UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988/2 "2005-05-22T21:35:45Z")
Definitely delete these, possible spyware or browser hijackers: **O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)** Leave these, they are necessary or recommended: **O4 - HKLM…\Run: [BCMSMMSG] BCMSMMSG.exe O4 - HKLM…\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM…\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM…\Run: [ccApp] “C:\Program Files\Common Files\Symantec Shared\ccApp.exe” O4 - HKLM…\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"** The following are optional from a Windows standpoint, but if you use the programs they are related to, they may not run correctly, or they won’t be available in the system tray if you use them a lot.: \*\*O4 - HKLM…\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM…\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM…\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2\_03\bin\jusched.exe O4 - HKLM…\Run: [dla] C:\WINDOWS\system32\dla fswctrl.exe O4 - HKLM…\Run: [UpdateManager] “C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe” /r O4 - HKLM…\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe O4 - HKLM…\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe O4 - HKLM…\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe O4 - HKLM…\Run: [PCMService] “C:\Program Files\Dell\Media Experience\PCMService.exe” O4 - HKLM…\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm\_tray.exe O4 - HKLM…\Run: [DwlClient] c:\Program Files\Common Files\Dell\EUSW\Support.exe O4 - HKLM…\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe O4 - HKLM…\Run: [HP Software Update] “C:\Program Files\HP\HP Software Update\HPWuSchd.exe” O4 - HKLM…\Run: [HP Component Manager] “C:\Program Files\HP\hpcoretech\hpcmpmgr.exe” O4 - HKLM…\Run: [QuickTime Task] “C:\Program Files\QuickTime\qttask.exe” -atboottime O4 - HKLM…\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe O4 - HKCU…\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background O4 - HKCU…\Run: [MoneyAgent] “C:\Program Files\Microsoft Money\System\mnyexpr.exe”\*\* ---
**Author:** ![RancidYakButterTeaParty](https://avatars.discourse-cdn.com/v4/letter/r/53a042/32.png) [@RancidYakButterTeaParty](https://boards.straightdope.com/u/RancidYakButterTeaParty)\ **Post date:** [May 22, 2005, 11:12pm UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988/3 "2005-05-22T23:12:48Z")
You can get an instant analysis of your Hijack This log [here](http://hjt.iamnotageek.com/) It is safe and very fast. ---
**Author:** ![La\_Llorona](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@La\_Llorona](https://boards.straightdope.com/u/La_Llorona)\ **Post date:** [May 23, 2005, 1:30am UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988/4 "2005-05-23T01:30:34Z")
Okay, so I deleted the three files **Fear Itself** recommended as being definitely bad (which were also the three that came up when I did the analysis with **RancidYakButterTeaParty** ’s link. I’m honestly not good enough with computers to know if it’s safe to delete the others or not. And proceeded to get _yet another_ Dr. Watson message. Any further advice? I’m really worried that this seems to be getting worse and worse…this only started yesterday, and I’ve gotten six or seven so far. ---
**Author:** ![La\_Llorona](https://avatars.discourse-cdn.com/v4/letter/l/e47c2d/32.png) [@La\_Llorona](https://boards.straightdope.com/u/La_Llorona)\ **Post date:** [June 12, 2005, 11:48pm UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988/5 "2005-06-12T23:48:40Z")
::bumps, none-too-gently:: I thought the troubles had gone away completely, but I’ve gotten two of these alerts in the past twenty minutes and now I fear that my computer may be in its death throes. Anyone have any ideas? ---
**Author:** ![stinkyuk](https://avatars.discourse-cdn.com/v4/letter/s/7993a0/32.png) [@stinkyuk](https://boards.straightdope.com/u/stinkyuk)\ **Post date:** [June 14, 2005, 9:24am UTC](https://boards.straightdope.com/t/dr-watson-postmortem-debugger-computer-problems-help/304988/6 "2005-06-14T09:24:22Z")
jusched.exe AS far as i can gather due to past similar prob this entry jusched.exe is the reason for the continual debugging . ITs registry address needs to be deleted and i think it has more than one en try which is why spyware removers etc dont solve the prob if your not happy with messin with the registry ask someone who is to get rid of this little git fo9r you. cheers