To save on time and confusion ALWAYS post back to your ORIGINAL thread. That being said, you definitely have a lot of things going on here, so let's get started.:smileyhappy:
Save a copy of the report,: Click "Print the report", then copy/paste to a new Notepad file and save to a convenient location. Post results into the next reply if requested to do so.
Download, unzip to your desktop
CWShredder
and run it, then:
1. Click "Check For Update"
(If an update isn't available, skip to step #4.)
2. Click "Click here to Download the upate". 3. When the new version has been downloaded, click "Save". 4. Click "Fix ->" --->Important Step<---Before we get started, lHijackThis needs to be moved to its own,
permanent
folder.
HijackThis will create a backup file to use if a restore is necessary, so please DO NOT run HijackThis from a temporary location or your desktop.
Create a folder on the root drive, (Usually C:\), called C:\HJT. 1. Go to "My Computer", (Windows key+e), or by double-clicking on the "My Computer" icon on your desktop. 2. Double click on "C:" 3. Right click and select New->Folder. Name it HJT. Move HijackThis to this new folder.
Also move the "Backups" folder, for HiJackThis, if present. Let's look for, and delete, any program segments(
prefetches) that might be present, and are associated with the '
problems' we're trying to remove from this system. To do this, let's:
1) Click "
Start=>Search", then search for each of these program's
base name(s), in all files and folders:
actalert.exe*
2) Then if any are found in the '
prefetch' folder, delete them.
Look closely, since the '
base' name will have a bunch of random numbers and letter "
s" attached to it.
Go to
Add/Remove programs and remove(uninstall) the following, if present:
Internet Optimizer SideFind
The above could appear anywhere within the entry. Be careful not to remove any
personal or
system software.
Download the
Adware.Istbar
removal utility from Symantec and following the instructions on the same page. Run
HiJackThis then:
1. Click "
Config..."
2. Click "
Misc Tools"
3. Click "
Open Process manager"
Next, while holding down the
CTRL key, locate (
if present) and click on (
highlight) each of the following:
Now double-check and make sure that only those item(s) above are highlighted, then click "
Kill process". Now, click "
Refresh", check again, and repeat this step if any remain.
Now, let's open a
command prompt and unregister the dll(s) we're going to remove, by entering the following:
It's ok, if these aren't found or 'error' out. If you want, just copy and paste the individual lines to the command prompt to save on the typing.
Run
HiJackThis and click "
Scan", then check(tick) the following, if present:
With all windows closed except
HiJackThis, click "
Fix checked".
From "
Safe Mode
", (Reboot if necessary.) locate and delete the following item(s), if present. Make sure you're able to view system and hidden files/ folders:
To show hidden files :
1. Click Start=>Control Panel=>Folder Options=>View tab. 2. Select "Show hidden files and folders" 3. Clear the check mark in "Hide protected operating system files"=>Yes to confirm.
4. Click
Apply=>
OK.
5. Close
Control Panel.
Wow...you seem very well versed in computers! Let the universe bless you...
If I were to do this, I already have norton, ran my scan, came back with Trojan.Vundo and now 1 spyware...(I think its gone now, its not showing in my scan...) But anyway, if I did this, I wouldnt need to download a antivirus scanner, would I? I also have ad-aware personal scanner...
Let me know.
Its all getting to be a bit confusing, so if you could offer a step by step, that would be greatly appreciated...right from the jump! Thanks
Let me start out by saying that it's considered bad form to post in someone else's topic. ALWAYS start your own thread and ALWAYS post back to that same thread.
That being said, there is really no "one-size-fits-all" fix because every machine has different things running on and at each has its own unique repair. So let's get started by finding out what is going on inside of your machine.
Please perform the following steps, in order. (If you already have a program, such as Ad-Aware SE Personal, just make sure it is configured as directed, then run in sequence.). Don't skip a step, since each program runs a little differently and many times one will pick up something that another one missed:
3. Download HijackThis from: Here, then follow these instructions:
Create a folder on the root drive, (Usually C:\), called C:\HJT HijackThis will create a backup file to use if a restore is necessary, so please DO NOT run HijackThis from a temporary location or your desktop. 1. Go to "My Computer" (Windows key+e), or by double-clicking on the "My Computer" icon on your desktop. 2. Double click on "C:" 3. Right click and select New ->Folder. Name it HJT.
Unzip HijackThis to its permanent folder.
Launch HijackThis by double-clicking on "HijackThis.exe". Click the "Do a system scan only" button. When scan is finished, click the "Save log" button and save to a convenient location.
A Notepad windowill open with the contents of the scan.
Hit Ctrl+a to select the entire contents. Hit Ctrl+c to copy it. Click "New topic". In the "
Message Subject" box, type in a subject, e.g. Trojan Vundo.
Hit
Ctrl+v to paste contents of log into the
" box. Please include the results of the online scans.
OH MY!! MY APOLOGIES!! I had no idea, I am new to this whole thing and figured I would just respond to what I had read. I seen this link in another forum, clicked on it, read it and replied. I am going to read what you wrote and start my own. Thank you.
I have tried the scans that you gave me in the beginning. HouseCall came back saying nothing was found...and Panda will not complete...it stops at C:\ Windows Explorer.exe everytime. I have allowed my pop-ups from Norton, and disabled the Firewall...its not going through. Please meet me in my forum and tell me what I should do. Thanks.
Logfile of HijackThis v1.99.1 Scan saved at 12:43:42 PM, on 11/27/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
SpotCheckBilly
932 Posts
0
November 5th, 2005 22:00
Hello Angie03,
To save on time and confusion ALWAYS post back to your ORIGINAL thread. That being said, you definitely have a lot of things going on here, so let's get started.:smileyhappy:
Go to www.trendmicro.com, then:
1. Click "Free Online Scan".
2. Click "Scan now, it's free".
Follow the screen prompts.
Save a copy of the report,:
Click "Print the report", then copy/paste to a new Notepad file and save to a convenient location. Post results into the next reply if requested to do so.
Download, unzip to your desktop CWShredder and run it, then:
1. Click "Check For Update"
(If an update isn't available, skip to step #4.)
2. Click "Click here to Download the upate".
3. When the new version has been downloaded, click "Save".
4. Click "Fix ->"
--->Important Step<---Before we get started, lHijackThis needs to be moved to its own, permanent folder.
HijackThis will create a backup file to use if a restore is necessary, so please DO NOT run HijackThis from a temporary location or your desktop.
Create a folder on the root drive, (Usually C:\), called C:\HJT.
1. Go to "My Computer", (Windows key+e), or by double-clicking on the "My Computer" icon on your desktop.
2. Double click on "C:"
3. Right click and select New->Folder. Name it HJT. Move HijackThis to this new folder.
Also move the "Backups" folder, for HiJackThis, if present.
Let's look for, and delete, any program segments( prefetches) that might be present, and are associated with the ' problems' we're trying to remove from this system. To do this, let's:
1) Click " Start=>Search", then search for each of these program's base name(s), in all files and folders:
actalert.exe*
2) Then if any are found in the ' prefetch' folder, delete them.
Look closely, since the ' base' name will have a bunch of random numbers and letter " s" attached to it.
Go to Add/Remove programs and remove(uninstall) the following, if present:
Internet Optimizer
SideFind
The above could appear anywhere within the entry. Be careful not to remove any personal or system software.
Download the Adware.Istbar removal utility from Symantec and following the instructions on the same page.
Run HiJackThis then:
1. Click " Config..."
2. Click " Misc Tools"
3. Click " Open Process manager"
Next, while holding down the CTRL key, locate ( if present) and click on ( highlight) each of the following:
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\wtrqbktd.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\Internet Optimizer\optimize.exe
C:\WINDOWS\system32\Tchkxy.exe
C:\Program Files\Wznl\Pbjg.exe
C:\Program Files\Internet Optimizer\actalert.exe
Now double-check and make sure that only those item(s) above are highlighted, then click " Kill process". Now, click " Refresh", check again, and repeat this step if any remain.
Now, let's open a command prompt and unregister the dll(s) we're going to remove, by entering the following:
regsvr32 /u nem220.dll
regsvr32 /u deSrcAs.dll
regsvr32 /u BFGTOO~1.DLL
regsvr32 /u qlink32.dll
regsvr32 /u wsem303.dll
regsvr32 /u sfbho.dll
regsvr32 /u istbarcm.dll
It's ok, if these aren't found or 'error' out. If you want, just copy and paste the individual lines to the command prompt to save on the typing.
Run HiJackThis and click " Scan", then check(tick) the following, if present:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - _{4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: Big Fish Games - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
O2 - BHO: LinkTracker Class - {8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} - C:\WINDOWS\system32\qlink32.dll
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
O3 - Toolbar: Big Fish Games - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
O3 - Toolbar: ISTbar - {FAA356E4-D317-42a6-AB41-A3021C6E7D52} - C:\Program Files\ISTbar\istbarcm.dll
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [bLAMWnxPr] C:\WINDOWS\wtrqbktd.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Program Files\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [version] C:\WINDOWS\system32\Lfxxvb.exe
O4 - HKLM\..\Run: [secure] C:\WINDOWS\system32\Tchkxy.exe
O4 - HKLM\..\Run: [Rkflsk] C:\Program Files\Wznl\Pbjg.exe
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} (Installer Class) - http://www.tbcode.com/ist/softwares/v4.0/0006_regular.cab
O18 - Filter: text/html - {3551784B-E99A-474f-B782-3EC814442918} - C:\WINDOWS\system32\qlink32.dll
With all windows closed except HiJackThis, click " Fix checked".
From " Safe Mode ", (Reboot if necessary.) locate and delete the following item(s), if present. Make sure you're able to view system and hidden files/ folders:
To show hidden files :
1. Click Start=>Control Panel=>Folder Options=>View tab.
2. Select "Show hidden files and folders"
3. Clear the check mark in "Hide protected operating system files"=>Yes to confirm.
4. Click Apply=> OK.
5. Close Control Panel.
folders...
C:\Program Files\ISTsvc
C:\Program Files\SurfAccuracy
C:\Program Files\Internet Optimizer
C:\Program Files\Wznl
C:\Program Files\MyWaySA
C:\PROGRA~1\BFGTOO~1
C:\Program Files\SideFind
C:\Program Files\ISTbar
files...
C:\WINDOWS\wtrqbktd.exe
C:\WINDOWS\system32\Tchkxy.exe
C:\WINDOWS\nem220.dll
C:\WINDOWS\system32\qlink32.dll
C:\WINDOWS\wsem303.dll
C:\WINDOWS\system32\Lfxxvb.exe
Note that some of these file(s) may not be present.
Post back a new log, along with the results of the online scan. :smileyvery-happy:
George a.k.a. SpotCheckBilly.
Hypnotiq
24 Posts
0
November 12th, 2005 20:00
Wow...you seem very well versed in computers! Let the universe bless you...
If I were to do this, I already have norton, ran my scan, came back with Trojan.Vundo and now 1 spyware...(I think its gone now, its not showing in my scan...) But anyway, if I did this, I wouldnt need to download a antivirus scanner, would I? I also have ad-aware personal scanner...
Let me know.
Its all getting to be a bit confusing, so if you could offer a step by step, that would be greatly appreciated...right from the jump! Thanks
Hypnotiq
SpotCheckBilly
932 Posts
0
November 12th, 2005 21:00
Let me start out by saying that it's considered bad form to post in someone else's topic. ALWAYS start your own thread and ALWAYS post back to that same thread.
That being said, there is really no "one-size-fits-all" fix because every machine has different things running on and at each has its own unique repair. So let's get started by finding out what is going on inside of your machine.
Please perform the following steps, in order. (If you already have a program, such as Ad-Aware SE Personal, just make sure it is configured as directed, then run in sequence.). Don't skip a step, since each program runs a little differently and many times one will pick up something that another one missed:
1. Run these free online virus scans.
House Call, and Panda Software.
Please save the reports generated by these scans and include them in your next post if requested to do so.
2. Download and install Ad-Aware SE Personal and Spybot Search & Destroy.
***Very Important***
Before you run either of these programs, please update and configure according to the Ad-Aware SE Personal Tutorial and Spybot S&D Tutorial.
Run each of them with a reboot in between.
3. Download HijackThis from: Here, then follow these instructions:
Create a folder on the root drive, (Usually C:\), called C:\HJT HijackThis will create a backup file to use if a restore is necessary, so please DO NOT run HijackThis from a temporary location or your desktop. 1. Go to "My Computer" (Windows key+e), or by double-clicking on the "My Computer" icon on your desktop.
2. Double click on "C:"
3. Right click and select New ->Folder. Name it HJT.
Unzip HijackThis to its permanent folder.
Launch HijackThis by double-clicking on "HijackThis.exe".
Click the "Do a system scan only" button.
When scan is finished, click the "Save log" button and save to a convenient location.
A Notepad windowill open with the contents of the scan.
Hit Ctrl+a to select the entire contents.
Hit Ctrl+c to copy it.
Click "New topic". In the " Message Subject" box, type in a subject, e.g. Trojan Vundo.
Hit Ctrl+v to paste contents of log into the " box. Please include the results of the online scans.
We can take it from there. :smileyhappy:
George a.k.a. SpotCheckBilly
Hypnotiq
24 Posts
0
November 12th, 2005 21:00
Hypnotiq
24 Posts
0
November 13th, 2005 05:00
SpotCheckBilly
932 Posts
0
November 13th, 2005 06:00
at one time or another and we all have to learn. :smileyhappy:
For the time being, don't worry about the online scans. Just go ahead
and p do the rest of the steps as I outlined in my earlier post.
We'll take it step-by-step from there. :smileyvery-happy:
George a.k.a. SpotCheckBilly
Message Edited by SpotCheckBilly on 11-13-2005 12:20 AM
zbestwun2001
3 Apprentice
•
8.8K Posts
0
November 27th, 2005 19:00
This thread is a mess.
Post your new log in it's own new thread.
Someone will help you.
It doesn't look that bad, but needs work.
Steve
Angie03
61 Posts
0
November 27th, 2005 19:00
Logfile of HijackThis v1.99.1
Scan saved at 12:43:42 PM, on 11/27/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\wtrqbktd.exe
C:\WINDOWS\system32\Tchkxy.exe
C:\Program Files\Wznl\Pbjg.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\America Online 9.0\aoltray.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - _{4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: Big Fish Games - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\PROGRA~1\COMMON~1\VERIZO~1\SFP\vzbb.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: LinkTracker Class - {8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} - C:\WINDOWS\system32\qlink32.dll
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll (file missing)
O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\PROGRA~1\COMMON~1\VERIZO~1\SFP\vzbb.dll
O3 - Toolbar: Big Fish Games - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
O3 - Toolbar: ISTbar - {FAA356E4-D317-42a6-AB41-A3021C6E7D52} - C:\Program Files\ISTbar\istbarcm.dll (file missing)
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Dell Photo AIO Printer 922] "C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe"
O4 - HKLM\..\Run: [DLBTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBTtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [bLAMWnxPr] C:\WINDOWS\wtrqbktd.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [version] C:\WINDOWS\system32\Lfxxvb.exe
O4 - HKLM\..\Run: [secure] C:\WINDOWS\system32\Tchkxy.exe
O4 - HKLM\..\Run: [Rkflsk] C:\Program Files\Wznl\Pbjg.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} (Installer Class) - http://www.tbcode.com/ist/softwares/v4.0/0006_regular.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O18 - Filter: text/html - {3551784B-E99A-474f-B782-3EC814442918} - C:\WINDOWS\system32\qlink32.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: DefWatch - Unknown owner - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe (file missing)
O23 - Service: dlbt_device - Dell - C:\WINDOWS\system32\dlbtcoms.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Unknown owner - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Unknown owner - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe (file missing)
Angie03
61 Posts
0
November 27th, 2005 19:00
zbestwun2001
3 Apprentice
•
8.8K Posts
0
November 27th, 2005 20:00