hey thanks for the info i also recently got the startuplist1521 and i have all the info copyed i was going to post it out if no one had taken alook at the post but i decided to post it anyways to let you all check it out and see if there was anything wrong with it just incase for one i'm not to shure what i'm looking for so here it is and thanks again about the upgrade info if you all wouldnt mind taking alook at it
thanks for listening and if you guys could please teach me what to look for when using these programs so i know when to be worried
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\PINFO\DIALERS\LISA\LISA.EXE
C:\WINDOWS\SYSTEM\CD1.EXE
C:\PROGRAM FILES\WINRAR\WINRAR.EXE
C:\WINDOWS\TEMP\RAR$EX00.885\STARTUPLIST.EXE
————————————————–
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
————————————————–
Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:
Shell=Explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv
————————————————–
C:\WINDOWS\WININIT.INI listing:
(Created 4/12/2004, 15:9:4)
[Rename]
NUL=c:\stcupdt.exe
NUL=c:\_RESTORE\TEMP\A0005834.CPY
NUL=c:\_RESTORE\TEMP\A0005833.CPY
NUL=c:\_RESTORE\TEMP\A0005832.CPY
NUL=c:\_RESTORE\TEMP\A0005831.CPY
NUL=c:\_RESTORE\TEMP\A0005830.CPY
NUL=c:\_RESTORE\TEMP\A0005829.CPY
NUL=c:\_RESTORE\TEMP\A0005828.CPY
NUL=c:\_RESTORE\TEMP\A0005827.CPY
NUL=c:\_RESTORE\TEMP\A0005826.CPY
NUL=c:\_RESTORE\TEMP\A0005825.CPY
NUL=c:\_RESTORE\TEMP\A0005824.CPY
NUL=c:\_RESTORE\TEMP\A0005823.CPY
NUL=c:\_RESTORE\TEMP\A0005822.CPY
NUL=c:\_RESTORE\TEMP\A0005821.CPY
NUL=c:\_RESTORE\TEMP\A0005820.CPY
NUL=c:\_RESTORE\TEMP\A0005819.CPY
NUL=c:\_RESTORE\TEMP\A0005818.CPY
NUL=c:\_RESTORE\TEMP\A0005817.CPY
NUL=c:\_RESTORE\TEMP\A0005816.CPY
NUL=c:\_RESTORE\TEMP\A0005815.CPY
NUL=c:\_RESTORE\TEMP\A0005814.CPY
NUL=c:\_RESTORE\TEMP\A0005813.CPY
NUL=c:\_RESTORE\TEMP\A0005812.CPY
NUL=c:\_RESTORE\TEMP\A0005811.CPY
NUL=c:\_RESTORE\TEMP\A0005810.CPY
NUL=c:\_RESTORE\TEMP\A0005809.CPY
NUL=c:\_RESTORE\TEMP\A0005808.CPY
NUL=c:\_RESTORE\TEMP\A0005807.CPY
NUL=c:\_RESTORE\TEMP\A0005806.CPY
NUL=c:\_RESTORE\TEMP\A0005802.CPY
NUL=c:\_RESTORE\TEMP\A0005800.CPY
NUL=c:\_RESTORE\TEMP\A0005799.CPY
NUL=c:\_RESTORE\TEMP\A0005798.CPY
NUL=c:\_RESTORE\TEMP\A0005797.CPY
NUL=c:\_RESTORE\TEMP\A0005793.CPY
NUL=c:\_RESTORE\TEMP\A0005787.CPY
NUL=c:\_RESTORE\TEMP\A0005781.CPY
NUL=c:\_RESTORE\TEMP\A0005776.0
NUL=c:\_RESTORE\TEMP\A0005774.0
NUL=c:\_RESTORE\TEMP\A0005752.0
NUL=c:\_RESTORE\TEMP\A0005751.0
NUL=c:\_RESTORE\TEMP\A0005691.0
NUL=c:\_RESTORE\TEMP\A0005686.0
NUL=c:\_RESTORE\TEMP\A0005682.0
NUL=c:\_RESTORE\TEMP\A0005674.0
NUL=c:\_RESTORE\TEMP\A0005671.0
NUL=c:\_RESTORE\TEMP\A0005666.0
NUL=c:\_RESTORE\TEMP\A0005660.0
NUL=c:\_RESTORE\TEMP\A0004770.0
NUL=c:\_RESTORE\TEMP\A0004755.0
NUL=c:\_RESTORE\TEMP\A0004751.0
NUL=c:\_RESTORE\TEMP\A0003547.1
NUL=c:\_RESTORE\TEMP\A0003546.0
NUL=c:\_RESTORE\TEMP\A0003545.0
NUL=c:\_RESTORE\TEMP\A0003544.0
NUL=c:\_RESTORE\TEMP\A0003543.0
NUL=c:\_RESTORE\TEMP\A0003316.1
NUL=c:\_RESTORE\TEMP\A0003258.1
NUL=c:\\temporary
NUL=c:\temporary\install201.exe
NUL=C:\Program Files\stc\bundles118.exe
NUL=C:\Program Files\stc\bundles53.exe
NUL=C:\Program Files\stc\bundles.exe
NUL=C:\Program Files\stc\STC.exe
NUL=C:\WINDOWS\SYSTEM\winupdt.exe
NUL=C:\WINDOWS\SYSTEM\idleui.dll
NUL=C:\WINDOWS\SYSTEM\2ndsrch.dll
NUL=C:\WINDOWS\SYSTEM\stcloader.exe
NUL=c:\windows\system\winupdtl.exe
NUL=c:\\temporary
NUL=C:\Program Files\STC
————————————————–
C:\AUTOEXEC.BAT listing:
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP
————————————————–
Enumerating Task Scheduler jobs:
Tune-up Application Start.job
PCHealth Scheduler for Data Collection.job
————————————————–
Enumerating Download Program Files:
[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwa…ash/swflash.cab
[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE =
http://v4.windowsupdate.microsoft.com/CAB/…8323.3172800926
[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE =
http://download.yahoo.com/dl/yinst/yinst_current.cab
————————————————–
Enumerating ShellServiceObjectDelayLoad items:
WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL
UPnPMonitor: C:\WINDOWS\SYSTEM\UPNPUI.DLL
AUHook: C:\WINDOWS\SYSTEM\AUHOOK.DLL
————————————————–
End of report, 5,904 bytes
Report generated in 0.083 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
