Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

D Craven

2 Posts

601

April 10th, 2007 18:00

HiJack This Log - spyware, computer is slow. Please advise.

Logfile of HijackThis v1.99.1
Scan saved at 2:34:40 PM, on 4/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\NICServ.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\StorageSync\StrgSync.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Palm\HOTSYNC.EXE
C:\Quicken Install\bagent.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\OdHost.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\WPC54Cfg.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Norton AntiVirus\NAVW32.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.outlook.standardandpoors.com/NASApp/NetAdvantage/servlet/login?url=/NASApp/NetAdvantage/index.do
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StrgSync.exe] C:\Program Files\StorageSync\StrgSync.exe -w
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Quicken Scheduled Updates.lnk = C:\Quicken Install\bagent.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE
O4 - Global Startup: Wireless-G Notebook Adapter with SpeedBooster Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\Startup.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1137625134654
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/51/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NICSer_WPC54GS - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\NICServ.exe
O23 - Service: Norton LiveConnect Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Norton LiveConnect Service Ex (pifCore) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Security Center (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)
 

1972vet

3.3K Posts

April 11th, 2007 05:00

Your log shows only one entry that I find troubling. The file svchost.exe is a legitimate windows core file and it's path is:
C:\Windows\System32

Your log shows the path to the file as:
C:\WINDOWS\C:\WINDOWS\System32\svchost.exe

...and indicates that it is missing, which can't be so by the way. You may indeed have the Windows Security Center disabled but the svchost.exe should still be present. The legitimate windows file svchost.exe would instantly be recreated by the windows system file checker...which for my money, is a strong indication that this entry is either copied incorrectly from your copy/paste operation, or indeed is a spurious entry that needs to be removed.

Copy the Bold text below and save it as "findit.bat"


@ECHO Searching ...
@ECHO off
dir "%SYSTEMDRIVE%"\svchost.exe /q/a/o:gn/s/x > "%SYSTEMDRIVE%"\found.txt

Double click the .bat file on the desktop and allow it to run. When it completes, navigate to:
C:\found.txt

Copy the content of the text file and paste it back here on your next reply. Thanks!

D Craven

2 Posts

April 11th, 2007 13:00

 Volume in drive C has no label.
 Volume Serial Number is 8846-233A
 Directory of C:\I386
08/28/2002  04:00 PM            12,800              DICKSCOMPUTER\Richard CSVCHOST.EXE
               1 File(s)         12,800 bytes
 Directory of C:\WINDOWS\$NtServicePackUninstall$
08/28/2002  04:00 PM            12,800              DICKSCOMPUTER\Richard Csvchost.exe
               1 File(s)         12,800 bytes
 Directory of C:\WINDOWS\ServicePackFiles\i386
08/04/2004  02:56 AM            14,336              DICKSCOMPUTER\Richard Csvchost.exe
               1 File(s)         14,336 bytes
 Directory of C:\WINDOWS\SYSTEM32
08/04/2004  02:56 AM            14,336              BUILTIN\Administrators svchost.exe
               1 File(s)         14,336 bytes
     Total Files Listed:
               4 File(s)         54,272 bytes
               0 Dir(s)  10,148,827,136 bytes free

1972vet

3.3K Posts

April 11th, 2007 15:00

The batch file I gave you is written in such a way as to find every instance of svchost.exe on your system...hence the multiple entries.
The presence of the file in your C:\I386, C:\WINDOWS\$NtServicePackUninstall$, and C:\WINDOWS\ServicePackFiles\i386 is normal and expected. The scan does show the existance of the legitimate file in it's proper location and the 14,336 bytes is exact.

There is one other entry that most often is harmless and I hesitated at first to mention it since you DO have Spybot Search and Destroy installed and working for you.

The entry:
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
...is usually seen in a hjt log when the user has employed the use of an "Administrative" Lock down feature that Spybot (and some other anti-spyware applications) offer. On some other occasions when it appears in a log, the user may have complained of some administrative features that are not working (that explain the entry), which is not the case here.

It has been my experience in the past while mentioning the "O6" entry in a users hjt log that on the next reply, the entry has been removed simply because they didn't know what is meant by the "Administrative" locking feature in these various anti-spyware applications. Removing it (if you did in fact employ the administrative lock down feature) will cause no problem with the system, however the administrative locking feature is no longer active.

If you open "Spybot Search and Destroy" and click Mode from the menu at the top, you'll see the additional menu items appear in the left pane. Click the "Tools" item from the menu, then click on IE tweaks. If you see a check mark in either of the two options, "Lock IE start page settings against user changes (current user)" or "Lock IE control panel against opening from within IE (current user)" then this is the reason for the "O6" entry. If you find no check marks there, then you should remove the "O6" entry in your hjt log.

I said all that in hopes that you and other readers here will fully understand exactly what these features are and why the "O6" entries appear in the log.

Now...as your log appears to be clean and you nonetheless are experiencing slow system performance, I should point out:

Computer and browser slowness are not always malware related.

Poor performance can be the result of disk fragmentation, disk errors, corrupt system files, too many startup programs, unnecessary services running, not enough RAM, etc.

As your system gets older it becomes filled with more files/programs and has a natural tendency to slow down so regular maintenance is essential. Outlined below are Ten Steps for PC Health that will help you to improve and speed up your system's performance. For those users who would like this information stored on board your own computer, please see the instructions at the end for "Create a "New Folder" in your Browser Favorites List":

  2. For browser problems, see:
  3. If your having connectivity issues or errors such as Page cannot be displayed see:
  4. Defrag your system.

  5. A fragmented disk slows the overall performance of your system. When files are fragmented, the computer must search the hard disk for all the fragments to a file when you attempt to open it which slows down the opening process.

    Another benefit is that the Free Space available will also be consolidated into one space on the hard disk.

    Fragmentation occurs when the operating system cannot or will not allocate enough contiguous space to store a complete file as a unit, but instead puts parts of it in gaps between other files (usually those gaps exist because they formerly held a file that the operating system has subsequently deleted or because the operating system allocated excess space for the file in the first place).

    As advances in technology bring larger disk drives, the performance loss due to fragmentation squares with each doubling of the size of the drive. Larger files and greater numbers of files also contribute to fragmentation and consequent performance loss. Defragmentation attempts to alleviate these problems.

    Disk Defragmenter consolidates fragmented files and folders ( and free space) on the hard disk so that each occupies a single space on the disk. This speeds up reading and writing to the disk. Read The Importance of Disk Defragmentation for instructions.

  6. Check for disk errors
    • Run CHKDSK in Safe Mode or from the Recovery Console.
    • In the Check Disk dialog box, select the Scan for and attempt recovery of bad sectors check box, click "Start" and instantly the repair/recovery process begins. When it completes your system should reboot on it's own.
    As you use your hard drive, it can develop bad sectors which slow down hard disk performance and make data writing difficult. "Check Disk" scans the hard drive and verifies the logical integrity of a file system by checking for system errors, lost clusters, lost chains, and bad sectors. When encountering logical inconsistencies in file system data, it will perform the necessary actions to repair the file system data.

  8. Check for damaged, altered or missing critical system files
    • Run the System File Checker. If SFC discovers that a protected file has been damaged, altered or is missing, it restores the correct version of the file from the cache folder. You must be logged on as an "Administrator" or as a member of the Administrators group to run sfc and it may ask you to insert your XP Installation CD so have it available.

    • Clean up your hard drive
      • Remove unused programs, transfer old data, pictures and music files etc. to a CD or an external hard drive. When you have moved/saved the files you want to keep, run:
      • Disk Cleanup and let it scan your system for files to remove.
      • Dont clean out the Prefetch folder for general maintenance reasons - This is a common myth that will not improve performance. You should only remove prefetch files when you've been instructed to after a malware cleanup investigation.

        Prefetch files will be re-created by windows when the need arises. The folder can become quite bloated after a while due to programs you've previously opened. The prefetched items actually assist with speeding the boot up process as well as opening those programs that you've opened before. Emptying the folder causes no irreparable harm but will result in a slow boot up on your first reboot when the folder has been emptied. Subsequent reboots will be back to normal.

        As an alternative to Disk Cleanup you can download and scan with CCleaner.
        CCleaner installs the Yahoo Toolbar as an option which IS checkmarked by default during the installation. IF you do NOT want it, REMOVE the checkmark when provided with the option OR download the toolbarfree Basic version instead of the Standard Build. .
      • Check for any unnecessary running services.

      • If you have a typical installation, many services are configured as "automatic"...that is, they start automatically when Windows starts or when the service is called for the first time. Use Black Viper's Services Configuration hosted by MajorGeeks to help fine tune this area.

      • Check for any unnecessary applications loading at startup

      • ...By using MSConfig. Some startup programs are necessary so be careful what you disable.

        If you are unsure what any of the startup entries are or if they are safe to disable, then search one of the following Startup Databases:
        StartupList Index
        Startup Programs Database

        Note: MSConfig.exe is a troubleshooting utility used to diagnose system configuration issues. Although it works as a basic startup manager which allows you to enable/disable auto-start programs, msconfig should not be used routinely to disable startup programs. Instead, navigate the software you want to disable from startup for the "preferences" settings and configure it as appropriate.

        A better alternative is to use a startup manager. If you have Spybot S&D 1.4 installed, launch it, go to Mode and select Advanced. Then go to Tools, select System Startups. You will be provided with a list of programs that load when Windows starts. If you untick an entry it will no longer run at startup. This will allow you to experiment and see how your system performs with any of them disabled. Other startup managers you can download and use for free are Startup Control Panel, Autoruns and Starter by CodeStuff.

      • Remove any third party Memory Manager or Optimizer.

      • Windows XP memory management was designed to make the best use of Ram and these memory management utilities defeat that purpose. They push applications out of RAM into the pagefile, creating holes in the RAM and by doing so, slow down your computer.

      • Disable some visual effects.

      • While visual embellishments may be attractive, they do nothing else for you. Disabling some of them frees up system resources and makes the operating system perform better. Right click My Computer, choose Properties, then Advanced. Click on Settings under "performance" and UNcheck all the visual effects, except for the last three. Click "Apply", then "OK", then "OK" again. Then right click your desktop and choose Properties, then Appearance, then Effects... Uncheck the first two boxes and hit "OK".

      • Adding more RAM

      • ...is a quick solution that can have a dramatic affect on your system's speed and responsiveness. You can check how much RAM you have by going to Start then All Programs. From there, find Accessories then System Tools and locate the System Information option from the menu list and look at your System Summary. For more info see Understanding, Identifying and Upgrading the RAM in your PC.
        For more suggestions and performance tips read:
        Restore Your Computer's Performance with Windows XP
        XP Performance Tweaks
        Performance Boost for XP

        When you are all done be sure to Create a new Restore Point to enable your computer to " roll-back" to a clean working state keeping all the changes you just made.

        For those users who would like to store this information on board their own computers:

        These instructions are peculiar to only Internet Explorer version 7. It is assumed that users of any other browsers already know how to create a new folder to store bookmarks. If you need instructions for a different browser, please see that browser's support pages.

        Create a "New Folder" in your Browser Favorites List"

        For each category outlined above that contains a hyperlink, you can create a "New Folder" in your browser Favorites list.

        To accomplish that just click on a link from one of the categories and when the web page loads, click the Add to Favorites button in the upper left corner of the tool bar (It's the little gold star that has the green plus sign overlaid).

        Scroll to Add to Favorites from the menu drop box and click on it. When the "Add a Favorite" dialogue box opens, click the New Folder button. Name the folder the same as the category...for example "For browser problems" and click the Create button. Now, to check your work, click the Favorites button (from your toolbar, it's the gold star in the far left next to the button you clicked previously), Look for the folder you created and click on it. You should find the link that you bookmarked.

        You can create folders for each category you want and bookmark the related links to store in each.


        Best Regards,
        and Happy Surfing...

      Was this post helpful?

      View All

      No Events found!

      Top