This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Can i please get some HELP?

22 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Logfile of HijackThis v1.99.1
Scan saved at 8:28:31 PM, on 9/7/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_03\bin\jucheck.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe

O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn0\ycomp5_5_7_0.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Help\imgdb.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn0\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Dell AIO Printer A940] "C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe"
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/popc…aploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - Winlogon Notify: imgdb - C:\WINDOWS\Help\imgdb.dll
O20 - Winlogon Notify: keybas - C:\WINDOWS\java\trustlib\keybas.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
Logfile of HijackThis v1.99.1
Scan saved at 5:30:11 PM, on 9/14/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe
C:\Program Files\Dell AIO Printer A940\dlbabmon.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Java\jre1.5.0_03\bin\jucheck.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis\HijackThis.exe

O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Help\imgdb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Dell AIO Printer A940] "C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe"
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/popc…aploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - Winlogon Notify: imgdb - C:\WINDOWS\Help\imgdb.dll
O20 - Winlogon Notify: keybas - C:\WINDOWS\java\trustlib\keybas.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
Download/install APM

Run APM

Click on each item in the upper window

Then look in the lower window. Check to see which processes are using these DLLs':

C:\WINDOWS\Help\imgdb.dll
C:\WINDOWS\java\trustlib\keybas.dll

Post back letting me know which ones are using those DLL's.

Copy the text in the following quote box into Notepad:

dir C:\WINDOWS\Help\ /ah > files.txt
dir C:\WINDOWS\Help\ >> files.txt
C:\WINDOWS\java\trustlib\ /ah >> files.txt
C:\WINDOWS\java\trustlib\ >> files.txt
notepad files.txt

Save it to your desktop as ff.bat.

Now, the ff.bat file on the desktop. A Notepad window will open up.

Please paste it's contents into your next post.
:)
Using the Dll's: c:\windows\system32\winlogon.exe c:\windows\explorer.exe c:\program files\internet explorer\iexplorer.exe Volume in drive C has no label. Volume Serial Number is E4E7-A6BA Directory of C:\WINDOWS\Help 08/25/2005 12:55 PM 178,370 bdgmi.bak1 09/15/2005 12:13 AM 514,873 bdgmi.bak2 08/29/2005 08:16 PM 183,026 bdgmi.ini 09/15/2005 12:57 AM 517,882 bdgmi.ini2 08/29/2005 08:16 PM 183,026 bdgmi.tmp 08/25/2005 12:55 PM 516,116 imgdb.dll 06/03/2005 06:27 PM 10,820 nocontnt.GID 7 File(s) 2,104,113 bytes 0 Dir(s) 18,287,484,928 bytes free Volume in drive C has no label. Volume Serial Number is E4E7-A6BA Directory of C:\WINDOWS\Help 09/15/2005 12:57 AM . 09/15/2005 12:57 AM .. 08/18/2001 08:00 AM 35,919 access.chm 08/18/2001 08:00 AM 34,032 access.hlp 08/18/2001 08:00 AM 20,704 accessib.chm 08/18/2001 08:00 AM 20,284 acc_dis.chm 08/18/2001 08:00 AM 16,669 aclui.hlp 08/18/2001 08:00 AM 15,481 addremov.chm 08/18/2001 08:00 AM 27,532 ade.hlp 08/18/2001 08:00 AM 33,360 admtools.chm 08/18/2001 08:00 AM 105,608 adprop.hlp 08/18/2001 08:00 AM 8,669 agt0404.hlp 08/18/2001 08:00 AM 8,975 agt0405.hlp 08/18/2001 08:00 AM 8,783 agt0406.hlp 08/18/2001 08:00 AM 8,856 agt0407.hlp 08/18/2001 08:00 AM 9,001 agt0408.hlp 08/18/2001 08:00 AM 8,648 agt0409.hlp 08/18/2001 08:00 AM 8,662 agt040b.hlp 08/18/2001 08:00 AM 8,882 agt040c.hlp 08/18/2001 08:00 AM 8,987 agt040e.hlp 08/18/2001 08:00 AM 8,746 agt0410.hlp 08/18/2001 08:00 AM 8,524 agt0411.hlp 08/18/2001 08:00 AM 9,188 agt0412.hlp 08/18/2001 08:00 AM 9,309 agt0413.hlp 08/18/2001 08:00 AM 8,654 agt0414.hlp 08/18/2001 08:00 AM 8,917 agt0415.hlp 08/18/2001 08:00 AM 8,758 agt0416.hlp 08/18/2001 08:00 AM 8,799 agt0419.hlp 08/18/2001 08:00 AM 9,251 agt041d.hlp 08/18/2001 08:00 AM 9,041 agt041f.hlp 08/18/2001 08:00 AM 8,226 agt0804.hlp 08/18/2001 08:00 AM 8,799 agt0816.hlp 08/18/2001 08:00 AM 8,830 agt0c0a.hlp 08/18/2001 08:00 AM 81,960 apps.chm 08/18/2001 08:00 AM 2,698,341 article.chm 08/18/2001 08:00 AM 23,777 atm.chm 08/18/2001 08:00 AM 11,445 audiocdc.hlp 08/18/2001 08:00 AM 35,135 bckg.chm 08/18/2001 08:00 AM 19,007 blurbs.chm 08/18/2001 08:00 AM 152,576 bnts.dll 08/18/2001 08:00 AM 39,622 bootcons.chm 08/18/2001 08:00 AM 18,991 brief.chm 08/18/2001 08:00 AM 24,551 calc.chm 08/18/2001 08:00 AM 32,195 calc.hlp 08/18/2001 08:00 AM 21,924 camera.chm 08/18/2001 08:00 AM 31,178 camera.hlp 08/18/2001 08:00 AM 20,544 cdmedia.chm 08/18/2001 08:00 AM 11,627 cdmedia.hlp 08/18/2001 08:00 AM 14,103 certmgr.chm 08/18/2001 08:00 AM 26,345 certmgr.hlp 08/18/2001 08:00 AM 21,704 charmap.chm 08/18/2001 08:00 AM 12,961 charmap.hlp 08/18/2001 08:00 AM 27,978 chkr.chm 08/18/2001 08:00 AM 11,797 chnscsvr.hlp 08/18/2001 08:00 AM 11,288 chooser.hlp 08/18/2001 08:00 AM 315 ciadmin.htm 08/18/2001 08:00 AM 21,352 ciquery.htm 08/18/2001 08:00 AM 25,129 clipbrd.chm 08/18/2001 08:00 AM 45,445 clipbrd.hlp 08/18/2001 08:00 AM 66,669 cmconcepts.chm 08/18/2001 08:00 AM 20,549 colormgt.chm 08/18/2001 08:00 AM 274,506 comexp.chm 08/18/2001 08:00 AM 47,768 comexp.hlp 08/18/2001 08:00 AM 17,081 common.chm 08/18/2001 08:00 AM 17,080 compfldr.chm 08/18/2001 08:00 AM 19,921 compmgmt.chm 08/18/2001 08:00 AM 18,134 compstui.hlp 08/18/2001 08:00 AM 91,007 conf.chm 08/18/2001 08:00 AM 106 conf.cnt 08/18/2001 08:00 AM 30,848 conf.hlp 08/18/2001 08:00 AM 129 connect.cnt 08/18/2001 08:00 AM 57,305 connect.hlp 08/18/2001 08:00 AM 19,691 cpanel.chm 08/18/2001 08:00 AM 231,410 cpanel.chq 08/18/2001 08:00 AM 14,504 cscui.hlp 08/18/2001 08:00 AM 10,483 cyycoins.chm 08/18/2001 08:00 AM 10,743 cyzcoins.chm 08/18/2001 08:00 AM 18,727 datetime.chm 08/18/2001 08:00 AM 18,629 ddeshare.chm 08/18/2001 08:00 AM 33,495 ddeshare.hlp 08/18/2001 08:00 AM 13,041 defrag.chm 08/18/2001 08:00 AM 12,550 defrag.hlp 08/18/2001 08:00 AM 53,709 devmgr.chm 08/18/2001 08:00 AM 63,440 devmgr.hlp 08/18/2001 08:00 AM 29,366 dfs.hlp 08/18/2001 08:00 AM 29,762 diagboot.chm 08/18/2001 08:00 AM 39,969 dialer.chm 08/18/2001 08:00 AM 30,693 dialer.hlp 08/18/2001 08:00 AM 73,882 digiras.chm 08/18/2001 08:00 AM 20,460 dijoy.hlp 08/18/2001 08:00 AM 66,896 diskmgmt.chm 08/18/2001 08:00 AM 30,063 diskmgmt.hlp 08/18/2001 08:00 AM 46,073 display.chm 08/18/2001 08:00 AM 51,408 display.hlp 08/18/2001 08:00 AM 34,296 dkconcepts.chm 08/18/2001 08:00 AM 12,817 drvvfp.chm 08/18/2001 08:00 AM 20,406 drwtsn32.chm 08/18/2001 08:00 AM 14,161 drwtsn32.hlp 08/18/2001 08:00 AM 20,220 dsclient.hlp 08/18/2001 08:00 AM 51,018 dskquoui.chm 08/18/2001 08:00 AM 17,396 dskquoui.hlp 08/18/2001 08:00 AM 19,069 dxdiag.chm 08/18/2001 08:00 AM 14,805 els.chm 08/18/2001 08:00 AM 37,251 els.hlp 08/18/2001 08:00 AM 23,754 eudcedit.chm 08/18/2001 08:00 AM 18,509 eudcedit.hlp 08/18/2001 08:00 AM 64,982 evconcepts.chm 08/18/2001 08:00 AM 22,988 evntwin.hlp 08/18/2001 08:00 AM 77,253 filefold.chm 08/18/2001 08:00 AM 24,479 filefold.hlp 08/18/2001 08:00 AM 32,107 filemgmt.hlp 08/18/2001 08:00 AM 45,936 file_srv.chm 08/18/2001 08:00 AM 29,132 find.chm 08/18/2001 08:00 AM 26,022 folderop.chm 08/18/2001 08:00 AM 17,250 fonts.chm 08/18/2001 08:00 AM 18,931 fonts.hlp 08/18/2001 08:00 AM 15,803 freecell.chm 08/18/2001 08:00 AM 12,457 freecell.hlp 08/18/2001 08:00 AM 139,118 fxsclnt.chm 08/18/2001 08:00 AM 27,091 fxsclnt.hlp 08/18/2001 08:00 AM 27,066 fxscover.chm 08/18/2001 08:00 AM 32,657 fxsshare.chm 08/18/2001 08:00 AM 136,501 Glossary.chm 08/18/2001 08:00 AM 25,153 halftone.hlp 08/18/2001 08:00 AM 32,139 hardware.chm 08/18/2001 08:00 AM 42,667 howto.chm 08/18/2001 08:00 AM 30,260 hrtz.chm 08/18/2001 08:00 AM 20,077 hs.chm 08/18/2001 08:00 AM 35,175 hschelp.chm 08/18/2001 08:00 AM 35,983 hypertrm.chm 08/18/2001 08:00 AM 25,153 hypertrm.hlp 08/18/2001 08:00 AM 29,876 icwdial.chm 08/18/2001 08:00 AM 12,701 ident.hlp 08/18/2001 08:00 AM 12,761 ieeula.chm 08/18/2001 08:00 AM 12,013 ieos.chm 08/18/2001 08:00 AM 35,774 ieshared.chm 08/18/2001 08:00 AM 21,919 iesupp.chm 08/18/2001 08:00 AM 21,551 iewebhlp.chm 08/18/2001 08:00 AM 167,956 iexplore.chm 08/18/2001 08:00 AM 180,335 iexplore.hlp 08/18/2001 08:00 AM 30,369 imgprev.chm 08/18/2001 08:00 AM 76,782 infrared.chm 08/18/2001 08:00 AM 13,943 infrared.hlp 08/18/2001 08:00 AM 32,371 input.chm 08/18/2001 08:00 AM 15,510 input.hlp 08/18/2001 08:00 AM 203,167 ipsecconcepts.chm 08/18/2001 08:00 AM 18,806 ipsecsnp.chm 08/18/2001 08:00 AM 84,292 ipsecsnp.hlp 08/18/2001 08:00 AM 154,147 Ipv6.chm 08/18/2001 08:00 AM 15,432 is.chm 08/18/2001 08:00 AM 109,258 isconcepts.chm 08/18/2001 08:00 AM 16,062 ixhelp.hlp 08/18/2001 08:00 AM 2,323 ixqlang.htm 05/23/2005 02:03 AM 11,403 javaperm.hlp 05/23/2005 02:03 AM 21,444 javasec.hlp 08/18/2001 08:00 AM 18,949 joy.chm 08/18/2001 08:00 AM 16,494 keyb.chm 08/18/2001 08:00 AM 17,762 keyshort.chm 08/18/2001 08:00 AM 20,585 lang.chm 08/18/2001 08:00 AM 69,623 langbar.chm 08/18/2001 08:00 AM 43,230 license.chm 08/18/2001 08:00 AM 19,677 magnify.chm 08/18/2001 08:00 AM 12,115 magnify.hlp 08/18/2001 08:00 AM 121,327 mail.chm 09/08/2005 08:37 PM 187 mcrh.tmp 08/18/2001 08:00 AM 23,439 mfcuix.hlp 08/18/2001 08:00 AM 2,575 migwiz.htm 08/18/2001 08:00 AM 1,644 migwiz2.htm 08/18/2001 08:00 AM 67,022 misc.chm 08/18/2001 08:00 AM 17,135 mls_trb.chm 08/18/2001 08:00 AM 151,662 mmc.chm 08/18/2001 08:00 AM 37,298 mmc_dlg.hlp 08/18/2001 08:00 AM 18,920 mobsync.chm 08/18/2001 08:00 AM 16,149 mobsync.hlp 08/18/2001 08:00 AM 56,862 mode.chm 08/18/2001 08:00 AM 20,366 modem.hlp 08/18/2001 08:00 AM 20,877 mouse.chm 08/18/2001 08:00 AM 15,998 mouse.hlp 08/18/2001 08:00 AM 161,429 mpconcepts.chm 08/18/2001 08:00 AM 1,885 mplayer2.cnt 08/18/2001 08:00 AM 97,117 mplayer2.hlp 08/18/2001 08:00 AM 11,187 mpnetwrk.hlp 08/18/2001 08:00 AM 17,240 msconfig.chm 08/18/2001 08:00 AM 15,723 msdasc.chm 08/18/2001 08:00 AM 15,051 mshearts.chm 08/18/2001 08:00 AM 227 mshearts.cnt 08/18/2001 08:00 AM 11,211 mshearts.hlp 08/18/2001 08:00 AM 44,287 msinfo32.chm 08/18/2001 08:00 AM 173 msnauth.cnt 08/18/2001 08:00 AM 10,556 msnauth.hlp 08/18/2001 08:00 AM 247,693 msoe.chm 08/18/2001 08:00 AM 117,006 msoe.hlp 08/18/2001 08:00 AM 35,240 msoeacct.hlp 08/18/2001 08:00 AM 15,245 msorcl32.chm 08/18/2001 08:00 AM 45,590 mspaint.chm 08/18/2001 08:00 AM 19,181 mspaint.hlp 08/18/2001 08:00 AM 36,640 mstask.chm 08/18/2001 08:00 AM 28,371 mstask.hlp 08/18/2001 08:00 AM 67,351 mstsc.chm 08/18/2001 08:00 AM 296,938 netcfg.chm 08/18/2001 08:00 AM 281,595 netcfg.hlp 08/18/2001 08:00 AM 68,267 network.chm 08/18/2001 08:00 AM 25,517 newfeat1.chm 08/18/2001 08:00 AM 16,162 newfeat1.hlp 08/18/2001 08:00 AM 11,047 newfeat2.chm 08/18/2001 08:00 AM 4,536 newfeat2.hlp 08/18/2001 08:00 AM 11,047 newfeat3.chm 08/18/2001 08:00 AM 4,536 newfeat3.hlp 08/18/2001 08:00 AM 11,047 newfeat4.chm 08/18/2001 08:00 AM 4,536 newfeat4.hlp 08/18/2001 08:00 AM 11,047 newfeat5.chm 08/18/2001 08:00 AM 4,536 newfeat5.hlp 08/18/2001 08:00 AM 11,563 nmchat.chm 08/18/2001 08:00 AM 22,553 nmwhiteb.chm 08/18/2001 08:00 AM 84 nocontnt.cnt 08/18/2001 08:00 AM 11,562 nofts.chm 08/18/2001 08:00 AM 25,236 notepad.chm 08/18/2001 08:00 AM 12,521 notepad.hlp 08/18/2001 08:00 AM 1,215,489 ntart.chm 08/18/2001 08:00 AM 20,035 ntchowto.chm 08/18/2001 08:00 AM 430,941 ntcmds.chm 08/18/2001 08:00 AM 80,188 ntdef.chm 08/18/2001 08:00 AM 20,427 nthelp.chm 08/18/2001 08:00 AM 306,870 ntshared.chm 08/18/2001 08:00 AM 12,760 ntshrui.hlp 08/18/2001 08:00 AM 271,133 nusrmgr.chm 08/18/2001 08:00 AM 15,256 nwdoc.chm 08/18/2001 08:00 AM 26,845 objsel.hlp 08/18/2001 08:00 AM 16,119 odbcinst.chm 08/18/2001 08:00 AM 34,381 odbcjet.chm 08/18/2001 08:00 AM 28,305 oe_msgr.chm 08/18/2001 08:00 AM 28,344 omc.chm 08/18/2001 08:00 AM 19,605 osk.chm 08/18/2001 08:00 AM 12,387 osk.hlp 08/18/2001 08:00 AM 20,067 packager.chm 08/18/2001 08:00 AM 19,921 password.chm 08/18/2001 08:00 AM 17,269 phowto.chm 08/18/2001 08:00 AM 39,590 pinball.chm 08/18/2001 08:00 AM 22,398 pinball.hlp 08/18/2001 08:00 AM 73,572 PINTLPAD.CHM 08/18/2001 08:00 AM 56,563 PINTLPAE.CHM 08/18/2001 08:00 AM 81,137 plyr_err.chm 08/18/2001 08:00 AM 97,163 printing.chm 08/18/2001 08:00 AM 695 progman.cnt 08/18/2001 08:00 AM 25,771 progman.hlp 08/18/2001 08:00 AM 31,663 pwrmn.chm 08/18/2001 08:00 AM 44,213 pwrmn.hlp 08/18/2001 08:00 AM 12,752 qosconcepts.chm 08/18/2001 08:00 AM 19,598 ratings.chm 08/18/2001 08:00 AM 294 ratings.cnt 08/18/2001 08:00 AM 27,225 ratings.hlp 08/18/2001 08:00 AM 22,853 reader.chm 08/18/2001 08:00 AM 11,953 reader.hlp 08/18/2001 08:00 AM 19,107 recycle.chm 08/18/2001 08:00 AM 46,684 regedit.chm 08/18/2001 08:00 AM 12,886 regedit.hlp 08/18/2001 08:00 AM 28,053 regopt.chm 08/18/2001 08:00 AM 20,136 remasst.chm 08/18/2001 08:00 AM 14,678 rsm.chm 08/18/2001 08:00 AM 35,699 rsm.hlp 08/18/2001 08:00 AM 56,352 rsmconcepts.chm 08/18/2001 08:00 AM 25,815 rvse.chm 08/18/2001 08:00 AM 10,111 sapicpl.hlp 08/18/2001 08:00 AM 13,955 scarddlg.hlp 08/18/2001 08:00 AM 38,163 secauth.hlp 08/18/2001 08:00 AM 18,291 sendcmsg.chm 08/18/2001 08:00 AM 11,941 sendcmsg.hlp 08/18/2001 08:00 AM 15,957 sfmmgr.hlp 08/18/2001 08:00 AM 21,787 shell.hlp 08/18/2001 08:00 AM 32,162 shvl.chm 08/18/2001 08:00 AM 8,953 signin.hlp 08/18/2001 08:00 AM 12,249 sigverif.hlp 08/18/2001 08:00 AM 18,988 smlogcfg.chm 08/18/2001 08:00 AM 16,645 sndvol32.chm 08/18/2001 08:00 AM 11,290 sndvol32.hlp 08/18/2001 08:00 AM 32,256 sniffpol.dll 08/18/2001 08:00 AM 42,000 snmpconcepts.chm 08/18/2001 08:00 AM 16,043 snmpsnap.hlp 08/18/2001 08:00 AM 16,962 sol.chm 08/18/2001 08:00 AM 13,517 sol.hlp 08/18/2001 08:00 AM 34,041 soundrec.chm 08/18/2001 08:00 AM 20,246 soundrec.hlp 08/18/2001 08:00 AM 20,163 sounds.chm 08/18/2001 08:00 AM 42,687 speech.chm 08/18/2001 08:00 AM 15,961 spider.chm 08/18/2001 08:00 AM 11,594 spider.hlp 08/18/2001 08:00 AM 12,492 splash.chm 08/18/2001 08:00 AM 17,374 sr_ui.chm 08/18/2001 08:00 AM 30,720 sstub.dll 08/18/2001 08:00 AM 17,336 supp_ed.chm 08/18/2001 08:00 AM 41,881 sysdm.chm 08/18/2001 08:00 AM 75,448 sysdm.hlp 08/18/2001 08:00 AM 17,784 sysmon.chm 08/18/2001 08:00 AM 62,118 sysmon.hlp 08/18/2001 08:00 AM 33,152 sysprop.chm 08/18/2001 08:00 AM 31,263 sysrestore.chm 08/18/2001 08:00 AM 11,603 sysrestore.hlp 08/18/2001 08:00 AM 32,508 sys_srv.chm 08/18/2001 08:00 AM 35,334 tapi.chm 08/18/2001 08:00 AM 20,688 tapi.hlp 08/18/2001 08:00 AM 33,991 taskbar.chm 08/18/2001 08:00 AM 37,803 taskmgr.chm 08/18/2001 08:00 AM 13,228 taskmgr.hlp 08/18/2001 08:00 AM 38,234 tcpip.chm 08/18/2001 08:00 AM 12,693 tcpmon.hlp 08/18/2001 08:00 AM 30,107 telnet.chm 08/18/2001 08:00 AM 14,698 telnet.hlp 08/18/2001 08:00 AM 19,459 timesrv.chm 05/22/2005 09:37 PM Tours 08/18/2001 08:00 AM 335,114 tshoot.chm 08/18/2001 08:00 AM 262,656 tshoot.dll 08/18/2001 08:00 AM 193 update.cnt 08/18/2001 08:00 AM 27,545 useract.chm 08/18/2001 08:00 AM 16,660 utilmgr.chm 08/18/2001 08:00 AM 12,244 utilmgr.hlp 08/18/2001 08:00 AM 14,384 verifier.hlp 08/18/2001 08:00 AM 74,905 wab.chm 08/18/2001 08:00 AM 59,142 wab.hlp 08/18/2001 08:00 AM 44,441 wbemtest.chm 08/18/2001 08:00 AM 16,731 webpub.chm 08/18/2001 08:00 AM 33,544 whatsnew.chm 08/18/2001 08:00 AM 17,782 winchat.chm 08/18/2001 08:00 AM 12,377 winchat.hlp 08/18/2001 08:00 AM 690,641 windows.chm 08/18/2001 08:00 AM 382,946 windows.chq 08/18/2001 08:00 AM 64 windows.cnt 08/18/2001 08:00 AM 300,163 windows.hlp 08/18/2001 08:00 AM 51,767 wingb.chm 08/18/2001 08:00 AM 69 winhlp32.cnt 08/18/2001 08:00 AM 21,111 winhlp32.hlp 08/18/2001 08:00 AM 171,874 winime.chm 08/18/2001 08:00 AM 56,661 wininstl.chm 08/18/2001 08:00 AM 15,071 winmine.chm 08/18/2001 08:00 AM 11,476 winmine.hlp 08/18/2001 08:00 AM 39,829 winpy.chm 08/18/2001 08:00 AM 45,113 winsp.chm 08/18/2001 08:00 AM 158,219 winzm.chm 08/18/2001 08:00 AM 21,286 win_dos.chm 01/28/2005 01:44 PM 611,873 wmp10.chm 01/28/2005 01:44 PM 89,413 wmperr10.chm 08/18/2001 08:00 AM 415,082 wmplayer.chm 08/18/2001 08:00 AM 32,887 wordpad.chm 08/18/2001 08:00 AM 19,706 wordpad.hlp 08/18/2001 08:00 AM 25,089 wpa.chm 08/18/2001 08:00 AM 25,712 wscript.chm 08/18/2001 08:00 AM 12,377 wscript.hlp 08/18/2001 08:00 AM 13,307 wshconcepts.chm 05/09/2002 11:01 PM 29,168 wuauhelp.chm 345 File(s) 19,456,077 bytes
Bill… I made a boo-boo in my last post… :oops:

Copy the text in the following quote box into Notepad:

dir C:\WINDOWS\Help\ /ah > files.txt
dir C:\WINDOWS\Help\ >> files.txt
dir C:\WINDOWS\java\trustlib\ /ah >> files.txt
dir C:\WINDOWS\java\trustlib\ >> files.txt
notepad files.txt

Save it to your desktop as ff.bat.

Now, the ff.bat file on the desktop. A Notepad window will open up.

Please paste it's contents into your next post.

That should tell me all I need to know.

Sorry 'bout that…
:)
Volume in drive C has no label. Volume Serial Number is E4E7-A6BA Directory of C:\WINDOWS\Help 08/25/2005 12:55 PM 178,370 bdgmi.bak1 09/15/2005 09:21 AM 515,058 bdgmi.bak2 08/29/2005 08:16 PM 183,026 bdgmi.ini 09/15/2005 09:40 AM 517,005 bdgmi.ini2 08/29/2005 08:16 PM 183,026 bdgmi.tmp 08/25/2005 12:55 PM 516,116 imgdb.dll 06/03/2005 06:27 PM 10,820 nocontnt.GID 7 File(s) 2,103,421 bytes 0 Dir(s) 18,457,051,136 bytes free Volume in drive C has no label. Volume Serial Number is E4E7-A6BA Directory of C:\WINDOWS\Help 09/15/2005 09:40 AM . 09/15/2005 09:40 AM .. 08/18/2001 08:00 AM 35,919 access.chm 08/18/2001 08:00 AM 34,032 access.hlp 08/18/2001 08:00 AM 20,704 accessib.chm 08/18/2001 08:00 AM 20,284 acc_dis.chm 08/18/2001 08:00 AM 16,669 aclui.hlp 08/18/2001 08:00 AM 15,481 addremov.chm 08/18/2001 08:00 AM 27,532 ade.hlp 08/18/2001 08:00 AM 33,360 admtools.chm 08/18/2001 08:00 AM 105,608 adprop.hlp 08/18/2001 08:00 AM 8,669 agt0404.hlp 08/18/2001 08:00 AM 8,975 agt0405.hlp 08/18/2001 08:00 AM 8,783 agt0406.hlp 08/18/2001 08:00 AM 8,856 agt0407.hlp 08/18/2001 08:00 AM 9,001 agt0408.hlp 08/18/2001 08:00 AM 8,648 agt0409.hlp 08/18/2001 08:00 AM 8,662 agt040b.hlp 08/18/2001 08:00 AM 8,882 agt040c.hlp 08/18/2001 08:00 AM 8,987 agt040e.hlp 08/18/2001 08:00 AM 8,746 agt0410.hlp 08/18/2001 08:00 AM 8,524 agt0411.hlp 08/18/2001 08:00 AM 9,188 agt0412.hlp 08/18/2001 08:00 AM 9,309 agt0413.hlp 08/18/2001 08:00 AM 8,654 agt0414.hlp 08/18/2001 08:00 AM 8,917 agt0415.hlp 08/18/2001 08:00 AM 8,758 agt0416.hlp 08/18/2001 08:00 AM 8,799 agt0419.hlp 08/18/2001 08:00 AM 9,251 agt041d.hlp 08/18/2001 08:00 AM 9,041 agt041f.hlp 08/18/2001 08:00 AM 8,226 agt0804.hlp 08/18/2001 08:00 AM 8,799 agt0816.hlp 08/18/2001 08:00 AM 8,830 agt0c0a.hlp 08/18/2001 08:00 AM 81,960 apps.chm 08/18/2001 08:00 AM 2,698,341 article.chm 08/18/2001 08:00 AM 23,777 atm.chm 08/18/2001 08:00 AM 11,445 audiocdc.hlp 08/18/2001 08:00 AM 35,135 bckg.chm 08/18/2001 08:00 AM 19,007 blurbs.chm 08/18/2001 08:00 AM 152,576 bnts.dll 08/18/2001 08:00 AM 39,622 bootcons.chm 08/18/2001 08:00 AM 18,991 brief.chm 08/18/2001 08:00 AM 24,551 calc.chm 08/18/2001 08:00 AM 32,195 calc.hlp 08/18/2001 08:00 AM 21,924 camera.chm 08/18/2001 08:00 AM 31,178 camera.hlp 08/18/2001 08:00 AM 20,544 cdmedia.chm 08/18/2001 08:00 AM 11,627 cdmedia.hlp 08/18/2001 08:00 AM 14,103 certmgr.chm 08/18/2001 08:00 AM 26,345 certmgr.hlp 08/18/2001 08:00 AM 21,704 charmap.chm 08/18/2001 08:00 AM 12,961 charmap.hlp 08/18/2001 08:00 AM 27,978 chkr.chm 08/18/2001 08:00 AM 11,797 chnscsvr.hlp 08/18/2001 08:00 AM 11,288 chooser.hlp 08/18/2001 08:00 AM 315 ciadmin.htm 08/18/2001 08:00 AM 21,352 ciquery.htm 08/18/2001 08:00 AM 25,129 clipbrd.chm 08/18/2001 08:00 AM 45,445 clipbrd.hlp 08/18/2001 08:00 AM 66,669 cmconcepts.chm 08/18/2001 08:00 AM 20,549 colormgt.chm 08/18/2001 08:00 AM 274,506 comexp.chm 08/18/2001 08:00 AM 47,768 comexp.hlp 08/18/2001 08:00 AM 17,081 common.chm 08/18/2001 08:00 AM 17,080 compfldr.chm 08/18/2001 08:00 AM 19,921 compmgmt.chm 08/18/2001 08:00 AM 18,134 compstui.hlp 08/18/2001 08:00 AM 91,007 conf.chm 08/18/2001 08:00 AM 106 conf.cnt 08/18/2001 08:00 AM 30,848 conf.hlp 08/18/2001 08:00 AM 129 connect.cnt 08/18/2001 08:00 AM 57,305 connect.hlp 08/18/2001 08:00 AM 19,691 cpanel.chm 08/18/2001 08:00 AM 231,410 cpanel.chq 08/18/2001 08:00 AM 14,504 cscui.hlp 08/18/2001 08:00 AM 10,483 cyycoins.chm 08/18/2001 08:00 AM 10,743 cyzcoins.chm 08/18/2001 08:00 AM 18,727 datetime.chm 08/18/2001 08:00 AM 18,629 ddeshare.chm 08/18/2001 08:00 AM 33,495 ddeshare.hlp 08/18/2001 08:00 AM 13,041 defrag.chm 08/18/2001 08:00 AM 12,550 defrag.hlp 08/18/2001 08:00 AM 53,709 devmgr.chm 08/18/2001 08:00 AM 63,440 devmgr.hlp 08/18/2001 08:00 AM 29,366 dfs.hlp 08/18/2001 08:00 AM 29,762 diagboot.chm 08/18/2001 08:00 AM 39,969 dialer.chm 08/18/2001 08:00 AM 30,693 dialer.hlp 08/18/2001 08:00 AM 73,882 digiras.chm 08/18/2001 08:00 AM 20,460 dijoy.hlp 08/18/2001 08:00 AM 66,896 diskmgmt.chm 08/18/2001 08:00 AM 30,063 diskmgmt.hlp 08/18/2001 08:00 AM 46,073 display.chm 08/18/2001 08:00 AM 51,408 display.hlp 08/18/2001 08:00 AM 34,296 dkconcepts.chm 08/18/2001 08:00 AM 12,817 drvvfp.chm 08/18/2001 08:00 AM 20,406 drwtsn32.chm 08/18/2001 08:00 AM 14,161 drwtsn32.hlp 08/18/2001 08:00 AM 20,220 dsclient.hlp 08/18/2001 08:00 AM 51,018 dskquoui.chm 08/18/2001 08:00 AM 17,396 dskquoui.hlp 08/18/2001 08:00 AM 19,069 dxdiag.chm 08/18/2001 08:00 AM 14,805 els.chm 08/18/2001 08:00 AM 37,251 els.hlp 08/18/2001 08:00 AM 23,754 eudcedit.chm 08/18/2001 08:00 AM 18,509 eudcedit.hlp 08/18/2001 08:00 AM 64,982 evconcepts.chm 08/18/2001 08:00 AM 22,988 evntwin.hlp 08/18/2001 08:00 AM 77,253 filefold.chm 08/18/2001 08:00 AM 24,479 filefold.hlp 08/18/2001 08:00 AM 32,107 filemgmt.hlp 08/18/2001 08:00 AM 45,936 file_srv.chm 08/18/2001 08:00 AM 29,132 find.chm 08/18/2001 08:00 AM 26,022 folderop.chm 08/18/2001 08:00 AM 17,250 fonts.chm 08/18/2001 08:00 AM 18,931 fonts.hlp 08/18/2001 08:00 AM 15,803 freecell.chm 08/18/2001 08:00 AM 12,457 freecell.hlp 08/18/2001 08:00 AM 139,118 fxsclnt.chm 08/18/2001 08:00 AM 27,091 fxsclnt.hlp 08/18/2001 08:00 AM 27,066 fxscover.chm 08/18/2001 08:00 AM 32,657 fxsshare.chm 08/18/2001 08:00 AM 136,501 Glossary.chm 08/18/2001 08:00 AM 25,153 halftone.hlp 08/18/2001 08:00 AM 32,139 hardware.chm 08/18/2001 08:00 AM 42,667 howto.chm 08/18/2001 08:00 AM 30,260 hrtz.chm 08/18/2001 08:00 AM 20,077 hs.chm 08/18/2001 08:00 AM 35,175 hschelp.chm 08/18/2001 08:00 AM 35,983 hypertrm.chm 08/18/2001 08:00 AM 25,153 hypertrm.hlp 08/18/2001 08:00 AM 29,876 icwdial.chm 08/18/2001 08:00 AM 12,701 ident.hlp 08/18/2001 08:00 AM 12,761 ieeula.chm 08/18/2001 08:00 AM 12,013 ieos.chm 08/18/2001 08:00 AM 35,774 ieshared.chm 08/18/2001 08:00 AM 21,919 iesupp.chm 08/18/2001 08:00 AM 21,551 iewebhlp.chm 08/18/2001 08:00 AM 167,956 iexplore.chm 08/18/2001 08:00 AM 180,335 iexplore.hlp 08/18/2001 08:00 AM 30,369 imgprev.chm 08/18/2001 08:00 AM 76,782 infrared.chm 08/18/2001 08:00 AM 13,943 infrared.hlp 08/18/2001 08:00 AM 32,371 input.chm 08/18/2001 08:00 AM 15,510 input.hlp 08/18/2001 08:00 AM 203,167 ipsecconcepts.chm 08/18/2001 08:00 AM 18,806 ipsecsnp.chm 08/18/2001 08:00 AM 84,292 ipsecsnp.hlp 08/18/2001 08:00 AM 154,147 Ipv6.chm 08/18/2001 08:00 AM 15,432 is.chm 08/18/2001 08:00 AM 109,258 isconcepts.chm 08/18/2001 08:00 AM 16,062 ixhelp.hlp 08/18/2001 08:00 AM 2,323 ixqlang.htm 05/23/2005 02:03 AM 11,403 javaperm.hlp 05/23/2005 02:03 AM 21,444 javasec.hlp 08/18/2001 08:00 AM 18,949 joy.chm 08/18/2001 08:00 AM 16,494 keyb.chm 08/18/2001 08:00 AM 17,762 keyshort.chm 08/18/2001 08:00 AM 20,585 lang.chm 08/18/2001 08:00 AM 69,623 langbar.chm 08/18/2001 08:00 AM 43,230 license.chm 08/18/2001 08:00 AM 19,677 magnify.chm 08/18/2001 08:00 AM 12,115 magnify.hlp 08/18/2001 08:00 AM 121,327 mail.chm 09/08/2005 08:37 PM 187 mcrh.tmp 08/18/2001 08:00 AM 23,439 mfcuix.hlp 08/18/2001 08:00 AM 2,575 migwiz.htm 08/18/2001 08:00 AM 1,644 migwiz2.htm 08/18/2001 08:00 AM 67,022 misc.chm 08/18/2001 08:00 AM 17,135 mls_trb.chm 08/18/2001 08:00 AM 151,662 mmc.chm 08/18/2001 08:00 AM 37,298 mmc_dlg.hlp 08/18/2001 08:00 AM 18,920 mobsync.chm 08/18/2001 08:00 AM 16,149 mobsync.hlp 08/18/2001 08:00 AM 56,862 mode.chm 08/18/2001 08:00 AM 20,366 modem.hlp 08/18/2001 08:00 AM 20,877 mouse.chm 08/18/2001 08:00 AM 15,998 mouse.hlp 08/18/2001 08:00 AM 161,429 mpconcepts.chm 08/18/2001 08:00 AM 1,885 mplayer2.cnt 08/18/2001 08:00 AM 97,117 mplayer2.hlp 08/18/2001 08:00 AM 11,187 mpnetwrk.hlp 08/18/2001 08:00 AM 17,240 msconfig.chm 08/18/2001 08:00 AM 15,723 msdasc.chm 08/18/2001 08:00 AM 15,051 mshearts.chm 08/18/2001 08:00 AM 227 mshearts.cnt 08/18/2001 08:00 AM 11,211 mshearts.hlp 08/18/2001 08:00 AM 44,287 msinfo32.chm 08/18/2001 08:00 AM 173 msnauth.cnt 08/18/2001 08:00 AM 10,556 msnauth.hlp 08/18/2001 08:00 AM 247,693 msoe.chm 08/18/2001 08:00 AM 117,006 msoe.hlp 08/18/2001 08:00 AM 35,240 msoeacct.hlp 08/18/2001 08:00 AM 15,245 msorcl32.chm 08/18/2001 08:00 AM 45,590 mspaint.chm 08/18/2001 08:00 AM 19,181 mspaint.hlp 08/18/2001 08:00 AM 36,640 mstask.chm 08/18/2001 08:00 AM 28,371 mstask.hlp 08/18/2001 08:00 AM 67,351 mstsc.chm 08/18/2001 08:00 AM 296,938 netcfg.chm 08/18/2001 08:00 AM 281,595 netcfg.hlp 08/18/2001 08:00 AM 68,267 network.chm 08/18/2001 08:00 AM 25,517 newfeat1.chm 08/18/2001 08:00 AM 16,162 newfeat1.hlp 08/18/2001 08:00 AM 11,047 newfeat2.chm 08/18/2001 08:00 AM 4,536 newfeat2.hlp 08/18/2001 08:00 AM 11,047 newfeat3.chm 08/18/2001 08:00 AM 4,536 newfeat3.hlp 08/18/2001 08:00 AM 11,047 newfeat4.chm 08/18/2001 08:00 AM 4,536 newfeat4.hlp 08/18/2001 08:00 AM 11,047 newfeat5.chm 08/18/2001 08:00 AM 4,536 newfeat5.hlp 08/18/2001 08:00 AM 11,563 nmchat.chm 08/18/2001 08:00 AM 22,553 nmwhiteb.chm 08/18/2001 08:00 AM 84 nocontnt.cnt 08/18/2001 08:00 AM 11,562 nofts.chm 08/18/2001 08:00 AM 25,236 notepad.chm 08/18/2001 08:00 AM 12,521 notepad.hlp 08/18/2001 08:00 AM 1,215,489 ntart.chm 08/18/2001 08:00 AM 20,035 ntchowto.chm 08/18/2001 08:00 AM 430,941 ntcmds.chm 08/18/2001 08:00 AM 80,188 ntdef.chm 08/18/2001 08:00 AM 20,427 nthelp.chm 08/18/2001 08:00 AM 306,870 ntshared.chm 08/18/2001 08:00 AM 12,760 ntshrui.hlp 08/18/2001 08:00 AM 271,133 nusrmgr.chm 08/18/2001 08:00 AM 15,256 nwdoc.chm 08/18/2001 08:00 AM 26,845 objsel.hlp 08/18/2001 08:00 AM 16,119 odbcinst.chm 08/18/2001 08:00 AM 34,381 odbcjet.chm 08/18/2001 08:00 AM 28,305 oe_msgr.chm 08/18/2001 08:00 AM 28,344 omc.chm 08/18/2001 08:00 AM 19,605 osk.chm 08/18/2001 08:00 AM 12,387 osk.hlp 08/18/2001 08:00 AM 20,067 packager.chm 08/18/2001 08:00 AM 19,921 password.chm 08/18/2001 08:00 AM 17,269 phowto.chm 08/18/2001 08:00 AM 39,590 pinball.chm 08/18/2001 08:00 AM 22,398 pinball.hlp 08/18/2001 08:00 AM 73,572 PINTLPAD.CHM 08/18/2001 08:00 AM 56,563 PINTLPAE.CHM 08/18/2001 08:00 AM 81,137 plyr_err.chm 08/18/2001 08:00 AM 97,163 printing.chm 08/18/2001 08:00 AM 695 progman.cnt 08/18/2001 08:00 AM 25,771 progman.hlp 08/18/2001 08:00 AM 31,663 pwrmn.chm 08/18/2001 08:00 AM 44,213 pwrmn.hlp 08/18/2001 08:00 AM 12,752 qosconcepts.chm 08/18/2001 08:00 AM 19,598 ratings.chm 08/18/2001 08:00 AM 294 ratings.cnt 08/18/2001 08:00 AM 27,225 ratings.hlp 08/18/2001 08:00 AM 22,853 reader.chm 08/18/2001 08:00 AM 11,953 reader.hlp 08/18/2001 08:00 AM 19,107 recycle.chm 08/18/2001 08:00 AM 46,684 regedit.chm 08/18/2001 08:00 AM 12,886 regedit.hlp 08/18/2001 08:00 AM 28,053 regopt.chm 08/18/2001 08:00 AM 20,136 remasst.chm 08/18/2001 08:00 AM 14,678 rsm.chm 08/18/2001 08:00 AM 35,699 rsm.hlp 08/18/2001 08:00 AM 56,352 rsmconcepts.chm 08/18/2001 08:00 AM 25,815 rvse.chm 08/18/2001 08:00 AM 10,111 sapicpl.hlp 08/18/2001 08:00 AM 13,955 scarddlg.hlp 08/18/2001 08:00 AM 38,163 secauth.hlp 08/18/2001 08:00 AM 18,291 sendcmsg.chm 08/18/2001 08:00 AM 11,941 sendcmsg.hlp 08/18/2001 08:00 AM 15,957 sfmmgr.hlp 08/18/2001 08:00 AM 21,787 shell.hlp 08/18/2001 08:00 AM 32,162 shvl.chm 08/18/2001 08:00 AM 8,953 signin.hlp 08/18/2001 08:00 AM 12,249 sigverif.hlp 08/18/2001 08:00 AM 18,988 smlogcfg.chm 08/18/2001 08:00 AM 16,645 sndvol32.chm 08/18/2001 08:00 AM 11,290 sndvol32.hlp 08/18/2001 08:00 AM 32,256 sniffpol.dll 08/18/2001 08:00 AM 42,000 snmpconcepts.chm 08/18/2001 08:00 AM 16,043 snmpsnap.hlp 08/18/2001 08:00 AM 16,962 sol.chm 08/18/2001 08:00 AM 13,517 sol.hlp 08/18/2001 08:00 AM 34,041 soundrec.chm 08/18/2001 08:00 AM 20,246 soundrec.hlp 08/18/2001 08:00 AM 20,163 sounds.chm 08/18/2001 08:00 AM 42,687 speech.chm 08/18/2001 08:00 AM 15,961 spider.chm 08/18/2001 08:00 AM 11,594 spider.hlp 08/18/2001 08:00 AM 12,492 splash.chm 08/18/2001 08:00 AM 17,374 sr_ui.chm 08/18/2001 08:00 AM 30,720 sstub.dll 08/18/2001 08:00 AM 17,336 supp_ed.chm 08/18/2001 08:00 AM 41,881 sysdm.chm 08/18/2001 08:00 AM 75,448 sysdm.hlp 08/18/2001 08:00 AM 17,784 sysmon.chm 08/18/2001 08:00 AM 62,118 sysmon.hlp 08/18/2001 08:00 AM 33,152 sysprop.chm 08/18/2001 08:00 AM 31,263 sysrestore.chm 08/18/2001 08:00 AM 11,603 sysrestore.hlp 08/18/2001 08:00 AM 32,508 sys_srv.chm 08/18/2001 08:00 AM 35,334 tapi.chm 08/18/2001 08:00 AM 20,688 tapi.hlp 08/18/2001 08:00 AM 33,991 taskbar.chm 08/18/2001 08:00 AM 37,803 taskmgr.chm 08/18/2001 08:00 AM 13,228 taskmgr.hlp 08/18/2001 08:00 AM 38,234 tcpip.chm 08/18/2001 08:00 AM 12,693 tcpmon.hlp 08/18/2001 08:00 AM 30,107 telnet.chm 08/18/2001 08:00 AM 14,698 telnet.hlp 08/18/2001 08:00 AM 19,459 timesrv.chm 05/22/2005 09:37 PM Tours 08/18/2001 08:00 AM 335,114 tshoot.chm 08/18/2001 08:00 AM 262,656 tshoot.dll 08/18/2001 08:00 AM 193 update.cnt 08/18/2001 08:00 AM 27,545 useract.chm 08/18/2001 08:00 AM 16,660 utilmgr.chm 08/18/2001 08:00 AM 12,244 utilmgr.hlp 08/18/2001 08:00 AM 14,384 verifier.hlp 08/18/2001 08:00 AM 74,905 wab.chm 08/18/2001 08:00 AM 59,142 wab.hlp 08/18/2001 08:00 AM 44,441 wbemtest.chm 08/18/2001 08:00 AM 16,731 webpub.chm 08/18/2001 08:00 AM 33,544 whatsnew.chm 08/18/2001 08:00 AM 17,782 winchat.chm 08/18/2001 08:00 AM 12,377 winchat.hlp 08/18/2001 08:00 AM 690,641 windows.chm 08/18/2001 08:00 AM 382,946 windows.chq 08/18/2001 08:00 AM 64 windows.cnt 08/18/2001 08:00 AM 300,163 windows.hlp 08/18/2001 08:00 AM 51,767 wingb.chm 08/18/2001 08:00 AM 69 winhlp32.cnt 08/18/2001 08:00 AM 21,111 winhlp32.hlp 08/18/2001 08:00 AM 171,874 winime.chm 08/18/2001 08:00 AM 56,661 wininstl.chm 08/18/2001 08:00 AM 15,071 winmine.chm 08/18/2001 08:00 AM 11,476 winmine.hlp 08/18/2001 08:00 AM 39,829 winpy.chm 08/18/2001 08:00 AM 45,113 winsp.chm 08/18/2001 08:00 AM 158,219 winzm.chm 08/18/2001 08:00 AM 21,286 win_dos.chm 01/28/2005 01:44 PM 611,873 wmp10.chm 01/28/2005 01:44 PM 89,413 wmperr10.chm 08/18/2001 08:00 AM 415,082 wmplayer.chm 08/18/2001 08:00 AM 32,887 wordpad.chm 08/18/2001 08:00 AM 19,706 wordpad.hlp 08/18/2001 08:00 AM 25,089 wpa.chm 08/18/2001 08:00 AM 25,712 wscript.chm 08/18/2001 08:00 AM 12,377 wscript.hlp 08/18/2001 08:00 AM 13,307 wshconcepts.chm 05/09/2002 11:01 PM 29,168 wuauhelp.chm 345 File(s) 19,456,077 bytes 3 Dir(s) 18,457,018,368 bytes free Volume in drive C has no label. Volume Serial Number is E4E7-A6BA Directory of C:\WINDOWS\java\trustlib 09/01/2005 02:17 PM 516,116 keybas.dll 09/01/2005 02:17 PM 303 sabyek.ini 2 File(s) 516,419 bytes 0 Dir(s) 18,457,030,656 bytes free Volume in drive C has no label. Volume Serial Number is E4E7-A6BA Directory of C:\WINDOWS\java\trustlib 09/01/2005 02:17 PM . 09/01/2005 02:17 PM .. 0 File(s) 0 bytes 2 Dir(s) 18,457,030,656 bytes free
Step 1:

Please download Process Explorer by Systernals from:

Process Explorer

Also download/unzip KillBox by Option^Explicit from:

Killbox.zip

Step 2:

Download this file and save it to your desktop:

FixVundo Registry File

Copy/paste the text in the Quote box below into Notepad, and save it on the desktop as "killme.txt"

C:\WINDOWS\Help\imgdb.dll
C:\WINDOWS\Help\bdgmi.bak1
C:\WINDOWS\Help\bdgmi.bak2
C:\WINDOWS\Help\bdgmi.ini
C:\WINDOWS\Help\bdgmi.ini2
C:\WINDOWS\Help\bdgmi.tmp
C:\WINDOWS\java\trustlib\keybas.dll
C:\WINDOWS\java\trustlib\sabyek.inil


Step 3:

Print out the following instructions as you will not have Internet Access for the rest of this fix.

Reboot in "safe" mode.

The rest of this fix must be done in safe mode.

Unzip Process Explorer and double click on procexp.exe

In the top section of the Process Exlporer screen double-click on winlogon.exe to bring up the winlogon.exe properties screen. Click on the Threads tab at the top.

Once you see this screen click on each instance of C:\WINDOWS\Help\imgdb.dll once and then click the kill button.

After you have killed all of the C:\WINDOWS\Help\imgdb.dll under winlogon click OK.

If you see any of the files listed below, kill them as well.

Files to look for:
————————–
C:\WINDOWS\Help\bdgmi.bak1
C:\WINDOWS\Help\bdgmi.bak2
C:\WINDOWS\Help\bdgmi.ini
C:\WINDOWS\Help\bdgmi.ini2
C:\WINDOWS\Help\bdgmi.tmp
C:\WINDOWS\java\trustlib\keybas.dll
C:\WINDOWS\java\trustlib\sabyek.ini

BE SURE TO KILL THESE FILES ONLY!!!

Not all of them may be present. That is OK.

Next double-click on explorer.exe, select the Threads tab, and again click once on each instance of C:\WINDOWS\Help\imgdb.dll then click the kill button.

If you see any of the files listed below kill them as well.

Files to look for:
————————–
C:\WINDOWS\Help\bdgmi.bak1
C:\WINDOWS\Help\bdgmi.bak2
C:\WINDOWS\Help\bdgmi.ini
C:\WINDOWS\Help\bdgmi.ini2
C:\WINDOWS\Help\bdgmi.tmp
C:\WINDOWS\java\trustlib\keybas.dll
C:\WINDOWS\java\trustlib\sabyek.ini

BE SURE TO KILL THESE FILES ONLY!!!

Not all of them may be present. That is OK.

Once you have done that click OK again.

Next run Hijack This! and place a check beside each of the following.

O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\Help\imgdb.dll

O20 - Winlogon Notify: imgdb - C:\WINDOWS\Help\imgdb.dll

O20 - Winlogon Notify: keybas - C:\WINDOWS\java\trustlib\keybas.dll

Now click Fix checked and close HijackThis.

Now double-click on the vundo.reg file that you saved on your desktop earlier and allow it to merge with the registry.

Step 4:

On the desktop, open the "killme.txt" file with Notepad.

Then copy the all file names in the "killme.txt" to the clipboard by highlighting them and pressing C (hold the key down, then press C):

Close "killme.txt".

Double click on Killbox.exe and then check the Delete on reboot button.

In Killbox, click File (in the upper left of Killbox), and choose "Paste from Clipboard".

Click the red dot with the white X in it, in the upper right of Killbox, then click "Yes", and "Yes" again.

After the reboot, "copy/paste" a new Hijack This! log file into this thread. :)
I dont wanna be a pain in the Horse's patoot or nothing, but my Comp will not let me boot up in safe mode. When i log on in safe mode, the screen stays black with "Safe mode" in all 4 corners, but my desktop never comes up!!
Boot in "safe mode".

Then naviagate to this folder:
(use Start –> My computer –> Local Disk (C:), etc.)

C:\Documents and Settings\\Desktop

The "FixVundo" registry file should be on your desktop to use.

To navigate to the other programs you need to use go to:

Start –> My computer –> Local Disk (C:)

And navigate as required.

Does this work for you?
:unsure:

Read thru:

this post

They had the same situation.
How can i get to my start folder, if i cannot get to my desktop screen? The screen stays black with "Safe Mode" in the 4 corners of the screen!!
I cant get into Safe Mode to click on anything. I press F8 to get the boot options I click "Safe Mode" Then I have to click on "Windows XP Home Edition" Then i get a screen with a whole bunch of words on it Then it takes me to the username page I click on my username Then after that, the screen goes black, cannot click on anything, but black screen!!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI