Run HJT again, and checkmark these:
- O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
- O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
- O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
- O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
- O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
- O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
- O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
- O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
- O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')(If you don't use any other language, but English, in Office XP, check the above THREE entries, as well; to prevent ctfmon.exe from being a startup, you need to disable it; here it's how: http://support.microsoft.com/default.aspx?scid=kb;en-us;282599)- O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
- O4 - S-1-5-18 Startup: LimeWire On Startup.lnk = C:\Pics-n-such\stuff\moosik\LimeWire.exe (User 'SYSTEM')
- O4 - .DEFAULT Startup: LimeWire On Startup.lnk = C:\Pics-n-such\stuff\moosik\LimeWire.exe (User 'Default user')
- O4 - .DEFAULT User Startup: LimeWire On Startup.lnk = C:\Pics-n-such\stuff\moosik\LimeWire.exe (User 'Default user')
Remember, by checking the above entries, we don't uninstall any of them, we just prevent them from running as startups.- O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
- O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
Narrator is a light-duty screen reader utility packaged with Microsoft Windows 2000, Windows XP and Windows Vista. Narrator reads dialog boxes and window controls in a number of the more basic applications for Windows.
Do you use it? If not, ckeckmark the above two entries, as well.
Restart computer. Post new HJT log.