What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Pop ups

4 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I have many annoying popups. I've tried many programs and still have them. I use adaware SE, spybot S&D, zone alarm, avg,…nothing is working against these things.
Here is my hijack this log

Logfile of HijackThis v1.99.1
Scan saved at 5:56:47 PM, on 8/22/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\IIPROCESS VIEWER\PROCESSVIEWER.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\RFA\RFAGENT.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRAM FILES\YAHOO!\COMMON\YIETAGBM.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\SYSTEM\SiKernel.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN2\YT.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [iIProcess] C:\Program Files\iIProcess Viewer\ProcessViewer.exe m
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [rfagent] C:\PROGRAM FILES\RFA\rfagent.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O12 - Plugin for .bmp: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin6.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://pcpitstop.com/mhLbl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/…ropper1_4us.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://www.verizon.net/whatsnext/checkmypc…tivePreQual.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://82.69.199.132:8080/activex/AxisCamControl.ocx
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_…aploader_v6.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.19/ttinst.cab
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot8_x.cab
O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/games/clients/y/at1_x.cab
O16 - DPF: Yahoo! Checkers - http://download.games.yahoo.com/games/clients/y/kt4_x.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {D670D0B3-05AB-4115-9F87-D983EF1AC747} - http://pak06.pictures.aol.com/ygp/aol/plug…US.9.1.6.18.cab
O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - http://www.disney.go.com/games/downloads/g…GameManager.cab
O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinsta…es/vzWebIns.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m…90/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m…,23/mcgdmgr.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) - http://www.superadblocker.com/activex/sabspx.cab
Post #2
Hi and welcome to TomCoyote forum. If you still need and are not being assisted elsewhere, then follow these instuctions. I do see a lot of junk they may be causing your pop ups. We will remove it and see what happens. Thanks.

1) Download CCleaner from this link: http://www.ccleaner.com/ Review the instructions http://www.ccleaner.com/help/tour1.asp and please do not run it until I ask you to.

2) Download, update, configure and run these two programs: http://tomcoyote.org/aawsb.php Please do not activate TeaTimer until we are finished with the repair.
The newest version of Ad-aware is 1.06 and Spybot 1.04. Even if you have these programs, use the link to get the newest version, update and configure them as in the link. Run Spybot first, reboot then run Ad-aware. Both programs back up what they remove so delete anything the programs say should be removed.

3) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.accoona.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm
R3 - Default URLSearchHook is missing
O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\SYSTEM\SiKernel.dll
"Polyfilter", unidentified hijacker
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_…aploader_v6.cab
grayware: adware

Close all programs but HJT and all browser windows, then click on "Fix Checked"

4) Run CCleaner, when you run the registry cleaner (Issues) you will be prompted to backup before you can remove stuff, make sure you do. Then restart the computer and post a new HJT log, let me know how you are running now.

Thanks…pskelley
TomCoyote forum
Slyware Warrior
Post #3
I did everything you said to do. Here's the hijack this logfile. Still have POP-UPS

Logfile of HijackThis v1.99.1
Scan saved at 9:09:09 PM, on 8/27/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\IIPROCESS VIEWER\PROCESSVIEWER.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\RFA\RFAGENT.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\VIEWPOINT\VIEWPOINT MANAGER\VIEWMGR.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRAM FILES\YAHOO!\COMMON\YIETAGBM.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN2\YT.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [iIProcess] C:\Program Files\iIProcess Viewer\ProcessViewer.exe m
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [rfagent] C:\PROGRAM FILES\RFA\rfagent.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O12 - Plugin for .bmp: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin6.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://pcpitstop.com/mhLbl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/…ropper1_4us.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://www.verizon.net/whatsnext/checkmypc…tivePreQual.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://82.69.199.132:8080/activex/AxisCamControl.ocx
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.19/ttinst.cab
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot8_x.cab
O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/games/clients/y/at1_x.cab
O16 - DPF: Yahoo! Checkers - http://download.games.yahoo.com/games/clients/y/kt4_x.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {D670D0B3-05AB-4115-9F87-D983EF1AC747} - http://pak06.pictures.aol.com/ygp/aol/plug…US.9.1.6.18.cab
O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - http://www.disney.go.com/games/downloads/g…GameManager.cab
O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinsta…es/vzWebIns.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
Post #4
Let's see if this will fix those popups.

Please download L2m9xfix here:

http://www.noidea.us/easyfile/file.php?sho…050804120705301

Save it to the desktop and run it. Extract the files, and then open the l2m9xfix folder you just created and run RunThis.bat.

A window will open, and your desktop will disappear, then reappear. Please be patient until the batch says it is completed.

Then please restart your computer, and post a new HijackThis log as well as the entire text of the log.txt file which should be in the same folder as RunThis.bat.

Thanks…Phil
Post #5
Logfile of HijackThis v1.99.1
Scan saved at 11:34:42 AM, on 8/28/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\IIPROCESS VIEWER\PROCESSVIEWER.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\RFA\RFAGENT.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\VIEWPOINT\VIEWPOINT MANAGER\VIEWMGR.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\YAHOO!\MESSENGER\YMSGR_TRAY.EXE
C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRAM FILES\YAHOO!\COMMON\YIETAGBM.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN2\YT.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [iIProcess] C:\Program Files\iIProcess Viewer\ProcessViewer.exe m
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [rfagent] C:\PROGRAM FILES\RFA\rfagent.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://c:\Program Files\Common Files\Real\GToolbar\GoogleToolbar.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O12 - Plugin for .bmp: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin6.dll
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB
O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://pcpitstop.com/mhLbl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} (Yahoo! Photos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.com/…ropper1_4us.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://www.verizon.net/whatsnext/checkmypc…tivePreQual.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://82.69.199.132:8080/activex/AxisCamControl.ocx
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.19/ttinst.cab
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot8_x.cab
O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/games/clients/y/at1_x.cab
O16 - DPF: Yahoo! Checkers - http://download.games.yahoo.com/games/clients/y/kt4_x.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {D670D0B3-05AB-4115-9F87-D983EF1AC747} - http://pak06.pictures.aol.com/ygp/aol/plug…US.9.1.6.18.cab
O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - http://www.disney.go.com/games/downloads/g…GameManager.cab
O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinsta…es/vzWebIns.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab



Log of L2M9XFix v1

************

Running from directory:
C:\WINDOWS\Profiles\charmin\Desktop\l2m9xfix

************

Files found:

C:\WINDOWS\system\AEV06W9X.DLL
C:\WINDOWS\system\AEV06W9X.DLL
C:\WINDOWS\system\AEV06W9X.DLL
C:\WINDOWS\system\AEV06W9X.DLL
C:\WINDOWS\system\ALFERROR.DLL
C:\WINDOWS\system\ALFERROR.DLL
C:\WINDOWS\system\ALFERROR.DLL
C:\WINDOWS\system\ALFERROR.DLL
C:\WINDOWS\system\ALV02W9X.DLL
C:\WINDOWS\system\ALV02W9X.DLL
C:\WINDOWS\system\ALV02W9X.DLL
C:\WINDOWS\system\ALV02W9X.DLL
C:\WINDOWS\system\AOV05W9X.DLL
C:\WINDOWS\system\AOV05W9X.DLL
C:\WINDOWS\system\AOV05W9X.DLL
C:\WINDOWS\system\AOV05W9X.DLL
C:\WINDOWS\system\AOV06W9X.DLL
C:\WINDOWS\system\AOV06W9X.DLL
C:\WINDOWS\system\AOV06W9X.DLL
C:\WINDOWS\system\AOV06W9X.DLL
C:\WINDOWS\system\auctres.dll
C:\WINDOWS\system\auctres.dll
C:\WINDOWS\system\auctres.dll
C:\WINDOWS\system\auctres.dll
C:\WINDOWS\system\AWICAP.DLL
C:\WINDOWS\system\AWICAP.DLL
C:\WINDOWS\system\AWICAP.DLL
C:\WINDOWS\system\AWICAP.DLL
C:\WINDOWS\system\BNCOLE.DLL
C:\WINDOWS\system\BNCOLE.DLL
C:\WINDOWS\system\BNCOLE.DLL
C:\WINDOWS\system\BNCOLE.DLL
C:\WINDOWS\system\BOseball.dll
C:\WINDOWS\system\BOseball.dll
C:\WINDOWS\system\BOseball.dll
C:\WINDOWS\system\BOseball.dll
C:\WINDOWS\system\BQTMETER.DLL
C:\WINDOWS\system\BQTMETER.DLL
C:\WINDOWS\system\BQTMETER.DLL
C:\WINDOWS\system\BQTMETER.DLL
C:\WINDOWS\system\BYCOLE.DLL
C:\WINDOWS\system\BYCOLE.DLL
C:\WINDOWS\system\BYCOLE.DLL
C:\WINDOWS\system\BYCOLE.DLL
C:\WINDOWS\system\CJDIAL32.DLL
C:\WINDOWS\system\CJDIAL32.DLL
C:\WINDOWS\system\CJDIAL32.DLL
C:\WINDOWS\system\CJDIAL32.DLL
C:\WINDOWS\system\CLM.DLL
C:\WINDOWS\system\CLM.DLL
C:\WINDOWS\system\CLM.DLL
C:\WINDOWS\system\CLM.DLL
C:\WINDOWS\system\cortc.dll
C:\WINDOWS\system\cortc.dll
C:\WINDOWS\system\cortc.dll
C:\WINDOWS\system\cortc.dll
C:\WINDOWS\system\CTM.DLL
C:\WINDOWS\system\CTM.DLL
C:\WINDOWS\system\CTM.DLL
C:\WINDOWS\system\CTM.DLL
C:\WINDOWS\system\DADIM700.DLL
C:\WINDOWS\system\DADIM700.DLL
C:\WINDOWS\system\DADIM700.DLL
C:\WINDOWS\system\DADIM700.DLL
C:\WINDOWS\system\DADREF.DLL
C:\WINDOWS\system\DADREF.DLL
C:\WINDOWS\system\DADREF.DLL
C:\WINDOWS\system\DADREF.DLL
C:\WINDOWS\system\DATMSFT.DLL
C:\WINDOWS\system\DATMSFT.DLL
C:\WINDOWS\system\DATMSFT.DLL
C:\WINDOWS\system\DATMSFT.DLL
C:\WINDOWS\system\DBKAPI32.DLL
C:\WINDOWS\system\DBKAPI32.DLL
C:\WINDOWS\system\DBKAPI32.DLL
C:\WINDOWS\system\DBKAPI32.DLL
C:\WINDOWS\system\DCDRAMP.DLL
C:\WINDOWS\system\DCDRAMP.DLL
C:\WINDOWS\system\DCDRAMP.DLL
C:\WINDOWS\system\DCDRAMP.DLL
C:\WINDOWS\system\dd8vb.dll
C:\WINDOWS\system\dd8vb.dll
C:\WINDOWS\system\dd8vb.dll
C:\WINDOWS\system\dd8vb.dll
C:\WINDOWS\system\DEDIM.DLL
C:\WINDOWS\system\DEDIM.DLL
C:\WINDOWS\system\DEDIM.DLL
C:\WINDOWS\system\DEDIM.DLL
C:\WINDOWS\system\dFd8.dll
C:\WINDOWS\system\dFd8.dll
C:\WINDOWS\system\dFd8.dll
C:\WINDOWS\system\dFd8.dll
C:\WINDOWS\system\DGBENG.DLL
C:\WINDOWS\system\DGBENG.DLL
C:\WINDOWS\system\DGBENG.DLL
C:\WINDOWS\system\DGBENG.DLL
C:\WINDOWS\system\DGDREF.DLL
C:\WINDOWS\system\DGDREF.DLL
C:\WINDOWS\system\DGDREF.DLL
C:\WINDOWS\system\DGDREF.DLL
C:\WINDOWS\system\DITMSFT3.DLL
C:\WINDOWS\system\DITMSFT3.DLL
C:\WINDOWS\system\DITMSFT3.DLL
C:\WINDOWS\system\DITMSFT3.DLL
C:\WINDOWS\system\dk8vb.dll
C:\WINDOWS\system\dk8vb.dll
C:\WINDOWS\system\dk8vb.dll
C:\WINDOWS\system\dk8vb.dll
C:\WINDOWS\system\DOIME.DLL
C:\WINDOWS\system\DOIME.DLL
C:\WINDOWS\system\DOIME.DLL
C:\WINDOWS\system\DOIME.DLL
C:\WINDOWS\system\DOMSSHRN.DLL
C:\WINDOWS\system\DOMSSHRN.DLL
C:\WINDOWS\system\DOMSSHRN.DLL
C:\WINDOWS\system\DOMSSHRN.DLL
C:\WINDOWS\system\DQMSVINN.DLL
C:\WINDOWS\system\DQMSVINN.DLL
C:\WINDOWS\system\DQMSVINN.DLL
C:\WINDOWS\system\DQMSVINN.DLL
C:\WINDOWS\system\dqnhupnp.dll
C:\WINDOWS\system\dqnhupnp.dll
C:\WINDOWS\system\dqnhupnp.dll
C:\WINDOWS\system\dqnhupnp.dll
C:\WINDOWS\system\DQTIME.DLL
C:\WINDOWS\system\DQTIME.DLL
C:\WINDOWS\system\DQTIME.DLL
C:\WINDOWS\system\DQTIME.DLL
C:\WINDOWS\system\DSCVW_32.DLL
C:\WINDOWS\system\DSCVW_32.DLL
C:\WINDOWS\system\DSCVW_32.DLL
C:\WINDOWS\system\DSCVW_32.DLL
C:\WINDOWS\system\DTGSIG.DLL
C:\WINDOWS\system\DTGSIG.DLL
C:\WINDOWS\system\DTGSIG.DLL
C:\WINDOWS\system\DTGSIG.DLL
C:\WINDOWS\system\DUCVW_32.DLL
C:\WINDOWS\system\DUCVW_32.DLL
C:\WINDOWS\system\DUCVW_32.DLL
C:\WINDOWS\system\DUCVW_32.DLL
C:\WINDOWS\system\DUIME.DLL
C:\WINDOWS\system\DUIME.DLL
C:\WINDOWS\system\DUIME.DLL
C:\WINDOWS\system\DUIME.DLL
C:\WINDOWS\system\dumclien.dll
C:\WINDOWS\system\dumclien.dll
C:\WINDOWS\system\dumclien.dll
C:\WINDOWS\system\dumclien.dll
C:\WINDOWS\system\DUVVOX.DLL
C:\WINDOWS\system\DUVVOX.DLL
C:\WINDOWS\system\DUVVOX.DLL
C:\WINDOWS\system\DUVVOX.DLL
C:\WINDOWS\system\DVCNDI.DLL
C:\WINDOWS\system\DVCNDI.DLL
C:\WINDOWS\system\DVCNDI.DLL
C:\WINDOWS\system\DVCNDI.DLL
C:\WINDOWS\system\DWGSIG.DLL
C:\WINDOWS\system\DWGSIG.DLL
C:\WINDOWS\system\DWGSIG.DLL
C:\WINDOWS\system\DWGSIG.DLL
C:\WINDOWS\system\DY7VB.DLL
C:\WINDOWS\system\DY7VB.DLL
C:\WINDOWS\system\DY7VB.DLL
C:\WINDOWS\system\DY7VB.DLL
C:\WINDOWS\system\dymigr.dll
C:\WINDOWS\system\dymigr.dll
C:\WINDOWS\system\dymigr.dll
C:\WINDOWS\system\dymigr.dll
C:\WINDOWS\system\DYNIM.DLL
C:\WINDOWS\system\DYNIM.DLL
C:\WINDOWS\system\DYNIM.DLL
C:\WINDOWS\system\DYNIM.DLL
C:\WINDOWS\system\dZd8.dll
C:\WINDOWS\system\dZd8.dll
C:\WINDOWS\system\dZd8.dll
C:\WINDOWS\system\dZd8.dll
C:\WINDOWS\system\EQ.DLL
C:\WINDOWS\system\EQ.DLL
C:\WINDOWS\system\EQ.DLL
C:\WINDOWS\system\EQ.DLL
C:\WINDOWS\system\FOSRCH.DLL
C:\WINDOWS\system\FOSRCH.DLL
C:\WINDOWS\system\FOSRCH.DLL
C:\WINDOWS\system\FOSRCH.DLL
C:\WINDOWS\system\GADEF.DLL
C:\WINDOWS\system\GADEF.DLL
C:\WINDOWS\system\GADEF.DLL
C:\WINDOWS\system\GADEF.DLL
C:\WINDOWS\system\GYU32.DLL
C:\WINDOWS\system\GYU32.DLL
C:\WINDOWS\system\GYU32.DLL
C:\WINDOWS\system\GYU32.DLL
C:\WINDOWS\system\hbomem03.dll
C:\WINDOWS\system\hbomem03.dll
C:\WINDOWS\system\hbomem03.dll
C:\WINDOWS\system\hbomem03.dll
C:\WINDOWS\system\HDINK.DLL
C:\WINDOWS\system\HDINK.DLL
C:\WINDOWS\system\HDINK.DLL
C:\WINDOWS\system\HDINK.DLL
C:\WINDOWS\system\hesetup.dll
C:\WINDOWS\system\hesetup.dll
C:\WINDOWS\system\hesetup.dll
C:\WINDOWS\system\hesetup.dll
C:\WINDOWS\system\hhoitk03.dll
C:\WINDOWS\system\hhoitk03.dll
C:\WINDOWS\system\hhoitk03.dll
C:\WINDOWS\system\hhoitk03.dll
C:\WINDOWS\system\hlosui03.dll
C:\WINDOWS\system\hlosui03.dll
C:\WINDOWS\system\hlosui03.dll
C:\WINDOWS\system\hlosui03.dll
C:\WINDOWS\system\HNINK.DLL
C:\WINDOWS\system\HNINK.DLL
C:\WINDOWS\system\HNINK.DLL
C:\WINDOWS\system\HNINK.DLL
C:\WINDOWS\system\hnoc9503.dll
C:\WINDOWS\system\hnoc9503.dll
C:\WINDOWS\system\hnoc9503.dll
C:\WINDOWS\system\hnoc9503.dll
C:\WINDOWS\system\hromrl03.dll
C:\WINDOWS\system\hromrl03.dll
C:\WINDOWS\system\hromrl03.dll
C:\WINDOWS\system\hromrl03.dll
C:\WINDOWS\system\hwopml03.dll
C:\WINDOWS\system\hwopml03.dll
C:\WINDOWS\system\hwopml03.dll
C:\WINDOWS\system\hwopml03.dll
C:\WINDOWS\system\hxotrl03.dll
C:\WINDOWS\system\hxotrl03.dll
C:\WINDOWS\system\hxotrl03.dll
C:\WINDOWS\system\hxotrl03.dll
C:\WINDOWS\system\IAHLPAPI.DLL
C:\WINDOWS\system\IAHLPAPI.DLL
C:\WINDOWS\system\IAHLPAPI.DLL
C:\WINDOWS\system\IAHLPAPI.DLL
C:\WINDOWS\system\IARNONCE.DLL
C:\WINDOWS\system\IARNONCE.DLL
C:\WINDOWS\system\IARNONCE.DLL
C:\WINDOWS\system\IARNONCE.DLL
C:\WINDOWS\system\IBROP.DLL
C:\WINDOWS\system\IBROP.DLL
C:\WINDOWS\system\IBROP.DLL
C:\WINDOWS\system\IBROP.DLL
C:\WINDOWS\system\IC41_QCX.dll
C:\WINDOWS\system\IC41_QCX.dll
C:\WINDOWS\system\IC41_QCX.dll
C:\WINDOWS\system\IC41_QCX.dll
C:\WINDOWS\system\IDFG95.DLL
C:\WINDOWS\system\IDFG95.DLL
C:\WINDOWS\system\IDFG95.DLL
C:\WINDOWS\system\IDFG95.DLL
C:\WINDOWS\system\IDS.DLL
C:\WINDOWS\system\IDS.DLL
C:\WINDOWS\system\IDS.DLL
C:\WINDOWS\system\IDS.DLL
C:\WINDOWS\system\ieengine.dll
C:\WINDOWS\system\ieengine.dll
C:\WINDOWS\system\ieengine.dll
C:\WINDOWS\system\ieengine.dll
C:\WINDOWS\system\IFROP.DLL
C:\WINDOWS\system\IFROP.DLL
C:\WINDOWS\system\IFROP.DLL
C:\WINDOWS\system\IFROP.DLL
C:\WINDOWS\system\IGAGEHLP.DLL
C:\WINDOWS\system\IGAGEHLP.DLL
C:\WINDOWS\system\IGAGEHLP.DLL
C:\WINDOWS\system\IGAGEHLP.DLL
C:\WINDOWS\system\IHS.DLL
C:\WINDOWS\system\IHS.DLL
C:\WINDOWS\system\IHS.DLL
C:\WINDOWS\system\IHS.DLL
C:\WINDOWS\system\IIHLPAPI.DLL
C:\WINDOWS\system\IIHLPAPI.DLL
C:\WINDOWS\system\IIHLPAPI.DLL
C:\WINDOWS\system\IIHLPAPI.DLL
C:\WINDOWS\system\IJ1XGICD.DLL
C:\WINDOWS\system\IJ1XGICD.DLL
C:\WINDOWS\system\IJ1XGICD.DLL
C:\WINDOWS\system\IJ1XGICD.DLL
C:\WINDOWS\system\IJM32.DLL
C:\WINDOWS\system\IJM32.DLL
C:\WINDOWS\system\IJM32.DLL
C:\WINDOWS\system\IJM32.DLL
C:\WINDOWS\system\IJSETUP.DLL
C:\WINDOWS\system\IJSETUP.DLL
C:\WINDOWS\system\IJSETUP.DLL
C:\WINDOWS\system\IJSETUP.DLL
C:\WINDOWS\system\iketcfg.dll
C:\WINDOWS\system\iketcfg.dll
C:\WINDOWS\system\iketcfg.dll
C:\WINDOWS\system\iketcfg.dll
C:\WINDOWS\system\ikwdial.dll
C:\WINDOWS\system\ikwdial.dll
C:\WINDOWS\system\ikwdial.dll
C:\WINDOWS\system\ikwdial.dll
C:\WINDOWS\system\IO50_QCX.DLL
C:\WINDOWS\system\IO50_QCX.DLL
C:\WINDOWS\system\IO50_QCX.DLL
C:\WINDOWS\system\IO50_QCX.DLL
C:\WINDOWS\system\IPSENG.DLL
C:\WINDOWS\system\IPSENG.DLL
C:\WINDOWS\system\IPSENG.DLL
C:\WINDOWS\system\IPSENG.DLL
C:\WINDOWS\system\ISAGING.DLL
C:\WINDOWS\system\ISAGING.DLL
C:\WINDOWS\system\ISAGING.DLL
C:\WINDOWS\system\ISAGING.DLL
C:\WINDOWS\system\itetres.dll
C:\WINDOWS\system\itetres.dll
C:\WINDOWS\system\itetres.dll
C:\WINDOWS\system\itetres.dll
C:\WINDOWS\system\IWFG95.DLL
C:\WINDOWS\system\IWFG95.DLL
C:\WINDOWS\system\IWFG95.DLL
C:\WINDOWS\system\IWFG95.DLL
C:\WINDOWS\system\ixetres.dll
C:\WINDOWS\system\ixetres.dll
C:\WINDOWS\system\ixetres.dll
C:\WINDOWS\system\ixetres.dll
C:\WINDOWS\system\IXGUTIL.DLL
C:\WINDOWS\system\IXGUTIL.DLL
C:\WINDOWS\system\IXGUTIL.DLL
C:\WINDOWS\system\IXGUTIL.DLL
C:\WINDOWS\system\IXHLPAPI.DLL
C:\WINDOWS\system\IXHLPAPI.DLL
C:\WINDOWS\system\IXHLPAPI.DLL
C:\WINDOWS\system\IXHLPAPI.DLL
C:\WINDOWS\system\IXS.DLL
C:\WINDOWS\system\IXS.DLL
C:\WINDOWS\system\IXS.DLL
C:\WINDOWS\system\IXS.DLL
C:\WINDOWS\system\IZCFGDLL.DLL
C:\WINDOWS\system\IZCFGDLL.DLL
C:\WINDOWS\system\IZCFGDLL.DLL
C:\WINDOWS\system\IZCFGDLL.DLL
C:\WINDOWS\system\JAAW400.DLL
C:\WINDOWS\system\JAAW400.DLL
C:\WINDOWS\system\JAAW400.DLL
C:\WINDOWS\system\JAAW400.DLL
C:\WINDOWS\system\JGVAPRXY.DLL
C:\WINDOWS\system\JGVAPRXY.DLL
C:\WINDOWS\system\JGVAPRXY.DLL
C:\WINDOWS\system\JGVAPRXY.DLL
C:\WINDOWS\system\JNVART.DLL
C:\WINDOWS\system\JNVART.DLL
C:\WINDOWS\system\JNVART.DLL
C:\WINDOWS\system\JNVART.DLL
C:\WINDOWS\system\JPT.DLL
C:\WINDOWS\system\JPT.DLL
C:\WINDOWS\system\JPT.DLL
C:\WINDOWS\system\JPT.DLL
C:\WINDOWS\system\lbfil11n.DLL
C:\WINDOWS\system\lbfil11n.DLL
C:\WINDOWS\system\lbfil11n.DLL
C:\WINDOWS\system\lbfil11n.DLL
C:\WINDOWS\system\lEme_enc.dll
C:\WINDOWS\system\lEme_enc.dll
C:\WINDOWS\system\lEme_enc.dll
C:\WINDOWS\system\lEme_enc.dll
C:\WINDOWS\system\lhcmgr10.dll
C:\WINDOWS\system\lhcmgr10.dll
C:\WINDOWS\system\lhcmgr10.dll
C:\WINDOWS\system\lhcmgr10.dll
C:\WINDOWS\system\lkcmgr10.dll
C:\WINDOWS\system\lkcmgr10.dll
C:\WINDOWS\system\lkcmgr10.dll
C:\WINDOWS\system\lkcmgr10.dll
C:\WINDOWS\system\lltga11n.dll
C:\WINDOWS\system\lltga11n.dll
C:\WINDOWS\system\lltga11n.dll
C:\WINDOWS\system\lltga11n.dll
C:\WINDOWS\system\lnimg11n.dll
C:\WINDOWS\system\lnimg11n.dll
C:\WINDOWS\system\lnimg11n.dll
C:\WINDOWS\system\lnimg11n.dll
C:\WINDOWS\system\lowmf11n.dll
C:\WINDOWS\system\lowmf11n.dll
C:\WINDOWS\system\lowmf11n.dll
C:\WINDOWS\system\lowmf11n.dll
C:\WINDOWS\system\mabsync.dll
C:\WINDOWS\system\mabsync.dll
C:\WINDOWS\system\mabsync.dll
C:\WINDOWS\system\mabsync.dll
C:\WINDOWS\system\maisip.dll
C:\WINDOWS\system\maisip.dll
C:\WINDOWS\system\maisip.dll
C:\WINDOWS\system\maisip.dll
C:\WINDOWS\system\MBCONF.DLL
C:\WINDOWS\system\MBCONF.DLL
C:\WINDOWS\system\MBCONF.DLL
C:\WINDOWS\system\MBCONF.DLL
C:\WINDOWS\system\MBYUV.DLL
C:\WINDOWS\system\MBYUV.DLL
C:\WINDOWS\system\MBYUV.DLL
C:\WINDOWS\system\MBYUV.DLL
C:\WINDOWS\system\MCRD2X40.DLL
C:\WINDOWS\system\MCRD2X40.DLL
C:\WINDOWS\system\MCRD2X40.DLL
C:\WINDOWS\system\MCRD2X40.DLL
C:\WINDOWS\system\mDpi32.dll
C:\WINDOWS\system\mDpi32.dll
C:\WINDOWS\system\mDpi32.dll
C:\WINDOWS\system\mDpi32.dll
C:\WINDOWS\system\MDREPL35.DLL
C:\WINDOWS\system\MDREPL35.DLL
C:\WINDOWS\system\MDREPL35.DLL
C:\WINDOWS\system\MDREPL35.DLL
C:\WINDOWS\system\MECMS.DLL
C:\WINDOWS\system\MECMS.DLL
C:\WINDOWS\system\MECMS.DLL
C:\WINDOWS\system\MECMS.DLL
C:\WINDOWS\system\MEDMO.DLL
C:\WINDOWS\system\MEDMO.DLL
C:\WINDOWS\system\MEDMO.DLL
C:\WINDOWS\system\MEDMO.DLL
C:\WINDOWS\system\MEPWL32.DLL
C:\WINDOWS\system\MEPWL32.DLL
C:\WINDOWS\system\MEPWL32.DLL
C:\WINDOWS\system\MEPWL32.DLL
C:\WINDOWS\system\MFUNI11.DLL
C:\WINDOWS\system\MFUNI11.DLL
C:\WINDOWS\system\MFUNI11.DLL
C:\WINDOWS\system\MFUNI11.DLL
C:\WINDOWS\system\MGAPSSPC.DLL
C:\WINDOWS\system\MGAPSSPC.DLL
C:\WINDOWS\system\MGAPSSPC.DLL
C:\WINDOWS\system\MGAPSSPC.DLL
C:\WINDOWS\system\MGJET35.DLL
C:\WINDOWS\system\MGJET35.DLL
C:\WINDOWS\system\MGJET35.DLL
C:\WINDOWS\system\MGJET35.DLL
C:\WINDOWS\system\MHDMO.DLL
C:\WINDOWS\system\MHDMO.DLL
C:\WINDOWS\system\MHDMO.DLL
C:\WINDOWS\system\MHDMO.DLL
C:\WINDOWS\system\mHpi32x.dll
C:\WINDOWS\system\mHpi32x.dll
C:\WINDOWS\system\mHpi32x.dll
C:\WINDOWS\system\mHpi32x.dll
C:\WINDOWS\system\MHR.DLL
C:\WINDOWS\system\MHR.DLL
C:\WINDOWS\system\MHR.DLL
C:\WINDOWS\system\MHR.DLL
C:\WINDOWS\system\mi43dmod.dll
C:\WINDOWS\system\mi43dmod.dll
C:\WINDOWS\system\mi43dmod.dll
C:\WINDOWS\system\mi43dmod.dll
C:\WINDOWS\system\MIWSOCK.DLL
C:\WINDOWS\system\MIWSOCK.DLL
C:\WINDOWS\system\MIWSOCK.DLL
C:\WINDOWS\system\MIWSOCK.DLL
C:\WINDOWS\system\MkGDMgr.dll
C:\WINDOWS\system\MkGDMgr.dll
C:\WINDOWS\system\MkGDMgr.dll
C:\WINDOWS\system\MkGDMgr.dll
C:\WINDOWS\system\MKVIDC32.DLL
C:\WINDOWS\system\MKVIDC32.DLL
C:\WINDOWS\system\MKVIDC32.DLL
C:\WINDOWS\system\MKVIDC32.DLL
C:\WINDOWS\system\mlihnd.dll
C:\WINDOWS\system\mlihnd.dll
C:\WINDOWS\system\mlihnd.dll
C:\WINDOWS\system\mlihnd.dll
C:\WINDOWS\system\MLJDBC10.DLL
C:\WINDOWS\system\MLJDBC10.DLL
C:\WINDOWS\system\MLJDBC10.DLL
C:\WINDOWS\system\MLJDBC10.DLL
C:\WINDOWS\system\MLJET40.DLL
C:\WINDOWS\system\MLJET40.DLL
C:\WINDOWS\system\MLJET40.DLL
C:\WINDOWS\system\MLJET40.DLL
C:\WINDOWS\system\MLVIDEO.DLL
C:\WINDOWS\system\MLVIDEO.DLL
C:\WINDOWS\system\MLVIDEO.DLL
C:\WINDOWS\system\MLVIDEO.DLL
C:\WINDOWS\system\MMCD30.DLL
C:\WINDOWS\system\MMCD30.DLL
C:\WINDOWS\system\MMCD30.DLL
C:\WINDOWS\system\MMCD30.DLL
C:\WINDOWS\system\MNCI.DLL
C:\WINDOWS\system\MNCI.DLL
C:\WINDOWS\system\MNCI.DLL
C:\WINDOWS\system\MNCI.DLL
C:\WINDOWS\system\MOXBDE40.DLL
C:\WINDOWS\system\MOXBDE40.DLL
C:\WINDOWS\system\MOXBDE40.DLL
C:\WINDOWS\system\MOXBDE40.DLL
C:\WINDOWS\system\MPG_HOOK.DLL
C:\WINDOWS\system\MPG_HOOK.DLL
C:\WINDOWS\system\MPG_HOOK.DLL
C:\WINDOWS\system\MPG_HOOK.DLL
C:\WINDOWS\system\MPSHRUI.DLL
C:\WINDOWS\system\MPSHRUI.DLL
C:\WINDOWS\system\MPSHRUI.DLL
C:\WINDOWS\system\MPSHRUI.DLL
C:\WINDOWS\system\MPUTILSE.DLL
C:\WINDOWS\system\MPUTILSE.DLL
C:\WINDOWS\system\MPUTILSE.DLL
C:\WINDOWS\system\MPUTILSE.DLL
C:\WINDOWS\system\MPYUV.DLL
C:\WINDOWS\system\MPYUV.DLL
C:\WINDOWS\system\MPYUV.DLL
C:\WINDOWS\system\MPYUV.DLL
C:\WINDOWS\system\MQCOREE.DLL
C:\WINDOWS\system\MQCOREE.DLL
C:\WINDOWS\system\MQCOREE.DLL
C:\WINDOWS\system\MQCOREE.DLL
C:\WINDOWS\system\MQVCRT20.DLL
C:\WINDOWS\system\MQVCRT20.DLL
C:\WINDOWS\system\MQVCRT20.DLL
C:\WINDOWS\system\MQVCRT20.DLL
C:\WINDOWS\system\MRDXMLC.DLL
C:\WINDOWS\system\MRDXMLC.DLL
C:\WINDOWS\system\MRDXMLC.DLL
C:\WINDOWS\system\MRDXMLC.DLL
C:\WINDOWS\system\MRG_HOOK.DLL
C:\WINDOWS\system\MRG_HOOK.DLL
C:\WINDOWS\system\MRG_HOOK.DLL
C:\WINDOWS\system\MRG_HOOK.DLL
C:\WINDOWS\system\mrpatcha.dll
C:\WINDOWS\system\mrpatcha.dll
C:\WINDOWS\system\mrpatcha.dll
C:\WINDOWS\system\mrpatcha.dll
C:\WINDOWS\system\MTAWT.DLL
C:\WINDOWS\system\MTAWT.DLL
C:\WINDOWS\system\MTAWT.DLL
C:\WINDOWS\system\MTAWT.DLL
C:\WINDOWS\system\MUJET40.DLL
C:\WINDOWS\system\MUJET40.DLL
C:\WINDOWS\system\MUJET40.DLL
C:\WINDOWS\system\MUJET40.DLL
C:\WINDOWS\system\MUJTER40.DLL
C:\WINDOWS\system\MUJTER40.DLL
C:\WINDOWS\system\MUJTER40.DLL
C:\WINDOWS\system\MUJTER40.DLL
C:\WINDOWS\system\MURSERV.DLL
C:\WINDOWS\system\MURSERV.DLL
C:\WINDOWS\system\MURSERV.DLL
C:\WINDOWS\system\MURSERV.DLL
C:\WINDOWS\system\mvoert2.dll
C:\WINDOWS\system\mvoert2.dll
C:\WINDOWS\system\mvoert2.dll
C:\WINDOWS\system\mvoert2.dll
C:\WINDOWS\system\MVRATING.DLL
C:\WINDOWS\system\MVRATING.DLL
C:\WINDOWS\system\MVRATING.DLL
C:\WINDOWS\system\MVRATING.DLL
C:\WINDOWS\system\MVSIGN32.DLL
C:\WINDOWS\system\MVSIGN32.DLL
C:\WINDOWS\system\MVSIGN32.DLL
C:\WINDOWS\system\MVSIGN32.DLL
C:\WINDOWS\system\MWUTILSE.DLL
C:\WINDOWS\system\MWUTILSE.DLL
C:\WINDOWS\system\MWUTILSE.DLL
C:\WINDOWS\system\MWUTILSE.DLL
C:\WINDOWS\system\MXVCR71.DLL
C:\WINDOWS\system\MXVCR71.DLL
C:\WINDOWS\system\MXVCR71.DLL
C:\WINDOWS\system\MXVCR71.DLL
C:\WINDOWS\system\MYUNI11.DLL
C:\WINDOWS\system\MYUNI11.DLL
C:\WINDOWS\system\MYUNI11.DLL
C:\WINDOWS\system\MYUNI11.DLL
C:\WINDOWS\system\MZDMO.DLL
C:\WINDOWS\system\MZDMO.DLL
C:\WINDOWS\system\MZDMO.DLL
C:\WINDOWS\system\MZDMO.DLL
C:\WINDOWS\system\mzieftp.dll
C:\WINDOWS\system\mzieftp.dll
C:\WINDOWS\system\mzieftp.dll
C:\WINDOWS\system\mzieftp.dll
C:\WINDOWS\system\MZSIGN32.DLL
C:\WINDOWS\system\MZSIGN32.DLL
C:\WINDOWS\system\MZSIGN32.DLL
C:\WINDOWS\system\MZSIGN32.DLL
C:\WINDOWS\system\MZXBDE40.DLL
C:\WINDOWS\system\MZXBDE40.DLL
C:\WINDOWS\system\MZXBDE40.DLL
C:\WINDOWS\system\MZXBDE40.DLL
C:\WINDOWS\system\NATAPI.DLL
C:\WINDOWS\system\NATAPI.DLL
C:\WINDOWS\system\NATAPI.DLL
C:\WINDOWS\system\NATAPI.DLL
C:\WINDOWS\system\NITDI.DLL
C:\WINDOWS\system\NITDI.DLL
C:\WINDOWS\system\NITDI.DLL
C:\WINDOWS\system\NITDI.DLL
C:\WINDOWS\system\NNTAudioFile.dll
C:\WINDOWS\system\NNTAudioFile.dll
C:\WINDOWS\system\NNTAudioFile.dll
C:\WINDOWS\system\NNTAudioFile.dll
C:\WINDOWS\system\NSTAudioFile.dll
C:\WINDOWS\system\NSTAudioFile.dll
C:\WINDOWS\system\NSTAudioFile.dll
C:\WINDOWS\system\NSTAudioFile.dll
C:\WINDOWS\system\NWSWAN32.DLL
C:\WINDOWS\system\NWSWAN32.DLL
C:\WINDOWS\system\NWSWAN32.DLL
C:\WINDOWS\system\NWSWAN32.DLL
C:\WINDOWS\system\OABCCU32.DLL
C:\WINDOWS\system\OABCCU32.DLL
C:\WINDOWS\system\OABCCU32.DLL
C:\WINDOWS\system\OABCCU32.DLL
C:\WINDOWS\system\OBBC16GT.DLL
C:\WINDOWS\system\OBBC16GT.DLL
C:\WINDOWS\system\OBBC16GT.DLL
C:\WINDOWS\system\OBBC16GT.DLL
C:\WINDOWS\system\OBEXL32.DLL
C:\WINDOWS\system\OBEXL32.DLL
C:\WINDOWS\system\OBEXL32.DLL
C:\WINDOWS\system\OBEXL32.DLL
C:\WINDOWS\system\OCECLI32.DLL
C:\WINDOWS\system\OCECLI32.DLL
C:\WINDOWS\system\OCECLI32.DLL
C:\WINDOWS\system\OCECLI32.DLL
C:\WINDOWS\system\odhlp30e.dll
C:\WINDOWS\system\odhlp30e.dll
C:\WINDOWS\system\odhlp30e.dll
C:\WINDOWS\system\odhlp30e.dll
C:\WINDOWS\system\OEE2.DLL
C:\WINDOWS\system\OEE2.DLL
C:\WINDOWS\system\OEE2.DLL
C:\WINDOWS\system\OEE2.DLL
C:\WINDOWS\system\oehlp30e.dll
C:\WINDOWS\system\oehlp30e.dll
C:\WINDOWS\system\oehlp30e.dll
C:\WINDOWS\system\oehlp30e.dll
C:\WINDOWS\system\OFEXL32.DLL
C:\WINDOWS\system\OFEXL32.DLL
C:\WINDOWS\system\OFEXL32.DLL
C:\WINDOWS\system\OFEXL32.DLL
C:\WINDOWS\system\OFTEXT32.DLL
C:\WINDOWS\system\OFTEXT32.DLL
C:\WINDOWS\system\OFTEXT32.DLL
C:\WINDOWS\system\OFTEXT32.DLL
C:\WINDOWS\system\OKMREG.DLL
C:\WINDOWS\system\OKMREG.DLL
C:\WINDOWS\system\OKMREG.DLL
C:\WINDOWS\system\OKMREG.DLL
C:\WINDOWS\system\OLBCBCP.DLL
C:\WINDOWS\system\OLBCBCP.DLL
C:\WINDOWS\system\OLBCBCP.DLL
C:\WINDOWS\system\OLBCBCP.DLL
C:\WINDOWS\system\ORFOX32.DLL
C:\WINDOWS\system\ORFOX32.DLL
C:\WINDOWS\system\ORFOX32.DLL
C:\WINDOWS\system\ORFOX32.DLL
C:\WINDOWS\system\OUECLI32.DLL
C:\WINDOWS\system\OUECLI32.DLL
C:\WINDOWS\system\OUECLI32.DLL
C:\WINDOWS\system\OUECLI32.DLL
C:\WINDOWS\system\OVESVR.DLL
C:\WINDOWS\system\OVESVR.DLL
C:\WINDOWS\system\OVESVR.DLL
C:\WINDOWS\system\OVESVR.DLL
C:\WINDOWS\system\ovhlp30e.dll
C:\WINDOWS\system\ovhlp30e.dll
C:\WINDOWS\system\ovhlp30e.dll
C:\WINDOWS\system\ovhlp30e.dll
C:\WINDOWS\system\OZE32.DLL
C:\WINDOWS\system\OZE32.DLL
C:\WINDOWS\system\OZE32.DLL
C:\WINDOWS\system\OZE32.DLL
C:\WINDOWS\system\pacrt.dll
C:\WINDOWS\system\pacrt.dll
C:\WINDOWS\system\pacrt.dll
C:\WINDOWS\system\pacrt.dll
C:\WINDOWS\system\PDNMAP.DLL
C:\WINDOWS\system\PDNMAP.DLL
C:\WINDOWS\system\PDNMAP.DLL
C:\WINDOWS\system\PDNMAP.DLL
C:\WINDOWS\system\peapi.dll
C:\WINDOWS\system\peapi.dll
C:\WINDOWS\system\peapi.dll
C:\WINDOWS\system\peapi.dll
C:\WINDOWS\system\PFSPL.DLL
C:\WINDOWS\system\PFSPL.DLL
C:\WINDOWS\system\PFSPL.DLL
C:\WINDOWS\system\PFSPL.DLL
C:\WINDOWS\system\PPSPL.DLL
C:\WINDOWS\system\PPSPL.DLL
C:\WINDOWS\system\PPSPL.DLL
C:\WINDOWS\system\PPSPL.DLL
C:\WINDOWS\system\prmas.dll
C:\WINDOWS\system\prmas.dll
C:\WINDOWS\system\prmas.dll
C:\WINDOWS\system\prmas.dll
C:\WINDOWS\system\PWSPL.DLL
C:\WINDOWS\system\PWSPL.DLL
C:\WINDOWS\system\PWSPL.DLL
C:\WINDOWS\system\PWSPL.DLL
C:\WINDOWS\system\PXPNDI.DLL
C:\WINDOWS\system\PXPNDI.DLL
C:\WINDOWS\system\PXPNDI.DLL
C:\WINDOWS\system\PXPNDI.DLL
C:\WINDOWS\system\QBARTZ.DLL
C:\WINDOWS\system\QBARTZ.DLL
C:\WINDOWS\system\QBARTZ.DLL
C:\WINDOWS\system\QBARTZ.DLL
C:\WINDOWS\system\QTDWIPES.DLL
C:\WINDOWS\system\QTDWIPES.DLL
C:\WINDOWS\system\QTDWIPES.DLL
C:\WINDOWS\system\QTDWIPES.DLL
C:\WINDOWS\system\REATHUNK.DLL
C:\WINDOWS\system\REATHUNK.DLL
C:\WINDOWS\system\REATHUNK.DLL
C:\WINDOWS\system\REATHUNK.DLL
C:\WINDOWS\system\RFCLTC5.DLL
C:\WINDOWS\system\RFCLTC5.DLL
C:\WINDOWS\system\RFCLTC5.DLL
C:\WINDOWS\system\RFCLTC5.DLL
C:\WINDOWS\system\RFSAPI16.DLL
C:\WINDOWS\system\RFSAPI16.DLL
C:\WINDOWS\system\RFSAPI16.DLL
C:\WINDOWS\system\RFSAPI16.DLL
C:\WINDOWS\system\RIAENH.DLL
C:\WINDOWS\system\RIAENH.DLL
C:\WINDOWS\system\RIAENH.DLL
C:\WINDOWS\system\RIAENH.DLL
C:\WINDOWS\system\rjclib.dll
C:\WINDOWS\system\rjclib.dll
C:\WINDOWS\system\rjclib.dll
C:\WINDOWS\system\rjclib.dll
C:\WINDOWS\system\RKATHUNK.DLL
C:\WINDOWS\system\RKATHUNK.DLL
C:\WINDOWS\system\RKATHUNK.DLL
C:\WINDOWS\system\RKATHUNK.DLL
C:\WINDOWS\system\RQASERV.DLL
C:\WINDOWS\system\RQASERV.DLL
C:\WINDOWS\system\RQASERV.DLL
C:\WINDOWS\system\RQASERV.DLL
C:\WINDOWS\system\rsclib.dll
C:\WINDOWS\system\rsclib.dll
C:\WINDOWS\system\rsclib.dll
C:\WINDOWS\system\rsclib.dll
C:\WINDOWS\system\RWCRES.dll
C:\WINDOWS\system\RWCRES.dll
C:\WINDOWS\system\RWCRES.dll
C:\WINDOWS\system\RWCRES.dll
C:\WINDOWS\system\RZVPSP.DLL
C:\WINDOWS\system\RZVPSP.DLL
C:\WINDOWS\system\RZVPSP.DLL
C:\WINDOWS\system\RZVPSP.DLL
C:\WINDOWS\system\SBELL.DLL
C:\WINDOWS\system\SBELL.DLL
C:\WINDOWS\system\SBELL.DLL
C:\WINDOWS\system\SBELL.DLL
C:\WINDOWS\system\SBNCENG.DLL
C:\WINDOWS\system\SBNCENG.DLL
C:\WINDOWS\system\SBNCENG.DLL
C:\WINDOWS\system\SBNCENG.DLL
C:\WINDOWS\system\SENCENG.DLL
C:\WINDOWS\system\SENCENG.DLL
C:\WINDOWS\system\SENCENG.DLL
C:\WINDOWS\system\SENCENG.DLL
C:\WINDOWS\system\SGNS.DLL
C:\WINDOWS\system\SGNS.DLL
C:\WINDOWS\system\SGNS.DLL
C:\WINDOWS\system\SGNS.DLL
C:\WINDOWS\system\SHSMWWOD.DLL
C:\WINDOWS\system\SHSMWWOD.DLL
C:\WINDOWS\system\SHSMWWOD.DLL
C:\WINDOWS\system\SHSMWWOD.DLL
C:\WINDOWS\system\SIROBJ.DLL
C:\WINDOWS\system\SIROBJ.DLL
C:\WINDOWS\system\SIROBJ.DLL
C:\WINDOWS\system\SIROBJ.DLL
C:\WINDOWS\system\SLERRANW.DLL
C:\WINDOWS\system\SLERRANW.DLL
C:\WINDOWS\system\SLERRANW.DLL
C:\WINDOWS\system\SLERRANW.DLL
C:\WINDOWS\system\SLSCLASS.DLL
C:\WINDOWS\system\SLSCLASS.DLL
C:\WINDOWS\system\SLSCLASS.DLL
C:\WINDOWS\system\SLSCLASS.DLL
C:\WINDOWS\system\SNELL32.DLL
C:\WINDOWS\system\SNELL32.DLL
C:\WINDOWS\system\SNELL32.DLL
C:\WINDOWS\system\SNELL32.DLL
C:\WINDOWS\system\stnscfg.dll
C:\WINDOWS\system\stnscfg.dll
C:\WINDOWS\system\stnscfg.dll
C:\WINDOWS\system\stnscfg.dll
C:\WINDOWS\system\STROBJ.DLL
C:\WINDOWS\system\STROBJ.DLL
C:\WINDOWS\system\STROBJ.DLL
C:\WINDOWS\system\STROBJ.DLL
C:\WINDOWS\system\SXCUR32.DLL
C:\WINDOWS\system\SXCUR32.DLL
C:\WINDOWS\system\SXCUR32.DLL
C:\WINDOWS\system\SXCUR32.DLL
C:\WINDOWS\system\sznscfg.dll
C:\WINDOWS\system\sznscfg.dll
C:\WINDOWS\system\sznscfg.dll
C:\WINDOWS\system\sznscfg.dll
C:\WINDOWS\system\TIAPI.DLL
C:\WINDOWS\system\TIAPI.DLL
C:\WINDOWS\system\TIAPI.DLL
C:\WINDOWS\system\TIAPI.DLL
C:\WINDOWS\system\TJD32.DLL
C:\WINDOWS\system\TJD32.DLL
C:\WINDOWS\system\TJD32.DLL
C:\WINDOWS\system\TJD32.DLL
C:\WINDOWS\system\tJembed.dll
C:\WINDOWS\system\tJembed.dll
C:\WINDOWS\system\tJembed.dll
C:\WINDOWS\system\tJembed.dll
C:\WINDOWS\system\TKD32.DLL
C:\WINDOWS\system\TKD32.DLL
C:\WINDOWS\system\TKD32.DLL
C:\WINDOWS\system\TKD32.DLL
C:\WINDOWS\system\TPD32.DLL
C:\WINDOWS\system\TPD32.DLL
C:\WINDOWS\system\TPD32.DLL
C:\WINDOWS\system\TPD32.DLL
C:\WINDOWS\system\TRPI32.DLL
C:\WINDOWS\system\TRPI32.DLL
C:\WINDOWS\system\TRPI32.DLL
C:\WINDOWS\system\TRPI32.DLL
C:\WINDOWS\system\TWOLHELP.DLL
C:\WINDOWS\system\TWOLHELP.DLL
C:\WINDOWS\system\TWOLHELP.DLL
C:\WINDOWS\system\TWOLHELP.DLL
C:\WINDOWS\system\UFDM16.DLL
C:\WINDOWS\system\UFDM16.DLL
C:\WINDOWS\system\UFDM16.DLL
C:\WINDOWS\system\UFDM16.DLL
C:\WINDOWS\system\uricows.dll
C:\WINDOWS\system\uricows.dll
C:\WINDOWS\system\uricows.dll
C:\WINDOWS\system\uricows.dll
C:\WINDOWS\system\UUBUI.DLL
C:\WINDOWS\system\UUBUI.DLL
C:\WINDOWS\system\UUBUI.DLL
C:\WINDOWS\system\UUBUI.DLL
C:\WINDOWS\system\vablock.dll
C:\WINDOWS\system\vablock.dll
C:\WINDOWS\system\vablock.dll
C:\WINDOWS\system\vablock.dll
C:\WINDOWS\system\VBHELPER.DLL
C:\WINDOWS\system\VBHELPER.DLL
C:\WINDOWS\system\VBHELPER.DLL
C:\WINDOWS\system\VBHELPER.DLL
C:\WINDOWS\system\VFR.DLL
C:\WINDOWS\system\VFR.DLL
C:\WINDOWS\system\VFR.DLL
C:\WINDOWS\system\VFR.DLL
C:\WINDOWS\system\VPODEC32.DLL
C:\WINDOWS\system\VPODEC32.DLL
C:\WINDOWS\system\VPODEC32.DLL
C:\WINDOWS\system\VPODEC32.DLL
C:\WINDOWS\system\wapcd.dll
C:\WINDOWS\system\wapcd.dll
C:\WINDOWS\system\wapcd.dll
C:\WINDOWS\system\wapcd.dll
C:\WINDOWS\system\wepcore.dll
C:\WINDOWS\system\wepcore.dll
C:\WINDOWS\system\wepcore.dll
C:\WINDOWS\system\wepcore.dll
C:\WINDOWS\system\WFASF.DLL
C:\WINDOWS\system\WFASF.DLL
C:\WINDOWS\system\WFASF.DLL
C:\WINDOWS\system\WFASF.DLL
C:\WINDOWS\system\WI2HELP.DLL
C:\WINDOWS\system\WI2HELP.DLL
C:\WINDOWS\system\WI2HELP.DLL
C:\WINDOWS\system\WI2HELP.DLL
C:\WINDOWS\system\wnpcore.dll
C:\WINDOWS\system\wnpcore.dll
C:\WINDOWS\system\wnpcore.dll
C:\WINDOWS\system\wnpcore.dll
C:\WINDOWS\system\WPASF.DLL
C:\WINDOWS\system\WPASF.DLL
C:\WINDOWS\system\WPASF.DLL
C:\WINDOWS\system\WPASF.DLL
C:\WINDOWS\system\wTpcd.dll
C:\WINDOWS\system\wTpcd.dll
C:\WINDOWS\system\wTpcd.dll
C:\WINDOWS\system\wTpcd.dll
C:\WINDOWS\system\WVASF.DLL
C:\WINDOWS\system\WVASF.DLL
C:\WINDOWS\system\WVASF.DLL
C:\WINDOWS\system\WVASF.DLL
C:\WINDOWS\system\WVASPI32.DLL
C:\WINDOWS\system\WVASPI32.DLL
C:\WINDOWS\system\WVASPI32.DLL
C:\WINDOWS\system\WVASPI32.DLL
C:\WINDOWS\system\WWNINET.DLL
C:\WINDOWS\system\WWNINET.DLL
C:\WINDOWS\system\WWNINET.DLL
C:\WINDOWS\system\WWNINET.DLL
C:\WINDOWS\system\wwpasf.dll
C:\WINDOWS\system\wwpasf.dll
C:\WINDOWS\system\wwpasf.dll
C:\WINDOWS\system\wwpasf.dll
C:\WINDOWS\system\WXN32S16.DLL
C:\WINDOWS\system\WXN32S16.DLL
C:\WINDOWS\system\WXN32S16.DLL
C:\WINDOWS\system\WXN32S16.DLL
C:\WINDOWS\system\WYNASPI.DLL
C:\WINDOWS\system\WYNASPI.DLL
C:\WINDOWS\system\WYNASPI.DLL
C:\WINDOWS\system\WYNASPI.DLL
C:\WINDOWS\system\wyv8dmod.dll
C:\WINDOWS\system\wyv8dmod.dll
C:\WINDOWS\system\wyv8dmod.dll
C:\WINDOWS\system\wyv8dmod.dll

************

Registry entries found:

[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{2840354C-234F-4450-8F2D-12459E75AE71}\InprocServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
–
[HKEY_CLASSES_ROOT\CLSID\{47A0AD40-1590-4343-8944-E717C258E513}\InProcServer32]
@="C:\\PROGRAM FILES\\YAHOO!\\COMMON\\YLOGINIDS.DLL"
[HKEY_CLASSES_ROOT\CLSID\{9BA72C5C-EE21-4C2C-A86D-856B09238619}\InprocServer32]
@="C:\\WINDOWS\\SYSTEM\\QTDWIPES.DLL"
[HKEY_CLASSES_ROOT\CLSID\{9BA72C5C-EE21-4C2C-A86D-856B09238619}\InprocServer32]
@="C:\\WINDOWS\\SYSTEM\\QTDWIPES.DLL"
[HKEY_CLASSES_ROOT\CLSID\{9BA72C5C-EE21-4C2C-A86D-856B09238619}\InprocServer32]
@="C:\\WINDOWS\\SYSTEM\\QTDWIPES.DLL"
[HKEY_CLASSES_ROOT\CLSID\{9BA72C5C-EE21-4C2C-A86D-856B09238619}\InprocServer32]
@="C:\\WINDOWS\\SYSTEM\\QTDWIPES.DLL"

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{4E029A33-AAFC-C845-9A66-9FBFC9467FAA}"=""


************

Killing Explorer
Done!

Killing Rundll32
Done!

Removing malicious CLSID(s)
Done!

Restarting Explorer
Done!

Deleting malicious files
Done!


Finished!
Post #7
Hi Mary :) It seems that is a variety of Look2Me that shows up in 98/ME with no signs in the log. Once the log was clean of malware and you said you were still getting popups that was my clue that this hidden infection might be present. All praises to Swandog46 who created the fix for us. He make the candy, I just handed it out :D

I have one more suggestion. This item: C:\PROGRAM FILES\VIEWPOINT\VIEWPOINT MANAGER\VIEWMGR.EXE is installed by aol without your knowledge and is also suspected of being spyware for aol. Here is some information about it:
http://www.greatis.com/appdata/u/v/viewmgr.exe.htm
http://www.bleepingcomputer.com/startups/V…r.exe-6093.html

If you do not use it and agree with me that it should be removed, then do thsi:

1) Open Add Remove programs, locate Viewpoint and uninstall it.

2) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

Close all programs but HJT and all browser windows, then click on "Fix Checked"

(you may not need to show hidden files, look for it first, if you can't see it, then do this)
SHOW HIDDEN FILES: Follow the instructions in the link to enable hidden files for your operating system.
You may wish to reverse this process if you have any concern about anyone getting into these hidden system files.
http://www.xtra.co.nz/help/0,,4155-1916458,00.html

RIGHT Click on Start then click on Explore. Locate and delete these items:

C:\Program Files\Viewpoint\ <<< folder

Empty the recycle bin and restart the computer.

You should be good to go and Here is some great information from Tony Klein, Texruss, ChrisRLG and Grinler to help you stay clean and safe online:
http://forums.net-integration.net/index.php?showtopic=3051
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html

TeaTimer is a function that is built into Spybot that must be activated. In the links about you may see it mentioned and you will also see SpywareGuard mentioned. They both do about the same function so there is no reason to run both. Here is information about TeaTimer to help you decide. If you do activate it and don't like it because it does take a little time to configure and get used to, you can just turn it off.
http://www.voiceofthepublic.com/SSD/SI/teatimer.swf.html
http://antivirus.about.com/od/securitytips/ss/hosts_6.htm

I hope this helps…Phil :wavey:

Thanks…pskelley
TomCoyote forum
Slyware Warrior
If you are reading this information…thank a teacher, If you are reading it in English…thank a soldier.
Post #8
YOU ARE A GENIOUS! Give my thanks to Swandog46 also I have removed viewpoint I also read the other sites about how to keep my system clean. Thank you ever so much. It is so much nicer to use a computer that isn't sick.
Bless you, Mary :wavey:
Post #9
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI