What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

help computer is slowly dying

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
my computer is mega slow. help me please I ran hijackthis and hear are my logs. thanks in advance

Logfile of HijackThis v1.99.1
Scan saved at 3:43:03 PM, on 11/9/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Picasa\PicasaMediaDetector.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\WINDOWS\FSScrCtl.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Program Files\Microsoft Works\wkssb.exe
C:\Documents and Settings\Erik Olson\Desktop\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/customize/ymsgr/defaul…://my.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: (no name) - {07E8C826-F3D2-0A98-880F-55AD659782D1} - (no file)
O2 - BHO: (no name) - {0DD6EC25-AC53-B55C-05B9-CC2337E1181D} - (no file)
O2 - BHO: (no name) - {1A73479F-2785-CF6C-EAB8-9261C8D3F612} - (no file)
O2 - BHO: (no name) - {226F74F7-94A2-FE96-7B23-B01DD29FD1E8} - (no file)
O2 - BHO: (no name) - {22B6DEDD-4D24-57B5-33E8-6815E283E89C} - (no file)
O2 - BHO: (no name) - {2FF6767A-BCD1-C176-FEEA-A1B2B283DFE0} - (no file)
O2 - BHO: (no name) - {339610FC-1BB2-852C-5A01-26345097177D} - (no file)
O2 - BHO: (no name) - {34B60CAB-5B85-EB60-AC45-01C5CE5BB7B6} - (no file)
O2 - BHO: (no name) - {35F1EB9B-2875-FC5F-C210-4FA3B45FC995} - (no file)
O2 - BHO: (no name) - {36B0002B-6BC8-BE39-74D5-234853739B76} - (no file)
O2 - BHO: (no name) - {3E33A085-99CA-2CF6-1BCB-436B044EF1EA} - (no file)
O2 - BHO: (no name) - {452CE4BD-6993-E987-C954-8D53652EE101} - (no file)
O2 - BHO: (no name) - {67C68C5F-44C8-5FF5-CE7D-54E907D6D21C} - (no file)
O2 - BHO: (no name) - {68DD277B-6241-E4F8-533B-24351756F228} - (no file)
O2 - BHO: (no name) - {6CBFD0D4-8E18-4C92-9311-A433DD87BDCF} - (no file)
O2 - BHO: (no name) - {7CE28F1A-C75D-E86A-7653-65342618DF9B} - (no file)
O2 - BHO: (no name) - {8D283F17-6393-2336-7062-61B53CA2D259} - (no file)
O2 - BHO: (no name) - {97FEFEA8-0DFD-A795-D6E2-12058F7344D4} - (no file)
O2 - BHO: (no name) - {A0813A07-907B-DF39-A0AC-C5AF4845657F} - (no file)
O2 - BHO: (no name) - {A5EC6E46-02A9-7AE8-E3A6-16A108479874} - (no file)
O2 - BHO: (no name) - {AADFB291-907E-B543-8BB5-06575F4D4539} - (no file)
O2 - BHO: (no name) - {B02CAEDE-8627-F248-B2CF-1194D2284B31} - (no file)
O2 - BHO: (no name) - {B2D8239B-D9D4-B84D-8A53-455904E50E45} - (no file)
O2 - BHO: (no name) - {B3445E12-83ED-4794-941D-CC18315D0931} - (no file)
O2 - BHO: (no name) - {C10E70B6-0A9C-EFB9-C902-4055C2D7F322} - (no file)
O2 - BHO: (no name) - {C49EE5EC-58A6-E279-05B8-E5C66D906219} - (no file)
O2 - BHO: (no name) - {C5844CBD-D015-394D-8C9A-B52CFEA94E45} - (no file)
O2 - BHO: (no name) - {C7E5DEDD-D9B0-41ED-404D-7720BA941F24} - (no file)
O2 - BHO: (no name) - {D094CD1B-DB37-FF6B-1763-238C43DCC156} - (no file)
O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)
O2 - BHO: (no name) - {D6D41230-B4B7-D9FC-EDDA-A50821C38898} - (no file)
O2 - BHO: (no name) - {D9FF992E-4A44-2FA1-F300-BC901D12966E} - (no file)
O2 - BHO: (no name) - {DC944D17-0461-1EDC-5D81-91490871C12D} - (no file)
O2 - BHO: (no name) - {DECE7F32-C7E7-28BF-BF37-5DA16FD8856B} - (no file)
O2 - BHO: (no name) - {E0715207-F0E3-3236-6233-7B76E86CE91E} - (no file)
O2 - BHO: (no name) - {E090AF9D-5BB5-11AF-EDC8-3CFC8DED11EC} - (no file)
O2 - BHO: (no name) - {E43F4B40-E371-59B7-F4A8-FF87ADFCEAF4} - (no file)
O2 - BHO: (no name) - {E45BD794-07C3-1757-F771-7B40593FF30F} - (no file)
O2 - BHO: (no name) - {E47F2716-713A-7A1B-77DF-2FD30AEB8673} - (no file)
O2 - BHO: (no name) - {E8A21F6F-CE35-C5F4-D125-77B47648F1A3} - (no file)
O2 - BHO: (no name) - {E92EFA08-05B6-5902-325B-EF61C5EC29A7} - (no file)
O2 - BHO: (no name) - {F002792A-6BA6-74D1-2786-E04D7F18E85E} - (no file)
O2 - BHO: (no name) - {F00ADCBD-1759-E8D3-3EB9-1B8318EAC367} - (no file)
O2 - BHO: (no name) - {F28B1256-59AF-E0AE-9F80-A3E878D7AC87} - (no file)
O2 - BHO: (no name) - {F6BCAEA7-7910-C92B-BD7B-CADE109FB093} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [LifeScape Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [prgsys0984] xwiz.exe
O4 - HKLM\..\Run: [sysconf16] Uint32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Preliminary] xwiz.exe
O4 - HKCU\..\Run: [Trayz] systemdll.exe
O4 - HKCU\..\Run: [new32] scanSYS.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Startup: Screen Saver Control.lnk = C:\WINDOWS\FSScrCtl.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes12031.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes12031.dll
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O18 - Protocol hijack: mhtml -
O23 - Service: AVScheduler - Unknown owner - C:\Program Files\WinAntiVirus 2005\AVSchSvc.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WinAntivirus - Unknown owner - C:\Program Files\WinAntiVirus 2005\AVSvc.exe
Post #2
Welcome to the forum :wavey:

Please download FixWareout from one of these links:
Fixwareout.exe
Fixwareout.exe

Save it to your desktop.

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

Run Hijack This!
Click "Do a systen scan only".
Then "check" the box to the left of these item(s):

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank

F2 - REG:system.ini: UserInit=userinit.exe

O1 - Hosts: localhost 127.0.0.1

O2 - BHO: (no name) - {07E8C826-F3D2-0A98-880F-55AD659782D1} - (no file)

O2 - BHO: (no name) - {0DD6EC25-AC53-B55C-05B9-CC2337E1181D} - (no file)

O2 - BHO: (no name) - {1A73479F-2785-CF6C-EAB8-9261C8D3F612} - (no file)

O2 - BHO: (no name) - {226F74F7-94A2-FE96-7B23-B01DD29FD1E8} - (no file)

O2 - BHO: (no name) - {22B6DEDD-4D24-57B5-33E8-6815E283E89C} - (no file)

O2 - BHO: (no name) - {2FF6767A-BCD1-C176-FEEA-A1B2B283DFE0} - (no file)

O2 - BHO: (no name) - {339610FC-1BB2-852C-5A01-26345097177D} - (no file)

O2 - BHO: (no name) - {34B60CAB-5B85-EB60-AC45-01C5CE5BB7B6} - (no file)

O2 - BHO: (no name) - {35F1EB9B-2875-FC5F-C210-4FA3B45FC995} - (no file)

O2 - BHO: (no name) - {36B0002B-6BC8-BE39-74D5-234853739B76} - (no file)

O2 - BHO: (no name) - {3E33A085-99CA-2CF6-1BCB-436B044EF1EA} - (no file)

O2 - BHO: (no name) - {452CE4BD-6993-E987-C954-8D53652EE101} - (no file)

O2 - BHO: (no name) - {67C68C5F-44C8-5FF5-CE7D-54E907D6D21C} - (no file)

O2 - BHO: (no name) - {68DD277B-6241-E4F8-533B-24351756F228} - (no file)

O2 - BHO: (no name) - {6CBFD0D4-8E18-4C92-9311-A433DD87BDCF} - (no file)

O2 - BHO: (no name) - {7CE28F1A-C75D-E86A-7653-65342618DF9B} - (no file)

O2 - BHO: (no name) - {8D283F17-6393-2336-7062-61B53CA2D259} - (no file)

O2 - BHO: (no name) - {97FEFEA8-0DFD-A795-D6E2-12058F7344D4} - (no file)

O2 - BHO: (no name) - {A0813A07-907B-DF39-A0AC-C5AF4845657F} - (no file)

O2 - BHO: (no name) - {A5EC6E46-02A9-7AE8-E3A6-16A108479874} - (no file)

O2 - BHO: (no name) - {AADFB291-907E-B543-8BB5-06575F4D4539} - (no file)

O2 - BHO: (no name) - {B02CAEDE-8627-F248-B2CF-1194D2284B31} - (no file)

O2 - BHO: (no name) - {B2D8239B-D9D4-B84D-8A53-455904E50E45} - (no file)

O2 - BHO: (no name) - {B3445E12-83ED-4794-941D-CC18315D0931} - (no file)

O2 - BHO: (no name) - {C10E70B6-0A9C-EFB9-C902-4055C2D7F322} - (no file)

O2 - BHO: (no name) - {C49EE5EC-58A6-E279-05B8-E5C66D906219} - (no file)

O2 - BHO: (no name) - {C5844CBD-D015-394D-8C9A-B52CFEA94E45} - (no file)

O2 - BHO: (no name) - {C7E5DEDD-D9B0-41ED-404D-7720BA941F24} - (no file)

O2 - BHO: (no name) - {D094CD1B-DB37-FF6B-1763-238C43DCC156} - (no file)

O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)

O2 - BHO: (no name) - {D6D41230-B4B7-D9FC-EDDA-A50821C38898} - (no file)

O2 - BHO: (no name) - {D9FF992E-4A44-2FA1-F300-BC901D12966E} - (no file)

O2 - BHO: (no name) - {DC944D17-0461-1EDC-5D81-91490871C12D} - (no file)

O2 - BHO: (no name) - {DECE7F32-C7E7-28BF-BF37-5DA16FD8856B} - (no file)

O2 - BHO: (no name) - {E0715207-F0E3-3236-6233-7B76E86CE91E} - (no file)

O2 - BHO: (no name) - {E090AF9D-5BB5-11AF-EDC8-3CFC8DED11EC} - (no file)

O2 - BHO: (no name) - {E43F4B40-E371-59B7-F4A8-FF87ADFCEAF4} - (no file)

O2 - BHO: (no name) - {E45BD794-07C3-1757-F771-7B40593FF30F} - (no file)

O2 - BHO: (no name) - {E47F2716-713A-7A1B-77DF-2FD30AEB8673} - (no file)

O2 - BHO: (no name) - {E8A21F6F-CE35-C5F4-D125-77B47648F1A3} - (no file)

O2 - BHO: (no name) - {E92EFA08-05B6-5902-325B-EF61C5EC29A7} - (no file)

O2 - BHO: (no name) - {F002792A-6BA6-74D1-2786-E04D7F18E85E} - (no file)

O2 - BHO: (no name) - {F00ADCBD-1759-E8D3-3EB9-1B8318EAC367} - (no file)

O2 - BHO: (no name) - {F28B1256-59AF-E0AE-9F80-A3E878D7AC87} - (no file)

O2 - BHO: (no name) - {F6BCAEA7-7910-C92B-BD7B-CADE109FB093} - (no file)

O4 - HKLM\..\Run: [prgsys0984] xwiz.exe

O4 - HKLM\..\Run: [sysconf16] Uint32.exe

O4 - HKCU\..\Run: [Preliminary] xwiz.exe

O4 - HKCU\..\Run: [Trayz] systemdll.exe

O4 - HKCU\..\Run: [new32] scanSYS.exe

O4 - Startup: PowerReg SchedulerV2.exe

O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)

Then click "Fix checked" and close Hijack This!.

* Run Fixwareout on the desktop.
* Click Next, then Install, make sure "Run fixit" is checked and click Finish.
* The fix will begin; follow the prompts.
* You will be asked to reboot your computer; please do so.
* Your system may take longer than usual to load; this is normal.
* Once the desktop loads a text will open (report.txt). We'll need that in a bit.

"Copy/paste" a new HijackThis! log file into this thread.

Also open this file with Notepad:

C:\fixwareout\report.txt

And paste it's contents into your next post.

:)
Post #3
I ran hijack this and this is the log it gave me. Any help would be greatly appreciated.


Logfile of HijackThis v1.99.1
Scan saved at 3:43:03 PM, on 11/9/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Picasa\PicasaMediaDetector.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\WINDOWS\FSScrCtl.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Program Files\Microsoft Works\wkssb.exe
C:\Documents and Settings\Erik Olson\Desktop\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/customize/ymsgr/defaul…://my.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: (no name) - {07E8C826-F3D2-0A98-880F-55AD659782D1} - (no file)
O2 - BHO: (no name) - {0DD6EC25-AC53-B55C-05B9-CC2337E1181D} - (no file)
O2 - BHO: (no name) - {1A73479F-2785-CF6C-EAB8-9261C8D3F612} - (no file)
O2 - BHO: (no name) - {226F74F7-94A2-FE96-7B23-B01DD29FD1E8} - (no file)
O2 - BHO: (no name) - {22B6DEDD-4D24-57B5-33E8-6815E283E89C} - (no file)
O2 - BHO: (no name) - {2FF6767A-BCD1-C176-FEEA-A1B2B283DFE0} - (no file)
O2 - BHO: (no name) - {339610FC-1BB2-852C-5A01-26345097177D} - (no file)
O2 - BHO: (no name) - {34B60CAB-5B85-EB60-AC45-01C5CE5BB7B6} - (no file)
O2 - BHO: (no name) - {35F1EB9B-2875-FC5F-C210-4FA3B45FC995} - (no file)
O2 - BHO: (no name) - {36B0002B-6BC8-BE39-74D5-234853739B76} - (no file)
O2 - BHO: (no name) - {3E33A085-99CA-2CF6-1BCB-436B044EF1EA} - (no file)
O2 - BHO: (no name) - {452CE4BD-6993-E987-C954-8D53652EE101} - (no file)
O2 - BHO: (no name) - {67C68C5F-44C8-5FF5-CE7D-54E907D6D21C} - (no file)
O2 - BHO: (no name) - {68DD277B-6241-E4F8-533B-24351756F228} - (no file)
O2 - BHO: (no name) - {6CBFD0D4-8E18-4C92-9311-A433DD87BDCF} - (no file)
O2 - BHO: (no name) - {7CE28F1A-C75D-E86A-7653-65342618DF9B} - (no file)
O2 - BHO: (no name) - {8D283F17-6393-2336-7062-61B53CA2D259} - (no file)
O2 - BHO: (no name) - {97FEFEA8-0DFD-A795-D6E2-12058F7344D4} - (no file)
O2 - BHO: (no name) - {A0813A07-907B-DF39-A0AC-C5AF4845657F} - (no file)
O2 - BHO: (no name) - {A5EC6E46-02A9-7AE8-E3A6-16A108479874} - (no file)
O2 - BHO: (no name) - {AADFB291-907E-B543-8BB5-06575F4D4539} - (no file)
O2 - BHO: (no name) - {B02CAEDE-8627-F248-B2CF-1194D2284B31} - (no file)
O2 - BHO: (no name) - {B2D8239B-D9D4-B84D-8A53-455904E50E45} - (no file)
O2 - BHO: (no name) - {B3445E12-83ED-4794-941D-CC18315D0931} - (no file)
O2 - BHO: (no name) - {C10E70B6-0A9C-EFB9-C902-4055C2D7F322} - (no file)
O2 - BHO: (no name) - {C49EE5EC-58A6-E279-05B8-E5C66D906219} - (no file)
O2 - BHO: (no name) - {C5844CBD-D015-394D-8C9A-B52CFEA94E45} - (no file)
O2 - BHO: (no name) - {C7E5DEDD-D9B0-41ED-404D-7720BA941F24} - (no file)
O2 - BHO: (no name) - {D094CD1B-DB37-FF6B-1763-238C43DCC156} - (no file)
O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)
O2 - BHO: (no name) - {D6D41230-B4B7-D9FC-EDDA-A50821C38898} - (no file)
O2 - BHO: (no name) - {D9FF992E-4A44-2FA1-F300-BC901D12966E} - (no file)
O2 - BHO: (no name) - {DC944D17-0461-1EDC-5D81-91490871C12D} - (no file)
O2 - BHO: (no name) - {DECE7F32-C7E7-28BF-BF37-5DA16FD8856B} - (no file)
O2 - BHO: (no name) - {E0715207-F0E3-3236-6233-7B76E86CE91E} - (no file)
O2 - BHO: (no name) - {E090AF9D-5BB5-11AF-EDC8-3CFC8DED11EC} - (no file)
O2 - BHO: (no name) - {E43F4B40-E371-59B7-F4A8-FF87ADFCEAF4} - (no file)
O2 - BHO: (no name) - {E45BD794-07C3-1757-F771-7B40593FF30F} - (no file)
O2 - BHO: (no name) - {E47F2716-713A-7A1B-77DF-2FD30AEB8673} - (no file)
O2 - BHO: (no name) - {E8A21F6F-CE35-C5F4-D125-77B47648F1A3} - (no file)
O2 - BHO: (no name) - {E92EFA08-05B6-5902-325B-EF61C5EC29A7} - (no file)
O2 - BHO: (no name) - {F002792A-6BA6-74D1-2786-E04D7F18E85E} - (no file)
O2 - BHO: (no name) - {F00ADCBD-1759-E8D3-3EB9-1B8318EAC367} - (no file)
O2 - BHO: (no name) - {F28B1256-59AF-E0AE-9F80-A3E878D7AC87} - (no file)
O2 - BHO: (no name) - {F6BCAEA7-7910-C92B-BD7B-CADE109FB093} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [LifeScape Media Detector] C:\Program Files\Picasa\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [prgsys0984] xwiz.exe
O4 - HKLM\..\Run: [sysconf16] Uint32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Preliminary] xwiz.exe
O4 - HKCU\..\Run: [Trayz] systemdll.exe
O4 - HKCU\..\Run: [new32] scanSYS.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Startup: Screen Saver Control.lnk = C:\WINDOWS\FSScrCtl.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
O4 - Global Startup: Camio Viewer 2000.lnk = C:\Program Files\Sierra Imaging\Image Expert 2000\IXApplet.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes12031.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes12031.dll
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O10 - Unknown file in Winsock LSP: c:\program files\winantivirus 2005\mailscan.dll
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O18 - Protocol hijack: mhtml -
O23 - Service: AVScheduler - Unknown owner - C:\Program Files\WinAntiVirus 2005\AVSchSvc.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WinAntivirus - Unknown owner - C:\Program Files\WinAntiVirus 2005\AVSvc.exe

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI