This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Browser Hijack

14 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Please help this is giving me a real headache. I have ran adaware2.0 and spybot S&D and removed what it's supposed to remove but i keep getting the same search banner at the top and bottom of my screen which seems to appear and disappear at will. I have ran HijackThis an here's the result. Hope you can help.

Logfile of HijackThis v1.97.7
Scan saved at 16:05:37, on 30/09/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\gsicon.exe
C:\WINDOWS\system32\dslagent.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\freeserve\freeserveconnectionkit\atdialler1.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\BT Broadband\Help\bin\mpbtn.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Karen\Local Settings\Temp\Temporary Directory 1 for hjt[1].zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.qlrradwsyf.net/SGKX7ENEIdxKXMub…P4R34SDnnx5.php
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {187F1791-A16F-1426-3375-3001BFE948AA} - C:\PROGRA~1\DOGCAM~1\Noun eggs.exe
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [01 extra] C:\PROGRA~1\BEEPBO~1\exit meow.exe
O4 - HKLM\..\Run: [STOPzilla] "C:\Program Files\STOPzilla!\Stopzilla.exe" /autorun
O4 - HKLM\..\Run: [Seek bias comp soft] C:\Documents and Settings\All Users\Application Data\Idle Play Seek Bias\Close Mpeg.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [2 01 mp3 proxy] C:\Documents and Settings\All Users\Application Data\dart amok 2 01\idle dale.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [Registry Cleaner Scheduler] "C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe" /startup
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband\Help\bin\matcli.exe
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Freeserve Connection Kit.lnk = C:\freeserve\freeserveconnectionkit\atdialler1.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: Money Viewer (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O12 - Plugin for .hlq: C:\Program Files\Internet Explorer\PLUGINS\NpHcd32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.wanadoo.co.uk/
O16 - DPF: symsupportutil - https://www-secure.symantec.com/techsupp/ac…supportutil.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) - http://office.microsoft.com/templates/ieawsdc.cab
O16 - DPF: {0EB1CA3E-C9C7-42B6-8016-B0CBA435E291} (ImclCtl Class) - http://messenger.lycos.co.uk/messenger/cli…veXMsgrCore.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shock…director/sw.cab
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://download.microsoft.com/download/0/5…b?1080434108125
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://E:\content\include\XPPatchInstaller.CAB
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/150e526602069f…ip/RdxIE601.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1096315369703
O16 - DPF: {84818113-96C5-11D2-BE39-006008BF4DD5} (ViewDirector Object) - http://subscribers.scotlandspeople.gov.uk/…ex/viewdw32.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…StatsClient.cab
O16 - DPF: {9013D8E9-B204-4EFF-9A97-6F2B4317F927} (PipPPush) - http://photos.msn.co.uk/r/neutral/controls/PipPPush.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/…7625.4474074074
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/oas/A…eX/FileXfer.cab
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) - http://www.microsoft.com/security/controls/SassCln.CAB
O16 - DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} (GDIChk Object) - http://www.microsoft.com/security/controls/GDI/0/GDIChk.CAB
O16 - DPF: {ADC3EA10-8A28-41A9-96B4-534ADFC3CA0A} (Configuratore Auto Control) - http://[removed]/components/…uratoreauto.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://www.sc-server1.bt.com/broadband/MotivePreQual.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shock…ash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://phobos.apple.com/detection/ITDetector.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D4B7058-0BC7-4BF2-B4DD-58D5EF2DC35C}: NameServer = 194.74.65.69 194.72.9.34
O17 - HKLM\System\CS1\Services\Tcpip\..\{3D4B7058-0BC7-4BF2-B4DD-58D5EF2DC35C}: NameServer = 194.74.65.69 194.72.9.34
Greetings and welcome to TomCoyote.org!

Please download the latest version of Hijack This!

Links to Hijack This! v 1.98.2:

http://tools.radiosplace.com/HijackThis.exe
http://spywarewarrior.com/files/HijackThis.exe
http://tomcoyote.org/hjt/HijackThis.exe

Please make a PERMANANT folder for Hijack This!

Important: Create a folder on the C: drive called C:HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT. Download the newest version of HijackThis into this folder.

If required a tutorial is here = Hijackthis Folder Tutorial

Boot in "safe" mode.

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

Run Hijack This!
Click "Scan".
Then "check" the box to the left of these item(s):

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.qlrradwsyf.net/SGKX7ENEIdxKXMub…P4R34SDnnx5.php

O2 - BHO: (no name) - {187F1791-A16F-1426-3375-3001BFE948AA} - C:\PROGRA~1\DOGCAM~1\Noun eggs.exe

O4 - HKLM\..\Run: [01 extra] C:\PROGRA~1\BEEPBO~1\exit meow.exe

O4 - HKLM\..\Run: [Seek bias comp soft] C:\Documents and Settings\All Users\Application Data\Idle Play Seek Bias\Close Mpeg.exe

O4 - HKLM\..\Run: [2 01 mp3 proxy] C:\Documents and Settings\All Users\Application Data\dart amok 2 01\idle dale.exe

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shock…director/sw.cab

O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://E:\content\include\XPPatchInstaller.CAB

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/150e526602069f…ip/RdxIE601.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shock…ash/swflash.cab

Then click "Fix checked".

Reboot in "safe" mode.

Find and delete:

c:\documents and settings\all users\application data\dart amok 2 01 <— FOLDER

c:\documents and settings\all users\application data\idle play seek bias <— FOLDER

c:\progra~1\beepbo~1 <— FOLDER

c:\progra~1\dogcam~1 <— FOLDER

Some malware files may be "hidden".
Be sure to show hidden files when looking for these file(s) and/or folder(s).

Reboot in normal mode and "copy/paste" a new log file into this thread. :)
Hi, thanks in advance for you assistance and for the welcome! Here's the log after rebooting:


Logfile of HijackThis v1.97.7
Scan saved at 17:25:44, on 01/10/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\gsicon.exe
C:\WINDOWS\system32\dslagent.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe
C:\freeserve\freeserveconnectionkit\atdialler1.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - c:\Program Files\Microsoft Money\System\mnyviewer.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] atiptaxx.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [STOPzilla] "C:\Program Files\STOPzilla!\Stopzilla.exe" /autorun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - HKCU\..\Run: [Registry Cleaner Scheduler] "C:\Program Files\CleanMyPC\Registry Cleaner\RCScheduler.exe" /startup
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband\Help\bin\matcli.exe
O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
O4 - Global Startup: Freeserve Connection Kit.lnk = C:\freeserve\freeserveconnectionkit\atdialler1.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: Money Viewer (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O12 - Plugin for .hlq: C:\Program Files\Internet Explorer\PLUGINS\NpHcd32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.wanadoo.co.uk/
O16 - DPF: symsupportutil - https://www-secure.symantec.com/techsupp/ac…supportutil.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) - http://office.microsoft.com/templates/ieawsdc.cab
O16 - DPF: {0EB1CA3E-C9C7-42B6-8016-B0CBA435E291} (ImclCtl Class) - http://messenger.lycos.co.uk/messenger/cli…veXMsgrCore.cab
O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://download.microsoft.com/download/0/5…b?1080434108125
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/ActiveX/winrep.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1096315369703
O16 - DPF: {84818113-96C5-11D2-BE39-006008BF4DD5} (ViewDirector Object) - http://subscribers.scotlandspeople.gov.uk/…ex/viewdw32.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…StatsClient.cab
O16 - DPF: {9013D8E9-B204-4EFF-9A97-6F2B4317F927} (PipPPush) - http://photos.msn.co.uk/r/neutral/controls/PipPPush.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/…7625.4474074074
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/oas/A…eX/FileXfer.cab
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) - http://www.microsoft.com/security/controls/SassCln.CAB
O16 - DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} (GDIChk Object) - http://www.microsoft.com/security/controls/GDI/0/GDIChk.CAB
O16 - DPF: {ADC3EA10-8A28-41A9-96B4-534ADFC3CA0A} (Configuratore Auto Control) - http://[removed]/components/…uratoreauto.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://www.sc-server1.bt.com/broadband/MotivePreQual.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://phobos.apple.com/detection/ITDetector.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D4B7058-0BC7-4BF2-B4DD-58D5EF2DC35C}: NameServer = 194.74.65.69 194.72.9.34
O17 - HKLM\System\CS1\Services\Tcpip\..\{3D4B7058-0BC7-4BF2-B4DD-58D5EF2DC35C}: NameServer = 194.74.65.69 194.72.9.34
I just ran adaware again and it picked up 98 LOP files does this mean its still around???? I also ran spybot and it was unable to delete one log file Activity:SchedLgu.txt i've tried to remove on reboot as request by spybot but it still wont remove it. I've tried to manually remove it but I get the error message 'Cannot delete, It is being used by another person or programme.???
Sorry i forgot to mention, I have tried to delete in safe mode and it allows me to. But then when I reboot normally it reappears again.
Be sure you have the latest Spybot (1.3) and Adaware (build 1.05), and be sure they are configured as described here:

http://www.cjwd.demon.co.uk/spybot-adaware.html

Run them at that configuration, then reboot.

Run them again. If something returns, let me know. :)
Hi LOP »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» obj[0]=File : C:\System Volume Information\_restore{F598387F-3ED0-4478-B3D8-AD0A44E33B2D}\RP42\A0019718.exe obj[1]=File : C:\System Volume Information\_restore{F598387F-3ED0-4478-B3D8-AD0A44E33B2D}\RP43\A0021030.EXE Got this from adaware on the first scan but not on the second and the spybot scan got the (green tick) schedlgu.Txt again but still couldn't delete it. At the moment I have no search assistant I am getting the 'unable to link to webpage' in the search bar on the left of my screen I have tried to use the repair tool in add and remove programs but internet explorer's not there anymore. Could this be the LOP infection or maybe the fact that I downloaded XPsp2!! Thanks once again
Please excuse my ignorance as you've probably worked out i'm not very technically minded :( I opened the txt file and this is what i found obviously not LOP related. The search bar that i can't display is the default explorer one (the one with the dog) :) When i click onto 'search' in explorer i just get the page cannot be displayed message. When I have opened add and remove programs in the past clicked in internet explorer it gave me the option to uninstall or repair. Now it's not there. Thanks for your patience. "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:19:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:24:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:24:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:29:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:29:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:34:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:34:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:39:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:39:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:44:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:44:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:49:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:49:00 Result: The task completed with an exit code of (65). "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 21:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 21:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 21:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "Task Scheduler Service" Exited at 02/10/2004 21:04:00 "Task Scheduler Service" Started at 02/10/2004 21:04:22 "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 21:04:52 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 21:04:52 Result: The task completed with an exit code of (65). "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 22:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 22:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 22:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 23:00:02 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 23:00:02 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 23:00:02 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. [ ***** Most recent entry is above this line ***** ] "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:24:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:29:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:29:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:34:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:34:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:39:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:39:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:44:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:44:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:49:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:49:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:54:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:54:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 16:59:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 16:59:00 Result: The task completed with an exit code of (65). "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 17:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 17:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 17:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:04:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:04:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:09:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:09:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:14:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:14:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:19:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:19:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:24:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:24:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:29:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:29:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:34:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:34:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:39:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:39:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:44:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:44:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:49:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:49:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:54:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:54:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 17:59:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 17:59:00 Result: The task completed with an exit code of (65). "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 18:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 18:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 18:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:04:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:04:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:09:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:09:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:14:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:14:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:19:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:19:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:24:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:24:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:29:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:29:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:34:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:34:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:39:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:39:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:44:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:44:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:49:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:49:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:54:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:54:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 18:59:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 18:59:00 Result: The task completed with an exit code of (65). "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 19:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 19:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 19:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:04:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:04:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:09:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:09:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:14:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:14:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:19:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:19:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:24:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:24:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:29:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:29:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:34:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:34:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:39:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:39:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:44:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:44:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:49:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:49:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:54:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:54:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 19:59:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 19:59:00 Result: The task completed with an exit code of (65). "A8908AA8919B0718.job" (THE CAST NAME.exe) 02/10/2004 20:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "A9A3DF0191B45025.job" (THE CAST NAME.exe) 02/10/2004 20:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "AD804EFF91CFC1CF.job" (THE CAST NAME.exe) 02/10/2004 20:00:00 ** ERROR ** Unable to start task. The specific error is: 0x80070003: The system cannot find the path specified. Try using the Task page Browse button to locate the application. "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:04:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:04:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:09:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:09:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:14:00 "Symantec NetDetect.job" (NDETECT.EXE) Finished 02/10/2004 20:14:00 Result: The task completed with an exit code of (65). "Symantec NetDetect.job" (NDETECT.EXE) Started 02/10/2004 20:19:00

The search bar that i can't display is the default explorer one (the one with the dog)  When i click onto 'search' in explorer i just get the page cannot be displayed message.


Are you talking about Internet Explorer, or Windows Explorer?

Personally, I've not seen "a page with a dog" using either one.

What page showed up when you did this BEFORE you had this problem?
:unsure:
Hello again. I found him, I managed to repair Internet Explorer and my little dog friend is back. (Search Companion - animated characters on the customise menu.) Thanks for putting up with me and many many thanks for your help, all looks good now :thumbup: :D
Good work!!! :thumbup:

Glad we could help unhijack your browser.

GOD bless!!!

M68 :)

Items you may wish to consider to harden your defenses against future infections:

Read "How did I get infected in the first place?" here:

http://boards.cexx.org/viewtopic.php?t=957

Download IE-Spyad here:

https://netfiles.uiuc.edu/ehowes/www/resource.htm

IE-Spyad puts over 4000 known malicious web sites into IE's "restricted zone" to help prevent you from getting infected.

Check your browser settings here:

http://browsercheck.qualys.com/index.php

A series of "tests" (and suggested fixes) to help tweak IE's settings to help prevent infections when surfing the web.

Follow safe Internet practices:

1. Keep your virus definitions up to date, and scan your system regularly.

2. Don't open email, or download attachments from unrecognized email addresses.

3. Be careful when downloading email attachments, EVEN FROM PEOPLE YOU KNOW! Many virii, worms, and trojans infect a persons system then immeadiately spread themselves to the people in the infected persons addressbook via email attachments.

4. Be careful downloading files from the Internet. Scan all downloaded files with a reliable UP-TO-DATE antivirus program. Scan "zip" files BEFORE unzipping, and scan all unzipped files BEFORE USING THEM.

5. Keep your Windows and IE current with all the latest patches and updates.

This topic is now closed.

If you need this topic reopened, please request this by sending an email to us at the following link

(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI