Computer very, very slow HELP! PLZ

HomicideHomicide
edited July 2007 in Spyware & Virus Removal
Logfile of HijackThis v1.99.1
Scan saved at 11:50:59 AM, on 5/27/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\WINDOWS\System32\BRMFRSMG.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Main\Desktop\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Absolute Poker Basic - {5E72AD5A-20DF-4ca4-9B7B-D9717FFDE0C5} - C:\Documents and Settings\Main\Start Menu\Programs\Absolute Poker Basic\Absolute Poker Basic.lnk
O9 - Extra 'Tools' menuitem: Absolute Poker Basic - {5E72AD5A-20DF-4ca4-9B7B-D9717FFDE0C5} - C:\Documents and Settings\Main\Start Menu\Programs\Absolute Poker Basic\Absolute Poker Basic.lnk
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe



Please help, im trying to do a project for school but my computer keeps messing up for some reason. Thanks to whoever helps me out its so appreciated its not funny. THANKS!
«1

Comments

  • Baabiouz
    edited May 2007
    Hi and welcome to Short-media!

    #1
    Looking over your log, it seems you don't have any evidence of a third party firewall. You have only Norton Antivirus, right?

    As the term conveys, a firewall is an extra layer of security installed onto computers, which restricts access to systems from the outside world. Firewalls protect against hackers and malicious intruders. I want you to download a free firewall NOW from one of these excellent vendors:

    1) ZoneAlarm
    2) Agnitum
    3) Sunbelt/Kerio
    4) Comodo

    If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.

    #2

    Please do the following...

    1. Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.
    This program is for XP and Windows 2000 only!

    Double-click ATF Cleaner.exe to open it.

    Under Main select the following:
    • Windows Temp
    • Current User Temp
    • All Users Temp
    • Temporary Internet Files
    • Prefetch
    • Java Cache
    *The other boxes are optional*
    Then click the Empty Selected button.

    Click Exit on the Main menu to close the program.

    Please download AVG Anti-Spyware to your Desktop or to your usual Download Folder.
    http://www.ewido.net/en/download/
    • Install AVG Anti-Spyware by double clicking the installer.
    • Follow the prompts. Make sure that Launch AVG Anti-Spyware is checked.
    • On the main screen under Your Computer's security.
      • Click on Change state next to Resident shield. It should now change to inactive.
      • Click on Change state next to Automatic updates. It should now change to inactive.
      • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
      • Wait until you see the Update succesfull message.
    • Right-click the AVG Anti-Spyware Tray Icon and uncheck Start with Windows.
    • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
    If you are having problems with the updater, you can use this link to manually update ewido.
    AVG Anti-Spyware manual updates.
    Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.

    Reboot your computer in Safe Mode.
    • If the computer is running, shut down Windows, and then turn off the power.
    • Wait 30 seconds, and then turn the computer on.
    • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
    • Ensure that the Safe Mode option is selected.
    • Press Enter. The computer then begins to start in Safe mode.
    • Login on your usual account.
    Once in Safe Mode:

    Close ALL open Windows / Programs / Folders. Please start AVG Anti-Spyware and run a full scan.
    • Click on Scanner on the toolbar.
    • Click on the Settings tab.
      • Under How to act?
        • Click on Recommended Action and choose Quarantine from the popup menu.
      • Under How to scan?
        • All checkboxes should be ticked.
      • Under Possibly unwanted software:
        • All checkboxes should be ticked.
      • Under Reports:
        • Select Automatically generate report after every scan and uncheck Only if threats were found.
      • Under What to scan?
        • Select Scan every file.
    • Click on the Scan tab.
    • Click on Complete System Scan to start the scan process.
    • Let the program scan the machine.
    • When the scan has finished, follow the instructions below.
      IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
      • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
      • At the bottom of the window click on the Apply all Actions button. (3)
        scanavgjk2.jpg
    • When done, click the Save Scan Report button. (4)
      • Click the Save Report as button.
      • Save the report to your Desktop.
    • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
    Reboot back into Normal Mode, and post a new HJT log, along with the AVG Anti-Spyware log.
  • HomicideHomicide
    edited June 2007
    AVG Anti-Spyware - Scan Report

    + Created at: 7:46:07 PM 6/2/2007

    + Scan result:



    C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined).
    :mozilla.170:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.171:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.172:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.173:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.174:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.175:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.218:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.236:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
    :mozilla.190:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.89:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.90:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.91:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.92:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.93:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.39:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.289:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.290:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.291:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.292:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
    :mozilla.243:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.244:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.245:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.246:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.247:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.248:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.249:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.250:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.200:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.201:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.202:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.204:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.16:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.140:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
    :mozilla.149:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
    :mozilla.237:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
    :mozilla.296:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.297:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.298:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.299:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.300:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.301:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.126:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.127:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.128:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.129:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.130:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.131:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.212:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.214:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.215:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.177:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.178:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.162:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
    :mozilla.163:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
    :mozilla.164:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
    :mozilla.160:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    :mozilla.161:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    :mozilla.102:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.103:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.114:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
    :mozilla.251:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.252:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.253:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.254:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.189:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.191:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.122:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.125:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.133:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.183:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.192:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.193:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.219:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.220:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.221:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
    :mozilla.277:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.278:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.279:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.280:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.281:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.282:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.205:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.206:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.207:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.208:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.209:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.230:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.231:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.232:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.233:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.234:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.235:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
    :mozilla.273:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.274:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.275:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.276:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.260:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.261:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.262:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.263:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.264:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.265:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.266:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.267:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.268:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.13:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.40:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.41:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.42:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.43:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.44:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.45:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.194:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.195:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.196:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.197:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.198:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
    :mozilla.199:C:\Documents and Settings\Main\Application Data\Mozilla\Firefox\Profiles\wzo0b7pn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.


    ::Report end




    Logfile of HijackThis v1.99.1
    Scan saved at 11:50:59 AM, on 5/27/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\RunDll32.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\AIM\aim.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\WINDOWS\System32\BRMFRSMG.EXE
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Main\Desktop\HijackThis.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Absolute Poker Basic - {5E72AD5A-20DF-4ca4-9B7B-D9717FFDE0C5} - C:\Documents and Settings\Main\Start Menu\Programs\Absolute Poker Basic\Absolute Poker Basic.lnk
    O9 - Extra 'Tools' menuitem: Absolute Poker Basic - {5E72AD5A-20DF-4ca4-9B7B-D9717FFDE0C5} - C:\Documents and Settings\Main\Start Menu\Programs\Absolute Poker Basic\Absolute Poker Basic.lnk
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
  • Baabiouz
    edited June 2007
    Hi!

    Please click on Start > Control Panel > Add/Remove Programs and uninstall the following programs(if present):

    WeatherBug or AWS

    Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these folders (if present):

    C:\Program Files\AWS

    Do you have still problems? Did you install Firewall?

    *****

    Please download Deckard's System Scanner to your Desktop


    * Close all applications and windows.
    * Double-click on Dss.exe to run it, and follow the prompts.
    * The scan may take a minute. When the scan is complete, a text file will open Main.txt and extra.txt

    Please post Main.txt and Extra.txt
  • HomicideHomicide
    edited June 2007
    Deckard's System Scanner v20070602.46
    Run by Main on 2007-06-03 at 10:56:14
    Computer is in Normal Mode.

    -- System Restore

    Successfully created a Deckard's System Scanner Restore Point.


    -- Last 5 Restore Point(s) --
    9: 2007-06-03 14:56:22 UTC - RP133 - Deckard's System Scanner Restore Point
    8: 2007-06-02 22:36:40 UTC - RP132 - Agnitum Outpost Firewall 1.0 Installation
    7: 2007-06-01 22:21:18 UTC - RP131 - System Checkpoint
    6: 2007-05-31 21:24:14 UTC - RP130 - System Checkpoint
    5: 2007-05-30 21:03:16 UTC - RP129 - Installed Java(TM) SE Runtime Environment 6 Update 1


    -- First Restore Point --
    1: 2007-05-27 20:45:52 UTC - RP125 - System Checkpoint


    Backed up registry hives.

    Performed disk cleanup.


    -- HijackThis (run as Main.exe)

    Logfile of HijackThis v1.99.1
    Scan saved at 10:58:53 AM, on 6/3/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\RunDll32.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe
    C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\AIM\aim.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\WINDOWS\System32\BRMFRSMG.EXE
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Documents and Settings\Main\Desktop\dss.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\DOCUME~1\Main\Desktop\Main.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe


    -- File Associations

    All associations okay.


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled

    R1 VFILT (Outpost Firewall Kernel Driver) - c:\program files\agnitum\outpost firewall 1.0\kernel\2000\filtnt.sys <Not Verified; Agnitum; Virtual Firewall>
    R3 ADBLOCK.DLL (Outpost Firewall PlugIn (ADBLOCK.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\adblock.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 CONTENT.DLL (Outpost Firewall PlugIn (CONTENT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\content.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 DNSCACHE.DLL (Outpost Firewall PlugIn (DNSCACHE.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\dnscache.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 FTPFILT.DLL (Outpost Firewall PlugIn (FTPFILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\ftpfilt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 HTMLFILT.DLL (Outpost Firewall PlugIn (HTMLFILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\htmlfilt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 HTTPFILT.DLL (Outpost Firewall PlugIn (HTTPFILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\httpfilt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 IMAPFILT.DLL (Outpost Firewall PlugIn (IMAPFILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\imapfilt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 MAILFILT.DLL (Outpost Firewall PlugIn (MAILFILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\mailfilt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 NNTPFILT.DLL (Outpost Firewall PlugIn (NNTPFILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\nntpfilt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 POP3FILT.DLL (Outpost Firewall PlugIn (POP3FILT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\pop3filt.dll <Not Verified; Agnitum; Outpost Firewall>
    R3 PROTECT.DLL (Outpost Firewall PlugIn (PROTECT.DLL)) - c:\program files\agnitum\outpost firewall 1.0\kernel\protect.dll <Not Verified; Agnitum; Outpost Firewall>

    S3 npkcrypt - c:\program files\gravity\ro\npkcrypt.sys (file missing)


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled

    R2 OutpostFirewall (Outpost Firewall Service) - c:\progra~1\agnitum\outpos~1.0\outpost.exe /service <Not Verified; Agnitum; Outpost Firewall>


    -- Scheduled Tasks

    2007-06-01 20:00:08 528 --a
    C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer.job
    2007-05-31 09:24:00 284 --a
    C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    2007-02-06 12:42:35 412 --a
    C:\WINDOWS\Tasks\Symantec NetDetect.job


    -- Files created between 2007-05-03 and 2007-06-03

    2007-06-02 18:37:04 0 d
    C:\Program Files\Common Files\Agnitum Shared
    2007-06-02 18:37:01 0 d
    C:\Program Files\Agnitum
    2007-05-31 18:11:23 0 d
    C:\Documents and Settings\Main\Application Data\Apple Computer
    2007-05-31 18:10:54 0 d
    C:\Program Files\iPod
    2007-05-31 18:10:38 0 d
    C:\Program Files\iTunes
    2007-05-31 18:07:37 0 d
    C:\Program Files\QuickTime
    2007-05-30 21:47:35 0 d
    C:\Documents and Settings\Main\Application Data\Talkback
    2007-05-27 19:06:29 0 d
    C:\Documents and Settings\Main\Application Data\Leadertech
    2007-05-27 12:14:26 0 d
    C:\Documents and Settings\Main\Contacts
    2007-05-27 12:13:17 0 d
    c- C:\WINDOWS\System32\DRVSTORE
    2007-05-26 23:26:53 0 d
    C:\Program Files\Ares
    2007-05-19 17:01:42 0 d
    C:\Program Files\Micro Innovations
    2007-05-12 00:30:18 0 d
    C:\Program Files\wgens170


    -- Find3M Report

    2007-05-31 07:02:53 0 d
    C:\Program Files\DivX
    2007-05-30 21:47:21 4726 --a
    C:\WINDOWS\mozver.dat
    2007-05-30 17:06:49 0 d
    C:\Program Files\Java
    2007-05-28 12:45:21 0 d
    C:\Program Files\DVDlabPro
    2007-05-27 12:13:46 0 d
    C:\Program Files\MSN Messenger
    2007-05-05 16:42:02 0 d
    C:\Documents and Settings\Main\Application Data\Creative
    2007-04-22 21:44:46 0 d
    C:\Documents and Settings\Main\Application Data\Adobe
    2007-04-22 21:40:49 0 d
    C:\Program Files\Common Files\Adobe
    2007-04-08 22:58:42 0 d
    C:\Documents and Settings\Main\Application Data\Viewpoint


    -- Registry Dump

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    {BDF3E430-B101-42AD-A544-FADC6B084872} C:\Program Files\Norton AntiVirus\NavShExt.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
    "Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
    "BluetoothAuthenticationAgent"="rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent"
    "VTTimer"="VTTimer.exe"
    "ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
    "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe\""
    "NWEReboot"=""
    "NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
    "FLMOFFICE4DMOUSE"="C:\\Program Files\\Micro Innovations\\Wireless Keyboard & Optical Mouse\\mouse32a.exe"
    "OFFICEKB"="C:\\Program Files\\Micro Innovations\\Wireless Keyboard & Optical Mouse\\kbdap32a.exe"
    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
    "Outpost Firewall"="\"C:\\Program Files\\Agnitum\\Outpost Firewall 1.0\\outpost.exe\" /waitservice"

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
    "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
    "AIM"="C:\\Program Files\\AIM\\aim.exe -cnetwait.odl"
    "CTSyncU.exe"="\"C:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\""

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
    "DisableRegistryTools"=dword:00000000

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

    HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
    Authentication Packages REG_MULTI_SZ msv1_0\0\0
    Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
    Notification Packages REG_MULTI_SZ scecli\0\0


    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AIM]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="aim"
    "hkey"="HKCU"
    "command"="C:\\Program Files\\AIM\\aim.exe -cnetwait.odl"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="msnmsgr"
    "hkey"="HKCU"
    "command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
    "item"="qttask"
    "hkey"="HKLM"
    "command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
    "inimapping"="0"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
    LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
    NetworkService REG_MULTI_SZ DnsCache\0\0
    rpcss REG_MULTI_SZ RpcSs\0\0
    imgsvc REG_MULTI_SZ StiSvc\0\0
    termsvcs REG_MULTI_SZ TermService\0\0

    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_ADBLOCK.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_CONTENT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_DNSCACHE.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_FTPFILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_HTMLFILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_HTTPFILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_IMAPFILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_MAILFILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_NNTPFILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_POP3FILT.DLL
    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_PROTECT.DLL


    -- End of Deckard's System Scanner: finished at 2007-06-03 at 11:02:52







    Deckard's System Scanner v20070602.46
    Extra logfile - please post this as an attachment with your post.

    -- System Information

    Microsoft Windows XP Home Edition (build 2600) SP 1.0
    Architecture: X86; Language: English

    CPU 0: AMD Athlon(tm) XP 2800+
    Percentage of Memory in Use: 35%
    Physical Memory (total/avail): 991.48 MiB / 634.87 MiB
    Pagefile Memory (total/avail): 2389.82 MiB / 2150.19 MiB
    Virtual Memory (total/avail): 2047.88 MiB / 1987.75 MiB

    A: is Removable (No Media)
    C: is Fixed (NTFS) - 74.55 GiB total, 16.98 GiB free.
    D: is CDROM (No Media)
    E: is CDROM (No Media)


    -- Security Center

    AUOptions is not configured.
    AUState says computer is in an unknown state.


    -- Environment Variables

    ALLUSERSPROFILE=C:\Documents and Settings\All Users
    APPDATA=C:\Documents and Settings\Main\Application Data
    CLASSPATH=.;C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip
    CLIENTNAME=Console
    CommonProgramFiles=C:\Program Files\Common Files
    COMPUTERNAME=BRYAN
    ComSpec=C:\WINDOWS\system32\cmd.exe
    HOMEDRIVE=C:
    HOMEPATH=\Documents and Settings\Main
    LOGONSERVER=\\BRYAN
    NUMBER_OF_PROCESSORS=1
    OS=Windows_NT
    Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Mozilla Firefox
    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    PROCESSOR_ARCHITECTURE=x86
    PROCESSOR_IDENTIFIER=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
    PROCESSOR_LEVEL=6
    PROCESSOR_REVISION=0a00
    ProgramFiles=C:\Program Files
    PROMPT=$P$G
    QTJAVA=C:\Program Files\Java\jre1.6.0_01\lib\ext\QTJava.zip
    SESSIONNAME=Console
    SystemDrive=C:
    SystemRoot=C:\WINDOWS
    TEMP=C:\DOCUME~1\Main\LOCALS~1\Temp
    TMP=C:\DOCUME~1\Main\LOCALS~1\Temp
    USERDOMAIN=BRYAN
    USERNAME=Main
    USERPROFILE=C:\Documents and Settings\Main
    windir=C:\WINDOWS


    -- User Profiles

    Main (admin)


    -- Add/Remove Programs

    --> "C:\Program Files\Creative Installation Information\CREATIVE_MEDIASOURCE_U\Setup.exe" /remove /l0x0009
    --> "C:\Program Files\Creative Installation Information\E-CENTER_NET_CONTENT_U\Setup.exe" /remove /l0x0009
    --> "C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_CDBURNER_U\Setup.exe" /remove /l0x0009
    --> "C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_MTP_U\Setup.exe" /remove /l0x0009
    --> "C:\Program Files\Creative Installation Information\E-CENTER_PLUGIN_ONLINESTORE_U\Setup.exe" /remove /l0x0009
    --> "C:\Program Files\Creative Installation Information\MEDIASOURCE_PLAYER_SKINPACK_U\Setup.exe" /remove /l0x0009
    --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
    --> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
    --> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
    --> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
    --> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
    --> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
    --> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
    --> C:\WINDOWS\UNRecode.exe /UNINSTALL
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{19822917-61F6-4221-B1D0-1C3B8A06BE60}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{19822917-61F6-4221-B1D0-1C3B8A06BE60}\setup.exe" -l0x9 /remove
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7C9F6AF4-E9D9-47FE-BE4B-E637C2FCB410}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7C9F6AF4-E9D9-47FE-BE4B-E637C2FCB410}\setup.exe" -l0x9 /remove
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98181885-5B28-4280-9B56-452FF877D5B9}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98181885-5B28-4280-9B56-452FF877D5B9}\setup.exe" -l0x9 /remove
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A0B5225-B59B-4D72-B3FE-71AAA693A8E2}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9A0B5225-B59B-4D72-B3FE-71AAA693A8E2}\setup.exe" -l0x9 /remove
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9BB081B-C020-4D02-A763-D32204D2563D}\setup.exe" -l0x9
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9BB081B-C020-4D02-A763-D32204D2563D}\setup.exe" -l0x9 /remove
    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C029DB0E-C59F-417A-90F8-88FD5B2C4AE7}\setup.exe" -l0x9
    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    Ad-Aware SE Personal --> MsiExec.exe /X{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}
    Adobe Bridge 1.0 --> MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001}
    Adobe Common File Installer --> MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39}
    Adobe Flash Player Plugin --> C:\WINDOWS\System32\Macromed\Flash\uninstall_plugin.exe
    Adobe Help Center 1.0 --> MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
    Adobe Photoshop CS2 --> msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D}
    Adobe Reader 8 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A80000000002}
    Adobe Stock Photos 1.0 --> MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
    Agnitum Outpost Firewall 1.0 --> "C:\Program Files\Agnitum\Outpost Firewall 1.0\uninst.exe"
    AOL Instant Messenger --> C:\Program Files\AIM\uninstll.exe -LOG= C:\Program Files\AIM\install.log -OEM=
    Apple Software Update --> MsiExec.exe /I{A50C25D7-62E9-4511-AD70-8E2DA5E79B7D}
    Ares 1.9.4 --> "C:\Program Files\Ares\uninstall.exe"
    AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
    C-Media WDM Audio Driver --> C:\WINDOWS\system32\cmirmdrv.exe
    CC_ccStart --> MsiExec.exe /I{D6414CC7-F215-467F-88B1-546ED863F35B}
    ccCommon --> MsiExec.exe /I{DC367608-64A7-4BF7-92F4-8BAA25BA02DB}
    Creative MediaSource 5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}\SETUP.EXE" -l0x9 /remove
    Creative Removable Disk Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x9 /remove
    Creative System Information --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x9 /remove
    Creative ZEN V Series (R2) --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9862E0CB-4727-4FFC-963A-E22A9E9EC10C}\SETUP.EXE" -l0x9 /remove
    DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
    DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
    DivX Converter --> C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER
    DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
    DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
    DVD-lab PRO 1.53 --> "C:\Program Files\DVDlabPro\unins000.exe"
    DVD Shrink 3.2 --> "C:\Program Files\DVD Shrink\unins000.exe"
    DVDFab Decrypter 3.0.7.2 --> "C:\Program Files\DVDFab Decrypter 3\unins000.exe"
    GENS --> C:\Program files\wgens170\uninstal.exe
    HijackThis 1.99.1 --> C:\Documents and Settings\Main\Desktop\HijackThis.exe /uninstall
    Internet Explorer Q831167 --> C:\WINDOWS\ieuninst.exe C:\WINDOWS\INF\Q831167.inf
    iTunes --> MsiExec.exe /I{6E93572D-F31E-496F-8B2F-F400B3A2BC4E}
    J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
    Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    LiveReg (Symantec Corporation) --> C:\Program Files\Common Files\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
    LiveUpdate 1.90 (Symantec Corporation) --> C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
    Microsoft Office 2000 Premium --> MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7}
    Microsoft Windows Journal Viewer --> MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
    Mozilla Firefox (2.0.0.4) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSRedist --> MsiExec.exe /I{FC37ABD0-2108-4beb-B010-1254E0662B5A}
    Nero 7 Essentials --> MsiExec.exe /I{A79A8EC1-2D17-43D2-AE27-6C1131F61033}
    Norton AntiVirus 2004 --> MsiExec.exe /X{C6F5B6CF-609C-428E-876F-CA83176C021B}
    Norton AntiVirus 2004 (Symantec Corporation) --> C:\Program Files\Common Files\Symantec Shared\SymSetup\{C6F5B6CF-609C-428E-876F-CA83176C021B}.exe /X
    Norton AntiVirus Parent MSI --> MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
    Outlook Express Q837009 --> C:\WINDOWS\oeuninst.exe C:\WINDOWS\INF\Q837009.inf
    PowerDVD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
    QuickTime --> MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
    S3 S3Display --> vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Display'
    S3 S3Gamma2 --> vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Gamma2'
    S3 S3Info2 --> vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Info2'
    S3 S3Overlay --> vtuninst.exe -reg 5 'HKLM\Software\S3\VT\S3Uninst\S3Overlay'
    Symantec Script Blocking Installer --> MsiExec.exe /I{D327AFC9-7BAA-473A-8319-6EB7A0D40138}
    SymNet --> MsiExec.exe /I{E47EE8FB-ACC0-4608-859C-4E2851B18A6A}
    Ulead MediaStudio Pro 6.0 Trial --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Ulead Systems\Ulead MediaStudio Pro 6.0 Trial\Uninst.isu" -c"C:\Program Files\Ulead Systems\Ulead MediaStudio Pro 6.0 Trial\IS32Inst.dll"
    Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
    Windows Live Messenger --> MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
    WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
    Wireless Keyboard && Optical Mouse --> C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\uninst00.exe
    Xvid 1.1.2 final uninstall --> "C:\Program Files\Xvid\unins000.exe"
    ZENcast Organizer --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C029DB0E-C59F-417A-90F8-88FD5B2C4AE7}\setup.exe" -l0x9 /remove


    -- End of Deckard's System Scanner: finished at 2007-06-03 at 11:02:52







    Yes I have a firewall installed. it was the Agnitum one. My computer still runs pretty slow and now I get an error message everytime I get on the internet. Here is a picture of the error.

    Error.jpg

    i dont know what it is but yea. It doesnt effect anything that I can notice but it still shows up.
  • Baabiouz
    edited June 2007
    Hi!

    Please go www.windowsupdate.com and update your system.
    When you have updated your system please run this scanner:


    Panda ActiveScan

    - Once you are on the Panda site, click the Scan your PC button
    - A new window will open...click the Check Now button
    - Enter your Country
    - Enter your State/Province
    - Enter your e-mail address and click send
    - Select either Home User or Company
    - Click the big Scan Now button
    - If it wants to install an ActiveX component allow it
    - It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
    - When download is complete, click on Local Disks to start the scan
    - When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Do NOT lose it!

    Please, send the Panda activescan report.
  • HomicideHomicide
    edited June 2007
    I cant do either one of those. I refuse to use IE because it sucks and purposefully gives you spyware. Neither one of those will let me use them because I don't use or have IE.

    Is there anything else that I can do besides those?
  • Baabiouz
    edited June 2007
    https://addons.mozilla.org/en-US/firefox/addon/1419

    With that addon you can go to windowsupdate.com and update your system..
  • HomicideHomicide
    edited June 2007
    ok Im updated, but still cant use the panda thingy.
  • Baabiouz
    edited June 2007
    Oh, sorry, Panda works only with IE.
    Please, try dr.web

    Download Dr.Web CureIt to the desktop:
    ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
    • Doubleclick the drweb-cureit.exe file and Allow to run the express scan
    • This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it.
      This is only a short scan.
    • Once the short scan has finished, Click Options > Change settings
    • Choose the "Scan"-tab, remove the mark at "Heuristic analysis".
    • Back at the main window, mark the drives that you want to scan.
    • Select all drives. A red dot shows which drives have been chosen.
    • Click the green arrow at the right, and the scan will start.
    • Click 'Yes to all' i at the right, and the scan will start.
    • Click 'Yes to all' if it asks if you want to cure/move the file.
    • When the scan has finished, look if you can click next icon next to the files found:
      check.gif
      If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:
      move.gifat the right, and the scan will start.
      his will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
    • After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
    • Save the report to your desktop. The report will be called DrWeb.csv
    • Close Dr.Web Cureit.
    • Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
    • After reboot, post the contents of the log from Dr.Web you saved previously in your next reply
  • HomicideHomicide
    edited June 2007
    Well I have tried and tried and tried, but theres no luck. That dr. web thing doesnt ever finish. It takes about 3 hours to get where it gets before it freezes up.

    My computer is slower than ever now and im not sure how that is even possible since i havent done anything but do what you told me to do. My cpu usage is almost constantly at 100 percent and if its not its at 96 percent. Whats the I deal? I dont really understand that since I have done nothing but "improve" my system. Help me please
  • HomicideHomicide
    edited June 2007
    ok I actually got it to work..I did it in safe mode I hope that is ok. It found a trojan. I dont think that was my major problem though. Still my computer hates me and runs at a 100th of what it should be running at.


    WxBug.EXE;C:\Program Files\AIM\Sysfiles;Adware.Aws;Incurable.Moved.;
    A0042852.dll;C:\System Volume Information\_restore{6D481CEB-B5D6-4FDA-9A55-A7FB74286BC6}\RP132;Adware.Aws;Incurable.Moved.;
    actskn45.ocx;C:\WINDOWS\system32;Trojan.Isbar.439;Deleted.;


    Thats all I got from the thing.

    Uhm yea my computer sucks or something. lol thanks for helping me fix it though. Its appreciated.
  • Baabiouz
    edited June 2007
    Hi!

    I hope this founds something..

    Please download Combofix to your desktop.
    Doubleclick combo.exe to launch the application.
    Follow the prompts that will be displayed on the screen.
    Don't click on the window while the fix is running, because that will cause your system to hang.
    When finished, it should produce a log, combofix.txt.
    Post this log in your next reply together with a new hijackthislog.
  • HomicideHomicide
    edited June 2007
    well it took me a bit, but I think I finally got that thing to run without crashing my computer.



    "Main" - 2007-06-05 19:07:48 Service Pack 1 NTFS [SAFE MODE]
    ComboFix 07-06-3 - Running from: "C:\Documents and Settings\Main\Desktop\"


    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


    C:\DOCUME~1\Main\APPLIC~1.\macromedia\Flash Player\#SharedObjects\ASLR4Q2L\www.broadcaster.com
    C:\DOCUME~1\Main\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com
    C:\DOCUME~1\Main\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol


    ((((((((((((((((((((((((( Files Created from 2007-05-05 to 2007-06-05 )))))))))))))))))))))))))))))))


    2007-06-04 18:39 <DIR> d
    C:\DOCUME~1\Main\DoctorWeb
    2007-06-03 20:05 <DIR> d
    C:\WINDOWS\system32\PreInstall
    2007-06-03 20:04 <DIR> d
    C:\WINDOWS\system32\bits
    2007-06-03 20:01 <DIR> d---s---- C:\DOCUME~1\Main\UserData
    2007-06-03 12:28 7,680
    C:\WINDOWS\system32\bitsprx2.dll
    2007-06-03 12:28 7,168
    C:\WINDOWS\system32\bitsprx3.dll
    2007-06-03 12:28 331,776 --a
    C:\WINDOWS\system32\winhttp.dll
    2007-06-03 12:28 17,408 --a
    C:\WINDOWS\system32\qmgrprxy.dll
    2007-06-03 12:28 158,720
    C:\WINDOWS\system32\xpob2res.dll
    2007-06-03 12:23 <DIR> d
    C:\WINDOWS\system32\SoftwareDistribution
    2007-06-03 12:22 465,176 --a
    C:\WINDOWS\system32\wuapi.dll
    2007-06-03 12:22 41,240 --a
    C:\WINDOWS\system32\wups.dll
    2007-06-03 12:22 194,328 --a
    C:\WINDOWS\system32\wuaueng1.dll
    2007-06-03 12:22 173,536 --a
    C:\WINDOWS\system32\wuweb.dll
    2007-06-03 12:22 172,312 --a
    C:\WINDOWS\system32\wuauclt1.exe
    2007-06-03 12:22 127,256 --a
    C:\WINDOWS\system32\wucltui.dll
    2007-06-03 12:22 <DIR> d
    C:\WINDOWS\SoftwareDistribution
    2007-06-03 12:20 2,854,400 --a
    C:\WINDOWS\system32\msi.dll
    2007-06-03 12:20 <DIR> d--h
    C:\WINDOWS\$hf_mig$
    2007-06-03 12:19 <DIR> d
    C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
    2007-06-03 10:55 <DIR> d
    C:\Deckard
    2007-06-02 18:38 3,968 --a
    C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2007-06-02 18:37 <DIR> d
    C:\Program Files\Common Files\Agnitum Shared
    2007-06-02 18:37 <DIR> d
    C:\Program Files\Agnitum
    2007-05-31 18:11 <DIR> d
    C:\DOCUME~1\Main\APPLIC~1\Apple Computer
    2007-05-31 18:10 <DIR> d
    C:\Program Files\iTunes
    2007-05-31 18:10 <DIR> d
    C:\Program Files\iPod
    2007-05-31 18:07 <DIR> d
    C:\Program Files\QuickTime
    2007-05-30 21:47 <DIR> d
    C:\DOCUME~1\Main\APPLIC~1\Talkback
    2007-05-27 19:06 <DIR> d
    C:\DOCUME~1\Main\APPLIC~1\Leadertech
    2007-05-27 12:14 <DIR> d
    C:\DOCUME~1\Main\Contacts
    2007-05-27 12:13 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
    2007-05-26 23:26 <DIR> d
    C:\Program Files\Ares
    2007-05-19 17:01 <DIR> d
    C:\Program Files\Micro Innovations
    2007-05-12 00:30 <DIR> d
    C:\Program Files\wgens170


    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    2007-06-03 16:22:15
    d--h--w C:\Program Files\WindowsUpdate
    2007-05-31 11:02:53
    d
    w C:\Program Files\DivX
    2007-05-31 01:47:21 4,726 ----a-w C:\WINDOWS\mozver.dat
    2007-05-28 16:45:21
    d
    w C:\Program Files\DVDlabPro
    2007-05-27 16:13:46
    d
    w C:\Program Files\MSN Messenger
    2007-05-05 20:42:02
    d
    w C:\DOCUME~1\Main\APPLIC~1\Creative
    2007-04-09 02:58:42
    d
    w C:\DOCUME~1\Main\APPLIC~1\Viewpoint


    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


    *Note* empty entries & legit default entries are not shown

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
    {BDF3E430-B101-42AD-A544-FADC6B084872}=C:\Program Files\Norton AntiVirus\NavShExt.dll [2003-08-18 02:34]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Cmaudio"="cmicnfg.cpl" []
    "BluetoothAuthenticationAgent"="irprops.cpl" [2002-09-25 00:25 C:\WINDOWS\system32\irprops.cpl]
    "VTTimer"="VTTimer.exe" [2003-12-19 02:39 C:\WINDOWS\system32\VTTimer.exe]
    "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2003-08-15 03:59]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
    "NWEReboot"="" []
    "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 17:40]
    "FLMOFFICE4DMOUSE"="C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe" [2007-05-19 17:01]
    "OFFICEKB"="C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe" [2007-05-19 17:01]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 09:41]
    "Outpost Firewall"="C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" [2002-06-14 16:20]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTSyncU.exe"="C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" [2006-08-07 11:06]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2006-09-28 10:13]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AIM]
    C:\Program Files\AIM\aim.exe -cnetwait.odl

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    "C:\Program Files\QuickTime\qttask.exe" -atboottime

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*


    Contents of the 'Scheduled Tasks' folder
    2007-05-31 13:24:00 C:\WINDOWS\tasks\AppleSoftwareUpdate.job
    2007-06-02 00:00:08 C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer.job
    2007-02-06 16:42:35 C:\WINDOWS\tasks\Symantec NetDetect.job

    **************************************************************************

    catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-06-05 19:09:29
    Windows 5.1.2600 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    Completion time: 2007-06-05 19:09:50
    C:\ComboFix-quarantined-files.txt ... 2007-06-05 19:09

    --- E O F ---


    Man o Man I hope something finally helps my computer out.
  • Baabiouz
    edited June 2007
    Hi!

    Your log is ok. Have you try defrag your Local Disk?
    Here is instructions.. Please, try it..
  • HomicideHomicide
    edited June 2007
    hey thanks for all the help. Computer is slightly better, but not much. I dont know. I did the defrag and it took me about 14 hours to get it done but it was done. Still the computer drags a lot. I think my computer has paused about 4-5 times while writing this. If there is anything else we can do please let me know.
  • Baabiouz
    edited June 2007
    Hi!

    Please download CCleaner here. In install progress, please unmark this line: "install yahoo toolbar".
    After installing, please run ccleaner.
    Click Issues.
    To use, simply press the "Scan for Issues" button and once completed press the "Fix Selected Issues" button. You will be prompted to backup and helped throughout the process.(It's good to save the backups..)

    There is lot of unnecessary startup programs, so let's fix those..

    Please run Hijackthis.exe and Click Do system scan only.
    Check these lines..:

    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    After checking, please klick Fix checked.

    Boot your comp now.

    Works better now??
  • HomicideHomicide
    edited June 2007
    Nope didnt work. My computer starts up faster but it doesnt run any faster.

    It pauses a lot. Like when im typing or trying to scroll through a web page it stops for like 5 seconds and then catches back up with me. What could be the problem. I have a gig of memory and I have never had this problem before.
  • Baabiouz
    edited June 2007
    Hi!
    Do you have Indexing Service enabled?

    Please click Start > Run and type in: services.msc
    Click OK
    In the Services window find: Indexing Service
    Select/highlight and right click the entry, and choose: Properties
    On the General tab, under Service Status click the Stop button
    Beside: Startup Type, in the drop menu, select: Disabled
    Click Apply, then OK

    Better now?
  • HomicideHomicide
    edited June 2007
    nope didnt work. Still everything is very sluggish.
  • Baabiouz
    edited June 2007
    Please, post a fresh Hijackthis log. I hope there is something what can help..
  • HomicideHomicide
    edited June 2007
    Logfile of HijackThis v1.99.1
    Scan saved at 7:18:58 AM, on 6/14/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    C:\Program Files\AIM\aim.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Main\Desktop\HijackThis.exe
    C:\Program Files\Messenger\msmsgs.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
  • Baabiouz
    edited June 2007
    Hi :)

    Please, fix this line by HijackThis..

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)


    Please, go www.windowsupdate.com and update your system (Service Pack 2)

    After that, please send a fresh Hijackthis log.

    Computer works better?
  • HomicideHomicide
    edited June 2007
    Logfile of HijackThis v1.99.1
    Scan saved at 10:52:59 AM, on 6/16/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    C:\Program Files\AIM\aim.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Messenger\MSMSGS.EXE
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\WgaTray.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Microsoft Office\Office\WINWORD.EXE
    C:\Documents and Settings\Main\Desktop\HijackThis.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe



    Still slower than crap.
  • Baabiouz
    edited June 2007
    You didn't update your system.. Please do it..
  • HomicideHomicide
    edited June 2007
    Yes I did. It took like two hours to do it because I guess I haven't updated in a long time. there were like 122 updates. But ill run the update again and maybe it will find something new.
  • Baabiouz
    edited June 2007
    okay..
  • HomicideHomicide
    edited June 2007
    Logfile of HijackThis v1.99.1
    Scan saved at 5:46:11 PM, on 6/17/2007
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\CTsvcCDA.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\AIM\aim.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\Program Files\Messenger\MSMSGS.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\WgaTray.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Main\Desktop\HijackThis.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\mouse32a.exe
    O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Micro Innovations\Wireless Keyboard & Optical Mouse\kbdap32a.exe
    O4 - HKLM\..\Run: [Outpost Firewall] "C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
    O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
    O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1.0\outpost.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
  • Baabiouz
    edited June 2007
    hm..
    Do you have genuine Windows?
  • HomicideHomicide
    edited June 2007
    Yes it came with my computer when I bought it. Its on the restore DVD that came with it.
  • Baabiouz
    edited June 2007
    Hi!

    http://support.microsoft.com/?scid=kb%3Ben-us%3B822798&x=13&y=16

    Check that site..

    Does that help?
Sign In or Register to comment.