This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] antivirus xp2009

48 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

OK back from work now, Lets have a deeper look at your system. But first I will assist in uninstalling Norton

Go here and download the removal tool, run it and reboot and Norton should have vanished


To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTScanit2 to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.
  • Close ALL OTHER PROGRAMS.
  • Open the OTScanit folder and double-click on OTScanit.exe to start the program.
  • Check the box that says Scan All Users
  • Check the Radio button for Rootkit check YES
  • Under Additional Scans check the following:
    • File - Lop Check
    • File - Purity Scan
    • Evnt - EventViewer Errors/Warnings (last 10)
  • Now click the Run Scan button on the toolbar.
  • Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Please attach the log in your next post.

To attach a file, do the following:
  • Click Add Reply
  • Under the reply panel is the Attachments Panel
  • Browse for the attachment file you want to upload, then click the green Upload button
  • Once it has uploaded, click the Manage Current Attachments drop down box
  • Click on [external image: Posted Image] to insert the attachment into your post
Hi again. OK I am taking out the limeware part downloads and part of the AIM folders that are suspect. I am also clearing all the temp files.

On completion of that I will give you a link for a firewall to download and install. Avast may give a query about Zone Alarm but that is only relevant to the pro version so just click NO :thumbup:

TO BEGIN

Start OTScanit. Copy/Paste the information in the quotebox below into the pane where it says "Paste fix here" and then click the Run Fix button.

[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{C4069E3A-68F1-403E-B40E-20066696354B}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-3082678609-3497586586-617967053-1005\] > -> HKEY_USERS\S-1-5-21-3082678609-3497586586-617967053-1005\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{C4069E3A-68F1-403E-B40E-20066696354B}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.]
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YN -> "" -> []
< Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List
YN -> "" -> []
[Files/Folders - Created Within 30 Days]
NY -> $AVG8.VAULT$ -> %SystemDrive%\$AVG8.VAULT$
NY -> AVG Free 8.0.lnk -> %AllUsersProfile%\Desktop\AVG Free 8.0.lnk
NY -> avg8 -> %AllUsersProfile%\Application Data\avg8
NY -> AVG -> %ProgramFiles%\AVG
NY -> iwifejel.dll -> %SystemRoot%\iwifejel.dll
NY -> AV9 -> %ProgramFiles%\AV9
NY -> VirusRemover2008 -> %ProgramFiles%\VirusRemover2008
NY -> fijqyrok -> %SystemRoot%\fijqyrok
NY -> phbgemaa.job -> %SystemRoot%\tasks\phbgemaa.job
[Files/Folders - Modified Within 30 Days]
NY -> phbgemaa.job -> %SystemRoot%\tasks\phbgemaa.job
NY -> fijqyrok -> %SystemRoot%\fijqyrok
NY -> AVG Free 8.0.lnk -> %AllUsersProfile%\Desktop\AVG Free 8.0.lnk
NY -> iwifejel.dll -> %SystemRoot%\iwifejel.dll
NY -> tmp38.exe -> %SystemRoot%\Temp\tmp38.exe
NY -> avvclean.dat -> %SystemRoot%\Temp\mcaA8.tmp\avvclean.dat
NY -> avvnames.dat -> %SystemRoot%\Temp\mcaA8.tmp\avvnames.dat
NY -> avvscan.dat -> %SystemRoot%\Temp\mcaA8.tmp\avvscan.dat
NY -> McDefragTask.job -> %SystemRoot%\tasks\McDefragTask.job
NY -> ad3shaun.cmdline -> %SystemRoot%\Temp\ad3shaun.cmdline
NY -> ad3shaun.dll -> %SystemRoot%\Temp\ad3shaun.dll
NY -> thj-rmlp.cmdline -> %SystemRoot%\Temp\thj-rmlp.cmdline
NY -> thj-rmlp.dll -> %SystemRoot%\Temp\thj-rmlp.dll
NY -> IEViewBar.dll -> %SystemRoot%\Temp\0\Private\Runtime\ProgFiles\IEViewBar.dll
NY -> ViewBar.dll -> %SystemRoot%\Temp\0\Private\Runtime\ProgFiles\ViewBar.dll
NY -> ViewBarSystemInfo.dll -> %SystemRoot%\Temp\0\Private\Vendor\ProgFiles\ViewBarSystemInfo.dll
NY -> VETScriptInterpreter.dll -> %SystemRoot%\Temp\0\Private\Runtime\ProgFiles\VETScriptInterpreter.dll
NY -> SWFView.dll -> %SystemRoot%\Temp\0\Private\Runtime\ProgFiles\SWFView.dll
[File - Lop Check]
NY -> Viewpoint -> C:\Documents and Settings\All Users\Application Data\Viewpoint
NY -> WildTangent -> C:\Documents and Settings\All Users\Application Data\WildTangent
NY -> HPCeeSchedule.job -> C:\WINDOWS\Tasks\HPCeeSchedule.job
NY -> McDefragTask.job -> C:\WINDOWS\Tasks\McDefragTask.job
NY -> McQcTask.job -> C:\WINDOWS\Tasks\McQcTask.job
NY -> phbgemaa.job -> C:\WINDOWS\Tasks\phbgemaa.job
[Custom Items]
:files
C:\Documents and Settings\Mark Uphouse\.limewire
C:\Documents and Settings\Mark Uphouse\Application Data\Aim\abfcqkov
:end
[Empty Temp Folders]

The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here along with a new Hijackthis log.

I will review the information when it comes back in.

THEN

Download and install Zone Alarm Free

NEXT

Download and then run SuperAntispyware
  • On the first page select Check for Updates
  • On completion select SCAN YOUR COMPUTER
  • On the next page select COMPLETE SCAN and tick ALL your drives
  • The next stage will take a while as your entire drive(s), memory and registry are scanned
  • When it has completed click NEXT
  • The next screen shows the problems found click OK
  • On the next screen place a tick against all items and select NEXT
  • Now to get the log Go to the PREFERENCES button on the right bottom
  • Select the STATISTICS/LOG tab
  • Highlight the scan just completed and click VIEW LOG
  • This will open a notepad text file copy and paste this to your next reply

Logs required : OTScanit report and Superantispyware log

Also let me know of any problems you encountered performing the steps above or any continuing problems you are still having with the computer.
i dont think i have ever ran a hijackthis?? [Registry - Safe List] Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found. Registry value HKEY_USERS\S-1-5-21-3082678609-3497586586-617967053-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\ deleted successfully. [Files/Folders - Created Within 30 Days] C:\$AVG8.VAULT$ folder moved successfully. C:\Documents and Settings\All Users\Desktop\AVG Free 8.0.lnk moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\update\prepare folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\update\download folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\update\backup folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\update folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\scanlogs folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\Lsdb\Prev folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\Lsdb folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\Log folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\emc\Queue\TEMP folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\emc\Queue\OUT folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\emc\Queue\ACTIVE folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\emc\Queue folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\emc\Log folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\emc folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\dumps folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\Cfg folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\AvgAm folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8\admincli folder moved successfully. C:\Documents and Settings\All Users\Application Data\avg8 folder moved successfully. C:\Program Files\AVG\AVG8\ToolbarIEcache folder moved successfully. C:\Program Files\AVG\AVG8\ToolbarFF\Components folder moved successfully. C:\Program Files\AVG\AVG8\ToolbarFF\Chrome\Cache folder moved successfully. C:\Program Files\AVG\AVG8\ToolbarFF\Chrome folder moved successfully. C:\Program Files\AVG\AVG8\ToolbarFF folder moved successfully. C:\Program Files\AVG\AVG8\Icons folder moved successfully. C:\Program Files\AVG\AVG8\Firefox\Components folder moved successfully. C:\Program Files\AVG\AVG8\Firefox\Chrome folder moved successfully. C:\Program Files\AVG\AVG8\Firefox folder moved successfully. C:\Program Files\AVG\AVG8 folder moved successfully. C:\Program Files\AVG folder moved successfully. C:\WINDOWS\iwifejel.dll moved successfully. C:\Program Files\AV9 folder moved successfully. C:\Program Files\VirusRemover2008 folder moved successfully. C:\WINDOWS\fijqyrok moved successfully. C:\WINDOWS\tasks\phbgemaa.job moved successfully. [Files/Folders - Modified Within 30 Days] File C:\WINDOWS\tasks\phbgemaa.job not found! File C:\WINDOWS\fijqyrok not found! File C:\Documents and Settings\All Users\Desktop\AVG Free 8.0.lnk not found! File C:\WINDOWS\iwifejel.dll not found! C:\WINDOWS\Temp\tmp38.exe moved successfully. C:\WINDOWS\Temp\mcaA8.tmp\avvclean.dat moved successfully. C:\WINDOWS\Temp\mcaA8.tmp\avvnames.dat moved successfully. C:\WINDOWS\Temp\mcaA8.tmp\avvscan.dat moved successfully. C:\WINDOWS\tasks\McDefragTask.job moved successfully. C:\WINDOWS\Temp\ad3shaun.cmdline moved successfully. C:\WINDOWS\Temp\ad3shaun.dll moved successfully. C:\WINDOWS\Temp\thj-rmlp.cmdline moved successfully. C:\WINDOWS\Temp\thj-rmlp.dll moved successfully. C:\WINDOWS\Temp\0\Private\Runtime\ProgFiles\IEViewBar.dll moved successfully. C:\WINDOWS\Temp\0\Private\Runtime\ProgFiles\ViewBar.dll moved successfully. C:\WINDOWS\Temp\0\Private\Vendor\ProgFiles\ViewBarSystemInfo.dll moved successfully. C:\WINDOWS\Temp\0\Private\Runtime\ProgFiles\VETScriptInterpreter.dll moved successfully. C:\WINDOWS\Temp\0\Private\Runtime\ProgFiles\SWFView.dll moved successfully. [File - Lop Check] C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\includes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather\core folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Weather folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\ThemeCustomizer folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\options folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon\core folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features\Amazon folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\features folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\Includes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics\barintro_images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes\backgrounds folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets\colorSchemes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows\assets folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Windows folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production\automationScripts folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\production folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\includes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather\core folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Weather folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\ThemeCustomizer folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\includes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon\core folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features\Amazon folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\features folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics\tellafriend_offline folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes\backgrounds folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets\colorSchemes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default\assets folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3\Default folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\ThemesV3 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0\Cache folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar\3.8.0 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Toolbar folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\UserShell\AOL9Plus folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\UserShell\AOL9 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\UserShell folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\Resources\ResourceFolder_03 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\Resources\ResourceFolder_02 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\Resources\ResourceFolder_01 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\Resources\ResourceFolder_00 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\Resources folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Manager\Downloads\Cache folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Manager\Downloads folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Manager folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates\Default folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\ThemeTemplates folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SkinChooser folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\SelectorEditor folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\search folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\popups folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\includes folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista\core folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoviewVista folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview2\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\tests folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard\html folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\wizard folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\offline folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frame_template folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Sports folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Years folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\New Baby folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Halloween folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Christmas folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Chanukah folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Birthday folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames\Autumn folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview\frames folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\photoview folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\options folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\GeneralOptions folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\bookmarks folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\alerts folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features\AdvancedOptions folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\features folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\tray_scroller folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\shared_graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\selectors folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\searchWidget folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\scrollbar folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\preview folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\options_menu_button\graphics folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\options_menu_button folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\notification folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\listMenu folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\list folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\htmldialog folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dropdowns folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\dialogs folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements\buttons folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\UI_elements folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend\offline folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\tellafriend folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options\images folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core\options folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine\core folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0\SkinEngine folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime\3.8.0 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\Toolbar Runtime folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint\AxMetaStream_Win folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\zuma folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\zulugems folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wordup folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wordsymphony folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wordjong folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wordigo folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wordbuzz folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wildwestransom folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wikandthefableofsouls folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\wheeloffortune folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\waterbugs folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ultimatedominoes folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\turtleodyssey folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\triviamachine folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\trijinx folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\tradewindslegends folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\tradewinds2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\tradewinds folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\tornadojockey folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\tinosfruitstand folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\timebreaker folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\theseus folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\theemperorsmahjong folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\tennistitans folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\swarm folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\sveerz folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\supergranny folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\subwayscramble folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\stx folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\strikeball2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\sportballchallenge folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\spinandwin folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\spelvin folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\spellagories folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowytreasurehunter2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowytreasurehunter folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowythebearsadventure folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowyspacetrip folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowypuzzleislands folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowyfishfrenzy folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snowboardsuperjam folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\snailmail folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\slyderdrm3 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\slyderadventures folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\slurp folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\slingodeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\shootingstarspool folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\shapesolitaire folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\serpengo folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\scrabblerackattack folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\scrabbleblast folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\scrabble folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\rollerrush folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\rockrolljeopardy folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ricochetrecharged folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ricochetlostworlds folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ricochetextreme folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\realjigsawpuzzle folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\rainbowweb folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\qbz folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\qbeez2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\puzzlemyth folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\puzzleexpress folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\puzzleblast folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\professorfizzwizzle folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\popspipes folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\polartubing folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\polargolferpine folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\polargolfer folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\polarbowler folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\pokersuperstars folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\plantasia folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\piratesoftreasureisland folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\piratepoppers folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\pipsoh folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\phoenixassault folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\penguinpuzzle folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\pegsweeper folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\overball folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\otto folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\orbital folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ogrebowler folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\oasis folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ncaachamprun06 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\mysterycasefiles folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\mortimer folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\monsterparkmadness folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\minigolfmayhem folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\memoryloops folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\mauiwowee folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\mahjongquest folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\mahjongjourney folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\mahjongadventures folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\magicgem folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\lostcityofgold folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\lexiboxdeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\lemonadetycoon2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\jigwords folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\jewelthief folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\jewelquest folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\jewelofatlantis folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\jeopardy folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\jamxm folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\inwordzdeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\insaniquariumdeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\incadia folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\icepuzzledeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\icebreaker folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\hyperballoidthenextchallenge folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\hyperballoidthecompleteedition folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\houseofcards folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\holidayexpress folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\hexalot folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\grooveomatic folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\greedywords folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\grannyinparadise folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\golfadventuregalaxy folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\goldsprinter folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\goldfever folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\glowglowfirefly folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\geniusmove folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\geneforge folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\gemshop folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\gardendreams folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\funkiballadventure folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fruitlockers folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\froggysadventures folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\froggycastle2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\frescowizard folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fortunetiles folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\flipwords folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\flipwit folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fliporflop folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fivecardslingo folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fivecardfrenzy folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fivecarddeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fishtycoon folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\finaldrivenitro folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fibertwig folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\feelers folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fate folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\familyfeud folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\fairies folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\faceit folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\eggvschicken folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\dropextreme folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\dropem folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\dragonball folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\dominomaster folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\dinerdash folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\digbysdonuts folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\cuemaster folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\cubology folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\crystalpath folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\crystalmaze folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\crystalix folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\cosmicbugs folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\clashnslash folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\circulate folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\cinematycoon folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ciaobella folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\chuzzledeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\chompchompsafari folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\chessmasterchallenge folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\charmtale folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\carlthecaveman folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\cakemania folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\cactusbruce folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bubblefishbob folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bricksofegypt folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bricksofcamelot folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bounce folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bookwormdeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bonniesbookstore folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\boneoutfromboneville folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bogglesupreme folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\blasterball2remix folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\blasterball2holidays folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\blasterball2drm3 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\blackhawkstriker2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bistrostars folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bigmoney folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bigkahunawords folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bigkahunareef folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bewitched folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bejeweled2deluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\barnyardinvasion folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\bangonblitz folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\balloonblast folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ballistik folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ball7 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\avalanche folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\atomaders folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\atlantisadventure folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\atlantis folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\astropop folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\astrobatics folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\asianata folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\asea folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\arcticquest folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\aquapearls folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\aquacade folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\antwar folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ancienttripeaks folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ancienttrijong folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ancientsudoku folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ancientspider folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ancientseal folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ancienthearts folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\alphaball folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\aliensky folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\alienshooter folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\alienoutbreak2 folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\alchemydeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\alchemistwizard folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\airstrike2gulfthunder folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\ageofcastles folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\actionballdeluxe folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\actionball folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product\abcisland folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\product folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\js folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\img\btn folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\img folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs\css folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI\htdocs folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\UI folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\Downloads\Updates folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\Downloads\Installers folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console\Downloads folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\My HP Game Console folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\LicenseStores folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent\GameData folder moved successfully. C:\Documents and Settings\All Users\Application Data\WildTangent folder moved successfully. C:\WINDOWS\Tasks\HPCeeSchedule.job moved successfully. File C:\WINDOWS\Tasks\McDefragTask.job not found! C:\WINDOWS\Tasks\McQcTask.job moved successfully. File C:\WINDOWS\Tasks\phbgemaa.job not found! [Custom Items] ========== FILES ========== Folder move failed. C:\Documents and Settings\Mark Uphouse\.limewire scheduled to be moved on reboot. File/Folder C:\Documents and Settings\Mark Uphouse\Application Data\Aim\abfcqkov not found. [Empty Temp Folders] File delete failed. C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\hsperfdata_Mark Uphouse\1360 scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\sqlite_xCR7KIGnl4CdWab scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\~DF49B2.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\~DFA649.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6ec.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\sqlite_fNj4d5z3qqbAoZA scheduled to be deleted on reboot. Windows Temp folder emptied. File delete failed. C:\Documents and Settings\Mark Uphouse.RUFIO\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\irc.jar-34862d03-521401fa.zip scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Mark Uphouse.RUFIO\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\pixx.jar-7461a97e-3a69ae20.zip scheduled to be deleted on reboot. Java cache emptied. RecycleBin -> emptied. < End of fix log > OTScanIt2 by OldTimer - Version 1.0.7.1 fix logfile created on 01292009_172044 Files moved on Reboot… Folder move failed. C:\Documents and Settings\Mark Uphouse\.limewire scheduled to be moved on reboot. File C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\hsperfdata_Mark Uphouse\1360 not found! File C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\sqlite_xCR7KIGnl4CdWab not found! File C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\~DF49B2.tmp not found! C:\Documents and Settings\Mark Uphouse.RUFIO\Local Settings\Temp\~DFA649.tmp moved successfully. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully. File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found! C:\WINDOWS\temp\Perflib_Perfdata_6ec.dat moved successfully. C:\WINDOWS\temp\sqlite_fNj4d5z3qqbAoZA moved successfully. C:\Documents and Settings\Mark Uphouse.RUFIO\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\irc.jar-34862d03-521401fa.zip moved successfully. C:\Documents and Settings\Mark Uphouse.RUFIO\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\pixx.jar-7461a97e-3a69ae20.zip moved successfully. Registry entries deleted on Reboot…
OK Hijackthis destructions follow :)

Download & Run HijackThis.exe

  • Download HJTInstall.exe to your Desktop.
  • Doubleclick HJTInstall.exe to install it.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Copy/Paste the log to your next reply please.
Don't use the Analyse This button, its findings are dangerous if misinterpreted.
Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.


If you could include this with the Superantispyware log :thumbup:
ok.. i guess i got an old version of hijack this and it got intercepted by blair or something.. when i tried to download it asked me what program i wanted to use to open the program and none of them worked.. now what??

ok.. got it!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:55:23 PM, on 1/29/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Vongo\Tray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Vongo\VongoService.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.whatthetech.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf=laptop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…n&pf=laptop
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - S-1-5-18 Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe (User 'Default user')
O4 - .DEFAULT User Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe (User 'Default user')
O4 - Startup: Vongo Tray.lnk = C:\Program Files\Vongo\Tray.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=64&bd=pavilion&pf=laptop
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Vongo Service - Starz Entertainment Group LLC - C:\Program Files\Vongo\VongoService.exe

–
End of file - 7350 bytes
looked pretty clean only a couple of things had to be corrected.. not sure if there is a log or not.. ready for next step? is superantispyware a virus protection like norton? do i need to get one of those?? be back later tonight.. have to leave now for work
Yep if I could see the superantispware log

Start SAS then follow the instructions below. Also how is the computer performing now ?
  • Now to get the log Go to the PREFERENCES button on the right bottom
  • Select the STATISTICS/LOG tab
  • Highlight the scan just completed and click VIEW LOG
  • This will open a notepad text file copy and paste this to your next reply
I think it is running pretty good.. he has been using it.. i told him to be careful because it was not fully protected yet!! if he messes it up again before its fixed, he is on his own!! haa will have that log here shortly!!

here is the log! let me know what to do next.. probably be back later today or tomorrow…



SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/29/2009 at 06:26 PM

Application Version : 4.25.1012

Core Rules Database Version : 3735
Trace Rules Database Version: 1704

Scan type : Quick Scan
Total Scan Time : 00:14:31

Memory items scanned : 544
Memory threats detected : 0
Registry items scanned : 416
Registry threats detected : 0
File items scanned : 9817
File threats detected : 8

Adware.Tracking Cookie
C:\Documents and Settings\Mark Uphouse.RUFIO\Cookies\mark [removed][1].txt
C:\Documents and Settings\Mark Uphouse.RUFIO\Cookies\mark uphouse@doubleclick[2].txt
C:\Documents and Settings\Mark Uphouse.RUFIO\Cookies\mark uphouse@mediaplex[1].txt
C:\Documents and Settings\Mark Uphouse\Cookies\mark uphouse@revenuehit[1].txt
C:\Documents and Settings\Mark Uphouse\Cookies\mark uphouse@tribalfusion[2].txt
C:\Documents and Settings\Mark Uphouse\Cookies\mark uphouse@atdmt[2].txt
C:\Documents and Settings\Mark Uphouse\Cookies\mark uphouse@avgtechnologies.112.2o7[1].txt
C:\Documents and Settings\Mark Uphouse\Cookies\mark uphouse@doubleclick[1].txt
Nicely done so lets wrap this one up and start on your other problems :)

Now the best part of the day —– Your log now appears clean :thumbup:

A good workman always cleans up after himself so…Download and run this small programme and hit the cleanup button. It will remove all the programmes we have used plus itself. MBAM can be uninstalled via control panel add/remove along with ERUNT. But they may be useful tools to keep

We will now confirm that your hidden files are set to that, as some of the tools I use will change that
  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Do not show hidden files and folders.
  • Click Yes to confirm.
  • Click OK.

Please download JavaRa to your desktop and unzip it to its own folder
  • Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
  • Accept any prompts.
  • Open JavaRa.exe again and select Search For Updates.
  • Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.

XP
Now to get you off to a good start we will clean your restore points so that all the bad stuff is gone for good. Then if you need to restore at some stage you will be clean. There are several ways to reset your restore points, but this is my method:
  • Select Start > All Programs > Accessories > System tools > System Restore.
  • On the dialogue box that appears select Create a Restore Point
  • Click NEXT
  • Enter a name e.g. Clean
  • Click CREATE
You now have a clean restore point, to get rid of the bad ones:
  • Select Start > All Programs > Accessories > System tools > Disk Cleanup.
  • In the Drop down box that appears select your main drive e.g. C
  • Click OK
  • The System will do some calculation and the display a dialogue box with TABS
  • Select the More Options Tab.
  • At the bottom will be a system restore box with a CLEANUP button click this
  • Accept the Warning and select OK again, the program will close and you are done

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
  • SpywareBlaster to help prevent spyware from installing in the first place.
  • SuperAntispyware Run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To keep your operating system up to date visit

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Keep safe :wave:

NEXT PLEASE

Could you give me a run down on the problems you are having and post a Hijackthis log

Download & Run HijackThis.exe

  • Download HJTInstall.exe to your Desktop.
  • Doubleclick HJTInstall.exe to install it.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Copy/Paste the log to your next reply please.
Don't use the Analyse This button, its findings are dangerous if misinterpreted.
Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
This is the oldest computer I have. And the one that is used by everyone in the home and guests.. It has been running slow, and has said quite a few times that the virtual memory is low. Here is the hijack this log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:18:33 PM, on 2/1/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\IOGEAR\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\Program Files\Common Files\AOL\1102416741\ee\AOLSoftware.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\program files\common files\aol\1102416741\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler.exe
c:\program files\common files\aol\1102416741\ee\aolsoftware.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\program files\common files\aol\1102416741\ee\anotify.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myspace.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.live.com/?searchonly=true&mkt=en-us
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: (no name) - {0171A262-E6E1-4AD9-AB44-A22B6A171809} - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1FB27CC3-B1F3-4F9B-BD7F-B82E1788D3D1} - (no file)
O2 - BHO: (no name) - {21138794-59D3-4D6C-815A-2EFC01197D09} - (no file)
O2 - BHO: (no name) - {21C4895E-7185-4F85-88B9-BEBADC45501E} - (no file)
O2 - BHO: (no name) - {420BE372-8C47-4E04-BF9E-72018BE11C17} - (no file)
O2 - BHO: (no name) - {5059B577-D64F-4AE2-A969-3367BB24895C} - (no file)
O2 - BHO: (no name) - {520D5690-3338-4BF0-B313-E31B08677080} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5788A967-66D9-47A5-8C08-C6C08FA9FD0B} - (no file)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {605FE198-A19E-4720-BDC5-BDC573AE84A2} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7ABD859B-6399-466D-9114-E15159D34FD1} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: (no name) - {80DE8AD8-2832-43E0-B2D6-A4FFE3EDA6B0} - (no file)
O2 - BHO: (no name) - {875A1348-7674-42aa-ADAC-B4F36A004A2D} - (no file)
O2 - BHO: (no name) - {89176599-DC41-4E89-8CF2-EC07E659F868} - (no file)
O2 - BHO: (no name) - {976C2EF4-7916-4A58-9BA0-FBD1615E720C} - (no file)
O2 - BHO: (no name) - {9A40659B-CDD7-4C98-B14E-DFD72611FDA5} - (no file)
O2 - BHO: (no name) - {9BFDBC71-7C82-412E-99DE-D438BD40312F} - (no file)
O2 - BHO: (no name) - {A406E38F-F9B0-4F43-91DB-2F0CFE28A0F5} - (no file)
O2 - BHO: (no name) - {AAF9905A-575B-49CA-8B0D-6F02F92626E7} - (no file)
O2 - BHO: (no name) - {AB24FE09-C64F-4922-A19D-529915C7451E} - (no file)
O2 - BHO: (no name) - {AC528EA7-3FD7-4708-B168-B9585B66B4B7} - (no file)
O2 - BHO: (no name) - {B8414299-542A-43C2-9AC7-803C28F3A1B2} - (no file)
O2 - BHO: (no name) - {D9CC93BE-6A39-4403-8C91-597C1A0CD32B} - (no file)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {DD32C717-FC20-498A-BA5D-90E86145EFFF} - (no file)
O2 - BHO: (no name) - {E71C5440-5B95-41B8-8733-12D3B8005095} - C:\WINDOWS\system32\ddcca.dll (file missing)
O2 - BHO: (no name) - {E7C0DF6C-4626-4396-AB01-7C9850BAA344} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn4\yt.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\aim\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1102416741\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WUSB54Gv4] C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Logitech Desktop Messenger] C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Shellie\NewVersion\setup-8876480.exe -ReportOnly
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to EverNote - res://C:\Program Files\EverNote\EverNote\enbar.dll/2000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\IOGEAR\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Add to EverNote - {A5ABA0BB-F195-40d8-A5E9-0801153E6597} - C:\Program Files\EverNote\EverNote\enbar.dll
O9 - Extra 'Tools' menuitem: Add to EverNote - {A5ABA0BB-F195-40d8-A5E9-0801153E6597} - C:\Program Files\EverNote\EverNote\enbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\aim\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\IOGEAR\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\IOGEAR\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.emachines.com
O15 - Trusted Zone: http://www.msworld.org
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha…t/c381/chat.cab
O16 - DPF: Yahoo! Euchre - http://download.games.yahoo.com/games/clients/y/et1_x.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2E12FB00-546B-4EE3-9CC2-057BF02E1C17} (Webshots Multiple Media Uploader - Container) - http://community.webshots.com/html/atx/wsaxcontrol.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4AD73894-A895-4FC2-B233-299867E08753} - http://apps.deskwizz.com/ax/adwerkz.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.av.aol.com/molbin/shared/m…83/mcinsctl.cab
O16 - DPF: {4FAE30E1-EE9C-477D-8D06-BF8D3429B60F} (WebIQ Technology Client) - http://webiq001.webiqonline.com/WebIQ/bin/WebIQ.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1125452017421
O16 - DPF: {72C9EA8F-8965-40C2-ABAD-D460A5815F86} (hostCntrlIE Class) - http://vhost.oddcast.com/admin/hostClientIE.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/4047/ftp…23/cpbrkpie.cab
O16 - DPF: {9E17A5F9-2B9C-4C66-A592-199A4BA1FBC8} (AIM UPF Control) - http://pictures02.aim.com/ygp/aol/plugin/u…AIM.9.5.1.7.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {A0EAC162-A012-4AD8-B2E1-D5A0BBBCDA51} - http://64.34.166.182/webnetcounters/PopupSh.ocx
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/…tiveXPlugin.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/…utocomplete.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.av.aol.com/molbin/shared/m…,20/mcgdmgr.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/Crusher.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/GameHos…ronGameHost.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://www.shockwave.com/content/insaniqua…aploader_v6.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?326
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup…er/imloader.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O21 - SSODL: carbinyl - {8d8c2387-7f80-4022-9be6-43630a969558} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\IOGEAR\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: WUSB54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

–
End of file - 19830 bytes

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI