Guest LIZ Posted December 20, 2007 Posted December 20, 2007 I have XP Professional and got some sort of virus or? I get a error message that states "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item". I can not open or start any programs and only get this message. I can run programs in safe mode but can not update windows as I get the error code 0x8007043C. I do not know what to do and have run a number of things to try and fix it including hijackthis. The logfile is included. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:29:12 PM, on 12/19/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Safe mode with network support Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OL\TMAS_OL.exe C:\DOCUME~1\CHRISJ~1\LOCALS~1\Temp\Temporary Directory 1 for HiJackThis[1].zip\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=21940 O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe O4 - HKLM\..\Run: [intelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" O4 - HKLM\..\Run: [intelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless O4 - HKLM\..\Run: [sigmatelSysTrayApp] stsystra.exe O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe" O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OE\TMAS_OEMon.exe" O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 O4 - HKCU\..\Run: [Tair] "C:\PROGRA~1\COMMON~1\ASKS~1\iexplore.exe" -vt yazb O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://download.windowsupdate.com O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal...llMgr_v01_6.cab O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/01d1b85147621c...tzip/RdxIE2.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1168651254906 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) - file://C:\Program Files\AutoCAD 2000i\InstFred.ocx O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2000i\AcPreview.ocx O23 - Service: Intel Quote
Guest Kayman Posted December 20, 2007 Posted December 20, 2007 On Wed, 19 Dec 2007 21:49:56 -0600, LIZ wrote: <span style="color:blue"> > I have XP Professional and got some sort of virus or? I get a error message > that states "Windows cannot access the specified device, path, or file. You > may not have the appropriate permissions to access the item". I can not open > or start any programs and only get this message. I can run programs in safe > mode but can not update windows as I get the error code 0x8007043C. I do not > know what to do and have run a number of things to try and fix it including > hijackthis. The logfile is included. > > Logfile of Trend Micro HijackThis v2.0.2</span> [snipped HJT logfile] Forums where you can get expert advice for HiJack This! (HJT) logs. NOTE: Registration is REQUIRED in any of the below before posting a log http://www.theeldergeek.com/forum/index.php?showforum=29 http://www.thespykiller.co.uk/index.php?board=3.0 http://www.bleepingcomputer.com/forums/forum22.html http://castlecops.com/forum67.html http://www.dslreports.com/forum/cleanup http://www.cybertechhelp.com/forums/forumdisplay.php?f=25 http://www.atribune.org/forums/index.php?showforum=9 http://www.geekstogo.com/forum/Malware_Rem...o_Here-f37.html http://gladiator-antivirus.com/forum/index.php?showforum=170 http://forum.networktechs.com/forumdisplay.php?f=130 http://forums.maddoktor2.com/index.php?showforum=17 http://www.spywarewarrior.com/viewforum.php?f=5 http://forums.spywareinfo.com/index.php?showforum=18 http://forums.techguy.org/f54-s.html http://forums.tomcoyote.org/index.php?showforum=27 http://forums.subratam.org/index.php?showforum=7 http://www.5starsupport.com/ipboard/index.php?showforum=18 http://www.malwarebytes.org/forums/index.php?showforum=7 http://makephpbb.com/phpbb/viewforum.php?f=2 http://forums.techguy.org/54-security/ http://forums.security-central.us/forumdisplay.php?f=13 Quote
Guest Milo \(MSPSS\) Posted December 20, 2007 Posted December 20, 2007 O4 - HKCU\..\Run: [Tair] "C:\PROGRA~1\COMMON~1\ASKS~1\iexplore.exe" -vt yazb This is by far what I found questionable and with regards to Windows Update concerns you have it would be or a possible secondary issue. As an option you can avail of a direct free support from Microsoft ( US/CANADA ) ( 866 727 2338 ) Toll Free and Free Support "LIZ" <lizj@new.rr.com> wrote in message news:%23AOCltrQIHA.6036@TK2MSFTNGP03.phx.gbl...<span style="color:blue"> >I have XP Professional and got some sort of virus or? I get a error >message that states "Windows cannot access the specified device, path, or >file. You may not have the appropriate permissions to access the item". I >can not open or start any programs and only get this message. I can run >programs in safe mode but can not update windows as I get the error code >0x8007043C. I do not know what to do and have run a number of things to try >and fix it including hijackthis. The logfile is included. > > Logfile of Trend Micro HijackThis v2.0.2 > Scan saved at 5:29:12 PM, on 12/19/2007 > Platform: Windows XP SP2 (WinNT 5.01.2600) > MSIE: Internet Explorer v7.00 (7.00.6000.16574) > Boot mode: Safe mode with network support > > Running processes: > C:WINDOWSSystem32smss.exe > C:WINDOWSsystem32winlogon.exe > C:WINDOWSsystem32services.exe > C:WINDOWSsystem32lsass.exe > C:WINDOWSsystem32svchost.exe > C:Program FilesWindows DefenderMsMpEng.exe > C:WINDOWSsystem32svchost.exe > C:WINDOWSExplorer.EXE > C:Program FilesInternet Exploreriexplore.exe > C:WINDOWSsystem32ctfmon.exe > C:Program FilesMicrosoft OfficeOFFICE11OUTLOOK.EXE > C:Program FilesTrend MicroInternet Security 2007TMAS_OLTMAS_OL.exe > C:DOCUME~1CHRISJ~1LOCALS~1TempTemporary Directory 1 for > HiJackThis[1].zipHijackThis.exe > > R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = > http://go.microsoft.com/fwlink/?LinkId=54896 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = > http://go.microsoft.com/fwlink/?LinkId=69157 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = > http://go.microsoft.com/fwlink/?LinkId=54896 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = > http://go.microsoft.com/fwlink/?LinkId=54896 > R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = > http://go.microsoft.com/fwlink/?LinkId=69157 > R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = > R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = > R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = > http://go.microsoft.com/fwlink/?LinkId=54843 > R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = > http://go.microsoft.com/fwlink/?LinkId=21940 > O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program > FilesTechSmithSnagIt 8SnagItIEAddin.dll > O4 - HKLM..Run: [Apoint] C:Program FilesApointApoint.exe > O4 - HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe > O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe > O4 - HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe > O4 - HKLM..Run: [sunJavaUpdateSched] C:Program > FilesJavaj2re1.4.2_03binjusched.exe > O4 - HKLM..Run: [intelZeroConfig] "C:Program > FilesIntelWirelessbinZCfgSvc.exe" > O4 - HKLM..Run: [intelWireless] "C:Program > FilesIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless > O4 - HKLM..Run: [sigmatelSysTrayApp] stsystra.exe > O4 - HKLM..Run: [DVDLauncher] "C:Program > FilesCyberLinkPowerDVDDVDLauncher.exe" > O4 - HKLM..Run: [intelliPoint] "C:Program FilesMicrosoft > IntelliPointpoint32.exe" > O4 - HKLM..Run: [QuickTime Task] "C:Program > FilesQuickTimeqttask.exe" -atboottime > O4 - HKLM..Run: [MSKDetectorExe] C:Program > FilesMcAfeeSpamKillerMSKDetct.exe /uninstall > O4 - HKLM..Run: [pccguide.exe] "C:Program FilesTrend MicroInternet > Security 2007pccguide.exe" > O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows > DefenderMSASCui.exe" -hide > O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software > UpdateHPWuSchd2.exe > O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe > O4 - HKCU..Run: [OE] "C:Program FilesTrend MicroInternet Security > 2007TMAS_OETMAS_OEMon.exe" > O4 - HKCU..Run: [updateMgr] "C:Program FilesAdobeAcrobat > 7.0ReaderAdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 > O4 - HKCU..Run: [Tair] "C:PROGRA~1COMMON~1ASKS~1iexplore.exe" -vt > yazb > O4 - HKCU..Run: [spybotSD TeaTimer] C:Program FilesSpybot - Search & > DestroyTeaTimer.exe > O4 - HKUSS-1-5-18..Run: [DWQueuedReporting] > "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'SYSTEM') > O4 - HKUS.DEFAULT..Run: [DWQueuedReporting] > "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'Default user') > O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon > FilesAdobeCalibrationAdobe Gamma Loader.exe > O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program > FilesAdobeAcrobat 7.0Readerreader_sl.exe > O4 - Global Startup: Digital Line Detect.lnk = ? > O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program > FilesHPDigital Imagingbinhpqtra08.exe > O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - > C:Program FilesJavaj2re1.4.2_03binnpjpi142_03.dll > O9 - Extra 'Tools' menuitem: Sun Java Console - > {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program > FilesJavaj2re1.4.2_03binnpjpi142_03.dll > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - > C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL > O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - > C:PROGRA~1SPYBOT~1SDHelper.dll > O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - > {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll > O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - > C:WINDOWSNetwork Diagnosticxpnetdiag.exe > O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - > {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork > Diagnosticxpnetdiag.exe > O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - > C:Program FilesMessengermsmsgs.exe > O9 - Extra 'Tools' menuitem: Windows Messenger - > {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program > FilesMessengermsmsgs.exe > O15 - Trusted Zone: http://download.windowsupdate.com > O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController > Control) - > http://h30155.www3.hp.com/ediags/dd/instal...llMgr_v01_6.cab > O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - > http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab > O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - > http://software-dl.real.com/01d1b85147621c...tzip/RdxIE2.cab > O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - > http://update.microsoft.com/microsoftupdat...b?1168651254906 > O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer > Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab > O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) - > file://C:Program FilesAutoCAD 2000iInstFred.ocx > O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - > file://C:Program FilesAutoCAD 2000iAcPreview.ocx > O23 - Service: Intel Quote
Guest David H. Lipman Posted December 20, 2007 Posted December 20, 2007 From: "LIZ" <lizj@new.rr.com> | I have XP Professional and got some sort of virus or? I get a error message | that states "Windows cannot access the specified device, path, or file. You | may not have the appropriate permissions to access the item". I can not open | or start any programs and only get this message. I can run programs in safe | mode but can not update windows as I get the error code 0x8007043C. I do not | know what to do and have run a number of things to try and fix it including | hijackthis. The logfile is included. | Please don NOT post HJT logs here. We do not accept them! Kayman was kind enough to post those places that do accept them and will provide their expert examination. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Guest Volodymyr Shcherbyna Posted December 21, 2007 Posted December 21, 2007 Sounds like a bug in OS, rather like some virus issue. -- Volodymyr "LIZ" <lizj@new.rr.com> wrote in message news:%23AOCltrQIHA.6036@TK2MSFTNGP03.phx.gbl...<span style="color:blue"> >I have XP Professional and got some sort of virus or? I get a error >message that states "Windows cannot access the specified device, path, or >file. You may not have the appropriate permissions to access the item". I >can not open or start any programs and only get this message. I can run >programs in safe mode but can not update windows as I get the error code >0x8007043C. I do not know what to do and have run a number of things to try >and fix it including hijackthis. The logfile is included. > > Logfile of Trend Micro HijackThis v2.0.2 > Scan saved at 5:29:12 PM, on 12/19/2007 > Platform: Windows XP SP2 (WinNT 5.01.2600) > MSIE: Internet Explorer v7.00 (7.00.6000.16574) > Boot mode: Safe mode with network support > > Running processes: > C:WINDOWSSystem32smss.exe > C:WINDOWSsystem32winlogon.exe > C:WINDOWSsystem32services.exe > C:WINDOWSsystem32lsass.exe > C:WINDOWSsystem32svchost.exe > C:Program FilesWindows DefenderMsMpEng.exe > C:WINDOWSsystem32svchost.exe > C:WINDOWSExplorer.EXE > C:Program FilesInternet Exploreriexplore.exe > C:WINDOWSsystem32ctfmon.exe > C:Program FilesMicrosoft OfficeOFFICE11OUTLOOK.EXE > C:Program FilesTrend MicroInternet Security 2007TMAS_OLTMAS_OL.exe > C:DOCUME~1CHRISJ~1LOCALS~1TempTemporary Directory 1 for > HiJackThis[1].zipHijackThis.exe > > R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = > http://go.microsoft.com/fwlink/?LinkId=54896 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = > http://go.microsoft.com/fwlink/?LinkId=69157 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = > http://go.microsoft.com/fwlink/?LinkId=54896 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = > http://go.microsoft.com/fwlink/?LinkId=54896 > R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = > http://go.microsoft.com/fwlink/?LinkId=69157 > R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = > R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = > R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = > http://go.microsoft.com/fwlink/?LinkId=54843 > R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = > http://go.microsoft.com/fwlink/?LinkId=21940 > O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program > FilesTechSmithSnagIt 8SnagItIEAddin.dll > O4 - HKLM..Run: [Apoint] C:Program FilesApointApoint.exe > O4 - HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe > O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe > O4 - HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe > O4 - HKLM..Run: [sunJavaUpdateSched] C:Program > FilesJavaj2re1.4.2_03binjusched.exe > O4 - HKLM..Run: [intelZeroConfig] "C:Program > FilesIntelWirelessbinZCfgSvc.exe" > O4 - HKLM..Run: [intelWireless] "C:Program > FilesIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless > O4 - HKLM..Run: [sigmatelSysTrayApp] stsystra.exe > O4 - HKLM..Run: [DVDLauncher] "C:Program > FilesCyberLinkPowerDVDDVDLauncher.exe" > O4 - HKLM..Run: [intelliPoint] "C:Program FilesMicrosoft > IntelliPointpoint32.exe" > O4 - HKLM..Run: [QuickTime Task] "C:Program > FilesQuickTimeqttask.exe" -atboottime > O4 - HKLM..Run: [MSKDetectorExe] C:Program > FilesMcAfeeSpamKillerMSKDetct.exe /uninstall > O4 - HKLM..Run: [pccguide.exe] "C:Program FilesTrend MicroInternet > Security 2007pccguide.exe" > O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows > DefenderMSASCui.exe" -hide > O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software > UpdateHPWuSchd2.exe > O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe > O4 - HKCU..Run: [OE] "C:Program FilesTrend MicroInternet Security > 2007TMAS_OETMAS_OEMon.exe" > O4 - HKCU..Run: [updateMgr] "C:Program FilesAdobeAcrobat > 7.0ReaderAdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 > O4 - HKCU..Run: [Tair] "C:PROGRA~1COMMON~1ASKS~1iexplore.exe" -vt > yazb > O4 - HKCU..Run: [spybotSD TeaTimer] C:Program FilesSpybot - Search & > DestroyTeaTimer.exe > O4 - HKUSS-1-5-18..Run: [DWQueuedReporting] > "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'SYSTEM') > O4 - HKUS.DEFAULT..Run: [DWQueuedReporting] > "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'Default user') > O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon > FilesAdobeCalibrationAdobe Gamma Loader.exe > O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program > FilesAdobeAcrobat 7.0Readerreader_sl.exe > O4 - Global Startup: Digital Line Detect.lnk = ? > O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program > FilesHPDigital Imagingbinhpqtra08.exe > O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - > C:Program FilesJavaj2re1.4.2_03binnpjpi142_03.dll > O9 - Extra 'Tools' menuitem: Sun Java Console - > {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program > FilesJavaj2re1.4.2_03binnpjpi142_03.dll > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - > C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL > O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - > C:PROGRA~1SPYBOT~1SDHelper.dll > O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - > {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll > O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - > C:WINDOWSNetwork Diagnosticxpnetdiag.exe > O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - > {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork > Diagnosticxpnetdiag.exe > O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - > C:Program FilesMessengermsmsgs.exe > O9 - Extra 'Tools' menuitem: Windows Messenger - > {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program > FilesMessengermsmsgs.exe > O15 - Trusted Zone: http://download.windowsupdate.com > O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController > Control) - > http://h30155.www3.hp.com/ediags/dd/instal...llMgr_v01_6.cab > O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - > http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab > O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - > http://software-dl.real.com/01d1b85147621c...tzip/RdxIE2.cab > O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - > http://update.microsoft.com/microsoftupdat...b?1168651254906 > O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer > Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab > O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) - > file://C:Program FilesAutoCAD 2000iInstFred.ocx > O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - > file://C:Program FilesAutoCAD 2000iAcPreview.ocx > O23 - Service: Intel Quote
Guest Maximus the Mad Posted December 24, 2007 Posted December 24, 2007 "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much thought,came up with this jewel in news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl: <span style="color:blue"> > From: "LIZ" <lizj@new.rr.com> > (abridged version) >| I have XP Professional and I do not know what to do > > Please do NOT post HJT logs here. We do not accept them! > </span> Good to see ya Dave! max -- Virus Removal http://max.shplink.com/removal.html Keep Clean http://max.shplink.com/keepingclean.html Tools http://max.shplink.com/tools.html Change nomail.afraid.org to gmail.com to reply by email. Quote
Guest David H. Lipman Posted December 25, 2007 Posted December 25, 2007 From: "Maximus the Mad" <maxwachtel@nomail.afraid.org> | Good to see ya Dave! | max Happy Holidays Max! -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Guest Maximus the Mad Posted December 25, 2007 Posted December 25, 2007 "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much thought,came up with this jewel in news:OfpZn$oRIHA.1188 @TK2MSFTNGP04.phx.gbl: <span style="color:blue"> > From: "Maximus the Mad" <maxwachtel@nomail.afraid.org> > > >| Good to see ya Dave! >| max > > Happy Holidays Max! > </span> Hope everything is going well for you! -- Virus Removal http://max.shplink.com/removal.html Keep Clean http://max.shplink.com/keepingclean.html Tools http://max.shplink.com/tools.html Change nomail.afraid.org to gmail.com to reply by email. Quote
Guest BoaterDave Posted January 3, 2008 Posted January 3, 2008 Hello David Just for clarification who, exactly, is the "we" in your statement "We do not accept them!" Dave "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:%23wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl...<span style="color:blue"> > From: "LIZ" <lizj@new.rr.com> > > | I have XP Professional and got some sort of virus or? I get a error > message > | that states "Windows cannot access the specified device, path, or file. > You > | may not have the appropriate permissions to access the item". I can not > open > | or start any programs and only get this message. I can run programs in > safe > | mode but can not update windows as I get the error code 0x8007043C. I do > not > | know what to do and have run a number of things to try and fix it > including > | hijackthis. The logfile is included. > | > > > Please don NOT post HJT logs here. We do not accept them! > Kayman was kind enough to post those places that do accept them and will > provide their > expert examination. > > > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > > </span> Quote
Guest David H. Lipman Posted January 3, 2008 Posted January 3, 2008 From: "BoaterDave" <BoaterDave@nospam.invalid> | Hello David | | Just for clarification who, exactly, is the "we" in your statement "We do | not accept them!" | | Dave | Those who respond for help with informational assistance. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Guest BoaterDave Posted January 3, 2008 Posted January 3, 2008 Ah - So, do you not consider Milo (who did respond) to be a bonio-fido responder on this group? His (her?) advice seems to be sound. Dave "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:O$SHAQaTIHA.1188@TK2MSFTNGP04.phx.gbl...<span style="color:blue"> > From: "BoaterDave" <BoaterDave@nospam.invalid> > > | Hello David > | > | Just for clarification who, exactly, is the "we" in your statement "We > do > | not accept them!" > | > | Dave > | > > Those who respond for help with informational assistance. > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > > </span> Quote
Guest David H. Lipman Posted January 3, 2008 Posted January 3, 2008 From: "BoaterDave" <BoaterDave@nospam.invalid> | Ah - So, do you not consider Milo (who did respond) to be a bonio-fido | responder on this group? | | His (her?) advice seems to be sound. | | Dave | Milo goes agaisnt the grain and does NO have the support of the MVP community BTW: I am NOT a MS MVP -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Guest BoaterDave Posted January 6, 2008 Posted January 6, 2008 Hello David I've visited Claymania.com and noted this info: Claymania Creations Personalized Website Design and Hosting Services Claymania.com originally started out in 1997 in Rhode Island as a sideline website design / hosting business and place to post ad-free anti-virus information. Claymania Creations "officially" began operation in January of 2000 offering premium website design and hosting services. Our goal is to be responsive and helpful at all times while providing our customers with courteous, fast service and all the hosting features needed to build and maintain a successful Web site. Thanks to our loyal customers and their (much appreciated) referrals, Claymania Creations has successfully grown and developed into a cooperative group of creative and talented individuals that form a unique and diverse team. This dedicated group of technicians, consultants, graphic artists and programmers have all the skills required to help individuals and businesses fully realize their Web site goals. The combined resources of the Claymania Creations Cooperative allow us to be a true one-stop solution for website design, hosting and promotion services. Please don't hesitate to contact us for more information. Please will you advise why your magic Multi-AV tool isn't hosted here, but on a German site which most visitors here will be unable to read. It doesn't make sense to me I'm afraid. The intimation in your signature block is that you have some connection with Claymania. TIA Dave PS Milo always seems to give good advice. Do you think otherwise? "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...<span style="color:blue"> > From: "BoaterDave" <BoaterDave@nospam.invalid> > > | Ah - So, do you not consider Milo (who did respond) to be a bonio-fido > | responder on this group? > | > | His (her?) advice seems to be sound. > | > | Dave > | > > Milo goes agaisnt the grain and does NO have the support of the MVP > community > BTW: I am NOT a MS MVP > > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > > </span> Quote
Guest David H. Lipman Posted January 6, 2008 Posted January 6, 2008 From: "BoaterDave" <BoaterDave@nospam.invalid> | Hello David | I've visited Claymania.com and noted this info: | Claymania Creations | Personalized Website Design and Hosting Services | Claymania.com originally started out in 1997 in Rhode Island as a sideline | website design / hosting business and place to post ad-free anti-virus | information. Claymania Creations "officially" began operation in January of | 2000 offering premium website design and hosting services. Our goal is to be | responsive and helpful at all times while providing our customers with | courteous, fast service and all the hosting features needed to build and | maintain a successful Web site. | Thanks to our loyal customers and their (much appreciated) referrals, | Claymania Creations has successfully grown and developed into a cooperative | group of creative and talented individuals that form a unique and diverse | team. This dedicated group of technicians, consultants, graphic artists and | programmers have all the skills required to help individuals and businesses | fully realize their Web site goals. | The combined resources of the Claymania Creations Cooperative allow us to be | a true one-stop solution for website design, hosting and promotion services. | Please don't hesitate to contact us for more information. | | | Please will you advise why your magic Multi-AV tool isn't hosted here, but | on a German site which most visitors here will be unable to read. It doesn't | make sense to me I'm afraid. The intimation in your signature block is that | you have some connection with Claymania. TIA | Dave | PS Milo always seems to give good advice. Do you think otherwise? Good questions. Thanx to the antics of 'Butts, the IK-CS.Com web site no longer exists. A friend of mine is an editor with PCTipp magazine and she lives in Switzerland. There were two articles written in their printed magazine about mailware (yes, written is Swiss-German) and in their removal. The editor knows what happed with the IK-CS.Com web site and offered to publicly host the utility on their website. I never asked Clay if I could have him host the Multi-AV on the Claymania WebSite. That site hosts information, not utilities. Clay has always been a member ov the a.c.v news group and its younger sibling a.c.a-v. Early on Clay created space on his web site for the advice culled from the news group members. I have the Multi AV hosted on other, sofar private, sites. Pulicly, at this time, it is available at PCTipp Magazine's utility download section. Milo had not always provided the right information or in the right fashion. I have not been on Usenet too much this past years and so I have missed many of his recent posts. His reponses amy have improved. | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message | news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...<span style="color:blue"><span style="color:green"> >> From: "BoaterDave" <BoaterDave@nospam.invalid></span></span> <span style="color:blue"><span style="color:green"> >> | Ah - So, do you not consider Milo (who did respond) to be a bonio-fido >> | responder on this group? >> | >> | His (her?) advice seems to be sound. >> | >> | Dave >> |</span></span> <span style="color:blue"><span style="color:green"> >> -- >> Dave >> http://www.claymania.com/removal-trojan-adware.html >> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp</span></span> -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Guest pcbutts1 Posted January 6, 2008 Posted January 6, 2008 C'mon Dave tell the truth. I didn't have anything to do with that site shutting down. You assumed I did because you know I know about all your failed attempts to shut down not only my website but my ISP account, my newsgroup account, and you also tried to get me fired from my job, now how low down is that. Your problem is you are a low down troll who thinks my name is Chris Butts. You know exactly who it was who filed that DMCA complaint against you for stealing the components used in your multi-crap software. Your hosting company is required to tell you. You had a choice to fight that complaint why didn't you? or did you fight it and lose? I think you fought it and lost and then to prevent the same thing from happening again you stuck it up on a German site outside the reach of US DMCA laws. I mean C'mon now all you had to do was wait 14 days, if the complaint was fraudulent, or simply remove the link to your software and the site is back up. You and your friends have filed 2 DMCA complaints on me yet I'm still here. Do us all a favor and go crawl back under that rock and stay gone this time you liar. -- Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads The list grows. Leythos the stalker http://www.leythosthestalker.com, David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T. Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:OBFeQVKUIHA.4752@TK2MSFTNGP05.phx.gbl...<span style="color:blue"> > From: "BoaterDave" <BoaterDave@nospam.invalid> > > | Hello David > > | I've visited Claymania.com and noted this info: > | Claymania Creations > | Personalized Website Design and Hosting Services > > | Claymania.com originally started out in 1997 in Rhode Island as a > sideline > | website design / hosting business and place to post ad-free anti-virus > | information. Claymania Creations "officially" began operation in January > of > | 2000 offering premium website design and hosting services. Our goal is > to be > | responsive and helpful at all times while providing our customers with > | courteous, fast service and all the hosting features needed to build and > | maintain a successful Web site. > > | Thanks to our loyal customers and their (much appreciated) referrals, > | Claymania Creations has successfully grown and developed into a > cooperative > | group of creative and talented individuals that form a unique and > diverse > | team. This dedicated group of technicians, consultants, graphic artists > and > | programmers have all the skills required to help individuals and > businesses > | fully realize their Web site goals. > > | The combined resources of the Claymania Creations Cooperative allow us > to be > | a true one-stop solution for website design, hosting and promotion > services. > | Please don't hesitate to contact us for more information. > > | > > | > > | Please will you advise why your magic Multi-AV tool isn't hosted here, > but > | on a German site which most visitors here will be unable to read. It > doesn't > | make sense to me I'm afraid. The intimation in your signature block is > that > | you have some connection with Claymania. TIA > > | Dave > > | PS Milo always seems to give good advice. Do you think otherwise? > > Good questions. > > Thanx to the antics of 'Butts, the IK-CS.Com web site no longer exists. > > A friend of mine is an editor with PCTipp magazine and she lives in > Switzerland. There > were two articles written in their printed magazine about mailware (yes, > written is > Swiss-German) and in their removal. The editor knows what happed with the > IK-CS.Com web > site and offered to publicly host the utility on their website. > > I never asked Clay if I could have him host the Multi-AV on the Claymania > WebSite. That > site hosts information, not utilities. > > Clay has always been a member ov the a.c.v news group and its younger > sibling a.c.a-v. > Early on Clay created space on his web site for the advice culled from the > news group > members. > > I have the Multi AV hosted on other, sofar private, sites. Pulicly, at > this time, it is > available at PCTipp Magazine's utility download section. > > Milo had not always provided the right information or in the right > fashion. I have not > been on Usenet too much this past years and so I have missed many of his > recent posts. > His reponses amy have improved. > > > | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message > | news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...<span style="color:green"><span style="color:darkred"> >>> From: "BoaterDave" <BoaterDave@nospam.invalid></span></span> ><span style="color:green"><span style="color:darkred"> >>> | Ah - So, do you not consider Milo (who did respond) to be a >>> bonio-fido >>> | responder on this group? >>> | >>> | His (her?) advice seems to be sound. >>> | >>> | Dave >>> |</span></span> > > > ><span style="color:green"><span style="color:darkred"> >>> -- >>> Dave >>> http://www.claymania.com/removal-trojan-adware.html >>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp</span></span> > > > > > > > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > </span> Quote
Guest pcbutts1 Posted January 6, 2008 Posted January 6, 2008 Dave got busted stealing software so his site was shut down. Somebody filed a DMCA complaint for stealing software and they shut him down. He tells everyone I did it when he knows I did not. He's just pissed because it happened after his many failed attempts to shut me down. He thinks I'm the thief when he got busted for it. He put it up on a German spam site because it is outside the jurisdiction of US DMCA laws and that's the truth. -- Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads The list grows. Leythos the stalker http://www.leythosthestalker.com, David H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T. Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell "BoaterDave" <BoaterDave@nospam.invalid> wrote in message news:ePqc94JUIHA.4696@TK2MSFTNGP05.phx.gbl...<span style="color:blue"> > Hello David > > I've visited Claymania.com and noted this info: > Claymania Creations > Personalized Website Design and Hosting Services > > Claymania.com originally started out in 1997 in Rhode Island as a sideline > website design / hosting business and place to post ad-free anti-virus > information. Claymania Creations "officially" began operation in January > of 2000 offering premium website design and hosting services. Our goal is > to be responsive and helpful at all times while providing our customers > with courteous, fast service and all the hosting features needed to build > and maintain a successful Web site. > > Thanks to our loyal customers and their (much appreciated) referrals, > Claymania Creations has successfully grown and developed into a > cooperative group of creative and talented individuals that form a unique > and diverse team. This dedicated group of technicians, consultants, > graphic artists and programmers have all the skills required to help > individuals and businesses fully realize their Web site goals. > > The combined resources of the Claymania Creations Cooperative allow us to > be a true one-stop solution for website design, hosting and promotion > services. Please don't hesitate to contact us for more information. > > > > Please will you advise why your magic Multi-AV tool isn't hosted here, but > on a German site which most visitors here will be unable to read. It > doesn't make sense to me I'm afraid. The intimation in your signature > block is that you have some connection with Claymania. TIA > > Dave > > PS Milo always seems to give good advice. Do you think otherwise? > > > > > > "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message > news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...<span style="color:green"> >> From: "BoaterDave" <BoaterDave@nospam.invalid> >> >> | Ah - So, do you not consider Milo (who did respond) to be a >> bonio-fido >> | responder on this group? >> | >> | His (her?) advice seems to be sound. >> | >> | Dave >> | >> >> Milo goes agaisnt the grain and does NO have the support of the MVP >> community >> BTW: I am NOT a MS MVP >> >> >> -- >> Dave >> http://www.claymania.com/removal-trojan-adware.html >> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp >> >> >></span> > > </span> Quote
Guest Impatience Posted April 17, 2008 Posted April 17, 2008 Ok, my ignorance is showing. How do I access the news article listed here? Thanks, Debbie "Maximus the Mad" wrote: <span style="color:blue"> > "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much > thought,came up with this jewel in > news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl: > <span style="color:green"> > > From: "LIZ" <lizj@new.rr.com> > > (abridged version) > >| I have XP Professional and I do not know what to do > > > > Please do NOT post HJT logs here. We do not accept them! > > </span> > > Good to see ya Dave! > max > -- > Virus Removal http://max.shplink.com/removal.html > Keep Clean http://max.shplink.com/keepingclean.html > Tools http://max.shplink.com/tools.html > Change nomail.afraid.org to gmail.com to reply by email. > </span> Quote
Guest Peter Foldes Posted April 18, 2008 Posted April 18, 2008 Huh. What news article ?? -- Peter Please Reply to Newsgroup for the benefit of others Requests for assistance by email can not and will not be acknowledged. "Impatience" <Impatience@discussions.microsoft.com> wrote in message news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...<span style="color:blue"> > Ok, my ignorance is showing. How do I access the news article listed here? > > Thanks, > Debbie > > "Maximus the Mad" wrote: > <span style="color:green"> >> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much >> thought,came up with this jewel in >> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl: >> <span style="color:darkred"> >> > From: "LIZ" <lizj@new.rr.com> >> > (abridged version) >> >| I have XP Professional and I do not know what to do >> > >> > Please do NOT post HJT logs here. We do not accept them! >> > </span> >> >> Good to see ya Dave! >> max >> -- >> Virus Removal http://max.shplink.com/removal.html >> Keep Clean http://max.shplink.com/keepingclean.html >> Tools http://max.shplink.com/tools.html >> Change nomail.afraid.org to gmail.com to reply by email. >></span></span> Quote
Guest FromTheRafters Posted April 18, 2008 Posted April 18, 2008 "Impatience" <Impatience@discussions.microsoft.com> wrote in message news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...<span style="color:blue"> > Ok, my ignorance is showing. How do I access the news article listed > here?</span> Use Google Groups with that as the search string. Hmmm - didn't these news: (pseudo) url's use to be clickable? Anyway, Google should work for a unique string. <span style="color:blue"> > Thanks, > Debbie > > "Maximus the Mad" wrote: ><span style="color:green"> >> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much >> thought,came up with this jewel in >> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl: >><span style="color:darkred"> >> > From: "LIZ" <lizj@new.rr.com> >> > (abridged version) >> >| I have XP Professional and I do not know what to do >> > >> > Please do NOT post HJT logs here. We do not accept them! >> ></span> >> >> Good to see ya Dave! >> max >> -- >> Virus Removal http://max.shplink.com/removal.html >> Keep Clean http://max.shplink.com/keepingclean.html >> Tools http://max.shplink.com/tools.html >> Change nomail.afraid.org to gmail.com to reply by email. >> </span></span> Quote
Guest jen Posted April 18, 2008 Posted April 18, 2008 "FromTheRafters" <Erratic@ne.rr.com> wrote in message news:OLaCXpYoIHA.4104@TK2MSFTNGP03.phx.gbl...<span style="color:blue"> > "Impatience" <Impatience@discussions.microsoft.com> wrote in message > news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...<span style="color:green"> >> Ok, my ignorance is showing. How do I access the news article listed >> here?</span> > Use Google Groups with that as the search string. > Hmmm - didn't these news: (pseudo) url's use to be clickable?</span> To be clickable msnews has to be your default server... <span style="color:blue"> > Anyway, Google should work for a unique string.<span style="color:green"> >> "Maximus the Mad" wrote:<span style="color:darkred"> >>> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much >>> thought,came up with this jewel in >>> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl: >>> > From: "LIZ" <lizj@new.rr.com> >>> > (abridged version) >>> >| I have XP Professional and I do not know what to do >>> > Please do NOT post HJT logs here. We do not accept them! >>> Good to see ya Dave!</span></span></span> -jen Quote
Guest FromTheRafters Posted April 18, 2008 Posted April 18, 2008 "jen" <jen@example.com> wrote in message news:eO4k6HaoIHA.1580@TK2MSFTNGP06.phx.gbl...<span style="color:blue"> > "FromTheRafters" <Erratic@ne.rr.com> wrote in message > news:OLaCXpYoIHA.4104@TK2MSFTNGP03.phx.gbl...<span style="color:green"> >> "Impatience" <Impatience@discussions.microsoft.com> wrote in message >> news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...<span style="color:darkred"> >>> Ok, my ignorance is showing. How do I access the news article listed >>> here?</span> >> Use Google Groups with that as the search string. >> Hmmm - didn't these news: (pseudo) url's use to be clickable?</span> > > To be clickable msnews has to be your default server...</span> Some news: URL strings return the message when clicked, some return a message about being unable to retrieve the message. The one I tried from the OP's post gave me a message that "news:' is not a valid URL. Could be some characters are considered invalid for message ID strings used in a news: URL string. <span style="color:blue"><span style="color:green"> >> Anyway, Google should work for a unique string.<span style="color:darkred"> >>> "Maximus the Mad" wrote: >>>> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much >>>> thought,came up with this jewel in >>>> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl: >>>> > From: "LIZ" <lizj@new.rr.com> >>>> > (abridged version) >>>> >| I have XP Professional and I do not know what to do >>>> > Please do NOT post HJT logs here. We do not accept them! >>>> Good to see ya Dave!</span></span> > > -jen > > </span> Quote
Guest MalcolmO Posted April 19, 2008 Posted April 19, 2008 > Hmmm - didn't these news: (pseudo) url's use to be clickable? Yes! They did! They weren't pseudo! I used to click on them and they'd open in my newsreader. Now they don't work properly, the browser tells you it's a bogus protocol and ISPs don't give you Usenet. I tell ya, the whole Inet has just gone to pot. style_emoticons/ Quote
Guest DLS Posted June 28, 2008 Posted June 28, 2008 DLS "LIZ" <lizj@new.rr.com> wrote in message news:%23AOCltrQIHA.6036@TK2MSFTNGP03.phx.gbl...<span style="color:blue"> >I have XP Professional www.doorloadingservices.co.uk and got some sort of >virus or? I get a error message that states "Windows cannot access the >specified device, path, or file. You may not have the appropriate >permissions to access the item". I can not open or start any programs and >only get this message. I can run programs in safe mode but can not update >windows as I get the error code 0x8007043C. I do not know what to do and >have run a number of things to try and fix it including hijackthis. The >logfile is included. > > Logfile of Trend Micro HijackThis v2.0.2 > Scan saved at 5:29:12 PM, on 12/19/2007 > Platform: Windows XP SP2 (WinNT 5.01.2600) > MSIE: Internet Explorer v7.00 (7.00.6000.16574) > Boot mode: Safe mode with network support > > Running processes: > C:WINDOWSSystem32smss.exe > C:WINDOWSsystem32winlogon.exe > C:WINDOWSsystem32services.exe > C:WINDOWSsystem32lsass.exe > C:WINDOWSsystem32svchost.exe > C:Program FilesWindows DefenderMsMpEng.exe > C:WINDOWSsystem32svchost.exe > C:WINDOWSExplorer.EXE > C:Program FilesInternet Exploreriexplore.exe > C:WINDOWSsystem32ctfmon.exe > C:Program FilesMicrosoft OfficeOFFICE11OUTLOOK.EXE > C:Program FilesTrend MicroInternet Security 2007TMAS_OLTMAS_OL.exe > C:DOCUME~1CHRISJ~1LOCALS~1TempTemporary Directory 1 for > HiJackThis[1].zipHijackThis.exe > > R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = > http://go.microsoft.com/fwlink/?LinkId=54896 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = > http://go.microsoft.com/fwlink/?LinkId=69157 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = > http://go.microsoft.com/fwlink/?LinkId=54896 > R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = > http://go.microsoft.com/fwlink/?LinkId=54896 > R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = > http://go.microsoft.com/fwlink/?LinkId=69157 > R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = > R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = > R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = > http://go.microsoft.com/fwlink/?LinkId=54843 > R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = > http://go.microsoft.com/fwlink/?LinkId=21940 > O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program > FilesTechSmithSnagIt 8SnagItIEAddin.dll > O4 - HKLM..Run: [Apoint] C:Program FilesApointApoint.exe > O4 - HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe > O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe > O4 - HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe > O4 - HKLM..Run: [sunJavaUpdateSched] C:Program > FilesJavaj2re1.4.2_03binjusched.exe > O4 - HKLM..Run: [intelZeroConfig] "C:Program > FilesIntelWirelessbinZCfgSvc.exe" > O4 - HKLM..Run: [intelWireless] "C:Program > FilesIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless > O4 - HKLM..Run: [sigmatelSysTrayApp] stsystra.exe > O4 - HKLM..Run: [DVDLauncher] "C:Program > FilesCyberLinkPowerDVDDVDLauncher.exe" > O4 - HKLM..Run: [intelliPoint] "C:Program FilesMicrosoft > IntelliPointpoint32.exe" > O4 - HKLM..Run: [QuickTime Task] "C:Program > FilesQuickTimeqttask.exe" -atboottime > O4 - HKLM..Run: [MSKDetectorExe] C:Program > FilesMcAfeeSpamKillerMSKDetct.exe /uninstall > O4 - HKLM..Run: [pccguide.exe] "C:Program FilesTrend MicroInternet > Security 2007pccguide.exe" > O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows > DefenderMSASCui.exe" -hide > O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software > UpdateHPWuSchd2.exe > O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe > O4 - HKCU..Run: [OE] "C:Program FilesTrend MicroInternet Security > 2007TMAS_OETMAS_OEMon.exe" > O4 - HKCU..Run: [updateMgr] "C:Program FilesAdobeAcrobat > 7.0ReaderAdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 > O4 - HKCU..Run: [Tair] "C:PROGRA~1COMMON~1ASKS~1iexplore.exe" -vt > yazb > O4 - HKCU..Run: [spybotSD TeaTimer] C:Program FilesSpybot - Search & > DestroyTeaTimer.exe > O4 - HKUSS-1-5-18..Run: [DWQueuedReporting] > "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'SYSTEM') > O4 - HKUS.DEFAULT..Run: [DWQueuedReporting] > "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'Default user') > O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon > FilesAdobeCalibrationAdobe Gamma Loader.exe > O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program > FilesAdobeAcrobat 7.0Readerreader_sl.exe > O4 - Global Startup: Digital Line Detect.lnk = ? > O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program > FilesHPDigital Imagingbinhpqtra08.exe > O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - > C:Program FilesJavaj2re1.4.2_03binnpjpi142_03.dll > O9 - Extra 'Tools' menuitem: Sun Java Console - > {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program > FilesJavaj2re1.4.2_03binnpjpi142_03.dll > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - > C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL > O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - > C:PROGRA~1SPYBOT~1SDHelper.dll > O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - > {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll > O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - > C:WINDOWSNetwork Diagnosticxpnetdiag.exe > O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - > {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork > Diagnosticxpnetdiag.exe > O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - > C:Program FilesMessengermsmsgs.exe > O9 - Extra 'Tools' menuitem: Windows Messenger - > {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program > FilesMessengermsmsgs.exe > O15 - Trusted Zone: http://download.windowsupdate.com > O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController > Control) - > http://h30155.www3.hp.com/ediags/dd/instal...llMgr_v01_6.cab > O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - > http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab > O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - > http://software-dl.real.com/01d1b85147621c...tzip/RdxIE2.cab > O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - > http://update.microsoft.com/microsoftupdat...b?1168651254906 > O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer > Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab > O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) - > file://C:Program FilesAutoCAD 2000iInstFred.ocx > O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - > file://C:Program FilesAutoCAD 2000iAcPreview.ocx > O23 - Service: Intel Quote
Guest ~BD~ Posted June 28, 2008 Posted June 28, 2008 Re: DLS Whilst you are awaiting advice from 'the experts' you might like to paste your HJT log into the facility you will find at www.hijackthis.de I've already done so - some interesting pointers to many possible problem areas! Hope this helps (a little!) Dave "DLS" <nospam@nospam.co.uk> wrote in message news:Vty9k.17491$E41.10659@text.news.virginmedia.com...<span style="color:blue"> > > "LIZ" <lizj@new.rr.com> wrote in message > news:%23AOCltrQIHA.6036@TK2MSFTNGP03.phx.gbl...<span style="color:green"> >>I have XP Professional www.doorloadingservices.co.uk and got some sort of >>virus or? I get a error message that states "Windows cannot access the >>specified device, path, or file. You may not have the appropriate >>permissions to access the item". I can not open or start any programs and >>only get this message. I can run programs in safe mode but can not update >>windows as I get the error code 0x8007043C. I do not know what to do and >>have run a number of things to try and fix it including hijackthis. The >>logfile is included. >> >> Logfile of Trend Micro HijackThis v2.0.2 >> Scan saved at 5:29:12 PM, on 12/19/2007 >> Platform: Windows XP SP2 (WinNT 5.01.2600) >> MSIE: Internet Explorer v7.00 (7.00.6000.16574) >> Boot mode: Safe mode with network support >> >> Running processes: >> C:WINDOWSSystem32smss.exe >> C:WINDOWSsystem32winlogon.exe >> C:WINDOWSsystem32services.exe >> C:WINDOWSsystem32lsass.exe >> C:WINDOWSsystem32svchost.exe >> C:Program FilesWindows DefenderMsMpEng.exe >> C:WINDOWSsystem32svchost.exe >> C:WINDOWSExplorer.EXE >> C:Program FilesInternet Exploreriexplore.exe >> C:WINDOWSsystem32ctfmon.exe >> C:Program FilesMicrosoft OfficeOFFICE11OUTLOOK.EXE >> C:Program FilesTrend MicroInternet Security 2007TMAS_OLTMAS_OL.exe >> C:DOCUME~1CHRISJ~1LOCALS~1TempTemporary Directory 1 for >> HiJackThis[1].zipHijackThis.exe >> >> R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = >> http://go.microsoft.com/fwlink/?LinkId=54896 >> R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = >> http://go.microsoft.com/fwlink/?LinkId=69157 >> R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = >> http://go.microsoft.com/fwlink/?LinkId=54896 >> R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = >> http://go.microsoft.com/fwlink/?LinkId=54896 >> R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = >> http://go.microsoft.com/fwlink/?LinkId=69157 >> R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = >> R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = >> R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,First Home Page = >> http://go.microsoft.com/fwlink/?LinkId=54843 >> R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = >> http://go.microsoft.com/fwlink/?LinkId=21940 >> O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - >> C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll >> O4 - HKLM..Run: [Apoint] C:Program FilesApointApoint.exe >> O4 - HKLM..Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe >> O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe >> O4 - HKLM..Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe >> O4 - HKLM..Run: [sunJavaUpdateSched] C:Program >> FilesJavaj2re1.4.2_03binjusched.exe >> O4 - HKLM..Run: [intelZeroConfig] "C:Program >> FilesIntelWirelessbinZCfgSvc.exe" >> O4 - HKLM..Run: [intelWireless] "C:Program >> FilesIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless >> O4 - HKLM..Run: [sigmatelSysTrayApp] stsystra.exe >> O4 - HKLM..Run: [DVDLauncher] "C:Program >> FilesCyberLinkPowerDVDDVDLauncher.exe" >> O4 - HKLM..Run: [intelliPoint] "C:Program FilesMicrosoft >> IntelliPointpoint32.exe" >> O4 - HKLM..Run: [QuickTime Task] "C:Program >> FilesQuickTimeqttask.exe" -atboottime >> O4 - HKLM..Run: [MSKDetectorExe] C:Program >> FilesMcAfeeSpamKillerMSKDetct.exe /uninstall >> O4 - HKLM..Run: [pccguide.exe] "C:Program FilesTrend MicroInternet >> Security 2007pccguide.exe" >> O4 - HKLM..Run: [Windows Defender] "C:Program FilesWindows >> DefenderMSASCui.exe" -hide >> O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software >> UpdateHPWuSchd2.exe >> O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe >> O4 - HKCU..Run: [OE] "C:Program FilesTrend MicroInternet Security >> 2007TMAS_OETMAS_OEMon.exe" >> O4 - HKCU..Run: [updateMgr] "C:Program FilesAdobeAcrobat >> 7.0ReaderAdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 >> O4 - HKCU..Run: [Tair] "C:PROGRA~1COMMON~1ASKS~1iexplore.exe" -vt >> yazb >> O4 - HKCU..Run: [spybotSD TeaTimer] C:Program FilesSpybot - Search & >> DestroyTeaTimer.exe >> O4 - HKUSS-1-5-18..Run: [DWQueuedReporting] >> "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'SYSTEM') >> O4 - HKUS.DEFAULT..Run: [DWQueuedReporting] >> "C:PROGRA~1COMMON~1MICROS~1DWdwtrig20.exe" -t (User 'Default user') >> O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon >> FilesAdobeCalibrationAdobe Gamma Loader.exe >> O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:Program >> FilesAdobeAcrobat 7.0Readerreader_sl.exe >> O4 - Global Startup: Digital Line Detect.lnk = ? >> O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program >> FilesHPDigital Imagingbinhpqtra08.exe >> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - >> C:Program FilesJavaj2re1.4.2_03binnpjpi142_03.dll >> O9 - Extra 'Tools' menuitem: Sun Java Console - >> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program >> FilesJavaj2re1.4.2_03binnpjpi142_03.dll >> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - >> C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL >> O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - >> C:PROGRA~1SPYBOT~1SDHelper.dll >> O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - >> {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - >> C:PROGRA~1SPYBOT~1SDHelper.dll >> O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - >> C:WINDOWSNetwork Diagnosticxpnetdiag.exe >> O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - >> {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork >> Diagnosticxpnetdiag.exe >> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - >> C:Program FilesMessengermsmsgs.exe >> O9 - Extra 'Tools' menuitem: Windows Messenger - >> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program >> FilesMessengermsmsgs.exe >> O15 - Trusted Zone: http://download.windowsupdate.com >> O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController >> Control) - >> http://h30155.www3.hp.com/ediags/dd/instal...llMgr_v01_6.cab >> O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - >> http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab >> O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - >> http://software-dl.real.com/01d1b85147621c...tzip/RdxIE2.cab >> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - >> http://update.microsoft.com/microsoftupdat...b?1168651254906 >> O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer >> Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab >> O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) - >> file://C:Program FilesAutoCAD 2000iInstFred.ocx >> O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - >> file://C:Program FilesAutoCAD 2000iAcPreview.ocx >> O23 - Service: Intel Quote
Guest David H. Lipman Posted June 29, 2008 Posted June 29, 2008 Re: DLS From: "~BD~" <BoaterDave@nospam.invalid> | Whilst you are awaiting advice from 'the experts' you might like to paste | your HJT log into the facility you will find at www.hijackthis.de | I've already done so - some interesting pointers to many possible problem | areas! | Hope this helps (a little!) | Dave < snip > This is some jerk replying to an old message. Note the HJT log date below... <span style="color:blue"><span style="color:green"><span style="color:darkred"> >>> Logfile of Trend Micro HijackThis v2.0.2 >>> Scan saved at 5:29:12 PM, on 12/19/2007</span></span></span> -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.