Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Please assist with this process!  (Read 18717 times)

0 Members and 1 Guest are viewing this topic.

Flame

    Topic Starter
  • Moderator


  • Prodigy

  • Think, dream, see, be... Everything.
  • Thanked: 6
    • Yes
  • Certifications: List
  • Experience: Guru
  • OS: Other
Please assist with this process!
« on: July 15, 2005, 09:10:21 PM »
Hello everyone! I have a Creative SoundBlaster Audigy Sound card... For come reason, when Creative mediaSource Go! runs on startup, Norton freaks out, and it will NOT enable auto protect... However, if I close out MediaSource Go! and restart the computer, it works fine!  ::)  Does anyone know if it is safe or even what to do to make this program STOP launching at startup?

[glb]Flame[/glb]
« Last Edit: July 15, 2005, 09:10:44 PM by flame »

Fed

  • Moderator


  • Sage
  • Thanked: 35
    • Experience: Experienced
    • OS: Windows XP
    Re: Please assist with this process!
    « Reply #1 on: July 15, 2005, 09:40:52 PM »
    All you really need for your sound blaster is drivers (I think) LOL.
    Lots of hardware adds in 'extra' software junk that you don't need.
    Run Hijackthis, scan 1st then save the log and get it analysed here.
    http://www.hijackthis.de/index.php?langselect=english
    You can then remove it with Hijackthis but if you want it back you will probably have to re-install the software.
    I should do the same for my nvidea stuff.

    Flame

      Topic Starter
    • Moderator


    • Prodigy

    • Think, dream, see, be... Everything.
    • Thanked: 6
      • Yes
    • Certifications: List
    • Experience: Guru
    • OS: Other
    Re: Please assist with this process!
    « Reply #2 on: July 15, 2005, 09:45:17 PM »
    Where can I download HijackThis? That's the just the analysis tool, right?

    [glb]Flame[/glb]

    Fed

    • Moderator


    • Sage
    • Thanked: 35
      • Experience: Experienced
      • OS: Windows XP
      Re: Please assist with this process!
      « Reply #3 on: July 16, 2005, 02:37:31 AM »
      You download it from the same site (direct download)
      in small print.

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #4 on: July 16, 2005, 07:09:05 AM »
      Ok. I'll have that tomorrow.. (It only happens once daily lol )  ;)  ::)

      [glb]Flame[/glb]

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #5 on: July 17, 2005, 07:26:08 AM »
      Ok, here isa my logfile... Can somebody please help me find out which is the process I need to shut-down here?

      Logfile of HijackThis v1.99.1
      Scan saved at 9:08:04 AM, on 7/17/2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
      C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
      C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
      C:\WINDOWS\system32\CTHELPER.EXE
      C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
      C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
      C:\WINDOWS\system32\dla\tfswctrl.exe
      C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
      C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
      C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
      C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
      C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
      C:\Program Files\Dell Support\DSAgnt.exe
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
      C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
      C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Documents and Settings\Flame\Desktop\HijackThis.exe
      C:\WINDOWS\system32\wuauclt.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =  

      [glb]Flame[/glb]

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #6 on: July 17, 2005, 07:28:17 AM »
      Continued...

      http://www.dell4me.com/myway
      R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
      O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
      O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
      O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
      O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
      O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
      O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
      O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
      O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
      O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
      O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
      O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
      O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra button: (no name) - {D799B0E4-BEDE-41d2-AEE0-1E3A1C4EF918} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe (HKCU)

      [glb]Flame[/glb]

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #7 on: July 17, 2005, 07:28:57 AM »
      The last continuation...  ::)

      O9 - Extra 'Tools' menuitem: IE Privacy Keeper - {D799B0E4-BEDE-41d2-AEE0-1E3A1C4EF918} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe (HKCU)
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
      O16 - DPF: {2DAE59A1-B355-4653-8D33-33A3A8F8C078} (MaxisVacationTeleX Control) - http://thesims.ea.com/teleport/vacation/MaxisVacationTeleX.cab
      O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119477008054
      O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://echat.us.dell.com/Media/VisitorChat/TLIEFlash.CAB
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
      O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinstall/includes/vzWebIns.CAB
      O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
      O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4534/mcfscan.cab
      O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
      O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
      O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
      O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
      O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
      O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
      O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
      O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

      [glb]Flame[/glb]

      Mac

      • Guest
      Re: Please assist with this process!
      « Reply #8 on: July 17, 2005, 07:35:36 AM »
      1st thing I see is that you are using two anti-virus programs Norton & McAfee, which will usually cause a conflict anyway.

      Try it with just the one.

      Then you can also try these two on-line HJT analysers.

      Hijack This Analysis
      Hijack This Detective

      Now you can paste the whole log in one go instead of in three bits!

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #9 on: July 17, 2005, 07:37:09 AM »
      Strange... I uninstalled McAfee Virusscan but kept the firewall... How is McAfee virusscan still running?

      [glb]Flame[/glb]

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #10 on: July 17, 2005, 07:40:05 AM »
      I analyzed the logfile with both links, but what I'm lookinf for is the process that allows Creative MediaSource Go! to run at startup... What happens is norton Autoprotect becomes disabled, and you follow a help link to get it back... It says that the problem was caused by my soundcard, and MediaSource Go! to be exact... So I want to fix this once and for all...

      [glb]Flame[/glb]

      Mac

      • Guest
      Re: Please assist with this process!
      « Reply #11 on: July 17, 2005, 07:42:57 AM »
      The results are in!

      Hijack This Analysis

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #12 on: July 17, 2005, 07:43:51 AM »
      Yeah, I got the same thing... But which process do I need to shut-off so that Norton can run better?

      [glb]Flame[/glb]

      Mac

      • Guest
      Re: Please assist with this process!
      « Reply #13 on: July 17, 2005, 07:48:56 AM »
      Hmmm, did you notice the Sound Card registration reminder in the second analyser? Have you registered? Maybe there is an update.

      Have you checked the SoundBlaster site and the Symantec site?

      I notice that your Java is Java-jre1.5.0_02 whilst mine is now Java-jre1.5.0_4.

      Just click on the Java icon in control panel to update and then uninstall version 2 in Add-Remove programs.
      « Last Edit: July 17, 2005, 07:49:17 AM by Mac »

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #14 on: July 17, 2005, 08:22:00 AM »
      I have no idea how to register... I never see these reminders... lol  Also, I tried contacting Creative, but they want my card serial number, but I have to perform a worldwide search in my computer for it... Inside the case... As far as the Norton/Creative site, the Norton webiste is where I foudn out that MediaSource Go! is the problem... I'll also update java...

      [glb]Flame[/glb]

      merlin_2

      • Guest
      Re: Please assist with this process!
      « Reply #15 on: July 17, 2005, 12:22:53 PM »
      first thing to do is......download spysweeper from webroot and run it......this creative media......is it a website pop up.....if so disable it .......type msconfig in the run box....click startup and disable the things  that you dont want to load.....

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #16 on: July 17, 2005, 01:35:13 PM »
      I have scanned for viruses and Spyware with no issues. However, becuase I have no idea which process is MediaSource Go! I can not disable it...

      [glb]Flame[/glb]
      « Last Edit: July 17, 2005, 01:35:22 PM by flame »

      merlin_2

      • Guest
      Re: Please assist with this process!
      « Reply #17 on: July 17, 2005, 01:49:30 PM »
      Ctrl+alt+del.......task manager.......end the process
      Or download a start up manager>http://www.zamaansoft.com/

      To me your system has got  loads of spyware on it......try either cws shreeder....bho s

      Go to mcfees website for a unistaller to clear the rest of the folders/files....lurking in the system....

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #18 on: July 17, 2005, 01:51:39 PM »
      But you don't understand... I don't know what process the MediaSource Go! is... And hitting the wrong one could be hazardous... Plus, Norton tells me that this is a common issue becuase MediaSource go! and Norton conflict... I use Microsoft AntiSpyware... I'm clean  ;)

      [glb]Flame[/glb]

      merlin_2

      • Guest

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #20 on: July 17, 2005, 02:00:09 PM »
      Oh. Why thank you!  ;D

      [glb]Flame[/glb]

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #21 on: July 17, 2005, 02:03:50 PM »
      hhhmm... So close yet so far... It does not appear in msconfig...

      [glb]Flame[/glb]

      merlin_2

      • Guest
      Re: Please assist with this process!
      « Reply #22 on: July 17, 2005, 02:20:47 PM »
      Did you click the start up tab?or the sevices tab...

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #23 on: July 17, 2005, 02:23:42 PM »
      How do I see more information in the services area? One says Creative Service for CD... Is that the right one? How do I see more information on that?

      [glb]Flame[/glb]

      merlin_2

      • Guest
      Re: Please assist with this process!
      « Reply #24 on: July 17, 2005, 02:31:57 PM »
      yes.....The program will not start on start up.....but if you need it go into programs....or if you have a desktop short cut....click it.....

      Flame

        Topic Starter
      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: Please assist with this process!
      « Reply #25 on: July 17, 2005, 05:58:30 PM »
      Ok. thanks! I'll have to give this a shot! Results will be in tomorrow...  ;)

      [glb]Flame[/glb]

      dl65

      • R.I.P.


      • Prodigy

        Thanked: 18
        Re: Please assist with this process!
        « Reply #26 on: July 17, 2005, 11:00:52 PM »
        Flame ........

        To stop Creative programs from loading when the computer starts
        There is a known conflict with the Creative MediaSource Go! that is installed with the SoundBlaster Audigy sound card. There have also been some reports that the Creative RemoteCenter can also cause a conflict with Norton AntiVirus. These conflicts appears to only happen when the computer is starting. Once the computer is running, then you can start the MediaSource Go! and the Creative RemoteCenter. Do the following to work around the problem:

        To stop Creative MediaSource Go! from running when the computer starts
        On the Windows taskbar, click Start > Programs > Creative > Creative MediaSource Go!
        Double-click Creative MediaSource Go!
        Right-click anywhere on Creative MediaSource Go!, and in the new screen that appears, click "Close."
        This will keep the program from loading at bootup. If you also have Creative RemoteCenter, then go on to the next section. If not, then restart the computer. After the computer has started and Norton AntiVirus is running without a problem, then re-enable Creative MediaSource Go!


        To stop Creative RemoteCenter from running when the computer starts
        On the Windows taskbar, click Start > Settings > Control Panel > Remote Control Center.
        Uncheck "Enable RemoteCenter."
        Uncheck "Show RemoteCenter icon on taskbar..."
        Uncheck "Show RemoteCenter splash screen when RemoteCenter is started."
        Restart the computer.
        After the computer has started and Norton AntiVirus is running without a problem, then re-enable RemoteCenter.
        To re-enable RemoteCenter, repeat steps 1 through 4 in this procedure, and recheck each entry.

        dl65  ::)
        If you don't know the answer, it isn't a dumb question.

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #27 on: July 18, 2005, 07:11:29 AM »
        Thanks again dl65, but I have been following those instructions to disable MediaSource Go! After following the steps, I restart (like it says to) and then it's fine, but the next day, I have to do this same ritual all over again...

        On the suggestions that were tried earlier... Merlin... The entry we edited in msconfig did not work... I will post the results of dl65's solution... Here is my new logfile...

        Logfile of HijackThis v1.99.1
        Scan saved at 9:05:53 AM, on 7/18/2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
        C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
        C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
        C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
        C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
        C:\WINDOWS\system32\CTHELPER.EXE
        C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
        C:\WINDOWS\system32\dla\tfswctrl.exe
        C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
        C:\PROGRA~1\mcafee.com\agent\mcagent.exe
        C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
        C:\Program Files\Common Files\Symantec Shared\ccApp.exe
        C:\Program Files\Common Files\Real\Update_OB\realsched.exe

        [glb]Flame[/glb]

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #28 on: July 18, 2005, 07:12:28 AM »
        Continued...

        C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
        C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
        C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
        C:\Program Files\Dell Support\DSAgnt.exe
        C:\Program Files\AIM\aim.exe
        C:\Program Files\MSN Messenger\msnmsgr.exe
        C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
        C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
        C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
        C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
        C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
        C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
        C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
        C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
        C:\WINDOWS\system32\nvsvc32.exe
        C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\Program Files\MSN\MSNCoreFiles\msn.exe
        C:\WINDOWS\system32\wuauclt.exe
        C:\Program Files\Yahoo!\Messenger\YPager.exe
        C:\Program Files\Norton SystemWorks\Norton AntiVirus\OPScan.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Documents and Settings\Flame\Desktop\HijackThis.exe
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
        R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
        O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
        O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
        O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
        O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
        O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
        O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
        O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
        O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
        O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
        O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
        O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
        O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
        O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe

        [glb]Flame[/glb]

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #29 on: July 18, 2005, 07:14:36 AM »
        Continued...

        O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
        O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
        O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
        O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
        O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
        O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
        O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
        O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
        O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
        O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
        O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra button: (no name) - {D799B0E4-BEDE-41d2-AEE0-1E3A1C4EF918} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe (HKCU)
        O9 - Extra 'Tools' menuitem: IE Privacy Keeper - {D799B0E4-BEDE-41d2-AEE0-1E3A1C4EF918} - C:\Program Files\UnH Solutions\IE Privacy Keeper\IEPrivacyKeeper.exe (HKCU)
        O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
        O16 - DPF: {2DAE59A1-B355-4653-8D33-33A3A8F8C078} (MaxisVacationTeleX Control) - http://thesims.ea.com/teleport/vacation/MaxisVacationTeleX.cab
        O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119477008054
        O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) - https://echat.us.dell.com/Media/VisitorChat/TLIEFlash.CAB
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
        O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
        O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinstall/includes/vzWebIns.CAB
        O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
        O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4534/mcfscan.cab
        O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe

        [glb]Flame[/glb]

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #30 on: July 18, 2005, 07:15:11 AM »
        Continued... The last page...

        O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
        O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
        O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
        O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
        O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
        O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
        O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
        O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
        O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
        O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
        O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
        O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

        [glb]Flame[/glb]

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #31 on: July 19, 2005, 06:43:16 AM »
        Well guys, we still haven't git the nail on the head...  :'(  still does it... Anything else we can try?

        [glb]Flame[/glb]

        merlin_2

        • Guest
        Re: Please assist with this process!
        « Reply #32 on: July 19, 2005, 07:41:47 AM »
        Well there is spywareO2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
        O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890
        C:\WINDOWS\system32\dla\tfswshx.dll


        R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #33 on: July 19, 2005, 07:43:09 AM »
        So you want me to... Delete them with HiJackThis?

        [glb]Flame[/glb]

        merlin_2

        • Guest
        Re: Please assist with this process!
        « Reply #34 on: July 19, 2005, 07:57:03 AM »
        To play it safe download spysweeper from webroot.com and sweep the system......disconnect pc from the net after downloading s/s......i bet it find things that msantispy has not.....also disable the  system/restore program... and have a look as well in the events log/control panel/admin tools<it may also report things??


        **I would advise winxp users....if they have no use for it( remote access )to disable it**

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #35 on: July 19, 2005, 08:09:46 AM »
        I have Microsoft Antispyware and have scanned with no results... Should I still try webroot?

        [glb]Flame[/glb]
        « Last Edit: July 19, 2005, 08:10:03 AM by flame »

        merlin_2

        • Guest
        Re: Please assist with this process!
        « Reply #36 on: July 19, 2005, 10:43:34 AM »
        Yes!!   download it......and then we see what to do next.....step by step......ok....

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #37 on: July 19, 2005, 11:52:19 AM »
        Ok, what I ahve done is download what they call the Spy Audit. A free spyware scan... I will run that now and post results... Thanks!

        [glb]Flame[/glb]

        merlin_2

        • Guest
        Re: Please assist with this process!
        « Reply #38 on: July 19, 2005, 11:56:50 AM »
        What happened to spysweeper.. :).....if you what the best you have to use the best.......

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #39 on: July 19, 2005, 12:10:48 PM »
        Ok, well the Spy Audit took a shorter amount of time than I thought... it turns out I have 19 Adware cookies... Here is a screenshot of the results... By the way, Spysweeper did not appear to be free...



        These look like just cookies... Nothing to worry about? Here is a list of what cookies were found...



        Clean?

        [glb]Flame[/glb]

        merlin_2

        • Guest
        Re: Please assist with this process!
        « Reply #40 on: July 19, 2005, 12:16:24 PM »
        Well the spyaduit found a lot??does realmedia ring any bells...?.....and what happens to msantispy......failling down is it......now get adaware to delete them.....spysweeper is not free......and you right but you could have used the thirty-day trial version......after that you could have dumped it.........And  must invest in a forty three inch plasma screen ......for this pc... ;D
        « Last Edit: July 19, 2005, 12:16:50 PM by merlin_2 »

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #41 on: July 19, 2005, 12:20:02 PM »
        lol Merlin, this is adware. it's nothing really to worry about. Why have Adaware remove it? Isn't adaware considered a "failing" program now? Lack of updates, etc? Plus, I would have downloaded the free trial and dumped it, but then I have old files in my computer taking up space and trashing my registry... Can't HijackThis delete them? Quote: Does RealMedia ring any bells?" Answer: oh yes, it all just came SCREAMING back to me now  ;D  Can HijackThis delete them?

        [glb]Flame[/glb]

        merlin_2

        • Guest
        Re: Please assist with this process!
        « Reply #42 on: July 19, 2005, 12:38:59 PM »
        YES if want to cross match them<headache> .....against bhos....thats why i suggested spysweeper......adaware should clean them? and if they keep coming back...disable system restore......go for it....

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #43 on: July 19, 2005, 12:44:51 PM »
        Ok... Are these really THAT big of a deal? I'm in more of a hurry to fix this process deal than delete Spyware/adware...

        [glb]Flame[/glb]

        Flame

          Topic Starter
        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: Please assist with this process!
        « Reply #44 on: July 20, 2005, 07:42:25 AM »
        Well... This is strange... I just booted-up the computer, and it doesn't feel like giving me any errors this morning!  ;D  maybe the problem has been solved!!!  ;D  Thanks for the help everyone, and I will post again should any more problems appear!  ;D

        [glb]Flame[/glb]