caperjack 875 I hate 20 Questions Team Colleague

Please Download CWShredder from HERE and run the Program in safe mode . Press the "Fix Button" Let it fix all variants. Next, Close the program and all windows and IE windows and run hijackthis and Post a Fresh log.

Reboot to SAFE mode to run CWShredder

How to start computer in safe mode

Then these 2 programs .
Ad-Aware and Spybot

Download the latest version of Ad-Aware at ADAWARE

Setup Ad-Aware .
After installing AAW, and before running the program, update reference files by using the bottom right button in the program, labeled "Check for Updates."

Launch the program, and click on the Gear at the top of the start screen.

Click the "Scanning" button.
Under Drives & Folders, select "Scan within Archives".
Click "Click here to select Drives + folders" and select your installed hard drives.

Under Memory & Registry, select all options.
Click the "Advanced" button.
Under "Log-file detail", select all options.
Click the "Tweaks" button.

Under "Scanning Engine", select the following:
"Include additional Ad-aware settings in logfile" and
"Unload recognized processes during scanning."
Under "Cleaning Engine", select the following:
"Let Windows remove files in use after reboot."
Click on 'Proceed' to save these Preferences.
Please make sure that you activate IN-DEPTH scanning before you proceed
.................................................
Increase the strength of Ad-Aware by installing the …

caperjack 875 I hate 20 Questions Team Colleague

Yes the internet connection won't work, not even sure if they tried to do anything else .I will go to my sisters to-morrow and try your suggestions ,thanks .

caperjack 875 I hate 20 Questions Team Colleague

Two computers hooked together with not sure the model but new, reclaimed /or refurbished ,D-Link wireless Router and Wireles Nick card . from TigerDirect.CA .Cable connection.Everything seems to be hooked up right ,They cloned the macAddress as instructed on the D-Link web site ,worked the first day ,reboot the next morning and it will no work any more .Any Ideas , !thanks .Its my sisters computers and her Son hooked it up .

caperjack 875 I hate 20 Questions Team Colleague

My antivirus is up to date.. how do I do a full scan.. ? :rolleyes: ( thank you for help!)

What Anyivirus program are you using ,if its on auto scan It all ready missed what you caught!
Run this free online virus scan and make sure you check off auto fix before you run it .
http://housecall.trendmicro.com/housecall/start_corp.asp

caperjack 875 I hate 20 Questions Team Colleague

Move on over to the Security Fourm ,
And after that, please do the following:


Download 'Hijack This!'.HERE
Download link is on the left

Unzip (extract) it to a folder of its own.Like c:\HJT\hijackthis.exe , Then Doubleclick HijackThis.exe (in the new folder), and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, then Ctrl-A to Select All, and copy its contents here. for hijackthis,most of what it lists will be harmless or even essential, don't fix anything yet.

reboot computer and post a new hijackthis log

caperjack 875 I hate 20 Questions Team Colleague

Run this online virus scan ,make sure you check off auto fix .
http://housecall.trendmicro.com/housecall/start_corp.asp

..............................................................
And after that, please do the following:


Download 'Hijack This!'.HERE
Download link is on the left

Unzip (extract) it to a folder of its own.Like c:\HJT\hijackthis.exe , Then Doubleclick HijackThis.exe (in the new folder), and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, then Ctrl-A to Select All, and copy its contents here. for hijackthis,most of what it lists will be harmless or even essential, don't fix anything yet.

reboot computer and post a new hijackthis log

caperjack 875 I hate 20 Questions Team Colleague

After you get it all fixed and things are working good ,Download and install these two programs to help stop Spyware .


Spywareblaster


SpywareGuard

IE-SPYAD


Keep Up-to-Date!
The most important key to maintaining a secure computer is keeping your protection up-to-date.

also check how i got infected in the first place .

http://www.computercops.biz/postlite7736-.html

caperjack 875 I hate 20 Questions Team Colleague

1.98 link in my signature.
The Removal tools link .

caperjack 875 I hate 20 Questions Team Colleague

This file[netnf3.inf] is it the same one everytime you get the error .

I would suggest removing all addin cards,like modem .sound ect ect , except the video.and also take the cd and give it a good cleaning .

caperjack 875 I hate 20 Questions Team Colleague

Thanks Crunchie ,i think im going to be going back to that computer to add some ram ,so i will check it again .
The boot camp moderator over at SWI ,told me to do a time travel test .by putting the computer ahead a few days ,run hijackthis ,and reset the day/time ,and if its going to return it will show up in the hijackthis log

caperjack 875 I hate 20 Questions Team Colleague

Try this ..


Download this .reg file to a temporary place, like Desktop. http://www.spywareinfo.com/downloads/tools/IEFIX.reg
Double-click on it and answer Yes.
It will restore all the default Search settings for IE.

caperjack 875 I hate 20 Questions Team Colleague

Hmm....., well I will see the posts to see where it is, but if you can help me find the fix then it will be much appreciated.

found the fix on another site i visit.

do the followinfg.

Download this .reg file to a temporary place, like Desktop. http://www.spywareinfo.com/downloads/tools/IEFIX.reg
Double-click on it and answer Yes.
It will restore all the default Search settings for IE.

caperjack 875 I hate 20 Questions Team Colleague

I'v never heard of buying drivers , I build and repair old coputers and have been able to download 99% of the drivers I've ever needed from the net .most of them from here .You just search FCC#'s or part of a # off the idem you aree looking for drivers for .as for motherboard drivers usually find them by searching the #'s found on the board
http://members.driverguide.com/ums/index.php?action=l&furl=aHR0cDovL21lbWJlcnMuZHJpdmVyZ3VpZGUuY29tL2luZGV4LnBocD9hY3Rpb249b2xkc2l0ZXNlYXJjaA%3D%3D&ac=1090536965v99640

User name=drivers
password =all

I only meant this for old Computer ,where the manufactor is gone out of buisness ,or bought out .
Didn't reread you first post to see what you were doing .

caperjack 875 I hate 20 Questions Team Colleague

Just a quick response .
WinXp doesn't come with these microsoft programs .
MSoffice Apps (MSWord, Excel, etc) .

caperjack 875 I hate 20 Questions Team Colleague

I'v never heard of buying drivers , I build and repair old coputers and have been able to download 99% of the drivers I've ever needed from the net .most of them from here .You just search FCC#'s or part of a # off the idem you aree looking for drivers for .as for motherboard drivers usually find them by searching the #'s found on the board
http://members.driverguide.com/ums/index.php?action=l&furl=aHR0cDovL21lbWJlcnMuZHJpdmVyZ3VpZGUuY29tL2luZGV4LnBocD9hY3Rpb249b2xkc2l0ZXNlYXJjaA%3D%3D&ac=1090536965v99640

User name=drivers
password =all

caperjack 875 I hate 20 Questions Team Colleague

maybe when it comes back ,after 6 reboots it hasen't ,I took it back to owner ,after fixing all baddies and running ad-aware in safe mode,
Last log before i took computer back.
Thanks Crunchie

Logfile of HijackThis v1.98.0
Scan saved at 7:39:53 AM, on 7/22/2004
Platform: Windows ME (Win9x 4.90.3000A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\KHOOKER.EXE
C:\WINDOWS\SYSTEM\CTHELPER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\HPOOPM07.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP PSC 700 SERIES\BIN\HPODEV07.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP PSC 700 SERIES\BIN\HPOEVM07.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\SYSTEM\khooker.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common …

caperjack 875 I hate 20 Questions Team Colleague

I have started to consider that the only way to completly clean the machine, would be to make a clean installation of windows :O)

What do you think

It defentily would be ,We tend to spend way more time trying to clean them when I format and clean install is much faster!

caperjack 875 I hate 20 Questions Team Colleague

Missing it, helping with logs all the time and I can't find the tools i need to remove this baddie ,fix it and search and cant find the file to delete and they just keep coming back .Im searching for that batch file to create a win.txt fiew !! these 3 cant be found anywhere.
C:\WINDOWS\SYSTEM\APPSU32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\MSZH32.EXE
note this is winME computer .


Logfile of HijackThis v1.98.0
Scan saved at 10:57:23 PM, on 7/21/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\KHOOKER.EXE
C:\WINDOWS\SYSTEM\CTHELPER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\HPOOPM07.EXE
C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE
C:\WINDOWS\SYSTEM\APPSU32.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP PSC 700 SERIES\BIN\HPODEV07.EXE
C:\WINDOWS\SYSTEM\MSZH32.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP PSC 700 SERIES\BIN\HPOEVM07.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\povno.dll/sp.html#22776
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\povno.dll/sp.html#22776
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\povno.dll/sp.html#22776
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (file missing)
O2 - BHO: Class - {CF23122C-C402-1BC6-41DB-64BC722F041B} - C:\WINDOWS\SYSTEM\WINTU32.DLL
O3 - …

caperjack 875 I hate 20 Questions Team Colleague

you could try this ,right click on mycomputer /properties/device manager click the + next to cdroms and remove them and reboot computer to reload the drivers for them ,also you could go in to the BIOS and go to the detect hard drive section and click Y for each drive it detects.
Florida AH! not that far away actuall I live on the East coast of Canada[not toronto The Real east coast Nova Scotia ]

caperjack 875 I hate 20 Questions Team Colleague

50/50 maybe

caperjack 875 I hate 20 Questions Team Colleague

I have no sound card in my old comp im putting back together..Do I have to have one in order to make the CD-Rom work? I dont have an extra one to put in it or the $$ to go buy one at the moment. If there is any way around it i need a way to use the cd-rom

After you get it all sorted out let me know where you live i maybe able to send you a soundcard ,no charge ,if it not half way around the world

caperjack 875 I hate 20 Questions Team Colleague

install harddrive/cdroms.with pictures
http://www.daileyint.com/build/ibuild6.htm

complete details .
http://www.daileyint.com/build/

caperjack 875 I hate 20 Questions Team Colleague

The answer is in your post =(It’s a Compaq system)!:) LOL
Just kidding ,it maybe heat,this time of the year its gets hot in my house and even hotter in the tower,mine shut down the other day and wouldn't restart untill it cooled down a bit !
Or it could be ram.

caperjack 875 I hate 20 Questions Team Colleague

Threr are more problems in that log than ,some AdSubtrack program running !!

caperjack 875 I hate 20 Questions Team Colleague

I was going to suggest it a few times ,but some people love it and cant do with out it ,or so they think. so I was shying away from telling people to remoce it !!Nowing that it causes the problems it causes ,because I installed it once back in 97!!:)
WebFlds doesn't seem to be a problem ,seems to be a legit windows file/program.

caperjack 875 I hate 20 Questions Team Colleague

OK. I found the instructions on how to use Adaware and Spybot a bit confusing, so I hope I did this right. Here is the final hijack report.

Read slow and it will seem like you know what its saying ;) LOL

caperjack 875 I hate 20 Questions Team Colleague

......................................................................................................

you picked up the Sasser worm since your last post .run this online virus scan ,be sure to check auto fix .
http://housecall.trendmicro.com/housecall/start_corp.asp

Also download and install the windows Sasser patch here .
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

......................................................................................................
Do this before you scan for the virus/worm

Disabling System Restore on Windows XP

IMPORTANT NOTES:

You must be logged in as an Administrator to do this. If you are not logged in as an Administrator, the System Restore tab will not be displayed.
Turning off System Restore will clear out all previous restore points.
To turn off Windows XP System Restore:

NOTE: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK.


1. Click Start.
2. Right-click the My Computer icon, and then click Properties.
3. Click the System Restore tab.
4. Check "Turn off System Restore" or "Turn off System Restore on all drives" as shown in this illustration:
5. Click Apply.
6. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
7. Click OK.
8. Proceed with what you need to do; for example, virus removal. When you have finished, restart the computer and follow the instructions in the …

caperjack 875 I hate 20 Questions Team Colleague

how i can remove the password to get in the laptop. gateway solo 2000 p3c
i don't remember my password

Look up above where you come into this thread ,click where it says new thread ,and tell us what password you forgot,bios/or windows

caperjack 875 I hate 20 Questions Team Colleague

If the keyboard on the win98 machine works when you run diagonist tools ,maybe you could boot with a windows boot disk and reload windows over itself ,this might fix the mouse keyboard problems in win98.

caperjack 875 I hate 20 Questions Team Colleague

i've searched and can't find it ,or any info on you problem sorry

caperjack 875 I hate 20 Questions Team Colleague

I know all logs are different but instructions are usually simular have a read here ,'
http://forums.spywareinfo.com/index.php?showtopic=16449

caperjack 875 I hate 20 Questions Team Colleague

Important: Create a folder on the C: drive called HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT.
Unzip HijackThis into this folder. When you run HijackThis from this folder and have it "Fixed checked" it will create a backup file of modifications to use if restore is necessary.

...........................................................
Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

NOTE: Please copy and paste this post into notepad and save to you desktop. or print a copy of these instructions because you will be working with all windows closed except HijackThis.

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O21 - SSODL: Web Event Logger - {79FEACFF-FFCE-815E-A900-316290B5B738} - C:\WINDOWS\System32\Ienmcl32.dll

Now reboot into safe mode and delete the following files and folders if found ."Fix Checked"...Reboot to SAFE mode to delete files ,How to start computer in safe mode


C:\WINDOWS\System32\Ienmcl32.dll.......delete file


to delete the above files and folder you will need to do the following
go to Show hidden files & folders
"Fix Checked"...Reboot to SAFE mode to delete files
How to start …

caperjack 875 I hate 20 Questions Team Colleague

Don't mind! any time :)
I was thinking that the removal tool got rid of the entries!

caperjack 875 I hate 20 Questions Team Colleague

I think there is registry fix for that ,not sure what it is but i think it was giving in here to someone else .

caperjack 875 I hate 20 Questions Team Colleague

download full working trojan hunter trial version ,scan computer . .
http://www.misec.net/trojanhunter/

caperjack 875 I hate 20 Questions Team Colleague

Wanna ,reboot and post a new log just to make sure you got rid of all the baddies !:)

caperjack 875 I hate 20 Questions Team Colleague

in outlook /tools /accounts /properties .not sure if you will find the problem there because it should be setup pop -smtp default

caperjack 875 I hate 20 Questions Team Colleague

Please Download CWShredder from HERE and run the Program in safe mode . Press the "Fix Button" Let it fix all variants. Next, Close the program and all windows and IE windows and run hijackthis and Post a Fresh log.

Reboot to SAFE mode to run CWShredder

How to start computer in safe mode

Then these 2 programs .
Ad-Aware and Spybot

Download the latest version of Ad-Aware at ADAWARE

Setup Ad-Aware .
After installing AAW, and before running the program, update reference files by using the bottom right button in the program, labeled "Check for Updates."

Launch the program, and click on the Gear at the top of the start screen.

Click the "Scanning" button.
Under Drives & Folders, select "Scan within Archives".
Click "Click here to select Drives + folders" and select your installed hard drives.

Under Memory & Registry, select all options.
Click the "Advanced" button.
Under "Log-file detail", select all options.
Click the "Tweaks" button.

Under "Scanning Engine", select the following:
"Include additional Ad-aware settings in logfile" and
"Unload recognized processes during scanning."
Under "Cleaning Engine", select the following:
"Let Windows remove files in use after reboot."
Click on 'Proceed' to save these Preferences.
Please make sure that you activate IN-DEPTH scanning before you proceed

Download SPYBOT

After installing Spybot S&D, update …

caperjack 875 I hate 20 Questions Team Colleague

Also go to the Dot Com Security site in my signature and on the right hand side you will see links to online virus scans run one or 2 of those after you fix with hijackthis

caperjack 875 I hate 20 Questions Team Colleague

Lets start with this!

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

NOTE: Please copy and paste this post into notepad and save to you desktop. or print a copy of these instructions because you will be working with all windows closed except HijackThis.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/customize/sbcyd...hoo.sbc.com/dsl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/customize/sbcyd...//www.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/customize/sbcyd.../search/ie.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/customize/sbcyd...//www.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://rd.yahoo.com/customize/sbcyd...//www.yahoo.com


R3 - Default URLSearchHook is missing

O8 - Extra context menu item: Power Search - res://C:\PROGRA~1\COMMON~1\MSIETS\msielink.dll//iemenu

O16 - DPF: {12398DD6-40AA-4C40-A4EC-A42CFC0DE797} (Installer Class) - http://www.xxxtoolbar.com/ist/softw...0006_cracks.cab

O16 - DPF: {3C5BA506-6C30-4738-9CED-797ACADEA8DC} - http://banners.pennyweb.com/11863/SQLoader.cab

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/11b73340e8607b...tzip/RdxIE2.cab

O16 - DPF: {666DDE35-E955-11D0-A707-000000521958} - http://69.56.176.227/webplugin.cab

O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} - http://download.websearch.com/Dnl/T_50138/QDow_AS2.cab

O16 - DPF: {886DDE35-E955-11D0-A707-000000521958} - http://69.56.176.78/webplugin.cab
-IEPlugin
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} - http://www.mt-download.com/MediaTicketsInstaller.cab

O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.bundleware.com/activeX/DS3/DS3.cab

O16 - …

caperjack 875 I hate 20 Questions Team Colleague

Reboot computer a few time may set things right

caperjack 875 I hate 20 Questions Team Colleague

Also ,I forgot this ,make sure you have drives for all hardware ,before you format

caperjack 875 I hate 20 Questions Team Colleague

It is a trojan or remnant of one .
Run this online virus scan ,make sure to check auto fix and check off your harddrive

http://housecall.trendmicro.com/housecall/start_corp.asp

caperjack 875 I hate 20 Questions Team Colleague

go to control panel ,add/remove program and Create a windows boot disk .Boot computer to it and at the prompt type format c: /s

http://www.computerhope.com/formathl.htm

http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q255/8/67.asp&NoWebContent=1

caperjack 875 I hate 20 Questions Team Colleague

We don't like ya!LOL
When you run Scandisk do you run the Through scan /surface scan .Also if you didn't allready it is better to run scandisk from the windows boot disk ,

caperjack 875 I hate 20 Questions Team Colleague

I Nothing to add about the mouse ,keyboard ,except I agree with DMR,Reloard windows

I had Windows XP on my computer but found that updating my windows did not allow me to use some of my programs that I had when having Windows 98.

This is no reason to remove XP .all you had to do was right click on the 98 Programs Icon and choose Compatiabilty,and check of win98 and XP would have ramn the 98 program in 98 mode ! I have dozens of 95&98 programs that work just fine in XP

caperjack 875 I hate 20 Questions Team Colleague

Log is clean now .

Your knowledge is amazing

It Amazes me too!

caperjack 875 I hate 20 Questions Team Colleague
caperjack 875 I hate 20 Questions Team Colleague

I've never used the program ,Never had the opertunity to have to use it .I just read about using it and i know it can get confusing!!Thats why i posted the link to it being explained better than i could explain it .Sorry

caperjack 875 I hate 20 Questions Team Colleague

check the security section of these fourms and get the suggested program to check for malware/spyware .