AOL IE wont load and blackice detection

[Stevie Wonder]

When i connect to the internet (aol v9.0) the inbulit internet explorer wont load anything, i am using firefox at the moment which i prefer but my mother wants to use the aol, and also my firewall (blackice v3.6.coo) keeps picking up the same two things:

10/10/2005 06:21:42, SQL_SSRP_StackBo, 221.236.223.132, 1

10/10/2005 06:21:42, SQL_SSRP_Slammer_Worm, 221.236.223.132, 1

but as much as i block them they keep appearing and use different ip adresses each time but the name stays the same, can you help me at all?

Logfile of HijackThis v1.99.1
Scan saved at 16:48:46, on 10/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ISS\BlackICE\blackd.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\apps\ABoard\AOSD.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ISS\BlackICE\blackice.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\WINDOWS\slrundll.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\steve\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tesco.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tesco.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.tesco.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Tesco internet access
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P40 "EPSON Stylus Photo RX420 Series (Copy 1)" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: BlackICE PC Protection.lnk = C:\Program Files\ISS\BlackICE\blackice.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tesco.net
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C59F6091-B4E1-4FEC-B8D6-A36CAE7A603A}: NameServer = 205.188.146.145
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\ISS\BlackICE\blackd.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\ISS\BlackICE\rapapp.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

[dygital]

You probably have a LSP in the system causing some issues. AOL makes it convienient to fix things up, from my experience the rebuild/uninstall AOL Adapter utility will resolve it *temporarily*.

(Quoting from AOL Help, http://help.aol.com):

Rebuild/uninstall the AOL Adapter

A damaged AOL Adapter may cause this issue. Windows networking requires a network adapter for any application that must access the Internet. The AOL® software uses the AOL Adapter to access the Internet.

Note: Please make sure the AOL software is closed before you follow the steps.

To rebuild/uninstall the AOL Adapter:
1. Click the Start button, select All Programs or Programs, select America Online, then click AOL System Information.
2. Click the Utilities tab.
3. Click the Uninstall AOL Adapter or Rebuild AOL Adapter button.

Note: If Windows displays the message 'The AOL Adapter was successfully uninstalled' or has already been uninstalled, click the OK button.

4. Click the Close button.
5. Restart the computer and start the AOL software again. The AOL Adapter will be rebuilt automatically.

Any other questions, feel free to PM me, as I fix AOL software daily. :)

[DMR]

Any other questions, feel free to PM me, as I fix AOL software daily. :)

Actually, we ask that members keep troubleshoots "on the forums" rather than use mechanisms like PMs, email, chat, etc. By doing so, we provide helpful information not only to the member currently experiencing the problem, but also to others who may be having similar problems.

From the related section of our forum rules:

Keep it on the site
Please do not post asking for an answer to be sent to you via email. Problems and their responses assist others who read them. Please refrain from responding to people's questions via email for the same reason. Moderators may snip email addresses out of such posts without notice. That being said, please do not email or PM forum staff with your support questions. Also please do not ask support questions in the DaniWeb IRC chat. The chat is meant to offer a more laid back community atmosphere where members can get to know each other, and not as a venue to constantly ask/answer people's computer frustrations.

[dygital]

No problem. :)

[Stevie Wonder]

i dont seem to have america online on my computer, i am in Britain, will that make any difference? Oh and i am not networked to any computer and AOL came on my computer dont know if this makes any difference, but i thought i may as well tell you) and any advice on the black ice detection, its quite a new thing, but i think its comming from the inside as its so regular.

P.S Was there anything out of the odinary in the hijackthis log?

Thanks for your time and patience
Steve

[DMR]

i dont seem to have america online on my computer

Er- the following entries in your HJT log indicate otherwise:

Running processes:
.
.

C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe

Your log is clean, and as it does not indicate that you are running any SQL database software, I'd guess that the BlackIce messages are warnings of probes from the outside; the IP addresses would be those of the attacking/probing computers. BlackIce will block these, but there's really nothing you can do to stop the probes entirely.

If you are running an SQL server, you need to apply all of the most current security patches ASAP.

[Stevie Wonder]

well ofcourse i knew that AOL was an abbreveation of america online, honest... :o thanks for the help i will try this now.

[Stevie Wonder]

ok, i have tried rebuilding the AOL adapter but it has not helped, also i have discovered that when you just type a web adress into the AOL adress bar then it tries to connect to the ip adress 205.188.146.146, which is one of the ip adresses that the SQL has tried to come from.

hope you understand what i have just said, again thanks for the help and patience you have given

[dygital]

That sounds a little odd. In the past with Black ICE it would give me false positives (not on purpose). What if you lowered it down a bit, or allowed aol.exe, acsd.exe, waol.exe, aolservicehost.exe "fully allow" or equivalent in the program?

[DMR]

well ofcourse i knew that AOL was an abbreveation of america online, honest... :o

lol :mrgreen:

then it tries to connect to the ip adress 205.188.146.146, which is one of the ip adresses that the SQL has tried to come from.

205.188.146.146, and the 205.188.146.145 address listed in your 017 HJT log entry, are the addresses of AOL proxy servers. Your AOL software uses those servers to access the Internet; this is normal.

A couple of things to try:

1. Disable BlackIce entirely before trying to troubleshoot anything else. Firewalls often get confused or corrupted, and block traffic that they should not.

2. If disabling the firewall has no effect, see what happens when you try to reach a site by its IP address instead of its URL. Using Google as an example, type the following into AOL's address bar and let us know the results:

http://66.102.7.147

3. I'm probably preaching to the choir here, but in all honesty I'd really suggest trying to wean your mother off of AOL. AOL has always caused its fair share of headaches, and each new version is more bloated than the last, adding more layers of crud and complexity to your system as a whole.

[dygital]

....

3. I'm probably preaching to the choir here, but in all honesty I'd really suggest trying to wean your mother off of AOL. AOL has always caused its fair share of headaches, and each new version is more bloated than the last, adding more layers of crud and complexity to your system as a whole.

Being as I work there, I know exactly how the software operates, and I'll only agree that its bloated. I want to recommend, to uninstall AOL completely, and reinstall it- as AOL will remove its network adapter (VPN) and reinstall it. (Also, uninstall AOL Connectivity Service).

I want to recommend to disable "Fast Start", since it is a waste, and pre-loads AOL into memory to make it seem AOL loads faster (it does, but only because its held in memory). To do that, right click the AOL icon in the system tray, click AOL 9.0, then "start-up settings", then wait... then uncheck "Enable Fast Start". Close AOL, reboot for change to take effect. You will notice a faster boot.

AOL Dialer is also an independant dialer not requiring using the full AOL software, you can also use so its more like a regular internet connection.

However, still do what DMR said about disabling the firewall and try again - as we troubleshoot this.

[Stevie Wonder]

I have shown her the log about weaning off AOL and she has agreed. :cheesy:
Strange thing though, i copied and pasted that I.P adress and it worked, so i tried typing the url in and that also worked (maybe the connection to the site working kicked it back into working properly) And also my computer has taken to being VERY slow and when i bring task manager up there are no other applications being used, but it stays at 100% in performance, recently the PF usage has reached up to 1.40 GB which it has never done before, its not an old computer and is very good and i have not installed anything new in, i have scanned it with the newest version of adaware and AVG. I know that that was completely irrelavant to the title but something that i wanted to ask about, shall i start a new forum?

[Stevie Wonder]

This is becoming quite a problem now, its been at 100% since my last post and the PF usage has slowly gone up and up, only to 500mb, but its just the constant stress on the processor and the CPU in general, also i have found that the hotmail inbox wont load, well it does, but only after ages (as in alot longer than usual ages even though im on dial up(i cant get broadband))

[dygital]

have shown her the log about weaning off AOL and she has agreed. :cheesy:
Strange thing though, i copied and pasted that I.P adress and it worked, so i tried typing the url in and that also worked (maybe the connection to the site working kicked it back into working properly) And also my computer has taken to being VERY slow and when i bring task manager up there are no other applications being used, but it stays at 100% in performance, recently the PF usage has reached up to 1.40 GB which it has never done before, its not an old computer and is very good and i have not installed anything new in, i have scanned it with the newest version of adaware and AVG. I know that that was completely irrelavant to the title but something that i wanted to ask about, shall i start a new forum?

...edit not being used...

This is becoming quite a problem now, its been at 100% since my last post and the PF usage has slowly gone up and up, only to 500mb, but its just the constant stress on the processor and the CPU in general, also i have found that the hotmail inbox wont load, well it does, but only after ages (as in alot longer than usual ages even though im on dial up(i cant get broadband))

Based on all that, that it seems the DNS resolution isnt working, you want to check a few things. (Yeah, a couple more replies needed and its fixed)

1) Run LSPFix for Windows XP - http://www.cexx.org/lspfix.htm. Take a screenshot of it, or transpose it back to this thread.

2) Repair the network adapters in windows. Type this in a command prompt (cmd.exe) -
netsh int ip reset c:/reset.log
When sucessfully, run a blank line will appear, and terminal window text will appear, you can just type exit and the window will close.

Reboot computer, try again, let me know how it fixed it. For reference, use Google.com, IP: 216.239.57.99 to see if you can get there. :)

[DMR]

I know exactly how the software operates, and I'll only agree that its bloated.

No offence meant, but the growing bloat is one of the main causes of problems/conflicts on users' system out there in the "real world". The definition of the term "Creeping Featurism" pretty much sums up the problem.

Stevie Wonder,

Try the suggestions dygital gave above. Also- can you please tell us which exact running processes listed in Task Manager are sucking up the majority of your CPU and Memory resources?

[Stevie Wonder]

i have tried all of what dygital has reccomended. My connection is fine as i said yesterday, so thankyou for that, but as far as the system sucking programs are concerned, i will print screen, and send below, but i have found that it is actually (to my great surprise) that it is black ice with blackd.exe, i have not had any trouble with it before, and will try to reinstall it, when i do ill post back here.

[DMR]

OK- post an update when you can; we'll be here...

[Stevie Wonder]

:sad: Takes far too long to download 6.3mb when your downloading at 3kb/s STUPID DIALUP! *kicks modem* AND its really doesnt help when it only downlaods half of it and gives up! grr. :mad:

I will try to post soon, although i make NO promises as my dial up may not work anymore *hides sledgehammer behind back*

[Stevie Wonder]

Ok, im having some really big problems now, i cant uninstall it, when i try to remove it with the add/remove tool it comes up with:
Failed to get product version from C:\WINDOWS\biversion.dll.
Code: -1
And when i try to install version 2.9 it says that i need to remove the currently installed version with the add/remove tool, but it comes up with the notice above. Also i have to end process blackd.exe or the computer runs at 100% constantly, so i have no firewall. i could not download the installer as there is no new one out, and since it asks me to uninstall the old one i cant, so im at a loss of what to do

Where can i get the software installer? or something to remove it so i can install 2.9 and then download 3.6?

Sorry for not replying sooner i had to go over my dads
Many thanks, Steve

[Stevie Wonder]

OK, not funny anymore, i think i may have some nasties, i will post a HJT log, my computer restarts itself for no reason, my neighbours is doing it aswell, i have heard of such occurences and they have all ended up with the CPU blowing ram motherboard processor the lot, heres the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 22:47:52, on 24/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Documents and Settings\steve\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tesco.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tesco.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.tesco.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Tesco internet access
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P40 "EPSON Stylus Photo RX420 Series (Copy 1)" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: BlackICE PC Protection.lnk = C:\Program Files\ISS\BlackICE\blackice.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tesco.net
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\ISS\BlackICE\blackd.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\ISS\BlackICE\rapapp.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Also there have been a few new things on my taskmanager:

E_FATI9CE.EXE - which is twice in a row
ALCWZRD.EXE

and a few others that i have not seen before

Please help, i dont want my computer to die. :cry:

[Stevie Wonder]

ok, ive fixed it now, sorry i couldnt reply sooner, have had too much coursework to do, and have moved house and havnt had access to the internet (using a freinds computer now) but yay!! ive moved house and can get broadband..... unfortunatly its AOL , mainly because i couldnt get it cancelled, they kept taking he money out even after ringing, letters and other things.

Thanks for all your help

Steve