[dfr200764]

Hi

I have owned my PC since April 07 - its a Packard Bell one with Windows Vista Premium. Its been ok up to now. What I have been noticing that on start up, you don't get the desktop appearing on the monitor - just a black screen ! About a week ago this happened, then today it did it again but I did manage to get the toolbar but everything else was black, as if the desktop background hadn't loaded with the icons etc. The graphics card is ATI Radeon series 200 I think but thats all I can say. I was wondering if there's enough power going to it or needs its software updated etc ?
Any suggestions would be great.

thanks.

[Cew27]

hmm, what do you mean you managed to get the tool bard and how ?

[dfr200764]

sorry i meant taskbar.....long black/grey thing at the bottom with the start thingey in the bottom left hand corner. I just got that to come up......rest of desk top was non existent. black....nowt there. That was this morning. On a previous occassion i didnt even get this. It has just been doing this recently although twice in about a fortnight is no big deal i guess.....only way is to reboot. just wondered if card was on the way out or some nasty windows update or other software was effecting it ?

[alex]

Could be a dodgy update, could be a dodgy download.

Could be malware.

I've seen this a number of times from people downloading google toolbar.

I'll get EvilFantasy involved, this is more his realm.

[evilfantasy]

Go to the virus and spyware forum and look at the malware removal sticky.

Post a Hijackthis log in that forum.

Sounds like Alex is onto something with malware.

[dfr200764]

Interestingly I have discovered that CCC.exe may be related to this issue. When I shut down the PC, every now and then the screen will show a message stating that
' CCC.exe is trying to stop the program from closing.' I gather that this programme is ATI related and may even be a trojan ???? If I delete this programme, will that be the end of my display ?

Alternatively I just run Hijackthis ?

[evilfantasy]

Originally Posted by evilfantasy

Go to the virus and spyware forum and look at the malware removal sticky.

Post a Hijackthis log in that forum.

Sounds like Alex is onto something with malware.

ccc.exe is a Catalyst Control Centre: Host application from ATI Technologies Inc. belonging to Catalyst Control Centre

It could be corrupted by a trojan or some other type of malware. Go and post a Hijackthis log, or, we can debate about it for a while longer.

It shouldn't take long to rule in or out malware.

[dfr200764]

Ok this is what i got when i ran Hijack this..............

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 07:18:52, on 17/01/2008
Platform: Windows Vista (WinNT 6.00.1904)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\aol\1162860770\ee\aolsoftware.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Thomson\SpeedTouch USB\dragdiag.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Users\Dean\Desktop\HiJackThis_v2.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\NAVW32.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{0ACF4124-6E10-4E4D-978E-4F7D271F4826}: NameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{0ACF4124-6E10-4E4D-978E-4F7D271F4826}: NameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{0ACF4124-6E10-4E4D-978E-4F7D271F4826}: NameServer = 192.168.1.254
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
--
End of file - 5554 bytes

[evilfantasy]

Did you edit the log before posting it?

[dfr200764]

no I didnt, despite what it says at the bottom of the log ! sorry that was me. never done this before.