RESOLVED - Spooler Problem?

[TurcoLoco]

Hi Gandulf,

I didn't see any malware related entries, however you have a ton of unnecessary stuff running in the background that I think you should get rid of using Task Manager and also (preferably) remove them from startup even:

~ For the sake of our troubleshooting, I'd suggest that you kill these non-critical processes:
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\basfipm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Weather Add-in for MSN Search Toolbar\WeatherDataClient.exe
C:\WINDOWS\system32\PRISMSVR.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\en-us\bin\WindowsSearch.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\en-us\bin\WindowsSearchIndexer.exe
C:\Program Files\Java\jre1.5.0_08\bin\jucheck.exe




~ Also, if you'd like, these are non-essential startup entries you could get rid of:
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\en-us\bin\WindowsSearch.exe


~ Service you should set Startup Type to: 'manual' (Start > Run > services.msc > OK):
023 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

Also, what are the 2 printers you are using?
I see, Lexmark related process, is there another?

~TL

[gandulf8]

I used Task manager and stopped the processed you indicated.

However, I could not find the entries listed in the HKLM\..\run, in the registry. What is the full string to get them out?

Gandulf