dRaNiX
Topic Starter
Here are my problems:
1. I got several unwanted popups (i.e. www.yupsearch.com, gayporns, etc.)
2. Cant delete files. It always prompt when deleted file currently in use and access denied when deleting using MSDOS. i tries deleting it in safe mode but it's no good (i.e. gfgredt.exe, temp_silent32.exe, silent53.exe, EliteToolBar version 53.dll, and many more).
3. The send and receive in my connection status always run even though im not browsing the internet or other stuffs that will trigger datatransfer. i think there's an evil program "working in background".
4. MS Internet explorer V6 more oftenly illegal operates. Does not work good. Can't browse well. Slow in browsing maybe be cause of problem number 3.
5. I guess my Laptop is getting slow.
PLZ HELP ME ASAP..BECAUSE THIS LAPTOP IS NOT MINE…AND IF THE OWNER KNOWS IM THE ONE RESPONSIBLE FOR THIS….IM DEAD XD! THNX IN ADVANCE! HOPE SOMEBODY WILL HELP ME ASAP! T.Tx
below is the log file i got when i scan using HijackThis:
Logfile of HijackThis v1.97.7
Scan saved at 1:00:48 AM, on 10/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\PROGRA~1\Xpoint\xpadmin\xpadmin.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\tp4serv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\NWTRAY.EXE
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\msfirewall.exe
C:\WINDOWS\System32\ccapps32.exe
C:\WINDOWS\System32\winupdate.exe
C:\WINDOWS\System32\crsss32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\Nfjcem32.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\System32\ctfmon.exe
c:\windows\config\mt.exe
c:\windows\config\gamma.exe
c:\windows\config\gamma.exe
c:\gfgredt.exe
c:\gfgredt.exe
D:\Documents and Settings\tas4179\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchmiracle.com/sp.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://iffweb.iff.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchmiracle.com/sp.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iffweb.iff.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - D:\ELITET~1.DLL
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - D:\ELITET~1.DLL
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TPKMAPMN] C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\RealVNC\WinVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [Rapid Restore] C:\Program Files\Xpoint\PE\Skin\rrpcsb.exe
O4 - HKLM\..\Run: [MS FIREWALL] msfirewall.exe
O4 - HKLM\..\Run: [Windows Update Manager] updmgr.exe
O4 - HKLM\..\Run: [blah service] ccapps32.exe
O4 - HKLM\..\Run: [Sys29] C:\windows\system32\winfif32.exe
O4 - HKLM\..\Run: [Microsoft update] winupdate.exe
O4 - HKLM\..\Run: [CRC Value Verifier] crsss32.exe
O4 - HKLM\..\RunServices: [MS FIREWALL] msfirewall.exe
O4 - HKLM\..\RunServices: [Windows Update Manager] updmgr.exe
O4 - HKLM\..\RunServices: [blah service] ccapps32.exe
O4 - HKLM\..\RunServices: [Microsoft update] winupdate.exe
O4 - HKLM\..\RunServices: [CRC Value Verifier] crsss32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MS FIREWALL] msfirewall.exe
O4 - HKCU\..\RunServices: [MS FIREWALL] msfirewall.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O14 - IERESET.INF: START_PAGE_URL=iffweb.iff.com
O16 - DPF: Casa 3rdPty - jHelp - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casahelp.cab
O16 - DPF: Casa 3rdPty - Misc - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casathrdpty.cab
O16 - DPF: Casa 3rdPty - Swing 1 - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaswing1.cab
O16 - DPF: Casa 3rdPty - Swing 2 - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaswing2.cab
O16 - DPF: Casa Access Profile - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaaccprofmaint.cab
O16 - DPF: Casa Audit - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaaudit.cab
O16 - DPF: Casa AWT - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaawt.cab
O16 - DPF: Casa Broadcast - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casabrdcast.cab
O16 - DPF: Casa BTR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casabtr.cab
O16 - DPF: Casa Cab Verifier - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacabverifier.cab
O16 - DPF: Casa CBServiceOps - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacbserviceops.cab
O16 - DPF: Casa Citi-Netting - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casanetting.cab
O16 - DPF: Casa CitiWithin - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacitiwithin.cab
O16 - DPF: Casa Client Association - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaclntassoc.cab
O16 - DPF: Casa Client Def - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaclntdef.cab
O16 - DPF: Casa Code Pages - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacodepage.cab
O16 - DPF: Casa CollItems - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacollitems.cab
O16 - DPF: Casa Default - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casadefault.cab
O16 - DPF: Casa DtvmrmInvestments - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casadtvmrm.cab
O16 - DPF: Casa ELC - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaelc.cab
O16 - DPF: Casa Fidelity - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafidelity.cab
O16 - DPF: Casa File Delivery - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafiledelivery.cab
O16 - DPF: Casa File Import - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafileimport.cab
O16 - DPF: Casa Flow Maint - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaflowmaint.cab
O16 - DPF: Casa Framework - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaframework.cab
O16 - DPF: Casa Global Trade Common - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradecommon.cab
O16 - DPF: Casa Global Trade Detail - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradedetail.cab
O16 - DPF: Casa Global Trade Lib - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradelib.cab
O16 - DPF: Casa Global Trade PI - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradepi.cab
O16 - DPF: Casa Global Trade Summary - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradesummary.cab
O16 - DPF: Casa IBM XML Parser - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaxml.cab
O16 - DPF: Casa ILC - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casailc.cab
O16 - DPF: Casa Images - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaimages.cab
O16 - DPF: Casa Infrastructure - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casainfr.cab
O16 - DPF: Casa JPIPreLoader - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casajpipreloader.cab
O16 - DPF: Casa Language ar_EG - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ar_eg.cab
O16 - DPF: Casa Language bg_BG - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_bg_bg.cab
O16 - DPF: Casa Language cs_CZ - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_cs_cz.cab
O16 - DPF: Casa Language de_DE - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_de_de.cab
O16 - DPF: Casa Language el_GR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_el_gr.cab
O16 - DPF: Casa Language es_AR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_es_ar.cab
O16 - DPF: Casa Language es_ES - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_es_es.cab
O16 - DPF: Casa Language fr_FR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_fr_fr.cab
O16 - DPF: Casa Language he_IL - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_he_il.cab
O16 - DPF: Casa Language hu_HU - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_hu_hu.cab
O16 - DPF: Casa Language it_IT - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_it_it.cab
O16 - DPF: Casa Language ja_JP - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ja_jp.cab
O16 - DPF: Casa Language ko_KP - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ko_kp.cab
O16 - DPF: Casa Language nl_NL - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_nl_nl.cab
O16 - DPF: Casa Language pl_PL - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_pl_pl.cab
O16 - DPF: Casa Language pt_BR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_pt_br.cab
O16 - DPF: Casa Language ro_RO - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ro_ro.cab
O16 - DPF: Casa Language ru_RU - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ru_ru.cab
O16 - DPF: Casa Language sk_SK - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_sk_sk.cab
O16 - DPF: Casa Language th_TH - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_th_th.cab
O16 - DPF: Casa Language tr_TR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_tr_tr.cab
O16 - DPF: Casa Language zh_CN - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_zh_cn.cab
O16 - DPF: Casa Language zh_TW - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_zh_tw.cab
O16 - DPF: Casa Libraries - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casalibs.cab
O16 - DPF: Casa Liquidity - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaliquidity.cab
O16 - DPF: Casa List Manager - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casalistmgr.cab
O16 - DPF: Casa Lockbox - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casalockbox.cab
O16 - DPF: Casa Misc - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casamisc.cab
O16 - DPF: Casa PayerApproval - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapayerapproval.cab
O16 - DPF: Casa Payments Banamex - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtsbanamex.cab
O16 - DPF: Casa Payments Common - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtscomm.cab
O16 - DPF: Casa Payments Detail - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtsdtl.cab
O16 - DPF: Casa Payments Disbursements - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casadisbursements.cab
O16 - DPF: Casa Payments Libraries - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtslibs.cab
O16 - DPF: Casa Payments Misc - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtsmisc.cab
O16 - DPF: Casa Pref Mgr - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaprefmgr.cab
O16 - DPF: Casa Receivables Mandates - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesmandates.cab
O16 - DPF: Casa ReceivablesDirectDebit - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesdirectdebit.cab
O16 - DPF: Casa ReceivablesInquiries - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesinquiries.cab
O16 - DPF: Casa Report - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareport.cab
O16 - DPF: Casa Safeword - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casasafeword.cab
O16 - DPF: Casa SDR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casasdr.cab
O16 - DPF: Casa Security Admin - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casasecurityadmin.cab
O16 - DPF: Casa ServForCollItems - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservforcollitems.cab
O16 - DPF: Casa ServicesForLR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservforrece.cab
O16 - DPF: Casa ServicesProducts - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservicesproducts.cab
O16 - DPF: Casa Taiwan CBR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casatwcbr.cab
O16 - DPF: Casa Trade FI Common - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaficommon.cab
O16 - DPF: Casa Trade FI Detail - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafidetail.cab
O16 - DPF: Casa Trade FI Lib - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafilib.cab
O16 - DPF: Casa Trade FI Summary - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafisummary.cab
O16 - DPF: Casa User Maint - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casausrmaint.cab
O16 - DPF: CasaReceivablesServices - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesservices.cab
O16 - DPF: CasaServForProducts - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservforproducts.cab
O16 - DPF: {24CEC0BF-C8BC-4BCB-B804-226326B319EF} (JNILoader Control) - file://C:\TEMP\SISD\STJNILoader.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/…nst20040510.cab
O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://access.iff.com/dana-cached/setup/NeoterisSetup.cab
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - http://www-3.ibm.com/pc/support/IbmEgath.cab
O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaverifier.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/…7906.1042361111
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa…ash/swflash.cab
O16 - DPF: {E598AC61-4C6F-4F4D-877F-FAC49CA91FA3} (acpRunner Class) - https://www-3.ibm.com/pc/support/access/asl…/AcpControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B2D2DD43-A9ED-4F62-BA9E-DA846804D73C}: NameServer = 202.81.160.6 202.81.160.7
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = iff.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = iff.com
PLZ HELP ME….THNX!( im so desperate)
1. I got several unwanted popups (i.e. www.yupsearch.com, gayporns, etc.)
2. Cant delete files. It always prompt when deleted file currently in use and access denied when deleting using MSDOS. i tries deleting it in safe mode but it's no good (i.e. gfgredt.exe, temp_silent32.exe, silent53.exe, EliteToolBar version 53.dll, and many more).
3. The send and receive in my connection status always run even though im not browsing the internet or other stuffs that will trigger datatransfer. i think there's an evil program "working in background".
4. MS Internet explorer V6 more oftenly illegal operates. Does not work good. Can't browse well. Slow in browsing maybe be cause of problem number 3.
5. I guess my Laptop is getting slow.
PLZ HELP ME ASAP..BECAUSE THIS LAPTOP IS NOT MINE…AND IF THE OWNER KNOWS IM THE ONE RESPONSIBLE FOR THIS….IM DEAD XD! THNX IN ADVANCE! HOPE SOMEBODY WILL HELP ME ASAP! T.Tx
below is the log file i got when i scan using HijackThis:
Logfile of HijackThis v1.97.7
Scan saved at 1:00:48 AM, on 10/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\PROGRA~1\Xpoint\xpadmin\xpadmin.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\tp4serv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\NWTRAY.EXE
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\msfirewall.exe
C:\WINDOWS\System32\ccapps32.exe
C:\WINDOWS\System32\winupdate.exe
C:\WINDOWS\System32\crsss32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\Nfjcem32.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\System32\ctfmon.exe
c:\windows\config\mt.exe
c:\windows\config\gamma.exe
c:\windows\config\gamma.exe
c:\gfgredt.exe
c:\gfgredt.exe
D:\Documents and Settings\tas4179\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchmiracle.com/sp.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://iffweb.iff.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchmiracle.com/sp.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iffweb.iff.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - D:\ELITET~1.DLL
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - D:\ELITET~1.DLL
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TPKMAPMN] C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\RealVNC\WinVNC\WinVNC.exe" -servicehelper
O4 - HKLM\..\Run: [Rapid Restore] C:\Program Files\Xpoint\PE\Skin\rrpcsb.exe
O4 - HKLM\..\Run: [MS FIREWALL] msfirewall.exe
O4 - HKLM\..\Run: [Windows Update Manager] updmgr.exe
O4 - HKLM\..\Run: [blah service] ccapps32.exe
O4 - HKLM\..\Run: [Sys29] C:\windows\system32\winfif32.exe
O4 - HKLM\..\Run: [Microsoft update] winupdate.exe
O4 - HKLM\..\Run: [CRC Value Verifier] crsss32.exe
O4 - HKLM\..\RunServices: [MS FIREWALL] msfirewall.exe
O4 - HKLM\..\RunServices: [Windows Update Manager] updmgr.exe
O4 - HKLM\..\RunServices: [blah service] ccapps32.exe
O4 - HKLM\..\RunServices: [Microsoft update] winupdate.exe
O4 - HKLM\..\RunServices: [CRC Value Verifier] crsss32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MS FIREWALL] msfirewall.exe
O4 - HKCU\..\RunServices: [MS FIREWALL] msfirewall.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O14 - IERESET.INF: START_PAGE_URL=iffweb.iff.com
O16 - DPF: Casa 3rdPty - jHelp - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casahelp.cab
O16 - DPF: Casa 3rdPty - Misc - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casathrdpty.cab
O16 - DPF: Casa 3rdPty - Swing 1 - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaswing1.cab
O16 - DPF: Casa 3rdPty - Swing 2 - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaswing2.cab
O16 - DPF: Casa Access Profile - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaaccprofmaint.cab
O16 - DPF: Casa Audit - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaaudit.cab
O16 - DPF: Casa AWT - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaawt.cab
O16 - DPF: Casa Broadcast - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casabrdcast.cab
O16 - DPF: Casa BTR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casabtr.cab
O16 - DPF: Casa Cab Verifier - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacabverifier.cab
O16 - DPF: Casa CBServiceOps - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacbserviceops.cab
O16 - DPF: Casa Citi-Netting - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casanetting.cab
O16 - DPF: Casa CitiWithin - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacitiwithin.cab
O16 - DPF: Casa Client Association - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaclntassoc.cab
O16 - DPF: Casa Client Def - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaclntdef.cab
O16 - DPF: Casa Code Pages - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacodepage.cab
O16 - DPF: Casa CollItems - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casacollitems.cab
O16 - DPF: Casa Default - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casadefault.cab
O16 - DPF: Casa DtvmrmInvestments - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casadtvmrm.cab
O16 - DPF: Casa ELC - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaelc.cab
O16 - DPF: Casa Fidelity - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafidelity.cab
O16 - DPF: Casa File Delivery - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafiledelivery.cab
O16 - DPF: Casa File Import - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafileimport.cab
O16 - DPF: Casa Flow Maint - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaflowmaint.cab
O16 - DPF: Casa Framework - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaframework.cab
O16 - DPF: Casa Global Trade Common - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradecommon.cab
O16 - DPF: Casa Global Trade Detail - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradedetail.cab
O16 - DPF: Casa Global Trade Lib - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradelib.cab
O16 - DPF: Casa Global Trade PI - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradepi.cab
O16 - DPF: Casa Global Trade Summary - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaglobaltradesummary.cab
O16 - DPF: Casa IBM XML Parser - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaxml.cab
O16 - DPF: Casa ILC - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casailc.cab
O16 - DPF: Casa Images - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaimages.cab
O16 - DPF: Casa Infrastructure - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casainfr.cab
O16 - DPF: Casa JPIPreLoader - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casajpipreloader.cab
O16 - DPF: Casa Language ar_EG - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ar_eg.cab
O16 - DPF: Casa Language bg_BG - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_bg_bg.cab
O16 - DPF: Casa Language cs_CZ - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_cs_cz.cab
O16 - DPF: Casa Language de_DE - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_de_de.cab
O16 - DPF: Casa Language el_GR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_el_gr.cab
O16 - DPF: Casa Language es_AR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_es_ar.cab
O16 - DPF: Casa Language es_ES - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_es_es.cab
O16 - DPF: Casa Language fr_FR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_fr_fr.cab
O16 - DPF: Casa Language he_IL - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_he_il.cab
O16 - DPF: Casa Language hu_HU - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_hu_hu.cab
O16 - DPF: Casa Language it_IT - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_it_it.cab
O16 - DPF: Casa Language ja_JP - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ja_jp.cab
O16 - DPF: Casa Language ko_KP - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ko_kp.cab
O16 - DPF: Casa Language nl_NL - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_nl_nl.cab
O16 - DPF: Casa Language pl_PL - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_pl_pl.cab
O16 - DPF: Casa Language pt_BR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_pt_br.cab
O16 - DPF: Casa Language ro_RO - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ro_ro.cab
O16 - DPF: Casa Language ru_RU - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_ru_ru.cab
O16 - DPF: Casa Language sk_SK - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_sk_sk.cab
O16 - DPF: Casa Language th_TH - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_th_th.cab
O16 - DPF: Casa Language tr_TR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_tr_tr.cab
O16 - DPF: Casa Language zh_CN - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_zh_cn.cab
O16 - DPF: Casa Language zh_TW - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casa_zh_tw.cab
O16 - DPF: Casa Libraries - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casalibs.cab
O16 - DPF: Casa Liquidity - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaliquidity.cab
O16 - DPF: Casa List Manager - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casalistmgr.cab
O16 - DPF: Casa Lockbox - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casalockbox.cab
O16 - DPF: Casa Misc - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casamisc.cab
O16 - DPF: Casa PayerApproval - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapayerapproval.cab
O16 - DPF: Casa Payments Banamex - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtsbanamex.cab
O16 - DPF: Casa Payments Common - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtscomm.cab
O16 - DPF: Casa Payments Detail - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtsdtl.cab
O16 - DPF: Casa Payments Disbursements - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casadisbursements.cab
O16 - DPF: Casa Payments Libraries - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtslibs.cab
O16 - DPF: Casa Payments Misc - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casapmtsmisc.cab
O16 - DPF: Casa Pref Mgr - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaprefmgr.cab
O16 - DPF: Casa Receivables Mandates - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesmandates.cab
O16 - DPF: Casa ReceivablesDirectDebit - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesdirectdebit.cab
O16 - DPF: Casa ReceivablesInquiries - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesinquiries.cab
O16 - DPF: Casa Report - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareport.cab
O16 - DPF: Casa Safeword - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casasafeword.cab
O16 - DPF: Casa SDR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casasdr.cab
O16 - DPF: Casa Security Admin - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casasecurityadmin.cab
O16 - DPF: Casa ServForCollItems - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservforcollitems.cab
O16 - DPF: Casa ServicesForLR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservforrece.cab
O16 - DPF: Casa ServicesProducts - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservicesproducts.cab
O16 - DPF: Casa Taiwan CBR - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casatwcbr.cab
O16 - DPF: Casa Trade FI Common - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaficommon.cab
O16 - DPF: Casa Trade FI Detail - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafidetail.cab
O16 - DPF: Casa Trade FI Lib - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafilib.cab
O16 - DPF: Casa Trade FI Summary - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casafisummary.cab
O16 - DPF: Casa User Maint - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casausrmaint.cab
O16 - DPF: CasaReceivablesServices - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casareceivablesservices.cab
O16 - DPF: CasaServForProducts - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaservforproducts.cab
O16 - DPF: {24CEC0BF-C8BC-4BCB-B804-226326B319EF} (JNILoader Control) - file://C:\TEMP\SISD\STJNILoader.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/…nst20040510.cab
O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://access.iff.com/dana-cached/setup/NeoterisSetup.cab
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productupdates/content/opuc.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - http://www-3.ibm.com/pc/support/IbmEgath.cab
O16 - DPF: {769A2483-FEFF-11D2-8A61-0008C7453304} (CasaVerify Class) - file://D:\Documents and Settings\tas4179\Desktop\CitiDirect 4.6.1\CitiDirect\ie\casaverifier.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/…7906.1042361111
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa…ash/swflash.cab
O16 - DPF: {E598AC61-4C6F-4F4D-877F-FAC49CA91FA3} (acpRunner Class) - https://www-3.ibm.com/pc/support/access/asl…/AcpControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B2D2DD43-A9ED-4F62-BA9E-DA846804D73C}: NameServer = 202.81.160.6 202.81.160.7
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = iff.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = iff.com
PLZ HELP ME….THNX!( im so desperate)