w32.virut.cf virus

[pcmic]

Hello,

I am having a problem with the w32virut.cf virus. I tried to download programs and I tried to manually fix it myself and it wont happen. it wont let me run programs, i cant use the RUN program. Thank you in advance for any type of help-You guys have already bailed me out once and I know I am in good hands. I also cant update my nortons or open up AVG

Here is my HJT log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:13:23 PM, on 3/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\NavNT\rtvscan.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE
C:\Program Files\NavNT\vptray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Southwest Airlines\Ding\Ding.exe
C:\Program Files\Greetings Workshop\GWREMIND.EXE
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Christopher\Desktop\HiJackThis.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rhodeisland.cox.net/cci/home#
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {4dec1919-7279-484f-b1a4-ec09322e09bb} - C:\WINDOWS\system32\damahifi.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: {8f1df819-8fc0-2c7b-c834-1447115ec5bb} - {bb5ce511-7441-438c-b7c2-0cf8918fd1f8} - C:\WINDOWS\system32\asdmrt.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: (no name) - {EC441B48-CA63-4B60-B4A8-E5EB240510B1} - c:\windows\system32\icgavbh.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB002" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [HorngTech4D] C:\PROGRA~1\MOUSES~1\bally4d.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [iPodVideoConverter_upgrade] "C:\Program Files\E-Zsoft\iPodVideoConverter\iPodVideoConverter.exe" /upgrade
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [7415c103] rundll32.exe "C:\WINDOWS\system32\zuvajavi.dll",b
O4 - HKLM\..\Run: [sedosuhapo] Rundll32.exe "C:\WINDOWS\system32\rulodaha.dll",s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus Photo R200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE /P30 "EPSON Stylus Photo R200 Series" /M "Stylus Photo R200" /EF "HKCU"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [xccinit] C:\WINDOWS\system32\inf\rundll33.exe C:\WINDOWS\xccdf16_090131a.dll xccd16
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: DING!.lnk = C:\Program Files\Southwest Airlines\Ding\Ding.exe
O4 - Startup: Epson printer Registration.lnk = E:\E_reg\EPSONREG.EXE
O4 - Startup: Greetings Workshop Reminders.lnk = C:\Program Files\Greetings Workshop\GWREMIND.EXE
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma.cpl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\MSACNV30.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.antimalwareguard.com
O15 - Trusted Zone: *.gomyhit.com
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://usercenter.cox.net/rsuite/sdccommon/asp/cx_tgctlcm.jsp
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.winkflash.com/photo/loaders/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?AuthParam=1229091456_62e06cda748c707fcce6a1a1178cd8ec&GroupName=JSC&BHost=javadl.sun.com&FilePath=/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab&File=jinstall-6u11-windows-i586-jc.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\piveruto.dll asdmrt.dll c:\windows\system32\fikozowa.dll
O20 - Winlogon Notify: aoccpuzx - C:\WINDOWS\SYSTEM32\icgavbh.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\fikozowa.dll (file missing)
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\fikozowa.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: CBGAA - Unknown owner - C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\CBGAA.exe (file missing)
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Rio MSC Manager (RioMSC) - Unknown owner - C:\WINDOWS\system32\RioMSC.exe (file missing)
O23 - Service: S - Unknown owner - C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\S.exe (file missing)
O23 - Service: SWNIJPNZBVTL - Unknown owner - C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\SWNIJPNZBVTL.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
O23 - Service: ZSYL - Unknown owner - C:\DOCUME~1\CHRIST~1\LOCALS~1\Temp\ZSYL.exe (file missing)

--
End of file - 10458 bytes

[jholland1964]

I really hate to be the bearer of bad news, but this virus is so destructive to key files on the computer that most of the time, general advice is to reformat the computer. This advice seems to be given even if the antivirus programs run can remove the virus, they cannot repair the key system files damaged by the infection so therefore one cannot really even assume the infection is removed.
Sorry

[pcmic]

jholland1964,

When I sent the first message the computer looked like it could be fixed. When I got home and read your message I noticed it had pretty much been taken over. My new question is what is the best process to reformat my computer. I went in and saved everything to flash drives and will burn them at a later date(dont know if they are infected--I saved pictures, music, videos and some programs) I have never done this before but I have all my program disks and I just need the steps for the process. Thanks for looking and if you have any info I would appreciate it.

Chris

[jholland1964]

There are several ways to do this...What disks do you have that actually came with the computer?
Who is the manufacturer or your computer?

Flash drives CAN become infected, definitely, especially today. There IS a chance that this has happened to yours too. Some malware is now out there created for that specific reason, to more easily spread from computer to computer. But all is not lost your flash disk can be scanned for infections before any files are uploaded to the clean computer and I can give you links on how to do that. If the programs you put on the flash drives are ones you downloaded, you may seriously consider just downloading them again from the internet. Music might be "iffy" too. Not certain about the personal pictures, though there are a lot of ways to save those.
I am getting ahead of myself here...
List the disks that actually came with the comptuer and it's make and model. I can get you some links to follow.
Reformatting is not difficult, as long as you have all the correct disks. I have done it a number of times, it just takes a few hours to reformat and reload. Time consuming part is doing the updating, which you have probably done over a period of months or years, depending on the age of the computer, because you will have to bring it up to "today". I will be happy to help in any way that I can.
Judy

[pcmic]

jholland1964,

Thank you I will take all the help I can get!! I have a dell computer that I purchased in 2001. My problem is that It had windows millennium on it because it came out just before windows XP. but i bought the upgrade when I got the computer. So know I have multiple disks to choose from--Windows xp step by step training, upgrading your dell to windows xp home edition and upgrade version 2002, reinstalling wind ME. I dont care about getting all my programs back because I have them backed up and a list of what I have on my computer--it will take time but I can get it back. Just need your help to get a clean slate. By the way my computer is not being run by myself--pop ups and my screen went black with Warning you have a virus run spyware cleaner. It is definatly time to reformat. Thanks in advance and have a great day!!!

Chris

[pcmic]

jholland1964 ,

I am at work and I have more specs on my computer for you to review.

dimension 4300 pentium 4 1.5 ghz
383 sdram
32 mb nvidia gforce 2
40 gb ata-100 7200 RPM hard drive
window mill-factory installed
windows xp home upgrade coupon
sb live 1024 sound card

I just bought a pioneer dvd 20x dvd burner to replace my nec 1300a which I cannot find any 4x disks to burn anymore--I will set that up after the reformatting.

Computer bought 10/3/01 and I have all cd's that came with it-im hoping that i dont have to put up millennium then upgrade but if you help I will do whatever you ask.

Look forward to hearing from you and thanks again.

Chris

[jholland1964]

Let me do some checking and I will get back with you on this.

[pcmic]

jholland1964,

Been a week-I was wondering if you are still checking??????

In the past week I have loaded Windows ME then updated to XP home--Put a new drive in and I think that I have to start over. I cant get any of my disk burners to work. I get the message- that its either corrupt or drives are not compatible. I understand that you are busy and you are helping me in your free time but I would rather you tell me to look at others for help than wait another week to get started.

Thank you

chris

[jholland1964]

I am so sorry, have no idea how I missed coming back here. Did you download new drivers for the burners which would make them compatible with XP?
Again, I do apologize.

[pcmic]

Hello,

I do realize that you guys help on your free time so no need for apologies for me--I appreciate what you do!!!!

I am at work right now so I can shoot you a HJT a little later.

My computer has been updated to service pack 3 and the updater reminds me almost 3 times a day. I called pioneer about the new drive and I realized that I havnt put Nero back on my machine for it to recognize. I will do that first and then send you an email. It is still kind of slow opening files but I have rum AVG, Malewares and symantec and all said that the machine is clear. But semantec did catch one virus back at the beggining Im not sure if it was the original one but it said it wasnt bad. If you think I should reformat agian after you see whats going on I have no problem with that.

Have a great day and thanks for your time,

Chris

[jholland1964]

It is still kind of slow opening files but I have rum AVG, Malewares and symantec

You shouldn't have two antivirus programs on the computer at one time. That is absolute and will most definitely slow the computer, plus lessen protection! Remove either AVG or Symantec.
Malwarebytes is fine with either one as it is not an antivirus program.

[pcmic]

jholland1964,

Hello,

Sorry for the delay-two kids recovering from the flu so not too much time spent on my computer--Thanks for hanging in there with me!!

I have put almost everthing on my computer-I have updated everything that I could find-My disk player / drives say all my disks are "either corrupted or not the right driver. I never touched my partitions when I reformatted and I put different down loads on my flash drive and it wont read that either-it says you have to reformat to work I say yes and it says I cant do it. I took off Symanec like you said and it still is kind of slow. Do I need to start over???

Here is my updates:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:29:52 PM, on 3/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AVG\AVG8\aAvgApi.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://rhodeisland.cox.net/cci/home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MusicMatch\MusicMatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1236556638343
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1236344185781
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1236577149906
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 6566 bytes

Here is some additional info-

EVEREST Ultimate Edition

--------------------------------------------------------------------------------

Version EVEREST v5.00.1650
Benchmark Module 2.4.258.0
Homepage http://www.lavalys.com/
Report Type Report Wizard [ TRIAL VERSION ]
Computer CHRISTOPHER-COM (Family Computer)
Generator Christopher
Operating System Microsoft Windows XP Home Edition 5.1.2600 (WinXP Retail)
Date 2009-03-12
Time 23:32

Summary

--------------------------------------------------------------------------------

Computer:
Computer Type ACPI Uniprocessor PC
Operating System Microsoft Windows XP Home Edition
OS Service Pack [ TRIAL VERSION ]
Internet Explorer 7.0.5730.13 (IE 7.0)
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name CHRISTOPHER-COM (Family Computer)
User Name Christopher
SMTP E-mail Address [e-mail]
Logon Domain [ TRIAL VERSION ]
Date / Time 2009-03-12 / 23:32

Motherboard:
CPU Type Intel Pentium 4, 1500 MHz (15 x 100)
Motherboard Name Dell Dimension 4300
Motherboard Chipset Intel Brookdale i845
System Memory [ TRIAL VERSION ]
DIMM1: Infineon HYS64V16300GU-7.5 128 MB PC133 SDRAM (3.0-3-3-6 @ 133 MHz) (2.0-2-2-5 @ 100 MHz)
DIMM2: Kingston 32MX64PC133CL3168 [ TRIAL VERSION ]
BIOS Type Phoenix (09/10/01)
Communication Port Communications Port (COM1)
Communication Port ECP Printer Port (LPT1)

Display:
Video Adapter NVIDIA GeForce2 MX (32 MB)
3D Accelerator nVIDIA GeForce2 MX/MX 400
Monitor Dell E770s [17" CRT] (881UM18KB4U5)

Multimedia:
Audio Adapter Creative SB Live! Value (CT4780) Sound Card

Storage:
IDE Controller Intel(R) 82801BA Ultra ATA Storage Controller - 244B
Floppy Drive Floppy disk drive
Disk Drive Sony Storage Media USB Device
Disk Drive WDC WD400BB-75CLB0
Optical Drive HL-DT-ST CD-RW GCE-8160B (16x/10x/40x CD-RW)
Optical Drive PIONEER DVD-RW DVR-116D (DVD+R9:12x, DVD-R9:12x, DVD+RW:20x/8x, DVD-RW:20x/6x, DVD-ROM:16x, CD:40x/32x/40x DVD+RW/DVD-RW)
SMART Hard Disks Status OK

Partitions:
C: (FAT32) [ TRIAL VERSION ]
Total Size [ TRIAL VERSION ]

Input:
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse PS/2 Compatible Mouse

Network:
Primary IP Address [ TRIAL VERSION ]
Primary MAC Address 00-10-4B-73-C2-CA
Network Adapter 3Com 3C900TPO-based Ethernet Adapter (Generic) (70.1 [ TRIAL VERSION ])
Modem Dell Data Fax Modem

Peripherals:
USB1 Controller Intel 82801BA ICH2X - USB Controller 1 [C-0]
USB1 Controller Intel 82801BA ICH2X - USB Controller 2 [C-0]
USB Device EPSON Perfection 3490/3590
USB Device USB Mass Storage Device
USB Device USB Printing Support

DMI:
DMI BIOS Vendor Dell Computer Corporation
DMI BIOS Version A02
DMI System Manufacturer Dell Computer Corporation
DMI System Product Dimension 4300
DMI System Version
DMI System Serial Number [ TRIAL VERSION ]
DMI System UUID [ TRIAL VERSION ]
DMI Motherboard Manufacturer Dell Computer Corporation
DMI Motherboard Product Dimension 4300
DMI Motherboard Version
DMI Motherboard Serial Number [ TRIAL VERSION ]
DMI Chassis Manufacturer Dell Computer Corporation
DMI Chassis Version
DMI Chassis Serial Number [ TRIAL VERSION ]
DMI Chassis Asset Tag [ TRIAL VERSION ]
DMI Chassis Type Mini Tower

Computer Name

--------------------------------------------------------------------------------
Thanks again,

Chris

[jholland1964]

Sorry, but I am a bit confused here. Re-reading everything I see that you said you had the following disks....

So know I have multiple disks to choose from--Windows xp step by step training, upgrading your dell to windows xp home edition and upgrade version 2002, reinstalling wind ME

So you said that you did this

I have loaded Windows ME then updated to XP home

Did you then do ALL the updates for XP Home? or did you install this new drive first and then do all the Windows updates?
Did you do all the steps recommended HERE before proceeding to update to XP?

I'll be honest here, I have no idea what entries like this mean in the Everest log;
DMI System Serial Number [ TRIAL VERSION ]
DMI System UUID [ TRIAL VERSION ]
DMI Motherboard Serial Number [ TRIAL VERSION ]
DMI Chassis Serial Number [ TRIAL VERSION ]
DMI Chassis Asset Tag [ TRIAL VERSION ]

[pcmic]

Hello,

I am going to start over today when I get home from work. I will follow the directions you gave me and I will let you know what happened. Thanks for your patience and I appreciate your help. Talk to you soon,

chris

[pcmic]

hello,

one last question--I cant get any disks to work in my machine. I cant get the Millenium Disk to work. any ideas to start the process.
i deleted the drives and restarted the computer and tried to upgrade from the device manager but said it was working fine--how do I wipe everything out and start again.

sorry I am very frustrated with my computer thanks again

chris

[jholland1964]

Not sure what you mean you can't get any disks to work...you mean CD's won't play? You need to change the boot order to boot from CD.

[pcmic]

The windows me cd wont run in my machine. It says it is corrupt or the drives are not compatible. How do you change the boot order? I am just erasing everything from my computer-I am so fet up with this machine--Sorry still upset I cant figure this one out. I printed the instructions to upgrade to XP but I have to get the Me cd to go first. any thoughts or ideas I would appreciate it.

Thanks

Chris

[jholland1964]

Boy I am so sorry. Read through the steps here and see if they help any. If not, check back and I will continue to search for you.
http://www.burzurq.com/forum/format_reinstall.html