Very Slow IE operation

bamajim,

Ran kill box and deleted files in Hijackthis.  The new Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:31:22 PM, on 4/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\PROGRA~1\MUSICM~1\Common\COMPON~1\MMCOMP~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optonline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optonline.net
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper\CCHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\Program Files\Panicware\Pop-Up Stopper\pstopper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=062006 serial=DR12WTX-9999998-YSP lang=EN
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: ChatSpace Full Java Client 4.0.0.301 - http://63.102.226.240:8000/Java/cfs40301.cab
O16 - DPF: ChatSpace Full Java Client 4.0.0.320 - http://63.102.226.240:8000/Java/cfs40320.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://www.classlink2000.com/sites/FILES/wfica.cab
O16 - DPF: {7CF052DE-C74F-421B-B04A-3B3037EF5887} (CCMPGui Class) - http://64.124.45.181/chaincast/proxy/CCMP.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/51/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download/files/abasetup144.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10806 bytes

bamajim,

I ran the Ewindo scan and deleted the infected items but I am unable to post the results.  When I try to post the results, I get an error message "Please address the following to complete message posting. The message contains the following prohibited content: you must remove this content before submitting your post".

I do not know what this means.  Please advise.  Thanks!

bamajim,

This seems crazy but when I tried to type the prohibited content, my message was blocked??

BeeSidney  &NancyBeeSamPaul   Use the capitals to find the offending content. 

bamajim,

Ewido scan part 3

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Celia\Cookies\celia@sales.liveperson:emotion-29:.txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Celia\Cookies\celia@sales.liveperson[9].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@sanfordcorporation.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Msn
Path: C:\Documents and Settings\Celia\Cookies\celia@search.msn[2].txt
Risk: Medium

Name: TrackingCookie.Information
Path: C:\Documents and Settings\Celia\Cookies\celia@searchportal.information[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@sears.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Celia\Cookies\celia@server.iad.liveperson[10].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Celia\Cookies\celia@server.iad.liveperson[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Celia\Cookies\celia@serving-sys[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Celia\Cookies\celia@serving-sys[3].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@shopping.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@shopping.112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@simplestar.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Specificpop
Path: C:\Documents and Settings\Celia\Cookies\celia@specificpop[1].txt
Risk: Medium

Name: TrackingCookie.Spylog
Path: C:\Documents and Settings\Celia\Cookies\celia@spylog[2].txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\Celia\Cookies\celia@ssl-hints.netflame[2].txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\Celia\Cookies\celia@ssl-hints.netflame[3].txt
Risk: Medium

Name: TrackingCookie.Dealtime
Path: C:\Documents and Settings\Celia\Cookies\celia@stat.dealtime[2].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\Celia\Cookies\celia@statcounter[1].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\Celia\Cookies\celia@statcounter[2].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\Celia\Cookies\celia@statcounter[3].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: C:\Documents and Settings\Celia\Cookies\celia@statcounter[4].txt
Risk: Medium

Name: TrackingCookie.Webtrendslive
Path: C:\Documents and Settings\Celia\Cookies\celia@statse.webtrendslive[1].txt
Risk: Medium

Name: TrackingCookie.Webtrendslive
Path: C:\Documents and Settings\Celia\Cookies\celia@statse.webtrendslive[3].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@tacoda[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@tacoda[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@thomasvillefurniture.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@timeinc.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@timeinc.122.2o7[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@timeinc.122.2o7[3].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: C:\Documents and Settings\Celia\Cookies\celia@tradedoubler[1].txt
Risk: Medium

Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\Celia\Cookies\celia@trafficmp[1].txt
Risk: Medium

Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\Celia\Cookies\celia@trafficmp[2].txt
Risk: Medium

Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\Celia\Cookies\celia@trafficmp[3].txt
Risk: Medium

Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\Celia\Cookies\celia@trafficmp[4].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\Celia\Cookies\celia@tribalfusion[1].txt
Risk: Medium

Name: TrackingCookie.Web-stat
Path: C:\Documents and Settings\Celia\Cookies\celia@web-stat[1].txt
Risk: Medium

Name: TrackingCookie.Adobe
Path: C:\Documents and Settings\Celia\Cookies\celia@www.adobe[1].txt
Risk: Medium

Name: TrackingCookie.Burstbeacon
Path: C:\Documents and Settings\Celia\Cookies\celia@www.burstbeacon[1].txt
Risk: Medium

Name: TrackingCookie.Burstbeacon
Path: C:\Documents and Settings\Celia\Cookies\celia@www.burstbeacon[3].txt
Risk: Medium

Name: TrackingCookie.Burstbeacon
Path: C:\Documents and Settings\Celia\Cookies\celia@www.burstbeacon[4].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\Celia\Cookies\celia@www.burstnet[1].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\Celia\Cookies\celia@www.burstnet[2].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\Celia\Cookies\celia@www.burstnet[3].txt
Risk: Medium

Name: TrackingCookie.Myaffiliateprogram
Path: C:\Documents and Settings\Celia\Cookies\celia@www.myaffiliateprogram[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wfk4eid5wgoqidj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wfkigoc5ckpaidj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wfkouldzeepgidj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wfkyojcpmhqa2dj6x9ny-1seq-2-2.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wfkyuhdpkdog6dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wflighdzckpqudj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wfligocpsaoqsdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjkoajajogpw6dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjligjcpgbowqdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjlyemazogow6dj6x9ny-1seq-2-2.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjmicnazeeqqwdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjmicoczaapqsdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnycgdpohpaudj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnycjd5maoqqdj6x9ny-1seq-2-2.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnyogdjwaoqudj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnyopdzeeoamdj6x9ny-1seq-2-2.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnyqjcjskoqqdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnyuod5scoqidj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@y-1shz2prbmdj6wvny-1sez2pra2dj6wjnywlc5cfog6dj6x9ny-1seq-2-2.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: C:\Documents and Settings\Celia\Cookies\celia@z1.adserver[1].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\Celia\Cookies\celia@zedo[1].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\Celia\Cookies\celia@zedo[2].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\Celia\Cookies\celia@zedo[3].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\Celia\Cookies\celia@zedo[5].txt
Risk: Medium

Name: Adware.WinAD
Path: C:\Program Files\Fellowes\MediaFACE 4.2\MFHookManager.dll
Risk: Medium

bamajim,

The rest of the Ewido scan.  I deleted all of these after the scan.  Thanks.

Name: TrackingCookie.Ru4
Path: C:\Documents and Settings\Celia\Cookies\celia@edge.ru4[1].txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: C:\Documents and Settings\Celia\Cookies\celia@edge.ru4[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@efashionsolutions.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-aha.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-bestbuy.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-dig.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-harleydavidson.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-inforspaceinc.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-legacy.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-legacy.hitbox[3].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-moma.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-northjerseymediagroup.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-reed.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-shoes.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-verizon.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-youtube.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-zoomerang.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg-zoomerang.hitbox[3].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@ehg.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Enhance
Path: C:\Documents and Settings\Celia\Cookies\celia@enhance[2].txt
Risk: Medium

Name: TrackingCookie.Enhance
Path: C:\Documents and Settings\Celia\Cookies\celia@enhance[3].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\Celia\Cookies\celia@fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\Celia\Cookies\celia@fastclick[2].txt
Risk: Medium

Name: TrackingCookie.Findwhat
Path: C:\Documents and Settings\Celia\Cookies\celia@findwhat[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@geosign.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@giftscom.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Gemius
Path: C:\Documents and Settings\Celia\Cookies\celia@hit.gemius[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@hitbox[3].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@homestore.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@horizonbc##.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Hotlog
Path: C:\Documents and Settings\Celia\Cookies\celia@hotlog[2].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Celia\Cookies\celia@iad.liveperson[2].txt
Risk: Medium

Name: TrackingCookie.Masterstats
Path: C:\Documents and Settings\Celia\Cookies\celia@image.masterstats[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@livenation.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Tracking101
Path: C:\Documents and Settings\Celia\Cookies\celia@login.tracking101[2].txt
Risk: Medium

Name: TrackingCookie.Webtrends
Path: C:\Documents and Settings\Celia\Cookies\celia@m.webtrends[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@marthastewart.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Celia\Cookies\celia@media.adrevolver[1].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Celia\Cookies\celia@media.adrevolver[3].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Celia\Cookies\celia@media.adrevolver[4].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Celia\Cookies\celia@media.adrevolver[7].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\Celia\Cookies\celia@mediaplex[2].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\Celia\Cookies\celia@mediaplex[3].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@msnportal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@netmonster.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@netshops.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@network.realmedia[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@overture[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@overture[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@overture[3].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@overture[4].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@phg.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\Celia\Cookies\celia@phg.hitbox[3].txt
Risk: Medium

Name: TrackingCookie.Pro-market
Path: C:\Documents and Settings\Celia\Cookies\celia@pro-market[2].txt
Risk: Medium

Name: TrackingCookie.Pro-market
Path: C:\Documents and Settings\Celia\Cookies\celia@pro-market[3].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@professionalinternetsolutions.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\Celia\Cookies\celia@questionmarket[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\Celia\Cookies\celia@questionmarket[3].txt
Risk: Medium

Name: TrackingCookie.Real
Path: C:\Documents and Settings\Celia\Cookies\celia@realguide.real[1].txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@realmedia[1].txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@realmedia[2].txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@realmedia[3].txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: C:\Documents and Settings\Celia\Cookies\celia@reduxads.valuead[1].txt
Risk: Medium

Name: TrackingCookie.Valuead
Path: C:\Documents and Settings\Celia\Cookies\celia@reduxads.valuead[2].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: C:\Documents and Settings\Celia\Cookies\celia@revenue[2].txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: C:\Documents and Settings\Celia\Cookies\celia@revsci[1].txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: C:\Documents and Settings\Celia\Cookies\celia@revsci[2].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.adjuggler[1].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.adjuggler[2].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.adjuggler[3].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.adjuggler[4].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.its.adjuggler[1].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.its.adjuggler[2].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.its.adjuggler[3].txt
Risk: Medium

Name: TrackingCookie.Adjuggler
Path: C:\Documents and Settings\Celia\Cookies\celia@rotator.its.adjuggler[4].txt
Risk: Medium

bamajim,

I ran the ewido scan and am enclosing the results.  Since the file is so large, I have to send in more than one post.

ewido anti-spyware online scanner
 http://www.ewido.net
__________________________________________________

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Tom\Cookies\tom@247realmedia[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@2o7[2].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\Tom\Cookies\tom@4.adbrite[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Tom\Cookies\tom@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\Tom\Cookies\tom@adbrite[1].txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\Tom\Cookies\tom@adopt.euroclick[2].txt
Risk: Medium

Name: TrackingCookie.Addynamix
Path: C:\Documents and Settings\Tom\Cookies\tom@ads.addynamix[2].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\Tom\Cookies\tom@ads.pointroll[1].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\Tom\Cookies\tom@advertising[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Tom\Cookies\tom@anad.tacoda[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Tom\Cookies\tom@anat.tacoda[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@armstrong.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Tom\Cookies\tom@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Counted
Path: C:\Documents and Settings\Tom\Cookies\tom@bilbo.counted[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Tom\Cookies\tom@##.serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.Bridgetrack
Path: C:\Documents and Settings\Tom\Cookies\tom@citi.bridgetrack[2].txt
Risk: Medium

Name: TrackingCookie.Connextra
Path: C:\Documents and Settings\Tom\Cookies\tom@connextra[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Tom\Cookies\tom@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Tom\Cookies\tom@doubleclick[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wdk4chajccq.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wdkokjcpaao.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wfloogajkep.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjk4skcpakp.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjkoulazalo.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjkykodjodo.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjkysoazadq.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjl4apc5ehp.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjloujcjkco.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Tom\Cookies\tom@e-2dj6wjny-1jajgc.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Enhance
Path: C:\Documents and Settings\Tom\Cookies\tom@enhance[2].txt
Risk: Medium

Name: TrackingCookie.Intelli-direct
Path: C:\Documents and Settings\Tom\Cookies\tom@intelli-direct[1].txt
Risk: Medium

Name: TrackingCookie.Webtrends
Path: C:\Documents and Settings\Tom\Cookies\tom@m.webtrends[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@marketlive.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@metacafe.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@msnportal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@nhl.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@nhl.112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Tom\Cookies\tom@overture[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Tom\Cookies\tom@overture[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@paypal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Tom\Cookies\tom@perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\Tom\Cookies\tom@questionmarket[1].txt
Risk: Medium

Name: TrackingCookie.Realmedia
Path: C:\Documents and Settings\Tom\Cookies\tom@realmedia[2].txt
Risk: Medium

Name: TrackingCookie.Real
Path: C:\Documents and Settings\Tom\Cookies\tom@real[2].txt
Risk: Medium

Name: TrackingCookie.Real
Path: C:\Documents and Settings\Tom\Cookies\tom@real[3].txt
Risk: Medium

Name: TrackingCookie.Revsci
Path: C:\Documents and Settings\Tom\Cookies\tom@revsci[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Tom\Cookies\tom@riptownmedia.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Tom\Cookies\tom@sales.liveperson[3].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Tom\Cookies\tom@server.iad.liveperson[4].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Tom\Cookies\tom@serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.Netflame
Path: C:\Documents and Settings\Tom\Cookies\tom@ssl-hints.netflame[1].txt
Risk: Medium

Name: TrackingCookie.Onestat
Path: C:\Documents and Settings\Tom\Cookies\tom@stat.onestat[2].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Tom\Cookies\tom@tacoda[2].txt
Risk: Medium

Name: TrackingCookie.Trafficmp
Path: C:\Documents and Settings\Tom\Cookies\tom@trafficmp[1].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: C:\Documents and Settings\Tom\Cookies\tom@tribalfusion[2].txt
Risk: Medium

Name: TrackingCookie.Burstbeacon
Path: C:\Documents and Settings\Tom\Cookies\tom@www.burstbeacon[2].txt
Risk: Medium

Name: TrackingCookie.Yadro
Path: C:\Documents and Settings\Tom\Cookies\tom@yadro[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1idzaaqqmdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1jcpwdpqudj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@112.2o7[2].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@247realmedia[1].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@247realmedia[2].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@247realmedia[3].txt
Risk: Medium

Name: TrackingCookie.247realmedia
Path: C:\Documents and Settings\Celia\Cookies\celia@247realmedia[4].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@2o7[3].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wfkieoc5weog-1dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjmikhc5gfpq-1dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1gazocpwwdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1idzocqqqdj6x9ny-1seq-2-2.stats.esomniture[1].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1jcpwdpqudj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1kc5kdoa2dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1kcpekow2dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjny-1odzwkpqmdj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Esomniture
Path: C:\Documents and Settings\Celia\Cookies\celia@a-1shz2prbmdj6wvny-1sez2pra2dj6wjnywmdjckpq-1dj6x9ny-1seq-2-2.stats.esomniture[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Celia\Cookies\celia@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Celia\Cookies\celia@ad.yieldmanager[2].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Celia\Cookies\celia@ad.yieldmanager[3].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Celia\Cookies\celia@ad.yieldmanager[4].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: C:\Documents and Settings\Celia\Cookies\celia@ad.yieldmanager:emotion-14:.txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\Celia\Cookies\celia@adbrite[1].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\Celia\Cookies\celia@adbrite[2].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\Celia\Cookies\celia@adbrite[4].txt
Risk: Medium

Name: TrackingCookie.Admarketplace
Path: C:\Documents and Settings\Celia\Cookies\celia@admarketplace[2].txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\Celia\Cookies\celia@adopt.euroclick[1].txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: C:\Documents and Settings\Celia\Cookies\celia@adopt.euroclick[2].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Celia\Cookies\celia@adrevolver[2].txt
Risk: Medium

Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\Celia\Cookies\celia@ads.adbrite[1].txt
Risk: Medium

Name: TrackingCookie.Addynamix
Path: C:\Documents and Settings\Celia\Cookies\celia@ads.addynamix[1].txt
Risk: Medium

Name: TrackingCookie.Addynamix
Path: C:\Documents and Settings\Celia\Cookies\celia@ads.addynamix[2].txt
Risk: Medium

Name: TrackingCookie.Addynamix
Path: C:\Documents and Settings\Celia\Cookies\celia@ads.addynamix[3].txt
Risk: Medium

Name: TrackingCookie.Addynamix
Path: C:\Documents and Settings\Celia\Cookies\celia@ads.addynamix[4].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\Celia\Cookies\celia@ads.pointroll[2].txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: C:\Documents and Settings\Celia\Cookies\celia@adtech[2].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\Celia\Cookies\celia@advertising[1].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\Celia\Cookies\celia@advertising[2].txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: C:\Documents and Settings\Celia\Cookies\celia@advertising[4].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@americanexpress.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@anad.tacoda[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@anad.tacoda[3].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@anad.tacoda[4].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@anat.tacoda[1].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\Celia\Cookies\celia@anat.tacoda[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Celia\Cookies\celia@atdmt[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Celia\Cookies\celia@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Celia\Cookies\celia@atdmt[4].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Celia\Cookies\celia@atdmt[5].txt
Risk: Medium

Name: TrackingCookie.Bfast
Path: C:\Documents and Settings\Celia\Cookies\celia@bfast[2].txt
Risk: Medium

Name: TrackingCookie.Bfast
Path: C:\Documents and Settings\Celia\Cookies\celia@bfast[3].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\Celia\Cookies\celia@bluestreak[1].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: C:\Documents and Settings\Celia\Cookies\celia@bluestreak[3].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@bnkicom.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Celia\Cookies\celia@##.serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Celia\Cookies\celia@##.serving-sys[3].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\Celia\Cookies\celia@burstnet[1].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\Celia\Cookies\celia@burstnet[2].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: C:\Documents and Settings\Celia\Cookies\celia@burstnet[3].txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\Celia\Cookies\celia@casalemedia[1].txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: C:\Documents and Settings\Celia\Cookies\celia@casalemedia[2].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: C:\Documents and Settings\Celia\Cookies\celia@CAZMKDKZ.txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@c##.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Bridgetrack
Path: C:\Documents and Settings\Celia\Cookies\celia@citi.bridgetrack[2].txt
Risk: Medium

Name: TrackingCookie.Clickbank
Path: C:\Documents and Settings\Celia\Cookies\celia@clickbank[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@cnn.122.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Hitslink
Path: C:\Documents and Settings\Celia\Cookies\celia@counter.hitslink[1].txt
Risk: Medium

Name: TrackingCookie.Hitslink
Path: C:\Documents and Settings\Celia\Cookies\celia@counter.hitslink[2].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\Celia\Cookies\celia@cratebarrel.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Coremetrics
Path: C:\Documents and Settings\Celia\Cookies\celia@data.coremetrics[1].txt
Risk: Medium

Name: TrackingCookie.Coremetrics
Path: C:\Documents and Settings\Celia\Cookies\celia@data.coremetrics[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@data1.perf.overture[2].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@data2.perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Celia\Cookies\celia@data3.perf.overture[2].txt
Risk: Medium

Name: TrackingCookie.Dealtime
Path: C:\Documents and Settings\Celia\Cookies\celia@dealtime[1].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Celia\Cookies\celia@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Celia\Cookies\celia@doubleclick[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Celia\Cookies\celia@doubleclick[3].txt
Risk: Medium

Milleruszk

Post one more fresh Hijackthis log please.

And in your reply give me an update on how your PC is running now.

Bamajim,

My machine is faster now but internet pages still seem a little slow in loading.

Can you tell from the log if I can do a system restore?  The last few times I tried to do a system restore it failed.  Attached is my HijackThis log.  Thanks for all your help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:56:37 PM, on 4/29/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zinio\ZinioReader.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optonline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optonline.net
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper\CCHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\Program Files\Panicware\Pop-Up Stopper\pstopper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=062006 serial=DR12WTX-9999998-YSP lang=EN
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.2\SetHook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioReader.exe /autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: ChatSpace Full Java Client 4.0.0.301 - http://63.102.226.240:8000/Java/cfs40301.cab
O16 - DPF: ChatSpace Full Java Client 4.0.0.320 - http://63.102.226.240:8000/Java/cfs40320.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://www.classlink2000.com/sites/FILES/wfica.cab
O16 - DPF: {7CF052DE-C74F-421B-B04A-3B3037EF5887} (CCMPGui Class) - http://64.124.45.181/chaincast/proxy/CCMP.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/51/install/gtdownls.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download/files/abasetup144.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10908 bytes

bamajim,

I deleted the panicware popup blocker.  I followed your instructions about drwatson but it could not be found on my machine?  Thanks.

Milleruszk

Appologies, there is a typo in my last reply, which I will fix.

You should type in drwtsn32 ->> O.k.

bamajim,

I opened the drwatson but there were no application errors shown in the bottom screen.  Thanks for your help.  System seems OK but I do get a pop up from Norton saying that I should reboot to take care of some security risk.  The popup looks legit but I don't know.