Computer Slow -- Help Needed!!!

Question

Hi, I have been have a problem with the computer slowing down to the point of all programs open slowly and even working in the programs is really slow.  Opening up the internet and browsing is also slow.  I have so far done the following:  Ran a virus scan (McAfee), did two spyware scans with different software (SuperAntispyware & Spybot Search & Destroy), disk clean-up, checked disk for errors, and a defragment.  I have been in contact with Dell tech and was suggested to do a diagnostic, but prior to that I have been suggested to post a Hijack Log here.  Any assistance would be great.  Please note that this is my Inspiron Laptop and still has over half of the memory used.  Also, I have alot of things on startup and am unsure of which to get rid of and I'm sure some are pure memory hogs. Thanks, Kelly   Logfile of HijackThis v1.99.1 Scan saved at 11:58:05 AM, on 17/04/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mclogsrv.exe C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe c:\program files\common files\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe c:\PROGRA~1\COMMON~1\mcafeeedirsvcedirsvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\PROGRA~1\McAfee\MSC\mctskshd.exe C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE C:\Program Files\Dell\AccessDirect\dadapp.exe C:\WINDOWS\system32\carpserv.exe C:\Program Files\SiteAdvisor\6028\SiteAdv.exe C:\Program Files\Dell Support\DSAgnt.exe C:\WINDOWS\System32
vsvc32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe C:\Program Files\Linksys\Wireless Network PC Card\WPC11CFG.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\fxssvc.exe C:\PROGRA~1\McAfee\MPS\mps.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe C:\Program Files\McAfee\MPS\mpsevh.exe C:\WINDOWS\System32\HPZipm12.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\Hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title='CorelDRAW Graphics Suite 12' /date=012706 serial=DR12WTX-9999998-YSP lang=EN O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] 'C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe' O4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottime O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [ISLP2STA.EXE] ISLP2STA.EXE START O4 - HKLM\..\Run: [EPSON Stylus C88 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE /P23 'EPSON Stylus C88 Series' /O6 'USB002' /M 'Stylus C88' O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe O4 - HKLM\..\Run: [CARPService] carpserv.exe O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6028\SiteAdv.exe O4 - HKCU\..\Run: [DellSupport] 'C:\Program Files\Dell Support\DSAgnt.exe' /startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\RunOnce: [DelayShred] 'c:\program files\mcafee\mshr\ShrCL.EXE' /P7 /q C:\DOCUME~1\KELLYE~1\LOCALS~1\Temp\HSPERF~1.SH! O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Instant Wireless Configuration Utility.lnk = C:\Program Files\Linksys\Wireless Network PC Card\WPC11CFG.exe O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm238YYCA O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - https://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,81/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,19/mcgdmgr.cab O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe O18 - Protocol: intu-res - {9CE7D474-16F9-4889-9BB9-53E2008EAE8A} - C:\Program Files\Common Files\Intuit\intu-res.dll O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafeeedirsvcedirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe   Message Edited by quicktolearn on 04-17-2007 12:30 PM Message Edited by quicktolearn on 04-17-2007 01:23 PM

SpotCheckBilly · Answer

Hello Kelly,There really isn't a lot going on with your log. This is good news since it tells us that the problems you're having her most likely not malware related.For a wealth of information regarding what is on your computer, what needs to be running, and what doesn't -- dependent on what you use your computer for, copy/paste the following bold text into your browser address bar:http://www.blzckviper.comNext, let's take care of a few minor things going on in your HijackThis log:First, go to Add/Remove programs and remove(uninstall) the following, if present:MyWebSearchThe above could appear anywhere within the entry. Be careful not to remove any personal or system software.Run HiJackThis and click ' o a system scan only ', then check(tick) the following, if present:O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm238YYCA The following are considered optional fixes. They are either programs which can be launched manually when needed, or are known resource hogs. Personally, I would check them all for removal. This may help improve overall system performance.O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title='CorelDRAW Graphics Suite 12' /date=012706 serial=DR12WTX-9999998-YSP lang=ENO4 - HKLM\..\Run: [SunJavaUpdateSched] 'C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe'O4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottimeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeWith all windows closed except HiJackThis, click 'Fix checked'.In your next reply, please include a fresh HijackThis log file, and let me know if you're noticing any difference in system performance. We'll proceed from there. :smileyhappy:SpotCheckBilly

quicktolearn · Answer

Hi, Thanks for the input, I printed out your instructions before doing anything.  I tried to go to that website but it showed that there were no results for that site.  Could you check and see if maybe I am missing a letter for the address. I went to Add/Remove Programs and did not find MyWebSearch.  I ran HiJackThis and did a system scan only and clicked off all those items that you listed. (I was thinking that something may be hogging the memory which may have been causing some slowing down of the computer.) Below is my new log after the Fix checked and new scan. Thanks and I'll post if I see a difference.    Logfile of HijackThis v1.99.1 Scan saved at 9:28:04 PM, on 17/04/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mclogsrv.exe C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe c:\program files\common files\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe c:\PROGRA~1\COMMON~1\mcafeeedirsvcedirsvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\PROGRA~1\McAfee\MSC\mctskshd.exe C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\McAfee\MPF\MPFSrv.exe C:\WINDOWS\System32
vsvc32.exe C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\fxssvc.exe C:\PROGRA~1\McAfee\MPS\mps.exe C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe C:\WINDOWS\system32\cidaemon.exe C:\Program Files\McAfee\MPS\mpsevh.exe C:\WINDOWS\Explorer.EXE c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE C:\Program Files\Dell\AccessDirect\dadapp.exe C:\WINDOWS\system32\carpserv.exe C:\Program Files\SiteAdvisor\6028\SiteAdv.exe C:\Program Files\Dell Support\DSAgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program Files\Linksys\Wireless Network PC Card\WPC11CFG.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [ISLP2STA.EXE] ISLP2STA.EXE START O4 - HKLM\..\Run: [EPSON Stylus C88 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE /P23 'EPSON Stylus C88 Series' /O6 'USB002' /M 'Stylus C88' O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe O4 - HKLM\..\Run: [CARPService] carpserv.exe O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6028\SiteAdv.exe O4 - HKCU\..\Run: [DellSupport] 'C:\Program Files\Dell Support\DSAgnt.exe' /startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\RunOnce: [DelayShred] 'c:\program files\mcafee\mshr\ShrCL.EXE' /P7 /q C:\DOCUME~1\KELLYE~1\LOCALS~1\Temp\HSPERF~1.SH! O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Instant Wireless Configuration Utility.lnk = C:\Program Files\Linksys\Wireless Network PC Card\WPC11CFG.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - https://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,81/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,19/mcgdmgr.cab O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe O18 - Protocol: intu-res - {9CE7D474-16F9-4889-9BB9-53E2008EAE8A} - C:\Program Files\Common Files\Intuit\intu-res.dll O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafeeedirsvcedirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

SpotCheckBilly · Answer

Hi Kelly,First off, had I spelled the name of that web site correctly, I'm sure it would have worked better. LOL. Let's try this link: Black Viper. If the link doesn't work properly, copy/paste the following into your browser's address bar:http://www.blackviper.com (As you can see, I z'd where I should have a'd.)After you are finished with Black Viper, if you still don't notice any improvement in system performance, please do the following:Please run Deckard's System Scanner (Thanks Susan528 for the canned.)Download Deckard's System Scanner (DSS) to your Desktop.Note: You must be logged onto an account with administrator privileges. Close all applications and windows. Double-click on dss.exe to run it, and follow the prompts. When the scan is complete, two text files will open --> main.txt this one will be maximized and -->extra.txtthis one will be minimized Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt into your next reply. This will let us know everything that's running on your machine as well as what your memory load is. It may be that you need to install more RAM. Especially if you use a lot of memory intensive programs. We'll see where that takes us. :smileyhappy:SpotCheckBilly

quicktolearn · Answer

Hi, Here is part two of the main.txt -- extra.txt in separate message.   -- Scheduled Tasks ------------------------------------------------------------- 2007-04-15 11:38:27       402 --a------ C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2200 series#1173972703.job 2007-04-06 20:00:06       406 --a------ C:\WINDOWS\Tasks\McAfee.com Scan for Viruses - My Computer (KELLY-Kelly Edgar).job 2006-08-29 22:20:53       276 --a------ C:\WINDOWS\Tasks\McDefragTask.job 2006-08-29 22:20:51       368 --a------ C:\WINDOWS\Tasks\McQcTask.job -- Files created between 2007-03-21 and 2007-04-21 ----------------------------- 2007-04-17 22:14:18         0 d-------- C:\Documents and Settings\Kelly Edgar\Application Data\wsInspector 2007-04-17 22:00:53         0 d-------- C:\Program Files\Startup Inspector for Windows 2007-04-15 12:17:33         0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-04-15 12:14:56         0 d-------- C:\Program Files\SUPERAntiSpyware 2007-04-15 12:14:56         0 d-------- C:\Documents and Settings\Kelly Edgar\Application Data\SUPERAntiSpyware.com 2007-03-22 18:58:57   7340032 --a------ C:\Documents and Settings\Kelly Edgar
tuser.dat -- Find3M Report --------------------------------------------------------------- 2007-04-19 16:23:06         0 d-------- C:\Program Files\DesignPro 2007-04-19 13:44:17         0 d-------- C:\Program Files\Corel 2007-04-15 21:03:08     13075 --a------ C:\WINDOWS\system32
vModes.dat 2007-04-15 20:24:33         0 d-------- C:\Program Files\Nokia 2007-04-15 18:17:07         0 d-------- C:\Program Files\McAfee 2007-04-15 14:48:45         0 d-------- C:\Program Files\Dell 2007-04-15 11:59:40         0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-04-12 16:26:05         0 d-------- C:\Program Files\Java 2007-03-29 16:04:43         0 d-------- C:\Program Files\Super Tech 2007-03-28 15:47:05         0 d-------- C:\Program Files\Common Files\Real 2007-03-28 15:44:23         0 d-------- C:\Documents and Settings\Kelly Edgar\Application Data\Real 2007-03-28 15:42:10         0 d-------- C:\Program Files\Yahoo! 2007-03-17 09:43:01    292864 --a------ C:\WINDOWS\system32\winsrv.dll 2007-03-16 15:33:55         0 d-------- C:\Program Files\Paint Shop Pro 9 2007-03-16 15:32:32         0 d-------- C:\Documents and Settings\Kelly Edgar\Application Data\Corel 2007-03-15 15:27:42         0 d-------- C:\Program Files\Application 2007-03-15 11:21:38     20454 --a------ C:\WINDOWS\hpoins01.dat 2007-03-12 21:54:58         0 d-------- C:\Program Files\SiteAdvisor 2007-03-08 11:36:28    577536 --a------ C:\WINDOWS\system32\user32.dll 2007-03-08 11:36:28     40960 --a------ C:\WINDOWS\system32\mf3216.dll 2007-03-08 11:36:28    281600 --a------ C:\WINDOWS\system32\gdi32.dll 2007-03-08 09:47:48   1843584 --a------ C:\WINDOWS\system32\win32k.sys 2007-03-01 22:53:55         0 d-------- C:\Program Files\NetObjects 2007-03-01 22:53:54         0 d--h----- C:\Program Files\InstallShield Installation Information 2007-02-05 16:17:02    185344 --a------ C:\WINDOWS\system32\upnphost.dll 2007-02-02 10:40:11 305186800 --a------ C:\Program Files\X12-30263.exe 2007-01-25 13:01:21      9216 --a------ C:\WINDOWS\system32\IOCTLVDD.DLL 2007-01-23 16:15:22    676224 --a------ C:\WINDOWS\system32\OGACheckControl.DLL -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversionun] 'DellSupport'='\'C:\Program Files\Dell Support\DSAgnt.exe\' /startup' 'ctfmon.exe'='C:\WINDOWS\system32\ctfmon.exe' 'SUPERAntiSpyware'='C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe' [HKEY_CURRENT_USER\software\microsoft\windows\currentversionunonce] 'DelayShred'='\'c:\program files\mcafee\mshr\ShrCL.EXE\' /P7 /q C:\DOCUME~1\KELLYE~1\LOCALS~1\Temp\HSPERF~1.SH!' [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun] 'CorelDRAW Graphics Suite 11b'='C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title=\'CorelDRAW Graphics Suite 12\' /date=012706 serial=DR12WTX-9999998-YSP lang=EN' 'SynTPEnh'='C:\Program Files\Synaptics\SynTP\SynTPEnh.exe' 'SynTPLpr'='C:\Program Files\Synaptics\SynTP\SynTPLpr.exe' 'NvCplDaemon'='RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup' 'SunJavaUpdateSched'='\'C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe\'' 'QuickTime Task'='\'C:\Program Files\QuickTime\qttask.exe\' -atboottime' 'nwiz'='nwiz.exe /installquiet' 'ISLP2STA.EXE'='ISLP2STA.EXE START' 'EPSON Stylus C88 Series'='C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE /P23 \'EPSON Stylus C88 Series\' /O6 \'USB002\' /M \'Stylus C88\'' 'DadApp'='C:\Program Files\Dell\AccessDirect\dadapp.exe' 'CARPService'='carpserv.exe' 'SiteAdvisor'='C:\Program Files\SiteAdvisor\6028\SiteAdv.exe' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Billminder.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Billminder.lnk' 'backup'='C:\WINDOWS\pss\Billminder.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\QUICKENW\QWHB\billmind.exe -startup' 'item'='Billminder' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk' 'backup'='C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\Kodak\KODAKE~1\bin\EASYSH~1.EXE -h' 'item'='Kodak EasyShare software' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk' 'backup'='C:\WINDOWS\pss\QuickBooks Update Agent.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\COMMON~1\Intuit\QUICKB~1\QBUpdate\qbupdate.exe ' 'item'='QuickBooks Update Agent' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Quicken Scheduled Updates.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Scheduled Updates.lnk' 'backup'='C:\WINDOWS\pss\Quicken Scheduled Updates.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\QUICKENW\QWHB\bagent.exe ' 'item'='Quicken Scheduled Updates' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Quicken Startup.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Startup.lnk' 'backup'='C:\WINDOWS\pss\Quicken Startup.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\QUICKENW\QWHB\QWDLLS.EXE ' 'item'='Quicken Startup' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ulead Photo Express 4.0 SE Calendar Checker .lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Ulead Photo Express 4.0 SE Calendar Checker .lnk' 'backup'='C:\WINDOWS\pss\Ulead Photo Express 4.0 SE Calendar Checker .lnkCommon Startup' 'location'='Common Startup' 'command'='C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe ' 'item'='Ulead Photo Express 4.0 SE Calendar Checker ' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Kelly Edgar^Start Menu^Programs^Startup^Microsoft Greetings Reminders.lnk] 'path'='C:\Documents and Settings\Kelly Edgar\Start Menu\Programs\Startup\Microsoft Greetings Reminders.lnk' 'backup'='C:\WINDOWS\pss\Microsoft Greetings Reminders.lnkStartup' 'location'='Startup' 'command'='C:\PROGRA~1\COMMON~1\MICROS~1\Artgalry\ARTGALRY.EXE ' 'item'='Microsoft Greetings Reminders' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Kelly Edgar^Start Menu^Programs^Startup^Winter Fun Wallpaper Changer.lnk] 'path'='C:\Documents and Settings\Kelly Edgar\Start Menu\Programs\Startup\Winter Fun Wallpaper Changer.lnk' 'backup'='C:\WINDOWS\pss\Winter Fun Wallpaper Changer.lnkStartup' 'location'='Startup' 'command'='C:\Documents and Settings\Kelly Edgar\Application Data\Microsoft\Installer\{347D1603-FA83-4B2C-B504-8BC1FF59DB50}\Icon347D1603.exe ' 'item'='Winter Fun Wallpaper Changer' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] 'key'='SOFTWARE\Microsoft\Windows\CurrentVersion\Run' 'item'='LaunchApplication' 'hkey'='HKLM' 'command'='C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup' 'inimapping'='0' [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] '{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}'='' HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\!SASWinLogon [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] 'SecurityProviders'='msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll' HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\MCODS [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ    Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ    DnsCache\0\0 rpcss REG_MULTI_SZ    RpcSs\0\0 imgsvc REG_MULTI_SZ    StiSvc\0\0 termsvcs REG_MULTI_SZ    TermService\0\0 HTTPFilter REG_MULTI_SZ    HTTPFilter\0\0 DcomLaunch REG_MULTI_SZ    DcomLaunch\0TermService\0\0   -- End of Deckard's System Scanner: finished at 2007-04-21 at 13:57:13 ---------     Kelly

quicktolearn · Answer

Hi SpotCheckBilly,   Thanks for your help. Anyway, I downloaded the Deckard's System Scanner and am posting below the main.txt and extra.txt  in that order.  Sorry for the delay in posting back, busy at work.   Deckard's System Scanner v20070411.38 Run by Kelly Edgar on 2007-04-21 at 13:39:51 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 26: 2007-04-21 17:42:32 UTC - RP122 - Deckard's System Scanner Restore Point 25: 2007-04-20 23:13:07 UTC - RP121 - System Checkpoint 24: 2007-04-19 22:23:29 UTC - RP120 - System Checkpoint 23: 2007-04-18 22:01:51 UTC - RP119 - Restore Operation 22: 2007-04-17 22:25:05 UTC - RP118 - System Checkpoint -- First Restore Point -- 1: 2007-03-28 15:21:46 UTC - RP97 - Removed Microsoft Windows Theme Ontario Backed up registry hives. Performed disk cleanup. -- HijackThis (run as Kelly Edgar.exe) ----------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 1:52:10 PM, on 21/04/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\drivers\KodakCCS.exe C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mclogsrv.exe C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe c:\program files\common files\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe c:\PROGRA~1\COMMON~1\mcafeeedirsvcedirsvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\PROGRA~1\McAfee\MSC\mctskshd.exe C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE C:\Program Files\Dell\AccessDirect\dadapp.exe C:\WINDOWS\system32\carpserv.exe C:\Program Files\SiteAdvisor\6028\SiteAdv.exe C:\Program Files\Dell Support\DSAgnt.exe c:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\WINDOWS\System32
vsvc32.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe C:\Program Files\Linksys\Wireless Network PC Card\WPC11CFG.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\McAfee\MPS\mps.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe C:\Program Files\McAfee\MPS\mpsevh.exe C:\WINDOWS\System32\HPZipm12.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe C:\Documents and Settings\Kelly Edgar\Desktop\dss.exe C:\PROGRA~1\HIJACK~1\Kelly Edgar.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title='CorelDRAW Graphics Suite 12' /date=012706 serial=DR12WTX-9999998-YSP lang=EN O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] 'C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe' O4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottime O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [ISLP2STA.EXE] ISLP2STA.EXE START O4 - HKLM\..\Run: [EPSON Stylus C88 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIABA.EXE /P23 'EPSON Stylus C88 Series' /O6 'USB002' /M 'Stylus C88' O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe O4 - HKLM\..\Run: [CARPService] carpserv.exe O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6028\SiteAdv.exe O4 - HKCU\..\Run: [DellSupport] 'C:\Program Files\Dell Support\DSAgnt.exe' /startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\RunOnce: [DelayShred] 'c:\program files\mcafee\mshr\ShrCL.EXE' /P7 /q C:\DOCUME~1\KELLYE~1\LOCALS~1\Temp\HSPERF~1.SH! O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Instant Wireless Configuration Utility.lnk = C:\Program Files\Linksys\Wireless Network PC Card\WPC11CFG.exe O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm238YYCA O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - https://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,81/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,19/mcgdmgr.cab O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe O18 - Protocol: intu-res - {9CE7D474-16F9-4889-9BB9-53E2008EAE8A} - C:\Program Files\Common Files\Intuit\intu-res.dll O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafeeedirsvcedirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- HijackThis Fixed Entries (C:\PROGRA~1\HIJACK~1\backups\) -------------------- backup-20070417-212715-392 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe backup-20070417-212715-731 O4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottime backup-20070417-212715-831 O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title='CorelDRAW Graphics Suite 12' /date=012706 serial=DR12WTX-9999998-YSP lang=EN backup-20070417-212715-918 O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm238YYCA backup-20070417-212715-951 O4 - HKLM\..\Run: [SunJavaUpdateSched] 'C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe' -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R1 AFS2K - c:\windows\system32\drivers\afs2k.sys R1 DCCAM (Kodak Camera Proxy) - c:\windows\system32\drivers\dccam.sys R1 MPFP - c:\windows\system32\drivers\mpfp.sys R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys R2 DCFS2K (Kodak DCFS2K Driver) - c:\windows\system32\drivers\dcfs2k.sys R2 HOSTNT - c:\windows\system32\drivers\hostnt.sys R2 mdmxsdk - c:\windows\system32\drivers\mdmxsdk.sys R2 MHDRV - c:\windows\system32\drivers\mhdrv.sys R2 NwlnkIpx (NWLink IPX/SPX/NetBIOS Compatible Transport Protocol) - c:\windows\system32\drivers
wlnkipx.sys R2 NwlnkNb (NWLink NetBIOS) - c:\windows\system32\drivers
wlnknb.sys R2 NwlnkSpx (NWLink SPX/SPXII Protocol) - c:\windows\system32\drivers
wlnkspx.sys R2 RCMHDOG - c:\windows\system32\driverscmhdog.sys R2 Sentinel - c:\windows\system32\drivers\sentinel.sys R2 StreamDispatcher - c:\windows\system32\drivers\strmdisp.sys R2 TCHNMFSX - c:\windows\system32	chnmfsx.cte R2 tmcomm - c:\windows\system32\drivers	mcomm.sys R2 wntpport - c:\windows\system32\drivers\wntpport.sys R3 Afc (PPdus ASPI Shell) - c:\windows\system32\drivers\afc.sys R3 EL90XBC (3Com 3C90X-BC Family PCI EtherLink Adapter) - c:\windows\system32\drivers\el90xbc5.sys R3 HSF_DP - c:\windows\system32\drivers\hsf_dp.sys R3 HSFHWICH - c:\windows\system32\drivers\hsfhwich.sys R3 PCANDIS5 (PCANDIS5 Protocol Driver) - c:\windows\system32\pcandis5.sys R3 SASENUM - c:\program files\superantispyware\sasenum.sys R3 STAC97 (Intel 82801 Audio Driver (WDM) - SigmaTel Codec) - c:\windows\system32\drivers\stac97.sys R3 SydexFDD (Sydex Diskette Driver) - c:\windows\system32\drivers\sydexfdd.sys R3 UsbC (SafeNet MicroDog USB Device Driver) - c:\windows\system32\driverscusbwdm.sys R3 winachsf - c:\windows\system32\drivers\hsf_cnxt.sys S1 Exportit - c:\windows\system32\drivers\exportit.sys S3 ac97intc (Intel(r) 82801 Audio Driver Install Service (WDM)) - c:\windows\system32\drivers\ac97intc.sys S3 Bridge (MAC Bridge) - c:\windows\system32\drivers\bridge.sys S3 BridgeMP (MAC Bridge Miniport) - c:\windows\system32\drivers\bridge.sys S3 DcFpoint - c:\windows\system32\drivers\dcfpoint.sys S3 DcLps (Legacy Polling Service) - c:\windows\system32\drivers\dclps.sys S3 DcPTP - c:\windows\system32\drivers\dcptp.sys S3 i81x - c:\windows\system32\drivers\i81xnt5.sys S3 iAimFP0 - c:\windows\system32\drivers\wadv01nt.sys S3 iAimFP1 - c:\windows\system32\drivers\wadv02nt.sys S3 iAimFP2 - c:\windows\system32\drivers\wadv05nt.sys S3 iAimFP3 - c:\windows\system32\drivers\wsiintxx.sys S3 iAimFP4 - c:\windows\system32\drivers\wvchntxx.sys S3 iAimTV0 - c:\windows\system32\drivers\watv01nt.sys S3 iAimTV1 - c:\windows\system32\drivers\watv02nt.sys S3 iAimTV2 - c:\windows\system32\drivers\watv03nt.sys (file missing) S3 iAimTV3 - c:\windows\system32\drivers\watv04nt.sys S3 iAimTV4 - c:\windows\system32\drivers\wch7xxnt.sys S3 ISLP2 (Intersil 802.11 Wireless LAN Driver) - c:\windows\system32\drivers\islp2nds.sys S3 SECYPUSB (SAMSUNG YEPP) - c:\windows\system32\drivers\secyeppx.sys S3 StillCam (Still Serial Digital Camera Driver) - c:\windows\system32\drivers\serscan.sys S3 WPC11 (Instant Wireless Network PC Card V3.0 Driver) - c:\windows\system32\drivers\lswlnds.sys S4 cbidf - c:\windows\system32\drivers\cbidf2k.sys S4 dac2w2k - c:\windows\system32\drivers\dac2w2k.sys     Will have to post in two separate messages, too many characters extra.txt in a separate message.  Thanks for your help and looking foward to your reply.   Kelly

quicktolearn · Answer

HI, Here is extra.txt.   Deckard's System Scanner v20070411.38 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Home Edition (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: Mobile Intel(R) Pentium(R) 4 - M CPU 1.80GHz Percentage of Memory in Use: 63% Physical Memory (total/avail): 510.98 MiB / 188.27 MiB Pagefile Memory (total/avail): 2081.01 MiB / 1714.39 MiB Virtual Memory (total/avail): 2047.88 MiB / 1993.64 MiB A: is Removable (No Media) C: is Fixed (NTFS) - 37.22 GiB total, 18.46 GiB free. D: is CDROM (No Media) E: is Removable (No Media) -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install. Windows Internal Firewall is disabled. AntivirusOverride is set. FW: McAfee Personal Firewall v (McAfee) AV: McAfee VirusScan v (McAfee) -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Kelly Edgar\Application Data CLASSPATH='C\QTJava.zip' CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=WORK ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Kelly Edgar LOGONSERVER=\WORK NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\Program Files\PC Connectivity Solution\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 7, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0207 ProgramFiles=C:\Program Files PROMPT=$P$G QTJAVA='C\QTJava.zip' SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\KELLYE~1\LOCALS~1\Temp TMP=C:\DOCUME~1\KELLYE~1\LOCALS~1\Temp USERDOMAIN=WORK USERNAME=Kelly Edgar USERPROFILE=C:\Documents and Settings\Kelly Edgar windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Kelly Edgar (admin) John Edgar (admin) Administrator (new local, admin) Guest (guest) -- Add/Remove Programs ---------------------------------------------------------  --> C:\Program Files\Installshield Installation Information\{1002F322-18D1-4A79-95C8-84EA3E940287}\QBReplace.exe {1002F322-18D1-4A79-95C8-84EA3E940287}#{97397C17-A929-4a6b-A68D-17829274C6CB}  --> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu  --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf .EMBroidery --> C:\WINDOWS\uninst.exe -fC:\EMBWin\DeIsL1.isu 3D Groove Playback Engine --> RunDll32 C:\WINDOWS\DOWNLO~1\GrooveAX.dll,_RemoveGroove@16 AccessDirect --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{417B79C9-CDB4-477F-952D-840CEFC57A6C}\setup.exe' -l0x9 Adobe Atmosphere Player for Acrobat and Adobe Reader --> C:\WINDOWS\atmoUn.exe Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Reader 7.0.9 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002} Adobe SVG Viewer 3.0 --> C:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log ArcSoft PhotoImpression 5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{D433ABC3-0CD8-4BB0-B6A9-84501B4B47B7}\Setup.exe' -l0x9 Avery DesignPro --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{2CC982C0-7EAE-11D4-ACC3-0050568AD318}\Setup.exe'  -uninst CardRd81 --> MsiExec.exe /I{54C8FE84-89C4-40E8-976C-439EB0729BD6} CCHelp --> MsiExec.exe /I{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04} CCScore --> MsiExec.exe /I{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992} CD/DVD Labeling Software 2.0 --> C:\WINDOWS\st6unst.exe -n 'C:\Program Files\CDLabel\ST6UNST.LOG'  Conexant D480 MDC V.92 Modem --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_24x6&SUBSYS_542214F1\HXFSETUP.EXE -U -Idel5422k.inf Corel Uninstaller --> C:\WINDOWS\Corel\uninst32.exe CR2 --> MsiExec.exe /I{432C3720-37BF-4BD7-8E49-F38E090246D0} Dell Modem-On-Hold --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe' -l0x9 ControlPanelAnyText Dell Solution Center --> MsiExec.exe /X{11F1920A-56A2-4642-B6E0-3B31A12C9288} Dell Support 5.0.0 (766) --> rundll32 C:\PROGRA~1\DELLSU~1\AUInst.dll,ExUninstall Digital Line Detect --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe' -l0x9 ControlPanelAnyText Embroidery Draw 1.X --> 'C:\Program Files\Embroidery Draw\uninstall.exe' EPSON Printer Software --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R ESSAdpt --> MsiExec.exe /I{D15E9DB5-6BEB-4534-901E-80C0A29BAB97} ESSANUP --> MsiExec.exe /I{A6F18A67-B771-4191-8A33-36D2E742D6D9} ESSBrwr --> MsiExec.exe /I{643EAE81-920C-4931-9F0B-4B343B225CA6} ESSCAM --> MsiExec.exe /I{469730CC-78DF-4CD3-B286-562D459EA619} ESSCDBK --> MsiExec.exe /I{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD} ESScore --> MsiExec.exe /I{9D8FEE90-0377-49A9-AEFB-525BDE549BA4} ESSCT --> MsiExec.exe /I{8BB4B58A-A402-4DE8-8FCD-287E60B88DD8} ESSgui --> MsiExec.exe /I{91517631-A9F3-4B7C-B482-43E0068FD55A} ESShelp --> MsiExec.exe /I{87843A41-7808-4F2E-B13F-25C1E67CF2FD} ESSini --> MsiExec.exe /I{8E92D746-CD9F-4B90-9668-42B74C14F765} ESSPCD --> MsiExec.exe /I{14D4ED84-6A9A-45A0-96F6-1753768C3CB5} ESSPDock --> MsiExec.exe /I{FCDB1C92-03C6-4C76-8625-371224256091} ESSSONIC --> MsiExec.exe /I{4F677FC7-7AA8-412B-A957-F13CBE1C7331} ESSTUTOR --> MsiExec.exe /I{CA60320D-6A16-49C8-A34F-84EEF4799567} ESSvpaht --> MsiExec.exe /I{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69} ESSvpot --> MsiExec.exe /I{48C82F7A-F100-4DAB-A310-8E18BF2159E1} Generations --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{F53610C9-6011-4FBB-A184-CCF0EC393213}\Setup.exe' GN 2007 Collection --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{67C33BD5-2804-4321-A1BD-8C2675C92F1A} Hanes® T-ShirtMaker® Lite Promo ArtPack --> MsiExec.exe /I{C011FB59-B634-4EBD-A0FE-48BADF816305} Hanes© T-ShirtMake© Lite --> MsiExec.exe /I{E853B73C-6993-47B0-AB8F-3F4DDD8AC80E} Hijackthis 1.99.1 --> 'C:\Program Files\Hijackthis\unins000.exe' HijackThis 1.99.1 --> C:\Program Files\Hijackthis\HijackThis.exe /uninstall HLPCCTR --> MsiExec.exe /I{F2D0C1B1-80FF-46F9-BA61-33B01A07FAFC} HLPIndex --> MsiExec.exe /I{38441BE7-79B0-42B8-8297-833704F949FE} HLPPDOCK --> MsiExec.exe /I{154508C0-07C5-4659-A7A0-E49968750D21} HLPRFO --> MsiExec.exe /I{AADAC983-FDE9-42FA-8FD9-7BB324155593} hp instant support --> C:\PROGRA~1\HEWLET~1\hpis\Uninstall.exe  /s  CeS HP Memories Disc --> MsiExec.exe /X{B376402D-58EA-45EA-BD50-DD924EB67A70} HP Photo and Imaging 2.0 - All-in-One --> MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1} HP Photo and Imaging 2.0 - All-in-One Drivers --> MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B} HP Photo and Imaging 2.0 - hp psc 2200 series --> C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot hp psc 2200 series --> MsiExec.exe /X{913DA816-E8E4-4467-8D22-E2DF5DBF04E4} InterVideo WinDVD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{C1939820-A945-11D4-86F6-0001031E5712}\setup.exe'  REMOVEALL J2SE Runtime Environment 5.0 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000} J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100} J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110} J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090} Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Kodak EasyShare software --> C:\Documents and Settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_9_a50db9\Setup.exe /APR-REMOVE KSU --> MsiExec.exe /I{B997C2A0-4383-41BF-B76E-9B8B7ECFB267} Macromedia Flash Player --> MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c} Macromedia Shockwave Player --> C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~2\Install.log McAfee SecurityCenter --> C:\Program Files\McAfee\MSC\mcuninst.exe Microsoft Access 2000 Runtime --> MsiExec.exe /x{00180409-78E1-11D2-B60F-006097C998E7} Microsoft Calculator Plus --> MsiExec.exe /I{83073C45-3003-4671-9A86-243AAADD915A} Microsoft Data Access Components KB870669 --> C:\WINDOWS\muninst.exe C:\WINDOWS\INF\KB870669.inf Microsoft Office Excel MUI (English) 2007 --> MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE} Microsoft Office Outlook MUI (English) 2007 --> MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (English) 2007 --> MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE} Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007 --> MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007 --> MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (English) 2007 --> MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE} Microsoft Office Shared MUI (English) 2007 --> MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE} Microsoft Office Shared Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE} Microsoft Office Standard 2007 --> MsiExec.exe /X{91120000-0012-0000-0000-0000000FF1CE} Microsoft Office Standard 2007 Trial --> 'C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe' /uninstall STANDARDR /dll OSETUP.DLL Microsoft Office Word MUI (English) 2007 --> MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE} Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs --> MsiExec.exe /X{90120000-00B2-0409-0000-0000000FF1CE} Microsoft Works Setup Launcher --> C:\Program Files\Microsoft Works Suite 99\Setup\Launcher.exe D:\ Modem Helper --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe' -l0x9 ControlPanel NetObjects Fusion 8 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{61B7CB0F-C7A2-4436-95D6-438E96113B56}\setup.exe' -l0x9 anything -uninst Nokia Connectivity Cable Driver --> MsiExec.exe /X{0FF1922C-B6C4-40BB-AF30-BEF75A482444} Notifier --> MsiExec.exe /I{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2} NVIDIA Windows 2000/XP Display Drivers --> rundll32.exe C:\WINDOWS\System32
vinstnt.dll,NvUninstallNT4 nvdm.inf OESD Collection --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{58F24EB9-BD36-45FA-A40B-87F865451E21} OTtBP --> MsiExec.exe /I{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C} OTtBPSDK --> MsiExec.exe /I{3CA39B0C-BA85-4D42-AC0F-1FF5F60C3353} PC Connectivity Solution --> MsiExec.exe /I{AB2347E4-153B-4194-AA3B-97C0A662B369} PCDLNCH --> MsiExec.exe /I{69BD6399-3D8F-45B7-81D9-819361F5101D} QuickBooks Pro Edition 2006 --> C:\Program Files\Installshield Installation Information\{C4168479-5416-4224-8BE9-E4349642595B}\QBReplace.exe {C4168479-5416-4224-8BE9-E4349642595B}#{9058A930-BC63-4FA9-A35B-D74BE4054F40} Quicken 2002 New User Edition --> C:\WINDOWS\IsUninst.exe -f'C:\Program Files\QUICKENW\Uninst.isu' -c'C:\Program Files\QUICKENW\uninst.dll' Quicken XG --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D8536911-90F3-4EFF-A2C2-C294B1719C8A} anything QuickTime --> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log Security Update for Step By Step Interactive Training (KB898458) --> 'C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe' Security Update for Step By Step Interactive Training (KB923723) --> 'C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe' Sentinel Protection Installer 7.3.0 --> MsiExec.exe /I{404C18ED-873A-4191-BA03-30F627445418} SFR --> MsiExec.exe /I{C354C9B6-A4E0-4BB0-A368-6DC6BCA0E314} SFR2 --> MsiExec.exe /I{A0AF08BA-3630-4505-BFB2-A41F3837B0D0} Shockwave --> C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.log Spybot - Search & Destroy 1.4 --> 'C:\Program Files\Spybot - Search & Destroy\unins000.exe' SUPERAntiSpyware Free Edition --> MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} Synaptics Pointing Device Driver --> rundll32.exe 'C:\Program Files\Synaptics\SynTP\SynISDLL.dll',standAloneUninstall Update for Office 2007 (KB932080) --> msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {EDC9CA29-6BC1-471C-828C-7A36109005D7} Update for Outlook 2007 Junk Email Filter (KB932338) --> msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {E90DA454-DE6C-45FA-A702-47B614A0159F} VCAMCEN --> MsiExec.exe /I{10E98E14-832C-4AF7-A4D1-6A9EF83B282E} VPRINTOL --> MsiExec.exe /I{999D43F4-9709-4887-9B1A-83EBB15A8370} WebCyberCoach 3.2 Dell --> 'C:\Program Files\WebCyberCoach\b_Dell\WCC_Wipe.exe' 'WebCyberCoach ext\wtrb' /inf 'engine.inf,RealUninstallSection,,4' /infcfg  'enginecf.inf,RealUninstallSection,,4' Windows Driver Package - Nokia (WUDFRd) WPD (11/03/2006 6.82.26.2) --> C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_6B630EE2E66584353C6CD8683D447072872F34D8\pccswpddriver.inf Wireless Network PC Card Configuration Utility --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 'C:\Program Files\InstallShield Installation Information\{612E2F17-1BEF-4F15-A4E7-8BE501B561C0}\Setup.exe' -l0x9 WordPerfect Office 2002 --> C:\WINDOWS\Corel\Uninst32.exe WordPerfect Office 2002 --> C:\WINDOWS\Corel\uninst32.exe Yahoo! Toolbar --> C:\PROGRA~1\Yahoo!\Common\unyt.exe -- End of Deckard's System Scanner: finished at 2007-04-21 at 13:57:13 --------- Kelly

SpotCheckBilly · Answer

Hi Kelly,Were you able to link to Black Viper this time? Always helps when things are spelled correctly, huh? Don't worry about the delay in response. This he seems to be the primary description for pretty much everyone these days -- including me. ;DThanks for the scanner logs. I'll look them over for anything odd and get back to you as soon as I can.Hope you're having a great weekend. :smileyhappy:SpotCheckBilly

quicktolearn · Answer

Hi,   I thought I'd update you on my computer situation.  I have contacted McAfee since my last post and informed them that everytime I went to do a scan it was taking forever and they walked me through fixing a few things.  I was able to do a scan, but it did take hours.  It found two trojans which were removed/quarantined.  I then noticed that on my CPU usage that a file called sprvnt.exe was basically using all of my CPU usage apprx. 98% most of the time.  I checked to see what it was and notice it was from something called SafeNet Sentinal which I don't recall installing.  I found out it was for spyware and adware and since I now have McAfee, Spybot Search & Destroy and SuperAnti-Spyware that I didn't need it anymore. That has really freed up my CPU usage to a huge amount. Could this been the actual cause of all my slowed down on my computer? Thanks, Kelly

SpotCheckBilly · Answer

Hi Kelly,Okay, quick question. The file that you discovered was causing so much CPU usage. Was it sprvnt.exe or spnsrvnt.exe? A Google search for the first returned absolutely no information whereas the second appears to be a legitimate file. However, if you didn't install the associated program (SafeNet Sentinel), could be an indication of some hidden malware.So let's do the following:First, ClickStart=>Search.In the search box enter 'sprvnt.exe' or 'spnsrvnt.exe' (whichever is the correct spelling of the process that you see in task manager), without the quotes.Write down the full path and filename.Next, please download File Submitter by Grinler. Save it somewhere convenient, such as the root drive. Example: (C:\submitter.exe).Create a right-click option: Navigate to this folder in Windows Explorer: C:\Documents and Settings\username\SendTo Right-click inside the folder window (anywhere). Slect New=>Shortcut. Enter the location of the item: C:\submitter.exe Name the shortcut: Submit Malware Select Finish. Configure the tool: Navigate to the tool in Windows Explorer: C:\submitter.exe Double-click the file to open it. Put a check in these boxes: Jotti VirusTotal Advanced BleepingComputer.com Click Save. Click OK in the confirmation window. Cick Exit to close the tool. Upload Samples: Locate this file(s) in Windows Explorer: Full path and filename you wrote down previously For each file you want to submit: Right-click file. Select Send To=> Submit Malware. Copy/paste the results of the scans into your next reply. You should have two results for each file scanned. By the way, this is a handy little tool for checking on the status of any suspicious looking file -- especially if you can't find any other information about it.Yes, it certainly is possible that this file has been your problem from the start. The important thing is that we find out exactly what this is and where he came from. We can then act accordingly. :smileyhappy:SpotCheckBilly

quicktolearn · Answer

Hi,   First let me say sorry for not posting back sooner.  Yes, I did spell that file incorrectly and yours was correct.  I followed your instructions and saw that I did already totally remove this file when I noticed it was not really relevant to any other programs on my computer other than to slow everything down. I am happy to report that I have gotten my computer back to almost 100% in speed and performance.  I am now setting all my scanning to run every week so that I can make sure there isn't anything there.  Also, I am being very careful of what I download and what is coming with the downloads. I will have my new notebook come July and my DH can have this one. Now that I have my computer up and running my other embroidery machine has been acting up and had to go in for repairs, and I am now backed up with all the work I have to catch up on and get out to my customers. Again, thank you for all of your great help.  Love your clear and concise instructions (learned to print them out as I go through them). Have a great weekend. Kelly

SpotCheckBilly · Answer

Hi Kelly,You're very welcome. I'm glad I could be of help. :DFollowing is my standard 'all clean' speech. It contains some final cleanup instructions as well as tips on how to keep your computer free for malware.If everything is running ok, let's do the final cleanup...1. Run 'Disk Cleanup' and allow it to remove everything it finds.2. If you've downloaded MicroWorld AV ( MWAV), run it again - but don't scan, just click ' Clear Log' and exit the program. 3. Please go HERE to run the Trend Micro™ HouseCall Scan. ***Colored items*** available in Internet Explorer only Read and place a check mark next to-'Yes, I accept the terms of use'. Place a check mark next to-'I want to select a different Housecall Kernel'. Click Launch HouseCall. Select: Using Java-Based Housecall Kernel Click Starting HouseCall. ****Or**** 'Browser plug-in' Installing and using the Housecall Kernel Click Starting HouseCall (Allow ActiveX install) Choose: 'Scan complete computer for malware, greyware and vulnerabilities'. Click Next. ****Or**** 'Scan individuals selected folders only'. Click Select. Select folders to scan. Click Next. Please be patient, the scan can take a while. When the scan is finished, a summary page will open. Under Cleanup options. Choose: Clean all detected infections automatically. Click Clean now >> . If malware was found, you may be prompted to run the scan again You can just close the browser window. Please write down the full path and filename of anything that could not be cleaned/deleted. 4. Disable, then reenable System Restore; with a reboot in-between. Then immediately create a new system restore point manually. Here are some tips, to reduce the potential for spyware infection in the future, I strongly recommend installing the following applications: Spywareblaster => SpywareBlaster will prevent spyware from being installed. Spywareguard => SpywareGuard offers realtime protection from spyware installation attempts. How to use Ad-Aware to remove Spyware => If you suspect that you have spyware installed on your computer, here are instructions on how to download, install and then use Ad-Aware. How to use Spybot to remove Spyware => If you suspect that you have spyware installed on your computer, here are instructions on how to download, install and then use Spybot. Similar to Ad-Aware, I strongly recommend both to catch most spyware To protect yourself further: IE/Spyad => IE/Spyad places over 4000 websites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. MVPS Hosts file => The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer. Google Toolbar => Get the free google toolbar to help stop pop up windows. Use a Firewall => I can not stress enough how important it is that you use a Firewall on your computer. For an excellent article on Firewalls, why you should use one and a some of those available, see Computer Safety On line - Software Firewalls. I recommend ZoneAlarm or Sunbelts Kerio. ZoneAlarm is more user-friendly, but Sunbelts Kerio is considered more secure. UPDATE!-UPDATE!-UPDATE! => This is, without a doubt, THE MOST IMPORTANT element in keeping your computer free of malware. Keep each and every one of your anti-malware tools AND Windows up-to-date with all current definitions and patches. I also suggest that you delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself), for example: C:\WINDOWS\Temp\--->Everything After the \. C:\Temp\--->Everything After the \. C:\Documents and Settings\username\Local Settings\Temp\--->Everything After the \. Repeat for all users. Also delete your Temporary Internet Files and cookies: Click Start=>Control Panel=>Internet options. Under the Generaltab. Click Delete Files button. Place a check-mark in Delete all off-line content. Click OK Click Delete Cookies Click OK=>OK Exit Control Panel Repeat for all users. In Firefox: Click Tools=>Options=>Privacy icon. Click Cache tab. Click Clear Cache button. Click Cookies tab. Click Clear Cookies Now button. Click OK Repeat for all users. Empty the recycle bin: Right-click the Recycle Bin icon on your desktop. Select 'Empty Recycle Bin'. Repeat forall users. Note: You can also do the above steps using a program such as CCleaner. PLEASE NOTE: The above steps should be done on a regular basis. Also, please see: So how did I get infected in the first place? ****** PLEASE READ ****** it is very rewarding to see that your computer is clean. Now we urge you to stand up and be counted! Document your experience, and by doing so, launch a complaint against the makers of malware. You can make a difference. Click on the Malware Complaints icon in my signature and support our cause. :smileyhappy: SpotCheckBilly

Virus & Spyware

Computer Slow -- Help Needed!!!

Was this post helpful?