Options

spy sheriff won't go away

Unknown
edited February 2006 in Spyware & Virus Removal
hijack log

Logfile of HijackThis v1.99.1
Scan saved at 2:27:50 AM, on 2/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS.0\system32\RUNDLL32.EXE
C:\Program Files\Information Update\iu.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\winstall.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS.0\system32\nvsvc32.exe
C:\WINDOWS.0\system32\oodag.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS.0\explorer.exe
C:\Documents and Settings\Administrator.JIM-AMD2600\Desktop\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.torrent-damage.net/browse.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {502088FC-C72F-3BC8-CA27-A2B273200171} - C:\WINDOWS.0\hgedvrbv.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - (no file)
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - (no file)
O3 - Toolbar: Search - {F09A0422-6EA7-9280-5730-9852851B34F9} - C:\WINDOWS.0\hgedvrbv.dll (file missing)
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.0\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS.0\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Information Update] C:\Program Files\Information Update\iu.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\WINDOWS.0\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\WINDOWS.0\system32\shdocvw.dll
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\WINDOWS.0\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\WINDOWS.0\system32\shdocvw.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\WINDOWS.0\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\WINDOWS.0\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0002.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1132358778203
O20 - Winlogon Notify: NavLogon - C:\WINDOWS.0\
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec Client Firewall Configuration (CfgWzSvc) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\CfgWzSvc.exe
O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.0\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS.0\system32\oodag.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec SecurePort (SymSecurePort) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe

thanx

Comments

  • CrunchieCrunchie Mandurah. Western Australia. Member
    edited February 2006
    Can you please do the following.

    ===============

    Run HiJackThis then:

    1. Click "Open the Misc Tools Section"
    2. Click "Open Process manager"

    -

    Next, while holding down the CTRL key, locate (if present) and click on (highlight) each of the following:

    C:\Program Files\Information Update\iu.exe
    C:\winstall.exe

    Now double-check and make sure that only those item(s) above are highlighted, then click "Kill process". Now, click "Refresh", check again, and repeat this step if any remain.

    ===============

    Scan with HiJackThis, then check(tick) the following, if present:


    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)

    O2 - BHO: (no name) - {502088FC-C72F-3BC8-CA27-A2B273200171} - C:\WINDOWS.0\hgedvrbv.dll (file missing)
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
    O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - (no file)

    O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - (no file)
    O3 - Toolbar: Search - {F09A0422-6EA7-9280-5730-9852851B34F9} - C:\WINDOWS.0\hgedvrbv.dll (file missing)

    O4 - HKLM\..\Run: [Information Update] C:\Program Files\Information Update\iu.exe
    O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe

    O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0002.exe


    Now, close all instances of Internet Explorer and any other windows you have open except HiJackThis, click "Fix checked".

    ===============

    Locate and delete the following item(s), if present. Make sure you are able to view system and hidden files/ folders:

    folders...

    C:\Program Files\Information Update

    files...

    C:\winstall.exe

    -

    Note that some of these file(s)/folder(s) may or may not be present. If present, and cannot be deleted because they're 'in use', try deleting them in "Safe Mode".

    -

    Reboot.

    ===============

    To help protect your system from hostile ActiveX content, or special 'downloadable' files:

    Download, install and keep updated, SpywareBlaster. If you've installed it for the first time:

    1) Check for any available updates; if present, they'll be automatically downloaded and installed.
    2) Next, "Enable all protection".
    3) Exit the program.

    -

    Note: Remember to regularly check for updates.

    ===============

    After rebooting, rescan with hijackthis and post back a new log. Please let me know how your pc is now.
  • scorch269
    edited February 2006
    Logfile of HijackThis v1.99.1
    Scan saved at 5:42:33 PM, on 2/4/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS.0\System32\smss.exe
    C:\WINDOWS.0\system32\winlogon.exe
    C:\WINDOWS.0\system32\services.exe
    C:\WINDOWS.0\system32\lsass.exe
    C:\WINDOWS.0\system32\svchost.exe
    C:\WINDOWS.0\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS.0\Explorer.EXE
    C:\WINDOWS.0\system32\spoolsv.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\Program Files\Logitech\MouseWare\system\em_exec.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    C:\WINDOWS.0\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS.0\system32\nvsvc32.exe
    C:\WINDOWS.0\system32\oodag.exe
    C:\WINDOWS.0\system32\wscntfy.exe
    C:\HIJACK THIS\hijackthis_199\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.0\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS.0\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\WINDOWS.0\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\WINDOWS.0\system32\shdocvw.dll
    O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\WINDOWS.0\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\WINDOWS.0\system32\shdocvw.dll
    O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\WINDOWS.0\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\WINDOWS.0\system32\shdocvw.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1132358778203
    O20 - Winlogon Notify: NavLogon - C:\WINDOWS.0\
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Symantec Client Firewall Configuration (CfgWzSvc) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\CfgWzSvc.exe
    O23 - Service: IS Service (ISSVC) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS.0\system32\nvsvc32.exe
    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS.0\system32\oodag.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec SecurePort (SymSecurePort) - Symantec Corporation - C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe

    so far, so good. thank you very much. will post progress reports, if needed.
  • CrunchieCrunchie Mandurah. Western Australia. Member
    edited February 2006
    Congratulations! Your log looks clean - good work!

    ===============

    Now that your PC is clean you need to follow these easy steps to keeping it this way:

    Secure your Internet Explorer by going here and following the instructions there.

    Better yet, use an alternative browser! Download FireFox and give it a run. It is far more secure than Internet Explorer. Or, you can get Opera which in my opinion, is better still.

    Use a firewall to help prevent your PC's control being usurped by undesireables. There is a link to a good, free firewall in my signature.

    Install and keep updated, Ewido anti-malware, Ad-Aware SE and Spybot S&D.
    Run them both on a regular basis, following the manufacturer's recommendations.

    Install an anti-virus. There are some good, free AV's available today. Make sure that it is updated regularly and have it scan your system often.

    Check for Windows Updates. Microsoft regularly post updates for your systems safe running. Make sure to take advantage of this. Reboot when installed and return to make sure there are no others.


    Clear your Temp folders.
    Clear out your Temporary internet files and other temp files.
    Go to Start > Settings > Control Panel >Internet Options.
    Under the General tab click the Delete temporary internet files,
    delete all Offline content as well. Clear out Cookies.

    Also, go to Start > Find/search > Files or folders > in the named box, type: *.tmp and choose Edit > select all -> File > delete.

    Empty/delete the entire contents of the C:\Windows\temp folder and C:\temp folder, if you have one. (Contents but not the folder itself.)

    C:\Documents and Settings\username\Local Settings\Temp\

    In order to view these files you may have to select 'show hidden files/folders.' Instructions on how to here.

    Empty the Recycle Bin.

    For XP users.
    After something like this it is a good idea to Flush the Restore Points and start fresh.
    To flush the XP system Restore Points.

    Go to Start>Run and type msconfig. Press enter.

    When msconfig opens, click the Launch System Restore Button.
    On the next page, click the System Restore Settings link on the left.

    Check the box labelled 'Turn off System restore'.

    Reboot. Go back in and Turn System Restore Back on. A new Restore Point will be created.

    Note that all previous restore points will be lost.

    ===============

    If you have any more problems, post back.

    -

    Happy surfing,

    crunchie.
  • scorch269
    edited February 2006
    thank you 4 your help, crunchie. but i do have some more questions.
    I ran the search for *.tmp files, and came away with more than expected, and not all should be deleted, IMO, due to thier location; not in windows, but games and other apps. see attached files. Is it only M$ tmp files to del?
    Also listed below is a AVSCAN report; the 'unable to open file' looks like files I should del. Is this correct?
    Next, i mixed up 'signature' with post link, so didnt install AV prog right away; when i did it showed bout 8 trojan horses; best to del them than quarenteen? When I'm hit with them now, screen pops-up saying 'deny access'. I'd like it to do so aitomatically, don't see the option.
    But then again, haven't found the free firewall in your sig-will look closer after this post. thats it,(for now). thanx
    P.S. I have six hdd's, over a TB of storage, this report is just of one drive. I'll list my specs after report.
    report:


    Report file date: Friday, February 17, 2006 18:39


    Jobname: 'Manual Selection'

    Scanning for 314724 virus strains and unwanted programs.

    Licensed to: AntiVir PersonalEdition Classic
    Serialnumber: 0000149996-WURGE-0001
    Platform: Windows XP
    Windowsversion: (Service Pack 2) [5.1.2600]
    Username: Administrator
    Computername: JIM-AMD2600

    Versioninformations:
    AVSCAN.EXE : 7.0.0.21 528424 1/31/2006 19:54:48
    AVSCAN.DLL : 7.0.0.21 42536 1/31/2006 19:54:48
    LUKE.DLL : 7.0.0.21 114728 1/31/2006 19:54:48
    LUKERES.DLL : 7.0.0.21 27688 1/31/2006 19:54:48
    ANTIVIR0.VDF : 6.32.0.60 4323840 12/6/2005 19:47:34
    ANTIVIR1.VDF : 6.33.0.207 1160192 2/8/2006 17:09:40
    ANTIVIR2.VDF : 6.33.0.234 97280 2/17/2006 10:13:23
    ANTIVIR3.VDF : 6.33.1.2 27648 2/17/2006 10:13:23
    AVEWIN32.DLL : 6.33.0.36 1163776 2/17/2006 10:13:24
    AVPREF.DLL : 6.34.0.0 38440 1/18/2006 21:06:02
    AVREP.DLL : 6.33.1.0 2392104 2/17/2006 10:13:24
    AVPACK32.DLL : 6.33.0.6 331816 1/9/2006 18:03:38
    AVREG.DLL : 6.31.0.90 27688 7/28/2005 19:06:36
    NETNT.DLL : 6.32.0.0 6696 9/27/2005 16:56:50
    NETNW.DLL : 6.32.0.0 9768 9/27/2005 16:56:50


    Start of the scan: Friday, February 17, 2006 18:39


    Start scanning boot sectors:

    Boot sector 'H:'
    [NOTE] No virus was found!

    Starting to scan the registry.

    The registry was scanned ( 37 files ).


    Starting the file scan:

    H:\0 DAY\Tibia.7.5.PVPbot.Paradise.1.0.TRAINER-iND\indpvpbot.zip
    [0] Archivetype: ZIP
    --> pvpbotp.exe
    [DETECTION] Is the Trojan horse TR/Drop.Delf.OX
    [INFO] The file was moved to '445a9752.qua'!
    H:\RECYCLER\NPROTECT\00000876.exe
    [WARNING] The file could not be opened!
    H:\RECYCLER\NPROTECT\00000877.exe
    [WARNING] The file could not be opened!
    H:\RECYCLER\NPROTECT\00000878.exe
    [WARNING] The file could not be opened!
    H:\RECYCLER\NPROTECT\00000879.exe
    [WARNING] The file could not be opened!


    End of the scan: Friday, February 17, 2006 20:09
    Used time: 1:29:53 min

    The scan has been done completely.

    2206 Scanning directories
    188877 Files were scanned
    1 viruses and/or unwanted programs was found
    0 files were deleted
    0 files were repaired
    1 files were moved to quarantine
    0 files were renamed
    16413 Archives were scanned
    8 Warnings
    7 Notes

    ========================================

    SYSTEM SPECS
    ========================================================
    MOBO: GIGABYTE GA-7VAXP K7 TRITON KT400 BIOS Ver. F13
    CPU : AMD XP 2600+ OC'd to 2.46 GHz
    RAM: 1GB; CORSAIR 512MB x 2 MATCHED PC3200 DDR 400MHz
    OS: WINDOWS XP PROFESSIONAL CORP
    CASE: ANTEC SX1040BII W/ ANTEC 450 WATT POWER SUPPLY
    INTERNET: 3MBps CABLE
    CABLE MODEM: TERAYON TJ715X
    HD 0: WESTERN DIGITAL 120GB WD1200JD Serial-ATA(7200rpm,8MB Cache)
    HD 1: WESTERN DIGITAL 250GB WD2500JB Serial-ATA(7200rpm,8MB Cache)
    HD 2: WESTERN DIGITAL 120GB WD1200JD Serial-ATA(7200rpm,8MB Cache)
    HD 3: WESTERN DIGITAL 200GB WD2000JB Serial-ATA(7200rpm,8MB Cache)
    HD 4: WESTERN DIGITAL 200GB WD2000JB Serial-ATA(7200rpm,8MB Cache)
    HD 5: WESTERN DIGITAL 200GB WD2000JB Serial-ATA(7200rpm,8MB Cache)
    DVD-CD BURNERS:
    (1) LG GSA-4163B 16x Super-Multi Drive DVD+R/RW 16X8X16X DVD-R/RW

    16X6X16 CDR/RW 40X24X40 DUAL LAYER+R 4X INT IDE
    (2) LG GSA-4163B 16x Super-Multi Drive DVD+R/RW 16X8X16X DVD-R/RW

    16X6X16 CDR/RW 40X24X40 DUAL LAYER+R 4X INT IDE
    VIDEO: nVIDIA GeForce FX5200,128bit,256MB,400MHzDDR,DVI/TV-Out,8XAGP,A-FX20
    SURROUND SOUND: 5.1 SOUND BLASTER WITH BASS WOOFER SYSTEM
    Chipset: VIA KT400 (PAC)VIA VT8235 INTERGRATED PERIPHERAL CONTROLLER(PSIPC)
    BIOS: SUPPORTS DUAL BIOS /Q-FLASH; AWARD MODULAR BIOS v6.00PG 05/09/03
    ONBOARD PROMISE RAID FUNCTION (CHIPSET 20276)
    ONBOARD SOUND: VIA AC97 ENHANCED AUDIO CONTROLLER
    MONITOR: ENVISION 19" 985E
    MOUSE: LOGITECH TRACKMAN WHEEL
    CABLES: CLEAR COVERED SILVER MESH-ROUND 40PIN, 80 CONDUCTOR
    =========================================================
  • CrunchieCrunchie Mandurah. Western Australia. Member
    edited February 2006
    For AntiVir, double click on the tray icon to open the main program then on it's toolbar click on 'extra.' Click on configuration next. Open the 'scan' drop down in the left panel and click on 'action on malware.' Hit the automatic radio button and ok out.
    The files that could not be opened are Norton protected files and can be removed by clearing the recycle bin using Norton :).
    All temp files are ok to remove, but not all will go as they could be 'in use.'
    Best to quarintine a file initially unless it is 100% identified as bad. Cannot get into problems then in case of a false positive.
Sign In or Register to comment.