This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Redirected Host

91 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

:thumbup: Here's the Findit.log Warning! This utility will find legitimate files in addition to malware. Do not remove anything unless you are sure you know what you're doing. ——- System Files in System Directory ——- Volume in drive C has no label Volume Serial Number is 1631-1603 Directory of C:\WINDOWS\SYSTEM SVDOCLC DLL 227,104 03-18-05 4:22a SVDOCLC.DLL LFKRN10N DLL 227,104 03-18-05 4:22a lfkrn10N.dll WNN87EM DLL 227,104 03-18-05 4:22a WNN87EM.DLL MXIEFTP DLL 227,104 03-18-05 4:22a MXIEFTP.DLL AO18 DLL 227,104 03-18-05 4:22a AO18.dll NUTOS DLL 227,104 03-18-05 4:22a NuTOS.DLL DPNDI DLL 0 11-14-04 5:22a DpNDI.DLL 7 file(s) 1,362,624 bytes 0 dir(s) 6,032.12 MB free ——- Hidden Files in System Directory ——- Volume in drive C has no label Volume Serial Number is 1631-1603 Directory of C:\WINDOWS\SYSTEM FOLDER HTT 13,122 03-22-05 1:16p folder.htt DESKTOP INI 266 03-22-05 1:16p desktop.ini RATINGS POL 8,192 03-17-05 1:53a RATINGS.POL DPNDI DLL 0 11-14-04 5:22a DpNDI.DLL HPF67H08 GID 8,628 05-11-04 3:36a hpf67h08.GID HPF67T08 GID 8,628 05-11-04 3:28a hpf67t08.GID HPF68H17 GID 8,628 04-29-04 4:39a HPF68h17.GID HPF68R17 GID 8,628 04-29-04 2:59a HPF68r17.GID HPF67T18 GID 8,628 08-16-03 7:42p HPF67t18.GID 9 file(s) 64,720 bytes 0 dir(s) 6,032.12 MB free —————- User Agent ———— REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{BA5F8E7F-49D1-5D57-F440-2637609D2135}"="" —————— Locate.com Results —————— C:\WINDOWS\SYSTEM\ folder.htt Tue Mar 22 2005 1:16:12p …H. 13,122 12.81 K desktop.ini Tue Mar 22 2005 1:16:12p …H. 266 0.26 K svdoclc.dll Fri Mar 18 2005 4:22:54a ..S.R 227,104 221.78 K lfkrn10n.dll Fri Mar 18 2005 4:22:54a ..S.R 227,104 221.78 K wnn87em.dll Fri Mar 18 2005 4:22:54a ..S.R 227,104 221.78 K mxieftp.dll Fri Mar 18 2005 4:22:54a ..S.R 227,104 221.78 K ao18.dll Fri Mar 18 2005 4:22:54a ..S.R 227,104 221.78 K ratings.pol Thu Mar 17 2005 1:53:44a …HR 8,192 8.00 K nutos.dll Fri Mar 18 2005 4:22:54a ..S.R 227,104 221.78 K 9 items found: 9 files, 0 directories. Total of file sizes: 1,384,204 bytes 1.32 M ———— Strings.exe Qoologic Results ———— C:\WINDOWS\noanhe.dll: excl_urls=adsv2.delfinproject.com,popup.msn.com,i.emarketresearchgroup.com,u.clkoptimizer.com,ezula.com,ads2.revenue.net,banners.pennyweb.com,counters.honesty.com,ads.bidclix.com,oz.valueclick.com,radio.launch.yahoo.com,zone.msn.com,sr.adwave.com,xlime.offeroptimizer.com,clickit.go2net.com,us.update.companion.yahoo.com,kill-pop-ups.com,qksrv.net,clickspring.net,cdn-aimtoday.aol.com,search200.com,servedby.adscpm.com,xanga.com,count.exitexchange.com,jnictech.cjt1.net,xadsq.offeroptimizer.com,paypopup.com,popuptraffic.com,cdn-cf.aol.com,allaboutsearching.com,hotmail.msn.com,adfarm.mediaplex.com,by.optimost.com,amch.questionmarket.com,akapp.whenu.com,newupdates.lzio.com,cfg.mywebsearch.com,searcheffect.com,ads.delfinproject.com,master.mx-targeting.com,hotmail.com,ctl.twain-tech.com,mail.yahoo.com,m2.doubleclick.net,insider.msg.yahoo.com,focusin.ads.targetnet.com,e.rn11.com,jmnad1.com,topicks.com,ad.doubleclick.net,m3.doubleclick.net,as.casalemedia.com,pgq.yahoo.com,webpdp.gator.com,stopzilla.com,ayb.lop.com,xadso.offeroptimizer.com,download.smileycentral.com,mm.delfinproject.com,view.atdmt.com,delfinproject.com,jbns2.cydoor.com,bannerfarm.ace.advertising.com,as.adwave.com,popuppers.com,look2me.com,wisapidata.weatherbug.com,ads.addynamix.com,ar.atwola.com,ad.trafficmp.com,updates.qoologic.com,ads1.revenue.net,weatherbug.com,jicmedia.cjt1.net,games.yahoo.com,adsrv.qoologic.com,servedby.advertising.com,ww2.weatherbug.com,rightmedia.net,bannerserver.gator.com,www4.yesadvertising.com,mmm.media-motor.net,hop.clickbank.net,media76.fastclick.net,websearch.com,isapi60.weatherbug.com,web.tickle.com,messenger.zango.com,wwp.icq.com,smileycentral.com,adserv1.gruvmedia.com,cdn.icq.com,s.clkoptimizer.com,tv.180solutions.com,pops.browseraid.com,download.abetterinternet.com,adserv.internetfuel.com,messenger.msn.com,sr.websearch.com,top-banners.com,advert.runescape.com,join1.winhundred.com,odysseusmarketing.com,v4.windowsupdate.microsoft.com,adverts.lzio.com,windowsupdate.microsoft.com,filter.belkin.com,comcast.net,sc.musicmatch.com,license.hotbar.com,trk.pcsecurityshield.com,web.icq.com,whenusearch.com,jbigpops.cjt1.net,isg05.casalemedia.com,yahoo.com,aol.com,anrdoezrs.net,microsoft.com,target.com,aim-charts.pf.aol.com,download.websearch.com,actualdeals.com,images.trafficmp.com,mydailyhoroscope.net,couponage.com,c5.zedo.com,ekmas.com,ads.mydailyhoroscope.net,creativeby.viewpoint.com,affiliates.4lowrates.com,hits.clickandtrack.net,jcontent.bns1.net,clickserve.cc-dt.com,popups.ad-logics.com,adlog2.lzio.com,host239.ipowerweb.com,bv.channel.aol.com,img2.mailpostdirect.com,dw.dailywinner.net,toprebates.com,trk.bestmagsdirect.com,ads.clickagents.com,a.websponsors.com,sandboxer.com,media.fastclick.net,click2.containsitall.com,ads234.com,http300.edge.ru4.com,adlog.com.com,rs.websearch.com,ads.com.com,server.iad.liveperson.net, ————– Strings.exe Aspack Results ————- —————– HKLM Run Key —————— ————– Strings.exe Umonitor Results ————- C:\WINDOWS\SYSTEM\JLSD400.DLL: UMonitor C:\WINDOWS\SYSTEM\WD32DLL.DLL: UMonitor C:\WINDOWS\SYSTEM\ONE32.DLL: UMonitor C:\WINDOWS\SYSTEM\MLSCMC32.DLL: UMonitor C:\WINDOWS\SYSTEM\CWFVIEW.DLL: UMonitor C:\WINDOWS\SYSTEM\CCM.DLL: UMonitor C:\WINDOWS\SYSTEM\CKUSALGO.DLL: UMonitor C:\WINDOWS\SYSTEM\MOI.DLL: UMonitor C:\WINDOWS\SYSTEM\IYVIDEO.DLL: UMonitor C:\WINDOWS\SYSTEM\STLSRV32.DLL: UMonitor C:\WINDOWS\SYSTEM\DHO350.DLL: UMonitor C:\WINDOWS\SYSTEM\MLVIDCTL.DLL: UMonitor C:\WINDOWS\SYSTEM\MWVIDCTL.DLL: UMonitor C:\WINDOWS\SYSTEM\OYECNV32.DLL: UMonitor C:\WINDOWS\SYSTEM\CZETCFG.DLL: UMonitor C:\WINDOWS\SYSTEM\OXESVR.DLL: UMonitor C:\WINDOWS\SYSTEM\DNNLOBBY.DLL: UMonitor C:\WINDOWS\SYSTEM\OZGFS400.DLL: UMonitor C:\WINDOWS\SYSTEM\VS5STKIT.DLL: UMonitor C:\WINDOWS\SYSTEM\OQBC32.DLL: UMonitor C:\WINDOWS\SYSTEM\SVLWAPI.DLL: UMonitor C:\WINDOWS\SYSTEM\MgTCP.DLL: UMonitor C:\WINDOWS\SYSTEM\DYVMGR32.DLL: UMonitor C:\WINDOWS\SYSTEM\CRDIAL32.DLL: UMonitor C:\WINDOWS\SYSTEM\IOSETUP.DLL: UMonitor C:\WINDOWS\SYSTEM\SKROBJ.DLL: UMonitor C:\WINDOWS\SYSTEM\mhxbse35.dll: UMonitor C:\WINDOWS\SYSTEM\VH40016.DLL: UMonitor C:\WINDOWS\SYSTEM\DXDIM.DLL: UMonitor C:\WINDOWS\SYSTEM\DMNMPNTW.DLL: UMonitor C:\WINDOWS\SYSTEM\CdGWIZ.DLL: UMonitor C:\WINDOWS\SYSTEM\RqCLTC1.DLL: UMonitor C:\WINDOWS\SYSTEM\VUHELPER.DLL: UMonitor C:\WINDOWS\SYSTEM\HSFSUI08.DLL: UMonitor C:\WINDOWS\SYSTEM\mardo20.dll: UMonitor C:\WINDOWS\SYSTEM\WQVDMOD.DLL: UMonitor C:\WINDOWS\SYSTEM\WMOCK32.DLL: UMonitor C:\WINDOWS\SYSTEM\GPOUPPOL.DLL: UMonitor C:\WINDOWS\SYSTEM\MFRATING.DLL: UMonitor C:\WINDOWS\SYSTEM\NkTOS.DLL: UMonitor C:\WINDOWS\SYSTEM\moc70.dll: UMonitor C:\WINDOWS\SYSTEM\Mpstery.dll: UMonitor C:\WINDOWS\SYSTEM\anmwprox.dll: UMonitor C:\WINDOWS\SYSTEM\VFRSION.DLL: UMonitor C:\WINDOWS\SYSTEM\TB2032.DLL: UMonitor C:\WINDOWS\SYSTEM\WRSDMOD.DLL: UMonitor C:\WINDOWS\SYSTEM\CUM.DLL: UMonitor C:\WINDOWS\SYSTEM\WISTREAM.DLL: UMonitor C:\WINDOWS\SYSTEM\djcxatm.dll: UMonitor C:\WINDOWS\SYSTEM\IDSETUP.DLL: UMonitor C:\WINDOWS\SYSTEM\IGROP.DLL: UMonitor C:\WINDOWS\SYSTEM\INNPSTUB.DLL: UMonitor C:\WINDOWS\SYSTEM\SEKIT416.DLL: UMonitor C:\WINDOWS\SYSTEM\UJDM32.DLL: UMonitor C:\WINDOWS\SYSTEM\NrTOS.DLL: UMonitor C:\WINDOWS\SYSTEM\IXLOADER.DLL: UMonitor C:\WINDOWS\SYSTEM\UXER32.DLL: UMonitor C:\WINDOWS\SYSTEM\JLPL400.DLL: UMonitor C:\WINDOWS\SYSTEM\EDYSH7.DLL: UMonitor C:\WINDOWS\SYSTEM\RVCMQSVR.DLL: UMonitor C:\WINDOWS\SYSTEM\WYLP32T.DLL: UMonitor C:\WINDOWS\SYSTEM\MPXML3.DLL: UMonitor C:\WINDOWS\SYSTEM\KwMMCTRL.DLL: UMonitor C:\WINDOWS\SYSTEM\NySWAN32.DLL: UMonitor C:\WINDOWS\SYSTEM\DANMPNTW.DLL: UMonitor C:\WINDOWS\SYSTEM\TVOLHELP.DLL: UMonitor C:\WINDOWS\SYSTEM\RdCHED.DLL: UMonitor C:\WINDOWS\SYSTEM\dvcxatm.dll: UMonitor C:\WINDOWS\SYSTEM\MIVCP50.DLL: UMonitor C:\WINDOWS\SYSTEM\cnreak.dll: UMonitor C:\WINDOWS\SYSTEM\mqvbvm60.dll: UMonitor C:\WINDOWS\SYSTEM\msg200.cpy.dll: UMonitor C:\WINDOWS\SYSTEM\HNFDOS08.DLL: UMonitor C:\WINDOWS\SYSTEM\SPTUPX.DLL: UMonitor C:\WINDOWS\SYSTEM\XWILEXR.DLL: UMonitor C:\WINDOWS\SYSTEM\DOTMLAccess.dll: UMonitor C:\WINDOWS\SYSTEM\mjxtrk.dll: UMonitor C:\WINDOWS\SYSTEM\SICDLL.DLL: UMonitor C:\WINDOWS\SYSTEM\CYYPTEXT.DLL: UMonitor C:\WINDOWS\SYSTEM\MHC30.DLL: UMonitor C:\WINDOWS\SYSTEM\mLpi32x.dll: UMonitor C:\WINDOWS\SYSTEM\CNMCTL32.DLL: UMonitor C:\WINDOWS\SYSTEM\MRG_HOOK.DLL: UMonitor C:\WINDOWS\SYSTEM\mujetoledb40.dll: UMonitor C:\WINDOWS\SYSTEM\QIAUTO.DLL: UMonitor C:\WINDOWS\SYSTEM\IUET16.DLL: UMonitor C:\WINDOWS\SYSTEM\MEIEFTP.DLL: UMonitor C:\WINDOWS\SYSTEM\DECVR.DLL: UMonitor C:\WINDOWS\SYSTEM\QRGR.DLL: UMonitor C:\WINDOWS\SYSTEM\PdPNDI.DLL: UMonitor C:\WINDOWS\SYSTEM\Svace.dll: UMonitor C:\WINDOWS\SYSTEM\NiTOS.DLL: UMonitor C:\WINDOWS\SYSTEM\IaFRARED.DLL: UMonitor REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SystemTray"="SysTray.Exe" "WinPatrol"="C:\\PROGRAM FILES\\BILLP STUDIOS\\WINPATROL\\winpatrol.exe"  :wavey: Is it soup yet? Every time I log onto AOL, they add a start up item that hangs up the system because I'm using AOL 7.0 instead of AOL 9.0 se. That works but adds too many memory resident programs for the memory on this system to handel. That's why I had to hard-boot the other time, and I think that set us back, since then the system is much slower again… Thanks for your continued help. EM
Ernie,

Sorry for the delay, just keep in mind that we are all volunteers here at JC and help out when we can to fight this Malware thing. Been called away this weekend so my internet access has been somewhat limited.

FindIt is a great program but the infection you have can be stubborn to remove. I want to try a different program. Run this program called AGENT RANSACK . Here is the link to the download and some instructions. When your done, it will create a log, post the log and a new HJT log.

Download and install Agent Ransack a free search tool.
http://www.mythicsoft.com/agentransack/default.aspx

Start the program, start > search > Agent Ransack
[x] check expert user
In the text containing field copy/paste this in
(UMonitor|IsProcessorFeaX|NictechNetworks)+
In the Look in field paste in
C:\windows\system
[ ] uncheck the box to search sub folders
Click Start search

Once its done go file save results (x)clipboard is checked by default,
leave it, BUT uncheck [ ] file contents. Now save, which copies it to your clipboard,
in your next post right-click paste that information back here, dont assume all thats found is a bad thing.

Once its done go file save results (x)clipboard is checked by default,
leave it, BUT uncheck [ ] file contents. Now save, which copies it to your clipboard,
in your next post right-click paste that information back here.
:thumbup: got it done!

C:\Windows\System\PCPWPROP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JLSD400.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\WD32DLL.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\ONE32.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\MLSCMC32.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\FPTLS432.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DRSKCOPY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\CWFVIEW.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\CCM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MUR2CENU.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\mpxtrk.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\CKUSALGO.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MFVCP50.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\WR5INF16.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\LLPRXY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\AOMUI.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\lngmgr.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DGUSIC.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JCEG1X32.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\AZYCFILT.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\FKSRCH.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\OY30.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\ayfsipc.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JADW400.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\MOAWT.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\MOI.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\msxperf.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\dzcxatm.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\Isetwh32.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\SVDOCLC.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\DBDIM.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DDNADDR.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\SPROBJ.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IMSETUP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\LFPRXY.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MCCO30.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\IYVIDEO.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\MECO30.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\VKRSION.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MAOEACCT.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\DEWSOCK.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\STLSRV32.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\RMPILIB.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\DHO350.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MLVIDCTL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DABENG.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\SNTUPKIT.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\GjtFile.dll (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\WHASPI32.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\lfkrn10N.dll (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\WNN87EM.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MXIEFTP.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\OAESVR.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MWVIDCTL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\OYECNV32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\AO18.dll (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\NuTOS.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\CZETCFG.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\OXESVR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DNNLOBBY.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DBSKCOPY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\TAOLHELP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\OZGFS400.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VS5STKIT.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\OQBC32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SVLWAPI.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MgTCP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DYVMGR32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CRDIAL32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\tpinInstTSX113ez.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IOSETUP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SKROBJ.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mhxbse35.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VH40016.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DXDIM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DMNMPNTW.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CdGWIZ.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\RqCLTC1.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VUHELPER.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\HSFSUI08.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mardo20.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WQVDMOD.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WMOCK32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\GPOUPPOL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MFRATING.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NkTOS.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\moc70.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\Mpstery.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\anmwprox.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VFRSION.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\TB2032.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WRSDMOD.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CUM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WISTREAM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\djcxatm.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IDSETUP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IGROP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\INNPSTUB.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SEKIT416.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\UJDM32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NrTOS.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IXLOADER.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\UXER32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\JLPL400.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\EDYSH7.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\RVCMQSVR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WYLP32T.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MPXML3.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\KwMMCTRL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NySWAN32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DANMPNTW.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\TVOLHELP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\RdCHED.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\dvcxatm.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MIVCP50.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\cnreak.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mqvbvm60.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\msg200.cpy.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\HNFDOS08.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SPTUPX.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\XWILEXR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DOTMLAccess.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mjxtrk.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SICDLL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CYYPTEXT.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MHC30.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mLpi32x.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CNMCTL32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MRG_HOOK.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mujetoledb40.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\QIAUTO.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IUET16.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MEIEFTP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DECVR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\QRGR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\PdPNDI.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\Svace.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NiTOS.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\IaFRARED.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\WPTSECUR.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\AEN21e.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\Igetwh32.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\RmCLTS5.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DRIMAN32.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\CGMMDLG.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\LMPRXY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JXPL400.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\NWWMSDRM.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\lgp.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IbSETUP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\MTDOCS.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DCNLOBBY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\HIFRDB08.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IGLOADER.DLL (222 KB, 3/9/05 1:24:38 AM)


Logfile of HijackThis v1.99.1
Scan saved at 11:15:02 PM, on 3/27/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\WINPATROL.EXE
C:\WINDOWS\RunDLL.exe
C:\COREL\OFFICE7\SHARED\PFIT7\PFPPOP70.EXE
C:\COREL\OFFICE7\DAD7\QUICK.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\PROGRAM FILES\MYTHICSOFT\AGENT RANSACK\AGENTRANSACK.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: FDA Bar - {9595C62C-76C6-49A6-9BDA-3253DD7A34FF} - C:\PROGRAM FILES\FREE DOWNLOADS ACCELERATOR\FDABAR99.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\winpatrol.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - Startup: PerfectPrint.LNK = C:\Corel\Office7\Shared\PFit7\PFPPOP70.EXE
O4 - Startup: Corel Desktop Application Director.LNK = C:\Corel\Office7\Dad7\QUICK.EXE
O4 - User Startup: PerfectPrint.LNK = C:\Corel\Office7\Shared\PFit7\PFPPOP70.EXE
O4 - User Startup: Corel Desktop Application Director.LNK = C:\Corel\Office7\Dad7\QUICK.EXE
O8 - Extra context menu item: Download with Free Downloads Accelerator - C:\Program Files\Free Downloads Accelerator\fdaie.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: AOL Instant Messenger (SM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {B91AEDBE-93DF-4017-8BB3-F1C300C0EC51} (InstallShield Setup Player 2K2) - http://www.learn2type.com/Rel092/setup.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe…etup1.0.0.6.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m…83/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m…,20/mcgdmgr.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup…p1/imloader.cab


OK!
This has been an amazing learning experience. Thank you big time.
EM
Ernie,

I know this is getting old but we need to run the following DLL files through Killbox, the same way you did with the FindIt files. I would copy all these and paste them into Notepad and then cut and paste them into Killbox so that you can keep track of the ones that you put in. All you enter in is the actual DLL file

Example

C:\WINDOWS\SYSTEM\PCPWPROP.DLL


C:\Windows\System\PCPWPROP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JLSD400.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\WD32DLL.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\ONE32.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\MLSCMC32.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\FPTLS432.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DRSKCOPY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\CWFVIEW.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\CCM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MUR2CENU.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\mpxtrk.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\CKUSALGO.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MFVCP50.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\WR5INF16.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\LLPRXY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\AOMUI.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\lngmgr.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DGUSIC.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JCEG1X32.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\AZYCFILT.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\FKSRCH.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\OY30.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\ayfsipc.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JADW400.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\MOAWT.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\MOI.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\msxperf.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\dzcxatm.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\Isetwh32.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\SVDOCLC.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\DBDIM.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DDNADDR.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\SPROBJ.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IMSETUP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\LFPRXY.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MCCO30.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\IYVIDEO.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\MECO30.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\VKRSION.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MAOEACCT.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\DEWSOCK.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\STLSRV32.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\RMPILIB.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\DHO350.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MLVIDCTL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DABENG.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\SNTUPKIT.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\GjtFile.dll (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\WHASPI32.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\lfkrn10N.dll (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\WNN87EM.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MXIEFTP.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\OAESVR.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\MWVIDCTL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\OYECNV32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\AO18.dll (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\NuTOS.DLL (222 KB, 3/18/05 4:22:54 AM)
C:\Windows\System\CZETCFG.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\OXESVR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DNNLOBBY.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DBSKCOPY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\TAOLHELP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\OZGFS400.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VS5STKIT.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\OQBC32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SVLWAPI.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MgTCP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DYVMGR32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CRDIAL32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\tpinInstTSX113ez.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IOSETUP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SKROBJ.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mhxbse35.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VH40016.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DXDIM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DMNMPNTW.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CdGWIZ.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\RqCLTC1.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VUHELPER.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\HSFSUI08.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mardo20.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WQVDMOD.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WMOCK32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\GPOUPPOL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MFRATING.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NkTOS.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\moc70.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\Mpstery.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\anmwprox.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\VFRSION.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\TB2032.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WRSDMOD.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CUM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WISTREAM.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\djcxatm.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IDSETUP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IGROP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\INNPSTUB.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SEKIT416.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\UJDM32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NrTOS.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IXLOADER.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\UXER32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\JLPL400.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\EDYSH7.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\RVCMQSVR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\WYLP32T.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MPXML3.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\KwMMCTRL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NySWAN32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DANMPNTW.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\TVOLHELP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\RdCHED.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\dvcxatm.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MIVCP50.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\cnreak.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mqvbvm60.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\msg200.cpy.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\HNFDOS08.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SPTUPX.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\XWILEXR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DOTMLAccess.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mjxtrk.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\SICDLL.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CYYPTEXT.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MHC30.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mLpi32x.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\CNMCTL32.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MRG_HOOK.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\mujetoledb40.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\QIAUTO.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\IUET16.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\MEIEFTP.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\DECVR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\QRGR.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\PdPNDI.DLL (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\Svace.dll (218 KB, 1/21/05 7:07:42 PM)
C:\Windows\System\NiTOS.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\IaFRARED.DLL (218 KB, 3/5/05 12:27:26 PM)
C:\Windows\System\WPTSECUR.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\AEN21e.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\Igetwh32.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\RmCLTS5.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DRIMAN32.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\CGMMDLG.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\LMPRXY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\JXPL400.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\NWWMSDRM.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\lgp.dll (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IbSETUP.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\MTDOCS.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\DCNLOBBY.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\HIFRDB08.DLL (222 KB, 3/9/05 1:24:38 AM)
C:\Windows\System\IGLOADER.DLL (222 KB, 3/9/05 1:24:38 AM)

When your done, run Agent Ransack again and post a new Ransack log and hopefully they will be all gone and we can finish the cleaning process.
:thumbup: OK! here's the Agent Ransack Log. Without Sub folders, and no text to place in the search field. C:\My Documents (1/27/03 8:04:50 PM) C:\Program Files (1/27/03 7:37:04 PM) C:\Windows Update Setup Files (2/10/03 5:36:30 PM) C:\AOL Instant Messenger (3/9/04 2:37:44 PM) C:\Shortcut to UdfrChk.lnk (1 KB, 12/31/03 6:39:34 PM) C:\AOL Downloads (2/17/04 7:58:36 PM) C:\The Music Teacher (Doctor Neupauers book).wpd (129 KB, 10/29/04 12:17:22 PM) C:\Ernies Resume.wpd (7 KB, 10/29/04 12:55:10 PM) C:\Shortcut to MyFiles.lnk (1 KB, 11/16/04 7:34:04 PM) C:\New Folder (3/7/05 1:09:50 PM) C:\My Music (12/28/04 12:17:32 PM) C:\New Folder (2) (3/7/05 1:10:20 PM) ( I got this Error Message and had to re-boot a few times) There is not enough free memory to preform a surface scan. You may need to remark (REM) some device drivers from your config.sys file, or, in config.sys, you may need to load the EMM386.exe Driver to load our other device drivers into upper memory blocks using DEVICEHIGH= Statements. (Start Up Menu Question) Each time I log on with AOL 9.0 in the Win.ini it updates the AOL start up group. Which slows the system down to a crawl. I run msconfig and click on the two that are listed under AOL 7.0 start up. Also the other error message regarding (REM) line loading device drivers into upper memory blocks using DEVICEHIGH statements. There's nothing to edit and the config.sys box is shaded gray. As well as the Autoexe.bat box. Start, click RUN, msconfig OK, Start up menu when I use AOL 7.0 [x] Process system [x] Process win [x] load start up group [ ] config.sys (empty) nothing to edit [ ] autoexe.bat (empty) nothing to edit these are the only two I have checked, in the start up menu list. -=-=-=-=-=-=-=-=-=- [x] system tray [x] Winpatrol -=-=-=-=-=-=-=-=-=- Using these two only, I'm able to log on and receive email. And the systems speed is normal. I still have no graphics in email, when I link onto a site, then I'll see graphics. But there very slow to load. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- When I use AOL 9.0 se [x] Process system [x] Process win [x] load start up group [ ] config (empty) [ ] Autoexe.bat (empty) These are what AOL 9.0 se adds to the start up list, and the system runs very slow. Graphics load one icon at a time. -=-=-=-=-=-=-=-=-=-=-= [x] system tray [x] Winpatrol [x] McVsRte [x] Host Manager [x] AOL Fast Start [x] AOL CC [x] AOL Dialer [x] Mc Update [x] Mc Agent [x] Virus Scan [x] Aol Top Speed [x] AOL Acc Daemon1 I've tried removing just the McAfee's from the list but the system was just as slow. That's why I believe I need more RAM memory to be able to RUN AOL 9.0 se, as well as the rest of the programs on that Start up list. -=-=-=-=-=—=–=-=-=– My question is, what is the normal start up list for windows 98? RUN msconfig. What "should" be checked to run at start up? And how do I edit the config.sys so that I can add the DEVICEHIGH statements to load EMM386.exe driver. Config.sys, window is empty! And the check box is shaded gray, I don't have access to the check box, to be able to edit it and add the line DEVICEHIGH=EMM386.exe Is that normal? Feeling dazed and confused. ;P (RunTime Error Message) It happened again… Microsoft Visual C++ Runntime Library RunTime Error Program:C\Windows\Explorer.exe This application has requested the runtime to terminate it in an unusual way. Please contact the applications support team for more information. Hope that info helps figure things out. Thanks EM
:unsure: That last, Agent Ransack log didn't look right I ran it again… C:\CONFIG.DOS (0 KB, 1/7/05 1:03:20 AM) C:\BOOTLOG.PRV (69 KB, 3/26/05 12:44:54 PM) C:\RECYCLED (12/1/04 7:42:14 AM) C:\SUHDLOG.DAT (6 KB, 3/22/05 12:56:38 PM) C:\SUHDLOG.BAK (6 KB, 12/28/04 5:19:58 AM) C:\SUHDLOG.— (6 KB, 3/27/04 4:46:12 PM) C:\SCANDISK.LOG (3 KB, 3/26/05 7:40:06 AM) C:\WINDOWS (1/27/03 7:32:26 PM) C:\VIDEOROM.BIN (32 KB, 1/27/03 8:00:22 PM) C:\SETUPLOG.TXT (9 KB, 3/22/05 12:08:02 PM) C:\MSDOS.BAK (2 KB, 3/22/05 12:00:06 PM) C:\IO.SYS (218 KB, 4/23/99 10:22:00 PM) C:\My Documents (1/27/03 8:04:50 PM) C:\Program Files (1/27/03 7:37:04 PM) C:\CONFIG.PSS (0 KB, 2/8/05 11:27:16 PM) C:\Inetpub (1/27/03 11:51:54 PM) C:\ASD.LOG (1 KB, 2/17/04 4:12:14 AM) C:\AUTOEXEC.PSS (0 KB, 2/8/05 11:27:16 PM) C:\AUTOEXEC.DOS (1 KB, 3/25/04 2:01:04 PM) C:\CCSGUIDE (1/28/03 12:14:36 AM) C:\Corel (1/28/03 5:39:54 PM) C:\MyFiles (1/28/03 5:39:54 PM) C:\MSINPUT (2/3/03 6:55:34 PM) C:\POSTAL (2/3/03 7:51:50 PM) C:\WINDOWSWinHlp32.BMK (1 KB, 2/3/03 7:47:06 PM) C:\Windows Update Setup Files (2/10/03 5:36:30 PM) C:\SETUPXLG.TXT (14 KB, 3/28/05 2:21:52 AM) C:\logo.W98 (127 KB, 5/1/98 12:01:02 PM) C:\AOL Instant Messenger (3/9/04 2:37:44 PM) C:\COMMAND.COM (92 KB, 4/23/99 10:22:00 PM) C:\aoldownloads (800 KB, 2/29/04 5:35:32 AM) C:\WINZIP (10/29/03 4:17:48 AM) C:\Downloads (11/2/03 3:51:30 AM) C:\Shortcut to UdfrChk.lnk (1 KB, 12/31/03 6:39:34 PM) C:\udfrinst.zl (379 KB, 1/13/03 9:19:26 AM) C:\NULL (34 KB, 12/30/03 4:45:10 AM) C:\WINCODE (3/22/05 11:23:10 AM) C:\MSDOS.SYS (2 KB, 2/8/05 7:20:40 AM) C:\AOL Downloads (2/17/04 7:58:36 PM) C:\inetFuel.exe (50 KB, 2/13/05 2:55:06 AM) C:\NETLOG.TXT (29 KB, 3/16/05 1:02:56 AM) C:\SYSTEM.1ST (7541 KB, 12/28/04 5:19:46 AM) C:\DRVSPACE.BIN (68 KB, 4/23/99 10:22:00 PM) C:\WrapperOuter.exe (247 KB, 2/21/05 4:07:50 AM) C:\The Music Teacher (Doctor Neupauers book).wpd (129 KB, 10/29/04 12:17:22 PM) C:\Ernies Resume.wpd (7 KB, 10/29/04 12:55:10 PM) C:\Shortcut to MyFiles.lnk (1 KB, 11/16/04 7:34:04 PM) C:\New Folder (3/7/05 1:09:50 PM) C:\Verti1.exe (38 KB, 12/21/04 5:44:04 AM) C:\DBLSPACE.INI (1 KB, 12/7/04 11:30:18 AM) C:\DBLSPACE.BIN (68 KB, 4/23/99 10:22:00 PM) C:\DETLOG.TXT (73 KB, 12/28/04 11:59:44 AM) C:\virlog.txt (0 KB, 12/9/04 12:51:54 PM) C:\WUTemp (12/12/04 12:46:48 PM) C:\DETLOG.OLD (73 KB, 12/28/04 11:59:44 AM) C:\LOGO.SYS (127 KB, 4/23/99 10:22:00 PM) C:\ud232.exe (72 KB, 12/18/04 12:14:26 PM) C:\MSDOS.— (1 KB, 1/27/03 7:27:26 PM) C:\CONFIG.SYS (0 KB, 3/29/05 12:54:00 AM) C:\AUTOEXEC.BAT (1 KB, 3/29/05 12:54:00 AM) C:\SETUPLOG.OLD (114 KB, 3/8/05 3:28:02 AM) C:\BOOTLOG.TXT (1 KB, 3/27/05 7:17:26 PM) C:\My Music (12/28/04 12:17:32 PM) C:\agntclient.log (0 KB, 3/13/05 3:04:06 AM) C:\WINLFN1.INI (11 KB, 3/22/05 12:08:40 PM) C:\cleanall (3/20/05 12:08:12 AM) C:\New Folder (2) (3/7/05 1:10:20 PM) C:\hijackthis (3/11/05 2:53:32 AM) C:\n20050308.exe (80 KB, 3/9/05 2:34:22 AM) C:\WinPatrolLog.html (29 KB, 3/18/05 2:24:44 AM) C:\WINEBD0.400 (3/21/05 4:27:40 AM) C:\AUTOEXEC.TSH (1 KB, 3/24/05 11:27:06 PM) C:\WINLFN.INI (49 KB, 3/22/05 12:08:40 PM) Hope that's what your looking for… ;) EM
Ernie, Just use Killbox to delete the files that I posted, just like you did with the findit log. There the ones that I posted last night. All the DLL files.
Ernie,

I cleaned them up a little to make it easier for you.

C:\WINDOWS\SYSTEM\ <–DLL file here

C:\Windows\System\PCPWPROP.DLL
C:\Windows\System\JLSD400.DLL
C:\Windows\System\WD32DLL.DLL
C:\Windows\System\ONE32.DLL
C:\Windows\System\MLSCMC32.DLL
C:\Windows\System\FPTLS432.DLL
C:\Windows\System\DRSKCOPY.DLL
C:\Windows\System\CWFVIEW.DLL
C:\Windows\System\CCM.DLL
C:\Windows\System\MUR2CENU.DLL
C:\Windows\System\mpxtrk.dll
C:\Windows\System\CKUSALGO.DLL
C:\Windows\System\MFVCP50.DLL
C:\Windows\System\WR5INF16.DLL
C:\Windows\System\LLPRXY.DLL
C:\Windows\System\AOMUI.DLL
C:\Windows\System\lngmgr.dll
C:\Windows\System\DGUSIC.DLL
C:\Windows\System\JCEG1X32.DLL
C:\Windows\System\AZYCFILT.DLL
C:\Windows\System\FKSRCH.DLL
C:\Windows\System\OY30.DLL
C:\Windows\System\ayfsipc.dll
C:\Windows\System\JADW400.DLL
C:\Windows\System\MOAWT.DLL
C:\Windows\System\MOI.DLL
C:\Windows\System\msxperf.dll
C:\Windows\System\dzcxatm.dll
C:\Windows\System\Isetwh32.dll
C:\Windows\System\SVDOCLC.DLL
C:\Windows\System\DBDIM.DLL
C:\Windows\System\DDNADDR.DLL
C:\Windows\System\SPROBJ.DLL
C:\Windows\System\IMSETUP.DLL
C:\Windows\System\LFPRXY.DLL
C:\Windows\System\MCCO30.DLL
C:\Windows\System\IYVIDEO.DLL
C:\Windows\System\MECO30.DLL
C:\Windows\System\VKRSION.DLL
C:\Windows\System\MAOEACCT.DLL
C:\Windows\System\DEWSOCK.DLL
C:\Windows\System\STLSRV32.DLL
C:\Windows\System\RMPILIB.DLL
C:\Windows\System\DHO350.DLL
C:\Windows\System\MLVIDCTL.DLL
C:\Windows\System\DABENG.DLL
C:\Windows\System\SNTUPKIT.DLL
C:\Windows\System\GjtFile.dll
C:\Windows\System\WHASPI32.DLL
C:\Windows\System\lfkrn10N.dll
C:\Windows\System\WNN87EM.DLL
C:\Windows\System\MXIEFTP.DLL
C:\Windows\System\OAESVR.DLL
C:\Windows\System\MWVIDCTL.DLL
C:\Windows\System\OYECNV32.DLL
C:\Windows\System\AO18.dll
C:\Windows\System\NuTOS.DLL
C:\Windows\System\CZETCFG.DLL
C:\Windows\System\OXESVR.DLL
C:\Windows\System\DNNLOBBY.DLL
C:\Windows\System\DBSKCOPY.DLL
C:\Windows\System\TAOLHELP.DLL
C:\Windows\System\OZGFS400.DLL
C:\Windows\System\VS5STKIT.DLL
C:\Windows\System\OQBC32.DLL
C:\Windows\System\SVLWAPI.DLL
C:\Windows\System\MgTCP.DLL
C:\Windows\System\DYVMGR32.DLL
C:\Windows\System\CRDIAL32.DLL
C:\Windows\System\tpinInstTSX113ez.dll
C:\Windows\System\IOSETUP.DLL
C:\Windows\System\SKROBJ.DLL
C:\Windows\System\mhxbse35.dll
C:\Windows\System\VH40016.DLL
C:\Windows\System\DXDIM.DLL
C:\Windows\System\DMNMPNTW.DLL
C:\Windows\System\CdGWIZ.DLL
C:\Windows\System\RqCLTC1.DLL
C:\Windows\System\VUHELPER.DLL
C:\Windows\System\HSFSUI08.DLL
C:\Windows\System\mardo20.dll
C:\Windows\System\WQVDMOD.DLL
C:\Windows\System\WMOCK32.DLL
C:\Windows\System\GPOUPPOL.DLL
C:\Windows\System\MFRATING.DLL
C:\Windows\System\NkTOS.DLL
C:\Windows\System\moc70.dll
C:\Windows\System\Mpstery.dll
C:\Windows\System\anmwprox.dll
C:\Windows\System\VFRSION.DLL
C:\Windows\System\TB2032.DLL
C:\Windows\System\WRSDMOD.DLL
C:\Windows\System\CUM.DLL
C:\Windows\System\WISTREAM.DLL
C:\Windows\System\djcxatm.dll
C:\Windows\System\IDSETUP.DLL
C:\Windows\System\IGROP.DLL
C:\Windows\System\INNPSTUB.DLL
C:\Windows\System\SEKIT416.DLL
C:\Windows\System\UJDM32.DLL
C:\Windows\System\NrTOS.DLL
C:\Windows\System\IXLOADER.DLL
C:\Windows\System\UXER32.DLL
C:\Windows\System\JLPL400.DLL
C:\Windows\System\EDYSH7.DLL
C:\Windows\System\RVCMQSVR.DLL
C:\Windows\System\WYLP32T.DLL
C:\Windows\System\MPXML3.DLL
C:\Windows\System\KwMMCTRL.DLL
C:\Windows\System\NySWAN32.DLL
C:\Windows\System\DANMPNTW.DLL
C:\Windows\System\TVOLHELP.DLL
C:\Windows\System\RdCHED.DLL
C:\Windows\System\dvcxatm.dll
C:\Windows\System\MIVCP50.DLL
C:\Windows\System\cnreak.dll
C:\Windows\System\mqvbvm60.dll
C:\Windows\System\msg200.cpy.dll
C:\Windows\System\HNFDOS08.DLL
C:\Windows\System\SPTUPX.DLL
C:\Windows\System\XWILEXR.DLL
C:\Windows\System\DOTMLAccess.dll
C:\Windows\System\mjxtrk.dll
C:\Windows\System\SICDLL.DLL
C:\Windows\System\CYYPTEXT.DLL
C:\Windows\System\MHC30.DLL
C:\Windows\System\mLpi32x.dll
C:\Windows\System\CNMCTL32.DLL
C:\Windows\System\MRG_HOOK.DLL
C:\Windows\System\mujetoledb40.dll
C:\Windows\System\QIAUTO.DLL
C:\Windows\System\IUET16.DLL
C:\Windows\System\MEIEFTP.DLL
C:\Windows\System\DECVR.DLL
C:\Windows\System\QRGR.DLL
C:\Windows\System\PdPNDI.DLL
C:\Windows\System\Svace.dll
C:\Windows\System\NiTOS.DLL
C:\Windows\System\IaFRARED.DLL
C:\Windows\System\WPTSECUR.DLL
C:\Windows\System\AEN21e.dll
C:\Windows\System\Igetwh32.dll
C:\Windows\System\RmCLTS5.DLL
C:\Windows\System\DRIMAN32.DLL
C:\Windows\System\CGMMDLG.DLL
C:\Windows\System\LMPRXY.DLL
C:\Windows\System\JXPL400.DLL
C:\Windows\System\NWWMSDRM.DLL
C:\Windows\System\lgp.dll
C:\Windows\System\IbSETUP.DLL
C:\Windows\System\MTDOCS.DLL
C:\Windows\System\DCNLOBBY.DLL
C:\Windows\System\HIFRDB08.DLL
C:\Windows\System\IGLOADER.DLL
B) I ran Killbox again, and this time got it done with out a single error. Here's the Agent Ransack log. C:\CONFIG.DOS (0 KB, 1/7/05 1:03:20 AM) C:\BOOTLOG.PRV (69 KB, 3/26/05 12:44:54 PM) C:\RECYCLED (12/1/04 7:42:14 AM) C:\SUHDLOG.DAT (6 KB, 3/22/05 12:56:38 PM) C:\SUHDLOG.BAK (6 KB, 12/28/04 5:19:58 AM) C:\SUHDLOG.— (6 KB, 3/27/04 4:46:12 PM) C:\SCANDISK.LOG (3 KB, 3/26/05 7:40:06 AM) C:\WINDOWS (1/27/03 7:32:26 PM) C:\VIDEOROM.BIN (32 KB, 1/27/03 8:00:22 PM) C:\SETUPLOG.TXT (9 KB, 3/22/05 12:08:02 PM) C:\MSDOS.BAK (2 KB, 3/22/05 12:00:06 PM) C:\IO.SYS (218 KB, 4/23/99 10:22:00 PM) C:\My Documents (1/27/03 8:04:50 PM) C:\Program Files (1/27/03 7:37:04 PM) C:\CONFIG.PSS (0 KB, 2/8/05 11:27:16 PM) C:\Inetpub (1/27/03 11:51:54 PM) C:\ASD.LOG (1 KB, 2/17/04 4:12:14 AM) C:\AUTOEXEC.PSS (0 KB, 2/8/05 11:27:16 PM) C:\AUTOEXEC.DOS (1 KB, 3/25/04 2:01:04 PM) C:\CCSGUIDE (1/28/03 12:14:36 AM) C:\Corel (1/28/03 5:39:54 PM) C:\MyFiles (1/28/03 5:39:54 PM) C:\MSINPUT (2/3/03 6:55:34 PM) C:\POSTAL (2/3/03 7:51:50 PM) C:\WINDOWSWinHlp32.BMK (1 KB, 2/3/03 7:47:06 PM) C:\Windows Update Setup Files (2/10/03 5:36:30 PM) C:\SETUPXLG.TXT (14 KB, 3/28/05 2:21:52 AM) C:\logo.W98 (127 KB, 5/1/98 12:01:02 PM) C:\AOL Instant Messenger (3/9/04 2:37:44 PM) C:\COMMAND.COM (92 KB, 4/23/99 10:22:00 PM) C:\aoldownloads (800 KB, 2/29/04 5:35:32 AM) C:\WINZIP (10/29/03 4:17:48 AM) C:\Downloads (11/2/03 3:51:30 AM) C:\Shortcut to UdfrChk.lnk (1 KB, 12/31/03 6:39:34 PM) C:\udfrinst.zl (379 KB, 1/13/03 9:19:26 AM) C:\NULL (34 KB, 12/30/03 4:45:10 AM) C:\WINCODE (3/22/05 11:23:10 AM) C:\MSDOS.SYS (2 KB, 2/8/05 7:20:40 AM) C:\AOL Downloads (2/17/04 7:58:36 PM) C:\inetFuel.exe (50 KB, 2/13/05 2:55:06 AM) C:\NETLOG.TXT (29 KB, 3/16/05 1:02:56 AM) C:\SYSTEM.1ST (7541 KB, 12/28/04 5:19:46 AM) C:\DRVSPACE.BIN (68 KB, 4/23/99 10:22:00 PM) C:\WrapperOuter.exe (247 KB, 2/21/05 4:07:50 AM) C:\The Music Teacher (Doctor Neupauers book).wpd (129 KB, 10/29/04 12:17:22 PM) C:\Ernies Resume.wpd (7 KB, 10/29/04 12:55:10 PM) C:\Shortcut to MyFiles.lnk (1 KB, 11/16/04 7:34:04 PM) C:\New Folder (3/7/05 1:09:50 PM) C:\Verti1.exe (38 KB, 12/21/04 5:44:04 AM) C:\DBLSPACE.INI (1 KB, 12/7/04 11:30:18 AM) C:\DBLSPACE.BIN (68 KB, 4/23/99 10:22:00 PM) C:\DETLOG.TXT (73 KB, 12/28/04 11:59:44 AM) C:\virlog.txt (0 KB, 12/9/04 12:51:54 PM) C:\WUTemp (12/12/04 12:46:48 PM) C:\DETLOG.OLD (73 KB, 12/28/04 11:59:44 AM) C:\LOGO.SYS (127 KB, 4/23/99 10:22:00 PM) C:\ud232.exe (72 KB, 12/18/04 12:14:26 PM) C:\MSDOS.— (1 KB, 1/27/03 7:27:26 PM) C:\CONFIG.SYS (0 KB, 3/29/05 12:54:00 AM) C:\AUTOEXEC.BAT (1 KB, 3/29/05 12:54:00 AM) C:\SETUPLOG.OLD (114 KB, 3/8/05 3:28:02 AM) C:\BOOTLOG.TXT (1 KB, 3/27/05 7:17:26 PM) C:\My Music (12/28/04 12:17:32 PM) C:\agntclient.log (0 KB, 3/13/05 3:04:06 AM) C:\WINLFN1.INI (11 KB, 3/22/05 12:08:40 PM) C:\cleanall (3/20/05 12:08:12 AM) C:\New Folder (2) (3/7/05 1:10:20 PM) C:\hijackthis (3/11/05 2:53:32 AM) C:\n20050308.exe (80 KB, 3/9/05 2:34:22 AM) C:\WinPatrolLog.html (29 KB, 3/18/05 2:24:44 AM) C:\WINEBD0.400 (3/21/05 4:27:40 AM) C:\AUTOEXEC.TSH (1 KB, 3/24/05 11:27:06 PM) C:\WINLFN.INI (49 KB, 3/22/05 12:08:40 PM) :D Re-boot worked perfect this time. EM
Hi erniemarinukjr Ken is away for the evening and asked if I would help you till he gets back. Run agent ransack again, make sure you have the settings as follows. [x] check expert user In the text containing field copy/paste this in (UMonitor|IsProcessorFeaX|NictechNetworks)+ In the Look in field paste in C:\windows\system [ ] uncheck the box to search sub folders Click Start search Post your agent ransack log along with a new hijackthis log.
:wavey:

OK Got it. Agent Ranscak log, & Hijackthis.log

No results found… Ranscak log empty.

HiJackThis.log

Logfile of HijackThis v1.99.1
Scan saved at 10:13:40 PM, on 3/29/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\WINPATROL.EXE
C:\COREL\OFFICE7\SHARED\PFIT7\PFPPOP70.EXE
C:\COREL\OFFICE7\DAD7\QUICK.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\MYTHICSOFT\AGENT RANSACK\AGENTRANSACK.EXE
C:\PROGRAM FILES\AMERICA ONLINE 7.0\WAOL.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: FDA Bar - {9595C62C-76C6-49A6-9BDA-3253DD7A34FF} - C:\PROGRAM FILES\FREE DOWNLOADS ACCELERATOR\FDABAR99.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\winpatrol.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - Startup: PerfectPrint.LNK = C:\Corel\Office7\Shared\PFit7\PFPPOP70.EXE
O4 - Startup: Corel Desktop Application Director.LNK = C:\Corel\Office7\Dad7\QUICK.EXE
O4 - User Startup: PerfectPrint.LNK = C:\Corel\Office7\Shared\PFit7\PFPPOP70.EXE
O4 - User Startup: Corel Desktop Application Director.LNK = C:\Corel\Office7\Dad7\QUICK.EXE
O8 - Extra context menu item: Download with Free Downloads Accelerator - C:\Program Files\Free Downloads Accelerator\fdaie.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: AOL Instant Messenger (SM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {B91AEDBE-93DF-4017-8BB3-F1C300C0EC51} (InstallShield Setup Player 2K2) - http://www.learn2type.com/Rel092/setup.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe…etup1.0.0.6.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m…83/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m…,20/mcgdmgr.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup…p1/imloader.cab


[x] Check expert user (yes)
[UMonitor|IsProcessorFeaX|NictechNetworks] (yes)
C:\Windows\system (yes)
[ ] uncheck the bos to search sub folders (yes)
Click start (yes)

nothing found.

I hope that's a good thing? ;)

EM
Ok thats good news.

Run another hijackthis scan. Place a check next to the following entries, then close all other windows and click the fix button.

O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe…etup1.0.0.6.cab

Then reboot and run another hijackthis scan and post your new log here.
B)

HiJackThis.log file

Logfile of HijackThis v1.99.1
Scan saved at 10:44:21 PM, on 3/29/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\WINPATROL.EXE
C:\COREL\OFFICE7\SHARED\PFIT7\PFPPOP70.EXE
C:\COREL\OFFICE7\DAD7\QUICK.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\AMERICA ONLINE 7.0\WAOL.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by America Online
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: FDA Bar - {9595C62C-76C6-49A6-9BDA-3253DD7A34FF} - C:\PROGRAM FILES\FREE DOWNLOADS ACCELERATOR\FDABAR99.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\winpatrol.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - Startup: PerfectPrint.LNK = C:\Corel\Office7\Shared\PFit7\PFPPOP70.EXE
O4 - Startup: Corel Desktop Application Director.LNK = C:\Corel\Office7\Dad7\QUICK.EXE
O4 - User Startup: PerfectPrint.LNK = C:\Corel\Office7\Shared\PFit7\PFPPOP70.EXE
O4 - User Startup: Corel Desktop Application Director.LNK = C:\Corel\Office7\Dad7\QUICK.EXE
O8 - Extra context menu item: Download with Free Downloads Accelerator - C:\Program Files\Free Downloads Accelerator\fdaie.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL/SEARCH.HTML
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: AOL Instant Messenger (SM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\PROGRAM FILES\AOL TOOLBAR\TOOLBAR.DLL
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {B91AEDBE-93DF-4017-8BB3-F1C300C0EC51} (InstallShield Setup Player 2K2) - http://www.learn2type.com/Rel092/setup.exe
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200312…meInstaller.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m…83/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m…,20/mcgdmgr.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents/setup…p1/imloader.cab

I got an error message # 75 when clicked the fix button.

EM

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI