What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

HJT log

10 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I wanted to run this and see if you guys see anything. I'm getting alot of HD read/write and I see a few things that look suspect.

Logfile of HijackThis v1.99.1
Scan saved at 10:08:05 PM, on 10/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Dassault Systemes\B15\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SUPERMICRO\SDIII\NTService.exe
C:\WINDOWS\system32\SD3Service.exe
C:\WINDOWS\system32\WinVNC.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\Program Files\SUPERMICRO\SDIII\Xitami\xiwinnt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_08\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2S1.EXE
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
D:\Program Files\Creative\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
D:\Program Files\Creative\Volume Panel\VolPanel.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Saitek\Software\SaiSmart.exe
D:\Program Files\Creative\Detector\CTDetect.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\NAVW32.EXE
C:\hijackthis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_08\bin\jusched.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2S1.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BPIc7D] C:\WINDOWS\gmcvcsr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MediaLifeService] "C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [CTDVDDET] "D:\Program Files\Creative\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [VolPanel] "D:\Program Files\Creative\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1
O4 - HKCU\..\Run: [Creative Detector] "D:\Program Files\Creative\Detector\CTDetect.exe" /R
O4 - Global Startup: Supero Doctor III Client.lnk = C:\Program Files\SUPERMICRO\SDIII\SuperoDoctor.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &WordWeb… - res://C:\WINDOWS\wweb32.dll/lookup.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1123034469467
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD LT 2000i\AcDcToday.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD LT 2000i\AcPreview.ocx
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B15\intel_a\code\bin\CATSysDemon.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: SuperMicro Health Assistant - Unknown owner - C:\Program Files\SUPERMICRO\SDIII\NTService.exe
O23 - Service: Supero SD3Service Daemon - Unknown owner - C:\WINDOWS\system32\SD3Service.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TridiaVNC Server (winvnc) - Unknown owner - C:\WINDOWS\system32\WinVNC.exe" -service (file missing)
O23 - Service: WMP54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe" "WMP54Gv4.exe (file missing)
O23 - Service: Xitami Web Server (Xitami) - Unknown owner - C:\Program Files\SUPERMICRO\SDIII\Xitami\xiwinnt.exe
Post #2
Hello and Welcome to the forum.

Do you know what this file is?
C:\WINDOWS\gmcvcsr.exe

If not, please submit it here:
Please go to http://virusscan.jotti.org , click on Browse, and upload the following file for analysis:

C:\WINDOWS\gmcvcsr.exe

Then click Submit. Allow the file to be scanned, and then please copy and paste the results here for me to see.
Post #4
It shows in your HJT log
O4 - HKLM\..\Run: [BPIc7D] C:\WINDOWS\gmcvcsr.exe

I suggest you do this:

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.

Now see if you can see it.
C:\WINDOWS\gmcvcsr.exe
Post #5
I set those view options after first boot of this and any computer I own. :) Whatever it was I guess it was deleted and the registry wasn't cleaned?
Post #7
This is with no reboot. If you like, I can reboot and post another log…

Logfile of HijackThis v1.99.1
Scan saved at 6:35:17 PM, on 10/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Dassault Systemes\B15\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SUPERMICRO\SDIII\NTService.exe
C:\WINDOWS\system32\SD3Service.exe
C:\WINDOWS\system32\WinVNC.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\Program Files\SUPERMICRO\SDIII\Xitami\xiwinnt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_08\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
D:\Program Files\Creative\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
D:\Program Files\Creative\Volume Panel\VolPanel.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Saitek\Software\SaiSmart.exe
D:\Program Files\Creative\Detector\CTDetect.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\hijackthis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_08\bin\jusched.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2S1.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BPIc7D] C:\WINDOWS\gmcvcsr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MediaLifeService] "C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [CTDVDDET] "D:\Program Files\Creative\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [VolPanel] "D:\Program Files\Creative\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1
O4 - HKCU\..\Run: [Creative Detector] "D:\Program Files\Creative\Detector\CTDetect.exe" /R
O4 - Global Startup: Supero Doctor III Client.lnk = C:\Program Files\SUPERMICRO\SDIII\SuperoDoctor.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &WordWeb… - res://C:\WINDOWS\wweb32.dll/lookup.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1123034469467
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD LT 2000i\AcDcToday.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD LT 2000i\AcPreview.ocx
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B15\intel_a\code\bin\CATSysDemon.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: SuperMicro Health Assistant - Unknown owner - C:\Program Files\SUPERMICRO\SDIII\NTService.exe
O23 - Service: Supero SD3Service Daemon - Unknown owner - C:\WINDOWS\system32\SD3Service.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TridiaVNC Server (winvnc) - Unknown owner - C:\WINDOWS\system32\WinVNC.exe" -service (file missing)
O23 - Service: WMP54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe" "WMP54Gv4.exe (file missing)
O23 - Service: Xitami Web Server (Xitami) - Unknown owner - C:\Program Files\SUPERMICRO\SDIII\Xitami\xiwinnt.exe
Post #9
Ok, before I post the log, here's a cut and paste of that folders contents. It's not in order so you'll have to do a search. I looked, but I feel better if someone else looks to be sure. I used "Folderscavenger". Hidden files turned on and subfolders turned off. File name system.ini win.ini alcrmv.exe alcupd.exe _default.pif explorer.scf soundman.exe msdfmap.ini twain.dll imsins.BAK twunk_16.exe twunk_32.exe winhelp.exe smcc.ico clock.avi vmmreg32.dll setuplog.txt setupact.log setuperr.log KB896727.log CoolPlay.ini KB923191.log KB924496.log INRES.DLL SET3.tmp Updreg.EXE LUINSTALL.LOG CTDCRES.DLL CTXFIRES.DLL setuplog SET7.tmp Ctregrun.exe SBWIN.INI CTDV10K1.CDF CTDV10K2.CDF CTDVAUDY.CDF CTHELPER.EXE MIDIDEF.EXE PSCONV.EXE READREG.EXE KE.log KB919007.log KB923414.log KB922819.log TASKMAN.EXE regopt.log ODBCINST.INI ocgen.log FaxSetup.log iis6.log comsetup.log ntdtcsetup.log tsoc.log msmqinst.log SYMEVENT.LOG msgsocm.log ocmsn.log Sti_Trace.log wiaservc.log wiadebug.log Blue Lace 16.bmp mozver.dat Soap Bubbles.bmp NSUninst.exe Coffee Bean.bmp nsreg.dat BRMFBIDI.INI FeatherTexture.bmp setup.log ST6UNST.EXE Gone Fishing.bmp eReg.dat Greenstone.bmp Setup1.exe Prairie Wind.bmp EPSTPLOG.TXT ODBC.INI Rhododendron.bmp River Sumida.bmp Santa Fe Stucco.bmp opuc.dll SETUPOSE.LOG Zapotec.bmp DtcInstall.log vb.ini vbaddin.ini sessmgr.setup.log corelpf.lrs desktop.ini KB899588.log winnt.bmp KB893756.log winnt256.bmp IsUninst.exe WindowsShell.Manifest Windows Update.log OEWABLog.txt WMSysPrx.prx control.ini bootstat.dat REGLOCS.OLD SchedLgU.Txt setupapi.log winamp.ini 0.log GREUninstall.exe KB899591.log KB899587.log NeroDigital.ini Explorer.EXE.Z-missing.txt setupapi.log.0.old KB896423.log KB894391.log nsw.log WindowsUpdate.log imsins.log EPISME00.SWB KB842773.log ntbtlog.txt KB902400.log xpsp1hfm.log Q329048.log PCDLIB32.DLL KB899589.log game.ini KB912919.log Q323255.log KB901017.log Q329390.log KB905414.log KB904706.log Q329115.log KB905749.log KB900725.log Q329170.log KB896688.log Q811630.log Q810577.log bcm42rly.sys KB913580.log Q329441.log DirectX.log Q817606.log KB896424.log KB823559.log KB891122.log wweb32.dll Q329834.log dasetup.log KB905915.log KB828741.log PFP90JCM.{PB PFP90JPR.{PB KB834707-IE6-20040929.115007.log KB910437.log KB908519.log Q810833.log MPLAYER.INI KB911927.log KB835732.log KB823980.log WGA.log svcpack.log KB913446.log KB911565.log 002395_.tmp OpPrintServer.INI GEARInstall.log KB911564.log winhlp32.exe KB912945.log twain_32.dll KB904942.log regedit.exe KB911567.log notepad.exe explorer.exe KB900485.log KB914389.log KB908531.log slrundll.exe KB912812.log WMSysPr9.prx wmsetup.log cmsetacl.log tabletoc.log KB911562.log KB916281.log MedCtrOC.log netfxocm.log KB911280.log spupdsvc.log KB893803v2.log KB917953.log KB898461.log WgaNotify.log KB917344.log KB873339.log KB918439.log KB917734.log KB885836.log KB888302.log KB887472.log KB891781.log KB888113.log KB873333.log KB887742.log KB893086.log KB885835.log KB885250.log KB890046.log KB896422.log KB896428.log KB883939.log KB893066.log KB901214.log KB890859.log KB896358.log ULEAD32.INI KB916595.log KB886185.log KB921883.log KB918899.log KB914388.log KB917159.log ML.log KB917422.log KB920670.log KB920683.log KB921398.log KB922616.log KB920214.log KB920872.log KB920685.log KB922582.log KB925486.log updspapi.log KB924191.log INI1=No KHALMNPR.Exe INI2=No KB903235.log hh.exe wmsetup10.log KB896344.log COM+.log RtlExUpd.dll
Post #10
Here's the log which was done BEFORE I ran "Folderscavenger".:

Logfile of HijackThis v1.99.1
Scan saved at 6:44:34 PM, on 10/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Dassault Systemes\B15\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SUPERMICRO\SDIII\NTService.exe
C:\WINDOWS\system32\SD3Service.exe
C:\WINDOWS\system32\WinVNC.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\Program Files\SUPERMICRO\SDIII\Xitami\xiwinnt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\j2re1.4.2_08\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
D:\Program Files\Creative\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
D:\Program Files\Creative\Volume Panel\VolPanel.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Saitek\Software\Profiler.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Saitek\Software\SaiSmart.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
D:\Program Files\Creative\Detector\CTDetect.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\hijackthis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_08\bin\jusched.exe
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2S1.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BPIc7D] C:\WINDOWS\gmcvcsr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MediaLifeService] "C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [CTDVDDET] "D:\Program Files\Creative\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [VolPanel] "D:\Program Files\Creative\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Profiler] C:\Program Files\Saitek\Software\Profiler.exe
O4 - HKLM\..\Run: [SaiSmart] C:\Program Files\Saitek\Software\SaiSmart.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1
O4 - HKCU\..\Run: [Creative Detector] "D:\Program Files\Creative\Detector\CTDetect.exe" /R
O4 - Global Startup: Supero Doctor III Client.lnk = C:\Program Files\SUPERMICRO\SDIII\SuperoDoctor.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &WordWeb… - res://C:\WINDOWS\wweb32.dll/lookup.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1123034469467
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD LT 2000i\AcDcToday.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (NOXLATE) - file://C:\Program Files\AutoCAD LT 2000i\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD LT 2000i\AcPreview.ocx
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Program Files\Dassault Systemes\B15\intel_a\code\bin\CATSysDemon.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: SuperMicro Health Assistant - Unknown owner - C:\Program Files\SUPERMICRO\SDIII\NTService.exe
O23 - Service: Supero SD3Service Daemon - Unknown owner - C:\WINDOWS\system32\SD3Service.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TridiaVNC Server (winvnc) - Unknown owner - C:\WINDOWS\system32\WinVNC.exe" -service (file missing)
O23 - Service: WMP54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe" "WMP54Gv4.exe (file missing)
O23 - Service: Xitami Web Server (Xitami) - Unknown owner - C:\Program Files\SUPERMICRO\SDIII\Xitami\xiwinnt.exe
Post #12
Yes, that is C:/windows. Here's another with paths shown. I realize it shows in the registry, but it isn't in the folder. I think I've seen that happen before with no error at boot. File name Path system.ini C:\WINDOWS\system.ini win.ini C:\WINDOWS\win.ini alcrmv.exe C:\WINDOWS\alcrmv.exe alcupd.exe C:\WINDOWS\alcupd.exe _default.pif C:\WINDOWS\_default.pif explorer.scf C:\WINDOWS\explorer.scf soundman.exe C:\WINDOWS\soundman.exe msdfmap.ini C:\WINDOWS\msdfmap.ini twain.dll C:\WINDOWS\twain.dll imsins.BAK C:\WINDOWS\imsins.BAK twunk_16.exe C:\WINDOWS\twunk_16.exe twunk_32.exe C:\WINDOWS\twunk_32.exe winhelp.exe C:\WINDOWS\winhelp.exe smcc.ico C:\WINDOWS\smcc.ico clock.avi C:\WINDOWS\clock.avi vmmreg32.dll C:\WINDOWS\vmmreg32.dll setuplog.txt C:\WINDOWS\setuplog.txt setupact.log C:\WINDOWS\setupact.log setuperr.log C:\WINDOWS\setuperr.log KB896727.log C:\WINDOWS\KB896727.log CoolPlay.ini C:\WINDOWS\CoolPlay.ini KB923191.log C:\WINDOWS\KB923191.log KB924496.log C:\WINDOWS\KB924496.log INRES.DLL C:\WINDOWS\INRES.DLL SET3.tmp C:\WINDOWS\SET3.tmp Updreg.EXE C:\WINDOWS\Updreg.EXE LUINSTALL.LOG C:\WINDOWS\LUINSTALL.LOG CTDCRES.DLL C:\WINDOWS\CTDCRES.DLL CTXFIRES.DLL C:\WINDOWS\CTXFIRES.DLL setuplog C:\WINDOWS\setuplog SET7.tmp C:\WINDOWS\SET7.tmp Ctregrun.exe C:\WINDOWS\Ctregrun.exe SBWIN.INI C:\WINDOWS\SBWIN.INI CTDV10K1.CDF C:\WINDOWS\CTDV10K1.CDF CTDV10K2.CDF C:\WINDOWS\CTDV10K2.CDF CTDVAUDY.CDF C:\WINDOWS\CTDVAUDY.CDF CTHELPER.EXE C:\WINDOWS\CTHELPER.EXE MIDIDEF.EXE C:\WINDOWS\MIDIDEF.EXE PSCONV.EXE C:\WINDOWS\PSCONV.EXE READREG.EXE C:\WINDOWS\READREG.EXE KE.log C:\WINDOWS\KE.log KB919007.log C:\WINDOWS\KB919007.log KB923414.log C:\WINDOWS\KB923414.log KB922819.log C:\WINDOWS\KB922819.log TASKMAN.EXE C:\WINDOWS\TASKMAN.EXE regopt.log C:\WINDOWS\regopt.log ODBCINST.INI C:\WINDOWS\ODBCINST.INI ocgen.log C:\WINDOWS\ocgen.log FaxSetup.log C:\WINDOWS\FaxSetup.log iis6.log C:\WINDOWS\iis6.log comsetup.log C:\WINDOWS\comsetup.log ntdtcsetup.log C:\WINDOWS\ntdtcsetup.log tsoc.log C:\WINDOWS\tsoc.log msmqinst.log C:\WINDOWS\msmqinst.log SYMEVENT.LOG C:\WINDOWS\SYMEVENT.LOG msgsocm.log C:\WINDOWS\msgsocm.log ocmsn.log C:\WINDOWS\ocmsn.log Sti_Trace.log C:\WINDOWS\Sti_Trace.log wiaservc.log C:\WINDOWS\wiaservc.log wiadebug.log C:\WINDOWS\wiadebug.log Blue Lace 16.bmp C:\WINDOWS\Blue Lace 16.bmp mozver.dat C:\WINDOWS\mozver.dat Soap Bubbles.bmp C:\WINDOWS\Soap Bubbles.bmp NSUninst.exe C:\WINDOWS\NSUninst.exe Coffee Bean.bmp C:\WINDOWS\Coffee Bean.bmp nsreg.dat C:\WINDOWS\nsreg.dat BRMFBIDI.INI C:\WINDOWS\BRMFBIDI.INI FeatherTexture.bmp C:\WINDOWS\FeatherTexture.bmp setup.log C:\WINDOWS\setup.log ST6UNST.EXE C:\WINDOWS\ST6UNST.EXE Gone Fishing.bmp C:\WINDOWS\Gone Fishing.bmp eReg.dat C:\WINDOWS\eReg.dat Greenstone.bmp C:\WINDOWS\Greenstone.bmp Setup1.exe C:\WINDOWS\Setup1.exe Prairie Wind.bmp C:\WINDOWS\Prairie Wind.bmp EPSTPLOG.TXT C:\WINDOWS\EPSTPLOG.TXT ODBC.INI C:\WINDOWS\ODBC.INI Rhododendron.bmp C:\WINDOWS\Rhododendron.bmp River Sumida.bmp C:\WINDOWS\River Sumida.bmp Santa Fe Stucco.bmp C:\WINDOWS\Santa Fe Stucco.bmp opuc.dll C:\WINDOWS\opuc.dll SETUPOSE.LOG C:\WINDOWS\SETUPOSE.LOG Zapotec.bmp C:\WINDOWS\Zapotec.bmp DtcInstall.log C:\WINDOWS\DtcInstall.log vb.ini C:\WINDOWS\vb.ini vbaddin.ini C:\WINDOWS\vbaddin.ini sessmgr.setup.log C:\WINDOWS\sessmgr.setup.log corelpf.lrs C:\WINDOWS\corelpf.lrs desktop.ini C:\WINDOWS\desktop.ini KB899588.log C:\WINDOWS\KB899588.log winnt.bmp C:\WINDOWS\winnt.bmp KB893756.log C:\WINDOWS\KB893756.log winnt256.bmp C:\WINDOWS\winnt256.bmp IsUninst.exe C:\WINDOWS\IsUninst.exe WindowsShell.Manifest C:\WINDOWS\WindowsShell.Manifest Windows Update.log C:\WINDOWS\Windows Update.log OEWABLog.txt C:\WINDOWS\OEWABLog.txt WMSysPrx.prx C:\WINDOWS\WMSysPrx.prx control.ini C:\WINDOWS\control.ini bootstat.dat C:\WINDOWS\bootstat.dat REGLOCS.OLD C:\WINDOWS\REGLOCS.OLD SchedLgU.Txt C:\WINDOWS\SchedLgU.Txt setupapi.log C:\WINDOWS\setupapi.log winamp.ini C:\WINDOWS\winamp.ini 0.log C:\WINDOWS\0.log GREUninstall.exe C:\WINDOWS\GREUninstall.exe KB899591.log C:\WINDOWS\KB899591.log KB899587.log C:\WINDOWS\KB899587.log NeroDigital.ini C:\WINDOWS\NeroDigital.ini Explorer.EXE.Z-missing.txt C:\WINDOWS\Explorer.EXE.Z-missing.txt setupapi.log.0.old C:\WINDOWS\setupapi.log.0.old KB896423.log C:\WINDOWS\KB896423.log KB894391.log C:\WINDOWS\KB894391.log nsw.log C:\WINDOWS\nsw.log WindowsUpdate.log C:\WINDOWS\WindowsUpdate.log imsins.log C:\WINDOWS\imsins.log EPISME00.SWB C:\WINDOWS\EPISME00.SWB KB842773.log C:\WINDOWS\KB842773.log ntbtlog.txt C:\WINDOWS\ntbtlog.txt KB902400.log C:\WINDOWS\KB902400.log xpsp1hfm.log C:\WINDOWS\xpsp1hfm.log Q329048.log C:\WINDOWS\Q329048.log PCDLIB32.DLL C:\WINDOWS\PCDLIB32.DLL KB899589.log C:\WINDOWS\KB899589.log game.ini C:\WINDOWS\game.ini KB912919.log C:\WINDOWS\KB912919.log Q323255.log C:\WINDOWS\Q323255.log KB901017.log C:\WINDOWS\KB901017.log Q329390.log C:\WINDOWS\Q329390.log KB905414.log C:\WINDOWS\KB905414.log KB904706.log C:\WINDOWS\KB904706.log Q329115.log C:\WINDOWS\Q329115.log KB905749.log C:\WINDOWS\KB905749.log KB900725.log C:\WINDOWS\KB900725.log Q329170.log C:\WINDOWS\Q329170.log KB896688.log C:\WINDOWS\KB896688.log Q811630.log C:\WINDOWS\Q811630.log Q810577.log C:\WINDOWS\Q810577.log bcm42rly.sys C:\WINDOWS\bcm42rly.sys KB913580.log C:\WINDOWS\KB913580.log Q329441.log C:\WINDOWS\Q329441.log DirectX.log C:\WINDOWS\DirectX.log Q817606.log C:\WINDOWS\Q817606.log KB896424.log C:\WINDOWS\KB896424.log KB823559.log C:\WINDOWS\KB823559.log KB891122.log C:\WINDOWS\KB891122.log wweb32.dll C:\WINDOWS\wweb32.dll Q329834.log C:\WINDOWS\Q329834.log dasetup.log C:\WINDOWS\dasetup.log KB905915.log C:\WINDOWS\KB905915.log KB828741.log C:\WINDOWS\KB828741.log PFP90JCM.{PB C:\WINDOWS\PFP90JCM.{PB PFP90JPR.{PB C:\WINDOWS\PFP90JPR.{PB KB834707-IE6-20040929.115007.log C:\WINDOWS\KB834707-IE6-20040929.115007.log KB910437.log C:\WINDOWS\KB910437.log KB908519.log C:\WINDOWS\KB908519.log Q810833.log C:\WINDOWS\Q810833.log MPLAYER.INI C:\WINDOWS\MPLAYER.INI KB911927.log C:\WINDOWS\KB911927.log KB835732.log C:\WINDOWS\KB835732.log KB823980.log C:\WINDOWS\KB823980.log WGA.log C:\WINDOWS\WGA.log svcpack.log C:\WINDOWS\svcpack.log KB913446.log C:\WINDOWS\KB913446.log KB911565.log C:\WINDOWS\KB911565.log 002395_.tmp C:\WINDOWS\002395_.tmp OpPrintServer.INI C:\WINDOWS\OpPrintServer.INI GEARInstall.log C:\WINDOWS\GEARInstall.log KB911564.log C:\WINDOWS\KB911564.log winhlp32.exe C:\WINDOWS\winhlp32.exe KB912945.log C:\WINDOWS\KB912945.log twain_32.dll C:\WINDOWS\twain_32.dll KB904942.log C:\WINDOWS\KB904942.log regedit.exe C:\WINDOWS\regedit.exe KB911567.log C:\WINDOWS\KB911567.log notepad.exe C:\WINDOWS\notepad.exe explorer.exe C:\WINDOWS\explorer.exe KB900485.log C:\WINDOWS\KB900485.log KB914389.log C:\WINDOWS\KB914389.log KB908531.log C:\WINDOWS\KB908531.log slrundll.exe C:\WINDOWS\slrundll.exe KB912812.log C:\WINDOWS\KB912812.log WMSysPr9.prx C:\WINDOWS\WMSysPr9.prx wmsetup.log C:\WINDOWS\wmsetup.log cmsetacl.log C:\WINDOWS\cmsetacl.log tabletoc.log C:\WINDOWS\tabletoc.log KB911562.log C:\WINDOWS\KB911562.log KB916281.log C:\WINDOWS\KB916281.log MedCtrOC.log C:\WINDOWS\MedCtrOC.log netfxocm.log C:\WINDOWS\netfxocm.log KB911280.log C:\WINDOWS\KB911280.log spupdsvc.log C:\WINDOWS\spupdsvc.log KB893803v2.log C:\WINDOWS\KB893803v2.log KB917953.log C:\WINDOWS\KB917953.log KB898461.log C:\WINDOWS\KB898461.log WgaNotify.log C:\WINDOWS\WgaNotify.log KB917344.log C:\WINDOWS\KB917344.log KB873339.log C:\WINDOWS\KB873339.log KB918439.log C:\WINDOWS\KB918439.log KB917734.log C:\WINDOWS\KB917734.log KB885836.log C:\WINDOWS\KB885836.log KB888302.log C:\WINDOWS\KB888302.log KB887472.log C:\WINDOWS\KB887472.log KB891781.log C:\WINDOWS\KB891781.log KB888113.log C:\WINDOWS\KB888113.log KB873333.log C:\WINDOWS\KB873333.log KB887742.log C:\WINDOWS\KB887742.log KB893086.log C:\WINDOWS\KB893086.log KB885835.log C:\WINDOWS\KB885835.log KB885250.log C:\WINDOWS\KB885250.log KB890046.log C:\WINDOWS\KB890046.log KB896422.log C:\WINDOWS\KB896422.log KB896428.log C:\WINDOWS\KB896428.log KB883939.log C:\WINDOWS\KB883939.log KB893066.log C:\WINDOWS\KB893066.log KB901214.log C:\WINDOWS\KB901214.log KB890859.log C:\WINDOWS\KB890859.log KB896358.log C:\WINDOWS\KB896358.log ULEAD32.INI C:\WINDOWS\ULEAD32.INI KB916595.log C:\WINDOWS\KB916595.log KB886185.log C:\WINDOWS\KB886185.log KB921883.log C:\WINDOWS\KB921883.log KB918899.log C:\WINDOWS\KB918899.log KB914388.log C:\WINDOWS\KB914388.log KB917159.log C:\WINDOWS\KB917159.log ML.log C:\WINDOWS\ML.log KB917422.log C:\WINDOWS\KB917422.log KB920670.log C:\WINDOWS\KB920670.log KB920683.log C:\WINDOWS\KB920683.log KB921398.log C:\WINDOWS\KB921398.log KB922616.log C:\WINDOWS\KB922616.log KB920214.log C:\WINDOWS\KB920214.log KB920872.log C:\WINDOWS\KB920872.log KB920685.log C:\WINDOWS\KB920685.log KB922582.log C:\WINDOWS\KB922582.log KB925486.log C:\WINDOWS\KB925486.log updspapi.log C:\WINDOWS\updspapi.log KB924191.log C:\WINDOWS\KB924191.log INI1=No C:\WINDOWS\INI1=No KHALMNPR.Exe C:\WINDOWS\KHALMNPR.Exe INI2=No C:\WINDOWS\INI2=No KB903235.log C:\WINDOWS\KB903235.log hh.exe C:\WINDOWS\hh.exe wmsetup10.log C:\WINDOWS\wmsetup10.log KB896344.log C:\WINDOWS\KB896344.log COM+.log C:\WINDOWS\COM+.log RtlExUpd.dll C:\WINDOWS\RtlExUpd.dll

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI