Author Topic: can't get internet explorer 5.0 results (Read 14809 times)

Forensic2 · « **on:** March 07, 2008, 08:42:47 AM »

I have windows xp, Had to reload everthing from a carsh. I have had microsft Picture It 2000 on it before. Now when I try to load it, it stops when it comes to internet explorer 5.0. Then another box comes up saying it could not get internet explorer 5.0 results ?

Now I still have the programe file and is still loaded on computer, when the MESH tec said I would loose everything. Also my Norton 360 can't do a back up. They want me to reboot in safe mod and switch user to Addmin- I try doing that and typeing everything the had and press enter and it kept saying not right code.

I would say I am very good around computers etc. I have a feeling that some files are not on the same path as the C. If that makes any sense. lol thanks for any help Forensic2

Broni · « **Reply #1 on:** March 07, 2008, 10:34:23 AM »

Quote

I have windows xp, Had to reload everthing from a carsh.

How exactly did you do it? Repair, over the top, or clean install?

Forensic2 · « **Reply #2 on:** March 07, 2008, 07:23:41 PM »

Thanks for commenting. I got the black screen saying a file was missing or corrupt. MASH computer teck had me try one way and then said your computer really took a hit and to reload from CD back up, and that I would loose everything. But my files on C were still on it.

So I would say clean install. ? The very first black screen hold for about a minute before going to windows xp. It never did/took that long ?

Windows xp, home edition, version 2002, service pack 2
Computer - MESH - AMD Sempron (tm) Processor - 3300+ - 2.00GHz - 512MB of ram-Physical address extension. hope this helps. I do know my way around a computer so if anything you might need info on I'm sure I can find out.

It seems anything I down load from the net, like my drivers and sound card etc did fine. It seems any CD programs that were on here before have a hipcup in trying to install. thanks again

Broni · « **Reply #3 on:** March 07, 2008, 07:26:58 PM »

Quote

and to reload from CD back up

What kind of CD was it? I really need to know, how XP was reinstalled.

Forensic2 · « **Reply #4 on:** March 07, 2008, 07:31:25 PM »

It was on the MESH back up CD, Not a Windows xp CD. Also I had to reload it on a screen asking what drive C was the only one I had. So I loaded on it and it was suppost to uninstall old windows XP.

Broni · « **Reply #5 on:** March 07, 2008, 07:35:52 PM »

Can you look at that CD, and tell me what it says (exactly)?

Forensic2 · « **Reply #6 on:** March 07, 2008, 07:41:30 PM »

Yes,, Give me a minute.. thanks

Broni · « **Reply #7 on:** March 07, 2008, 07:45:05 PM »

No problem.

Forensic2 · « **Reply #8 on:** March 07, 2008, 07:52:57 PM »

got it. you want everything thats on this baby ?

Broni · « **Reply #9 on:** March 07, 2008, 07:56:10 PM »

You may omit fine print..

Forensic2 · « **Reply #10 on:** March 07, 2008, 08:07:14 PM »

MESH Computers Recovery CD-ROM , WINDOWS XP Home SP2, Version 1.0 warning not to open untill MESH TECHNICAL support tells you too.

Broni · « **Reply #11 on:** March 07, 2008, 08:21:25 PM »

OK, cool. That CD, when run, should restore your your computer to factory settings, like you got it for the first time from the store. Whatever programs were initially preinstalled, should be there.
Now, let's start over. You start your computer, and what is your very first concern?

Forensic2 · « **Reply #12 on:** March 07, 2008, 08:30:46 PM »

The first black screen, that shows all the info of computer, drives,ports,printer, etc hangs for about a minute before going to windows xp. It never took that long.

Broni · « **Reply #13 on:** March 07, 2008, 08:33:32 PM »

Download HijackThis:
http://www.snapfiles.com/get/hijackthis.html
and post its log.
I'd like to see, what's running on your computer.

Broni · « **Reply #14 on:** March 07, 2008, 08:50:52 PM »

The log is perfectly clean, and I don't see too many startups, so I don't think we're dealing with any software problem.
1 minute is not terribly long for loading Windows. First thing, that comes to my mind is RAM. You could surely use another 512MB stick of RAM, and can I assure you, you'll see serious improvement.

As for programs not showing in START list, It's an easy fix, as long as programs in Program Files are in running conditions. What particular programs are you talking about, and how do you open them?

Forensic2 · « **Reply #15 on:** March 07, 2008, 09:01:05 PM »

Well I had a few programs for video making, and files from other programs that I installed from CD. and now they won't install ? NTL is my internet provider and they have a fix it when it is slow. that won't load, My Norton 2005 CD that we had updated wouldn't install. So I downloaded the new 360. Just programs like that.

It seems to me, everything is not on the same path to all work togather, if that makes any sense ?

Broni · « **Reply #16 on:** March 07, 2008, 09:16:30 PM »

Quote

and now they won't install ?

What happens when you try? You have to be specific describing problems. Remember, I'm not there.

Quote

So I downloaded the new 360

and it's running...
Remember, that ANY program you installed after you bought your computer, must be reinstalled, because you ran Recovery CD, which wiped out all your personal programs.

Forensic2 · « **Reply #17 on:** March 07, 2008, 09:28:04 PM »

Broni - Let me say thank you for taking the time to help me out. I am in London UK and its 4:18 and my eyes just want to shut. I stay up cause I really need toget the Picture It 2000 art program back up and running for my blog I do,, long storie.

All I can say was the MESH Tech said I would loose everything on this installment. I didn't loos everything. The files are on the computer ? Maybe doorment ? or they need to have a new name so it gets new file date with the new installed date on the file ?

The programs that came with the computer are not showing up in the START. Epson printer loaded from CD, and I think thats all from the CD.

What ever you can sugest would be great, I did take down the page of what was on my computer . I will be on tomarrow late afternoon, morning for you , 5 hours ahead here. thanks again for taking the time to try and figure this thing out.. forensci2. cheers.

Broni · « **Reply #18 on:** March 07, 2008, 10:11:20 PM »

No problem. You're welcome.
Some programs, you're talking about may be presented as just traces after reinstall, most likely, not in working conditions.
But you don't have to worry. There is a lot of free programs, which will meet your needs, and reinstalling your printer drivers is not a problem, as well.
See you tomorrow

Forensic2 · « **Reply #19 on:** March 08, 2008, 07:41:11 AM »

Hey Broni - Good morning or afternoon. Well here is one I will throw at you. The Norton 360 wants todo a back-up to a blank cd, before a full system sweep. I kept getting internal error. They wanted me to click start run MSCONFIG BOOT in SAFEMOD

log on as adiminstrater in windows xp. Change permissions for windows xp shared documents folder..
clcik start run CMD and type in command. cd%allusersprofile% cacls docume~1/T/E/G everyone:F and then press enter after each one. It kept saying wrong command.

Also you can load a back up to Norton site but limite to how much. so I did a blamk one to them so the Norton would do a full system sweep. it has.

I guess what I am asking here, is could this be why the other programs are not showing up and some won't load from the CD with out a hipcup and stop ?

Sorry for such a long page, but I wanted you to know everything like you said.

Ill be on later to chatt if you got time then .. thanks.. Forensic2

BTW = the epson printer did load from CD. It was the only thing that did.

Broni · « **Reply #20 on:** March 08, 2008, 10:31:24 AM »

Quote

is could this be why the other programs are not showing up and some won't load from the CD with out a hipcup and stop ?

I don't think so.
Anyway what is our next subject?

Forensic2 · « **Reply #21 on:** March 08, 2008, 11:12:15 AM »

I have done the windows one care scan twice, both times came up trojan loader and in Norton. I think that is in the old Norton. Whats the best over all free scaner to check and fix everything ? thanks.

Broni · « **Reply #22 on:** March 08, 2008, 11:28:59 AM »

Wait...do you have BOTH, Windows OneCare, and Norton installed?

Forensic2 · « **Reply #23 on:** March 08, 2008, 11:31:00 AM »

No Broni - Just used the free scane from windows one care.

Also Broni, I went into my add or remove programs to uninstall a program and found I got 4 Norton 360 in a row with size 50.63MB , and a hole bunch of doubles of -

ccCommon - size 339.ooMB
SPBBC 32bit size 50.63MB
Suppsoft Size 50.63MB
SYMANTEC TECHNICAL SUPPORT CONTROLS 50.63MB

That wasn't like that a few days ago ? Any ideas.

Forensic2 · « **Reply #24 on:** March 08, 2008, 11:37:49 AM »

Broni what if the file/virus that made this crash, could it still be on this computer ?

Broni · « **Reply #25 on:** March 08, 2008, 11:51:38 AM »

After you used Recovery CD....not a chance.
What do you mean by doubles? I can see 4 different items.

Forensic2 · « **Reply #26 on:** March 08, 2008, 11:56:24 AM »

Them 4 listed are listed twice right after each one. and the Norton 360 is lsited 4 times in a row.

Broni · « **Reply #27 on:** March 08, 2008, 12:07:26 PM »

Did you pay for Norton, or is it some trial version?

Forensic2 · « **Reply #28 on:** March 08, 2008, 12:19:32 PM »

It said try it for free for 14 days , then payed for it before it ran out.

Broni · « **Reply #29 on:** March 08, 2008, 12:35:15 PM »

Good. Get rid of that crap, Norton.
Uninstall it, using this tool: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039

After computer restart, turn Windows firewall on:
Go Start>Control Panel. Double click on the Security Center icon. Click on the Windows Firewall icon beneath the status updates. Click On, then OK.

Download, and install AVG free antivirus: http://free.grisoft.com/
After installing, update it, and run full scan.

When you're done, post new HijackThis log, and don't remove it later, like you did with the previous log. I need to see what's going on.

Forensic2 · « **Reply #30 on:** March 08, 2008, 12:46:38 PM »

Well you want me to do another Hijack log before I do this ? wont take long ?

Broni · « **Reply #31 on:** March 08, 2008, 12:50:07 PM »

No. Post HJT log when you're done with everything.

Forensic2 · « **Reply #32 on:** March 08, 2008, 12:55:52 PM »

Oh well I had it done.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:48:20, on 08/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\UIBHO.dll
O4 - HKLM\..\Run: [BJCFD] "C:\Program Files\BroadJump\Client Foundation\CFD.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1844237615-413027322-839522115-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0CFA086E-6336-4D95-B6AA-90F564E99631} (TNSClicker.Clicker) - http://www.shopandscan.com/TNSClicker.CAB
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase370.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

--
End of file - 7298 bytes

Broni · « **Reply #33 on:** March 08, 2008, 01:13:31 PM »

What do you mean? I still see Norton running, and there is no AVG installed.
Please, follow my instructions.

Forensic2 · « **Reply #34 on:** March 08, 2008, 01:16:55 PM »

Broni - I did that before you answerd me. I have unloaded Norton and 35 percent download avg at this time. I will do a scan with it then do a hijack scan for you. I thought it would be better for you to cros reference from old to new thats all. So I am doing what you ask. lol

Broni · « **Reply #35 on:** March 08, 2008, 01:23:52 PM »

Oh, OK. Give me new HJT log afterwards.

Forensic2 · « **Reply #36 on:** March 08, 2008, 01:58:32 PM »

I am still here and thanks - avg still scanning 192379 files so far and nothing to report.

Broni · « **Reply #37 on:** March 08, 2008, 02:01:01 PM »

I'm not going anywhere....LOL

Forensic2 · « **Reply #38 on:** March 08, 2008, 02:46:44 PM »

scan complete and nothing found. and here is the log now.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:45:38, on 08/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\WINDOWS\system32\carpserv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [BJCFD] "C:\Program Files\BroadJump\Client Foundation\CFD.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {0CFA086E-6336-4D95-B6AA-90F564E99631} (TNSClicker.Clicker) - http://www.shopandscan.com/TNSClicker.CAB
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase370.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

--
End of file - 5427 bytes

Broni · « **Reply #39 on:** March 08, 2008, 02:54:38 PM »

Windows Live OneCare is a free trial, or you bought it?

HJT log is nice, and clean.

Forensic2 · « **Reply #40 on:** March 08, 2008, 02:59:29 PM »

It was just a free scan you can have done to scan your computer tofix a few things etc. I have not bought it or anything. Great that the HJT is nice and clean.

Do you need to see what is in the Hijack box, that have the listing of things with a check box infront of it tobe analyze ?

Broni · « **Reply #41 on:** March 08, 2008, 03:18:50 PM »

No.
Download, and install CCleaner: http://www.ccleaner.com/download/builds. Get "Slim" version.
Read CCleaner instruction here: http://www.jahewi.nl/ccleaner/ccleaner.html, and run CCleaner

Let me know afterwards how your computer is doing, and any other problems.

Forensic2 · « **Reply #42 on:** March 08, 2008, 06:56:44 PM »

Broni thanks again. I will try the Ccleaner tomarrow and let you know. how that is takecare and have a goodnight.

Broni · « **Reply #43 on:** March 08, 2008, 07:05:51 PM »

Sure thing

Forensic2 · « **Reply #44 on:** March 09, 2008, 07:07:32 AM »

Hi Broni - Downloaded C clean, before I let this thing loose is their anything I should unclick/check on this ? Thanks

Broni · « **Reply #45 on:** March 09, 2008, 12:03:16 PM »

Quote

Read CCleaner instruction here: http://www.jahewi.nl/ccleaner/ccleaner.html

Computer Hope Forum

News:

Author Topic: can't get internet explorer 5.0 results (Read 14809 times)

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni

Forensic2

Broni