Problem?

starshinestarshine Montana
edited January 2007 in Science & Tech
I know this probably isn't the right place to do it, but I am hoping there is someone that can help. I have already tried the offical websites, but they weren't any help and I thought here could possibly help ( plus, maybe help remove un-needed / unwanted files )

I have a Nintendo DS and purchased and setup a USB Wi-Fi Connector. It worked for the first few days and then quit. I uninstalled. I tried to reinstall and it tells me "Internet Sharing Error".

I am on Qwest DSL High Speed, I am connected directly through their DSL modem ( no other router )

I have a firewall, virus scan, SpyBot and SpySweeper.

Here is the HiJackThis information :
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\hphmon06.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor /deaf
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Save to &Xdrive - res://C:\Program Files\Xdrive\Xdrive Desktop\xdrive.exe/std.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
O16 - DPF: {040F4385-8DAD-4306-94BF-B8291D841FAE} (USBAPTester Class) - http://www.nintendowifi.com/troubleshooting/usbaptest.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://www.shockwave.com/content/dinerdash2/sis/DinerDash2.1.0.0.53.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1159073631074
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {7D731A83-6C80-4EA4-9646-5E06A0513274} (Sandlot Loader Control) - http://www.shockwave.com/content/ballistik/sis/slgwebinstall.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.shockwave.com/content/feedingfrenzy/sis/SproutLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.shockwave.com/content/cinematycoon/sis/cinematycoon.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/bonniesbookstore/sis/popcaploader_v10.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: NPDOR File Monitor Service (NFMService) - Unknown owner - C:\WINDOWS\System32\NPDORNT.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

I can't seem to remove : O23 - Service: NPDOR File Monitor Service (NFMService) - Unknown owner - C:\WINDOWS\System32\NPDORNT.exe (file missing) ...

Thanks for the help. I am willing to do almost anything to solve this issue, because spending $35.00 on something that won't work is just sad and makes me :mean:
EDIT: removed code tags for easier reading of HJT log:)jmoney

Comments

  • jmoney3457jmoney3457 Maine
    edited January 2007
    star, you left out an important part of your log that looks like this
    Logfile of HijackThis v1.99.1
    Scan saved at 8:40:24 PM, on 1/5/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    please post new log with that part included
  • starshinestarshine Montana
    edited January 2007
    Sorry - here we go again. :)

    Logfile of HijackThis v1.99.1
    Scan saved at 6:50:32 PM, on 1/5/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Support.com\bin\tgcmd.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    c:\program files\mcafee.com\agent\mcdetect.exe
    C:\Program Files\McAfee.com\VSO\mcvsshld.exe
    C:\Program Files\McAfee.com\VSO\oasclnt.exe
    c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    c:\program files\mcafee.com\agent\mcagent.exe
    c:\progra~1\mcafee.com\vso\mcvsescn.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\HP\KBD\KBD.EXE
    C:\WINDOWS\system32\hphmon06.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
    C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\WINDOWS\AGRSMMSG.exe
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Trillian\trillian.exe
    C:\Program Files\GameTap\bin\release\gametap.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor /deaf
    O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
    O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
    O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
    O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
    O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
    O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Save to &Xdrive - res://C:\Program Files\Xdrive\Xdrive Desktop\xdrive.exe/std.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
    O16 - DPF: {040F4385-8DAD-4306-94BF-B8291D841FAE} (USBAPTester Class) - http://www.nintendowifi.com/troubleshooting/usbaptest.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
    O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://www.shockwave.com/content/dinerdash2/sis/DinerDash2.1.0.0.53.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1159073631074
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
    O16 - DPF: {7D731A83-6C80-4EA4-9646-5E06A0513274} (Sandlot Loader Control) - http://www.shockwave.com/content/ballistik/sis/slgwebinstall.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
    O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.shockwave.com/content/feedingfrenzy/sis/SproutLauncher.cab
    O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.shockwave.com/content/cinematycoon/sis/cinematycoon.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/bonniesbookstore/sis/popcaploader_v10.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
    O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
    O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
    O23 - Service: NPDOR File Monitor Service (NFMService) - Unknown owner - C:\WINDOWS\System32\NPDORNT.exe (file missing)
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
  • jmoney3457jmoney3457 Maine
    edited January 2007
    no problem Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

    Answer Yes, when prompted to install an ActiveX component.
    • The program will then begin downloading the latest definition files.
    • Once the files have been downloaded click on NEXT
    • Locate the Scan Settings button & configure to:
      • Scan using the following Anti-Virus database:
        • Extended
      • Scan Options:
        • Scan Archives
        • Scan Mail Bases
    • Click OK & have it scan My Computer
    • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
    • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
    * Turn off the real time scanner of any existing antivirus program while performing the online scan
  • starshinestarshine Montana
    edited January 2007
    KASPERSKY ONLINE SCANNER REPORT
    Saturday, January 06, 2007 12:32:39 PM
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.83.0
    Kaspersky Anti-Virus database last update: 6/01/2007
    Kaspersky Anti-Virus database records: 256452

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\
    J:\

    Scan Statistics:
    Total number of scanned objects: 106202
    Number of viruses found: 0
    Number of infected objects: 0 / 0
    Number of suspicious objects: 0
    Duration of the scan process: 01:14:04

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\Logs\TaskScheduler\McTskshd000.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO\OASLogs\OAS.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Support.com\profiles\HP_Administrator\triggers.log Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Application Data\Webroot\Spy Sweeper\Logs\070105134644.ses Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\MSHist012007010620070107\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Temp\nenum13E.sys Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5A07.tmp Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Temp\~DF5A18.tmp Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Administrator\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\HP_Administrator\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0488D4EA-46F3-4D3E-B75D-1979B049B2B4.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0630AF04-207C-4CDE-8AEF-0ADB97982746.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS09268F53-F7A6-4A85-B595-88A1C7BC458B.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0990EBAD-B41F-4694-BA4A-634495B6E656.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0AC05007-E470-43B1-B8A7-82ADFB7B0D1C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0CA26944-FEAA-4807-96C2-7AEA3A88D909.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS117604E7-19B5-4FBA-A1ED-12FA3E8B43BF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS14102A15-7F4E-4B9B-BAA9-D2C6A6481B82.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS14C7BCF3-5E1C-4040-A3A4-D1A50C1E82E5.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1B10C39E-1578-4054-B8E4-0F324181E4D1.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1D267567-A94D-41BA-8E3C-D3168BFD1D1C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1DE6B015-5A63-4AC8-91A2-3E29FE33E3DA.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS233999D8-CA4E-4E7C-B584-987BFF4AC7C1.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS27C45825-E4E1-4E49-97B8-A9982C784466.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2C6BCA1E-12EE-44E8-953C-72B9608076D2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS308B13F7-9BDA-4D07-8243-F75AB8EAC8A3.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3249C88A-1E13-41F3-9CE6-66DCF6A54B18.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS35A80B27-2920-4ACF-A03B-EB475671E60C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3E1DC616-5D5B-4633-8142-21368B64BA4F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3ED5CC09-2620-4162-ACD3-FBBD32A50E0C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS40EE61F5-8E95-4B6A-8055-7976081DC5D4.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS456568F3-08CC-4018-AF95-DC87BD631554.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS47A34901-BA12-429A-A60E-E299D703C20B.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS49039669-8297-467F-9B11-2D1BCD882BD6.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4C5BA3C7-242C-4C69-9476-25BD623876DE.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4D2573F1-26A8-4997-9EE9-7D61F7AD942E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4F0CDE25-8B81-416C-B347-07E46389E7B2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5429CC7D-0218-4162-812E-26E065BB8F4C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS55B0BDAB-4643-45C9-B032-24ACE86DF72E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS56F97571-9392-440E-BB54-DC6D7119F130.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5764FC48-64D4-4F84-9461-674D0AF37131.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS599EDBE5-B7F7-4C5A-9570-3ACCA394317D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS59E8AB8B-EC61-4786-A71C-BCCEA6B98005.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5ABE4BA3-A0F8-46A4-BDFD-C7144F606F2E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5C563C33-5AE9-4F1E-A2E5-35419CC09BD9.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5CEBFED3-CAC5-44C6-A346-06B517960388.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5CF463A1-03FE-4432-AA61-F5A6985B7123.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5E34DEE8-AB9E-4F06-B566-06A37499A40B.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS63161C34-E305-421E-AA86-B82102C55621.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6797035D-CAD9-4BEE-AEAD-D15E35901C13.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6A108D6F-2F96-48C7-897E-C41A9EEEB3BC.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS70408B88-74C4-46B2-B8CC-735F8E5C05F2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7074FA4C-CE01-4E2E-A059-7A1CBF3A9861.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS744AF3F0-BECF-4B69-9CB7-E503B364301C.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS751D9BAE-C11C-49D8-8A7E-E389869F610F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS796E2973-FEB6-43F0-A8E1-EED969A7C5C6.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7A85A69F-9D49-4E81-B539-FF1E3A5933D8.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7D2D1EBF-1BE6-4C88-90A0-82456429E020.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8041BAD8-F51D-43CE-BF34-55ED04E5EACA.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS80D5D185-2274-4E7D-9BF8-48E9F3F159E2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS846614DD-CE2C-4092-BD34-992D45943664.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS864FC4EA-AFD2-4B9F-8A81-2E9BD1E0A8D4.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS88662F42-1376-4D23-BDD3-498022F22142.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS898EAFF3-F2BF-474C-AF27-16AD3E6A5A76.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8C68A5D2-A6F0-46C7-BCE5-84E9A5DA87C0.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8D306E54-5D8E-48C1-A22A-584873F2C3EE.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS91666B2C-F7F4-4129-8D0D-B5A1F113F5AC.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS91949CFE-F115-446D-B674-8AE59E3F6312.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS92A90CC1-4340-4594-958D-B888152982A6.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9638BD8B-128E-424A-A76D-1FA10F6DD5AF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9B4679AA-BD7D-4FC7-B93A-525BE385876B.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9BCFA1DF-2B78-48CD-B77A-8CAD79D92763.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9E24623E-5EC8-4926-BB78-BDCB2A10AF94.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9F36980E-DAA0-4170-AB60-48C5073CA552.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA07FDFFA-430A-48D9-A109-C8F09B2E4E1B.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA09DE12C-3598-4CCC-B4A2-0A25A379681D.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA40D972C-348B-4847-A740-3EA948FA361A.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA603882B-95DE-4CF4-BAD4-521173A424FC.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSAA5286CA-2D10-4979-A42C-A2A51C0B68F9.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSAD3F9478-69F7-4129-B727-A5DED79A6322.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB166A3EE-9C72-4E6C-9788-A4C820C13F89.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSB2A9E9C8-14A9-48FF-855C-6A0285C10131.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBA96E8BF-DD04-4438-81D9-9AA30B189A55.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBBD174C9-AA97-44AC-B84A-CADCFD7C1592.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBEADF30C-9ECB-416D-A994-EEADAF4E66F4.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBF1F5889-F6C6-45B5-B1DC-4044D4F39FC2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBF6B49B4-8169-4985-BE05-EC006407A191.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC1DCE95C-7D69-43F5-8ACF-975327C1DA44.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC27F2956-BCDE-4662-8250-6E419EC94B42.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC561350E-D1C2-4BD1-ABD5-D7D78FD8BAAB.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCB793872-016A-41FD-BA15-C304F564F29E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCB7CF4A8-FBBD-409A-895E-B3EE73BCB853.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCF39A639-FBAC-46B4-886B-7BCEE9E71DB6.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD2F0CC69-87E1-4384-8874-3030254B0451.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD43AF490-A817-438E-A986-92D92B90D03E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD57BBE8D-9964-4BA5-BB01-92E3DEAE4EAF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE125AE46-6DE0-4B1D-8130-2BADF1C4D864.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE179E3D4-4FF8-42E8-9BE8-EFB5F234FC70.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE221B5DA-4B3F-467C-8117-B7B09FDE57E1.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE3545475-C79F-465E-914D-023C53615A24.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE5F0F671-0F9C-4EB6-958E-AFD95EB7642E.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSEF5E3C48-208E-469F-AE98-27C8494EC784.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF091A7C7-A2EF-476A-9185-92BCC98EF61A.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF0D87D30-8C4C-4F38-850D-D2FAA88B19EA.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF50004F0-67D2-4428-BF04-4EC52F1ABABD.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF67A7568-4CDF-4797-9DB8-77E71685F5DF.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF7BE4E77-C04B-4629-B2E9-1336DB412A95.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF96CCB68-9378-478B-A744-525B278026A3.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFAF0D861-D384-4D7A-A196-73945833287F.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFB92C389-4F7E-4EFC-BAE7-73E3F7479BB2.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFBB459A8-D3D6-4D51-AB18-77DA350E68C5.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFD40361C-E59A-4644-A7F0-3FC7B2EAF495.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFEB3B24B-1E19-4D50-B3EB-4457C2BF5727.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFFFDBF22-ECA9-4467-A6AE-9DF5DF061C86.tmp Object is locked skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\chandir.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\chandir.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\chn.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\chn.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\D0000000.FCS Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\inuse.txt Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\L0000003.FCS Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\main.log Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_die.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_die.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_dnd.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_dnd.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_ext.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_ext.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_rcv.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_rcv.idx Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\storydb.dat Object is locked skipped
    C:\Program Files\Updates from HP\309731\Users\Default\Data\storydb.idx Object is locked skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP155\change.log Object is locked skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{4DD136AD-BE13-4A30-AA52-8C06FC9919BC}.crmlog Object is locked skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\EventCache\{1B11CFF0-33B6-4980-9C8F-2E54430202D2}.bin Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
    C:\WINDOWS\Sti_Trace.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\default Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
    C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\software Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\system Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\h323log.txt Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
    C:\WINDOWS\wiadebug.log Object is locked skipped
    C:\WINDOWS\wiaservc.log Object is locked skipped
    C:\WINDOWS\WindowsUpdate.log Object is locked skipped
    D:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP155\change.log Object is locked skipped

    Scan process completed.
  • jmoney3457jmoney3457 Maine
    edited January 2007
    Please do the following...

    1. Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.
    This program is for XP and Windows 2000 only!

    Double-click ATF Cleaner.exe to open it.

    Under Main select the following:
      Windows Temp
      Current User Temp
      All Users Temp
      Temporary Internet Files
      Prefetch
      Java Cache      *The other boxes are optional*
      Then click the Empty Selected button.

      Click Exit on the Main menu to close the program.

      2. You may wish to Print or Save the following instructions, as the internet will not be available once in Safe Mode!

      Please download AVG Anti-Spyware to your Desktop or to your usual Download Folder.
      http://www.ewido.net/en/download/
      • Install AVG Anti-Spyware by double clicking the installer.
      • Follow the prompts. Make sure that Launch AVG Anti-Spyware is checked.
      • On the main screen under Your Computer's security.
        • Click on Change state next to Resident shield. It should now change to inactive.
        • Click on Change state next to Automatic updates. It should now change to inactive.
        • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
        • Wait until you see the Update succesfull message.
      • Right-click the AVG Anti-Spyware Tray Icon and uncheck Start with Windows.
      • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
      If you are having problems with the updater, you can use this link to manually update ewido.
      AVG Anti-Spyware manual updates.
      Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.

      Reboot your computer in Safe Mode.
      • If the computer is running, shut down Windows, and then turn off the power.
      • Wait 30 seconds, and then turn the computer on.
      • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
      • Ensure that the Safe Mode option is selected.
      • Press Enter. The computer then begins to start in Safe mode.
      • Login on your usual account.
      Once in Safe Mode:

      Close ALL open Windows / Programs / Folders. Please start AVG Anti-Spyware and run a full scan.
      • Click on Scanner on the toolbar.
      • Click on the Settings tab.
        • Under How to act?
          • Click on Recommended Action and choose Quarantine from the popup menu.
        • Under How to scan?
          • All checkboxes should be ticked.
        • Under Possibly unwanted software:
          • All checkboxes should be ticked.
        • Under Reports:
          • Select Automatically generate report after every scan and uncheck Only if threats were found.
        • Under What to scan?
          • Select Scan every file.
      • Click on the Scan tab.
      • Click on Complete System Scan to start the scan process.
      • Let the program scan the machine.
      • When the scan has finished, follow the instructions below.
        IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
        • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
        • At the bottom of the window click on the Apply all Actions button. (3)
          scanavgjk2.jpg
      • When done, click the Save Scan Report button. (4)
        • Click the Save Report as button.
        • Save the report to your Desktop.
      • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes
      . Reboot back into Normal Mode

      3. Download this file to your Desktop - combofix.exe
      Double click combofix.exe & follow the prompts.
      When finished, it shall produce a log for you. Post that log in your next reply

      Note:
      Do not mouseclick combofix's window whilst it's running. That may cause it to stall

      4. Please post the following...

      1) AVG anti-spyware log
      2) ComboFix log
      3) New HijackThis log
    • starshinestarshine Montana
      edited January 2007
      AVG Anti-Spyware - Scan Report

      + Created at: 1:50:57 PM 1/6/2007

      + Scan result:



      :mozilla.10:C:\Documents and Settings\Pooh Bear\Application Data\Mozilla\Firefox\Profiles\yoyc3rk0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
      :mozilla.6:C:\Documents and Settings\Pooh Bear\Application Data\Mozilla\Firefox\Profiles\yoyc3rk0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
      :mozilla.7:C:\Documents and Settings\Pooh Bear\Application Data\Mozilla\Firefox\Profiles\yoyc3rk0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
      :mozilla.8:C:\Documents and Settings\Pooh Bear\Application Data\Mozilla\Firefox\Profiles\yoyc3rk0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
      :mozilla.9:C:\Documents and Settings\Pooh Bear\Application Data\Mozilla\Firefox\Profiles\yoyc3rk0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
      C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@com[1].txt -> TrackingCookie.Com : Cleaned.


      ::Report end

      HP_Administrator - 07-01-06 19:06:54.93 Service Pack 2
      ComboFix 06.11.27 - Running from: "C:\Documents and Settings\HP_Administrator\My Documents"

      ((((((((((((((((((((((((((((((( Files Created from 2006-12-06 to 2007-01-06 ))))))))))))))))))))))))))))))))))


      2007-01-06 12:56 3,968 --a
      C:\WINDOWS\system32\drivers\AvgAsCln.sys
      2007-01-06 12:56 <DIR> d
      C:\Program Files\Grisoft
      2007-01-06 11:05 <DIR> d
      C:\WINDOWS\system32\Kaspersky Lab
      2007-01-06 07:05 <DIR> dr-h
      C:\Documents and Settings\HP_Administrator\Recent
      2007-01-05 17:13 <DIR> d
      C:\Program Files\EmpiresandDungeons_at
      2007-01-05 16:19 <DIR> d
      C:\Program Files\SnowyLunchRush_at
      2007-01-05 15:09 <DIR> d
      C:\Program Files\Windows Installer Clean Up
      2007-01-05 15:07 <DIR> d
      C:\Program Files\MSECACHE
      2007-01-05 15:02 <DIR> d
      C:\WINDOWS\system32\drivers\UMDF
      2007-01-05 14:50 36,352
      C:\WINDOWS\system32\tsgqec.dll
      2007-01-05 14:50 288,768
      C:\WINDOWS\system32\rhttpaa.dll
      2007-01-05 14:50 116,736
      C:\WINDOWS\system32\aaclient.dll
      2007-01-05 12:53 <DIR> d
      C:\Program Files\Spybot - Search & Destroy
      2007-01-05 12:53 <DIR> d
      C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      2007-01-05 12:38 <DIR> d
      C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
      2007-01-04 19:31 21,504 --a
      C:\WINDOWS\jestertb.dll
      2007-01-02 17:00 <DIR> d
      C:\Documents and Settings\All Users\Application Data\Barbie Fashion Show
      2007-01-02 16:57 <DIR> d
      C:\Program Files\Common Files\Vivendi Universal Games
      2007-01-02 16:57 <DIR> d
      C:\Program Files\Barbie(TM)
      2007-01-01 12:31 <DIR> d
      C:\Documents and Settings\All Users\Application Data\PopCap
      2006-12-27 09:41 <DIR> d
      C:\Documents and Settings\All Users\Application Data\Trymedia
      2006-12-27 09:31 <DIR> d
      C:\Program Files\Fish Tycoon
      2006-12-27 09:31 <DIR> d
      C:\Program Files\BFG
      2006-12-23 10:42 <DIR> d
      C:\Program Files\3DGroove
      2006-12-22 20:07 <DIR> d
      C:\Documents and Settings\All Users\Application Data\MinigolfVUG
      2006-12-18 22:23 423,424 --a
      C:\WINDOWS\system32\rwdx6d20.dll
      2006-12-18 22:23 339,968 --a
      C:\WINDOWS\system32\rwdx8d20.dll
      2006-12-18 22:23 331,776 --a
      C:\WINDOWS\system32\rwx20.dll
      2006-12-18 22:23 <DIR> d
      C:\Program Files\Hasbro
      2006-12-18 10:02 92,208 --a
      C:\WINDOWS\system32\WING.DLL
      2006-12-18 10:02 188,960 --a
      C:\WINDOWS\system32\WINGDE.DLL
      2006-12-18 10:02 12,800 --a
      C:\WINDOWS\system32\wing32.dll
      2006-12-18 10:01 <DIR> d
      C:\Program Files\Battleship
      2006-12-16 11:36 <DIR> d
      C:\WINDOWS\system32\AGEIA
      2006-12-16 11:36 <DIR> d
      C:\Program Files\AGEIA Technologies
      2006-12-16 11:34 <DIR> d
      C:\Program Files\Common Files\Wise Installation Wizard
      2006-12-14 21:43 <DIR> d
      C:\Documents and Settings\All Users\Application Data\AOL OCP
      2006-12-14 21:40 <DIR> d
      C:\Program Files\AIM6
      2006-12-13 02:23 <DIR> d
      C:\Program Files\Zylom Games
      2006-12-13 02:23 <DIR> d
      C:\Documents and Settings\All Users\Application Data\Zylom
      2006-12-13 00:43 <DIR> d
      C:\Program Files\Astro Gemini Software
      2006-12-13 00:42 1,295,872 --a
      C:\WINDOWS\Christmas Night 3D.scr
      2006-12-13 00:31 8,047,577 --a
      C:\WINDOWS\system32\Santa's Sleigh Works.scr
      2006-12-12 13:45 69,632 --a
      C:\WINDOWS\system32\lfgif13n.dll
      2006-12-12 13:45 57,344 --a
      C:\WINDOWS\system32\lfbmp13n.dll
      2006-12-12 13:45 462,848 --a
      C:\WINDOWS\system32\ltkrn13n.dll
      2006-12-12 13:45 450,560 --a
      C:\WINDOWS\system32\ltimg13n.dll
      2006-12-12 13:45 401,408 --a
      C:\WINDOWS\system32\lfcmp13n.dll
      2006-12-12 13:45 299,008 --a
      C:\WINDOWS\system32\ltdis13n.dll
      2006-12-12 13:45 206,336 --a
      C:\WINDOWS\system32\ltefx13n.dll
      2006-12-12 13:45 163,840 --a
      C:\WINDOWS\system32\ltfil13n.dll
      2006-12-12 13:45 159,744 --a
      C:\WINDOWS\system32\lfpng13n.dll
      2006-12-12 02:03 44,544 --a
      C:\WINDOWS\system32\GIF89.DLL
      2006-12-12 02:03 233,472 --a
      C:\WINDOWS\system32\SNWVALID.DLL
      2006-12-12 02:03 1,204,224 --a
      C:\WINDOWS\system32\SIERRANW.DLL
      2006-12-11 14:14 <DIR> d
      C:\Documents and Settings\HP_Administrator\Application Data\Help
      2006-12-09 10:48 <DIR> d
      C:\Program Files\Codemasters
      2006-12-07 22:06 <DIR> d
      C:\Documents and Settings\HP_Administrator\.toybox
      2006-12-06 13:28 <DIR> d
      C:\Program Files\Firaxis Games


      (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


      2007-01-06 13:01
      d
      C:\Program Files\Trillian
      2007-01-05 22:02 43520 --a
      C:\WINDOWS\system32\CmdLineExt03.dll
      2007-01-05 18:50
      d
      C:\Program Files\Hijackthis
      2007-01-05 15:17
      d
      C:\Program Files\Google
      2007-01-05 15:16
      d
      C:\Program Files\Yahoo!
      2007-01-05 15:05
      d
      C:\Program Files\Windows Media Player
      2007-01-05 15:05
      d
      C:\Program Files\Windows Media Connect 2
      2007-01-04 22:55
      d
      C:\Documents and Settings\HP_Administrator\Application Data\MSN6
      2007-01-03 12:39
      d
      C:\Program Files\Java
      2007-01-02 16:57
      d
      C:\Program Files\Common Files
      2007-01-01 11:16
      d
      C:\Program Files\Mozilla Firefox
      2006-12-15 14:18
      d
      C:\Program Files\MSN Messenger
      2006-12-14 22:46
      d
      C:\Program Files\Common Files\AOL
      2006-12-14 22:39
      d
      C:\Program Files\Outlook Express
      2006-12-14 22:39
      d
      C:\Program Files\Common Files\System
      2006-12-13 02:24
      d
      C:\Documents and Settings\HP_Administrator\Application Data\PlayFirst
      2006-12-11 11:44
      d
      C:\Program Files\Shockwave.com
      2006-12-11 01:35 12400 --a
      C:\WINDOWS\system32\drivers\secdrv.sys
      2006-12-10 15:46
      d
      C:\Program Files\Serif
      2006-12-10 15:45
      d
      C:\Program Files\Winamp
      2006-12-10 15:45
      d
      C:\Program Files\Mozilla Thunderbird
      2006-12-10 15:45
      d
      C:\Program Files\MoodLogic
      2006-12-10 15:42
      d
      C:\Program Files\Destiny Worlds
      2006-12-09 10:49
      d--h
      C:\Program Files\InstallShield Installation Information
      2006-12-03 12:04 48424 --a
      C:\WINDOWS\system32\sirenacm.dll
      2006-11-28 16:20
      d
      C:\Program Files\Hewlett-Packard
      2006-11-27 01:45 60416
      C:\WINDOWS\system32\tzchange.exe
      2006-11-26 17:50
      d
      C:\Program Files\Three Rings Design
      2006-11-26 17:50
      d
      C:\Documents and Settings\HP_Administrator\Application Data\yoclient
      2006-11-25 21:07
      d
      C:\Documents and Settings\HP_Administrator\Application Data\MSNInstaller
      2006-11-23 07:00
      d
      C:\Program Files\MSN
      2006-11-23 07:00
      d
      C:\Program Files\Common Files\Microsoft Shared
      2006-11-18 21:05
      d
      C:\Program Files\Disney Interactive
      2006-11-13 00:25
      d
      C:\Program Files\Folding@Home
      2006-11-12 23:02 1866240 --a
      C:\WINDOWS\system32\mstscax.dll
      2006-11-11 05:34
      d
      C:\Documents and Settings\HP_Administrator\Application Data\Neopets Toolbar
      2006-11-09 06:03
      d
      C:\Program Files\WinMX
      2006-11-07 22:06 679424 --a
      C:\WINDOWS\system32\inetcomm.dll
      2006-11-07 21:37 12464 --a
      C:\WINDOWS\system32\drivers\CdaD10BA.SYS
      2006-11-07 01:06 600576 --a
      C:\WINDOWS\system32\mstsc.exe
      2006-11-06 07:38
      d
      C:\Program Files\thriXXX
      2006-11-04 14:14 1245696 --a
      C:\WINDOWS\system32\msxml4.dll
      2006-11-02 20:05 176550 --a
      C:\WINDOWS\GalleryPlayer Images Uninstaller.exe
      2006-10-27 15:09 6049280 --a
      C:\WINDOWS\system32\ieframe.dll
      2006-10-27 15:09 50688 --a
      C:\WINDOWS\system32\msfeedsbs.dll
      2006-10-27 15:09 458752 --a
      C:\WINDOWS\system32\msfeeds.dll
      2006-10-27 15:09 413696 --a
      C:\WINDOWS\system32\vbscript.dll
      2006-10-27 15:09 231424 --a
      C:\WINDOWS\system32\webcheck.dll
      2006-10-27 15:09 180736 --a
      C:\WINDOWS\system32\ieui.dll
      2006-10-27 15:09 156160 --a
      C:\WINDOWS\system32\msls31.dll
      2006-10-27 02:44 71680 --a
      C:\WINDOWS\system32\admparse.dll
      2006-10-27 02:44 55296 --a
      C:\WINDOWS\system32\iesetup.dll
      2006-10-27 02:44 54784 --a
      C:\WINDOWS\system32\ie4uinit.exe
      2006-10-27 02:44 43008 --a
      C:\WINDOWS\system32\iernonce.dll
      2006-10-27 02:44 382976 --a
      C:\WINDOWS\system32\iedkcs32.dll
      2006-10-27 02:44 229376 --a
      C:\WINDOWS\system32\ieaksie.dll
      2006-10-27 02:44 152064 --a
      C:\WINDOWS\system32\ieakeng.dll
      2006-10-27 02:44 13312 --a
      C:\WINDOWS\system32\ieudinit.exe
      2006-10-27 02:44 123904 --a
      C:\WINDOWS\system32\advpack.dll
      2006-10-27 02:42 161792 --a
      C:\WINDOWS\system32\ieakui.dll
      2006-10-21 15:36 737280 --a--c--- C:\WINDOWS\iun6002.exe
      2006-10-19 06:56 713216 --a
      C:\WINDOWS\system32\sxs.dll
      2006-10-18 21:58 8704 --a
      C:\WINDOWS\system32\wdfmgr.exe
      2006-10-18 21:58 8704 --a
      C:\WINDOWS\system32\uwdf.exe
      2006-10-18 21:47 99840 --a
      C:\WINDOWS\system32\wmpshell.dll
      2006-10-18 21:47 991744 --a
      C:\WINDOWS\system32\drmv2clt.dll
      2006-10-18 21:47 937984 --a
      C:\WINDOWS\system32\wmnetmgr.dll
      2006-10-18 21:47 8231936 --a
      C:\WINDOWS\system32\wmploc.dll
      2006-10-18 21:47 767488
      C:\WINDOWS\system32\WMVSENCD.dll
      2006-10-18 21:47 757248 --a
      C:\WINDOWS\system32\wmadmod.dll
      2006-10-18 21:47 7168 --a
      C:\WINDOWS\system32\asferror.dll
      2006-10-18 21:47 656896
      C:\WINDOWS\system32\WMVXENCD.dll
      2006-10-18 21:47 63488 --a
      C:\WINDOWS\system32\wpdmtpus.dll
      2006-10-18 21:47 629760 --a
      C:\WINDOWS\system32\wpd_ci.dll
      2006-10-18 21:47 613376
      C:\WINDOWS\system32\wmpmde.dll
      2006-10-18 21:47 603648 --a
      C:\WINDOWS\system32\WMSPDMOD.dll
      2006-10-18 21:47 542720 --a
      C:\WINDOWS\system32\blackbox.dll
      2006-10-18 21:47 535040 --a
      C:\WINDOWS\system32\wmdrmsdk.dll
      2006-10-18 21:47 429056 --a
      C:\WINDOWS\system32\wmdrmdev.dll
      2006-10-18 21:47 414208 --a
      C:\WINDOWS\system32\msscp.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\wmvdmoe2.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\wmvdmod.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\WMVADVE.DLL
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\WMVADVD.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\wmsdmoe2.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\wmsdmod.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\wdfapi.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\MPG4DMOD.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\MP4SDMOD.dll
      2006-10-18 21:47 4096 --a
      C:\WINDOWS\system32\MP43DMOD.dll
      2006-10-18 21:47 38400
      C:\WINDOWS\system32\wpdshextres.dll
      2006-10-18 21:47 37376 --a
      C:\WINDOWS\system32\wmdmps.dll
      2006-10-18 21:47 35840 --a
      C:\WINDOWS\system32\wpdconns.dll
      2006-10-18 21:47 356352 --a
      C:\WINDOWS\system32\wpdsp.dll
      2006-10-18 21:47 348672 --a
      C:\WINDOWS\system32\wmdrmnet.dll
      2006-10-18 21:47 33792 --a
      C:\WINDOWS\system32\wmdmlog.dll
      2006-10-18 21:47 321536 --a
      C:\WINDOWS\system32\mswmdm.dll
      2006-10-18 21:47 317440
      C:\WINDOWS\system32\MP4SDECD.dll
      2006-10-18 21:47 314880 --a
      C:\WINDOWS\system32\wmpdxm.dll
      2006-10-18 21:47 295936
      C:\WINDOWS\system32\wmpeffects.dll
      2006-10-18 21:47 284160
      C:\WINDOWS\system32\PortableDeviceApi.dll
      2006-10-18 21:47 276992 --a
      C:\WINDOWS\system32\audiodev.dll
      2006-10-18 21:47 27136 --a
      C:\WINDOWS\system32\mspmsnsv.dll
      2006-10-18 21:47 2603008
      C:\WINDOWS\system32\WpdShext.dll
      2006-10-18 21:47 259072
      C:\WINDOWS\system32\MPG4DECD.dll
      2006-10-18 21:47 259072
      C:\WINDOWS\system32\MP43DECD.dll
      2006-10-18 21:47 2450944 --a
      C:\WINDOWS\system32\wmvcore.dll
      2006-10-18 21:47 242688 --a
      C:\WINDOWS\system32\wmpasf.dll
      2006-10-18 21:47 229376 --a
      C:\WINDOWS\system32\cewmdm.dll
      2006-10-18 21:47 227328 --a
      C:\WINDOWS\system32\wmerror.dll
      2006-10-18 21:47 222208 --a
      C:\WINDOWS\system32\wmasf.dll
      2006-10-18 21:47 212992 --a
      C:\WINDOWS\system32\MFPLAT.dll
      2006-10-18 21:47 211456 --a
      C:\WINDOWS\system32\qasf.dll
      2006-10-18 21:47 204288 --a
      C:\WINDOWS\system32\wmpsrcwp.dll
      2006-10-18 21:47 199168
      C:\WINDOWS\system32\PortableDeviceWMDRM.dll
      2006-10-18 21:47 179712 --a
      C:\WINDOWS\system32\msnetobj.dll
      2006-10-18 21:47 175616 --a
      C:\WINDOWS\system32\mspmsp.dll
      2006-10-18 21:47 166912
      C:\WINDOWS\system32\PortableDeviceTypes.dll
      2006-10-18 21:47 1661440 --a
      C:\WINDOWS\system32\wmpencen.dll
      2006-10-18 21:47 1574912
      C:\WINDOWS\system32\WMVENCOD.dll
      2006-10-18 21:47 157184 --a
      C:\WINDOWS\system32\wmidx.dll
      2006-10-18 21:47 154624 --a
      C:\WINDOWS\system32\wpdmtp.dll
      2006-10-18 21:47 1543680
      C:\WINDOWS\system32\WMVDECOD.dll
      2006-10-18 21:47 1382912
      C:\WINDOWS\system32\WMVSDECD.dll
      2006-10-18 21:47 133632
      C:\WINDOWS\system32\WPDShServiceObj.dll
      2006-10-18 21:47 1329152 --a
      C:\WINDOWS\system32\WMSPDMOE.dll
      2006-10-18 21:47 132096
      C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
      2006-10-18 21:47 130048
      C:\WINDOWS\system32\wmpps.dll
      2006-10-18 21:47 11264 --a
      C:\WINDOWS\system32\LAPRXY.dll
      2006-10-18 21:47 1117696 --a
      C:\WINDOWS\system32\WMADMOE.dll
      2006-10-18 21:47 101888
      C:\WINDOWS\system32\PortableDeviceClassExtension.dll
      2006-10-18 20:03 100864 --a
      C:\WINDOWS\system32\logagent.exe
      2006-10-18 20:00 249856 --a
      C:\WINDOWS\system32\drmupgds.exe
      2006-10-18 20:00 17408
      C:\WINDOWS\system32\wpdshextautoplay.exe
      2006-10-17 12:06 78336 --a
      C:\WINDOWS\system32\ieencode.dll
      2006-10-17 12:05 40960 --a
      C:\WINDOWS\system32\licmgr10.dll
      2006-10-17 12:05 206336
      c--- C:\WINDOWS\system32\WinFXDocObj.exe
      2006-10-17 12:05 105984 --a
      C:\WINDOWS\system32\url.dll
      2006-10-17 12:04 101376 --a
      C:\WINDOWS\system32\occache.dll
      2006-10-17 12:03 17408 --a
      C:\WINDOWS\system32\corpol.dll
      2006-10-17 11:58 61952
      c--- C:\WINDOWS\system32\icardie.dll
      2006-10-17 11:58 12288
      C:\WINDOWS\system32\msfeedssync.exe
      2006-10-17 11:57 36352 --a
      C:\WINDOWS\system32\imgutil.dll
      2006-10-17 11:57 266752
      C:\WINDOWS\system32\iertutil.dll
      2006-10-17 11:56 45568 --a
      C:\WINDOWS\system32\mshta.exe
      2006-10-17 11:28 48128 --a
      C:\WINDOWS\system32\mshtmler.dll
      2006-10-17 11:27 380928
      C:\WINDOWS\system32\ieapfltr.dll
      2006-10-13 05:35 65536 --a
      C:\WINDOWS\system32\nwwks.dll
      2006-10-13 05:35 64000 --a
      C:\WINDOWS\system32\nwapi32.dll
      2006-10-13 05:35 142336 --a
      C:\WINDOWS\system32\nwprovau.dll
      2006-10-11 09:35 58880 --a
      C:\WINDOWS\system32\pnrpnsp.dll
      2006-10-11 09:35 553984 --a
      C:\WINDOWS\system32\p2psvc.dll
      2006-10-11 09:35 313344 --a
      C:\WINDOWS\system32\p2pgraph.dll
      2006-10-11 09:35 153088 --a
      C:\WINDOWS\system32\p2p.dll
      2006-10-11 09:35 115712 --a
      C:\WINDOWS\system32\p2pnetsh.dll
      2006-10-11 09:35 104960 --a
      C:\WINDOWS\system32\p2pgasvc.dll
      2006-10-09 16:12 456192 --a
      C:\WINDOWS\system32\encdec.dll
      2006-10-09 16:12 235008
      C:\WINDOWS\system32\psisdecd.dll


      (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

      *Note* empty entries are not shown

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
      "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
      "HPBootOp"="\"C:\\Program Files\\Hewlett-Packard\\HP Boot Optimizer\\HPBootOp.exe\" /run"
      "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""
      "tgcmd"="\"C:\\Program Files\\Support.com\\bin\\tgcmd.exe\" /server /startmonitor /deaf"
      "SpySweeper"="\"C:\\Program Files\\Webroot\\Spy Sweeper\\SpySweeper.exe\" /startintray"
      "VSOCheckTask"="\"C:\\PROGRA~1\\McAfee.com\\VSO\\mcmnhdlr.exe\" /checktask"
      "VirusScan Online"="C:\\Program Files\\McAfee.com\\VSO\\mcvsshld.exe"
      "OASClnt"="C:\\Program Files\\McAfee.com\\VSO\\oasclnt.exe"
      "MCAgentExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcagent.exe"
      "MCUpdateExe"="c:\\PROGRA~1\\mcafee.com\\agent\\mcupdate.exe"
      "MPFExe"="C:\\PROGRA~1\\McAfee.com\\PERSON~1\\MpfTray.exe"
      "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
      "KBD"="C:\\HP\\KBD\\KBD.EXE"
      "HPHmon06"="C:\\WINDOWS\\system32\\hphmon06.exe"
      "TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
      "Installed"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
      "Installed"="1"
      "NoChange"="1"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
      "Installed"="1"

      [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
      "DeskHtmlVersion"=dword:00000110
      "DeskHtmlMinorVersion"=dword:00000005
      "Settings"=dword:00000001
      "GeneralFlags"=dword:00000001

      [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="My Current Home Page"
      "Flags"=dword:00000002
      "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
      00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
      "CurrentState"=hex:04,00,00,40
      "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
      ff,ff,04,00,00,00
      "RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
      00,00,01,00,00,00

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
      "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
      "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
      "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
      "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
      "NoDriveTypeAutoRun"=hex:91,00,00,00

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "dontdisplaylastusername"=dword:00000000
      "legalnoticecaption"=""
      "legalnoticetext"=""
      "shutdownwithoutlogon"=dword:00000001
      "undockwithoutlogon"=dword:00000001
      "InstallVisualStyle"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,52,65,73,6f,75,72,\
      63,65,73,5c,54,68,65,6d,65,73,5c,52,6f,79,61,6c,65,5c,52,6f,79,61,6c,65,2e,\
      6d,73,73,74,79,6c,65,73,00
      "InstallTheme"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,52,65,73,6f,75,72,63,65,\
      73,5c,54,68,65,6d,65,73,5c,52,6f,79,61,6c,65,2e,74,68,65,6d,65,00

      [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
      "NoDriveTypeAutoRun"=dword:00000091

      [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
      "NoDriveTypeAutoRun"=dword:00000091

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
      "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
      "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
      "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
      "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
      "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
      "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


      Contents of the 'Scheduled Tasks' folder
      C:\WINDOWS\tasks\McAfee.com Scan for Viruses - My Computer (MOUSE06-HP_Administrator).job

      Completion time: 07-01-06 19:09:23.34
      C:\ComboFix.txt ... 07-01-06 19:09
    • starshinestarshine Montana
      edited January 2007
      Ooops ... forgot to add the Hijack this log :

      ---
      Logfile of HijackThis v1.99.1
      Scan saved at 7:14:40 PM, on 1/6/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Support.com\bin\tgcmd.exe
      C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
      C:\WINDOWS\eHome\ehSched.exe
      c:\Program Files\Common Files\LightScribe\LSSrvc.exe
      C:\Program Files\McAfee.com\VSO\mcvsshld.exe
      C:\Program Files\McAfee.com\VSO\oasclnt.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      c:\program files\mcafee.com\agent\mcdetect.exe
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\hphmon06.exe
      C:\WINDOWS\system32\ctfmon.exe
      c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
      C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\ALCXMNTR.EXE
      C:\WINDOWS\AGRSMMSG.exe
      c:\windows\system\hpsysdrv.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor /deaf
      O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
      O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
      O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
      O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Save to &Xdrive - res://C:\Program Files\Xdrive\Xdrive Desktop\xdrive.exe/std.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
      O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
      O11 - Options group: [INTERNATIONAL] International*
      O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
      O16 - DPF: {040F4385-8DAD-4306-94BF-B8291D841FAE} (USBAPTester Class) - http://www.nintendowifi.com/troubleshooting/usbaptest.cab
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
      O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://www.shockwave.com/content/dinerdash2/sis/DinerDash2.1.0.0.53.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1159073631074
      O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
      O16 - DPF: {7D731A83-6C80-4EA4-9646-5E06A0513274} (Sandlot Loader Control) - http://www.shockwave.com/content/ballistik/sis/slgwebinstall.cab
      O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
      O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.shockwave.com/content/feedingfrenzy/sis/SproutLauncher.cab
      O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.shockwave.com/content/cinematycoon/sis/cinematycoon.cab
      O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/bonniesbookstore/sis/popcaploader_v10.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
      O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
      O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
      O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
      O23 - Service: NPDOR File Monitor Service (NFMService) - Unknown owner - C:\WINDOWS\System32\NPDORNT.exe (file missing)
      O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    • jmoney3457jmoney3457 Maine
      edited January 2007
      nothing is really standing out in any of those logs..you said this is an internet sharing error? this may be error with your internet and not malware
    • starshinestarshine Montana
      edited January 2007
      Is there somewhere on the forum to ask about internet / computer issues then?

      Basically, I purchased a Nintendo Wi-Fi USB Connector to use with the Nintendo DS system. It worked for the first few days. Then it wasn't wanting to connect properly.

      I uninstalled following the instructions given to me. Went to reinstall and the software now says just plainly "Internet Sharing Error .(6)" and the application quits.

      I figured it may have to do with something that my computer picked up. I did notice a few things were removed during the Anti-Spyware scan.

      Did the scans and cleaners remove anything that may have caused issues?

      Is there anything you see in the HiJackThis that I could remove that may help ( or help my computer run a bit smoother )
    • jmoney3457jmoney3457 Maine
      edited January 2007
      try clearing out your temp files following these instructions..Download ATF Cleaner
      • Double-click ATF-Cleaner.exe to run the program.
      • Click Select All found at the bottom of the list.
      • Click the Empty Selected button.
      If you use Firefox browser, do this also:
      • Click Firefox at the top and choose Select All from the list.
      • Click the Empty Selected button.
      • NOTE : If you would like to keep your saved passwords, please click No at the prompt.
      If you use Opera browser, do this also:
      • Click Opera at the top and choose Select All from the list.
      • Click the Empty Selected button.
      • NOTE : If you would like to keep your saved passwords, please click No at the prompt.
      Click Exit on the Main menu to close the program.
      and yes i'll move this thread to the networking(internet) forums:)
    • jmoney3457jmoney3457 Maine
      edited January 2007
      can someone here help this nice person out:thumbsup:
    • SuperSaiyan4SuperSaiyan4
      edited January 2007
      My theory is since you said it used to work is that it *could* be that the wifi adaptor has developed a fault?

      Your best bit would be to ring Nintendo and speak to them.
    • mtroxmtrox Minnesota
      edited January 2007
      jmoney3457 wrote:
      can someone here help this nice person out:thumbsup:

      Would love to money but if it's a device connected to a Nintendo I think we're out of our league a little bit. However, this we can do:
      starshine wrote:
      Is there anything you see in the HiJackThis that I could remove that may help ( or help my computer run a bit smoother )

      Well, there are quite a few un-necessary updater type things running all the time. This won't solve your Nintendo problem but it will give you a little more speed. Run another scan and put a check in the box by these items, then click the "Fix checked" button.

      O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\bin\tgcmd.exe" /server /startmonitor /deaf
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
    • starshinestarshine Montana
      edited January 2007
      Thanks.

      Well, I would contact Nintendo, but I have read in other forums that they seem to not really be much assistance. I wanted to ask here ( with computer experts on hand ) if it was just something I was doing wrong, a computer malfunction or if it really deserved a call to them.

      I removed those updates and created a new log. If there is anything else I could do before I try and reinstall this thing again and then call and yell at them ... please let me know.
      Logfile of HijackThis v1.99.1
      Scan saved at 1:45:56 PM, on 1/16/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\McAfee.com\VSO\mcvsshld.exe
      c:\Program Files\Common Files\LightScribe\LSSrvc.exe
      C:\Program Files\McAfee.com\VSO\oasclnt.exe
      c:\program files\mcafee.com\agent\mcagent.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      c:\program files\mcafee.com\agent\mcdetect.exe
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
      C:\HP\KBD\KBD.EXE
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\WINDOWS\system32\ctfmon.exe
      c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
      C:\Program Files\Hijackthis\HijackThis.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
      C:\WINDOWS\system32\WgaTray.exe
      C:\WINDOWS\System32\svchost.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
      O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
      O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Save to &Xdrive - res://C:\Program Files\Xdrive\Xdrive Desktop\xdrive.exe/std.html
      O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
      O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
      O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
      O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
      O11 - Options group: [INTERNATIONAL] International*
      O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
      O16 - DPF: {040F4385-8DAD-4306-94BF-B8291D841FAE} (USBAPTester Class) - http://www.nintendowifi.com/troubleshooting/usbaptest.cab
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by124w.bay124.mail.live.com/mail/resources/MsnPUpld.cab
      O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) - http://www.shockwave.com/content/dinerdash2/sis/DinerDash2.1.0.0.53.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1159073631074
      O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
      O16 - DPF: {7D731A83-6C80-4EA4-9646-5E06A0513274} (Sandlot Loader Control) - http://www.shockwave.com/content/ballistik/sis/slgwebinstall.cab
      O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
      O16 - DPF: {C26027F5-C7EF-4CC1-9637-B514BCF8BF4E} (SAIOnlineAForm Control) - http://www.arcadetown.com/swf/scorchanisland/saionline.cab
      O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.shockwave.com/content/feedingfrenzy/sis/SproutLauncher.cab
      O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.shockwave.com/content/cinematycoon/sis/cinematycoon.cab
      O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/bonniesbookstore/sis/popcaploader_v10.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
      O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
      O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
      O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
      O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
      O23 - Service: NPDOR File Monitor Service (NFMService) - Unknown owner - C:\WINDOWS\System32\NPDORNT.exe (file missing)
      O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe


      I am having trouble getting rid of 023 - Service : NPDOR File Monitor. I've tried various options and it won't go away.

      Plus : R3 - URLSearchHook: Yahoo! Toolbar - ... Can I remove this? Is it needed? Looks like its just a leech of some type.

      And : O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

      What is this???
    • mtroxmtrox Minnesota
      edited January 2007
      starshine wrote:

      I am having trouble getting rid of 023 - Service : NPDOR File Monitor. I've tried various options and it won't go away.

      Plus : R3 - URLSearchHook: Yahoo! Toolbar - ... Can I remove this? Is it needed? Looks like its just a leech of some type.

      And : O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

      What is this???

      Yes, kill the R3 - URLSearchHook: Yahoo! Toolbar and the O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file). As for the 023 - Service : NPDOR File Monitor......do this. Go to Start> Run..., then type "services.msc" (without the quotation marks). Scroll down to NPDOR file monitor. You may have to hunt a bit. I'm not sure the name of the service. Right click on it, then left click Properties. Then in the middle of the new window is "Startup Type:" Choose "disabled" then click OK. Oh, and as long as you're there, scroll back up and disable Ati HotKey Poller. Now reboot and do a scan. You don't have to post it...just let me know, is NPDOR still running?
    • starshinestarshine Montana
      edited January 2007
      Yes. Thank You.
      That removed it. :) My computer seems to be running a bit smoother as well after removing some unneeded (draining) items.

      I am going to try and reinstall the USB connector tonight and see if it gives the same issues.

      Thank you everyone for offering to help with this and for cleaning up my computer for me.
    Sign In or Register to comment.