This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Something's wrong with my Windows XP and IE7

28 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

I have a Dell Inspiron E1405 Notebook with Windows XP. Earlier this week a window popped up asking me to insert my Windows XP disk because some of the files(?) were overwritten. It popped up twice and I didn't think anything about it because I don't have a disk. I also didn't write down exactly what the popup said besides asking me to insert my XP disk. I started up my laptop on Thursday morning and IE7 didn't work, it just said connecting in the two tabs I use and stayed in the white screen. Some of my icons disappeared down by my clock too. MySpace IM wouldn't open up and log in. Gmail Notifier wouldn't open either. I had Safari so I downloaded Firefox and uninstalled Safari. I tried to do a System Restore but it wouldn't complete the task. I tried several different restore points and now most of my restore points are gone, I only have points from the last 2 days. Here is my log, i hope I'm doing all of this correctly. I'm sorry in advance if I've missed something.
Thanks, Kristy

Logfile of HijackThis v1.99.1
Scan saved at 11:08:54 PM, on 10/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\program files\internet explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: IconixBHOClass Class - {761233B6-F228-49E4-8F6B-668499D4E55A} - C:\Program Files\Iconix\IEAddOn\IconixBHO_23.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Dell\Media Experience\DMXLauncher.exe"
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [lxccmon.exe] "C:\Program Files\Lexmark 3300 Series\lxccmon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IconixOEAddOn] "C:\Program Files\Iconix\OEAddOn\OEdmn_2.exe"
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKLM\..\Run: [PCPitstop Optimize Registration Reminder] C:\Program Files\PCPitstop\Optimize\Reminder.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Dell Network Assistant.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_23.dll
O9 - Extra 'Tools' menuitem: Email ID Preferences - {400A6CFA-E326-4d61-A90C-9AD75358DC5F} - C:\Program Files\Iconix\IEAddOn\IconixBHO_23.dll
O9 - Extra button: (no name) - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_23.dll
O9 - Extra 'Tools' menuitem: About Email ID - {BC3F6B6D-2E49-4603-B028-7411655713F3} - C:\Program Files\Iconix\IEAddOn\IconixBHO_23.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.doginhispen.com
O15 - Trusted Zone: http://browseusers.myspace.com
O15 - Trusted Zone: http://bulletin.myspace.com
O15 - Trusted Zone: http://bulletins.myspace.com
O15 - Trusted Zone: http://collect.myspace.com
O15 - Trusted Zone: http://comment.myspace.com
O15 - Trusted Zone: http://delb.myspace.com
O15 - Trusted Zone: http://desb.myspace.com
O15 - Trusted Zone: http://editprofile.myspace.com
O15 - Trusted Zone: http://friends.myspace.com
O15 - Trusted Zone: http://home.myspace.com
O15 - Trusted Zone: http://login.myspace.com
O15 - Trusted Zone: http://mail.myspace.com
O15 - Trusted Zone: http://mediaservices.myspace.com
O15 - Trusted Zone: http://messaging.myspace.com
O15 - Trusted Zone: http://profile.myspace.com
O15 - Trusted Zone: http://profileedit.myspace.com
O15 - Trusted Zone: http://sads.myspace.com
O15 - Trusted Zone: http://schools.myspace.com
O15 - Trusted Zone: http://search.myspace.com
O15 - Trusted Zone: http://searchresults.myspace.com
O15 - Trusted Zone: http://secure.myspace.com
O15 - Trusted Zone: http://settings.myspace.com
O15 - Trusted Zone: http://vids.myspace.com
O15 - Trusted Zone: http://viewmorepics.myspace.com
O15 - Trusted Zone: http://www.myspace.com
O15 - Trusted Zone: *.whataboutadog.com
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://qtinstall.info.apple.com/qtactivex/QTPlugin.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {10E0E75E-6701-4134-9D95-C0942ED1F1C8} (Snapfish Outlook Import ActiveX Control) - http://photos.walmart.com/WalmartOutlookImport.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlmanager.akamaitools.com.edgesuite…vex-2.0.6.0.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {389956FE-3A45-469C-B944-70308E06BAAC} (CVServerObject Object) - http://66.25.180.104:81/videocom.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1149217680301
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1160677261156
O16 - DPF: {819EDD4C-7EB6-4D97-B831-D68B57E7D3ED} (Wyncs Control) - http://les-bois-junior.groupfusion.net/mod…4-1-8/Wyncs.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {BDD2F926-8158-4F62-9E0D-B3B75FD1F07F} (McObjectFactory Class) - http://download.mcafee.com/molbin/shared/M…0,2/mcmysec.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/hpfix/aio…/qdiagh.cab?326
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - Lexmark International, Inc. - (no file)
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee - (no file)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

I noticed just after I posted my log that when I left IE7 open it would finally load after about 10 mins and then I could use it normally.
Hi Kristy and welcome to the forums.

My name is Dave. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can sometimes take a while to research so please be patient and I'd be grateful if you would note the following:
  • I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
———————————————————

Well, from the symptoms you describe and one of the entries in your HJT log it sounds like an AWF infection. This trojan replaces legitimate files that are common on most computers with an infected file. It then moves the legitimate file to a "bak" or backup folder. Please follow the directions below to run FindAWF so we can identify the files that have been infected and the backups then restore them.

Before we do that though, it appears you have 2 Antivirus programs running, AVG and Norton/Symantec. Is this so? Running more than one Antivirus or Firewall can cause system slow down, conficts, errors, false positves, ect… You need to remove one of them. Also, it looks like you have McAfee too, is that just for the firewall?

Well, let's see if you do indeed have an AWF infection.

Download FindAWF:

Save the file to the Desktop
Double-click the FindAWF icon.

If a Security Alert shows, allow the program to run.
As instructed, press any key to continue.
Use the following option: Press 1 then Enter to scan for bak folders
The scan may take a while, please be patient.

When done, a text file, Find AWF report is produced that we need to look at.
Please post it in your reply.
Thanks for replying and helping. Here is my AWF log. I did the scan after I uninstalled Symantec. Find AWF report by noahdfear ©2006 Version 1.40 The current date is: Mon 10/15/2007 The current time is: 18:55:49.44 bak folders found ~~~~~~~~~~~ Directory of C:\PROGRA~1\DELLSU~1\BAK 07/16/2006 09:29 PM 389,120 DSAgnt.exe 1 File(s) 389,120 bytes Directory of C:\PROGRA~1\ITUNES\BAK 09/07/2007 04:55 PM 267,064 iTunesHelper.exe 1 File(s) 267,064 bytes Directory of C:\PROGRA~1\LEXMAR~1\BAK 07/20/2005 06:16 PM 192,512 lxccmon.exe 1 File(s) 192,512 bytes Directory of C:\PROGRA~1\LEXMAR~2\BAK 07/12/2005 03:36 AM 299,008 fm3032.exe 1 File(s) 299,008 bytes Directory of C:\PROGRA~1\MSNMES~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\QUICKT~1\BAK 06/29/2007 06:24 AM 286,720 qttask.exe 1 File(s) 286,720 bytes Directory of C:\PROGRA~1\SYMANT~1\BAK 06/23/2005 08:27 PM 85,696 VPTray.exe 1 File(s) 85,696 bytes Directory of C:\PROGRA~1\WIFD1F~1\BAK 11/03/2006 07:20 PM 866,584 MSASCui.exe 1 File(s) 866,584 bytes Directory of C:\WINDOWS\EHOME\BAK 09/29/2005 01:01 PM 67,584 ehtray.exe 1 File(s) 67,584 bytes Directory of C:\WINDOWS\SYSTEM32\BAK 08/10/2004 04:00 AM 15,360 ctfmon.exe 12/13/2005 08:45 AM 118,784 igfxpers.exe 12/13/2005 08:44 AM 98,304 igfxtray.exe 3 File(s) 232,448 bytes Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK 06/02/2005 10:21 AM 48,752 ccApp.exe 1 File(s) 48,752 bytes Directory of C:\PROGRA~1\CREATIVE\MIXER\BAK 02/23/2005 02:57 PM 57,344 CTSVolFE.exe 1 File(s) 57,344 bytes Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK 05/03/2006 03:12 AM 98,304 DMXLauncher.exe 1 File(s) 98,304 bytes Directory of C:\PROGRA~1\DELL\QUICKSET\BAK 02/20/2007 12:29 PM 1,191,936 quickset.exe 1 File(s) 1,191,936 bytes Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK 06/14/2007 12:01 AM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of C:\PROGRA~1\ICONIX\OEADDON\BAK 06/28/2007 03:39 AM 132,368 OEdmn_2.exe 1 File(s) 132,368 bytes Directory of C:\PROGRA~1\PCPITS~1\OPTIMIZE\BAK 07/09/2007 04:51 PM 2,577,120 PCPOptimize.exe 07/09/2007 04:51 PM 897,752 Reminder.exe 2 File(s) 3,474,872 bytes Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK 03/08/2006 03:48 AM 761,947 SynTPEnh.exe 1 File(s) 761,947 bytes Directory of C:\WINDOWS\SYSTEM32\DLA\BAK 09/08/2005 04:20 AM 122,940 DLACTRLW.EXE 1 File(s) 122,940 bytes Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK 06/10/2005 09:44 AM 81,920 issch.exe 06/10/2005 09:44 AM 249,856 isuspm.exe 2 File(s) 331,776 bytes Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 12/15/2006 12:32 PM 185,896 realsched.exe 1 File(s) 185,896 bytes Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK 10/18/2006 06:58 PM 696,320 ifrmewrk.exe 10/18/2006 07:04 PM 802,816 ZCfgSvc.exe 2 File(s) 1,499,136 bytes Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK 07/12/2007 04:00 AM 132,496 jusched.exe 1 File(s) 132,496 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ 26636 Oct 11 2007 "C:\Program Files\Dell Support\DSAgnt.exe" 389120 Jul 16 2006 "C:\Program Files\Dell Support\bak\DSAgnt.exe" 26636 Oct 11 2007 "C:\Program Files\iTunes\iTunesHelper.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe" 102400 Sep 9 2007 "C:\WINDOWS\Installer\{B8A204BC-7177-470E-BBDD-47256D05B325}\iTunesIco.exe" 116024 Sep 7 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.1.2\iTunesSetupAdmin.exe" 116288 Jun 26 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3ZRXTLDW\iTunesSetupAdmin[1].exe" 26636 Oct 11 2007 "C:\Program Files\Lexmark 3300 Series\lxccmon.exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe" 26636 Oct 11 2007 "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe" 26636 Oct 11 2007 "C:\Program Files\QuickTime\qttask.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\qttask.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\bak\VPTray.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe" 26636 Oct 11 2007 "C:\WINDOWS\ehome\ehtray.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\bak\ehtray.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\ctfmon.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\bak\ctfmon.exe" 26636 Oct 11 2007 "C:\WINDOWS\system32\igfxpers.exe" 118784 Dec 13 2005 "C:\drivers\video\onboard\igfxpers.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxpers.exe" 26636 Oct 11 2007 "C:\WINDOWS\system32\igfxtray.exe" 98304 Dec 13 2005 "C:\drivers\video\onboard\igfxtray.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxtray.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe" 26636 Oct 11 2007 "C:\Program Files\Creative\Mixer\CTSVolFE.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe" 26636 Oct 11 2007 "C:\Program Files\Dell\Media Experience\DMXLauncher.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe" 26636 Oct 11 2007 "C:\Program Files\Dell\QuickSet\quickset.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\bak\quickset.exe" 52272 Jun 10 2007 "C:\Program Files\Google\googletoolbar2user.exe" 26636 Oct 11 2007 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" 1145896 Jan 29 2007 "C:\Program Files\Rhapsody\google_bar\GoogleToolbarInstaller_en.exe" 1828152 May 19 2007 "C:\Documents and Settings\Kristy\My Documents\Downloaded Program Updates\GoogleDesktopSetup.exe" 583696 Dec 15 2006 "C:\Program Files\Common Files\Real\GToolbar\GoogleToolbarInstaller.exe" 138168 Jan 30 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 26636 Oct 11 2007 "C:\Program Files\Iconix\OEAddOn\OEdmn_2.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe" 26636 Oct 11 2007 "C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe" 26636 Oct 11 2007 "C:\Program Files\PCPitstop\Optimize\Reminder.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe" 761947 Mar 8 2006 "C:\drivers\mouse\onboard\SynTPEnh.exe" 26636 Oct 11 2007 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe" 26636 Oct 11 2007 "C:\WINDOWS\system32\DLA\DLACTRLW.EXE" 122940 Sep 8 2005 "C:\Program Files\Roxio\DLA\install\dlactrlw.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE" 26636 Oct 11 2007 "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe" 26636 Oct 11 2007 "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe" 26636 Oct 11 2007 "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 26636 Oct 11 2007 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe" 26636 Oct 11 2007 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe" 75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" 83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" 26636 Oct 11 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe" end of report
Yes, a nasty AWF infection here. Let's see if we can clear it up.

Please double-click the FindAWF icon once again.

If a Security Alert shows, allow the program to run.
As instructed, press any key to continue.
Use the following option: Press 2 then Enter to restore files from bak folders

A text file opens called: files.txt
Copy and paste the following list of files from in the code box to be restored:
"C:\Program Files\Dell Support\bak\DSAgnt.exe"
"C:\Program Files\iTunes\bak\iTunesHelper.exe"
"C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe"
"C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe"
"C:\Program Files\QuickTime\bak\qttask.exe"
"C:\Program Files\Symantec AntiVirus\bak\VPTray.exe"
"C:\Program Files\Windows Defender\bak\MSASCui.exe"
"C:\WINDOWS\ehome\bak\ehtray.exe"
"C:\WINDOWS\system32\bak\ctfmon.exe"
"C:\WINDOWS\system32\bak\igfxpers.exe"
"C:\WINDOWS\system32\bak\igfxtray.exe"
"C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe"
"C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe"
"C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe"
"C:\Program Files\Dell\QuickSet\bak\quickset.exe"
"C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
"C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe"
"C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe"
"C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe"
"C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
"C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe"
"C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
"C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
Next, close and click Yes to save the changes.

Once files.txt is saved, FindAWF does the following:
-It attempts to terminate the process represented by each filename on the list, if running
-Deletes the rogue file from the parent folder, if present
-Copies the original file to the parent folder

When done with the above, it automatically runs a new scan and opens a new log.
Please provide the new FindAWF log in your reply.
After I copy and pasted the code from the blue box, hit save, and it started doing it's thing, the same box popped up, that started this whole thing, saying: Files that are required for Windows to run properly have been replaced by unrecognized versions. To maintain system stability, Windows must restore the original versions of these files. Insert your Windows XP Professional CD2 now. I hit Cancel and then another box popped up, I got out of that and the process continued until the scan was done. So, here's the scan. Find AWF report by noahdfear ©2006 Version 1.40 Option 2 run successfully The current date is: Mon 10/15/2007 The current time is: 20:04:47.32 bak folders found ~~~~~~~~~~~ Directory of C:\PROGRA~1\DELLSU~1\BAK 07/16/2006 09:29 PM 389,120 DSAgnt.exe 1 File(s) 389,120 bytes Directory of C:\PROGRA~1\ITUNES\BAK 09/07/2007 04:55 PM 267,064 iTunesHelper.exe 1 File(s) 267,064 bytes Directory of C:\PROGRA~1\LEXMAR~1\BAK 07/20/2005 06:16 PM 192,512 lxccmon.exe 1 File(s) 192,512 bytes Directory of C:\PROGRA~1\LEXMAR~2\BAK 07/12/2005 03:36 AM 299,008 fm3032.exe 1 File(s) 299,008 bytes Directory of C:\PROGRA~1\MSNMES~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\QUICKT~1\BAK 06/29/2007 06:24 AM 286,720 qttask.exe 1 File(s) 286,720 bytes Directory of C:\PROGRA~1\SYMANT~1\BAK 06/23/2005 08:27 PM 85,696 VPTray.exe 1 File(s) 85,696 bytes Directory of C:\PROGRA~1\WIFD1F~1\BAK 11/03/2006 07:20 PM 866,584 MSASCui.exe 1 File(s) 866,584 bytes Directory of C:\WINDOWS\EHOME\BAK 09/29/2005 01:01 PM 67,584 ehtray.exe 1 File(s) 67,584 bytes Directory of C:\WINDOWS\SYSTEM32\BAK 08/10/2004 04:00 AM 15,360 ctfmon.exe 12/13/2005 08:45 AM 118,784 igfxpers.exe 12/13/2005 08:44 AM 98,304 igfxtray.exe 3 File(s) 232,448 bytes Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK 06/02/2005 10:21 AM 48,752 ccApp.exe 1 File(s) 48,752 bytes Directory of C:\PROGRA~1\CREATIVE\MIXER\BAK 02/23/2005 02:57 PM 57,344 CTSVolFE.exe 1 File(s) 57,344 bytes Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK 05/03/2006 03:12 AM 98,304 DMXLauncher.exe 1 File(s) 98,304 bytes Directory of C:\PROGRA~1\DELL\QUICKSET\BAK 02/20/2007 12:29 PM 1,191,936 quickset.exe 1 File(s) 1,191,936 bytes Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK 06/14/2007 12:01 AM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of C:\PROGRA~1\ICONIX\OEADDON\BAK 06/28/2007 03:39 AM 132,368 OEdmn_2.exe 1 File(s) 132,368 bytes Directory of C:\PROGRA~1\PCPITS~1\OPTIMIZE\BAK 07/09/2007 04:51 PM 2,577,120 PCPOptimize.exe 07/09/2007 04:51 PM 897,752 Reminder.exe 2 File(s) 3,474,872 bytes Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK 03/08/2006 03:48 AM 761,947 SynTPEnh.exe 1 File(s) 761,947 bytes Directory of C:\WINDOWS\SYSTEM32\DLA\BAK 09/08/2005 04:20 AM 122,940 DLACTRLW.EXE 1 File(s) 122,940 bytes Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK 06/10/2005 09:44 AM 81,920 issch.exe 06/10/2005 09:44 AM 249,856 isuspm.exe 2 File(s) 331,776 bytes Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 12/15/2006 12:32 PM 185,896 realsched.exe 1 File(s) 185,896 bytes Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK 10/18/2006 06:58 PM 696,320 ifrmewrk.exe 10/18/2006 07:04 PM 802,816 ZCfgSvc.exe 2 File(s) 1,499,136 bytes Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK 07/12/2007 04:00 AM 132,496 jusched.exe 1 File(s) 132,496 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ 389120 Jul 16 2006 "C:\Program Files\Dell Support\DSAgnt.exe" 389120 Jul 16 2006 "C:\Program Files\Dell Support\bak\DSAgnt.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\iTunesHelper.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe" 102400 Sep 9 2007 "C:\WINDOWS\Installer\{B8A204BC-7177-470E-BBDD-47256D05B325}\iTunesIco.exe" 116024 Sep 7 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.1.2\iTunesSetupAdmin.exe" 116288 Jun 26 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3ZRXTLDW\iTunesSetupAdmin[1].exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\lxccmon.exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\qttask.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\qttask.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\VPTray.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\bak\VPTray.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\ehtray.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\bak\ehtray.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\ctfmon.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\bak\ctfmon.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\igfxpers.exe" 118784 Dec 13 2005 "C:\drivers\video\onboard\igfxpers.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxpers.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\igfxtray.exe" 98304 Dec 13 2005 "C:\drivers\video\onboard\igfxtray.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxtray.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\CTSVolFE.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\DMXLauncher.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\quickset.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\bak\quickset.exe" 52272 Jun 10 2007 "C:\Program Files\Google\googletoolbar2user.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" 1145896 Jan 29 2007 "C:\Program Files\Rhapsody\google_bar\GoogleToolbarInstaller_en.exe" 1828152 May 19 2007 "C:\Documents and Settings\Kristy\My Documents\Downloaded Program Updates\GoogleDesktopSetup.exe" 583696 Dec 15 2006 "C:\Program Files\Common Files\Real\GToolbar\GoogleToolbarInstaller.exe" 138168 Jan 30 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\OEdmn_2.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\Reminder.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe" 761947 Mar 8 2006 "C:\drivers\mouse\onboard\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\DLACTRLW.EXE" 122940 Sep 8 2005 "C:\Program Files\Roxio\DLA\install\dlactrlw.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe" 75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" 83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe" end of report
Those errors are Windows trying to protect itself (too bad it didn't do that when you were infected huh?). Looks like it went OK though. :thumbup:

Next step:

Please double-click the FindAWF icon once again
This time we are going to remove some folders.

If a Security Alert shows, allow the program to run.
As instructed, press any key to continue.
Use the following option: Press 3 then Enter to remove bak folders

A text file opens called: folders.txt
Click below the line and paste the following list of folders in the code box to be removed:

"C:\Program Files\Dell Support\bak\DSAgnt.exe"
"C:\Program Files\iTunes\bak\iTunesHelper.exe"
"C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe"
"C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe"
"C:\Program Files\QuickTime\bak\qttask.exe"
"C:\Program Files\Symantec AntiVirus\bak\VPTray.exe"
"C:\Program Files\Windows Defender\bak\MSASCui.exe"
"C:\WINDOWS\ehome\bak\ehtray.exe"
"C:\WINDOWS\system32\bak\ctfmon.exe"
"C:\WINDOWS\system32\bak\igfxpers.exe"
"C:\WINDOWS\system32\bak\igfxtray.exe"
"C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe"
"C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe"
"C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe"
"C:\Program Files\Dell\QuickSet\bak\quickset.exe"
"C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
"C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe"
"C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe"
"C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe"
"C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
"C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe"
"C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
"C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"

Next, close and click Yes to save the changes.

When done with the above, FindAWF automatically runs a new scan and opens a new log that you need to post.
Please provide the new FindAWF log in your reply.
Hi Dave, I'll scan and post it later. A few quick questions for ya. Do you know how I got that virus? How can I prevent it from returning if all goes well after my next scan to remove some stuff? What should I do if the Windows box pops up again asking for a disk I don't have? Thanks, Kristy

Do you know how I got that virus?

No, we really have no way of definitely determining that. Most often what I see lately is people who are using file sharing of some kind. P2P, torrents, ect… I don't see that in your log but…

How can I prevent it from returning if all goes well after my next scan to remove some stuff?

One, even after the next scan we still have some work to do. Second, I'll post some other protection that may help when we are done. As I said, the number one reason is P2P.

What should I do if the Windows box pops up again asking for a disk I don't have?

Hopefully it won't. At this point your correct files should have already been changed back. What we are doing now is mainly cleanup. Are you now able to use programs that weren't working before?
Here is my new log. Find AWF report by noahdfear ©2006 Version 1.40 Option 3 run successfully The current date is: Tue 10/16/2007 The current time is: 20:00:05.12 bak folders found ~~~~~~~~~~~ Directory of C:\PROGRA~1\DELLSU~1\BAK 07/16/2006 09:29 PM 389,120 DSAgnt.exe 1 File(s) 389,120 bytes Directory of C:\PROGRA~1\ITUNES\BAK 09/07/2007 04:55 PM 267,064 iTunesHelper.exe 1 File(s) 267,064 bytes Directory of C:\PROGRA~1\LEXMAR~1\BAK 07/20/2005 06:16 PM 192,512 lxccmon.exe 1 File(s) 192,512 bytes Directory of C:\PROGRA~1\LEXMAR~2\BAK 07/12/2005 03:36 AM 299,008 fm3032.exe 1 File(s) 299,008 bytes Directory of C:\PROGRA~1\MSNMES~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\QUICKT~1\BAK 06/29/2007 06:24 AM 286,720 qttask.exe 1 File(s) 286,720 bytes Directory of C:\PROGRA~1\SYMANT~1\BAK 06/23/2005 08:27 PM 85,696 VPTray.exe 1 File(s) 85,696 bytes Directory of C:\PROGRA~1\WIFD1F~1\BAK 11/03/2006 07:20 PM 866,584 MSASCui.exe 1 File(s) 866,584 bytes Directory of C:\WINDOWS\EHOME\BAK 09/29/2005 01:01 PM 67,584 ehtray.exe 1 File(s) 67,584 bytes Directory of C:\WINDOWS\SYSTEM32\BAK 08/10/2004 04:00 AM 15,360 ctfmon.exe 12/13/2005 08:45 AM 118,784 igfxpers.exe 12/13/2005 08:44 AM 98,304 igfxtray.exe 3 File(s) 232,448 bytes Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK 06/02/2005 10:21 AM 48,752 ccApp.exe 1 File(s) 48,752 bytes Directory of C:\PROGRA~1\CREATIVE\MIXER\BAK 02/23/2005 02:57 PM 57,344 CTSVolFE.exe 1 File(s) 57,344 bytes Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK 05/03/2006 03:12 AM 98,304 DMXLauncher.exe 1 File(s) 98,304 bytes Directory of C:\PROGRA~1\DELL\QUICKSET\BAK 02/20/2007 12:29 PM 1,191,936 quickset.exe 1 File(s) 1,191,936 bytes Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK 06/14/2007 12:01 AM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of C:\PROGRA~1\ICONIX\OEADDON\BAK 06/28/2007 03:39 AM 132,368 OEdmn_2.exe 1 File(s) 132,368 bytes Directory of C:\PROGRA~1\PCPITS~1\OPTIMIZE\BAK 07/09/2007 04:51 PM 2,577,120 PCPOptimize.exe 07/09/2007 04:51 PM 897,752 Reminder.exe 2 File(s) 3,474,872 bytes Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK 03/08/2006 03:48 AM 761,947 SynTPEnh.exe 1 File(s) 761,947 bytes Directory of C:\WINDOWS\SYSTEM32\DLA\BAK 09/08/2005 04:20 AM 122,940 DLACTRLW.EXE 1 File(s) 122,940 bytes Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK 06/10/2005 09:44 AM 81,920 issch.exe 06/10/2005 09:44 AM 249,856 isuspm.exe 2 File(s) 331,776 bytes Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 12/15/2006 12:32 PM 185,896 realsched.exe 1 File(s) 185,896 bytes Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK 10/18/2006 06:58 PM 696,320 ifrmewrk.exe 10/18/2006 07:04 PM 802,816 ZCfgSvc.exe 2 File(s) 1,499,136 bytes Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK 07/12/2007 04:00 AM 132,496 jusched.exe 1 File(s) 132,496 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ 389120 Jul 16 2006 "C:\Program Files\Dell Support\DSAgnt.exe" 389120 Jul 16 2006 "C:\Program Files\Dell Support\bak\DSAgnt.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\iTunesHelper.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe" 102400 Sep 9 2007 "C:\WINDOWS\Installer\{B8A204BC-7177-470E-BBDD-47256D05B325}\iTunesIco.exe" 116024 Sep 7 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.1.2\iTunesSetupAdmin.exe" 116288 Jun 26 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3ZRXTLDW\iTunesSetupAdmin[1].exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\lxccmon.exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\qttask.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\qttask.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\VPTray.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\bak\VPTray.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\ehtray.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\bak\ehtray.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\ctfmon.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\bak\ctfmon.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\igfxpers.exe" 118784 Dec 13 2005 "C:\drivers\video\onboard\igfxpers.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxpers.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\igfxtray.exe" 98304 Dec 13 2005 "C:\drivers\video\onboard\igfxtray.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxtray.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\CTSVolFE.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\DMXLauncher.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\quickset.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\bak\quickset.exe" 52272 Jun 10 2007 "C:\Program Files\Google\googletoolbar2user.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" 1145896 Jan 29 2007 "C:\Program Files\Rhapsody\google_bar\GoogleToolbarInstaller_en.exe" 1828152 May 19 2007 "C:\Documents and Settings\Kristy\My Documents\Downloaded Program Updates\GoogleDesktopSetup.exe" 583696 Dec 15 2006 "C:\Program Files\Common Files\Real\GToolbar\GoogleToolbarInstaller.exe" 138168 Jan 30 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\OEdmn_2.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\Reminder.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe" 761947 Mar 8 2006 "C:\drivers\mouse\onboard\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\DLACTRLW.EXE" 122940 Sep 8 2005 "C:\Program Files\Roxio\DLA\install\dlactrlw.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe" 75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" 83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe" end of report
I apologize, I should not have included the quotes on this part of the fix. It didn't run correctly. No damage done just didn't do what we wanted it to. Please do again.

Please double-click the FindAWF icon once again
This time we are going to remove some folders.

If a Security Alert shows, allow the program to run.
As instructed, press any key to continue.
Use the following option: Press 3 then Enter to remove bak folders

A text file opens called: folders.txt
Click below the line and paste the following list of folders in the code box to be removed:

C:\Program Files\Dell Support\bak\DSAgnt.exe
C:\Program Files\iTunes\bak\iTunesHelper.exe
C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe
C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe
C:\Program Files\QuickTime\bak\qttask.exe
C:\Program Files\Symantec AntiVirus\bak\VPTray.exe
C:\Program Files\Windows Defender\bak\MSASCui.exe
C:\WINDOWS\ehome\bak\ehtray.exe
C:\WINDOWS\system32\bak\ctfmon.exe
C:\WINDOWS\system32\bak\igfxpers.exe
C:\WINDOWS\system32\bak\igfxtray.exe
C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe
C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe
C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe
C:\Program Files\Dell\QuickSet\bak\quickset.exe
C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe
C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe
C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe
C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe
C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe
C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe
C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe
C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe
C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe
C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe

Next, close and click Yes to save the changes.

When done with the above, FindAWF automatically runs a new scan and opens a new log that you need to post.
Please provide the new FindAWF log in your reply.
Here is the new scan without the quotes. Find AWF report by noahdfear ©2006 Version 1.40 Option 3 run successfully The current date is: Tue 10/16/2007 The current time is: 21:13:17.18 bak folders found ~~~~~~~~~~~ Directory of C:\PROGRA~1\DELLSU~1\BAK 07/16/2006 09:29 PM 389,120 DSAgnt.exe 1 File(s) 389,120 bytes Directory of C:\PROGRA~1\ITUNES\BAK 09/07/2007 04:55 PM 267,064 iTunesHelper.exe 1 File(s) 267,064 bytes Directory of C:\PROGRA~1\LEXMAR~1\BAK 07/20/2005 06:16 PM 192,512 lxccmon.exe 1 File(s) 192,512 bytes Directory of C:\PROGRA~1\LEXMAR~2\BAK 07/12/2005 03:36 AM 299,008 fm3032.exe 1 File(s) 299,008 bytes Directory of C:\PROGRA~1\MSNMES~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\QUICKT~1\BAK 06/29/2007 06:24 AM 286,720 qttask.exe 1 File(s) 286,720 bytes Directory of C:\PROGRA~1\SYMANT~1\BAK 06/23/2005 08:27 PM 85,696 VPTray.exe 1 File(s) 85,696 bytes Directory of C:\PROGRA~1\WIFD1F~1\BAK 11/03/2006 07:20 PM 866,584 MSASCui.exe 1 File(s) 866,584 bytes Directory of C:\WINDOWS\EHOME\BAK 09/29/2005 01:01 PM 67,584 ehtray.exe 1 File(s) 67,584 bytes Directory of C:\WINDOWS\SYSTEM32\BAK 08/10/2004 04:00 AM 15,360 ctfmon.exe 12/13/2005 08:45 AM 118,784 igfxpers.exe 12/13/2005 08:44 AM 98,304 igfxtray.exe 3 File(s) 232,448 bytes Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK 06/02/2005 10:21 AM 48,752 ccApp.exe 1 File(s) 48,752 bytes Directory of C:\PROGRA~1\CREATIVE\MIXER\BAK 02/23/2005 02:57 PM 57,344 CTSVolFE.exe 1 File(s) 57,344 bytes Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK 05/03/2006 03:12 AM 98,304 DMXLauncher.exe 1 File(s) 98,304 bytes Directory of C:\PROGRA~1\DELL\QUICKSET\BAK 02/20/2007 12:29 PM 1,191,936 quickset.exe 1 File(s) 1,191,936 bytes Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK 06/14/2007 12:01 AM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of C:\PROGRA~1\ICONIX\OEADDON\BAK 06/28/2007 03:39 AM 132,368 OEdmn_2.exe 1 File(s) 132,368 bytes Directory of C:\PROGRA~1\PCPITS~1\OPTIMIZE\BAK 07/09/2007 04:51 PM 2,577,120 PCPOptimize.exe 07/09/2007 04:51 PM 897,752 Reminder.exe 2 File(s) 3,474,872 bytes Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK 03/08/2006 03:48 AM 761,947 SynTPEnh.exe 1 File(s) 761,947 bytes Directory of C:\WINDOWS\SYSTEM32\DLA\BAK 09/08/2005 04:20 AM 122,940 DLACTRLW.EXE 1 File(s) 122,940 bytes Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK 06/10/2005 09:44 AM 81,920 issch.exe 06/10/2005 09:44 AM 249,856 isuspm.exe 2 File(s) 331,776 bytes Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 12/15/2006 12:32 PM 185,896 realsched.exe 1 File(s) 185,896 bytes Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK 10/18/2006 06:58 PM 696,320 ifrmewrk.exe 10/18/2006 07:04 PM 802,816 ZCfgSvc.exe 2 File(s) 1,499,136 bytes Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK 07/12/2007 04:00 AM 132,496 jusched.exe 1 File(s) 132,496 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ 389120 Jul 16 2006 "C:\Program Files\Dell Support\DSAgnt.exe" 389120 Jul 16 2006 "C:\Program Files\Dell Support\bak\DSAgnt.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\iTunesHelper.exe" 267064 Sep 7 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe" 102400 Sep 9 2007 "C:\WINDOWS\Installer\{B8A204BC-7177-470E-BBDD-47256D05B325}\iTunesIco.exe" 116024 Sep 7 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.1.2\iTunesSetupAdmin.exe" 116288 Jun 26 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3ZRXTLDW\iTunesSetupAdmin[1].exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\lxccmon.exe" 192512 Jul 20 2005 "C:\Program Files\Lexmark 3300 Series\bak\lxccmon.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" 299008 Jul 12 2005 "C:\Program Files\Lexmark Fax Solutions\bak\fm3032.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\qttask.exe" 286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\qttask.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\VPTray.exe" 85696 Jun 23 2005 "C:\Program Files\Symantec AntiVirus\bak\VPTray.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe" 866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\ehtray.exe" 67584 Sep 29 2005 "C:\WINDOWS\ehome\bak\ehtray.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\ctfmon.exe" 15360 Aug 10 2004 "C:\WINDOWS\system32\bak\ctfmon.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\igfxpers.exe" 118784 Dec 13 2005 "C:\drivers\video\onboard\igfxpers.exe" 118784 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxpers.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\igfxtray.exe" 98304 Dec 13 2005 "C:\drivers\video\onboard\igfxtray.exe" 98304 Dec 13 2005 "C:\WINDOWS\system32\bak\igfxtray.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" 48752 Jun 2 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\CTSVolFE.exe" 57344 Feb 23 2005 "C:\Program Files\Creative\Mixer\bak\CTSVolFE.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\DMXLauncher.exe" 98304 May 3 2006 "C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\quickset.exe" 1191936 Feb 20 2007 "C:\Program Files\Dell\QuickSet\bak\quickset.exe" 52272 Jun 10 2007 "C:\Program Files\Google\googletoolbar2user.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" 1145896 Jan 29 2007 "C:\Program Files\Rhapsody\google_bar\GoogleToolbarInstaller_en.exe" 1828152 May 19 2007 "C:\Documents and Settings\Kristy\My Documents\Downloaded Program Updates\GoogleDesktopSetup.exe" 583696 Dec 15 2006 "C:\Program Files\Common Files\Real\GToolbar\GoogleToolbarInstaller.exe" 138168 Jan 30 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jun 14 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\OEdmn_2.exe" 132368 Jun 28 2007 "C:\Program Files\Iconix\OEAddOn\bak\OEdmn_2.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe" 2577120 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\PCPOptimize.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\Reminder.exe" 897752 Jul 9 2007 "C:\Program Files\PCPitstop\Optimize\bak\Reminder.exe" 761947 Mar 8 2006 "C:\drivers\mouse\onboard\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" 761947 Mar 8 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\DLACTRLW.EXE" 122940 Sep 8 2005 "C:\Program Files\Roxio\DLA\install\dlactrlw.exe" 122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" 81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" 249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" 185896 Dec 15 2006 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" 696320 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe" 802816 Oct 18 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe" 75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" 83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" 132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe" end of report
Err…I need to go to bed and get some sleep I think. :( I left the files in the fix…they should not be there. Again, no damage but… :wacko:

Run the same option 3 but with this: Think I got it this time…I hope.

C:\Program Files\Dell Support\bak
C:\Program Files\iTunes\bak
C:\Program Files\Lexmark 3300 Series\bak
C:\Program Files\Lexmark Fax Solutions\bak
C:\Program Files\QuickTime\bak
C:\Program Files\Symantec AntiVirus\bak
C:\Program Files\Windows Defender\bak
C:\WINDOWS\ehome\bak
C:\WINDOWS\system32\bak
C:\WINDOWS\system32\bak
C:\WINDOWS\system32\bak
C:\Program Files\Common Files\Symantec Shared\bak
C:\Program Files\Creative\Mixer\bak
C:\Program Files\Dell\Media Experience\bak
C:\Program Files\Dell\QuickSet\bak
C:\Program Files\Google\GoogleToolbarNotifier\bak
C:\Program Files\Iconix\OEAddOn\bak
C:\Program Files\PCPitstop\Optimize\bak
C:\Program Files\PCPitstop\Optimize\bak
C:\Program Files\Synaptics\SynTP\bak
C:\WINDOWS\system32\DLA\bak
C:\Program Files\Common Files\InstallShield\UpdateService\bak
C:\Program Files\Common Files\InstallShield\UpdateService\bak
C:\Program Files\Common Files\Real\Update_OB\bak
C:\Program Files\Intel\Wireless\Bin\bak
C:\Program Files\Intel\Wireless\Bin\bak
C:\Program Files\Java\jre1.6.0_02\bin\bak
Ok, well this is all I got. Find AWF report by noahdfear ©2006 Version 1.40 Option 3 run successfully The current date is: Tue 10/16/2007 The current time is: 21:33:13.29 bak folders found ~~~~~~~~~~~ Directory of C:\PROGRA~1\MSNMES~1\BAK 0 File(s) 0 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ end of report

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI