c2lop

Hi Micah 6-8– One more thing, were you able to discern anything from the error string that I sent you regarding the c2.Lop in post #11? I also ran the defender software on my sons access and the same program and error occured? Any info would be helpful. Thanks again.

No LOP in that log.

Can you use Windows explorer, and navigate and delete:

C:\WINDOWS\system32\config\systemprofile\Favorites\games.url

Hi Micah 6:8– Thanks for the help. Do I also need to delete the RO and RO strings from my son's log that were in my log as well? Funny thing, I ran a scan on games.url and found about 10 games in favorites, I deleted them all, and emptied the trash and ran Windows Defender and BOTH sides came up CLEAN, halleluyah!!! Course I still cannot ad a new virus protection, maybe I will open up another thread to deal with that issue. Please advise. Thanks again for all your help. Kat

You can fix these if you want:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

You'll have to disable Microsoft Windows Defender first.

They're not a "hijack".

I still cannot ad a new virus protection

Precisely what are you trying to add?

Thanks I will delete on his side as well. I am trying to add the program Panda Platinum 2006 Internet Security, which has virus protection included. When going thru the steps, it loads the language (english), then goes to what it is going to add, a suite of items, then gets stuck, and says that you cannot add this program while McAfee is on your system. Thanks.

I see this in your logs:

O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe


Let's see where McAfee is at…

Please download/unzip this:

Registry Search by Bobbi Flekman

on regsearch.exe, and search for this:

mcafee

Be sure all the boxes are checked under "Search"

It may take a while to run, so be patient. When finished, the search results will appear in your text editor,

Paste the contents of the search results into your next post.

OK, here is the text, I gotta make sure I checked all the box, I pressed OK, prior to checking that. But I will double back and check. thanks REGEDIT4 ; Registry Search 2.0 by Bobbi Flekman © 2005 ; Version: 2.0.1.0 ; Results at 8/7/2006 6:12:18 PM for strings: ; 'mcafee' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1E3DE0E8-115B-4de9-BECE-CC0F703768EB}] @="McAfee.com SecurityCenter Update Info" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{813673A2-75E0-47a2-B77F-6FBF2DA05146}] @="McAfee Agent" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8EE1CE2B-A0BD-4249-8E11-8ABEB308480B}] @="McAfee Clinic Html Dialog" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{E46CC4AE-B354-48dc-A592-1C966A833F70}] @="McAfee Registration Wizard" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{36C417C6-13C6-448B-9784-DD73A93B0582}] @="McAfee.com Download+Installer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C29D864-C55A-46DD-865C-17A1B7CC1A1A}] @="McAfee.com Registry Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}] @="McAfee.com Operating System Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5940894F-4BA9-4FAC-ACFD-2F56F7CE0E3B}] @="McAfee.com File System Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5A63D47D-1BA2-48ff-9955-31207899BE01}] @="McAfee.com SecurityCenter Update Info" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78AEEDE8-7345-4fb5-A8FE-4BFF16EF25FC}] @="McAfee Virtual Technician Control Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A1629739-6AE2-49f5-9A40-7FBD9CF5148F}] @="McAfee Registration Wizard" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A30C94ED-ED1D-4cd9-931B-032481FED884}] @="McAfee Agent Ping Info Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C7E39D60-7A9F-42bf-ABB1-03DC0FA4F493}] @="McAfee Agent" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA145D71-4BCB-461D-BCBE-C01C42867380}] @="McAfee.com Shell Helper Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDECC4C3-7377-11d3-9A6C-00C04FF40D52}] @="McAfee Clinic Html Dialog" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D8D3C0-C750-4703-A6AD-75D6B578FFE6}] @="McAfee.com Application Helper Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcapphelper] @="McAfee.com Application Helper Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcapphelper.1] @="McAfee.com Application Helper Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcfilesystem] @="McAfee.com File System Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcfilesystem.1] @="McAfee.com File System Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcinstaller] @="McAfee.com Download+Installer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcinstaller.1] @="McAfee.com Download+Installer Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcos] @="McAfee.com Operating System Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcos.1] @="McAfee.com Operating System Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcregistry] @="McAfee.com Registry Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcregistry.1] @="McAfee.com Registry Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcshell] @="McAfee.com Shell Helper Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mcinstall.mcshell.1] @="McAfee.com Shell Helper Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MVT.MVTControl] @="McAfee Virtual Technician Control Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MVT.MVTControl.3100] @="McAfee Virtual Technician Control Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2A503B62-0CF9-4458-9C7B-44E5E3E7473F}\1.0] @="McAfee.com Installer objects 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\McAfee Clean Up Tool] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mcafee SecurityCenter] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCDETECT.EXE\0000] "DeviceDesc"="McAfee WSC Integration" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCTSKSHD.EXE\0000] "DeviceDesc"="McAfee Task Scheduler" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MCUPDMGR.EXE\0000] "DeviceDesc"="McAfee SecurityCenter Update Manager" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\McDetect.exe] ; Contents of value: ; c:\program files\mcafee.com\agent\mcdetect.exe "ImagePath"=hex(2):63,3a,5c,70,72,6f,67,72,61,6d,20,66,69,6c,65,73,5c,6d,63,61,\ 66,65,65,2e,63,6f,6d,5c,61,67,65,6e,74,5c,6d,63,64,65,74,65,63,74,2e,65,78,\ 65,00 "DisplayName"="McAfee WSC Integration" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\McTskshd.exe] ; Contents of value: ; c:\progra~1\mcafee.com\agent\mctskshd.exe "ImagePath"=hex(2):63,3a,5c,50,52,4f,47,52,41,7e,31,5c,6d,63,61,66,65,65,2e,63,\ 6f,6d,5c,61,67,65,6e,74,5c,6d,63,74,73,6b,73,68,64,2e,65,78,65,00 "DisplayName"="McAfee Task Scheduler" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mcupdmgr.exe] ; Contents of value: ; c:\progra~1\mcafee.com\agent\mcupdmgr.exe "ImagePath"=hex(2):43,3a,5c,50,52,4f,47,52,41,7e,31,5c,4d,63,41,66,65,65,2e,63,\ 6f,6d,5c,41,67,65,6e,74,5c,6d,63,75,70,64,6d,67,72,2e,65,78,65,00 "DisplayName"="McAfee SecurityCenter Update Manager" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MCDETECT.EXE\0000] "DeviceDesc"="McAfee WSC Integration" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MCTSKSHD.EXE\0000] "DeviceDesc"="McAfee Task Scheduler" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MCUPDMGR.EXE\0000] "DeviceDesc"="McAfee SecurityCenter Update Manager" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\McDetect.exe] ; Contents of value: ; c:\program files\mcafee.com\agent\mcdetect.exe "ImagePath"=hex(2):63,3a,5c,70,72,6f,67,72,61,6d,20,66,69,6c,65,73,5c,6d,63,61,\ 66,65,65,2e,63,6f,6d,5c,61,67,65,6e,74,5c,6d,63,64,65,74,65,63,74,2e,65,78,\ 65,00 "DisplayName"="McAfee WSC Integration" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\McTskshd.exe] ; Contents of value: ; c:\progra~1\mcafee.com\agent\mctskshd.exe "ImagePath"=hex(2):63,3a,5c,50,52,4f,47,52,41,7e,31,5c,6d,63,61,66,65,65,2e,63,\ 6f,6d,5c,61,67,65,6e,74,5c,6d,63,74,73,6b,73,68,64,2e,65,78,65,00 "DisplayName"="McAfee Task Scheduler" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\mcupdmgr.exe] ; Contents of value: ; c:\progra~1\mcafee.com\agent\mcupdmgr.exe "ImagePath"=hex(2):43,3a,5c,50,52,4f,47,52,41,7e,31,5c,4d,63,41,66,65,65,2e,63,\ 6f,6d,5c,41,67,65,6e,74,5c,6d,63,75,70,64,6d,67,72,2e,65,78,65,00 "DisplayName"="McAfee SecurityCenter Update Manager" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCDETECT.EXE\0000] "DeviceDesc"="McAfee WSC Integration" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCTSKSHD.EXE\0000] "DeviceDesc"="McAfee Task Scheduler" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MCUPDMGR.EXE\0000] "DeviceDesc"="McAfee SecurityCenter Update Manager" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McDetect.exe] ; Contents of value: ; c:\program files\mcafee.com\agent\mcdetect.exe "ImagePath"=hex(2):63,3a,5c,70,72,6f,67,72,61,6d,20,66,69,6c,65,73,5c,6d,63,61,\ 66,65,65,2e,63,6f,6d,5c,61,67,65,6e,74,5c,6d,63,64,65,74,65,63,74,2e,65,78,\ 65,00 "DisplayName"="McAfee WSC Integration" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\McTskshd.exe] ; Contents of value: ; c:\progra~1\mcafee.com\agent\mctskshd.exe "ImagePath"=hex(2):63,3a,5c,50,52,4f,47,52,41,7e,31,5c,6d,63,61,66,65,65,2e,63,\ 6f,6d,5c,61,67,65,6e,74,5c,6d,63,74,73,6b,73,68,64,2e,65,78,65,00 "DisplayName"="McAfee Task Scheduler" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mcupdmgr.exe] ; Contents of value: ; c:\progra~1\mcafee.com\agent\mcupdmgr.exe "ImagePath"=hex(2):43,3a,5c,50,52,4f,47,52,41,7e,31,5c,4d,63,41,66,65,65,2e,63,\ 6f,6d,5c,41,67,65,6e,74,5c,6d,63,75,70,64,6d,67,72,2e,65,78,65,00 "DisplayName"="McAfee SecurityCenter Update Manager" [HKEY_USERS\S-1-5-21-936584838-2813948697-1442100007-1003\Software\GIANTCompany\AntiSpyware\Alerts\D6BACB62-8F39-4BE4-AB29-2DB167] "DisplayDetails"="Microsoft AntiSpyware has allowed the Internet Explorer ActiveX program McAfee Installer Control by McAfee, Inc to be installed.||Name: McAfee Installer Control|File path: c:\\windows\\system32\\mcinsctl.dll" [HKEY_USERS\S-1-5-21-936584838-2813948697-1442100007-1003\Software\Microsoft\Search Assistant\ACMru\5603] "002"="mcafee.exe" "003"="mcafee" [HKEY_USERS\S-1-5-21-936584838-2813948697-1442100007-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\lnk] "b"="C:\\Documents and Settings\\Owner\\Desktop\\McAfee SecurityCenter.lnk" "c"="C:\\Documents and Settings\\Owner\\My Documents\\McAfee SecurityCenter.lnk" [HKEY_USERS\S-1-5-21-936584838-2813948697-1442100007-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\McAfee] [HKEY_USERS\S-1-5-21-936584838-2813948697-1442100007-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\McAfee\McAfee VirusScan] [HKEY_USERS\S-1-5-21-936584838-2813948697-1442100007-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU] "b"="\"C:\\Documents and Settings\\Owner\\Desktop\\McAfee SecurityCenter.lnk\"\\1" "c"="\"C:\\Documents and Settings\\Owner\\My Documents\\McAfee SecurityCenter.lnk\"\\1" ; End Of The Log…

Yes, all the boxes were checked. thanks!!

OK, you are an absolute computer genious!!! Thanks so much. I cannot even count the number of hours I have spent on this, and with Mcafee chat line and the 45+ steps I took, that only added to my frustration. Your information was valid, easy to follow and provided results I could have never figured out by myself. Again, THANKS!!! Well I followed your steps and was able to install the Panda program, then it knocked out the use of my internet. No problem, we uninstalled it again. Looks like we may be using another program for antivirus. I have one last question. Do I put in the trash all the programs I downloaded? Like the zip file and the fixme file? Kat

It was nothing, Ma'am…..


HijackThis! can be uninstalled via "Add/Remove Programs".

Anything else we've used should just be deleted.

Thank you for choosing TomCoyote for your computer solutions.

M68

Securing Your PC After An Attack

Great graphics…hehehe Awesome, thanks, I will follow your suggestions. An awesome site, for sure. Keep up the great work and public protections. thanks again. kat

This topic is now closed.

If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.