Need Help

Discussion in 'Windows OS's' started by JiE, May 7, 2006.

  1. JiE

    JiE Geek Trainee

    Likes Received:
    0
    Trophy Points:
    0
    I deleted a file called rlvknlg.exe after killing the process the other day.

    Immediately thereafter,

    - my msn messenger starts lagging like hell. Each time I tried to send a message, the window will freeze for about 10 seconds.

    - when I host a game of Warcraft III The Frozen Throne map called DotA in "lancraft", there will be occasional screen freeze which lasts about 3-5 seconds, lagging everyone. Previously, there wasn't such a problem and my hosting is smooth. On a side note, I have a router and I did portforwarding in order to host. Also, as much as I can recall, ever since I got the router, I have frequent lag spikes when I join other hosts in lancraft. I don't have this problem in Battle.net, however.

    I'm not sure what caused those to happen. I assume it has got something to do with rlvknlg.exe but maybe I'm wrong. Please help!

    Here is the log file of HijackThis, if it matters at all.

    Logfile of HijackThis v1.99.1
    Scan saved at 2:50:46 PM, on 07-May-06
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\NVSVC.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
    C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
    C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
    C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    E:\PROGRAM FILES\MIRC\MIRC.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
    C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
    O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
    O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
    O4 - HKLM\..\RunServices: [NVSvc] C:\WINDOWS\SYSTEM\nvsvc.exe -runservice
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TeaTimer.exe
    O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM\E_SRCV02.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Share in Hello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - C:\PROGRAM FILES\HELLO\PICASACAPTURE.DLL
    O9 - Extra 'Tools' menuitem: Share in H&ello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - C:\PROGRAM FILES\HELLO\PICASACAPTURE.DLL
    O10 - Unknown file in Winsock LSP: c:\windows\system\rlls.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system\rlls.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system\rlls.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system\rlls.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system\rlls.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system\rlls.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = @starhub.com
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 202.156.1.58,202.156.1.38
     
  2. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    rlvknlg.exe is Spyware! It was created by a company called 'RelevantKnowledge Adware'. You were right to remove it the way you did! :)

    I wouldn't be suprised if you have more spyware and adware installed. This would explain why your internet and system are slower then expected.

    I think the next course of action for you is to download and install Adaware SE Personal by clicking here.
     
  3. JiE

    JiE Geek Trainee

    Likes Received:
    0
    Trophy Points:
    0
    Thanks for helping!

    I had Spybot - Search & Destroy, Ad-aware SE Personal and AVG to scan my computer and deleted many spywares or adwares. All these were done in nomal mode after I disabled system restore. My MSN Messenger no longer gives any problem. But I still experience occasional lag when gaming. Also, my computer will hang when I go to safe mode, at the troubleshooting help page.

    What should I do now?
     
  4. megamaced

    megamaced Geek Geek Geek!

    Likes Received:
    0
    Trophy Points:
    36
    I suspect this is down to programs running in the background. Common examples are Quicktime, Realplayer, Antivirus, Firewall, Adobe Acrobat etc etc.

    I think CCleaner should sort this out for you. You will find a link in my signature. CCleaner can manage which programs start up with Windows. It can also clean the Windows registry.

    Can't think of a possible cause just yet. I'll post if my brain comes up with anything
     
  5. JiE

    JiE Geek Trainee

    Likes Received:
    0
    Trophy Points:
    0
    I did as told but I still got lag when gaming. When I host a game in Battle.net there is no lag. The screen freeze only happens when I host on lancraft where people join by IP.
     

Share This Page