Can't Open Pages, Pdfs Cause Ie To Crash

I'm having numerous problems with pages not opening, try to download PDFs causes IE to freeze. Usually can't access Yahoo pages or email unless go through http://69.147.114.210/. Some sites work fine, others are slow, others work fine one day and then won't open at all other days. Thanks in advance for the help.

Logfile of HijackThis v1.99.1
Scan saved at 8:16:42 PM, on 8/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - C:\Program Files\McAfee\MSK\mcapbho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [MediaLifeService] "C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/games/web_…aploader_v6.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…065/mcfscan.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: ssqrq - C:\WINDOWS\system32\ssqrq.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: McAfee Application Installer Cleanup (0101821186415750) (0101821186415750mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP10182~1.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

Hi Jintan-

Thanks for getting back to me. Here is the silent runners log–


"Silent Runners.vbs", revision 52, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
———————————

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"LDM" = "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" ["Logitech Inc."]
"MSMSGS" = ""C:\Program Files\Messenger\msmsgs.exe" /background" [MS]
"ctfmon.exe" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"swg" = "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" ["Google Inc."]
"DellSupport" = ""C:\Program Files\DellSupport\DSAgnt.exe" /startup" ["Gteko Ltd."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"ehTray" = "C:\WINDOWS\ehome\ehtray.exe" [MS]
"SunJavaUpdateSched" = ""C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"" ["Sun Microsystems, Inc."]
"SigmatelSysTrayApp" = "stsystra.exe" ["SigmaTel, Inc."]
"IAAnotif" = "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" ["Intel Corporation"]
"ATIPTA" = ""C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"" ["ATI Technologies, Inc."]
"Logitech Hardware Abstraction Layer" = "KHALMNPR.EXE" ["Logitech Inc."]
"MediaLifeService" = ""C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"" ["Logitech Corp."]
"DLCCCATS" = "rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16" [MS]
"dla" = "C:\WINDOWS\system32\dla\tfswctrl.exe" ["Sonic Solutions"]
"SiteAdvisor" = "C:\Program Files\SiteAdvisor\6066\SiteAdv.exe" ["McAfee, Inc."]
"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Inc."]
"mcagent_exe" = "C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey" ["McAfee, Inc."]
"MSConfig" = "C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM…CLSID} = "Adobe PDF Reader Link Helper"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{089FD14D-132B-48FC-8861-0048AE113215}\(Default) = (no title provided)
-> {HKLM…CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\SiteAdvisor\6066\SiteAdv.dll" ["McAfee, Inc."]
{377C180E-6F0E-4D4C-980F-F45BD3D40CF4}\(Default) = "McAntiPhishingBHO"
-> {HKLM…CLSID} = "McAfee Phishing Filter"
\InProcServer32\(Default) = "C:\Program Files\McAfee\MSK\mcapbho.dll" ["McAfee, Inc."]
{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided)
-> {HKLM…CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]
{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}\(Default) = (no title provided)
-> {HKLM…CLSID} = "Yahoo! IE Services Button"
\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Common\yiesrvc.dll" ["Yahoo! Inc."]
{5CA3D70E-1895-11CF-8E15-001234567890}\(Default) = (no title provided)
-> {HKLM…CLSID} = "DriveLetterAccess"
\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["Sonic Solutions"]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM…CLSID} = "SSVHelper Class"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll" ["Sun Microsystems, Inc."]
{7DB2D5A0-7241-4E79-B68D-6309F01C5231}\(Default) = "scriptproxy"
-> {HKLM…CLSID} = "scriptproxy"
\InProcServer32\(Default) = "C:\Program Files\McAfee\VirusScan\scriptsn.dll" ["McAfee, Inc."]
{AA58ED58-01DD-4d91-8333-CF10577473F7}\(Default) = (no title provided)
-> {HKLM…CLSID} = "Google Toolbar Helper"
\InProcServer32\(Default) = "c:\program files\google\googletoolbar4.dll" ["Google Inc."]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}\(Default) = (no title provided)
-> {HKLM…CLSID} = "Google Toolbar Notifier BHO"
\InProcServer32\(Default) = "C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll" ["Google Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {HKLM…CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{7D5C4BDD-B015-4401-8731-1507B87DE297}" = "QBVersionTool"
-> {HKLM…CLSID} = "VersionShellExt Class"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Intuit\QuickBooks\QBVersionTool.dll" ["Intuit, Inc."]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {HKLM…CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]
"{5CA3D70E-1895-11CF-8E15-001234567890}" = "DriveLetterAccess"
-> {HKLM…CLSID} = "DriveLetterAccess"
\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["Sonic Solutions"]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
-> {HKLM…CLSID} = "Outlook File Icon Extension"
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\OLKFSTUB.DLL" [MS]
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"
-> {HKLM…CLSID} = "Portable Media Devices Menu"
\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]
"{5464D816-CF16-4784-B9F3-75C0DB52B499}" = "Yahoo! Mail"
-> {HKLM…CLSID} = "Yahoo! Mail Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Common\YMMAPI.dll" ["Yahoo! Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\
"WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
-> {HKLM…CLSID} = "WPDShServiceObj Class"
\InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
<> ssqrq\DLLName = "C:\WINDOWS\system32\ssqrq.dll" [file not found]

HKLM\Software\Classes\Folder\shellex\ColumnHandlers\
{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = "PDF Column Info"
-> {HKLM…CLSID} = "PDF Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll" ["Adobe Systems, Inc."]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
McCtxMenu\(Default) = "{01576F39-90DE-4D6E-A068-5B20C22BAAEE}"
-> {HKLM…CLSID} = "CtxMenu Class"
\InProcServer32\(Default) = "C:\Program Files\McAfee\VirusScan\mcctxmnu.dll" ["McAfee, Inc."]
Yahoo! Mail\(Default) = "{5464D816-CF16-4784-B9F3-75C0DB52B499}"
-> {HKLM…CLSID} = "Yahoo! Mail Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Common\YMMAPI.dll" ["Yahoo! Inc."]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
McCtxMenu\(Default) = "{01576F39-90DE-4D6E-A068-5B20C22BAAEE}"
-> {HKLM…CLSID} = "CtxMenu Class"
\InProcServer32\(Default) = "C:\Program Files\McAfee\VirusScan\mcctxmnu.dll" ["McAfee, Inc."]
PhotagSearch\(Default) = "{181ED3BC-91D2-4424-B8E1-922B8F55BF56}"
-> {HKLM…CLSID} = "Photags Search Handler Class"
\InProcServer32\(Default) = "C:\Program Files\PhoTags Express\PWSSearchHandler.dll" [empty string]


Group Policies {GPedit.msc branch and setting}:
———————————————–

Note: detected settings may not have any effect.

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\

"shutdownwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Shutdown: Allow system to be shut down without having to log on}

"undockwithoutlogon" = (REG_DWORD) hex:0x00000001
{Computer Configuration|Windows Settings|Security Settings|Local Policies|Security Options|
Devices: Allow undock without having to log on}

"InstallVisualStyle" = (REG_EXPAND_SZ) C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
{unrecognized setting}

"InstallTheme" = (REG_EXPAND_SZ) C:\WINDOWS\Resources\Themes\Royale.theme
{unrecognized setting}


Active Desktop and Wallpaper:
—————————–

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Documents and Settings\Joy Redden\My Documents\My Pictures\Picasa Edits\picasabackground.bmp"


Enabled Screen Saver:
———————

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\system32\scrnsave.scr" [MS]


Startup items in "Joy Redden" & "All Users" startup folders:
————————————————————

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
"Logitech Desktop Messenger" -> shortcut to: "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe -startup" ["Logitech Inc."]
"Logitech SetPoint" -> shortcut to: "C:\Program Files\Logitech\SetPoint\SetPoint.exe" ["Logitech Inc."]


Enabled Scheduled Tasks:
————————

"McDefragTask" -> launches: "c:\program files\mcafee\mqc\QcConsol.exe "C:\WINDOWS\system32\defrag.exe" C: -f" ["McAfee, Inc."]
"McQcTask" -> launches: "c:\program files\mcafee\mqc\QcConsol.exe 14 0" ["McAfee, Inc."]


Winsock2 Service Provider DLLs:
——————————-

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
————————————

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"
-> {HKLM…CLSID} = "&Google"
\InProcServer32\(Default) = "c:\program files\google\googletoolbar4.dll" ["Google Inc."]
"{F2CF5485-4E02-4F68-819C-B92DE9277049}"
-> {HKLM…CLSID} = "&Links"
\InProcServer32\(Default) = "C:\WINDOWS\system32\ieframe.dll" [MS]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = (no title provided)
-> {HKLM…CLSID} = "&Google"
\InProcServer32\(Default) = "c:\program files\google\googletoolbar4.dll" ["Google Inc."]
"{0BF43445-2F28-4351-9252-17FE6E806AA0}" = "McAfee SiteAdvisor"
-> {HKLM…CLSID} = "McAfee SiteAdvisor"
\InProcServer32\(Default) = "C:\Program Files\SiteAdvisor\6066\SiteAdv.dll" ["McAfee, Inc."]

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\

HKLM\Software\Classes\CLSID\{FE54FA40-D68C-11D2-98FA-00C0F0318AFE}\(Default) = "Real.com"
Implemented Categories\{00021494-0000-0000-C000-000000000046}\ [horizontal bar]
InProcServer32\(Default) = "C:\WINDOWS\system32\Shdocvw.dll" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}"
-> {HKLM…CLSID} = "Java Plug-in 1.6.0_02"
\InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll" ["Sun Microsystems, Inc."]

{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}\
"ButtonText" = "Yahoo! Services"
"CLSIDExtension" = "{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}"
-> {HKLM…CLSID} = "Yahoo! IE Services Button"
\InProcServer32\(Default) = "C:\Program Files\Yahoo!\Common\yiesrvc.dll" ["Yahoo! Inc."]

{AC9E2541-2814-11D5-BC6D-00B0D0A1DE45}\
"ButtonText" = "AIM"
"Exec" = "C:\Program Files\AIM\aim.exe" ["America Online, Inc."]

{CD67F990-D8E9-11D2-98FE-00C0F0318AFE}\
"ButtonText" = "Real.com"

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
——————————————————————

Ati HotKey Poller, Ati HotKey Poller, "C:\WINDOWS\system32\Ati2evxx.exe" ["ATI Technologies Inc."]
dlcc_device, dlcc_device, "C:\WINDOWS\system32\dlcccoms.exe -service" [empty string]
Intel® Matrix Storage Event Monitor, IAANTMon, "C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe" ["Intel Corporation"]
Machine Debug Manager, MDM, ""C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe"" [MS]
McAfee Network Agent, McNASvc, ""c:\program files\common files\mcafee\mna\mcnasvc.exe"" ["McAfee, Inc."]
McAfee Personal Firewall Service, MpfService, ""C:\Program Files\McAfee\MPF\MPFSrv.exe"" ["McAfee, Inc."]
McAfee Proxy Service, McProxy, "c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe" ["McAfee, Inc."]
McAfee Real-time Scanner, McShield, "C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe" ["McAfee, Inc."]
McAfee Services, mcmscsvc, "C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe" ["McAfee, Inc."]
McAfee SpamKiller Service, MSK80Service, ""C:\Program Files\McAfee\MSK\MskSrver.exe"" ["McAfee, Inc."]
McAfee SystemGuards, McSysmon, "C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe" ["McAfee, Inc."]
Media Center Extender Service, McrdSvc, "C:\WINDOWS\ehome\mcrdsvc.exe" [MS]
Media Center Receiver Service, ehRecvr, "C:\WINDOWS\eHome\ehRecvr.exe" [MS]
Media Center Scheduler Service, ehSched, "C:\WINDOWS\eHome\ehSched.exe" [MS]
SiteAdvisor Service, SiteAdvisor Service, "C:\Program Files\SiteAdvisor\6066\SAService.exe" ["McAfee, Inc."]
Viewpoint Manager Service, Viewpoint Manager Service, ""C:\Program Files\Viewpoint\Common\ViewpointService.exe"" ["Viewpoint Corporation"]


Print Monitors:
—————

HKLM\System\CurrentControlSet\Control\Print\Monitors\
Dell 924 Port\Driver = "dlcclmpm.DLL" [empty string]
Microsoft Shared Fax Monitor\Driver = "FXSMON.DLL" [MS]


———- (launch time: 2007-08-11 11:09:08)
<>: Suspicious data at a malware launch point.

+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ To search all directories of local fixed drives for DESKTOP.INI
DLL launch points, use the -supp parameter or answer "No" at the
first message box and "Yes" at the second message box.
———- (total run time: 84 seconds, including 23 seconds for message boxes)

Jintan-

Here is my updated HJ log.

Thanks for the help.


Logfile of HijackThis v1.99.1
Scan saved at 11:17:00 AM, on 8/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat

7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - C:\Program Files\McAfee\MSK\mcapbho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program

Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program

Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program

Files\SiteAdvisor\6066\SiteAdv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [MediaLifeService] "C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop

Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program

Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program

Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {BE319D04-18BD-4B34-AECC-EE7CB610FCA9} (BewitchedGameClass Control) -

http://download.games.yahoo.com/games/web_…itched/main.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -

http://download.games.yahoo.com/games/web_…aploader_v6.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) -

http://download.mcafee.com/molbin/iss-loc/…065/mcfscan.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop

Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: ssqrq - C:\WINDOWS\system32\ssqrq.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: McAfee Application Installer Cleanup (0101821186415750) (0101821186415750mcinstcleanup) - McAfee, Inc.

- C:\WINDOWS\TEMP10182~1.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel

Matrix Storage Manager\iaantmon.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program

Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program

Files\Viewpoint\Common\ViewpointService.exe

Here is the ComboFix report, followed by the SmitfraudFix report.



ComboFix 07-08-09.3 - "Joy Redden" 2007-08-12 10:54:41.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.165 [GMT -4:00]
* Created a new restore point


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\bszip.dll


((((((((((((((((((((((((( Files Created from 2007-07-12 to 2007-08-12 )))))))))))))))))))))))))))))))


2007-08-12 10:53 51,200 –a—— C:\WINDOWS\nircmd.exe
2007-08-06 20:48 d——– C:\WINDOWS\pss
2007-08-01 22:24 dr-h—– C:\DOCUME~1\JOYRED~1\APPLIC~1\yahoo!
2007-08-01 12:48 39,936 –a—— C:\WINDOWS\system32\hostmib.dll
2007-08-01 12:48 39,936 –a—— C:\WINDOWS\system32\dllcache\hostmib.dll
2007-08-01 12:46 33,792 –a—— C:\WINDOWS\system32\lmmib2.dll
2007-08-01 12:46 33,792 –a—— C:\WINDOWS\system32\dllcache\lmmib2.dll
2007-08-01 12:46 d——– C:\Inetpub
2007-07-22 14:59 21,840 –a—-t- C:\WINDOWS\system32\SIntfNT.dll
2007-07-22 14:59 17,212 –a—-t- C:\WINDOWS\system32\SIntf32.dll
2007-07-22 14:59 12,067 –a—-t- C:\WINDOWS\system32\SIntf16.dll
2007-07-22 14:57 d——– C:\Sierra
2007-07-20 21:35 d——– C:\Program Files\Activision
2007-07-19 12:00 d——– C:\DOCUME~1\JOYRED~1\APPLIC~1\MySpace
2007-07-19 11:59 d——– C:\Program Files\MySpace
2007-07-18 09:21 d——– C:\Program Files\MTV Networks
2007-07-18 09:01 d——– C:\Program Files\Windows Media Connect 2
2007-07-18 08:59 d——– C:\WINDOWS\system32\LogFiles
2007-07-18 08:59 d——– C:\WINDOWS\system32\drivers\UMDF


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-08-12 11:01 ——— d——– C:\Program Files\McAfee
2007-08-12 10:48 ——— d——– C:\Program Files\Dl_cats
2007-07-30 22:07 ——— d——– C:\Program Files\Common Files\McAfee
2007-07-30 20:30 ——— d–h—– C:\Program Files\InstallShield Installation Information
2007-07-30 20:29 ——— d——– C:\Program Files\MUSICMATCH
2007-07-24 12:02 33800 –a—— C:\WINDOWS\system32\drivers\mferkdk.sys
2007-07-24 07:40 79304 –a—— C:\WINDOWS\system32\drivers\mfeavfk.sys
2007-07-21 09:08 40488 –a—— C:\WINDOWS\system32\drivers\mfesmfk.sys
2007-07-21 09:08 35240 –a—— C:\WINDOWS\system32\drivers\mfebopk.sys
2007-07-21 09:08 201288 –a—— C:\WINDOWS\system32\drivers\mfehidk.sys
2007-07-21 08:28 ——— d——– C:\Program Files\Picasa2
2007-07-21 08:18 ——— d——– C:\DOCUME~1\JOYRED~1\APPLIC~1\SiteAdvisor
2007-07-13 21:37 ——— d——– C:\DOCUME~1\JOYRED~1\APPLIC~1\tunebite
2007-07-13 09:20 113952 –a—— C:\WINDOWS\system32\drivers\Mpfp.sys
2007-07-10 21:58 ——— d——– C:\Program Files\Battlezone II
2007-07-10 11:31 ——— d——– C:\Program Files\Google
2007-07-10 11:31 ——— d——– C:\Program Files\Common Files\AOL
2007-07-08 19:44 26 –a—— C:\WINDOWS\winstart.bat
2007-07-08 19:44 135 –a—— C:\WINDOWS\tmpcpyis.bat
2007-07-08 19:44 122 –a—— C:\WINDOWS\tmpdelis.bat
2007-07-04 17:28 ——— d——– C:\Program Files\SiteAdvisor
2007-07-03 11:24 ——— d——– C:\Program Files\AIM
2007-07-02 19:35 ——— d——– C:\DOCUME~1\JOYRED~1\APPLIC~1\McAfee
2007-06-28 09:32 55088 –a—— C:\DOCUME~1\JOYRED~1\APPLIC~1\GDIPFONTCACHEV1.DAT
2007-05-16 11:12 86528 ——— C:\WINDOWS\system32\dllcache\directdb.dll
2007-05-16 11:12 85504 ——— C:\WINDOWS\system32\dllcache\wabimp.dll
2007-05-16 11:12 683520 ——— C:\WINDOWS\system32\inetcomm.dll
2007-05-16 11:12 683520 ——— C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-05-16 11:12 510976 ——— C:\WINDOWS\system32\dllcache\wab32.dll
2007-05-16 11:12 1314816 ——— C:\WINDOWS\system32\dllcache\msoe.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{377C180E-6F0E-4D4C-980F-F45BD3D40CF4}]
2007-07-27 06:20 324936 –a—— C:\Program Files\McAfee\MSK\mcapbho.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 16:01]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"SigmatelSysTrayApp"="stsystra.exe" [2005-03-23 02:20 C:\WINDOWS\stsystra.exe]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-06-17 09:56]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 23:05]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2005-05-20 15:46 C:\WINDOWS\KHALMNPR.Exe]
"MediaLifeService"="C:\Program Files\Logitech\MediaLife\MediaLifeService.exe" [2005-05-12 22:23]
"DLCCCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll" [2005-06-07 08:38]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-05-31 06:33]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6066\SiteAdv.exe" [2007-01-17 15:24]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 09:41]
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-04 02:33]
"MSConfig"="C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2005-09-26 20:34]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-23 11:20]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 12:24]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 07:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-06 22:37]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 11:09]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MySpaceIM"=C:\Program Files\MySpace\IM\MySpaceIM.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-23 11:20:37]
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2005-12-29 16:37:21]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=C:\WINDOWS\pss\Digital Line Detect.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=C:\WINDOWS\pss\QuickBooks Update Agent.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dlccmon.exe]
"C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
"C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
"c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
"C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
C:\Program Files\Picasa2\PicasaMediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

R0 iastor;Intel AHCI Controller;C:\WINDOWS\system32\drivers\iastor.sys
R1 MPFP;MPFP;C:\WINDOWS\system32\Drivers\Mpfp.sys
R3 e1express;Intel® PRO/1000 PCI Express Network Connection Driver;C:\WINDOWS\system32\DRIVERS\e1e5132.sys
R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\LHidKE.Sys
R3 LMouKE;Logitech SetPoint Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
R3 tbhsd;Tunebite High-Speed Dubbing;C:\WINDOWS\system32\drivers\tbhsd.sys


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
AutoRun\command- E:\setup.exe


Contents of the 'Scheduled Tasks' folder
2007-07-15 05:19:37 C:\WINDOWS\Tasks\McDefragTask.job - c:\program files\mcafee\mqc\QcConsol.exe
2007-08-01 05:00:51 C:\WINDOWS\Tasks\McQcTask.job - c:\program files\mcafee\mqc\QcConsol.exe

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-12 11:01:50
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden registry entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-08-12 11:07:17 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-08-12 11:06

— E O F —






SmitFraudFix v2.211

Scan done at 11:16:23.75, Sun 08/12/2007
Run from C:\Documents and Settings\Joy Redden\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcvsshld.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Joy Redden


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Joy Redden\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\JOYRED~1\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel® PRO/1000 PL Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 207.172.3.8
DNS Server Search Order: 207.172.3.9

HKLM\SYSTEM\CCS\Services\Tcpip\..\{4EC2BDF9-FEFA-4428-A444-8A699247E036}: DhcpNameServer=[removed] [removed]
HKLM\SYSTEM\CS1\Services\Tcpip\..\{4EC2BDF9-FEFA-4428-A444-8A699247E036}: DhcpNameServer=[removed] [removed]
HKLM\SYSTEM\CS3\Services\Tcpip\..\{4EC2BDF9-FEFA-4428-A444-8A699247E036}: DhcpNameServer=[removed] [removed]
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

Jintan-

I uninstalled Logitech Desktop Messenger and Viewpoint Manager. When I ran HijackThis, these first 2 items did not show up, only the third…

Close Internet Explorer and all running programs and run a scan in HijackThis. Place a check next to all of the following lines, then select “Fix Checked” and close HijackThis.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com

I checked the box next to the R1 item, fixed that, and continued on from there.

When I ran BitDefender, it responded that it failed to update virus definitions but it had the option of continuing the scan anyways. I tried to run the scan, it responded saying it had failed. I tried running the scan again, again failed to update virus definitions, this time continuing with the scan worked.

Here is the BitDefender log. Thanks again for all the help.

BitDefender Online Scanner



Scan report generated at: Sun, Aug 12, 2007 - 20:31:54





Scan path: C:\;D:\;E:\;







Statistics

Time
00:48:45

Files
136381

Folders
8767

Boot Sectors
4

Archives
3038

Packed Files
267




Results

Identified Viruses
0

Infected Files
0

Suspect Files
1

Warnings
0

Disinfected
0

Deleted Files
1




Engines Info

Virus Definitions
656201

Engine build
AVCORE v1.0 (build 2410) (i386) (Jun 12 2007 21:08:27)

Scan plugins
2

Archive plugins
10

Unpack plugins
2

E-mail plugins
1

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP573\A0060857.exe
Suspected of: Trojan.Downloader.Gen

C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP573\A0060857.exe
Disinfection failed

C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP573\A0060857.exe
Deleted

C:\WINDOWS\Fonts\micross.ttf
Clean

C:\WINDOWS\Fonts\modern.fon
Clean

C:\WINDOWS\Fonts\MSMINCHO.TTF
Clean

C:\WINDOWS\Fonts\MTCORSVA.TTF
Clean

C:\WINDOWS\Fonts\MTEXTRA.TTF
Clean

C:\WINDOWS\Fonts\mvboli.ttf
Clean

C:\WINDOWS\Fonts\OCRA2_P.TTF
Clean

C:\WINDOWS\Fonts\OCRBMT.TTF
Clean

C:\WINDOWS\Fonts\OUTLOOK.TTF
Clean

C:\WINDOWS\Fonts\OZHANDIN.TTF
Clean

C:\WINDOWS\Fonts\OzHandRm.ttf
Clean

C:\WINDOWS\Fonts\pala.ttf
Clean

C:\WINDOWS\Fonts\palab.ttf
Clean

C:\WINDOWS\Fonts\palabi.ttf
Clean

C:\WINDOWS\Fonts\palai.ttf
Clean

C:\WINDOWS\Fonts\poornut_.ttf
Clean

C:\WINDOWS\Fonts\porkh.ttf
Clean

C:\WINDOWS\Fonts\porky's.ttf
Clean

C:\WINDOWS\Fonts\PSTRBODN.TTF
Clean

C:\WINDOWS\Fonts\pusss.ttf
Clean

C:\WINDOWS\Fonts\pusssa.ttf
Clean

C:\WINDOWS\Fonts\QT2C_B.TTF
Clean

C:\WINDOWS\Fonts\QT2C_I.TTF
Clean

C:\WINDOWS\Fonts\QT2C_P.TTF
Clean

C:\WINDOWS\Fonts\QT2M_P.TTF
Clean

C:\WINDOWS\Fonts\QT2PI_P.TTF
Clean

C:\WINDOWS\Fonts\QT2_B.TTF
Clean

C:\WINDOWS\Fonts\QT2_I.TTF
Clean

C:\WINDOWS\Fonts\QT2_P.TTF
Clean

C:\WINDOWS\Fonts\raavi.ttf
Clean

C:\WINDOWS\Fonts\roman.fon
Clean

C:\WINDOWS\Fonts\s017016d.ttf
Clean

C:\WINDOWS\Fonts\s017036d.ttf
Clean

C:\WINDOWS\Fonts\script.fon
Clean

C:\WINDOWS\Fonts\SCRIPTBL.TTF
Clean

C:\WINDOWS\Fonts\segmcr.ttf
Clean

C:\WINDOWS\Fonts\segmcsb.ttf
Clean

C:\WINDOWS\Fonts\sere1257.fon
Clean

C:\WINDOWS\Fonts\serf1257.fon
Clean

C:\WINDOWS\Fonts\SERIFAB.TTF
Clean

C:\WINDOWS\Fonts\SERIFAI.TTF
Clean

C:\WINDOWS\Fonts\SERIFAN.TTF
Clean

C:\WINDOWS\Fonts\SERIFAT.TTF
Clean

C:\WINDOWS\Fonts\SerifBd_.ttf
Clean

C:\WINDOWS\Fonts\serife.fon
Clean

C:\WINDOWS\Fonts\serifee.fon
Clean

C:\WINDOWS\Fonts\serifeg.fon
Clean

C:\WINDOWS\Fonts\serifer.fon
Clean

C:\WINDOWS\Fonts\serifet.fon
Clean

C:\WINDOWS\Fonts\seriff.fon
Clean

C:\WINDOWS\Fonts\seriffe.fon
Clean

C:\WINDOWS\Fonts\seriffg.fon
Clean

C:\WINDOWS\Fonts\seriffr.fon
Clean

C:\WINDOWS\Fonts\serifft.fon
Clean

C:\WINDOWS\Fonts\SerifIt_.ttf
Clean

C:\WINDOWS\Fonts\SerifRm_.ttf
Clean

C:\WINDOWS\Fonts\SerifTh_.ttf
Clean

C:\WINDOWS\Fonts\shruti.ttf
Clean

C:\WINDOWS\Fonts\SIMSUN.TTF
Clean

C:\WINDOWS\Fonts\smae1257.fon
Clean

C:\WINDOWS\Fonts\smaf1257.fon
Clean

C:\WINDOWS\Fonts\smalle.fon
Clean

C:\WINDOWS\Fonts\smallee.fon
Clean

C:\WINDOWS\Fonts\smalleg.fon
Clean

C:\WINDOWS\Fonts\smaller.fon
Clean

C:\WINDOWS\Fonts\smallet.fon
Clean

C:\WINDOWS\Fonts\smallf.fon
Clean

C:\WINDOWS\Fonts\smallfe.fon
Clean

C:\WINDOWS\Fonts\smallfg.fon
Clean

C:\WINDOWS\Fonts\smallfr.fon
Clean

C:\WINDOWS\Fonts\smallft.fon
Clean

C:\WINDOWS\Fonts\ssee1257.fon
Clean

C:\WINDOWS\Fonts\ssef1257.fon
Clean

C:\WINDOWS\Fonts\sserife.fon
Clean

C:\WINDOWS\Fonts\sserifee.fon
Clean

C:\WINDOWS\Fonts\sserifeg.fon
Clean

C:\WINDOWS\Fonts\sserifer.fon
Clean

C:\WINDOWS\Fonts\sserifet.fon
Clean

C:\WINDOWS\Fonts\sseriff.fon
Clean

C:\WINDOWS\Fonts\sseriffe.fon
Clean

C:\WINDOWS\Fonts\sseriffg.fon
Clean

C:\WINDOWS\Fonts\sseriffr.fon
Clean

C:\WINDOWS\Fonts\sserifft.fon
Clean

C:\WINDOWS\Fonts\STAC222N.TTF
Clean

C:\WINDOWS\Fonts\Stacc222.ttf
Clean

C:\WINDOWS\Fonts\Sw911ExC.ttf
Clean

C:\WINDOWS\Fonts\SWZ911XC.TTF
Clean

C:\WINDOWS\Fonts\sylfaen.ttf
Clean

C:\WINDOWS\Fonts\symbol.ttf
Clean

C:\WINDOWS\Fonts\symbole.fon
Clean

C:\WINDOWS\Fonts\tahoma.ttf
Clean

C:\WINDOWS\Fonts\tahomabd.ttf
Clean

C:\WINDOWS\Fonts\TahomSCB.TTF
Clean

C:\WINDOWS\Fonts\times.ttf
Clean

C:\WINDOWS\Fonts\timesbd.ttf
Clean

C:\WINDOWS\Fonts\timesbi.ttf
Clean

C:\WINDOWS\Fonts\timesi.ttf
Clean

C:\WINDOWS\Fonts\trebuc.ttf
Clean

C:\WINDOWS\Fonts\trebucbd.ttf
Clean

C:\WINDOWS\Fonts\trebucbi.ttf
Clean

C:\WINDOWS\Fonts\trebucit.ttf
Clean

C:\WINDOWS\Fonts\tunga.ttf
Clean

C:\WINDOWS\Fonts\TypoUpri.ttf
Clean

C:\WINDOWS\Fonts\TYPOUPRN.TTF
Clean

C:\WINDOWS\Fonts\Verdana.TTF
Clean

C:\WINDOWS\Fonts\Verdanab.TTF
Clean

C:\WINDOWS\Fonts\Verdanai.TTF
Clean

C:\WINDOWS\Fonts\Verdanaz.TTF
Clean

C:\WINDOWS\Fonts\vga737.fon
Clean

C:\WINDOWS\Fonts\vga775.fon
Clean

C:\WINDOWS\Fonts\vga850.fon
Clean

C:\WINDOWS\Fonts\vga852.fon
Clean

C:\WINDOWS\Fonts\vga855.fon
Clean

C:\WINDOWS\Fonts\vga857.fon
Clean

C:\WINDOWS\Fonts\vga860.fon
Clean

C:\WINDOWS\Fonts\vga863.fon
Clean

C:\WINDOWS\Fonts\vga865.fon
Clean

C:\WINDOWS\Fonts\vga866.fon
Clean

C:\WINDOWS\Fonts\vga869.fon
Clean

C:\WINDOWS\Fonts\vgaf1257.fon
Clean

C:\WINDOWS\Fonts\vgafix.fon
Clean

C:\WINDOWS\Fonts\vgafixe.fon
Clean

C:\WINDOWS\Fonts\vgafixg.fon
Clean

C:\WINDOWS\Fonts\vgafixr.fon
Clean

C:\WINDOWS\Fonts\vgafixt.fon
Clean

C:\WINDOWS\Fonts\vgaoem.fon
Clean

C:\WINDOWS\Fonts\vgas1257.fon
Clean

C:\WINDOWS\Fonts\vgasys.fon
Clean

C:\WINDOWS\Fonts\vgasyse.fon
Clean

C:\WINDOWS\Fonts\vgasysg.fon
Clean

C:\WINDOWS\Fonts\vgasysr.fon
Clean

C:\WINDOWS\Fonts\vgasyst.fon
Clean

C:\WINDOWS\Fonts\vrinda.ttf
Clean

C:\WINDOWS\Fonts\webdings.ttf
Clean

C:\WINDOWS\Fonts\weltu.ttf
Clean

C:\WINDOWS\Fonts\wingding.ttf
Clean

C:\WINDOWS\Fonts\WINGDNG2.TTF
Clean

C:\WINDOWS\Fonts\WINGDNG3.TTF
Clean

C:\WINDOWS\Fonts\WPCE08N_.TTF
Clean

C:\WINDOWS\Fonts\WPCO01NA.TTF
Clean

C:\WINDOWS\Fonts\WPCO01NB.TTF
Clean

C:\WINDOWS\Fonts\WPCO03N_.TTF
Clean

C:\WINDOWS\Fonts\WPCO08N_.TTF
Clean

C:\WINDOWS\Fonts\WPDV09N_.TTF
Clean

C:\WINDOWS\Fonts\WPHV01NA.TTF
Clean

C:\WINDOWS\Fonts\WPHV01NB.TTF
Clean

C:\WINDOWS\Fonts\WPHV02N_.TTF
Clean

C:\WINDOWS\Fonts\WPHV04N_.TTF
Clean

C:\WINDOWS\Fonts\WPHV05NA.TTF
Clean

C:\WINDOWS\Fonts\WPHV05NB.TTF
Clean

C:\WINDOWS\Fonts\WPHV06NA.TTF
Clean

C:\WINDOWS\Fonts\WPHV06NB.TTF
Clean

C:\WINDOWS\Fonts\WPHV07NA.TTF
Clean

C:\WINDOWS\Fonts\WPHV07NB.TTF
Clean

C:\WINDOWS\Fonts\WPHV08N_.TTF
Clean

C:\WINDOWS\Fonts\WPHV11N_.TTF
Clean

C:\WINDOWS\Fonts\WPRO01NA.TTF
Clean

C:\WINDOWS\Fonts\WPRO01NB.TTF
Clean

C:\WINDOWS\Fonts\WPRO10NA.TTF
Clean

C:\WINDOWS\Fonts\WPRO10NB.TTF
Clean

C:\WINDOWS\Fonts\WPSI13N_.TTF
Clean

C:\WINDOWS\Fonts\WPSI14N_.TTF
Clean

C:\WINDOWS\Fonts\wqtcb_tt.ttf
Clean

C:\WINDOWS\Fonts\wqtci_tt.ttf
Clean

C:\WINDOWS\Fonts\wqtcp_tt.ttf
Clean

C:\WINDOWS\Fonts\wqtm_p_t.ttf
Clean

C:\WINDOWS\Fonts\wqt_b_tt.ttf
Clean

C:\WINDOWS\Fonts\wqt_i_tt.ttf
Clean

C:\WINDOWS\Fonts\wqt_pi_t.ttf
Clean

C:\WINDOWS\Fonts\wqt_p_tt.ttf
Clean

C:\WINDOWS\Fonts\wst_czec.fon
Clean

C:\WINDOWS\Fonts\wst_engl.fon
Clean

C:\WINDOWS\Fonts\wst_fren.fon
Clean

C:\WINDOWS\Fonts\wst_germ.fon
Clean

C:\WINDOWS\Fonts\wst_ital.fon
Clean

C:\WINDOWS\Fonts\wst_span.fon
Clean

C:\WINDOWS\Fonts\wst_swed.fon
Clean

C:\WINDOWS\Fonts\ZapE711B.ttf
Clean

C:\WINDOWS\Fonts\ZapE711I.ttf
Clean

C:\WINDOWS\Fonts\ZapE711R.ttf
Clean

C:\WINDOWS\Fonts\ZapE711t.ttf
Clean

C:\WINDOWS\Fonts\ZEL711BI.TTF
Clean

C:\WINDOWS\Fonts\ZELP711B.TTF
Clean

C:\WINDOWS\Fonts\ZELP711I.TTF
Clean

C:\WINDOWS\Fonts\ZELP711N.TTF
Clean

C:\WINDOWS\Fonts\ZURCHE.TTF
Clean

C:\WINDOWS\Fonts\ZuricExt.ttf
Clean

C:\WINDOWS\ftpcache\
Clean

C:\WINDOWS\Gone Fishing.bmp
Clean

C:\WINDOWS\Greenstone.bmp
Clean

C:\WINDOWS\Help\
Clean

C:\WINDOWS\Help\access.chm
Clean

C:\WINDOWS\Help\access.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\access.chm=>/access_cpanel_overview.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_filterkeys_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_filterkeys_settings.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_hearing_cc.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_highcontrast_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_highcontrast_settings.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_keyboard_help.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_mobility_cc.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_mousekeys_howtoclick.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_mousekeys_howtodrag.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_mousekeys_howtomove.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_mousekeys_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_mousekeys_settings.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_serialkeys_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_serialkeys.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_shortcut_keys.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_showsounds_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_soundsentry_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_stickykeys_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_stickykeys_settings.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_timeout.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_togglekeys_turnon.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_vision_cc.htm
Clean

C:\WINDOWS\Help\access.chm=>/access_warn_onoff.htm
Clean

C:\WINDOWS\Help\access.chm=>/accessibility_options_installs.htm
Clean

C:\WINDOWS\Help\access.chm=>/accessibility_overview.htm
Clean

C:\WINDOWS\Help\access.chm=>/AccessOptions_ct.htm
Clean

C:\WINDOWS\Help\access.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\access.chm=>/access.hhc
Clean

C:\WINDOWS\Help\access.hlp
Clean

C:\WINDOWS\Help\accessib.chm
Clean

C:\WINDOWS\Help\accessib.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\accessib.chm=>/audiodoc.htm
Clean

C:\WINDOWS\Help\accessib.chm=>/deaf.htm
Clean

C:\WINDOWS\Help\accessib.chm=>/moreinfo.htm
Clean

C:\WINDOWS\Help\accessib.chm=>/thirdparty.htm
Clean

C:\WINDOWS\Help\accessib.chm=>/acc1.htm
Clean

C:\WINDOWS\Help\accessib.chm=>/winfwkgp.htm
Clean

C:\WINDOWS\Help\accessib.chm=>/accessib.hhc
Clean

C:\WINDOWS\Help\accessib.chm=>/accessib.hhk
Clean

C:\WINDOWS\Help\accessib.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\accessib.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\accessib.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\accessib.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\accessib.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\accessib.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\accessib.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\accessib.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\accessib.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\acc_dis.chm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\acc_dis.chm=>/acc_dis_audio.htm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/acc_dis_blindproducts.htm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/acc_dis_bought_in_us.htm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/acc_dis_custom_nt.htm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/acc_dis_hearing.htm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/acc_dis_moreinfo.htm
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\acc_dis.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\acc_dis.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\aclui.chm
Clean

C:\WINDOWS\Help\aclui.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_sec_tab.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_applyonto_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_con_TN.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_con_und.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_con_use.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_effective_perm.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_folder_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_how_to_node.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_inherit_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_modify_inherited_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_set_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_set_special_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_special_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_take_ownership.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_topnode.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/acl_view_effective_permissions.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsImpACBP.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsImpLocScen.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsUnObject.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsUnOwn.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsUnPermsExp.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsUnPermsSecDesc.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/sag_SEconceptsUnLocAC.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/aclui_well_known_SID.htm
Clean

C:\WINDOWS\Help\aclui.chm=>/ACL.hhc
Clean

C:\WINDOWS\Help\aclui.chm=>/aclui.hhk
Clean

C:\WINDOWS\Help\aclui.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\aclui.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\aclui.hlp
Clean

C:\WINDOWS\Help\addremov.chm
Clean

C:\WINDOWS\Help\addremov.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\addremov.chm=>/win_addprog_window_component.htm
Clean

C:\WINDOWS\Help\addremov.chm=>/win_addprog_remove_software.htm
Clean

C:\WINDOWS\Help\addremov.chm=>/win_addprog_install_program.htm
Clean

C:\WINDOWS\Help\addremov.chm=>/win_addprog_install_windows_component.htm
Clean

C:\WINDOWS\Help\addremov.chm=>/win_addprog_install_from_Internet.htm
Clean

C:\WINDOWS\Help\addremov.chm=>/win_addprog_install_network_program.htm
Clean

C:\WINDOWS\Help\addremov.chm=>/addremov.hhc
Clean

C:\WINDOWS\Help\addremov.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\addremov.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\addremov.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\addremov.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\addremov.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\addremov.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\addremov.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\addremov.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\addremov.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\addremov.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\addremov.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\addremov.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\addremov.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\ade.hlp
Clean

C:\WINDOWS\Help\admtools.chm
Clean

C:\WINDOWS\Help\admtools.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\admtools.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/AddRemHrdw.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/AddRemProg.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/camera.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Certmgr.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Compmgmt.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/DataSources.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/datetime.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/DevMgr.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/diskclean.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/DiskDefrag.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Diskman.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Display.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Eventvwr.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/FolderOpt.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Fonts.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/GameCtrl.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/IndexServ.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/InfraRed.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Internet.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Keyboard.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/keyring.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Mmc.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Mouse.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/MyCompInfo.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/NetConnect.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/NetDiag.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/Perform.htm
Clean

C:\WINDOWS\Help\admtools.chm=>/PowerOpt.htm
Clean

C:\WINDOWS\Help\adprop.hlp
Clean

C:\WINDOWS\Help\agt0405.hlp
Clean

C:\WINDOWS\Help\agt0406.hlp
Clean

C:\WINDOWS\Help\agt0407.hlp
Clean

C:\WINDOWS\Help\agt0408.hlp
Clean

C:\WINDOWS\Help\agt0409.hlp
Clean

C:\WINDOWS\Help\agt040b.hlp
Clean

C:\WINDOWS\Help\agt040c.hlp
Clean

C:\WINDOWS\Help\agt040e.hlp
Clean

C:\WINDOWS\Help\agt0410.hlp
Clean

C:\WINDOWS\Help\agt0413.hlp
Clean

C:\WINDOWS\Help\agt0414.hlp
Clean

C:\WINDOWS\Help\agt0415.hlp
Clean

C:\WINDOWS\Help\agt0416.hlp
Clean

C:\WINDOWS\Help\agt0419.hlp
Clean

C:\WINDOWS\Help\agt041d.hlp
Clean

C:\WINDOWS\Help\agt041f.hlp
Clean

C:\WINDOWS\Help\agt0816.hlp
Clean

C:\WINDOWS\Help\agt0c0a.hlp
Clean

C:\WINDOWS\Help\apps.chm
Clean

C:\WINDOWS\Help\apps.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20812.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_21147.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_21148.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20504.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20781.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20896.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_30001.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_21011.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_21010.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20669.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20056.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20947.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20948.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20640.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_21086.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20814.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20547.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20840.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20649.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_21138.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20049.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20849.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20851.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20949.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20700.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20782.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20704.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20038.htm
Clean

C:\WINDOWS\Help\apps.chm=>/idh_w2_20094.htm
Clean

C:\WINDOWS\Help\apps_sp.chm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30001_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_20669_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_20704_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21232_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21215_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30022_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30023_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21144_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_20714_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30002_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30003_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21246_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21193_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21321_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30019_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30004_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30030_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30031_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30026_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30027_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_20760_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30005_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21322_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_20917_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21174_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21176_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21175_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_21235_401.htm
Clean

C:\WINDOWS\Help\apps_sp.chm=>/idh_w2_30032_401.htm
Clean

C:\WINDOWS\Help\article.chm
Clean

C:\WINDOWS\Help\article.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\article.chm=>/alttext.xml
Clean

C:\WINDOWS\Help\article.chm=>/article.css
Clean

C:\WINDOWS\Help\article.chm=>/gloss.dtd
Clean

C:\WINDOWS\Help\article.chm=>/Gloss.xsl
Clean

C:\WINDOWS\Help\article.chm=>/Glossary.xml
Clean

C:\WINDOWS\Help\article.chm=>/shared.js
Clean

C:\WINDOWS\Help\article.chm=>/adp_intro.htm
Clean

C:\WINDOWS\Help\article.chm=>/adp_learn.htm
Clean

C:\WINDOWS\Help\article.chm=>/adp_organize.htm
Clean

C:\WINDOWS\Help\article.chm=>/adp_quickstart.htm
Clean

C:\WINDOWS\Help\article.chm=>/adp_share.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1photo_ss02.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1photo_ss03.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1photo_ss04.htm
Clean

C:\WINDOWS\Help\article.chm=>/firewall_article_main.htm
Clean

C:\WINDOWS\Help\article.chm=>/ap_freshen.htm
Clean

C:\WINDOWS\Help\article.chm=>/ap_intro.htm
Clean

C:\WINDOWS\Help\article.chm=>/ap_point.htm
Clean

C:\WINDOWS\Help\article.chm=>/ap_suit.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1person_ss01.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1person_ss02.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1person_ss03.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1person_ss04.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1person_ss05.htm
Clean

C:\WINDOWS\Help\article.chm=>/US1person_ss06.htm
Clean

C:\WINDOWS\Help\article.chm=>/avj_intro.htm
Clean

C:\WINDOWS\Help\article.chm=>/avj_mix.htm
Clean

C:\WINDOWS\Help\article.chm=>/avj_personalize.htm
Clean

C:\WINDOWS\Help\article.chm=>/avj_portable.htm
Clean

C:\WINDOWS\Help\atm.chm
Clean

C:\WINDOWS\Help\atm.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_ConfigureAtmArpMars.htm
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_ConfigureIpOverAtm.htm
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_ConfigureLaneClient.htm
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_CreatePvc.htm
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_EnableIpOverAtm.htm
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_InstallAdapter.htm
Clean

C:\WINDOWS\Help\atm.chm=>/sag_ATM_pro_VerifyConnection.htm
Clean

C:\WINDOWS\Help\atm.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\atm.chm=>/ATM_pro_CreateEPvc.htm
Clean

C:\WINDOWS\Help\atm.chm=>/atm.hhc
Clean

C:\WINDOWS\Help\atm.chm=>/atm.hhk
Clean

C:\WINDOWS\Help\atm.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\atm.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\atm.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\Help\atm.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\Help\atm.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\atm.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\atm.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\atm.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\atm.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\atm.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\atm.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\atm.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\atm.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\atm.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\atm.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\atm.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\audiocdc.hlp
Clean

C:\WINDOWS\Help\audit.chm
Clean

C:\WINDOWS\Help\audit.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\audit.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsAudit.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsImpAud.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsImpAudBP.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsUnAudDS.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsUnAudEvent.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsUnAudit.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsUnAudLoc.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEprocsAudit.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEprocsAuditing.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEprocsSecLog.htm
Clean

C:\WINDOWS\Help\audit.chm=>/auditTN.htm
Clean

C:\WINDOWS\Help\audit.chm=>/sag_SEconceptsUnACLaud.htm
Clean

C:\WINDOWS\Help\audit.chm=>/acl_applyonto_auditing.htm
Clean

C:\WINDOWS\Help\audit.chm=>/acl_audit_file_folder.htm
Clean

C:\WINDOWS\Help\audit.chm=>/audit_object_access.htm
Clean

C:\WINDOWS\Help\audit.chm=>/acl_inherit_auditing.htm
Clean

C:\WINDOWS\Help\audit.chm=>/audit_operations_audit.htm
Clean

C:\WINDOWS\Help\audit.chm=>/audit_con.htm
Clean

C:\WINDOWS\Help\audit.chm=>/audit_overview.htm
Clean

C:\WINDOWS\Help\audit.chm=>/audit.hhc
Clean

C:\WINDOWS\Help\audit.chm=>/auditW.hhk
Clean

C:\WINDOWS\Help\audit.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\audit.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\audit.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\Help\audit.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\Help\audit.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\audit.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\audit.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\bckg.chm
Clean

C:\WINDOWS\Help\bckg.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\bckg.chm=>/backcontents.hhc
Clean

C:\WINDOWS\Help\bckg.chm=>/backindex.hhk
Clean

C:\WINDOWS\Help\bckg.chm=>/zone.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/chatabbreviations.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/chattingwithotherplayers.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/chatturningchatoff.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/chatturningchaton.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/continuingtoplaywithsame.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/dialogboxkeyboardshortcuts.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/findingotherplayers.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/gameplayboardandpieces.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/gameplayhowtowin.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/gameplayplayingthegame.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/gameplayusingthedice.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/glossary1.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/keyboardaccess.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/keyboardfocus.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/movingonandoffthebar.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/movingstones.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/naturals.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/netiquette.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/otherkeystrokes.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/scorebackgammon.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/scoredoublingbutton.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/scoregammon.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/scoreresigning.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/strategy.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/Troubleshooting.htm
Clean

C:\WINDOWS\Help\bckg.chm=>/bearingoff.htm
Clean

C:\WINDOWS\Help\blurbs.chm
Clean

C:\WINDOWS\Help\blurbs.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_core_tasks.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_date_time.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_email_and_web.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_Games.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_handwriting_speech.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_home_networking.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_home_small_business.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_Music_and_sounds.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_network_dialup.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_network_printers.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_networking.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_Photos_and_digital_images.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_Printing.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_programs_included_with_Windows.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_remote_desktop.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/2ndlvl_video.htm
Clean

C:\WINDOWS\Help\blurbs.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\blurbs.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\blurbs.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\blurbs.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\blurbs.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\blurbs.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\blurbs.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\blurbs.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\blurbs.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\blurbs.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\blurbs.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\blurbs.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\blurbs.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\blutooth.chm
Clean

C:\WINDOWS\Help\blutooth.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_create_internet_conn.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_dun_overview.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_enable_discovery.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_enable_services_wireless.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_cellphone.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_keyboard.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_mouse.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_printer.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_wireless_cpl.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_overview.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_overview_install.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_pan_connect_device.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_pan_description.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_pan_overview.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_services_overview.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_tshoot_cant_connect.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_tshoot_cant_find_device.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_tshoot_cant_find_service.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_tshoot_connection_drop.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_passkeys.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/Glossary.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_send_receive_files.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_pocketpc.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_palm.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_vcom_overview.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_change_device_name.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/bluetooth_install_modem.htm
Clean

C:\WINDOWS\Help\blutooth.chm=>/Bluetooth_security.htm
Clean

C:\WINDOWS\Help\bnts.dll
Clean

C:\WINDOWS\Help\bootcons.chm
Clean

C:\WINDOWS\Help\bootcons.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_systemroot.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_enable.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_fixboot.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_fixmbr.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_logon.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_map.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_disable.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_exit.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_batch.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_diskpart.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_listsvc.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_type.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_chdir.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_chkdsk.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_cls.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_copy.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_del.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_dir.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_format.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_help.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_mkdir.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_more.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_rename.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_rmdir.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_attrib.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_expand.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/bootcons_set.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\bootcons.chm=>/recovery_run_console.htm
Clean

C:\WINDOWS\Help\brief.chm
Clean

C:\WINDOWS\Help\brief.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\brief.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\brief.chm=>/using_bfc_and_csc.htm
Clean

C:\WINDOWS\Help\brief.chm=>/bfc_create_new.htm
Clean

C:\WINDOWS\Help\brief.chm=>/bfc_floppy.htm
Clean

C:\WINDOWS\Help\brief.chm=>/bfc_overview.htm
Clean

C:\WINDOWS\Help\brief.chm=>/bfc_split_file.htm
Clean

C:\WINDOWS\Help\brief.chm=>/bfc_update_status.htm
Clean

C:\WINDOWS\Help\brief.chm=>/bfc_connected.htm
Clean

C:\WINDOWS\Help\brief.chm=>/brief.hhc
Clean

C:\WINDOWS\Help\brief.chm=>/brief.hhk
Clean

C:\WINDOWS\Help\brief.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\brief.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\brief.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\Help\brief.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\Help\brief.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\brief.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\brief.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\brief.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\brief.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\brief.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\brief.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\brief.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\brief.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\brief.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\brief.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\brief.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\calc.chm
Clean

C:\WINDOWS\Help\calc.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\calc.chm=>/calc_simple.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_memory.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_statistics.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_scientific.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_number_system.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_list_equiv.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_keyboard_seq.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_precision.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_transfer.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_overflow.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_whatis_intro.htm
Clean

C:\WINDOWS\Help\calc.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc_separator.htm
Clean

C:\WINDOWS\Help\calc.chm=>/calc.hhc
Clean

C:\WINDOWS\Help\calc.chm=>/calc.hhk
Clean

C:\WINDOWS\Help\calc.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\calc.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\calc.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\Help\calc.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\Help\calc.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\calc.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\calc.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\calc.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\calc.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\calc.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\calc.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\calc.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\calc.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\calc.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\calc.hlp
Clean

C:\WINDOWS\Help\camera.chm
Clean

C:\WINDOWS\Help\camera.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\camera.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_add.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_deletepix.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_event.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_get_pics.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_print_pics.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_printwizard.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_properties.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_test.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_use.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_viewslideshow.htm
Clean

C:\WINDOWS\Help\camera.chm=>/scanner_camera_takepix.htm
Clean

C:\WINDOWS\Help\camera.chm=>/camera.hhc
Clean

C:\WINDOWS\Help\camera.chm=>/camera.hhk
Clean

C:\WINDOWS\Help\camera.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\camera.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\Help\camera.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\Help\camera.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\Help\camera.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\camera.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\camera.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\camera.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\camera.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\camera.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\camera.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\camera.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\camera.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\camera.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\camera.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\camera.hlp
Clean

C:\WINDOWS\Help\cdmedia.chm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\cdmedia.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_WriteToCD.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_staging_erasefiles.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_viewCDR.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_erasecd.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_stop_autoeject.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_DuplicateCD.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_fail3_moreinfo_disk_full.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_fail2_moreinfo_buffer_underrun.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_multi_session_CD.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_burn_tips.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/cdmedia_select_drive.htm
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\cdmedia.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\cdmedia.chm=>/#STRINGS
Clean

C:\WINDOWS\Help\cdmedia.hlp
Clean

C:\WINDOWS\Help\certmgr.chm
Clean

C:\WINDOWS\Help\certmgr.chm=>/#SYSTEM
Clean

C:\WINDOWS\Help\certmgr.chm=>/compile_date.htm
Clean

C:\WINDOWS\Help\certmgr.chm=>/certmgr.hhc
Clean

C:\WINDOWS\Help\certmgr.chm=>/certmgrW.hhk
Clean

C:\WINDOWS\Help\certmgr.chm=>/#WINDOWS
Clean

C:\WINDOWS\Help\certmgr.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\Help\certmgr.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\Help\certmgr.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\Help\certmgr.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\Help\certmgr.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\Help\certmgr.chm=>/$OBJINST
Clean

C:\WINDOWS\Help\certmgr.chm=>/$FIftiMain
Clean

C:\WINDOWS\Help\certmgr.chm=>/#IDXHDR
Clean

C:\WINDOWS\Help\certmgr.chm=>/#TOCIDX
Clean

C:\WINDOWS\Help\certmgr.chm=>/#TOPICS
Clean

C:\WINDOWS\Help\certmgr.chm=>/#URLTBL
Clean

C:\WINDOWS\Help\certmgr.chm=>/#URLSTR
Clean

C:\WINDOWS\Help\certmgr.chm=>/#STRINGS
Clean