Restore points not working on windows xp

[sahmo4]

Part 2 is here.

C:\Documents and Settings\Administrator\Cookies\owner@2o7[2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@advertising[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@adviva[2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@apmebf[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@atdmt[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@atwola[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@bannerspace[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@belnk[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@bluestreak[2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@casalemedia[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@clickondetroit[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@doubleclick[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@easywarez[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@fastclick[2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@findwhat[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@hitbox[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@kanoodle[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@linksynergy[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@maxserving[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@mediaplex[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@mediax[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@nextag[2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@overture[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@qksrv[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@questionmarket[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@realmedia[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@revsci[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@rightmedia[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@roiservice[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@serving-sys[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@sitestats[1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@specificclick[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@tacoda[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\owner@tribalfusion[2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@valueclick[1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator\Cookies\owner@zedo

[sahmo4]

Here is part 3.

C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@2o7[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@advertising[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@adviva[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@apmebf[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@atdmt[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@atwola[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@bannerspace[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@belnk[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@bluestreak[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@casalemedia[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@clickondetroit[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@doubleclick[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@easywarez[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@fastclick[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@findwhat[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@hitbox[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@kanoodle[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@linksynergy[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@maxserving[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@mediaplex[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@mediax[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@nextag[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@overture[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@qksrv[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@questionmarket[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@realmedia[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@revsci[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@rightmedia[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@roiservice[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@serving-sys[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@sitestats[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@specificclick[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@tacoda[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@tribalfusion[2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@valueclick[1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][1].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\[email protected][2].txt
   C:\Documents and Settings\Administrator.SHAWNTA\Cookies\owner@zedo[2].txt

[sahmo4]

Here is Part 4.

C:\Documents and Settings\Default User\Cookies\owner@2o7[2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@advertising[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@adviva[2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@apmebf[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@atdmt[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@atwola[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@bannerspace[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@belnk[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@bluestreak[2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@casalemedia[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@clickondetroit[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@doubleclick[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@easywarez[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@fastclick[2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@findwhat[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@hitbox[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@kanoodle[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@linksynergy[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@maxserving[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@mediaplex[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@mediax[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@nextag[2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@overture[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@qksrv[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@questionmarket[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@realmedia[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@revsci[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@rightmedia[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@roiservice[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@serving-sys[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@sitestats[1].txt
   C:\Documents and Settings\Default User\Cookies\owner@specificclick[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@tacoda[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\owner@tribalfusion[2].txt
   C:\Documents and Settings\Default User\Cookies\owner@valueclick[1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][1].txt
   C:\Documents and Settings\Default User\Cookies\[email protected][2].txt
   C:\Documents and Settings\Default User\Cookies\owner@zedo[2].txt

[sahmo4]

Here is Part 5.

C:\Documents and Settings\kids\Cookies\owner@2o7[2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@advertising[2].txt
   C:\Documents and Settings\kids\Cookies\owner@adviva[2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@apmebf[1].txt
   C:\Documents and Settings\kids\Cookies\owner@atdmt[2].txt
   C:\Documents and Settings\kids\Cookies\owner@atwola[1].txt
   C:\Documents and Settings\kids\Cookies\owner@bannerspace[2].txt
   C:\Documents and Settings\kids\Cookies\owner@belnk[1].txt
   C:\Documents and Settings\kids\Cookies\owner@bluestreak[2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@casalemedia[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@clickondetroit[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@doubleclick[1].txt
   C:\Documents and Settings\kids\Cookies\owner@easywarez[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@fastclick[2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@findwhat[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@hitbox[2].txt
   C:\Documents and Settings\kids\Cookies\owner@kanoodle[2].txt
   C:\Documents and Settings\kids\Cookies\owner@linksynergy[1].txt
   C:\Documents and Settings\kids\Cookies\owner@maxserving[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@mediaplex[1].txt
   C:\Documents and Settings\kids\Cookies\owner@mediax[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@nextag[2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@overture[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@qksrv[2].txt
   C:\Documents and Settings\kids\Cookies\owner@questionmarket[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@realmedia[2].txt
   C:\Documents and Settings\kids\Cookies\owner@revsci[1].txt
   C:\Documents and Settings\kids\Cookies\owner@rightmedia[1].txt
   C:\Documents and Settings\kids\Cookies\owner@roiservice[1].txt
   C:\Documents and Settings\kids\Cookies\owner@serving-sys[1].txt
   C:\Documents and Settings\kids\Cookies\owner@sitestats[1].txt
   C:\Documents and Settings\kids\Cookies\owner@specificclick[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@tacoda[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\owner@tribalfusion[2].txt
   C:\Documents and Settings\kids\Cookies\owner@valueclick[1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][1].txt
   C:\Documents and Settings\kids\Cookies\[email protected][2].txt
   C:\Documents and Settings\kids\Cookies\owner@zedo[2].txt

[sahmo4]

Here is Part 6.

C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@adinterax[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@agoramedia[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@apmebf[2].txt
   C:\Documents and Settings\Owner\Cookies\owner@atdmt[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\owner@centralmediaserver[1].txt
   C:\Documents and Settings\Owner\Cookies\owner@collective-media[2].txt
   C:\Documents and Settings\Owner\Cookies\owner@coolsavings[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@findarticles[2].txt
   C:\Documents and Settings\Owner\Cookies\owner@findwhat[1].txt
   C:\Documents and Settings\Owner\Cookies\owner@hypertracker[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\owner@lynxtrack[2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\owner@optimost[1].txt
   C:\Documents and Settings\Owner\Cookies\owner@partner2profit[2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@revsci[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@roiservice[2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\owner@smileycentral[1].txt
   C:\Documents and Settings\Owner\Cookies\owner@tacoda[2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\owner@trafficvenuedirect[2].txt
   C:\Documents and Settings\Owner\Cookies\owner@uclick[1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][1].txt
   C:\Documents and Settings\Owner\Cookies\[email protected][2].txt

[sahmo4]

Here is Part 7.

C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@2o7[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@advertising[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@adviva[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@apmebf[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@atdmt[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@atwola[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@bannerspace[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@belnk[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@bluestreak[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@casalemedia[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@clickondetroit[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@doubleclick[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@easywarez[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@fastclick[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@findwhat[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@hitbox[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@kanoodle[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@linksynergy[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@maxserving[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@mediaplex[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@mediax[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@nextag[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@overture[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@qksrv[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@questionmarket[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@realmedia[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@revsci[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@rightmedia[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@roiservice[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@serving-sys[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@sitestats[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@specificclick[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@tacoda[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@tribalfusion[2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@valueclick[1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][1].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\[email protected][2].txt
   C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\owner@zedo[2].txt

Adware.E404 Helper/Variant
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP88\A0011643.DLL

Adware.AdBreak
   C:\WINDOWS\FHFMM-UNINSTALLER.EXE
   C:\WINDOWS\LIQUI-UNINSTALLER.EXE
   C:\WINDOWS\XADBRK_.EXE

I believe this is all of it.  I am operating on 2 1/2 hours of sleep and lots of caffeine.

[sahmo4]

By the way, I noticed the time log on the scans.

I am in michigan, and the current time here is 10:46pm. 

The time at the top of Computer Hope forum is 8:46pm.

For some reason I thought you might need that info.  Don't know why I thought it, maybe its the caffeine or sleep depravation.  However, I hope this helps.

[Broni]

*** Go here: http://www.javatester.org/version.html, and post back about your Java version.

*** 1. Print this post out, since you won't have an access to it, at some point.

2. Close all windows, except for HijackThis.

3. Put a checkmark next to the following HijackThis entries (some entries will be checkmarked to disable unnecessary startups; in those cases (marked with *), no actual program will be removed):

- O4 - HKLM\..\Run: [DDCActiveMenu] "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -boot
- *O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
- *O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
- *O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
- *O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
- *O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
- *O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
- *O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
- O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)

4. Click on "Fix checked" button.

5. Restart your computer in Safe Mode (keep tapping F8 key, when your computer starts)

6. Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to "Show hidden files, and folders".

7. Delete following files/folders (if present):

- WildTangent folder from C:\Program Files

8. Turn off System Restore:

- Windows XP:
   1. Click Start.
   2. Right-click the My Computer icon, and then click Properties.
   3. Click the System Restore tab.
   4. Check "Turn off System Restore".
   5. Click Apply.   
   6.  When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
   7. Click OK.
- Windows Vista:
   1. Click Start.
   2. Right-click the Computer icon, and then click Properties.
   3. Click on System Protection under the Tasks column on the left side
   4. Click on Continue on the "User Account Control" window that pops up
   5. Under the System Protection tab, find Available Disks
   6. Uncheck the box for any drive you wish to disable system restore on (in most cases, drive "C:")
   7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
   8. Click OK

9. Restart in Normal Mode.

10. Turn System Restore on.

11. Post new HijackThis log.

[sahmo4]

Method 1 results

Java Version 1.1.4 from Microsoft Corp

Method 2 results

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Owner>jview
Microsoft (R) Command-line Loader for Java  Version 5.00.3810
Copyright (C) Microsoft Corp 1996-2000. All rights reserved.

Usage: JView [options] <classname> [arguments]

Options:
    /?                 displays usage text
    /cp <classpath>    set class path
    /cp:p <path>       prepend path to class path
    /cp:a <path>       append path to class path
    /n <namespace>     namespace in which to run
    /p                 pauses before terminating if an error occurs
    /v                 verify all classes
    /d:<name>=<value>  define system property
    /a                 execute AppletViewer
    /vst               print verbose stack traces (requires debug classes)
    /prof[:options]    enable profiling (/prof:? for help)

Classname:
    .CLASS file to be executed.

Arguments:
    command-line arguments to be passed on to the class file

C:\Documents and Settings\Owner>

[Broni]

You need to update your Java:
http://java.sun.com/javase/downloads/index.jsp
#4 - Java Runtime Environment (JRE) 6 Update 4
Uninstall all previous versions of Java through Add\Remove.

[sahmo4]

I was getting ready to do the other items on your list when I encountered a problem I was having with Microsoft word.  I totally forgot about this issue, it's been happening since nefor the screw up.

1.  When I dbl-click to open MS word I get a box with no heading.

Inside there are letters in what appear to be an Asian language, and at the end of the lettters - but in conjuntion with- is this in English:
uments and Settings\Owner\Application Data\Micromso.acl

2.   When I click OK, another box without a heading pops up, and everything appears to be in Asian.

3.   When trying to save a file created in word, I get a box with this message:
Word cannot save or create this file. Make sure that the disk you want to save the file on is not full, write protected, or damaged.
(C:\Documents and Settings\...\Normal.dot)

4.    When I click OK, I get a box with the heading Save As
Inside it reads C:\Documents and Settings\Owner\Application Data\Microsoft\Templates is not accessible.
Access is denied.

5  When trying to exiting I get a box that says "Changes have been made that affect the global templat, Normal.dot.
Do tou want to save these changes?

It then goes on to offer a box with details/options:

turn off prompt to save normal template Save tab, options (tool menu) or look up knowledge base article 291352

However, when all is said and done it saves the file.

I'm getting ready to do the other stuff and then I will upgrade my java version

[Broni]

MS Word...later

[sahmo4]

big problem!!!!!??

I went in to hijack this, made the adjustments.  Made the other adjustments in safe mode. Logged back in ran another hijack this scan, went to connect to the internet so I could send it to you.

I CANNOT CONNECT TO THE INTERNET. 

I tried other websites, and nothing.  I am currently using the laptop loaned to my daughter from her school- they know about our computer woes- to send you this.

PLEASE TELL ME WHAT TO DO TO CONNECT.

[sahmo4]

hello Broni,

The problem fixed itself, and I am back online on my computer.  Here is the HJT log that I ran after the changes.  I also updated Java, so I will run another HJT and send it to you.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:10:19 AM, on 2/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\WINDOWS\LTMSG.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sbc.yahoo.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: Freedom BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O3 - Toolbar: &Zero-Knowledge Freedom - {FA91B828-F937-4568-82C1-843627E63ED7} - C:\Program Files\Zero Knowledge\Freedom\BandObjs.dll
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] c:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - S-1-5-18 Startup: AutoPlay.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoPlay.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1202359862843
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: intu-help-qb1 - {9B0F96C7-2E4B-433E-ABF3-043BA1B54AE3} - C:\Program Files\Intuit\QuickBooks 2008\HelpAsyncPluggableProtocol.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\SYSTEM32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 6168 bytes

[sahmo4]

Here is the latest HJT log - after JAVA was installed and updated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:14 PM, on 2/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\WINDOWS\LTMSG.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us4.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us4.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sbc.yahoo.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: Freedom BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O3 - Toolbar: &Zero-Knowledge Freedom - {FA91B828-F937-4568-82C1-843627E63ED7} - C:\Program Files\Zero Knowledge\Freedom\BandObjs.dll
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [checktime] c:\program files\HPSelect\Frontend\ct.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] c:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - S-1-5-18 Startup: AutoPlay.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoPlay.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1202359862843
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: intu-help-qb1 - {9B0F96C7-2E4B-433E-ABF3-043BA1B54AE3} - C:\Program Files\Intuit\QuickBooks 2008\HelpAsyncPluggableProtocol.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\SYSTEM32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 6765 bytes

Again, I cannot THANK YOU enough for your time and expertise.