Jump to content

Recommended Posts

Hi,

I've had a number of problems with my PC recently, and I don't know if they are linked or not.

I'll list them in order of occurence:

1) Every time I start my computer I now get an error message which say - "One of the files containing your system's Registry data had to be recovered by use of an alternate copy. The recovery was succesful"

2) I got an icon in the bottom righthand corner which was a red circle with a white cross. It had a text bubble coming out of it saying that I had spyware, click here to remove it. I recognised that this was some sort of virus pre-installer and downloaded AVG 8.5 (As my Norton 360 didn't pick it up) and removed all threats and I haven't seen it since.

3) However, since removing the threat in 2), I now can't access my task manager and the error message has the same icon as in 2) which makes me think that I haven't completely removed it.

4) I am now getting frequent error messages coming up which crash my internet explorer and/or mozilla firefox.

 

Please can you advise as to what I should do. I have previously followed instructions on here to remove a virus and I am very happy to do that again.

 

Thanks

Edited by Bombaye
Link to post
Share on other sites

Mornin, please download and install these. I've included the definitions files as well as the program installers.

 

DL -go get em first, after installing dl and double click go get em defs to update MBAM. Next, dl Superantispyware and install it, then dl SAS definitions. DO the same as the first to update it.

 

Next do a quick scan w/ MBAM and allow it to remove whatever it may find then do the same w/ SAS. If either says it needs to reboot to finish removing an infection, allow it to do so.

 

go get em defs.exe

GO get em.exe

SASDEFINITIONS.EXE

SUPERAntiSpyware.exe

 

:Texan:

Link to post
Share on other sites

I got an icon in the bottom righthand corner which was a red circle with a white cross. It had a text bubble coming out of it saying that I had spyware, click here to remove it. I recognised that this was some sort of virus pre-installer

Just so you know, having that icon in your notification area means the virus is already installed.

Edited by markcynt
Link to post
Share on other sites

That seems to have worked, however I'm still getting the error message when I start up. Do you know what I can do about that?

 

Hello Bombaye,

This happened, most likely from you cleaning this up, an registry keys where affected and

thus causing some corrupted files on the hard drive. So try

the following first:

 

Go to my computer and right click on the hard drive (which is generally c:

unless you have specified otherwise) then click properties, this will bring

up the hard drive properties window. Now click on the tools tab and then

click on Check Now... then you will need to select both the "Automatically

fix file system errors" and the "check for and attempt recovery of bad

sectors" and then click ok it will then prompt you to schedule a scan at

start-up click yes and then manually restart your computer.

 

When you computer restarts it will scan the hard drive and repair any

errors. This process takes about 1 to 2 hours depending on the size and

condition of your hard drive. Once this is finished your computer will

restart and the problem should be resolved.

 

If not lets us know.. :)

 

Wademan

Link to post
Share on other sites

downloaded AVG 8.5 (As my Norton 360 didn't pick it up)

are you running both antivirus programs at the same time

you should run only one .....both can create problems

turn one off

Link to post
Share on other sites

Hello Bombaye,

I am sorry you still are having troubles. Before going any futher i think we need our HJT TrustedAdvisors to take a look at your pc. So, Download HJT from Here

You can read what HJT is an does Here

 

 

Save HJTInstall.exe to your desktop.

Double-click on HJTInstall.exe to run the program.

By default it will install to C:\Program Files\Trend Micro\HijackThis.

Accept the license agreement by clicking the "I Accept" button.

Click on the "Do a system scan and save a log file button. It will scan and then ask you to save the log.

Click "Save log" to save the log file and then the log will open in Notepad.

Click on Edit-> Select All then click on "Edit -> Copy" to copy the entire contents of the log.

Next, Go to this forum Here to start a new thread right click and Paste your log there.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

 

After you post the log an are getting help from our TrustedAdvisors do nothing else to your pc until they have completed the clean up process. Please be patient once you post the log in our HJT forums as they are very busy, they will take your case ASAP.

 

We will get you fixed up. :)

 

Wademan

Link to post
Share on other sites
  • 2 weeks later...

Hi,

I've had a number of problems with my PC recently, and I don't know if they are linked or not.

I'll list them in order of occurence:

1) Every time I start my computer I now get an error message which say - "One of the files containing your system's Registry data had to be recovered by use of an alternate copy. The recovery was succesful"

2) I got an icon in the bottom righthand corner which was a red circle with a white cross. It had a text bubble coming out of it saying that I had spyware, click here to remove it. I recognised that this was some sort of virus pre-installer and downloaded AVG 8.5 (As my Norton 360 didn't pick it up) and removed all threats and I haven't seen it since.

3) However, since removing the threat in 2), I now can't access my task manager and the error message has the same icon as in 2) which makes me think that I haven't completely removed it.

4) I am now getting frequent error messages coming up which crash my internet explorer and/or mozilla firefox.

 

Please can you advise as to what I should do. I have previously followed instructions on here to remove a virus and I am very happy to do that again.

 

Thanks

 

Hi Bombaye',

 

This is Mike from the Norton Authorized Support Team.

 

What version of Norton 360 are you currently using?

 

If you have not already done so, manually run LiveUpdate and then complete a "Comprehensive System Scan" with Norton 360 to see if it detects any infections.

 

After you complete the scan, and if you are using Norton 360 version 1 or 2 and have a valid subscription, you are entitled to a free update to Norton 360 version 3, which I highly recommend. Please NOTE, while this process will update you to the latest version of Norton 360, it will not extend your subscription.

 

To update to Norton 360 version 3, please visit the Norton Update Center at the link below.

 

Norton Update Center

 

Once you have updated to version 3, open Norton 360, mouse-over the "PC Security" bubble and choose "Check for Updates." When the updates have been installed, restart your computer. This process will invoke the new "Pulse Updates" feature of Norton 360, which will check for and install updates in the background every 5-15 minutes to keep your computer protected against the latest threats.

 

Open Norton 360 version 3 and complete a "Comprehensive System Scan" again to make sure there are no infections.

 

Please let me know if you experience any issues updating. Also, if any infections were found, let me know the name(s) and weather or not Norton 360 removed or Quarantined the threat.

 

Thank you,

Mike

Edited by Michael York
Link to post
Share on other sites

Cannot access task manager.

http://windowsxp.mvps.org/Taskmanager_error.htm

 

 

Also Check in Event Viewer to see what errors occurred, especially during the time period surrounding the last shutdown.

__________________

 

 

 

http://www.geekstogo.com/forum/Registry-Re...on-t108547.html

The above link supplies a couple of possible answers to "One of the files containing the system's Registry data had to be recovered."

Link to post
Share on other sites

Hello Bombaye,

You still need to use HJT as I advised before doing anything else...if you want your pc back to a smooth working order an your pc is professionally cleaned, an analyzed by our TrustedAdvisor team, an given the "green light" meaning your pc is 100% clean.

 

You been gone since April 28th, I hope you come back an we can get you fixed up. :)

 

Wademan

Link to post
Share on other sites
  • 7 months later...

Rather tham opening a new thread, I thought it best to continue my old one as I'm having more problems. I'm still getting the error message on startup and have got that red icon with a cross back and also something called internet security 2010 keeps popping up claiming to be antispyware.

I've tried using malwarebytes, super anti-spyware and even ad-aware and spysweeper but none of the them have removed the threat.

Unfortunately my norton 360 has expired and I don't want to use my bank details online whilst I've got this problem to renew it, plus we've got tons of snow in sunny england so I haven't made it to the shops to buy a hard copy!

My last resort is using hijackthis. I've downloaded the latest version 2.0.2 and here is the log. Please help!

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:28:38, on 06/01/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\DOCUME~1\Ali\LOCALS~1\Temp\c.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\TalkTalk\bin\sprtsvc.exe

C:\Program Files\Common Files\Supportsoft\bin\tgsrvc.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe

C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe

C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Documents and Settings\Ali\Application Data\SystemProc\lsass.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\TalkTalk\bin\sprtcmd.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\system32\winupdate86.exe

C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe

C:\DOCUME~1\Ali\LOCALS~1\Temp\cgnux.exe

C:\Documents and Settings\Ali\.COMMgr\complmgr.exe

C:\DOCUME~1\Ali\LOCALS~1\Temp\install.exe

C:\Program Files\InternetSecurity2010\IS2010.exe

C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe

C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\DOCUME~1\Ali\LOCALS~1\Temp\user.exe

C:\DOCUME~1\Ali\LOCALS~1\Temp\login.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\DOCUME~1\Ali\LOCALS~1\Temp\services.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ig?hl=en

R3 - URLSearchHook: (no name) - - (no file)

R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll

O1 - Hosts: ::1 localhost

O1 - Hosts: 91.212.127.226 ossecure2009.microsoft.com

O1 - Hosts: 91.212.127.226 os-secure2009.com

O1 - Hosts: 91.212.127.226 www.os-secure2009.com

O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: gwprimawega - {a8eeebd5-9962-5197-5172-d056c9db9f81} - C:\WINDOWS\system32\0tH9lPJDt_5nI2_.dll

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll

O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"

O4 - HKLM\..\Run: [ulead AutoDetector] "C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe"

O4 - HKLM\..\Run: [ulead Photo Express Calendar Checker] "C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe"

O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"

O4 - HKLM\..\Run: [DeviceDiscovery] "C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"

O4 - HKLM\..\Run: [ppmate] "C:\Program Files\PPMate\PPMate\ppmate.exe" -autoplay

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k

O4 - HKLM\..\Run: [TalkTalk] "C:\Program Files\TalkTalk\bin\sprtcmd.exe" /P TalkTalk

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [ygua8e7yhuiesfha876yfauy8fe] C:\DOCUME~1\Ali\LOCALS~1\Temp\cgnux.exe

O4 - HKCU\..\Run: [COM+ Manager] "C:\Documents and Settings\Ali\.COMMgr\complmgr.exe"

O4 - HKCU\..\Run: [asg984jgkfmgasi8ug98jgkfgfb] C:\DOCUME~1\Ali\LOCALS~1\Temp\services.exe

O4 - HKCU\..\Run: [LREC75DND7] C:\DOCUME~1\Ali\LOCALS~1\Temp\c.exe

O4 - HKCU\..\Run: [internet Security 2010] C:\Program Files\InternetSecurity2010\IS2010.exe

O4 - HKLM\..\Policies\Explorer\Run: [RTHDBPL] C:\Documents and Settings\Ali\Application Data\SystemProc\lsass.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe

O4 - Global Startup: NETGEAR WG311v2 Smart Configuration.lnk = C:\Program Files\NETGEAR WG311v2 Adapter\wlancfg5.exe

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab

O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB

O16 - DPF: {39D420B3-E0EB-424C-89AA-C24F8DE7EF79} (KooPlayer Control) - http://www.tvkoo.com/update/KooPlayer.ocx

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/Facebo...toUploader3.cab

O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - https://webdl.symantec.com/activex/symdlmgr.cab

O16 - DPF: {7DFDB8FD-B498-4958-B930-38021B94351D} (imlUCID Class) - http://imlive.com/chatsource/ImlCID.cab

O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.0...oUploader55.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B9A296D4-38AC-4566-8168-F7ACAF7D35E6} (Eyeball Video Session Control) - http://imlive.com/ChatSource/gVideoContol.cab

O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab

O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/Facebo...Uploader4_5.cab

O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d.../ITDetector.cab

O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx

O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?326

O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...448/mcfscan.cab

O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab

O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O20 - Winlogon Notify: jkkIYsSi - jkkIYsSi.dll (file missing)

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe

O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: SupportSoft Sprocket Service (TalkTalk) (sprtsvc_TalkTalk) - SupportSoft, Inc. - C:\Program Files\TalkTalk\bin\sprtsvc.exe

O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

O23 - Service: SupportSoft Repair Service (TalkTalk) (tgsrvc_TalkTalk) - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\tgsrvc.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

 

--

End of file - 14874 bytes

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...