[Resolved] Baseline

Hi Mschroe, In looking back over my HJT logs, I do see the C:\WINDOWS\Speech\Dragon\web_ie.dll file in all of them. James

Hi

here is where I found it
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll

I didn't install C:\WINDOWS\Speech\Dragon\web_ie.dll. I didn't see where you told me to do that.

I didn't want you to install it, I see signs of it on you pc and was wondering if you installed the program. it may be the source of all your problems.

please do this it is important

you did it right it changed ok

open the new ScannerThis.exe
click on open the misc. tools section
then click on open uninstall manager
then click on save list
save it and when it opens copy and paste here
good luck

Hi Mschroe, Wow, I am learning a lot here. THANK YOU! Here is the new log: 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 32 Bit HP CIO Components Installer Adobe Acrobat - Reader 6.0.2 Update Adobe Acrobat and Reader 6.0.3 Update Adobe Download Manager 1.2 (Remove Only) Adobe Flash Player ActiveX Adobe Reader 6.0.1 Adobe Shockwave Player AVG Anti-Rootkit Free Belkin Wireless G Plus MIMO USB Network Adapter CCleaner (remove only) CheckIt Diagnostics CorelDRAW Graphics Suite 12 Detto IntelliMover Enhanced Multimedia Keyboard Solution ERUNT 1.1j filehippo.com Update Checker Google Earth HighMAT Extension to Microsoft Windows XP CD Writing Wizard HijackThis 2.0.2 Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) hp center HP Customer Participation Program 9.0 HP Deskjet All-In-One Software 9.0 HP Imaging Device Functions 9.0 HP Instant Support HP Photosmart Essential 2.5 HP Product Detection HP RecordNow HP Smart Web Printing HP Solution Center 9.0 HP Update ICQ 5 Inactive HP Printer Drivers (Remove only) J2SE Runtime Environment 5.0 Update 11 Java 2 Runtime Environment, SE v1.4.2_07 Java™ 6 Update 7 Kaspersky Anti-Virus 7.0 Kaspersky Anti-Virus 7.0 Learn2 Player (Uninstall Only) Malwarebytes' Anti-Malware Malwarebytes' RogueRemover Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 1 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Data Access Components KB870669 Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Professional Plus 2007 Microsoft Office Professional Plus 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Picture It! Express 7.0 Microsoft Picture It! Express 9 Microsoft Picture It! Library 9 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Windows Application Compatibility Message Database - Service Pack Microsoft Windows Journal Viewer MSN Encarta Plus Support Files MSN Music Assistant MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 6.0 Parser (KB933579) My Photo Center Nero Suite overland PerformanceTest v6.0 PhotoParade Player PS2 QuickTime RealPlayer Rhapsody Rhapsody MP3 Download Manager Rhapsody Player Engine S3 Gamma S3 Savage4 Family Display Switch2 Utility Security Update for 2007 Microsoft Office System (KB951596) Security Update for 2007 Microsoft Office System (KB951944) Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Excel 2007 (KB951546) Security Update for Microsoft Office PowerPoint 2007 (KB951338) Security Update for Microsoft Office Publisher 2007 (KB950114) Security Update for Microsoft Office system 2007 (KB951808) Security Update for Microsoft Office system 2007 (KB954326) Security Update for Microsoft Office Word 2007 (KB950113) Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Visio 2007 (KB947590) Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Shop for HP Supplies Spyware Doctor 6.0 System Security Suite 1.04 Tcl 8.0.5 for Windows TurboTax ItsDeductible 2006 Update for Microsoft Office Outlook 2007 (KB952142) Update for Office 2007 (KB946691) Update for Outlook 2007 Junk Email Filter (kb956080) Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Viewpoint Media Player WildTangent Web Driver Windows Desktop Search 3.01 Windows Desktop Search 3.01 Windows Genuine Advantage v1.3.0254.0 Windows Imaging Component Windows Live OneCare safety scanner Windows Live Toolbar Windows Live Toolbar Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player 11 Windows Presentation Foundation Windows Vista Upgrade Advisor Windows XP Service Pack 3 Yahoo! Internet Mail Yahoo! Messenger If I am reading this right, there is a lot of stuff in here I could take out. I'll be interested to see what your determination is after reading this log. James

Hi Keej3


NEXT:
Make sure Internet Explorer isn't open

Run ScannerThis.exe again. Hit None of the above,
Click Do a System Scan Only.
Put a Check in the box on the left side on these: (Not to worry if not there)

O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\WINDOWS\Speech\Dragon\web_ie.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O3 - Toolbar: REALBAR - {4E7BD74F-2B8D-469E-C0FF-FD60B590A87D} - (no file)
O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')

Close ALL windows and browsers except HijackThis and click Fix checked
Then reboot

NEXT:
After reboot

1) Click on Start, Settings, Control Panel
2) Double-click on Add/Remove Programs
3) Click on the WildTangent selection and Change/Remove, Uninstall, or Add/Remove Then follow the onscreen prompts to remove the WT Driver.
Remove the Wild Tangent Driver from the Control Panel if it still exists
Delete the WildTangent folder in Program Files and Windows
Open My Computer
Double-click on Drive C
Double-click on Program Files
Right-click on WildTangent and choose Delete (if the folder exists)
Go back to Drive C and double-click on Windows
Right-click on the WT folder and choose Delete (if the folder exists)

I am looking at your add/remove programs we will deal with them later
While I am gone please do the above
post a ScannerThis log
good luck mschroe919

Hi Keej3

I am still digging into your problem.
can you do this and let me know the outcome:

Go to Tools, Manage Add-Ons and disable everything, then restart IE and see if it's acting better.
NEXT:

FIRST:
Lets make sure again that hidden files are shown::
Windows XP

* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.

NEXT:

Please download FileLook by jpshortstuff from one of these mirrors:

LINK 1

LINK 2

Double-click FileLook.exe to run it.
Ensure that the BBCode Ouput checkbox is checked.
Copy the content of the following codebox into the main textfield:

AutoPlay.exe

Click the FileLook button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

If for some reason it doesn't find it try this:
Double-click FileLook.exe to run it.
Ensure that the BBCode Ouput checkbox is checked.
Copy the content of the following codebox into the main textfield:

C:\hp\bin\AUTOPLAY.exe

Click the FileLook button to start the scan

Note: The log can also be found at C:\fl_log.txt
good luck
mschroe919

Hi Mschroe,

Here is the log for AutoPlay.exe:

FileLook.exe v1.0 by jpshortstuff
Log created at 21:34:28 on 02/10/2008

==============================
FileLook - utoPlay.exe

Unable to find file.

==============================

=EOF=


When I ran File Look for C:\hp\bin\AUTOPLAY.exe, it said the following:

FileLook.exe has encountered a problem and needs to close. We are sorry for the inconvenience. If you were in the middle of something, the information you were working on might be lost. Please tell us about this problem. Then I could click Send report to Microsoft or don't send report. I clicked don't send report.


It also let me look and see what the error was and it said the following:

Error sig App Name: FileLook.exe
App Ver: 0.0.0.0.
Mod Name: File Look.exe
Offset: 00005593

Since you gave me two links for FileLook, I deleted the first one I downloaded and downloaded the second one. I got the same message. Not sure what that means.

I did everything else you gave me to do. We had already done the show hidden files, etc. It seems like IE is opening up a bit faster now. What do you think?

James

Hi Keej3

Read thuis very carefuly:

NEXT:

Do a search for AutoPlay.exe
IMPORTANT IF FOUND DO NOT DELETE CAUSE THERE IS SOME LEGIT NAMED THE SAME.

All I want is to have you post the find (Name and location.) I will let youi know what to delete if any.
Good luck mschroe919

Hi Mschroe, I did the Search and I have 2. Here you go: AutoPlay C:\Documents and Settings\Default User\Start Menu\Programs\Startup AUTOPLAY C:\hp\bin James

Hi James,

FIRST:

go to this local and delete the file in RED

c:\documents and settings\Default User\start menu\programs\startup\AutoPlay.exe

NEXT:
Make sure Internet Explorer isn't open

Run hijackthis again. Hit None of the above,
Click Do a System Scan Only.
Put a Check in the box on the left side on these: (Not to worry if not there)

O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')


Close ALL windows and browsers except HijackThis and click Fix checked
Then reboot
post a HijackThis log and let me know how your PC ic behaving now
good luck mschroe919

you know I am not sure what programs you are refering to. The ones I had you install or the ones you have allready on your pc; Let me know cause I am working up one more post mschroe919

Hi Mschroe, These are the programs I was talking about: 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 32 Bit HP CIO Components Installer Adobe Acrobat - Reader 6.0.2 Update Adobe Acrobat and Reader 6.0.3 Update Adobe Reader 6.0.1 MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 6.0 Parser (KB933579) overland PerformanceTest v6.0 Security Update for 2007 Microsoft Office System (KB951596) Security Update for 2007 Microsoft Office System (KB951944) Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Excel 2007 (KB951546) Security Update for Microsoft Office PowerPoint 2007 (KB951338) Security Update for Microsoft Office Publisher 2007 (KB950114) Security Update for Microsoft Office system 2007 (KB951808) Security Update for Microsoft Office system 2007 (KB954326) Security Update for Microsoft Office Word 2007 (KB950113) Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Visio 2007 (KB947590) Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Shop for HP Supplies Update for Microsoft Office Outlook 2007 (KB952142) Update for Office 2007 (KB946691) Update for Outlook 2007 Junk Email Filter (kb956080) Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Windows Desktop Search 3.01 Windows Desktop Search 3.01 Windows Live Toolbar Windows Live Toolbar Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player 11 Windows XP Service Pack 3 One of the programs you told me to dowmload pulled up all of these programs. Can I delete any of these? It just seems like an awful lot of stuff clogging my computer, especially the updates and the service packs. If you do an update to a program, like Adobe, can you delete the update when it is done or do you have to have all of the updates on your computer? Am making any sense? THANKS! James

Thats what I thought you were talking about. First of all I don't know why you see so many duplicates, but if you delete 1 the program won't work. I wonder if you go to add/remove programs in the controll pane, do you see all the duplicates. Most of these programs are important so for now I would leave alone. Just go to add/remove and let me know if they show duplicates to. I have more for you but I want to wait you answere. mschroe919

Good morning Mschroe,

When I go to control panel, and I have "show updates" checked, here is what I see:

3 Adobe Acrobat Readers: 6.0.1 Adobe Reader, 6.0.2 Update and 6.0.3 Update.

2 entries entitled HP Update

3 Java: J25E Runtime Envoronment 5.0 Update 11, SE v1.4.2_07, Java 6 Update 7.

4 Microsoft .Net Framework: 1.1, 1.1 Hotfix (KB928366), 2.0 Service Pack 1 (with 9 various subfolders), 3.0 Service Pack 1 (with 10 various subfolders).

Mirosoft Learnng - Software Updates: 2 Security Updates for Step By Step Interactive Training (KB898458 & KB923723).

Microsoft Office Power Point: Viewer: 3 Security Updates (KB954038, KB951944, KB954326) and 1 Service Pack 1 (SP1).

Microsoft Office Professional Plus 2007: 9 Security Updates, 3 Updates, 1 Sercie Pak.

2 MSXML Service Packs (4.0 SP2).

3 Security Updates, 1 for Windows Media Player 11 and 2 for CAPICOM.

Windows IE 7 Software Updates: 11 Security Updates IE7, Hotfix IE7.

3 Windows Live Toolbars ????Why 3????

Windows XP Software Update: 13 Security Updates, 2 Updates, 2 Hotfix.

1 Windows XP Service Pack 3

Yahoo Messenger: I tried to delete this because I don't use it and it won't let me.


**If I uncheck "show updates", it still has:

Adobe Reader 6.0.1 and 6.0.3 Update.

2 HP PhotoSmart Essential 2.5.

2 HP Update

3 Java: J2SERuntime Environment 5.0 Update 11, Java 2 RE SE v1.4.2_07, Java 6 Update 7.

Microsoft .NET Framework 1.1 plus 2 Service packs (2.0 SP1 and 3.0 SP1) and 1 Hotfix.

2 Microsoft Picture It! Express: 7.0 and 9.

2 MXSML 4.0 SP2

2 Security Updates for CAPICOM.

2 WIndows Genuine Advantage v1.300254.0

3 Windows Live Toolbar


Whew, wish that had a copy and paste mode on that one! What do you think? It justs seems like an awful lot of stuff that could slow computer down.Can any of this be deleted? MUCH thanks!

James