One of the best features of Windows XP is the System Restore option, however if a virus or spyware infection.
There can be backups made in the System Restore folder.
Therefore, clearing the restore points is necessary after a virus or spyware removal.
To reset your restore points, please note that you will need to log into your computer with an account
which has full administrator access. You will know if the account has administrator access because
you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.
1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
2. Reboot.
3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
Be sure to keep SunJava, updated
In Add/Remove programs click on these and press *remove* if listed:
J2SE Runtime Environment 5.0 - 97.99Mb
J2SE Runtime Environment 5.0 Update 2 - 143.00Mb
J2SE Runtime Environment 5.0 Update 4 - 144.00Mb
J2SE Runtime Environment 5.0 Update 5- 151.00Mb
Java 2 Runtime Environment, SE v1.4.2_04 - 130.00Mb
Or any other outdated J2SE
It is important to remove older versions as these are the ones with the holes in them. You will be surprised when you go to add/remove to see all of the versions sitting there.
Download Newest >>>>
http://www.java.com/en/download/index.jsp
Once installed you can test to see that it is in fact installed >>>>
Sun Java Test
To help keep your PC clean follow the recommendations in Tony Klein's article
So how did I get infected in the first place?
I have removed the old java items and reset the system restore points once again thank you for all your help it has been invaluable.
Sorry I over looked something.
Download
Pocket Killbox and unzip it; save it to your Desktop.
Run it, and click the radio button that says
Delete a file on reboot .
Then Paste these in one at a time into the
full path of file to delete box and click the red circle with a white cross in it.
C:\WINDOWS\system32\xinput1_2.dll
C:\WINDOWS\system32\xactengine2_3.dll
The program will ask you if you want to reboot; click No each time until the last one has been pasted in then click Yes.
And let the system reboot.
I have ran the killbox thank you once again.
Can you run ComboFix again?
Then post the log.
Home - 06-10-02 22:38:22.15 Service Pack 2
ComboFix 06.09.28 - Running from: "C:\Documents and Settings\Home\My Documents\my spare programs\hijack tools"
((((((((((((((((((((((((((((((( Files Created from 2006-09-02 to 2006-10-02 ))))))))))))))))))))))))))))))))))
2006-09-14 10:16 51,072 –a—— C:\WINDOWS\system32\drivers\ikhlayer.sys
2006-09-14 10:16 30,592 –a—— C:\WINDOWS\system32\drivers\ikhfile.sys
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-10-02 22:36 ——– d——– C:\Documents and Settings\Home\Application Data\Azureus
2006-10-02 14:52 ——– d——– C:\Program Files\Azureus
2006-10-02 12:04 ——– d——– C:\Program Files\ewido anti-spyware 4.0
2006-10-02 09:34 ——– d——– C:\Program Files\Java
2006-10-02 08:51 ——– d——– C:\Program Files\Google
2006-10-01 20:36 ——– d——– C:\Program Files\Windows Defender
2006-10-01 20:36 ——– d——– C:\Program Files\UPHClean
2006-10-01 20:36 ——– d——– C:\Program Files\TuneUp Utilities 2006
2006-10-01 20:35 ——– d——– C:\Program Files\Spyware Doctor
2006-10-01 20:34 ——– d——– C:\Program Files\Privacy Mantra 1.33
2006-10-01 20:30 ——– d——– C:\Program Files\Internet Explorer
2006-10-01 20:22 ——– d——– C:\Program Files\ATI Multimedia
2006-09-29 14:06 ——– d——– C:\Program Files\Symantec Technical Support
2006-09-27 01:25 ——– d——– C:\Program Files\Picasa2
2006-09-26 10:37 778656 –a—— C:\WINDOWS\system32\drivers\avg7core.sys
2006-09-25 11:18 ——– d——– C:\Program Files\Microsoft
2006-09-23 12:53 ——– d——– C:\Program Files\Championship Manager 2006
2006-09-15 00:44 2712 –a–c— C:\Documents and Settings\Home\Application Data\.googlewebacchosts
2006-09-14 10:16 ——– d——– C:\Documents and Settings\Home\Application Data\PC Tools
2006-09-13 01:48 ——– d——– C:\Program Files\GameShadow
2006-09-07 22:25 ——– d——– C:\Program Files\GalleryPlayer
2006-09-07 22:08 176222 –a–c— C:\WINDOWS\GalleryPlayer Images Uninstaller.exe
2006-09-05 00:28 ——– d——– C:\Documents and Settings\Home\Application Data\Skype
2006-09-04 16:07 ——– d——– C:\Documents and Settings\Home\Application Data\VisualZone
2006-09-04 16:04 ——– d——– C:\Program Files\APN eBay Toolbar
2006-09-04 16:03 ——– d——– C:\Program Files\BargainChecker.com Toolbar
2006-08-31 23:16 ——– d——– C:\Program Files\QuickTime
2006-08-31 03:19 43008 –a–c— C:\WINDOWS\system32\drivers\fetnd5bv.sys
2006-08-30 12:12 ——– d——– C:\Program Files\GOTSNIPE EBAY TOOLBAR
2006-08-30 10:40 ——– d——– C:\Documents and Settings\Home\Application Data\ATI
2006-08-26 01:26 ——– d——– C:\Documents and Settings\Home\Application Data\Adobe
2006-08-25 22:18 ——– d——– C:\Documents and Settings\Home\Application Data\AdobeUM
2006-08-25 14:04 ——– d——– C:\Program Files\Windows Media Player
2006-08-23 13:27 ——– d——– C:\Documents and Settings\Home\Application Data\Google
2006-08-23 01:41 ——– d——– C:\Program Files\3D Invaders
2006-08-23 00:46 ——– d–h—– C:\Program Files\InstallShield Installation Information
2006-08-23 00:45 ——– d——– C:\Documents and Settings\Home\Application Data\WinPatrol
2006-08-23 00:31 5906432 ——— C:\WINDOWS\system32\ieframe.dll
2006-08-23 00:31 50688 —–c— C:\WINDOWS\system32\msfeedsbs.dll
2006-08-23 00:31 457728 —–c— C:\WINDOWS\system32\msfeeds.dll
2006-08-23 00:31 413696 –a–c— C:\WINDOWS\system32\vbscript.dll
2006-08-23 00:31 225792 –a—— C:\WINDOWS\system32\webcheck.dll
2006-08-23 00:31 175616 —–c— C:\WINDOWS\system32\ieui.dll
2006-08-23 00:31 152064 –a–c— C:\WINDOWS\system32\msls31.dll
2006-08-23 00:18 78336 –a–c— C:\WINDOWS\system32\ieencode.dll
2006-08-23 00:18 206336 —–c— C:\WINDOWS\system32\WinFXDocObj.exe
2006-08-23 00:17 40448 –a–c— C:\WINDOWS\system32\licmgr10.dll
2006-08-23 00:17 105472 –a—— C:\WINDOWS\system32\url.dll
2006-08-23 00:17 100352 –a—— C:\WINDOWS\system32\occache.dll
2006-08-23 00:16 16896 –a–c— C:\WINDOWS\system32\corpol.dll
2006-08-23 00:14 378368 –a–c— C:\WINDOWS\system32\iedkcs32.dll
2006-08-23 00:14 229376 –a–c— C:\WINDOWS\system32\ieaksie.dll
2006-08-23 00:13 71680 –a–c— C:\WINDOWS\system32\admparse.dll
2006-08-23 00:13 55296 –a–c— C:\WINDOWS\system32\iesetup.dll
2006-08-23 00:13 54784 –a–c— C:\WINDOWS\system32\ie4uinit.exe
2006-08-23 00:13 43008 –a–c— C:\WINDOWS\system32\iernonce.dll
2006-08-23 00:13 152064 –a–c— C:\WINDOWS\system32\ieakeng.dll
2006-08-23 00:13 122880 –a—— C:\WINDOWS\system32\advpack.dll
2006-08-23 00:13 11776 –a–c— C:\WINDOWS\system32\ieudinit.exe
2006-08-23 00:11 12288 —–c— C:\WINDOWS\system32\msfeedssync.exe
2006-08-23 00:10 61440 —–c— C:\WINDOWS\system32\icardie.dll
2006-08-23 00:10 35328 –a–c— C:\WINDOWS\system32\imgutil.dll
2006-08-23 00:09 262656 ——— C:\WINDOWS\system32\iertutil.dll
2006-08-23 00:07 45568 –a–c— C:\WINDOWS\system32\mshta.exe
2006-08-22 23:37 48128 –a–c— C:\WINDOWS\system32\mshtmler.dll
2006-08-22 23:36 380928 —–c— C:\WINDOWS\system32\ieapfltr.dll
2006-08-22 23:30 161792 –a–c— C:\WINDOWS\system32\ieakui.dll
2006-08-22 19:15 ——– d——– C:\Documents and Settings\Home\Application Data\Macromedia
2006-08-22 19:07 ——– d——– C:\Documents and Settings\Home\Application Data\AVG7
2006-08-22 19:06 ——– d—s—- C:\Documents and Settings\Home\Application Data\Microsoft
2006-08-22 19:06 ——– d——– C:\Documents and Settings\Home\Application Data\Ahead
2006-08-22 19:05 ——– d——– C:\Documents and Settings\Home\Application Data\SlipStream
2006-08-22 15:15 ——– d——– C:\Program Files\Mozilla Thunderbird
2006-08-22 10:55 ——– d——– C:\Documents and Settings\Home\Application Data\Thunderbird
2006-08-22 10:55 ——– d——– C:\Documents and Settings\Home\Application Data\Talkback
2006-08-22 10:55 ——– d——– C:\Documents and Settings\Home\Application Data\Mozilla
2006-08-22 10:24 ——– d——– C:\Program Files\Common Files\xing shared
2006-08-22 10:24 ——– d——– C:\Program Files\Common Files\Real
2006-08-22 10:24 ——– d——– C:\Program Files\Common Files
2006-08-22 09:57 ——– d——– C:\Program Files\TalkTalk
2006-08-22 09:56 ——– d——– C:\Program Files\SupportSoft
2006-08-22 09:56 ——– d——– C:\Program Files\Common Files\Wise Installation Wizard
2006-08-22 09:42 ——– d——– C:\Program Files\SAGEM
2006-08-22 08:52 ——– d——– C:\Program Files\Common Files\SupportSoft
2006-08-21 13:21 16896 –a—— C:\WINDOWS\system32\fltlib.dll
2006-08-21 10:14 23040 –a—— C:\WINDOWS\system32\fltmc.exe
2006-08-21 10:14 128896 ——— C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-14 09:48 ——– d——– C:\Program Files\Windows Media Connect 2
2006-08-12 08:38 27904 –a–c— C:\WINDOWS\system32\drivers\avg7rsxp.sys
2006-08-10 19:46 22752 –a–c— C:\WINDOWS\system32\spupdsvc.exe
2006-08-03 10:18 ——– d——– C:\Program Files\Jolly Technologies
2006-08-02 01:11 ——– d——– C:\Program Files\Common Files\ODBC
2006-07-27 14:24 679424 –a–c— C:\WINDOWS\system32\inetcomm.dll
2006-07-21 09:24 72704 –a–c— C:\WINDOWS\system32\hlink.dll
2006-07-14 16:51 121856 —–c— C:\WINDOWS\system32\xmllite.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATI DeviceDetect"="C:\\Program Files\\ATI Multimedia\\main\\ATIDtct.EXE"
"com.codeode.privacymantra"="\"C:\\Program Files\\Privacy Mantra 1.33\\privacymantra.exe\" -minimized"
"ctfmon.exe"="C:\\windows\\system32\\ctfmon.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\\windows\\system32\\NeroCheck.exe"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"BootSkin Startup Jobs"="\"C:\\Program Files\\Stardock\\WinCustomize\\BootSkin\\BootSkin.exe\" /StartupJobs"
"REGSHAVE"="C:\\Program Files\\REGSHAVE\\REGSHAVE.EXE /AUTORUN"
"HP Software Update"="C:\\Program Files\\Hewlett-Packard\\HP Software Update\\hpwuSchd.exe"
"DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"HPHmon05"="C:\\WINDOWS\\system32\\hphmon05.exe"
"WinPatrol"="\"C:\\PROGRA~1\\BILLPS~1\\WINPAT~1\\WinPatrol.exe\""
"Google Desktop Search"="\"C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe\" /startup"
"Zone Labs Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""
"Windows Defender"="C:\\Program Files\\Windows Defender\\MSASCui.exe -hide"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_08\\bin\\jusched.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,\
00,00,01,00,00,00
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"
"Spyware Doctor"="\"C:\\Program Files\\Spyware Doctor\\swdoctor.exe\" /Q"
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"
"Spyware Doctor"="\"C:\\Program Files\\Spyware Doctor\\swdoctor.exe\" /Q"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0"
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoCDBurning"=dword:00000000
"NoViewContextMenu"=dword:00000000
"NoWinKeys"=dword:00000000
"NoShellSearchButton"=dword:00000000
"NoFileAssociate"=dword:00000000
"NoFileMenu"=dword:00000000
"NoFolderOptions"=dword:00000000
"NoCommonGroups"=dword:00000000
"NoLowDiskSpaceChecks"=dword:00000001
"NoSimpleStartMenu"=dword:00000000
"HideClock"=dword:00000000
"NoToolbarsOnTaskbar"=dword:00000000
"NoTrayItemsDisplay"=dword:00000000
"NoTrayContextMenu"=dword:00000000
"NoDriveTypeAutoRun"=dword:00000091
"NoWindowsUpdate"=dword:00000000
"NoSMMyDocs"=dword:00000000
"NoSMMyPictures"=dword:00000000
"NoStartMenuMyMusic"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000001
"NoRecentDocsNetHood"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoStartMenuPinnedList"=dword:00000000
"ForceStartMenuLogoff"=dword:00000000
"NoSharedDocuments"=hex:01,00,00,00
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"RunStartupScriptSync"=dword:00000000
"SynchronousMachineGroupPolicy"=dword:00000000
"SynchronousUserGroupPolicy"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoFavoritesMenu"=dword:00000000
"NoSMMyDocs"=dword:00000000
"NoSMMyPictures"=dword:00000000
"NoStartMenuMyMusic"=dword:00000000
"NoRecentDocsNetHood"=dword:00000000
"NoSMHelp"=dword:00000000
"NoRun"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoSimpleStartMenu"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run]
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"=""
"hkey"="HKCU"
"command"=""
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\Ashampoo PopUpBlocker]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="PopUpKiller"
"hkey"="HKCU"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\ATI Remote Control]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ATIRW"
"hkey"="HKCU"
"command"="C:\\Program Files\\ATI Multimedia\\RemCtrl\\ATIRW.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\InCD]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="InCD"
"hkey"="HKLM"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\KernelFaultCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="dumprep 0 -k"
"hkey"="HKLM"
"command"="%systemroot%\\system32\\dumprep 0 -k"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\MCAgentExe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="McAgent"
"hkey"="HKLM"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\McRegWiz]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="McRegWiz"
"hkey"="HKLM"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\MCUpdateExe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="mcupdate"
"hkey"="HKLM"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\MSMSGS]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msmsgs"
"hkey"="HKCU"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\QuickTime Task]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="qttask"
"hkey"="HKLM"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\SSS6_SPM]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="spm"
"hkey"="HKCU"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\SSS6_Suite]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="sss"
"hkey"="HKCU"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSCONFIG\Startupreg\System service75]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="pokapoka75"
"hkey"="HKLM"
"inimapping"="0"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
Contents of the 'Scheduled Tasks' folder
C:\windows\tasks\1-Click Maintenance.job
C:\windows\tasks\MP Scheduled Scan.job
Completion time: 02/10/2006 22:39:59.60
ComboFix.txt
ComboFix2.txt
Hi there the pc itself is running realy well only the internet is still taking at least 5 minutes to connect i am putting this down to a problem with my phone line rather than a pc related problem it has to be as after everthing that you have helped me with it is running faster than it has for quite a while anyway thank you very much for all the assistance that you have given me it has been invaluable.
Kevin
Glad we could be of assistance.
This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore
http://TomCoyote.org/coyotestore.php