DaniWeb IT Discussion Community - 10,29,32,37,38,64,92,99

R6002 - Floating Point Support Not Loaded

united4real — Tue, 10 Nov 2009 23:42:25 GMT

I was playing my Football Manager 2010 nicely, then one day i came back from school, tried opening the game then it came with this error {Image - Attachment}. Any Idea On how i can fix it? Thanks In advance :)

Attached Images

Error.bmp (140.1 KB)

BSOD

tuknic — Tue, 10 Nov 2009 22:42:01 GMT

Running XP SP3. Recently ran an update, upon restart got BSOD.
Restart, BSOD. Frustrated I left it alone for the night. In morning booted up everything worked fine. Started BitComet, BSOD. Same issue with restarting, BSOD. Entering Safe mode was no issue. Deleted some junk. Left alone for the night again, booted up fine in the morning. Later again, BSOD. Unsure what to do at this point. It can be off for hours, then go to BSOD. Doesn't seem to have a pattern really. Has been on w/o issue for less than a day at this time. Getting same errors each time;
MACHINE_CHECK_EXCEPTION
0x0000009c
0x00000004
0x8054e5f0
0xb2000000
0x00070f0f

Any ideas?

why is my windows breaking up?

blade_costic — Tue, 10 Nov 2009 19:21:16 GMT

i have corrupted my computer, and unfortunately i had to reinstall windows from a disc given to me by HP. afterwards, i tried to reinstall the programs, a bit fast, and then I noticed after boot the logon screen breaks up for a few seconds. And for some reason, i cant use the touch pad scroll up on the side, and my remote doesnt seem to work either. why???

DNS Error on sites that are clearly working

Nakusya — Tue, 10 Nov 2009 15:12:38 GMT

Hi,
My colleague and I have a strange issue where certain sites give us a "DNS error - cannot find server" error. We share an office with a friend and his PC, connected to the same router is able to view all these options without any issues whatsoever.

I ping the sites and they dont exist. Some sites were visible and arent now. Its the same with Firefox, IE7 and Chrome.

I have quite a few firefox plugins including Xmarks as well as Dropbox installed. I did have Kaspersky 2009 installed but someone told me to uninstall it to fix the issue which I did. Unfortunately I cant find the disc so have installed AVG for the time being. I have also removed Xmarks but still get the same issues.

Any help gratefully appreciated

Regards

nakusya

win xp sp2 fin dont go with sp3 fin update

finc — Tue, 10 Nov 2009 13:34:18 GMT

I have Windows XP with SP2 in finnish language running and I can not update to SP3 finnish language.

It says that the installed Windows differs from the SP3 update package.

So what I do with this smart a?? computer?

Regards
finc

Network Icons missing

Impi — Tue, 10 Nov 2009 13:03:19 GMT

Long story as short as possible.
The Network connections Icons are gone... there are NONE.
Our client bought the pc in so we can rebuild it into a new box mobo and cpu.
We made backups before starting anything.
Everything was sucessful.
We then discovered that there were no network connection icons whatsoever.
The OS is Windows XP Home Edition SP3.
Making a new network connection doesnt work, it says it was successful but no icon is shown.
We followed several microsoft related kb's step by step to no avail.
We ran Virus and Malware scans.
We ran the hotfix given by M$ but it gave an error saying that SP3 is already installed.
We re-enabled and started services recomended by Microsoft in their kb's.
IP resetting and various other CMD commands dont work even in safemode with administator account.
It gives Access Denied.
But the says that it ran successfully.
Permissions were changed so that everyone(admin/users) had full control(just for fixing the problem).
Event viewer showed a few instances of DCOM giving errors as well as dchp.
Currently I am able to browse the net with the computer but mail is a big problem.
The install is OEM (we checked).

PLEASE any ideas or fixes etc are more than welcome

Modifying text in batch parameters

Tiur — Tue, 10 Nov 2009 11:19:22 GMT

Hi,

I have a batch that has 1 input parameter.
Parameter value can be like this: Test.xls

I want to change the text inside this parameter, so that it changes from Test.xls to Test.ppt or whatever file extension.

Does anyone know how to change the last 3 chars in a string in a batch file?

I know that this could be fixed by using two parameters, like 'Test' and 'xls', but this is not an option since in my original file im already using 9 parameters...

I really hope someone can help me with this :)

Here is some example content in my batch file (FILENAME = Test.xls):
@echo off
SET FILENAME=%1
REM Batch should now create and save 4 new variables,
REM which contains the whole filename, but with other parameters.

Thanks,

Malware,virus,spyware help ?????no clue

POVSTA — Tue, 10 Nov 2009 10:10:53 GMT

Hey guys, i just realised today my antivirus wasnt working, I have avg8 installed, Its been working fine till now, I click on scan does nothing, update does nothing, So i tried to reinstall, But still same Problem, So i tried a System Restore, Still the same, Next up i tried, To Install, NOD32 instead, this time, it won't even install, And same with AVIRA, and couple other anti virus programs, I'm sure i have a virus or malware or one of the other problems, But i have no idea or clue on how to takle this problem... Soo this is where you guys come in with your Expertise.... Any help or advice would be very much appreciated, THANKS IN ADVANCE GUYS, Hope to hear a solution...

Windows VIsta Starter Logo....

theemerchant — Tue, 10 Nov 2009 06:19:18 GMT

Good day everyone, I just have a little problem to share hoping anyone cold me with this.

I am currently using Windows Vista Starter edition and has enjoyed using it, except only for the fact that I can't find any ways to remove the logo on the lower right corner. I've tried to look for ways to remove it but I can;t seem to find any possible way.

Does anyone know a solution?

Vista can't access 2nd HD or DVD afer sleep/hibernate

mrt49er — Tue, 10 Nov 2009 05:33:12 GMT

Can't access folders (D: or DVD) after sleep/hibernate. The error is:
D:\ is not accessible. The file or directory is corrupted or unreadable.

All normal after restart.

AVG Free says "incompatible software"

four mile — Tue, 10 Nov 2009 03:24:17 GMT

Hi,

Can I get some help with finding some software on my machine that was flagged by AVG Free's v. 9? The message said to remove CF746002-94FB-101B-8C12-02608C454BFF, but I cannot find this string anywhere. I ran HijackThis, and here's the log, but I didn't see it in there. In one forum, I saw where another user had this problem and the bottom line advice was to ignore it and hit the skip button when AVG setup flagged this string. What next?

Tom

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:17:52, on 11/9/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\System32\NILaunch.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\System32\00THotkey.exe
C:\WINDOWS\system32\TPWRTRAY.EXE
C:\WINDOWS\system32\TFNF5.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Yahoo!\Common\YMailAdvisor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Net-It Launcher] C:\WINDOWS\System32\NILaunch.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 20
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [GetModule26] "C:\Program Files\GetModule\GetModule26.exe"
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1255572372908
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: karna.dat
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 5999 bytes

XP Help - Explorer.exe problems

FirstTimeUser — Tue, 10 Nov 2009 00:48:48 GMT

Whenever I load up windows, explorer.exe will not start. I can open up task manager and launch it from there, but it will close within the next ten seconds. I have done a Malware Bytes Anti Malware scan, and it turns out I have a vundo infection.

Here is my HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 7:41:02 PM, on 11/9/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Kevin's Desktop\My Documents\Downloads\FixVundo.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Content Filter\mfp.exe
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\HijackThis\imabunny.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=1060929
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=1060929
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=C:\WINDOWS\\system32\\userinit.exe
O1 - Hosts: ::1 localhost
O1 - Hosts: 91.206.201.8 oemantivir.microsoft.com
O1 - Hosts: 91.206.201.8 oemantivir.com
O1 - Hosts: 91.206.201.8 www.oemantivir.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (file missing)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll (file missing)
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (file missing)
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (file missing)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\m8F5I5cAG.exe" /runcleanupscript
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKCU\..\RunOnce: [UniblueRegistryBooster] "C:\Program Files\Uniblue\RegistryBooster 2010\launcher.exe" delay 20000
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O10 - Broken Internet access because of LSP provider 'icf.dll' missing
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolb...lerControl.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/.../GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary...o.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab57176.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{CDD0115A-5FED-479B-B841-811C9B5803F3}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL ,sozewema.dll c:\windows\system32\ralasife.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: yahidetuj - {ff0c3b8e-1f28-4d76-8cc5-7f6674b75d1d} - (no file)
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

Any help would be appreciated.

Service Control Manager / NT 4.0

aliashoori — Mon, 09 Nov 2009 20:48:05 GMT

I am working on a Wincor ATM model 2150xe. The OS of the Wincor is NT 4.0 and Procash NDC is installed on it. Its connection to host was X.25, and Eicon C91 Card was installed on it. I made necessary modifications on it to change it to TCP/IP, but after I install Ethernet card on it, I encounter the following error message:
__________
Service Control Manager
At least one service or driver faied during system startup. Use Event Viewer to examine the event log for details.
__________

The card I install is Intel® PRO/1000 MT Desktop Adapter, and is a normal Ethernet card, but I don’t know why this message is displayed?

Do you know how I can solve this problem?

If it is not solved, can I disable the Alert, so that it does not pop up, or when it pops up, it is avoided so that the ATM does not remain stopped?

Attached Images

Service-Control-Manager-S.jpg (14.6 KB)

Downloading Large Files & getting CRC Errors

Evil_genius82 — Mon, 09 Nov 2009 18:45:56 GMT

Hi guys,
I recently came across a small problem with downloading large files (using flashget or jdownloader). When extracting rar files, i was getting alot of 'CRC Errors - file is corrupt'.

After changing nic card, ethernet cables & so on, the simple problem was an update in AVG which was causing the problem.
By turning AVG's Link Scanner off will solve the problem.

Hope this helps anyone, as it took me days figuring it out.

Hp and dell laptops in Pakistan

danishamjad — Mon, 09 Nov 2009 15:32:04 GMT

pakistan best online laptop shops in pakistan

http://www.cabnet.pk

processor clock cycle eaten up, WHY????

MxDev — Mon, 09 Nov 2009 10:14:03 GMT

Hi,

I have a COMPAQ Presario v6700 laptop with Core2Due processor 1.8GHz, 2GB RAM, and Windows Vista Ultimate SP1.

My problem is all the time I see the processor cycles gage is full for nothing, I tried to look for any frenzy process that eats all processor

clock cycles like this, but I failed or by other means I couldn't reach it.

Could you tell if there's any workaround or solution to figure this out.

Thanks, Any help appreciated

My regards

Pc hangs after logon and shows blank screen

Weddie Jr — Mon, 09 Nov 2009 09:29:03 GMT

Hi All,

I just run a clean install on three of my dx2300 MT and the problem am facing is i can log on as administrator without any problem but cant log on using user or guest account.

The computers are running on XP Pro SP3 and joined to a work group.Any help rendered will highly appreciated.

Antivirus side effects

abdosagor — Mon, 09 Nov 2009 05:43:10 GMT

Antivirus is V important as a safety guard,unfortunately it has side effects one of them is attacking your active Trusted programs.One might try an exeptional option but even this utility is diabled in some antiviruses ,and if it was enabled the anti virus also attack your beloved program although it was (resting in peace) in the exeptions list!!??.

Hardrive Failures

cpd915 — Mon, 09 Nov 2009 05:16:02 GMT

I have a customer who's dell dimension computer's hardrive failed. Obvious constant clicking. I replaced the hardrive and reinstalled the OS Windows XP Pro. Customer had the computer back only a week with the same issue a second time.
I then rebuilt another newer Dell Dimension for the customer and put another new hardrive in the computer. I ran the computer at my shop for over a week to make sure things looked ok. I gave the computer back to the customer who has been using it on and off for over a week and then called and said the computer came up with the keyboard not found error.
I went to the customers house and booted the computer. Keyboard was found but the computer would not finish booting.
When I went into the bios, no hardrive was found. I opened the computer and sure enough the hardrive was clicking like it was dead again. Double checked all connections, tried to boot again and nothing. Dead drive again.
My question is this. Could all of this be happening because of a power issue at the customers site?

cannot connect to microsoft

nw5052001 — Mon, 09 Nov 2009 01:15:23 GMT

long story short
i cannot connect to microsoft or other antivirus/spyware sites. all other sites are ok it seems
i visited a site that was under attack and opened a podcast and my computer locked up and after restart it would not work. pretty much just a black screen.
i replaced the hard drive and loaded the original OS, drivers, etc from the original disc's. then installed windows XP upgrade.

i am able to connect to microsoft after following these steps as previously instructed:

1. Click Start > Run.
2. In the Run box, type the following: cmd
3. Click OK.
4. Type the following and then press Enter. cd..
5. Repeat the previous step until you get to the root level, or C:\>. Note that if your root drive is not C, the letter will be different.
6. At C:\> type the following: net stop dnscache
7. Press Enter. This disables the domain blocking feature of Conficker and you should now be able to reach security Web sites.

another symptom is also to update from microsoft it is necessary to RUN "services.msc" and restart "automatic updates" and "background intelligence transfer service"

i ran microsoft security essentials program and it removed worm conficker so it said......(problem still occurs).
i ran malwarebytes and it and it found nothing (log below)

Malwarebytes' Anti-Malware 1.41
Database version: 3129
Windows 5.1.2600 Service Pack 3

11/8/2009 11:57:55 AM
mbam-log-2009-11-08 (11-57-54).txt

Scan type: Full Scan (C:\|)
Objects scanned: 128135
Time elapsed: 27 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

then I ran Windows Live OneCare Safety Scanner and Malicious Software Removal Tool.

I still have to bypass the dns and restart auto update and BITS

if i run "regredit" there in every folder there is a file named "default" with no value dat 0000 is this normal?

thanks again for any help
NW

How to Transfer Song from iPod to Computer

stong034 — Mon, 09 Nov 2009 00:53:51 GMT

part one:How to Transfer Song from iPod to your windows Computer
part two :How to Transfer Song from iPod to iTunes Music Library?
part three:How to transfer music from iPod with iPod Rip and iPod Rip for Mac

part one :How to Transfer Song from iPod to your windows Computer
Transfer song/video from iPod to computer.When use Tansee iPod Transfer copy iPod songs out?
- Backup songs in iPod to PC.
- Copy iPod songs to new computer or notebook.
- Computer crashed.
- Share your iPod songs with friends.
- Copy all songs to a new iPod.
more:
http://www.converter123.com/Ipod-Sof...-Transfer.html
Step 1: Download Tansee iPod Transfer free trial versionhere, then install it.

Step 2: Connect iPod to your computer.

Step 3: Launch Tansee iPod Transfer and all the content of your iPod, including music and videos will display automatically, screenshot as follows:

http://www.converter123.com/uploads/...1_174848_1.gif

Step 4: Select the files to be transferred to your computer by click them. Ctrl key for multi-files select. Click right button of your mouse can select all songs.
Note: you can only select first 5 songs if you haven't purchase.

Step 5: Click "Copy" button to select output path and start to transfer songs or videos to your computer:

http://www.converter123.com/uploads/...1_174908_1.gif

part two :How to Transfer Song from iPod to iTunes Music Library?
Step 1: Transfer your songs / videos to a folder on your computer by Tansee iPod Transfer, e.g. "C:/music" . Step 2: Run iTunes, click "File", click "Add Files to Library..."

or "Add Folder to Library..." , select the songs in folder C:/music.
Or simply run iTunes, Drag your files in "C:/music" to your iTunes music Library.
Free download

Tansee iPod Transfer

part three :How to transfer music from iPod with iPod Rip and iPod Rip for Mac

Basically, there is a need for you to transfer music from iPod with iPod Rip and iPod Rip for Mac to avoid your files are lost. Now, I guide you how to Rip your iPod to hard

drives with Aiseesoft iPod to Mac Transfer. So you don’t need to worry about losing anything.

http://www.converter123.com/uploads/...103GL296-2.gif

Step 1: Download Aiseesoft iPod to Computer Transfer and install.

http://www.converter123.com/uploads/...103GH945-3.jpg

Step 2: Launch the program
Double-click the icon to run the software; or launch it from the “Start” Menu.
Step 3: Rip iPod files.
1) Run the software, and connect your iPod/iPhone to your computer via USB cable. After done, the iPod/iPhone icon and its library and playlists will appear in the Device list.
2) Open the library/playlist that you want to export files, and then check the music/movie you want to export in the file list to your computer.
3) Click the "Export to PC" button to select the destination of the exporting files and start ripping files

Otherwise, you could also choose the Export to local option from the Actions menu, and then export the files from your iPod/iPhone to actual device.

Tip: Use “Track filter” function to help you quickly browse your library by genre, artist and album. If you are using Mac, please use the iPod Rip for Mac software.
iPod Rip for Mac download.

http://www.converter123.com/uploads/...103GJ927-4.jpg

Aiseesoft iPod to Mac Transfer more

How to transfer SMS from your iPhone?

stong034 — Mon, 09 Nov 2009 00:52:55 GMT

Do you have a lot of SMS messages, some of sentimental value? Do you need to backup your SMS from your phone to pc? I found third party software for Windows

Mobile Phone to transfer SMS to your desktop computer. Here is the user’s guide (3 main Steps)
1. Download the third party software and Install it
2. Transfer the SMS from your mobile to PC
3. Restore SMS from pc to mobile

1.Download the third party software and Install it
Step 1 Download the SMS transfer tool here
http://www.softwarewikipedia.com/ind..._SMS_Converter
Step 2: Unzip the file you downloaded just now and copy the installation file "GodswMobileSMSTransferSetup.CAB" to your mobile device. You may need to

connect your device to a host computer using ActiveSync. You can also transfer the file using a memory card.
Step 3: On your device, navigate to the location of the CAB file using File Explorer. Click on the CAB file (displayed as the following screenshot) and click

"Install" to begin the installation.

2. Transfer the SMS from your mobile to PC
Now let’s use the software to finish the transfer job.
Step 1: Click "start" and then select programs.
Step 2: Select the “SMSTransfer” in your mobile programs list to run it.
Step 3: Click on "Backup Messages" in the main interface to backup you SMS messages in mobile phone.
Step 4: Decide the file name, file format and location (The default setting is OK) for your SMS file and click on "Save" to start to backup process. You will

see the follow screenshot.
Step 5: After backup completes, all the SMS messages has been backup in a file on your phone. You can save it in your memory card or transfer it to your

computer easily by ActiveSync.

3. Restore SMS from pc to mobile
Before backup, the mobile phone do not have any messages as a brand new phone.
Step 1: Click on "SMS Transfer" in programs list to run it.
Step 2: Click on "Restore Messages" in the main interface to save your SMS messages into mobile phone.
Step 3: Select and click on the stf file to be restored.
After Restore Succeed. You will see all you message come back to your phone now!
you see,your important messages will be backuped so easily.
Free download here
http://www.softwarewikipedia.com/ind...erter_download
enjoy it

XP Start up menu ., MS CONFIG

djm123 — Sun, 08 Nov 2009 22:52:11 GMT

Under MS config, how do I know what programs would be the absolute LEAST that should be running.

Also, given the way the descriptions are hmm shortened or terminated , how does a NOVICE know what the programs actually are?

Sound interruptions while playing music.

Pim — Sun, 08 Nov 2009 20:42:35 GMT

Hello,

I have some trouble when playing sound files with Windows Media Player or Media Monkey. When I play music there are very short interruptions. What could be causing this?

My system has 4GB RAM, an Athlon X2 and Soundblaster Audigy soundcard. It runs Windows XP

Thank you.

Online Virus Scan Question

genegold — Sun, 08 Nov 2009 19:18:45 GMT

A webmaster I've been dealing with about an allegedly virus-laden file claims that many online malware scan sites are invalid for scanning Win XP/SP3 files because the sites use Linux versions of A-V engines; i.e., it's necessary to use a Windows-specific program for a valid scan. Two examples online that use 20 to 30 well-known and lesser-known A-V engines to scan files are http://virusscan.jotti.org/ and http://www.virustotal.com. Is there any truth to the webmaster's claim?

NEC Lavie C Laptop

tctoobw — Sun, 08 Nov 2009 18:21:04 GMT

Need help!!!
can somebody tell me where to get nec Lavie C Laptop driver for windows xp.
thx in advance

cannot enter windows. GRUB, error 22

samsons17 — Sun, 08 Nov 2009 17:42:03 GMT

i had installed 2 os in my acer aspire 4736g
i had ubuntu and windows vista
i deleted the partition that contain the ubuntu os...
when i reboot my laptop, it comes out

GRUB loading stage1.5
GRUB loading, please wait...
Error 22

and it stuck there....cannot load windows
i knew that the laptop is finding the ubuntu os and cannot find it...
but i don't know how to enter bios, and how to set bios to remove ubuntu...

myb i am wrong, please correct me, and please help me...

Temporary Profile..

gsabra2 — Sun, 08 Nov 2009 16:20:09 GMT

Hello everyone, hope I am posting in the right place. Yesterday evening my son was playing flash games on the pc. Logged off normally and today Window Vista automatically goes to temporary profile instead of going to our profiles. None of our files are present but can be locate on hard drive under users.

Question: How can I get our user profile to come up upon boot up and get out of temporary profile? I tried system restore, didn't work. Appreciate.

block a website

coolbuddy059 — Sun, 08 Nov 2009 12:35:02 GMT

when we block a website through our browser Tools->Internet
option->privacy->sites than what process happens which prevent the site being not opened next time.

Explorer window - virus?

carlstone — Sun, 08 Nov 2009 10:42:58 GMT

Hi, this is my first post so please be patient if it get this wrong!!

I keep getting a pop-up window quoting MD5| and then a string of numbers but with a different url in the top of the window each time. I recently got sent a load of messages which McAfee picked up as having viruses in them, have scanned and quarantined but still get the same annoying window popping up.
A jpeg of one of the windows is attached.

Any help would be really appreciated.

Attached Images

md5.jpg (17.0 KB)

xbox hard drive to pc

cghizzoni — Sun, 08 Nov 2009 06:11:48 GMT

I was wondering if anybody would know?
I have an old computer with a bad hard drive and nothing else wrong. I also have an xbox with a cd drive problem but a good hard drive.
Is it possible to format the drive and use it?

Windows 7 persistent URL redirect

skyhydro — Sun, 08 Nov 2009 04:28:45 GMT

Hello,

I have read some URL redirect entries here and tried to clean my system the same way. At times things seem to be clean for a minute and then all of a sudden Windows defender finds things which claims to have been cleaned. I would appreciate your help in giving me directions for cleaning my system. Please let me know if you need more information.
I have run Malwarebyte, spybot, ccleaner, superantispyware, and ESET online cleaning. I have included logs from Malwarebyte, ESET,and hijackthis .

Malwarebytes' Anti-Malware 1.41
Database version: 3118
Windows 6.1.7600

11/7/2009 3:00:07 PM
mbam-log-2009-11-07 (15-00-07).txt

Scan type: Full Scan (C:\|)
Objects scanned: 159559
Time elapsed: 17 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
esets_scanner_update returned -1 esets_gle=53251
# version=7
# iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=3b4b5e9e5d6973479fb4020466b4dafb
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2009-11-07 01:28:06
# local_time=2009-11-07 08:28:06 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7600 NT
# compatibility_mode=5893 16776573 100 94 0 9143468 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=61214
# found=1
# cleaned=0
# scan_time=1809
C:\Windows\System32\drivers\atapi.sys Win32/Olmarik.OF virus (unable to clean) 00000000000000000000000000000000

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:55:37 PM, on 11/7/2009
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\GPSoftware\Directory Opus\dopus.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://m.www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKCU\..\Run: [Directory Opus Desktop Dblclk] "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /dblclk
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos...ineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...nt/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FC6A1E96-FC3B-4A15-8AAA-78B97D849F2F}: NameServer = 68.87.77.134,68.87.72.134
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe

--
End of file - 4306 bytes

virus

ctk_satz — Sun, 08 Nov 2009 02:31:32 GMT

C:\Documents and Settings\THULSI KANTH\fjekvm.exe\[UPX......
hii friends plz do help tis........ in my system virus has been detected for
every 5 min.... for this all d time i cleared it.. but again it s showing lik tat.....i.e...above mentioned....

How to create bootable image

Ancient Dragon — Sun, 08 Nov 2009 02:05:03 GMT

Now that I have Win7 set up the way I want it, is it possible to create an image on a bootable DVD so that if (and when) my computer crashes I can just reinstall everything from that image? I seem to recall something like that was done on my last job, but I don't know how.

Non Responsive Pages IE 8

djm123 — Sun, 08 Nov 2009 00:48:32 GMT

I just had the hard drive replaced...at times I get the HOURGLASS followed by the Thums up icon, pages become non responsive...I find myself going to task manager to close them..

My question/concern is where or what to look into on this, the browser, IE 8 should I go back to 6 or use firefox?

My machine should have enough space as I am not top heavy with music or files, yes I do defrag and clean temp files..

Other times it seems fine?

DAZED AND CONFUSED...

HELP!

msnproblem — Sat, 07 Nov 2009 22:51:50 GMT

i have a problem with msn i think i have a virus but it cud be enythin soo the problem is when i put in my password and try to sign in it says theres a update ive tryed lots of things to do the update but it just dosnt work can some 1 plzz help me! :?:

WIN LOGON ? Trojan

dmember — Sat, 07 Nov 2009 22:35:22 GMT

I had an attempted entry for WIN LOGON (have McAfee security via AOL...yes I do...), and despite multiple attempts to deny entry, it was persistent and I inadvertently clicked it in.

Is it a trojan or ?? and should I remove it?

Thanks

Cursor freezes in safe-mode screen - cannot get to safe-mode

casumil55 — Sat, 07 Nov 2009 19:41:35 GMT

When I first start up my computer, it goes to the safe-mode screen automatically. After this, my cursor will not move within the screen to get to the safe-mode to select it. Therefore, since the cursor sticks - windows counts down and then it recycles and does the same thing over and over.

Can use any help on what my next step might be here. Thanks!

Software wanted

tupac03 — Sat, 07 Nov 2009 16:04:34 GMT

I have a windows xp with vista. I have never had a mac. I am a musician and have an rs232 connector on my laptop. I also need a wave file player. Also my computer has no cd so I want sonic foundry and cakewalk software. Do you know where I can buy.? From the net downloaded?

Spy/Malware infestation

Hoggy12 — Sat, 07 Nov 2009 15:56:45 GMT

Hi there,

I am suffering an issue at the moment where if I search on a serach engine and click on a result the web redirects me to another site, this will happen 3/4/5 times before directing to the correct site. After a while I will also get another page open - www.malware-online.com and a pop to say i need to upgrade my antivirus. This freezes the pc untill it opens a 'winodws explorer' window within IE. The only way to get rid of this (if your quick enough) is through task manager.
I have run a virus scan (mcafee) and also run spybot and adaware, both normally and in safemode but it is still happening.

Would someone be able to have a look at this HJT log and let me know if there is anything in there that might explain what is happening?

Thank you in advance :)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:47:47, on 07/11/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe
C:\Program Files\MouseDriver\MouseDriver.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Toshiba TEMPRO\TemproTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
E:\itunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Mark Hogben\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virginmedia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common

Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft

Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web

Printing\hpswp_BHO.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [cfFncEnabler.exe] cfFncEnabler.exe
O4 - HKLM\..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe IE PA
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MouseDriverD9] C:\Program Files\MouseDriver\MouseDriver.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Toshiba TEMPRO] C:\Program Files\Toshiba TEMPRO\TemproTray.exe
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "E:\itunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common

Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] C:\Program Files\TOSHIBA\Toshiba Online Product

Information\topi.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [TOSHIBA Online Product Information] C:\Program Files\TOSHIBA\Toshiba Online Product

Information\topi.exe (User 'Default user')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: eBay.co.uk - Buy It Sell It Love It - {76577871-04EC-495E-A12B-91F7C3600AFA} -

http://rover.ebay.com/rover/1/710-44557-9400-3/4 (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-

home?tag=Toshibaukbholink-21&site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web

Printing\hpswp_BHO.dll
O13 - Gopher Prefix:
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common

Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory

Card Driver\o2flash.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search &

Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program

Files\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD

PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

(file missing)
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead

Systems\DVD\ULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 12503 bytes

Windows 7 vs. Windows XP.Which 1 is better?

hapizi84 — Sat, 07 Nov 2009 13:14:23 GMT

Which one is better? Windows 7 or Windows XP comparing the following:

1. cost
2. resources needed
3. speed
4. reliability

Strange Virus

pimpwack — Sat, 07 Nov 2009 12:37:04 GMT

Hi ive been trying to fix my pc for months and i think i have a strange virus that boots off an on my pc consistantly every 10 secs.. ill try to type this short since it might shut off while im writing thisnow ..

ive replaced the heat sink fan and power unit which got my pc to work for 4 dys before it started to do the whole loop on an off thing again untill i ahve to manaully shut it off from the power supply( XION atx power supply im using ) .

Im trying to see if i can get my pc clean so that i can figure out what hardware issue is causing my pc to do this another site mention that it could be a virus or worm that " reboots on & off randomly pc ".. heres my hijacklog file

let me know what i need to take out also i notice before all this started to happen.. ive installed a malware bytes program to get rid of spyware not sure if that would do it but please if guys can let me know that would great thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:21:28 AM, on 11/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\DeltaIITray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Jc\My Documents\HJT\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [DeltaIITaskbarApp] C:\WINDOWS\system32\DeltaIITray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\System32\DeltaIITray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {25365FF3-2746-4230-9DA7-163CCA318309} (Automatic Driver Installation Control) - http://inst.c-wss.com/m010g/EN/install/gtdownlr.cab
O16 - DPF: {264AED84-12F1-4CA1-8AA7-EB939AE58D8D} (STCWeb Control) - https://cvpn.onss.com/CACHE/webvpn/s...ies/stcweb.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1199676726031
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Cisco AnyConnect VPN Agent (vpnagent) - Cisco Systems, Inc. - C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

--
End of file - 5952 bytes

error message when booting pc

AnimeKing — Sat, 07 Nov 2009 08:54:28 GMT

"windows could not start because the following file is missing or corrupt:
/system32/hal.dll.
Please re-install a copy of the above file."
i have pentium 4 processor
os-windows xp professional

i hav tried with d xp cd......wen i kept it n den rebooted d above same message came.

Windows XP Pro unable to install

Zeki — Sat, 07 Nov 2009 07:48:33 GMT

Hi everyone,

I am trying to fix a pc for a friend. He has a HP Pavillion with a SATA HD (1) and SATA Lightscribe DVD Writer (2).

System is set to Boot from DVD first then HD.

The HD is the Primary Master and the DVD is the Primary Slave.

Installation of XP Pro begins but at first reboot the installation process starts all over again rather than picking up from where it left off.

Just to make sure I have taken the HD out an formatted (NTFS) it in my own machine to make sure it is empty. I can write and save to the HD while it is in my PC without any problems.

Does any one know what is going on and have some solutions?

dll error

johnspace27 — Sat, 07 Nov 2009 06:32:36 GMT

hi guys, i need ur help..my computer is experiencing a dll error everytime i boot my computer and appear as "BHO.dll" it says like i deleted something and need to reinstall a particular file..can anybody suggest and help me??? thank u very much!!

hung problem

andrewkho — Sat, 07 Nov 2009 03:19:58 GMT

ive got hung up problem, my mother board is sata 300, also hard drive, i can run some of the program like surfing, its just hung up, when i open some application/network...., i tried cleaning up the processor, vedio card but same result.....,,, what could be the problem?

hELP! Blue Screen Ntfs.sys

hetixo — Fri, 06 Nov 2009 23:17:18 GMT

hI

I'm getting a persistent Blue Screen of Death which seems to kick in after the computer has been left idle for a while and the CPU starts racing and I get a blue screen. It first happened after I was watching a film off a friend's USB stick.

This is the latest I got.

"Windows Shut Down to Prevent Damage etc etc...

Ntfs.sys

page fault in Non-paged area

tech info

STOP: 0X00000050 (0XF1000009, 0X000000000, 0XB9D6AE16, 0X000000002)

Ntfs.sys - Address BD96AE16 BASE AT B9D46000, DATESTAMP 48025BE5

Beginning dump of physical memory"

I'm runniing windows xp home edition 2002 version service pack 3

Any help much appreciated

Thank you

Hetixo

Some tutorials or material explaining the registry...?

Grand666 — Fri, 06 Nov 2009 18:14:26 GMT

hey guys,
im new here and this is my first question.

my pc runs a bit slow and im sick of trying all those system care products that people claim to work. ive tried so many but it just seems worthless. i know my best bet is to reinstall windows clean but i dont have an external hard drive and cd's will be take alot of time.

so i was wondering if some of you gurus out there can maybe spare some time and tell me where i can learn exactly how the registry works? alll those DWords and how it relates to your programs. what happens when you delete one of those keys and how you can manually clean your registry.
ive noticed some programs that i uninstalled still have all their keys in the registry. i just dont want to delete them coz im scared. lol
is there any resources that explain exactly how it works and how to manually fix it?
im studying fo rmy CCNA to take the test next year. yaya."-)

News Story Avoid Windows Denial of Service

EddieC — Fri, 06 Nov 2009 18:00:01 GMT

Microsoft on Tuesday is set to release six security updates, three of which it has deemed critical and apply only to versions of Windows other than Windows 7. Microsoft released advance notice of its Security Bulletin for November, on Nov. 5. The bulletin itself will be released on Tuesday along with remedies, as per its normal patch cycle. Other alerts are labeled "important," one of which involves a denial of service vulnerability for Windows; the other two affect Excel. Redmond will reportedly release updates for Windows XP, 2003 and 2007 and Office 2004 and 2008 for Mac OS X.

Save the one warning of DoS attacks, all the vulnerabilities involve remote code execution, as did the 13 patches released by Microsoft on October 13, fixing nearly three dozen flaws, all of them critical. A critical warning is one "whose exploitation could allow the propagation of an Internet worm without user action," according to the company, while one that is one step down at important, is said to be one that "could result in compromise of the confidentiality, integrity, or availability of users data, or of the integrity or availability of processing resources."

Microsoft on Monday also released an update to MS09-054, the part of its October patch-fest that applied to Internet Explorer. This one, which went somewhat under the radar, as explained on the company's technet Website, addresses the way pages are rendered.

Toshibe laptop keeps starting on control mode

byul — Fri, 06 Nov 2009 16:26:06 GMT

every time i start my toshiba laptop, it's on control mode (like i'm pressing control to go to shortcuts). and in order for me to get to normal mode, i would have to restart my computer around 5 times. is it a virus? my computer is around 3-4 years old.

No Internet on Laptop

BleedingPatriot — Fri, 06 Nov 2009 15:59:06 GMT

I have a Sony Vaio Laptop that I purchased about 1year ago. It worked great for about 6 months or so. I purchased a new laptop around that time and haven't touched it since. I would like to sell it now and when I went in to test it and make sure everything was working OK, I noticed that the internet would not work...I installed Chrome, FireFox, IE6, IE7, and IE8. None of them worked, I also went as far as formatting the hard-drive, reinstalling Vista, and reinstalling all three of these browsers and it still will not work. I am really at a loss to figure out what is happening here??? The only thing that is consistent is the fact that when I try to open any page I get a message that states (for example...)"The server at www.google.com is not responding". Any input would be greatly appreciated.

Click on Search Results and redirected to non-related page

MPRatamacue — Fri, 06 Nov 2009 15:30:18 GMT

Every I conduct a search for something using Google, I get the true results listed but when I click on the result I am redirected to a page on Virus software, travel sites or something similar. I can open the results if I right click the link and get it to open in a new tab.

Additionally, unless I run IE8 on Admin Mode for Vista, I continually crash.

I have run McAfee and gotten 300+ instances of Virnut.n.gen repaired and had 7 instances of Artemis! quarantined.

My HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:20:56 AM, on 11/6/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\wpcumi.exe
C:\Program Files\Microsoft LifeChat\LifeChat.exe
C:\Program Files\QuickTime\QTTask.exe
D:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\X3watch\x3watch.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\System32\rundll32.exe
C:\Windows\Explorer.exe
C:\Windows\ehome\ehmsas.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\msfeedssync.exe
L:\Downloads\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\System32\msconfig.exe" /auto
O4 - HKLM\..\Run: [NeroCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LifeChat] "C:\Program Files\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [x3watch] C:\Program Files\X3watch\x3watch.exe
O4 - HKLM\..\Run: [Regedit32] C:\Windows\system32\regedit.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [igndlm.exe] D:\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [A00F59FC2A.exe] C:\Users\Michael\AppData\Local\Temp\_A00F59FC2A.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ter8m] RUNDLL32.EXE C:\Windows\TEMP\msxm192z.dll,w (User 'Default user')
O4 - Startup: 9298734.lnk = C:\Users\Michael\AppData\Local\Temp\SMScvhost.exe
O4 - Startup: santa.bat
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O15 - Trusted Zone: http://www.convergysworkathome.com
O16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_se...zTCPConfig.CAB
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/noc...tup1.0.1.1.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ca..._2.3.6.108.cab
O16 - DPF: {549F957E-2F89-11D6-8CFE-00C04F52B225} (CMV5 Class) - http://couponmom.coupons.smartsource...ad/cscmv5X.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/...oUploader3.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {A084A130-28AE-4B32-B51A-1C8CE164BC88} (WNICheck2 Class) - http://www.convergysworkathome.com/AppHardT.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/...ploader4_5.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: C:\Windows\system32\kbdnet.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: fastnetsrv Service (fastnetsrv) - Netopsystems A - C:\Windows\system32\FastNetSrv.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - D:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 10428 bytes

Connecting to a-connect Virus.

Lungis — Fri, 06 Nov 2009 14:38:24 GMT

I have an Acer 5720 Travelmate Laptop. Recently ugraded my Vodafone E220 Datacard to the latest software. Whenever I connect to the Internet id drops the connection and try to connect to A-CONNECT ( bunkown to me). Somebody told me that it is a possible virus. But I have KASPERSKY Internet Security ( anti-virus loaded). HELP ! ! ! ! how can I delete/remove this virus.

Multiple Viruses

munecka — Fri, 06 Nov 2009 14:06:13 GMT

I've clicked on some link and now I have multiple critical viruses. Trojans, key logger variant, etc. I'm not able to access the registry, I think damage has been done to it. What can I do? Reformatting the computer isn't a problem for me. There's nothing on it that I need to keep. Is this the best option? If so, how do I do it?

Matrox Pulsar Board Driver

audigy642 — Fri, 06 Nov 2009 13:52:45 GMT

Hi,

I have an old computer that is runs a third party operating system ontop of windows 98 and has a Matrox Pulsar imaging board in it.

The pulsar board is no longer in production and I need the drivers for it because I've had to restore the computer back.

Does anyone know where to find these drivers?

Audrey

how to get back history of firefox private browsing??

fumnimda — Fri, 06 Nov 2009 08:02:11 GMT

i 'm sure here is n't the right place for asking this question,but i couldn't guess where to write this question. please forgive me.
i have recently update my Firefox.
i was clicking any option of it and unwanted browsing some sites in "private Browsing" mode in new firefox.after a day i wanted to access one of browsed website but i couldn't find it anywhere.
i search in google and found out that browsing in Private browsing will not keep any history.
is there any way to back my browsed history?one site was really vital for me.i need it.
:'(

thanks for your help.

HIjackthis log/can someone help

ryun — Fri, 06 Nov 2009 05:35:47 GMT

Here is my Hijack this log can somone check it out and tell me what is safe to get rid of. I think I know of a few but figured i had better check with the people who know best. Thanks Ryun

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:34:39 PM, on 11/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Tall Emu\Online Armor\OAcat.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Tall Emu\Online Armor\oasrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\DigitalPersona\Bin\DpHost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxdicoms.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\ps2.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\SM1BG.EXE
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe
C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Tall Emu\Online Armor\oaui.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Tall Emu\Online Armor\OAhlp.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = ,
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRA~1\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [QAGENT] C:\Program Files\QUICKENW\QAGENT.EXE
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [lxdimon.exe] "C:\Program Files\Lexmark 3500-4500 Series\lxdimon.exe"
O4 - HKLM\..\Run: [lxdiamon] "C:\Program Files\Lexmark 3500-4500 Series\lxdiamon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LGBLiveUpdate] C:\WINDOWS\system32\lgbpd.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AT&T Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\The Print Shop 23\Remind.exe
O4 - Global Startup: Harmony Monitor.lnk = C:\Program Files\Logitech\Harmony Remote\EasyZapperMonitor.exe
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1252243607234
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {928626A3-6B98-11CF-90B4-00AA00A4011F} (SurroundVideoCtrl Object) - http://autos.msn.com/components/ocx/survid/MSSurVid.cab
O16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) - http://autos.msn.com/components/ocx/...or/Outside.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/...sh/swflash.cab
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe
O23 - Service: lxdi_device - - C:\WINDOWS\system32\lxdicoms.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\OAcat.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 8982 bytes

slow windows xp (32 bit) startup with kaspersky internet security 2010

Zman420 — Fri, 06 Nov 2009 05:00:39 GMT

Recently I have been having a slow XP startup that after many sleepless nights I have narrowed down to Kaspersky Internet Security 2010. I believe I have a solution that you may try if you are having the same problem.
Just disable it from running at system startup. Settings/Protection in the application menu. After you have done this go into the task scheduler. Control Panel/Performance and Maintenance/Task Scheduler. It should be near the bottom.
I have scheduled Kaspersky as a task to run everytime I logon and after 4 successive boots, I am having no slow startup. I admit it's not running at computer startup, but if it impedes my use of the computer then it's not really worth it IMO. You might try to run the task at system startup, but I haven't tested it. I haven't really tested this either, but it seems hopeful. Hope this may help anyone with the same problem. I couldn't find any answers.

print problem

opgaur.it — Fri, 06 Nov 2009 04:22:03 GMT

I am unable to print from website and outlook and also explorer unable to vew some websites
can someone give the solution

I am using winxp, sp2, and IE8

Anyone using LMMS?

evstevemd — Fri, 06 Nov 2009 03:59:43 GMT

I'm curious if anyone is using this Studio and how does it match FL studio. I ahve not used it but wan't to know how is it doing ;)
It is -->Here

Verdict on Windows 7!

cyb3rl0rd1867 — Fri, 06 Nov 2009 02:49:59 GMT

A friend was asking me if I thought upgrading to windows 7 was a good idea. Since I don't have windows 7 I told him I would get back to him after I asked around. So, what is your personal opinion of Windows 7? No links to reviews or anything like that, just personal experience. Thanks a lot!

IRQL_NOT_LESS_OR_EQUAL showing on BLUE SCREEN

chinchun19 — Fri, 06 Nov 2009 01:05:53 GMT

My DELL laptop Core-2-duo 1GB RAM / 120GB HDD / Windows VISTA, but i remove it and install Win XP 4 month ago..I have 3 partition in my HDD other than C/

Yesterday, suddenly its started rebooting automatically... Also i did not install any sftwr or any hardwr in it yesterday..I can't even get in safemode, last known confi. and normal mode.. every time it again rebooting by itself.. this is the first time i encountered with this kind of problem..

whn I disable restart mode it shows

QUOTE
A problem has been detected and windows has been shut down to prevent further damage to your computer .

IRQL_NOT_LESS_OR_EQUAL

(blah blah blah ... )

Technical Information:

*** STOP: 0x0000000A (0x00000000, 0x0000001C, 0x00000001, 0x804FAD30)

I tried every thing but it is not wrking

Anybody knows how to solve it ? (Other than formatting ...)

Please

Computer acting up, veruy slow (Please Help)

ep2002 — Thu, 05 Nov 2009 23:45:34 GMT

Ok, here are the issues I'm having & yes I run a lot of anti programs including Advanced System Care which some say they love & a few people say caused problems.

Honestly I can't remember when the problems started, at least 4-6 months ago & it may have started after I bought the ASC, but I just exited out of it & still no change.

1. I click on "my computer", & it takes about 20-30 seconds to let me have access to the window. That's even after rebooting which I just did.

That also happens with Fx, but when I've rebooted, everything is very quick until I leave the computer & come back, then it takes several minutes to let me have access.

Also in the last several days I'm having problems with TB (thunderbird) & I didn't have hanging problems with TB b4.

2. This is the most frustrating thing.

At first I thought it was the site, but then it started happening on 3 different sites & after bitching & arguing, I have to admit it may very well be on my end.

Either:

a) www.cj.com

when I login into the membership area (main index page is fine), the CSS files don't load so I can't do anything within the site. Others don't have this problem. That's on both Fx & IE.

b) www.odesk.com

When I go to edit one of our job postings, it won't let me save it saying the start date is wrong even though it's not.

After weeks of them testing it, it works fine in Fx for them, but not for me. I just tried it again & Fx just came out w/ an update & still can't do it.

In IE it works fine

c) www.freedomvoice.com

Tried to upload audio files & make changes to my acct., can't do it in Fx, only in IE.

They say they tested it & there's nothing wrong. Now I didn't try it out after shutting down Fx which I should have done & I don't want to touch anything to test it b/c it's the way I want it now.

My assistant also had this problem in Safari & Fx, but he's on a MAC & you know most coders can't code properly for MACs, so that doesn't really tell me much.

d) www.Hyperoffice.com

I add a new day in the notes area & instead of it taking me back to the last window, it takes me all the way back to the folders area.

It's intermittent & they claim there's no problem on their end.

I do have to say one thing. Most if not all of these sites are poorly coded I think. I'm not a coder, but I know how sites work & I can tell when it's garbage code.

The thing is, no one else is having the problem. I have the latest version of Fx, I hate IE, sometimes the site works on IE, but I don't use IE daily enough to know if it's just Fx or what is going on.

It's stressing me out, wasting my time, PLEASE HELP!

Thanks

Michelle
----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:35:59 PM, on 10/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\oDesk\oDeskCommonPrefs.exe
C:\Program Files\Shelltoys\Personal Assistant\assistant.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\eFax Messenger 4.4\J2GDllCmd.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Garmin\gStart.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\oDesk\oDeskTeam.exe
C:\Program Files\oDesk\oDeskShare.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101677&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [pdfFactory Dispatcher v3] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe" /source=HKLM
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [Carbonite Backup] C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Prefs] C:\Program Files\oDesk\oDeskLaunch.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\\SmartDoctor.exe /start
O4 - HKCU\..\Run: [Personal Assistant] C:\Program Files\Shelltoys\Personal Assistant\assistant.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [eFax 4.4] "C:\Program Files\eFax Messenger 4.4\J2GDllCmd.exe" /R
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [gStart] C:\Garmin\gStart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quick View Plus.lnk = ?
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} (Java Plug-in 1.6.0_13) -
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize2/pcpitstop2.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\570\G2AWinLogon.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CarboniteService - Carbonite, Inc. (www.carbonite.com) - C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\570\g2aservice.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 11271 bytes

internet connection

coud_ren_26 — Thu, 05 Nov 2009 23:00:50 GMT

I can browse the net but when I will download a software there is an error. "The Internet Explorer cannot display web paged...What you can try: Diagnose System problem...more information" I tried to diagnose it and the system do not see any problem. SSL and TLS protocols are enabled. What can I do to fix this problem?thanks

The virtualization, called "XP mode".

Alex_ — Thu, 05 Nov 2009 20:30:07 GMT

Hello everybody. I wanted to ask what does exactly Win7 do with their so called xp mode. As i have seen from various clips, this "mode" is actually just a virtual machine that runs win XP. Am i right?

If the answer is yes then how come not all processor can support the "mode"? I mean, a virtual machine is just a program that creates/assigns virtual resources for a process, isn't it? What is so special then about this xp virtualization that not all processors can support?

Secondly, when a distinct program is run from xp mode (but without xp's desktop) does it still run virtualized? Is it still XP's program, or they use a different technick (like emulating the xp's environment . Ex wine for linux) ?

And thirdly, concerning the CPU(this is less related to Win7 particularly ), OS virtualization != CPU's virtual mode... isn't it?

By cpu virtual mode i mean the ability to expand the limit of memory addressing . For example 8086 real mode can address to 1 MB of memory while virtual mode - 1 GB (if i'm not mistaken).

Recover Hard-Deleted Items from Exchange

maximusimo — Thu, 05 Nov 2009 11:18:42 GMT

Hi,

Microsoft Exchange 2003 on Small Business Server 2003.

Within

Exchange System Manager > Servers > Servername > First Storage Group > Mailbox Store properties > Limits

the Keep deleted items for days & Keep deleted mailboxes for days are both set at 30.

Now, i know within Outlook you can go into Deleted Items and Recover Deleted Items but this happens on the client itself and only with 'soft deleted' items. Is there a way that items in 'Recover Deleted Items' can be viewed in some other way than on the actual users machine? Possibly recover to another Mailbox or the like?

The Ultimate Tweak: Vista/XP install on large cluster sizes

sagulili — Thu, 05 Nov 2009 09:29:08 GMT

The ultimate tweak: Windows Vista or XP installs on larger than default allocation sizes. Even 64KB cluster size. Lesser fragmentation. Make your drive perform like RAID.

The choice of cluster size has an impact on real-world performance, though for most people it is not all that significant. In a nutshell, larger clusters waste more space due to slack but generally provide for slightly better performance because there will be less fragmentation and more of the file will be in consecutive blocks. This occurs because when clusters are larger, fewer of them are needed than when they are small. A 10,000 byte file would require three 4 kiB clusters but only one 16 kiB cluster. This means this file will always be in a contiguous block if stored in a 16 kiB cluster, but could be fragmented if stored in a 4 kiB cluster size partition. The slack tradeoff is a waste of 4 kiB more storage in the case of the 16 kiB clusters, but, this is hardly an issue now with the gargantuan sizes of hard drives nowadays. Small cluster sizes also have a negative effect on partition because they require larger file allocation tables, to manage their much larger numbers of clusters.

Due to this advantage on real world performance of larger cluster size, many have tried to install windows on partitions with cluster sizes larger than 4kb but to no avail. Windows will not allow installing itself on a partition with a cluster size larger than the default allocation size of the NTFS file system... but there is a way around this. Though you cannot use anymore system restore and windows backup, and the installation disk for repairs but who uses them anyway. And who cares when your drive works like RAID.

Five years ago, I have tried for weeks to install Windows XP on a drive formatted with 64KB cluster size with no success. I have searched the net for related articles on how to install Windows on a 64KB cluster size drives or partitions and I found nothing. Okay, let’s cut to the chase, I know you’re itching to do this. Here’s how it works:

1.Partition your drive so that it has two volumes. The first partition you set as the physical volume must be 10 MB or larger and format it with FAT32 or NTFS file system with default allocation size. You should create this partition first because this will become your boot drive and you would want it to be on outer most part of the disk for performance reasons and label it as BootDrive or SystemDisk (any label would do).
2.Create another partition and format it with the NTFS file system with a cluster size of 64KB or 32KB or 16KB, whatever you prefer, but for better performance larger means better as it means less fragmentation and lesser head movement. Label the partition as OSDrive, Windows or anything.
3.Run your windows installation disk. When the installation prompts you to choose which drive or partition you may want to install Windows, choose the second partition you made and it works like magic. It's that easy.
And, oh, besides the two partions that I have told you to create, you might want to hide first your other drives or partitions before installation, or better disconnect it, as Windows might install its system files on those disk if those drives or partitions have default allocation sizes. This tweak also works on Vista. Enjoy!

so i've lived with IE 8 64bit and?

cbusen — Thu, 05 Nov 2009 07:03:22 GMT

just so i could use all the RAM i bought i upgraded to win xp 64bit about six months ago and i haven't used IE 64 bit or tried to until about two weeks ago? whats the difference between the two and is it worth them writing code for it? why can't it be my default browser? should i go back to not even knowing its there?

virus

send2raheel — Thu, 05 Nov 2009 06:20:53 GMT

tell me how many virus issue and problem in windows Xp and windows 7.tell me a name of issue and problem names.

raheel

Help! How to Retrieve Files From Unreadable Partition

spidey — Thu, 05 Nov 2009 06:19:42 GMT

HELP PLEASE!!

I got 2 partitions C and D. C: is my main drive. Both have OS installed.

A week ago, C: is not starting up. Since then, I'm using D:. When I was trying to retrieve a file stored in C:, a message appeared saying C is not formatted and asked if I want to format it now. I also tried to explore Drive C but same message appears after hanging for some seconds.

HELP, I think my C: got damaged. Is there any way I can RETRIEVE files from that drive? I got tons of important files saved there. My friend suggests Partition Magic. I just don't know if it would work.

Hope to hear from you soon. Thank you.

Un able to instal an antivirus

abdosagor — Thu, 05 Nov 2009 04:13:07 GMT

I performed a repair operation to my( XP professional SP2) system, two things occured ; !\ I lost internet explorer 8, failed to reinstal it ! ?
2\I failed completely to instal any antivirus . I used Google Chrome ,
opera to connect to the web .Can any body help ? THANKS in advance

Super easy question

snakeplyr — Thu, 05 Nov 2009 02:41:02 GMT

I haven't wanted to ask anyone this for fear of sounding stupid. I have a PC running an AMD processor and a geforce video card. It's hard to find mobos with that combination. Most mobos that I like have an AM3 socket but an ATI Radeon video chipset. I don't do SLI so one PCI-E 2.0 slot is enough. Will my geforce card work on these mobos even though they are ATI chipsets?

Here is a link to a random mobo just like the ones I'm talking about. This is not the one I want, just the first good example that I found.
http://www.tigerdirect.com/applicati...?EdpNo=5235299

Thanks in advance

Advantages/Disadvantage Help

lovelee — Thu, 05 Nov 2009 02:17:47 GMT

I need some advantages and disadvantages of windows operating system. Please do no compare to Mac. Just basic facts. Any information will be extremely helpful. Thank You!

Windows Vista and A Virus?

khwhitaker — Thu, 05 Nov 2009 02:00:42 GMT

I am running Windows Vista home edition. Recently I think a virus or something has ruined my computer. I can no longer download any program from the web and many of the programs that reside on my hard drive will not function. I am led to believe their is a registry problem. Microsofts suggestions of doing restores just made the entire situation worse. Any help appreciated.

Taskbar changes color and internet disconnect

navnath.j84 — Thu, 05 Nov 2009 01:23:20 GMT

Hi to everyone I'm new here!!!! Initially my problem started with no sound after reboot & internet disconnection after few minutes of reboot. Now since I turn windows audio service to automatic, sound related issue seems to be gone. I tried everything that I know from google searching like scanning with Malwarebyte's Ant-Malware, Trend-mico's HouseCall, Combofix etc. but the issue of taskbar color change due to which I loose my internet connection still exist:angry:

Here are all log reports:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:44:30 AM, on 11/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\rundll32.exe
D:\My IMP. Program files\Capture\Capture.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Intel\IDU\awServ.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\fsproflt.exe
E:\Program Files\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe
E:\Program Files\UGS\Imageware Licensing\12.00.000\bin\iwlmd.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSour...ctid=CT1978305
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [Capture .NET] "D:\My IMP. Program files\Capture\Capture.exe"
O4 - Startup: AutorunsDisabled
O4 - Global Startup: AutorunsDisabled
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} (System Requirements Lab) - http://intel-drv-cdn.systemrequireme...eqlab_srlx.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1249759713703
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB49111A-80B5-405E-9E80-12F82DCD5FA6}: NameServer = 203.192.198.7,203.192.198.5
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\acaptuser32.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - C:\Program Files\Intel\IDU\awServ.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - C:\WINDOWS\system32\fsproflt.exe
O23 - Service: Imageware 12 License Manager - GLOBEtrotter Software Inc. - E:\Program Files\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe
O23 - Service: InstallShield Licensing Service - Macrovision - C:\Program Files\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O23 - Service: ZL - Unknown owner - C:\DOCUME~1\NAVNATH\LOCALS~1\Temp\ZL.exe (file missing)

--
End of file - 8835 bytes

ComboFix 09-11-04.02 - NAVNATH 11/05/2009 0:13.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2038.1543 [GMT 5.5:30]
Running from: c:\documents and settings\NAVNATH\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.1356 [VPS 091103-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents
C:\Recycle
c:\recycler\S-1-5-21-0306782404-0403296150-468932291-1673
c:\recycler\S-1-5-21-1690392628-9639070320-204829838-7964
c:\recycler\S-1-5-21-4340829974-8025113630-805332040-7178
c:\recycler\S-1-5-21-4404245323-2510926375-959924715-4889
c:\recycler\S-1-5-21-4526544003-9131078385-546885970-0446
c:\recycler\S-1-5-21-4642916222-7686821538-614090642-3753
c:\recycler\S-1-5-21-5504431452-5768450549-560062291-7959
c:\recycler\S-1-5-21-7762691254-4116871461-074637373-8948
c:\recycler\S-1-5-21-7804478225-5844174979-977742103-8620
c:\recycler\S-1-5-21-7872991201-0422058234-947134708-6514
c:\recycler\S-1-5-21-796845957-1614895754-682003330-500
c:\recycler\S-1-5-21-8752049922-5241934417-628490504-9581
c:\windows\system32\28463
c:\windows\system32\tmp1.tmp
c:\windows\system32\tmp2.tmp
c:\windows\system32\tmp3.tmp
c:\windows\system32\tmp61.tmp
c:\windows\system32\tmp62.tmp

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_OREANS32
-------\Service_oreans32

((((((((((((((((((((((((( Files Created from 2009-10-04 to 2009-11-04 )))))))))))))))))))))))))))))))
.

2009-11-04 14:40 . 2009-11-04 14:40 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\Malwarebytes
2009-11-04 14:40 . 2009-09-10 09:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-04 14:39 . 2009-11-04 14:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-11-04 14:39 . 2009-09-10 09:23 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-02 20:43 . 2009-11-02 20:43 -------- d-----w- c:\windows\system32\wbem\Repository
2009-11-02 13:16 . 2009-11-02 13:16 319488 ----a-w- c:\windows\HideWin.exe
2009-11-01 13:56 . 2009-11-01 14:05 -------- d-----w- c:\program files\SystemRequirementsLab
2009-10-31 19:19 . 2009-10-31 19:45 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\GetRightToGo
2009-10-30 00:17 . 2009-10-30 00:11 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2009-10-30 00:17 . 2009-10-30 00:17 151392 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\DownloadGuardBHO.dll
2009-10-30 00:17 . 2009-10-30 00:17 428936 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\DownloadGuard.exe
2009-10-30 00:17 . 2009-10-30 00:17 862040 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\threatwork.exe
2009-10-30 00:17 . 2009-10-30 00:17 554280 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\sbap.dll
2009-10-30 00:17 . 2009-10-30 00:17 15880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lsdelete.exe
2009-10-30 00:17 . 2009-10-30 00:17 206944 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lavamessage.dll
2009-10-30 00:17 . 2009-10-30 00:17 390288 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lavalicense.dll
2009-10-30 00:17 . 2009-10-30 00:17 537576 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aawapi.dll
2009-10-30 00:17 . 2009-10-30 00:17 212480 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\VipreBridge.dll
2009-10-30 00:16 . 2009-10-30 00:17 283944 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Vipre.dll
2009-10-30 00:16 . 2009-10-30 00:16 370744 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\UpdateManager.dll
2009-10-30 00:16 . 2009-10-30 00:16 163728 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\ShellExt.dll
2009-10-30 00:16 . 2009-10-30 00:16 194104 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Savapibridge.dll
2009-10-30 00:16 . 2009-10-30 00:16 1223976 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\SBTE.dll
2009-10-30 00:16 . 2009-10-30 00:16 242984 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\SBRE.dll
2009-10-30 00:13 . 2009-10-30 00:14 5908024 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll
2009-10-30 00:13 . 2009-10-30 00:13 327000 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\RPAPI.dll
2009-10-30 00:13 . 2009-10-30 00:13 87496 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\PrivacyClean.dll
2009-10-30 00:13 . 2009-10-30 00:13 933120 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll
2009-10-30 00:13 . 2009-10-30 00:13 640608 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AutoLaunch.exe
2009-10-30 00:11 . 2009-10-30 00:11 815760 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2009-10-30 00:11 . 2009-10-30 00:11 822904 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2009-10-30 00:11 . 2009-10-30 00:11 1638104 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2009-10-30 00:11 . 2009-10-30 00:11 788368 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
2009-10-30 00:11 . 2009-10-30 00:11 1179232 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
2009-10-30 00:11 . 2009-10-30 00:11 93360 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Drivers\SBREDrv.sys
2009-10-30 00:08 . 2009-10-03 08:15 2924848 -c--a-w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
2009-10-27 08:52 . 2009-10-27 08:52 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\OpenWith.org Cache
2009-10-25 22:43 . 2009-10-30 00:08 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-10-15 10:20 . 2009-10-15 10:20 -------- d-----w- c:\documents and settings\NAVNATH\Local Settings\Application Data\Activision
2009-10-15 10:16 . 2009-10-21 16:12 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-10-15 10:16 . 2009-10-15 10:16 22328 ----a-w- c:\documents and settings\NAVNATH\Application Data\PnkBstrK.sys
2009-10-15 10:16 . 2009-10-21 16:12 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-10-15 10:16 . 2009-11-03 07:43 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2009-10-15 10:16 . 2009-10-15 10:16 682280 ----a-w- c:\windows\system32\pbsvc.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-04 18:48 . 2008-12-12 08:51 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-11-01 18:23 . 2008-07-10 17:03 -------- d-----w- c:\program files\Intel
2009-11-01 11:22 . 2009-09-19 19:17 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\Azureus
2009-10-31 19:54 . 2008-07-10 17:11 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-10-31 19:53 . 2009-08-11 18:55 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
2009-10-31 18:34 . 2009-09-19 19:16 -------- d-----w- c:\program files\Vuze
2009-10-30 00:17 . 2009-02-08 09:47 15880 ----a-w- c:\windows\system32\lsdelete.exe
2009-10-30 00:08 . 2009-02-06 18:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-10-21 16:59 . 2009-09-10 00:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Autorun Eater
2009-10-02 10:14 . 2009-10-02 10:14 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2009-10-02 10:14 . 2009-10-02 10:14 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\PC Suite
2009-10-02 10:09 . 2009-10-02 10:09 -------- d-----w- c:\program files\Samsung
2009-10-02 10:08 . 2009-10-02 10:08 -------- d-----w- c:\program files\PC Connectivity Solution
2009-10-02 10:08 . 2009-10-02 10:08 -------- d-----w- c:\program files\DIFX
2009-10-02 10:08 . 2009-10-02 10:08 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\Samsung
2009-10-02 10:08 . 2009-10-02 10:08 -------- d-----w- c:\program files\MarkAny
2009-09-24 06:25 . 2009-09-24 06:25 184320 ----a-w- c:\windows\system32\Ncs2Setp.dll
2009-09-24 06:13 . 2009-09-24 06:13 768632 ----a-w- c:\windows\system32\ncs2dmix.dll
2009-09-24 06:12 . 2009-09-24 06:12 539256 ----a-w- c:\windows\system32\accesor.dll
2009-09-24 05:50 . 2009-09-24 05:50 141944 ----a-w- c:\windows\system32\ncs2instutility.dll
2009-09-24 05:39 . 2009-09-24 05:39 1677944 ----a-w- c:\windows\system32\ncscolib.dll
2009-09-23 12:55 . 2009-02-08 08:49 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-09-21 08:50 . 2009-09-21 08:50 28632 ----a-w- c:\windows\system32\drivers\iqvw32.sys
2009-09-19 19:17 . 2009-09-19 19:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Azureus
2009-09-19 19:16 . 2009-09-19 19:16 -------- d-----w- c:\program files\Common Files\i4j_jres
2009-09-19 18:38 . 2009-08-27 18:32 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\uTorrent
2009-09-15 10:59 . 2009-08-03 10:29 1279968 ----a-w- c:\windows\system32\aswBoot.exe
2009-09-15 10:56 . 2009-08-03 10:29 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-09-15 10:56 . 2009-08-03 10:29 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-09-15 10:55 . 2009-08-03 10:29 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-09-15 10:55 . 2009-08-03 10:29 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-09-15 10:54 . 2009-08-03 10:29 52368 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-09-15 10:54 . 2009-08-03 10:29 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-09-15 10:53 . 2009-08-03 10:29 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-09-15 10:53 . 2009-08-03 10:29 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-09-10 01:15 . 2009-09-10 01:15 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\Thinstall
2009-09-10 00:31 . 2009-09-10 00:31 -------- d-----w- c:\program files\Autorun Eater
2009-09-09 00:16 . 2009-09-09 00:16 -------- d-----w- c:\program files\Common Files\xing shared
2009-09-09 00:16 . 2009-09-09 00:15 -------- d-----w- c:\program files\Common Files\Real
2009-09-09 00:15 . 2006-07-11 13:05 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-09-09 00:15 . 2009-09-09 00:15 -------- d-----w- c:\program files\Real
2009-09-06 20:39 . 2009-09-06 20:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-09-06 20:37 . 2009-09-06 20:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-09-06 20:34 . 2009-09-06 20:31 -------- d-----w- c:\program files\Yahoo!
2009-09-06 20:34 . 2009-09-06 20:34 -------- d-----w- c:\documents and settings\NAVNATH\Application Data\Yahoo!
2009-09-06 04:33 . 2009-06-01 18:29 -------- d-----w- c:\program files\Google
2009-08-18 11:46 . 2008-07-14 16:13 831488 ----a-w- c:\windows\RtlExUpd.dll
2009-08-14 11:14 . 2009-08-14 11:14 6379936 ----a-w- c:\windows\screensaver_radiance.exe
2009-08-14 11:14 . 2009-08-14 11:14 28672 ----a-w- c:\windows\gscr.dll
2009-08-14 11:14 . 2009-08-14 11:14 127904 ----a-w- c:\windows\screensaver_radiance.scr
2009-08-13 14:13 . 2009-08-11 18:57 54 ----a-w- c:\windows\system32\rp_stats.dat
2009-08-13 14:13 . 2009-08-11 18:57 39 ----a-w- c:\windows\system32\rp_rules.dat
2009-08-08 19:50 . 2009-08-08 19:50 3317272 ----a-w- c:\documents and settings\All Users\Application Data\SpeedBit\DAP\Offers\VA3_DapSo.exe
2009-08-08 19:46 . 2009-08-08 19:46 50688 ----a-w- c:\windows\system32\wbhelp2.dll
2008-07-10 18:08 . 2008-07-10 18:08 23 --sha-w- c:\windows\system32\adbfbea2_d.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-07-03 81920]
"Capture .NET"="d:\my imp. program files\Capture\Capture.exe" [2009-03-24 790528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DiskeeperSystray"="c:\program files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-06-07 319488]
"TaskSwitchXP"="c:\program files\TaskSwitchXP\TaskSwitchXP.exe" [2007-05-09 106904]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-18 13680640]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-18 86016]
"avast!"="c:\program files\Alwil Software\Avast4\ashDisp.exe" [2009-09-15 81000]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"AlcWzrd"="ALCWZRD.EXE" - c:\windows\ALCWZRD.EXE [2008-06-19 2808832]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-02-18 1657376]

c:\documents and settings\NAVNATH\Start Menu\Programs\Startup\AutorunsDisabled
SolidWorks Task Scheduler Engine.lnk - c:\program files\SolidWorks\swScheduler\swBOEngine.exe [2007-9-9 488728]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 01000000
"NoStrCmpLogical"= 01000000
"NoSMMyPictures"= 01000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\acaptuser32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Application Data^Microsoft^Shortcuts^icwsetup.exe]
path=c:\documents and settings\All Users\Application Data\Microsoft\Shortcuts\icwsetup.exe
backup=c:\windows\pss\icwsetup.exeCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"PLFlash DeviceIoControl Service"=2 (0x2)
"wuauserv"=2 (0x2)
"gusvc"=3 (0x3)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Autodesk\\3dsMax8\\3dsmax.exe"=
"c:\\Program Files\\Autodesk\\backburner\\monitor.exe"=
"c:\\Program Files\\Autodesk\\backburner\\manager.exe"=
"c:\\Program Files\\Autodesk\\backburner\\server.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"e:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"e:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"e:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=

R0 FSProFilter;FSPro File Filter;c:\windows\system32\drivers\FSPFltd.sys [3/19/2009 5:52 PM 43792]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2/8/2009 2:19 PM 64288]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [8/3/2009 3:59 PM 114768]
R1 LUMDriver;LUMDriver;c:\windows\system32\drivers\LUMDriver.sys [4/24/2007 10:22 PM 16688]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8/3/2009 3:59 PM 20560]
R2 fsproflt;FSPro Filter Service;c:\windows\system32\fsproflt.exe [3/19/2009 5:52 PM 73392]
R2 Imageware 12 License Manager;Imageware 12 License Manager;e:\program files\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe [9/25/2002 2:40 AM 597504]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;e:\program files\Lavasoft\Ad-Aware\AAWService.exe [9/24/2009 4:47 PM 1179232]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [10/2/2009 3:38 PM 36608]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [11/7/2007 1:52 AM 34064]
S3 ZL;ZL;c:\docume~1\NAVNATH\LOCALS~1\Temp\ZL.exe --> c:\docume~1\NAVNATH\LOCALS~1\Temp\ZL.exe [?]
S4 BBDemon;Backbone Service;"e:\program files\Dassault Systemes\B17\intel_a\code\bin\CATSysDemon.exe" -service --> e:\program files\Dassault Systemes\B17\intel_a\code\bin\CATSysDemon.exe [?]
S4 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [10/2/2009 3:38 PM 233472]
S4 gupdate1ca20fd77090518;Google Update Service (gupdate1ca20fd77090518);c:\program files\Google\Update\GoogleUpdate.exe [8/20/2009 12:17 AM 133104]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - MBR
*Deregistered* - mbr
.
Contents of the 'Scheduled Tasks' folder

2009-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-19 18:47]

2009-08-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-19 18:47]

2009-08-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-796845957-1614895754-682003330-1003Core.job
- c:\documents and settings\NAVNATH\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-08-08 18:56]

2009-08-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-796845957-1614895754-682003330-1003UA.job
- c:\documents and settings\NAVNATH\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-08-08 18:56]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1978305
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Clean Traces
IE: &Download with &DAP
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Download &all with DAP
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {EB49111A-80B5-405E-9E80-12F82DCD5FA6} = 203.192.198.7,203.192.198.5
DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} - hxxp://intel-drv-cdn.systemrequirementslab.com/multi/bin/sysreqlab_srlx.cab
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Internet Connection Wizard Setup Tool - c:\program files\Internet Explorer\Connection Wizard\icwsetup.exe
HKLM-Run-NPSStartup - (no file)
Notify-WgaLogon - (no file)
AddRemove-{B52F8C4B-FE88-4B59-9B80-1C93669D7DEB}_is1 - c:\program files\OpenWith.org

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-05 00:18
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89E3F1E8]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\atapi -> 0x89e3f1e8
Warning: possible MBR rootkit infection !
user & kernel MBR OK
Use "Recovery Console" command "fixmbr" to clear infection !

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3476)
c:\windows\system32\nview.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\Audiodev.dll
c:\windows\system32\WMVCore.DLL
c:\windows\system32\WMASF.DLL
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
c:\program files\Intel\IDU\awServ.exe
c:\program files\Diskeeper Corporation\Diskeeper\DkService.exe
c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
c:\program files\NVIDIA Corporation\nTune\nTuneService.exe
c:\windows\system32\locator.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
e:\program files\Lavasoft\Ad-Aware\AAWTray.exe
.
**************************************************************************
.
Completion time: 2009-11-04 0:20 - machine was rebooted
ComboFix-quarantined-files.txt 2009-11-04 18:50

Pre-Run: 17,365,811,200 bytes free
Post-Run: 17,272,356,864 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

Malwarebytes' Anti-Malware 1.41
Database version: 3099
Windows 5.1.2600 Service Pack 2

11/4/2009 8:59:07 PM
mbam-log-2009-11-04 (20-59-07).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)
Objects scanned: 333445
Time elapsed: 44 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 1
Files Infected: 7

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-11cf-aax5-21cx1c987224} (Generic.Bot.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DbgMgr (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
C:\Recycle\P-1-3-64-8794238531-8742492-9897532 (Trojan.Agent) -> Quarantined and deleted successfully.

Files Infected:
C:\Documents and Settings\NAVNATH\restorer64_a.exe (SpamTool.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D480C6E8-D1B9-432F-BEE0-48857CFACC20}\RP448\A0145821.exe (SpamTool.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\restorer64_a.exe (SpamTool.Agent) -> Quarantined and deleted successfully.
F:\System Volume Information\_restore{D480C6E8-D1B9-432F-BEE0-48857CFACC20}\RP442\A0143716.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Recycle\P-1-3-64-8794238531-8742492-9897532\Desktop.ini (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\NAVNATH\Start Menu\Programs\Startup\zavupd32.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\NAVNATH\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.

Hope expert here take some time to analyze these logs.

Thank you.

Dell Latitude D520 not recognizing Hard Drive

midnightgrafton — Thu, 05 Nov 2009 00:01:57 GMT

As stated in the title, my laptop, upon powering on, loads the bios and takes me to a screen saying: "No bootable devices--strike F1 to retry boot, F2 for setup utility--Press F5 to run onboard diagnostics."

Naturally, I press F5.

CPU Time Stamp Calibration Test Passes

PM Timer 1 Passes

PIC Funcionality Test Passes

A20 Gate Test passes

Start DST Short Test Fails
ERROR CODE: 1000-0140
Msg: No hard drive detected.

My question is: Is my hard drive bad or is my laptop need replaced?

Can Client have an option

Shaikh Mohsin — Wed, 04 Nov 2009 23:01:19 GMT

Hello friends

I am very thankfull to jbennet & MrV for there help & guidence....finally i got my work done....

now i have one question....now in my network there are Win server 2003 & linux server ok......3 to 4 diskles PC when client start...assume that both the servers are on....and they both try to give IP address to the client.....my question is that can client have an option to select the IP address provider or option to boot from which server either from windows or Linux......any help regarding this......

thank u

Outlook 2003 help, sharing one week of calender

heavenlyIT — Wed, 04 Nov 2009 19:41:40 GMT

Hello,

I am trying to figure out if it is possible to share just One Week of your calender via email. For example if the CEO of a large company wants all of his managers to email him their weekly scheduel every week how would you go about doing this. Can you Export just one week of your calender?

-Aaron-

Windows System Error Codes

Adamsappleone — Wed, 04 Nov 2009 18:24:13 GMT

In the link provided, you will find an extensive list of COM Error Codes and brief description of each.

The list contains:

1. COM Error Codes

2. Miscellaneous Error Codes

3. OLE (Object Linking and Embedding) Errors

4. Windows Based Enterprise Management (WBEM) error codes

5. The Win32 Error Codes for ADSI.

6. ActiveX Data Objects (ADO) Runtime errors

http://kenbase.googlepages.com/COMErrorCodes.htm

Another good reference to bookmark

Looking for a toggle script for Windows 2003

jengland — Wed, 04 Nov 2009 18:23:40 GMT

I'm trying to figure out how to toggle between a checked box and unchecked box just by a mouse click over the character. I have Windows 2003. I figured out enough to get the option in the tool bar under "all entries," but what a pain to do that to every box I want checked.

Also, this document I'm working on will be a "password protected" document. I'm trying to recreate an existing "password protected" document so I KNOW that this can be done.

Any input is appreciated. Thank you!

Alphabetical Directory For Computer Processes, Spyware, and Adware

Adamsappleone — Wed, 04 Nov 2009 18:18:11 GMT

Quote:

Listed below is a directory of DLL files and EXE files, including Windows system processes and tasks, known system files, and various spyware and adware files. Clicking each file name will identify the purpose of any of the files listed in this directory.

http://www.what-is-exe.com/

Good reference to bookmark

address bar in ie ver 8 is grey

just a novice — Wed, 04 Nov 2009 18:04:43 GMT

downloaded Microsoft updates and my adrees bar is light grey, all my aol mail is also light gey and difficult to read.
on the google screen the address bar is light grey as well as the block GOOGLE SEARCH AND IM FEELING LUCKY. I am running :
Operating System System Model
Windows XP Professional Service Pack 3 (build 2600)
Dell Inc. OptiPlex GX620
Enclosure Type: Mini-Tower
Processor a Main Circuit Board b
3.00 gigahertz Intel Pentium 4
16 kilobyte primary memory cache
2048 kilobyte secondary memory cache
64-bit ready
Hyper-threaded (2 total)
I have two attachments to depicy the problem

Appreciate your help
Walt Flan

Attached Images

	aol image.JPG (116.6 KB)
	google for ms test2.JPG (197.4 KB)

Trouble Deleting Zone Alarm

edreese58 — Wed, 04 Nov 2009 16:54:14 GMT

I have been trying to delete zone alarm files from my computer, but I keep getting the "access denied" message when I do? Any suggestions? Thanks.
Ed

Outlook 2007

jaywan — Wed, 04 Nov 2009 15:04:43 GMT

I have a machine here running Windows XP with office 2007. The prob is when you send a mail it shows 2 mails leaving outbox. I've checked for spyware with ScanSpyware and the have licensed nod32 firewall and antivirus running for over a year. I checked if it might be some setting but everything is seems fine. No read receipts etc. which I thought could cause it either.

Has anyone ever heard about outlook 2007 or earlier doing this? It bugs me and would really want to change this, or atleast understand why.

PC Works but sometime it doesn't start anymore

Asimov6 — Wed, 04 Nov 2009 13:15:11 GMT

Hello good people!

I have just build a htpc. The mohterboard is a ga-ma78gm-ud2h with an AMD X2 250 Processor, it has a 1G samsung harddisk, a Infrared USB receiver.

The PC seems to boot just fine when it has been unplugged from the mains. But when I shutdown the pc and want to restart it, it just doesn't start anymore. I have to unplug and replug it from the mains and after that it will start just fine.

Does anyone know where I should start looking?

Thanks a lot for you help!

Asimov

blank screen after xp bootup

shahtejasm — Wed, 04 Nov 2009 11:56:36 GMT

i have industrial PC. It botup fine but after Win XP logo the monitor goes blank but CPU run very well.
If i connect extra monitor to its vga port then it displays content but main screen not displays anything

Firefox tabs keep popping up

jsbrewer — Wed, 04 Nov 2009 05:27:59 GMT

Everytime I open my firefox browser additional tabs keep popping up. Not just one or two, but 20. when I try to close the tabs more keep popping up. I have to close the entire browser in order to stop it. Each tab is directed to the firefox help and support site.

I also have the same issues with internet explorer. Everytime I open a browser, Windows Help and Support window keeps popping up. When I close the window it just keeps popping up. When I use the task manager to close the process, it gives me an additional 10 seconds before the window pops up.

I thoroughly checked the F1 key...it's not stuck. I don't know what to do...Please Help!!! I have included the hijackthis log, Kapersky's online scan, malwarebytes log, and the unistall log. The Dekard's system scanner seems to be down so I cannot provide that log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:14:15 PM, on 10/24/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\TECO\TEco.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
C:\Program Files\IObit\IObit Security 360\is360tray.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Windows\helppane.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TWebCamera] "%ProgramFiles%\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
O4 - HKLM\..\Run: [SmartFaceVWatcher] %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
O4 - HKLM\..\Run: [Teco] "%ProgramFiles%\TOSHIBA\TECO\Teco.exe" /r
O4 - HKLM\..\Run: [NDSTray.exe] "C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe"
O4 - HKLM\..\Run: [cfFncEnabler.exe] "C:\Program Files\TOSHIBA\ConfigFree\cfFncEnabler.exe"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TPCHWMsg] %ProgramFiles%\TOSHIBA\TPHM\TPCHWMsg.exe
O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [IObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: McAfee Application Installer Cleanup (0261041256269811) (0261041256269811mcinstcleanup) - McAfee, Inc. - C:\Windows\TEMP\026104~1.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: TOSHIBA Web Camera Service (camsvc) - TOSHIBA - C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: TOSHIBA Modem region select service (RSELSVC) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exe
O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

--
End of file - 10587 bytes

KASPERSKY ONLINE SCANNER

Tuesday, November 3, 2009
Operating system: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Wednesday, November 04, 2009 02:06:14
Records in database: 3123431

Scan settings
scan using the following database extended
Scan archives yes
Scan e-mail databases yes

Scan area My Computer
C:\
D:\

Scan statistics
Objects scanned 128961
Threats found 0
Infected objects found 0
Suspicious objects found 0
Scan duration 01:28:20

No threats found. Scanned area is clean.
Selected area has been scanned.

Malwarebytes' Anti-Malware 1.41
Database version: 3097
Windows 6.0.6002 Service Pack 2

11/3/2009 8:21:06 PM
mbam-log-2009-11-03 (20-21-06).txt

Scan type: Full Scan (C:\|)
Objects scanned: 251060
Time elapsed: 42 minute(s), 29 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Uninstall Log

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.1.3
AnswerWorks 5.0 English Runtime
CCleaner (remove only)
Compatibility Pack for the 2007 Office system
ConvertHelper 2.2
Direct DiscRecorder
DivX Web Player
DVD MovieFactory for TOSHIBA
EOS USB WIA Driver
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel PROSet Wireless
Intel(R) Graphics Media Accelerator Driver
Intel® Matrix Storage Manager
IObit Security 360
Java(TM) 6 Update 11
K-Lite Mega Codec Pack 5.0.5
Malwarebytes' Anti-Malware
McAfee SiteAdvisor
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (3.5.3)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
PartyPoker
Picasa 3
PlayReady PC runtime
Quicken 2010
Realtek 8136 8168 8169 Ethernet Driver
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Skype Launcher
SUPERAntiSpyware Free Edition
Synaptics Pointing Device Driver
TOSHIBA Agreement Notification Utility
Toshiba Application and Driver Installer
TOSHIBA Assist
TOSHIBA ConfigFree
TOSHIBA Disc Creator
TOSHIBA DVD PLAYER
TOSHIBA eco Utility
TOSHIBA eco Utility
TOSHIBA Extended Tiles for Windows Mobility Center
TOSHIBA Face Recognition
TOSHIBA Face Recognition
TOSHIBA Hardware Setup
TOSHIBA HDD/SSD Alert
TOSHIBA HDD/SSD Alert
TOSHIBA Internal Modem Region Select Utility
TOSHIBA PC Health Monitor
Toshiba Quality Application
TOSHIBA Recovery Disc Creator
Toshiba Registration
Toshiba Resources Page
TOSHIBA SD Memory Utilities
TOSHIBA Service Station
TOSHIBA Software Modem
TOSHIBA Speech System Applications
TOSHIBA Speech System SR Engine(U.S.) Version1.0
TOSHIBA Speech System TTS Engine(U.S.) Version1.0
TOSHIBA Supervisor Password
TOSHIBA Value Added Package
TOSHIBA Web Camera Application
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Office 2007 (KB946691)
VC80CRTRedist - 8.0.50727.762
WildTangent Games

I hope you can help....Thanks

Using msconfig safeboot with the wrong malware on board

gerbil — Wed, 04 Nov 2009 04:50:03 GMT

This post is to help a chap who pc'd me; I put it here in full to aid others.
Nouveaunoise "hello there my name is conor i am from ireland and i have a problem with my comp. basically im an idiot and did something i knew i shouldnt have done but due to frustration i did it anyway.
basically i had bad malware + b.exe and all sorts of problems which i was unable to resolve.
this all crippled my os and would not allow me to delete any of it. it crippled my system restore (group administrator block bullshit) it also wouldnt allow me to enter safe mode (blue screen shut down), so me being an idiot i did the msconfig safeboot! BOLLOX why did i do that i shouldn have done that. u know what happened from there as you posted on this very matter a few years ago.
i had no xp cd so i made a usb bootable recovery console http://tuts4tech.net/2009/07/14/crea...overy-console/ which worked fine. the problem im having is when i enter bootcfg the options come up. but when i prompt one of them i cant access anything. example bootcfg /list = there are currently no boot entries available to display.
bootcfg /rebuild = error: failed to successfully scan disks for windows instalations. this error may be caused by corrupt file system. so i do the chkdsk the volume appears to be in good condition the thing that gets me is the size 1957600kilobytes. (i know im really stretching this out so for that i am sorry) basically the usb is 2gig so it is obviously reading that and thats why it wont let me into the bootcfg to edit the safeboot switch."

Hello, Conor... a bit of bad luck there. Windows is chokka with traps for the unwary, and most of us are that at first.
Okay, running an RC from a USB stick. First off, it is a bit of a worry that when RC was starting it did not suggest your Windows installation to log into [ie. you are in the RC, but it uses C:\WINDOWS as the prompt if it found an installation, or C:\ if it did not].
bootcfg /scan will hunt through all your drives for a Windows. If it reports a drive error then you are most likely using Sata drives with either RAID or AHCI configuration without the correct driver loaded. So restart your RC, but this time use the F6 key to load the corrrect Sata driver. It will be on a floppy...
No floppy with the Sata driver? Then go into BIOS and edit temporarily your Sata Configuration to IDE emulation. Either way, the RC should now find your Windows installation.
But you cannot use the other bootcfg commands to build a boot.ini, because your RC is running from a USB stick. In any boot.ini that you build or add an entry to, rdisk() will be set to rdisk(1). And if your Windows is on rdisk(0) as most are, it just won't work. And you cannot edit the boot.ini in-place with RC. Neat, huh?
What you can do, though, is get a copy of your boot.ini :
First, you must find what drive letters the RC has allocated. To do that, use the command...
MAP - you should be able to recognise your stick letter. If a Windows was found, it will be C:, if not then your stick RC will be C:
Lets say your stick is E: Then this will give you a copy of your file...
COPY c:\boot.ini E:\realboot.ini
Or you can scribble it down if it won't copy....
TYPE c:\boot.ini
Right. Back to your working sys with that stick, edit that realboot.ini file [or make one with notepad from your scribble] so that you delete the parameter "/SAFEBOOT....." from the line on which it appears.
Save it to your USB stick as realboot.ini
It may look something like this...
[boot loader]
timeout=4
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

Restart the failed sys with the RC USB stick [and use F6 floppy if Sata and you did not emulate IDE ]. Now...
COPY e:\realboot.ini c:\boot.ini
EXIT, and it ought to boot normally. Edit the BIOS entry back to AHCI or RAID if you changed it.
Of course, you know now that malware has busted your Safeboot key in registry, don't you? So that needs fixing.... post if you need help on that.

Laptop stalls on startup

GWats — Wed, 04 Nov 2009 03:37:06 GMT

My daughter just received a refurbished laptop from the grandparents as a birthday gift. It worked fine for a few days but now it won't go very far during startup. It's a Compac Presario V2000 and I can't even tell what the OS is or any other details. The startup screen shows 5 lines and just repeats over and over. There is also an unnerving rather prominent clicking noise that persists as it rolls through the attempted startup. Below are the five lines.

Intel UNDI, PXE-2.0 (build 082)
Copyright © 199702000 Intel Corporation

For Realtek RTL8139(X)/8130/810X PCI Fast Ethernet Controller v2.13 (020326)
PXE-E61: Media Test Failure, check cable
PXE-M0F: Exiting PXE ROM.

Is there something I can do?

XP SP3 not using second core

Edgeman — Wed, 04 Nov 2009 03:27:24 GMT

I have a machine with XP Pro SP3, on an Asus P5L...something board and an Intel E5200 dual core CPU.
The BIOS shows both cores, and windows shows both cores in device manager, but not in Task Manager.
See screenshot: http://edgebox.ca/singlecore.PNG
From what I've googled, it seems to be a problem with the HAL ACPI thing, needs to be a multiprocessor one, but I don't know how to switch it?

Windows 7 vulnerable to 8 out of 10 viruses

caperjack — Tue, 03 Nov 2009 23:47:55 GMT

http://www.sophos.com/blogs/chetw/g/...s-7-vulnerable

Can't find a boot device.

Andrew Wiggin — Tue, 03 Nov 2009 22:38:22 GMT

I ran a repair install on windows XP. Then I encountered this phenomena:
computer fails to boot: can't find a boot device.
BUT, if there is a windows xp disk in the CD drive, then it will boot windows as long as i don't press any key to boot from CD.

The boot.ini file looks fine. The recovery console commands fixmbr and fixboot did not solve the problem. Running another repair install with SP3 (first time was with SP2) also didn't fix the problem.

Whatever command the BIOS uses to launch the OS isn't working, but whatever command the windows CD is using does work. Any idea how to fix this?

Shopica redirect I can't get rid of!!

jw22 — Tue, 03 Nov 2009 20:07:50 GMT

I have thrown everything at the search redirect (most commonly takes me to shopica.com) I have found some things running everything anti-virus/spyware/malware I can at it. PLease help!! My hijack this is pasted below. Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:00:39 PM, on 11/3/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Spare Backup\SpareBackup.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\hkcmd.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\igfxsrvc.exe
C:\PROGRA~1\NYKO\GAMEPA~1\ngpmap.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Windows\Explorer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.h...s=DTP&M=GT5620
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\windows\system32\BAE.dll
O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Spare Backup] "C:\Program Files\Spare Backup\SpareBackup.exe" /silent
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [nmapp] "C:\Program Files\Pure Networks\Network Magic\nmapp.exe" -autorun -nosplash
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Pure Networks Net2Go Service (nmraapache) - Pure Networks, Inc. - C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 8680 bytes

computer wont start

khamush — Tue, 03 Nov 2009 19:54:23 GMT

Hi guys out there,
Today when i came home, i found out the pc is not starting. the power goes on, all fans work, cd drive works, but monitor keeps blinking and no display, I've changed monitor, but no help
my machine is an acer 2.4 gh inter core 2, 3gb ram.
i have to add that i have not touched the pc at all, some times back, computer used to power itself off and show me a blue screen before it restared,
I also had had some blank screen events like i have now before, but they were fixed when i removed and pluged the monitor cable from and to pc.
but this time it seems serious.
Any Idea?

"...not a valid win32 app..." HiJack This Log

fishbait — Tue, 03 Nov 2009 19:50:06 GMT

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:38:36 PM, on 11/3/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\SanDisk\Sansa Updater\SansaDispatch.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Garmin\MyGarminAgent.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Uniblue\ProcessQuickLink 2\ProcessQuickLink2.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\Stephen J Bailey\AppData\Roaming\CBS Interactive\CNET TechTracker\TechTracker.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Hewlett-Packard\HP Advisor\SSDK04.exe
C:\Users\Stephen J Bailey\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Stephen J Bailey\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...lion&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\tbHot1.dll
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\tbHot1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\tbHot1.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SansaDispatch] C:\Program Files\SanDisk\Sansa Updater\SansaDispatch.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MyGarminAgent] C:\Program Files\Garmin\MyGarminAgent.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Uniblue ProcessQuickLink 2] "C:\Program Files\Uniblue\ProcessQuickLink 2\ProcessQuickLink2.exe" /autostart
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Stephen J Bailey\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: CNET TechTracker.lnk = Stephen J Bailey\AppData\Roaming\CBS Interactive\CNET TechTracker\TechTracker.exe
O4 - Startup: MemTurbo.lnk = C:\Program Files\MemTurbo 4\MemTurbo.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\PrintMaster Platinum 17\Remind.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O13 - Gopher Prefix:
O16 - DPF: Garmin Communicator Plug-In - https://my.garmin.com/mygarmin/m/GarminAxControl.CAB
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://echat.bellsouth.net/sdccommon...ad/tgctlcm.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} (Hewlett-Packard Online Support Services) - https://h20364.www2.hp.com/CSMWeb/Cu...ataManager.CAB
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/de...e/HPDEXAXO.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn...tDetection.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanage...vex-latest.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c9917e8702590f) (gupdate1c9917e8702590f) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 16809 bytes

HELP.deleted keyboard and mouse drivers

makaveli7 — Tue, 03 Nov 2009 16:15:02 GMT

i deleted upper and lower filters by accident the other day.a forum said if i deleted them my dvd would work again.but t hts the least of my problem here been scrating my head for dayz.my keyboard have stopped working completely.the keyboard works in bios by after tht nothing.i have tried everything reset bios by removing battery.tried the last known good config.i havent got a xp boot disk or any disk.they only thingi can think of is burn the driversi need onto a cd then load on my pc.but obviously it wont just load.i am using a laptop but was wondering if i could connect it 2 pc but dont know howim trying 2 figure out how i would about fixing this its a ball breaker lol .cheer people

Windows XP- Shellmon.exec

noretel — Tue, 03 Nov 2009 15:41:25 GMT

Almost every time I shut off my computer, I get a message saying the application failed to initialize because Windows was shutting down. This seems to be shellmon.exec from Aol 9.1 program files. I have closed Aol and gone off line, waited for a minute or more, and then tried to shut down the computer, but still get the message. What gives? noretel

mshtml.dll is not beeing registred

Dulcita — Tue, 03 Nov 2009 14:37:15 GMT

I have not been able to access "user accounts" in windows xp for some time now. I have run anti virus, spy bot and tried a few other recommended "fixes" I have found online. So far they haven't worked.

I found the following, post on this forum and tried it.
"Re: Can't access User Accounts in XP.

May 6th, 2006
I found a fix at another forum that fixes the User Control error issue:
-----------------------------------------------
Open your notepad or word processor and copy and paste the following:

regsvr32 jscript.dll
regsvr32 nusrmgr.cpl
regsvr32 /i mshtml.dll
regsvr32 themeui.dll
regsvr32 Vbscript.dll

Save this file as User_Acct_Fix.cmd on your desktop to easily find it.
Click on User_Acct_Fix.cmd on your desktop to run the program. Now see if the User Accounts are available.
This will re-register the above dll's etc in the registry.
--------------------------------------------------
I spent hours looking for 'the' fix, tried out everything everyone suggested, and nothing worked until this one. FYI... and I'm one happy camper "

4 of the five items were registered, but got the following message: "regsvr32 /i mshtml.dll "mshtml.dll was loaded but the DiRegisterServer entry point was not found. This file can not be registered"

Any suggestions?

Thanks!

open source installer

rajuchacha007 — Tue, 03 Nov 2009 13:44:12 GMT

Hi all,

I am looking for an open source installer to install some application software (java based s/w programme) and i do not want to commit any sort of change in registry.

The installer should perform following actions:

1. License Terms: Accept/Reject selection by user
2. User must select installation folder, default is c:\......\......
3. Run a bat file/script to install mysql, activemq.
4. Run a bat file/script to configure the toolset
5. Install application as an independent platform
6. Catch errors and display to user
7. Display confirmation

Please let me know if anyone has got any relevant information and or such installer. I have tried some like NSIS, GhostInstaller, Nvin installer, Witem installer etc. I would like to focus on open source java installers. If anyone has used any of them, I would welcome its reviews. Thanks in advance.

Best regards.

cannot access MS Access 2007

kz07 — Tue, 03 Nov 2009 12:55:42 GMT

i installed MS Office home and student 2007 into my laptop.. and then i activated it.. the problem is.. i can use all of the apps(ms word, excel, ppt,etc) but not MS Access.. it prompts for a product key, but when i entered the product key, it says "The key is incorrect. Verify that you have the correct key, then retype it."

please help.