well you have this strange entry in your log:
O2 - BHO: wowfawk - {5CE88842-FCF5-7575-9F91-520F80390773} - C:\WINNT\System32\WOWFAWK.dll
I can't find any info on it. Do you know what it is?

I don't think this entry should be there either.
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)

Wait for someone else to confirm them just in case. You also appear to have a few broken servies in there, but I don't know if there's a bug in that bit or not.

thanks for the reply....offhand I do not know what that first entry you noted, could be...the second one is probably something that can be removed...

on a more general note...could the problem I am having loading this software be caused by other issues with this computer and if so, what could these be?

Here are some of the options:
1) overheating - does the case very hot? if you take the side off the case does the inside seem hot (by hot I mean something more than warm...) If it does you may need to improve your ventilation - try running your computer with the side off. Be careful not to touch any of the circuits inside the case, and make sure no children are going to insert fingers etc... PC's are 5 and 12V so you shouldn't killl yourself, but it doesn't hurt to be careful.
2) Corrupted system files - this would normally affect everything.
3) Virus/worm/trojan. I think that BHO I pointed out may be the problem here.
I can't think of any more, but no doubt there are some.

Nor can I; have HijackThis kill it.
When you can't find any info whatsoever on a .dll, .exe, etc., it's a very good bet that the beastie is malicious.


Right- it shouldn't be there. Delete the entire C:\Program Files\Ebates_MoeMoneyMaker folder if it still exists.

I have managed to remove the C:\Program Files\Ebates_MoeMoneyMaker... file with HiJack This, but I have tried numerous times to remove the 02-BHO:wowfawk... file but it keeps reappearing after I restart. I also tried removing it in safe mode but no cigar. Any suggestions? tje

on an additional note: I have tried uninstalling and reinstalling the quickbooks software and I am still having problems. It seems that the Windows InstallSheild Wizard is hanging whenever I try to do something. I have managed to reinstall the POS system and can open it, but cannot open the accounting software. Is there something I can work on regarding this issue? Should I post this question on a different forum? Thanks.

update: I have managed to install the quickbooks software, a major hurdle...but I would like to continue cleaning up the system and getting rid of that entry in hijack this that keeps returning after I reboot. I also continue to have problems with IE explorer freezing, at which point I get that Windows error message (send/don't send to Microsoft) and returning to the homepage. Thanks.

Tami,

I've still found no info the WOWFAWK.dll file, but I'm sure it's part of your problems. If you haven't already, please do the following:

- Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)

- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files".

- Ses if you can now view the C:\WINNT\System32\WOWFAWK.dll file. If so, delete it.

- For every user account listed under C:\Documents and Settings, delete the entire contents of these folders:

1. Local Settings\Temp
2. Cookies
3. History
4. Local Settings\Temporary Internet Files\Content.IE5

- Delete the entire content of your C:\Windows\Temp folder.

Note- If you get any messages concerning the deletion of system files such as desktop.ini or index.dat, just choose to delete those files; they'll be automatically regenerated by Windows if needed. Windows will allow you to delete the versions of those files which exist in sub-folders within the main Temp/Temorary folders, but might not let you delete the versions of those files that exist in the main Temp folders themselves; this is normal and OK.


- Empty your Recycle Bin.

- Reboot normally.

Before you delete it can you zip it up and email it to me at number1dad2000atyahoo.com.au (replace the at with @).

Crunchie,

I have zipped the file and emailed it to you at the email address you noted. Thanks for taking a look and let me know what you find.