What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Slow Windows 95

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I'm running Windows 95 as well as Spybot 1.3. AdAware doesn't say it works for Win 95 so I'm not using it. My computer locks up randomly and at other time slows down till it is too painful to use. I ran hijack this 1.99.9 and got a message - you have an particularily large amount of jijacked domains …consider deleting hosts file. I then tried to save a log file. When I tried to open it, I got a message "error loading type library/DLL" The log file will not open. Help! I've got a mess!
Post #2
I figured out how to open the hijack this log. See below.

Logfile of HijackThis v1.99.1
Scan saved at 10:06:07 PM, on 7/3/05
Platform: Windows 95 b (Win9x 4.00.1212)
MSIE: Internet Explorer v5.51 (5.51.3020.2100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\LOADWC.EXE
C:\PROGRAM FILES\NETZIP\NZFPROP.EXE
C:\PROGRAM FILES\KYE\GENIUS NET MOUSE PRO DRIVER\MOUSEELF.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\BROWSER MOUSE\MOUSE32A.EXE
C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE
C:\PROGRAM FILES\NOADS\NOADS.EXE
C:\TOOLS_95\IOWATCH.EXE
C:\TOOLS_95\IMGICON.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.netscape.com/home/winsearch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.passport.net/uilogin.srf?id=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.netscape.com/home/winsearch.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.netscape.com/home/winsearch200.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.netscape.com/home/winsearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://keyword.netscape.com/keyword/%s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://www.quicken.com/?pid=914769229552807"); (C:\Program Files\Netscape\Users\deanrob\prefs.js)
O1 - Hosts: 160.91.226.75 snsnta.sns.ornl.gov
O1 - Hosts: 160.91.227.188 iroquois.sns.ornl.gov
O1 - Hosts: 198.124.42.226 snscf-wp0.sns.ornl.gov
O1 - Hosts: 172.17.0.1 brcos5-cos5lan.ens.ornl.gov brcos5-cos5lan
O1 - Hosts: 172.17.0.129 brk1007-4p2.ens.ornl.gov brk1007-4p2
O1 - Hosts: 172.17.0.130 conk1007-4.ens.ornl.gov conk1007-4
O1 - Hosts: 172.17.0.131 bjchrpr.bechteljacobs.org bjchrpr
O1 - Hosts: 172.17.0.193 brk1007-4p4.ens.ornl.gov brk1007-4p4
O1 - Hosts: 172.17.0.194 swbjhr.ens.ornl.gov swbjhr
O1 - Hosts: 172.17.0.195 bjchrnt.bechteljacobs.org bjchrnt
O1 - Hosts: 172.17.0.2 cos5.priv.ornl.gov cos5 cos5.y12.doe.gov cos5
O1 - Hosts: 172.17.0.65 brcos5-cosdev5.ens.ornl.gov brcos5-cosdev5
O1 - Hosts: 172.17.0.66 cosdev5.priv.ornl.gov cosdev5 cosdev5.y12.doe.gov cosdev5
O1 - Hosts: 172.17.0.67 hrocapp1.ctd.ornl.gov hrocapp1 hrocapp1.y12.doe.gov hrocapp1
O1 - Hosts: 172.17.0.68 hrocapp2.ctd.ornl.gov hrocapp2 hrocapp2.y12.doe.gov hrocapp2
O1 - Hosts: 172.17.0.69 hrimgsrv.ctd.ornl.gov hrimgsrv www-hrimage.ornl.gov www-hrimage hrimgsrv.y12.doe.gov hrimgsrv
O1 - Hosts: 172.17.0.70 hrocivr.ctd.ornl.gov hrocivr hrocivr.y12.doe.gov hrocivr
O1 - Hosts: 172.17.0.80 swcos5.ens.ornl.gov swcos5
O1 - Hosts: 172.17.1.1 y12gwy-f2.ens.ornl.gov y12gwy-f2
O1 - Hosts: 172.17.1.101 vass1.ctd.ornl.gov vass1
O1 - Hosts: 172.17.1.102 badips102.ens.ornl.gov badips102
O1 - Hosts: 172.17.1.108 sw9103g.ens.ornl.gov sw9103g
O1 - Hosts: 172.17.1.109 faxsrvr.y12.doe.gov faxsrvr
O1 - Hosts: 172.17.1.110 drsaxp.priv.ornl.gov drsaxp
O1 - Hosts: 172.17.1.111 hubksen-2.ens.ornl.gov hubksen-2
O1 - Hosts: 172.17.1.112 ngtest-01.ens.ornl.gov ngtest-01
O1 - Hosts: 172.17.1.115 ih.y12.doe.gov ih
O1 - Hosts: 172.17.1.118 brsmcsy.ens.ornl.gov brsmcsy
O1 - Hosts: 172.17.1.12 sasvx1.priv.ornl.gov sasvx1 sasvx1.y12.doe.gov sasvx1
O1 - Hosts: 172.17.1.121 bjcprod1.bechteljacobs.org bjcprod1
O1 - Hosts: 172.17.1.123 y12tec1.y12.org y12tec1
O1 - Hosts: 172.17.1.124 brk1007-4.ens.ornl.gov brk1007-4
O1 - Hosts: 172.17.1.126 demo104.ens.ornl.gov demo104
O1 - Hosts: 172.17.1.127 xantel1.ctd.ornl.gov xantel1 xantel1.y12.doe.gov xantel1
O1 - Hosts: 172.17.1.13 secid1.priv.ornl.gov secid1 secid1.y12.doe.gov secid1
O1 - Hosts: 172.17.1.131 sw9103sen.ens.ornl.gov sw9103sen
O1 - Hosts: 172.17.1.132 telephony3.ctd.ornl.gov telephony3 cti2.ctd.ornl.gov cti2 telephony2.ctd.ornl.gov telephony2 telephony2.y12.doe.gov telephony2 telephony3.y12.doe.gov telephony3
O1 - Hosts: 172.17.1.134 cos1.priv.ornl.gov cos1 cos1.y12.doe.gov cos1
O1 - Hosts: 172.17.1.135 cos2.priv.ornl.gov cos2 cos2.y12.doe.gov cos2
O1 - Hosts: 172.17.1.136 swtest.ens.ornl.gov swtest
O1 - Hosts: 172.17.1.137 pamm4.y12.doe.gov pamm4
O1 - Hosts: 172.17.1.138 sapynt2.y12.doe.gov sapynt2 vstyrpt.y12.doe.gov vstyrpt
O1 - Hosts: 172.17.1.139 y12inv1.y12.org y12inv1
O1 - Hosts: 172.17.1.14 conk1007-s2.ens.ornl.gov conk1007-s2
O1 - Hosts: 172.17.1.140 y12gw1.y12.org y12gw1
O1 - Hosts: 172.17.1.141 y12gw2.y12.org y12gw2
O1 - Hosts: 172.17.1.142 y12gw3.y12.org y12gw3
O1 - Hosts: 172.17.1.143 y12gw4.y12.org y12gw4
O1 - Hosts: 172.17.1.144 y12gw5.y12.org y12gw5
O1 - Hosts: 172.17.1.145 y12gw6.y12.org y12gw6
O1 - Hosts: 172.17.1.146 y12gw7.y12.org y12gw7
O1 - Hosts: 172.17.1.15 cos3.priv.ornl.gov cos3 cos3.y12.doe.gov cos3
O1 - Hosts: 172.17.1.152 y12con1.y12.org y12con1
O1 - Hosts: 172.17.1.153 demo224.ens.ornl.gov demo224
O1 - Hosts: 172.17.1.154 demo225.ens.ornl.gov demo225
O1 - Hosts: 172.17.1.155 demo226.ens.ornl.gov demo226
O1 - Hosts: 172.17.1.156 demo227.ens.ornl.gov demo227
O1 - Hosts: 172.17.1.157 hrocxantel.ctd.ornl.gov hrocxantel hrocxantel.y12.doe.gov hrocxantel
O1 - Hosts: 172.17.1.16 udev1.priv.ornl.gov udev1 udev1.y12.doe.gov udev1
O1 - Hosts: 172.17.1.17 y12pwapp.y12.doe.gov y12pwapp
O1 - Hosts: 172.17.1.18 ocu2.priv.ornl.gov ocu2 ocu.priv.ornl.gov ocu ocu2.y12.doe.gov ocu2
O1 - Hosts: 172.17.1.19 ocu3.priv.ornl.gov ocu3 ocuaxp.priv.ornl.gov ocuaxp ocu3.y12.doe.gov ocu3 ocu1.priv.ornl.gov ocu1
O1 - Hosts: 172.17.1.2 engdev2.y12.doe.gov engdev2
O1 - Hosts: 172.17.1.20 clweb1.y12.doe.gov clweb1
O1 - Hosts: 172.17.1.21 con9103-2.ens.ornl.gov con9103-2
O1 - Hosts: 172.17.1.22 matrl.ctd.ornl.gov matrl matrl.y12.doe.gov matrl
O1 - Hosts: 172.17.1.23 sw9103west.ens.ornl.gov sw9103west
O1 - Hosts: 172.17.1.24 winsrv1.y12.doe.gov winsrv1
O1 - Hosts: 172.17.1.25 udev2.priv.ornl.gov udev2 udev2.y12.doe.gov udev2
O1 - Hosts: 172.17.1.26 sw9117.ens.ornl.gov sw9117
O1 - Hosts: 172.17.1.27 sw9103.ens.ornl.gov sw9103
O1 - Hosts: 172.17.1.29 hubksen.ens.ornl.gov hubksen
O1 - Hosts: 172.17.1.3 con9117.ens.ornl.gov con9117
O1 - Hosts: 172.17.1.30 clweb2.y12.doe.gov clweb2
O1 - Hosts: 172.17.1.31 uvmt2.priv.ornl.gov uvmt2
O1 - Hosts: 172.17.1.32 jukbox.priv.ornl.gov jukbox jukbox.y12.doe.gov jukbox
O1 - Hosts: 172.17.1.34 apts1.y12.doe.gov apts1
O1 - Hosts: 172.17.1.38 engapps.y12.doe.gov engapps
O1 - Hosts: 172.17.1.39 engprod1.y12.doe.gov engprod1
O1 - Hosts: 172.17.1.4 con9103-1.ens.ornl.gov con9103-1
O1 - Hosts: 172.17.1.41 ohisd1.priv.ornl.gov ohisd1
O1 - Hosts: 172.17.1.42 ohisdv.priv.ornl.gov ohisdv
O1 - Hosts: 172.17.1.43 kmsis.priv.ornl.gov kmsis
O1 - Hosts: 172.17.1.44 clph.y12.doe.gov clph
O1 - Hosts: 172.17.1.45 secid2.priv.ornl.gov secid2 secid2.y12.doe.gov secid2
O1 - Hosts: 172.17.1.48 ksv5.priv.ornl.gov ksv5 ksv5.ornl.gov ksv5 ksv.priv.ornl.gov ksv ksv5.y12.doe.gov ksv5
O1 - Hosts: 172.17.1.49 ksvaxp.priv.ornl.gov ksvaxp ksvaxp.y12.doe.gov ksvaxp
O1 - Hosts: 172.17.1.5 shweb.y12.doe.gov shweb
O1 - Hosts: 172.17.1.50 ksvdev.priv.ornl.gov ksvdev
O1 - Hosts: 172.17.1.51 kcems1.priv.ornl.gov kcems1
O1 - Hosts: 172.17.1.53 eslisl.ctd.ornl.gov eslisl
O1 - Hosts: 172.17.1.55 ucamscen.ctd.ornl.gov ucamscen ucamscen.y12.doe.gov ucamscen
O1 - Hosts: 172.17.1.56 ucamsdev.ctd.ornl.gov ucamsdev ucamsdev.y12.doe.gov ucamsdev
O1 - Hosts: 172.17.1.6 swsenhostk.ens.ornl.gov swsenhostk
O1 - Hosts: 172.17.1.60 witsy.wmd.ornl.gov witsy
O1 - Hosts: 172.17.1.61 ucamspwd.ctd.ornl.gov ucamspwd www-ucamsdev.ornl.gov www-ucamsdev ucamspwd.y12.doe.gov ucamspwd
O1 - Hosts: 172.17.1.64 shscan.ctd.ornl.gov shscan
O1 - Hosts: 172.17.1.65 mcis9.ero.ornl.gov mcis9 mcis9.bechteljacobs.org mcis9
O1 - Hosts: 172.17.1.7 swsenhostk-2.ens.ornl.gov swsenhostk-2
O1 - Hosts: 172.17.1.70 ntsql1.y12.doe.gov ntsql1 infradb.y12.doe.gov infradb
O1 - Hosts: 172.17.1.72 ntoracle1.y12.doe.gov ntoracle1
O2 - BHO: BrowserHelper Class - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SystemAgent] C:\WINDOWS\SYSTEM\SAGE.EXE
O4 - HKLM\..\Run: [BrowserWebCheck] loadwc.exe
O4 - HKLM\..\Run: [NetZIPFolders] C:\Program Files\Netzip\nzfprop.exe /startup
O4 - HKLM\..\Run: [MouseElf] C:\Program Files\KYE\Genius Net Mouse Pro Driver\MouseElf.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QAGENT] C:\QUICKENW\QAGENT.EXE
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [ComcastSUPPORT] C:\Program Files\Support.com\bin\tgkill.exe /cleaneahtioga /start
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser MOUSE\mouse32a.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [MiniLog] C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE -service
O4 - HKCU\..\Run: [NETZIP SMARTDOWNLOADER] C:\WINDOWS\SYSTEM\npnzdad.exe /t
O4 - HKCU\..\Run: [NoAds] "C:\PROGRAM FILES\NOADS\NOADS.EXE"
O4 - Startup: BackWeb.lnk = C:\Program Files\BackWeb\BackWeb\program\backweb.exe
O4 - Startup: Iomega Watch.lnk = C:\Tools_95\IOWATCH.EXE
O4 - Startup: Iomega Startup Options.lnk = C:\Tools_95\IMGSTART.EXE
O4 - Startup: Iomega Disk Icons.lnk = C:\Tools_95\imgicon.exe
O4 - Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: ComcastHSI - {898048F1-E114-4514-82BB-82A332D018D6} - http://www.comcast.net (file missing) (HKCU)
O9 - Extra button: Help - {ED543ABA-03B3-4FE2-9F9C-BCAA41442F95} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O9 - Extra button: Support - {663DE791-3983-4FF5-A70C-C0D4163F5AC4} - http://www.comcastsupport.com (file missing) (HKCU)
O12 - Plugin for .exe: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .zip: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .z: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .lha: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .arj: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .gz: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .tar: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .bin: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .swf: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npswf32.dll
O13 - WWW. Prefix: http://
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0499d41a473d28…ip/RdxIE601.cab
Post #3
Hello slow95, welcome to the TC.


I suggest you do this:


Please download hoster from the link below.

http://www.funkytoad.com/download/hoster.zip

Unzip Hoster.zip
Open Hoster.exe.

Then click on "Restore Original Hosts"

Close program when complete.



Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

O1 - Hosts: ALL of them.

O4 - HKLM\..\Run: [LoadQM] loadqm.exe

O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe

O4 - HKLM\..\Run: [ComcastSUPPORT] C:\Program Files\Support.com\bin\tgkill.exe /cleaneahtioga /start

O4 - Startup: BackWeb.lnk = C:\Program Files\BackWeb\BackWeb\program\backweb.exe

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll

O13 - WWW. Prefix: http://

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0499d41a473d28…ip/RdxIE601.cab

Close ALL windows and browsers except HijackThis and click "Fix checked"




1. Open My Computer
2. Right click on your hard drive that you wish to clean (C drive, for example)
3. In the context menu that opens, select properties
4. Under the general tab you should select Disk Cleanup
5. Windows will scan your drive which will take a few seconds/minutes
6. A box will display the various files you can remove.
Check all boxes except compress old files (If listed)
7. Click OK and windows will comply.

Restart your computer.

Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.
Post #4
LDTate, thanks for the help!

I followed directions except the last step. I opened "My Computer" and right clicked on my "c" drive and selected properties. However, under the general tab, there was no "Disk Cleanup" option and there wasn't under the other two tabs also. I then created the following log. My computer seems to be be working OK at the moment.

What else do I need to do?

Logfile of HijackThis v1.99.1
Scan saved at 11:18:06 PM, on 7/9/05
Platform: Windows 95 b (Win9x 4.00.1212)
MSIE: Internet Explorer v5.51 (5.51.3020.2100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\LOADWC.EXE
C:\PROGRAM FILES\NETZIP\NZFPROP.EXE
C:\PROGRAM FILES\KYE\GENIUS NET MOUSE PRO DRIVER\MOUSEELF.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\BROWSER MOUSE\MOUSE32A.EXE
C:\PROGRAM FILES\NOADS\NOADS.EXE
C:\TOOLS_95\IOWATCH.EXE
C:\TOOLS_95\IMGICON.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.passport.net/uilogin.srf?id=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://home.netscape.com/"); (C:\Program Files\Netscape\Users\deanrob\prefs.js)
O2 - BHO: BrowserHelper Class - {EBCDDA60-2A68-11D3-8A43-0060083CFB9C} - C:\WINDOWS\SYSTEM\NZDD.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SystemAgent] C:\WINDOWS\SYSTEM\SAGE.EXE
O4 - HKLM\..\Run: [BrowserWebCheck] loadwc.exe
O4 - HKLM\..\Run: [NetZIPFolders] C:\Program Files\Netzip\nzfprop.exe /startup
O4 - HKLM\..\Run: [MouseElf] C:\Program Files\KYE\Genius Net Mouse Pro Driver\MouseElf.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [QAGENT] C:\QUICKENW\QAGENT.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Browser MOUSE\mouse32a.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [MiniLog] C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE -service
O4 - HKCU\..\Run: [NETZIP SMARTDOWNLOADER] C:\WINDOWS\SYSTEM\npnzdad.exe /t
O4 - HKCU\..\Run: [NoAds] "C:\PROGRAM FILES\NOADS\NOADS.EXE"
O4 - Startup: Iomega Watch.lnk = C:\Tools_95\IOWATCH.EXE
O4 - Startup: Iomega Startup Options.lnk = C:\Tools_95\IMGSTART.EXE
O4 - Startup: Iomega Disk Icons.lnk = C:\Tools_95\imgicon.exe
O4 - Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O12 - Plugin for .exe: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .zip: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .z: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .lha: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .arj: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .gz: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .tar: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .bin: C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NPSystem.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .swf: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npswf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
Post #6
LDTate, My computer seems to be working great. Thanks for the help. I've made a donation. I think it is wonderful that volunteers provide this valuable service. Take care!
Post #7
Great job :thumbup:

You're more then welcome.
Glad we were able to help

Peace be with you :wavey:





If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI