This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] XXXX.exe - Entry Point Not Found

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Several nights ago, I was tracking my fantasy football team, tried to open my calculator and got the error message "calc.exe - Entry Point Not Found." I believe that is exactly what it said, but it also said something about Regi (with a little rectangle that I can reproduce here at the end).

After that every program (except Firefox & IE), would not immediately open. I had to click through a long series of the same error messages. I disabled my wireless connection and was able to run SpyBot - Search & Destroy v1.4 and Ad-Aware SE Personal. The error messages stopped and things seemed to be okay.

However, the next day my computer was running at a snail's pace and every time I tried to open a word or excel document, the program would open, but the specific document would not until I opened it again through the program.

That night I removed unnecessary programs from my computer and downloaded AVG Free Virus Scanner v7.5. I ran that everything was okay. Then I found this site and followed the steps in the what to do before posting a hijack this log.

I downloaded and ran the ATF Cleaner.
I ran SpyBot.
I downloaded and ran as directed the AVG Anti-Spyware.

My computer seems to running fine, but I just want to make sure that I have not missed something. Please advise me if there is more that needs to be done. Thanks in advance for your help. Please find the AVG Anti-Spyware log and the HijackThis log below.

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 5:33:41 AM 9/27/2007

+ Scan result:



C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined).
:mozilla.316:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.148:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.149:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.150:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.151:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.152:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.153:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.154:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.155:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.156:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.157:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.158:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.159:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.160:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.161:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.162:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.163:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.164:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.167:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.168:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.169:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.171:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.172:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.173:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.174:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.175:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.176:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.177:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.254:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.358:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.359:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.362:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.433:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.198:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.199:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.329:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.330:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.22:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.23:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.24:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.25:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.26:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.21:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.250:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.251:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.626:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.100:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.96:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.97:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.566:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Cnn : Cleaned.
:mozilla.279:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Com : Cleaned.
:mozilla.280:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Com : Cleaned.
:mozilla.281:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Com : Cleaned.
:mozilla.263:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.264:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.49:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.305:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.306:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.307:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.308:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.344:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.50:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.51:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.52:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.262:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.142:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.143:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.144:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.206:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.207:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.208:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.209:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.210:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.259:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.204:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.205:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.129:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Information : Cleaned.
:mozilla.130:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Information : Cleaned.
:mozilla.131:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Information : Cleaned.
:mozilla.602:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.603:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.604:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.605:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.606:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.123:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.124:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.528:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.260:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.261:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.292:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.293:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.294:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.295:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.69:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.70:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.71:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.516:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.517:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.126:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.128:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.227:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.228:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.229:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.230:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.231:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.232:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.233:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.234:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.235:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.236:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.567:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.383:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.384:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.385:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.386:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.387:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.388:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.357:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.522:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.523:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.524:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.525:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.526:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.110:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.111:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.112:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.113:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.193:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.568:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.56:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.57:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.58:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.59:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.60:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.61:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.62:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.63:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.136:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.221:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.180:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.27:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.28:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.29:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.30:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.31:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.268:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.269:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.270:C:\Documents and Settings\Max Butler\Application Data\Mozilla\Firefox\Profiles\cg6ms4ob.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned.


::Report end



Logfile of HijackThis v1.99.1
Scan saved at 1:37:40 PM, on 9/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\SYSTEM32\YEDIEx.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Microtek\ScanWizard 5\LANServer.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Microtek\ScanWizard 5\MsgRpr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\CO2 Saver\CO2Saver.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [LANServer] C:\Program Files\Microtek\ScanWizard 5\LANServer.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [McRegWiz] c:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CO2 Saver.lnk = C:\Program Files\CO2 Saver\CO2Saver.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m…84/mcinsctl.cab
O16 - DPF: {60EFC337-15C2-4369-B2A0-3429B071D8B8} (Hewlett-Packard Printer Diagnostics) - http://h50203.www5.hp.com/HPISWeb/Customer…SWebManager.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m…,21/mcgdmgr.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: YEDIEx - Unknown owner - C:\WINDOWS\SYSTEM32\YEDIEx.exe
Hi UberGandalf Welcome to the what the tech Forums My name is mschroe919 and I am going to read your log. I would like to help you So if you would…. Please be patient and I will be back as soon as possible. Since its been a coup,e days since you posted let me know how your pc is behaving today. Thanks mschroe919
Hi UberGandalf ,
Well I didn't see anything real bad in your log, just a few things to help your pc to act quicker

FIRST:

Your log has signs of 2 anti virus trying to run at the same time. This is not good cause they inter fear with each other.
One is AVG ant the other is Mcafee. Later in this fix we will fix that AVG is great to keep.

NEXT:

Run HijackThis, and press Scan, and put a check against the following entries, Make sure all browsers and program windows are closed except for HijackThis
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
O4 - HKLM\..\Run: [McRegWiz] c:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun

O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)

Once you have selected this item for HJT to fix, and remember to make sure all browsers and program windows are closed except for HijackThis, then click fix checked..
NEXT:
Go to add remove programs in the control panel, and highlight any and all mcafee
stuff, and click remove. If not there ok.Now
then go to C:\program file\mcafee.com and delte only the folder mcafee.com

NEXT:

You have a lot of programs running that don't need to be running. We won't get rid of them just stop them from starting when PC is started.
Lets try something here to help up your PC.
next:

NEXT:

Please download System Security Suite. here.

HERE

Extract it from the zip file into a folder.

Run 3S under “Items To Clear” tab place a checkmark in all of them but the last.

Reboot, no need for new log, just:

Please post back and describe how your computer behaves now.

Also if you don't understand something please ask.
Good luck mschroe919
Thanks so much for all of your help. I am a little confused though as to how clearing those items with 3S will prevent things from starting upon start up. Did you mean that I should check all but the last item under 'AutoRun Tasks"?
Hi UberGandalf

No in “Items To Clear” tab place a checkmark in all of them but the last.
then check clear selected items. Note this will clear out your saved pass words
you may want to uncheck Passwords,cookies and recycle bin.
Now under under 'AutoRun Tasks" this will not delete any thing you check,
just stop it from starting and running on start up. You should pick out the programs you
know you don't need running, knowing you can always start them manualy.
Do not check them all cause some are needed. Just pick the ones you want.
and press "Lock" checked. don't click delete.

Also did you take care of the Anti Virus not neede? When you get done with this
run HJT again and post a new log. I have some good things to show you after I get
the new log
good luck mschroe919
I did get rid of the McAfee. I am just not sure which programs I don't need running. Below is a list from the AutoRun Tasks from the 3S, do you think that that I stop any of them? Also If I lock them does that mean that they will continue to run or that they will not be automatically started? Below that list I have included an new hijack this log. Thanks again for all your help.

DadApp
DVDLauncher
LANServer
igfxtray
igfxhkcmd
igfxpers
SSBkgdUpdate
PaperPort PTD
IndexSearch
BCMSMMSG
Adobe Reader Speed Launcher
Quick Time Task
iTunesHelper
AVG_CC
!AVG Anti-Spyware
googletalk
ctfmon.exe
Aim6
H/PC Connection Agent
Adobe Gamma Loader
CO2 Saver



Logfile of HijackThis v1.99.1
Scan saved at 10:41:09 PM, on 9/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\SYSTEM32\YEDIEx.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Microtek\ScanWizard 5\LANServer.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Microtek\ScanWizard 5\MsgRpr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\CO2 Saver\CO2Saver.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [LANServer] C:\Program Files\Microtek\ScanWizard 5\LANServer.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: CO2 Saver.lnk = C:\Program Files\CO2 Saver\CO2Saver.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m…84/mcinsctl.cab
O16 - DPF: {60EFC337-15C2-4369-B2A0-3429B071D8B8} (Hewlett-Packard Printer Diagnostics) - http://h50203.www5.hp.com/HPISWeb/Customer…SWebManager.CAB
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/m…,21/mcgdmgr.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: YEDIEx - Unknown owner - C:\WINDOWS\SYSTEM32\YEDIEx.exe
Hi UberGandalf


In the AutoRun Tasks from the 3S, You click on "lock" checked, It stops them from running on start up,they don't go away you can bring them up manualy. Do not click on the delete checked at all.
If this was mine of the list I would lock these:

QTTask.exe ( Not required - typically infrequently used tasks that can be started manually if necessary )
googletalk (Google Talk "enables you to call or send instant messages to your friends for free–anytime, anywhere in the world". Can be launched manually.)


I don't see in your log that this is running at all, if you do use aim6 then lock it
Aim6
(User's choice - depends whether a user deems it necessary}

********************************************************************************
*********************************
Now that your log is clean, please follow these simple steps in order to keep your computer clean and secure:

Note you may have some of theses programs allready, if so just a reminder to keep updated.

FIRST:
You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.
===================================================================
NEXT:
Make your Internet Explorer more secure - This can be done by following these simple instructions:

1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.

1. Change the Download signed ActiveX controls to Prompt
2. Change theDownload unsigned ActiveX controls to Disable
3. Change the Initialise and script ActiveX controls not marked as safe to Disable
4. Change the Installation of desktop items to Prompt
5. Change the Launching programs and files in an IFRAME to Prompt
6. Change the Navigate sub-frames across different domains to Prompt
7. When all these settings have been made, click on the OK button.
8. If it prompts you as to whether or not you want to save the settings, press the Yes button.

Next press the Apply button and then the OK to exit the Internet Properties page.
====================================================================

Use an Anti Virus Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See these links for a listing of some on line & their stand-alone anti virus programs:
If you don't have one here are some of the better AV products.

Symantec/Norton Antivirus: http://www.symantec.com/nav/nav_9xnt/
Kapersky AV: http://www.kaspersky.com/buyonline.html?info=25
Nod32 : http://www.nod32.com/home/home.htm
Panda AV: http://www.pandasoftware.com/
McAfee Virusscan: http://us.mcafee.com/root/package.asp?pkgid=100
AVG Anti-Virus (Free version available) http://www.grisoft.com/

Update your Anti Virus Software - It is imperitive that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.
============================================================
NEXT:

Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly.
If you don't have one see link below for a free firewall:

ZoneAlarm:
http://www.zonelabs.com/store/content/cata….jsp?lid=nav_za

Sunbelt Kerio:
http://www.sunbelt-software.com/Kerio.cfm

OutPost:
http://www.agnitum.com/products/outpostfree/download.php
================================================================================

Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option.

This will provide real-time spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an anti virus software

Get the download and tutorial for Spybot S&D here:
http://www.bleepingcomputer.com/tutorials/tutorial43.html
=========================================================================

Install Ad-Aware
Install and download Ad-Aware. You should also scan your computer with the program on a regular basis just as you would an anti virus software in conjunction with Spybot. The download and tutorial on installing & using Ad-aware can be found here:
http://www.bleepingcomputer.com/tutorials/tutorial48.html

====================================================================

Install SpywareBlaster
SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. A article on anti-malware products with links for this program and others can be found here:

http://www.javacoolsoftware.com/spywareblaster.html
========================================================================

Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.
Happy surfing the net

I only ask one thing….please
Please post back and let us know what you think about our forum, we are all volunteers and would like a little smile.


Good luck Mschroe919
I downloaded what you said and followed your instructions. Evereything seems to be great. Thanks so much for all your help. This is a great service that this website provides. I am so glad I happened upon it. Thanks!
Hi UberGandalf ,
YOUR WELCOME

We are happy that you came to us too. I am glar your happy and your PC is happy also/

Happy surfing
mschroe919
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI