http://www.help2go.com/ Help2Go provides free computer help, advice, tutorials, and spyware help. en Tue, 21 May 2013 15:53:30 GMT vBulletin 60 http://www.help2go.com/images/misc/rss.png http://www.help2go.com/ http://www.help2go.com/forum/computer-help/109604-microsoft-office-search-enhancement-pack.html Sun, 19 May 2013 16:40:57 GMT Everytime I login a window opens that says Microsoft Office Search Enhancement Pack-it acts like a virus-does anyone know what I should do to either... Everytime I login a window opens that says Microsoft Office Search Enhancement Pack-it acts like a virus-does anyone know what I should do to either get rid of it or give it what it wants so it will stop bothering me? :confused: ]]> Computer Help lilyorange http://www.help2go.com/forum/computer-help/109604-microsoft-office-search-enhancement-pack.html http://www.help2go.com/forum/computer-help/109598-computer-freeze.html Sun, 19 May 2013 12:44:41 GMT Hi, please could anyone advise me? My desktop (tower) computer has recently started to freeze, everything freezes. If I have documents that I'm in the process of creating (Microsoft office Home & Student 2010), I either cannot finish the creation of the document, or I cannot save it, sometimes I can't even open Microsoft Office because of a freeze. If I have the internet open & I'm viewing pages & doing research, I lose the connection and/or can't shut down the pages. Sometimes (more frequently) the computer just completely freezes & fails to function & I can't even go to 'start' & reboot the system, and if I do manage to reboot the system it then does a disc (HDD) check & initiates a 'repair the computer' mode, and sometimes the system gives a message that says 'unable to fix the computer, please restart', I restart & get the same problem. I'm running Windows 7, I have a dual core processor, and the windows 7 program is genuine & legal. I have [I]Avast free anti-virus[/I] installed, I've done numerous full system scans which tell me the system is clean with no viruses or spyware. I've used AVG, and Microsoft Security Essentials (though not together) just to double check, and still it says (after the scans) that there are no viruses or spyware. I've done a 'CHKDSK', I've run a scan to check for bad sectors, and everything comes up great. Sometimes (like now, as I write this), the system will run beautifully, and all of a sudden without warning it Will freeze & I can do nothing so I have to reboot & hope for the best.

Could the problem be A 'TROJAN' somewhere? Could there be a hidden root-kit (whatever one of them is? I've heard they're not good)? Should I try alternative anti-viruses? Could there be a virus attached to the motherboard or could the motherboard be failing somewhere? The problem is I'm unemployed & don't have the money to go to any expense. Please could you help? If you need more information I'll tell you anything you need to know. Thank you for your help. :confused::(:confused: ]]> Computer Help Number7 http://www.help2go.com/forum/computer-help/109598-computer-freeze.html http://www.help2go.com/forum/spyware-help/109596-filled-visuses-spyware-broswer-boot-problems.html Sat, 18 May 2013 21:58:28 GMT THANKS IN ADVANCE!!!! Logs below: SUPERAntiSpyware Scan Log SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware,... THANKS IN ADVANCE!!!!

Logs below:

SUPERAntiSpyware Scan Log
SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 05/18/2013 at 12:14 PM

Application Version : 5.6.1020

Core Rules Database Version : 10419
Trace Rules Database Version: 8231

Scan type : Complete Scan
Total Scan Time : 01:00:03

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 483
Memory threats detected : 0
Registry items scanned : 35744
Registry threats detected : 35
File items scanned : 28071
File threats detected : 8

Adware.Tracking Cookie
C:\Documents and Settings\Administrator\Cookies\KGEU7H1I.txt [ /doubleclick.net ]
C:\Documents and Settings\Administrator\Cookies\20CDKRE6.txt [ /ad.yieldmanager.com ]

PUP.Wajam
HKLM\System\ControlSet001\Services\WAJAMUPDATER
C:\PROGRAM FILES\WAJAM\UPDATER\WAJAMUPDATER.EXE
HKLM\System\ControlSet001\Enum\Root\LEGACY_WAJAMUPDATER
HKLM\System\ControlSet002\Services\WAJAMUPDATER
HKLM\System\ControlSet002\Enum\Root\LEGACY_WAJAMUPDATER
HKLM\System\CurrentControlSet\Services\WAJAMUPDATER
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_WAJAMUPDATER
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}\InprocServer32
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}\InprocServer32#ThreadingModel
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}\ProgID
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}\Programmable
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}\TypeLib
HKCR\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}\VersionIndependentProgID
HKCR\wajam.WajamBHO.1
HKCR\wajam.WajamBHO.1\CLSID
HKCR\wajam.WajamBHO
HKCR\wajam.WajamBHO\CLSID
HKCR\wajam.WajamBHO\CurVer
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}\1.0
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}\1.0\0
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}\1.0\0\win32
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}\1.0\FLAGS
HKCR\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}\1.0\HELPDIR
C:\PROGRAM FILES\WAJAM\IE\PRIAM_BHO.DLL
HKU\S-1-5-21-448539723-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
C:\PROGRAM FILES\WAJAM\UNINSTALL.EXE
C:\RECYCLER\S-1-5-21-448539723-1035525444-1417001333-500\DC4\UNINSTALL.LNK
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}\NumMethods
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}\ProxyStubClsid
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}\ProxyStubClsid32
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}\TypeLib
HKCR\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}\TypeLib#Version

Adware.EpicPlay
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
HKU\S-1-5-21-448539723-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}

Adware.Shopper
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\NSF3.TMP\HAPPYLYRICS_2204-E2F0CCE3.EXE
C:\PROGRAM FILES\HAPPYLYRICS\UNINSTALL.EXE


Malwarebytes Anti-Malware (Trial) 1.75.0.1300
Malwarebytes : Free anti-malware download

Database version: v2013.05.18.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrator :: DEL001 [administrator]

Protection: Disabled

5/18/2013 12:25:22 PM
mbam-log-2013-05-18 (12-25-22).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 240005
Time elapsed: 54 minute(s), 1 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 57
C:\WINDOWS\Temp\DealioToolbar.exe (PUP.Dealio.TB) -> No action taken.
C:\Documents and Settings\Administrator\6guzv0mwog92g.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\opera.exe (Trojan.Krypt) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Application Data\Occonu\axlaycm.exe (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\54.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\56.exe (Trojan.Delf.ED) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\A.tmp (Trojan.Delf.ED) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\35.tmp (Trojan.Krypt) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP70\A0030406.exe (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP70\A0030483.exe (Trojan.Delf.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP70\A0030485.exe (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031034.data (Trojan.Tracur.DL) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031035.data (Rootkit.0Access) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031036.data (Trojan.Tracur.DL) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031037.data (Rootkit.0Access) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031039.data (Trojan.Dropper.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031040.data (Rootkit.0Access) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031041.data (Rootkit.0Access) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031042.data (Trojan.Dropper.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP73\A0031038.data (Adware.Gamevance) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036371.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036373.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036375.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036376.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036377.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036378.data (Trojan.Fareit.RRE) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036383.data (Spyware.Zbot.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036385.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036386.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036387.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036388.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036389.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036390.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036392.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036393.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036394.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036395.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036396.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036379.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036409.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036398.data (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036399.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036401.data (Trojan.Krypt) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036402.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036403.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036405.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036406.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036407.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036408.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036410.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036412.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036416.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036418.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036421.data (Trojan.Agent.ED) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036424.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036425.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E8F92757-4F9A-47B3-97B4-7A98399BDC03}\RP75\A0036426.data (Trojan.Agent.VOS) -> Quarantined and deleted successfully.

(end)


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:39:34 PM, on 5/18/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={97785D38-BB65-11E2-A339-0010C69612B9}
R3 - URLSearchHook: (no name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: HelloWorldBHO - {1C8501DD-5580-48AB-B25C-6D5DBE835A6A} - C:\Program Files\OApps\SelectionLinks.dll
O2 - BHO: UnfriendApp - {44ed99e2-16a6-4b89-80d6-5b21cf42e78b} - C:\Program Files\UnfriendApp\IE\common.dll
O2 - BHO: Happy Lyrics - {59C0C5BD-2579-433A-BBB8-AFFD59642BAF} - C:\Program Files\HappyLyrics\hppylrc.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\18.7.1.3\IPS\IPSBHO.DLL (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Updater By SweetPacks Helper - {C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD} - C:\Program Files\Updater By SweetPacks\Extension32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo] rundll32.exe "C:\Documents and Settings\Administrator\Local Settings\Application Data\Yahoo\mzokdwhi.dll",ASFGetDataUnitInfo
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6E23F769-7F8C-43D8-A2E6-30D2AB33EF53}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\..\{EBC0F9EA-9A04-408C-B0A3-2DE4E75DA228}: NameServer = 8.26.56.26,156.154.70.22
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Norton AntiVirus (NAV) - Unknown owner - C:\Program Files\Norton AntiVirus\Engine\18.7.1.3\ccSvcHst.exe (file missing)
O23 - Service: Security Center Server - 1303951853 (SecurityCenterServer1303951853) - Unknown owner - C:\WINDOWS\system32\ifdarasee.exe (file missing)
O23 - Service: Security Center Server - 2952017705 (SecurityCenterServer2952017705) - Unknown owner - C:\WINDOWS\system32\winsec32.exe (file missing)
O23 - Service: Security Center Server - 3348744567 (SecurityCenterServer3348744567) - Unknown owner - C:\WINDOWS\system32\oxaham.exe (file missing)
O23 - Service: Security Center Server - 4079863451 (SecurityCenterServer4079863451) - Unknown owner - C:\WINDOWS\system32\abihfout.exe (file missing)

--
End of file - 6415 bytes ]]> Spyware Help angelobricknj http://www.help2go.com/forum/spyware-help/109596-filled-visuses-spyware-broswer-boot-problems.html