Community Forum

newbie needs help

Xfinity Forum Archive
About the archive project

Xfinity Forum Archive...

This is an archived section of the community.

Content in this area has been identified as outdated or irrelevant.

This change was done in an effort to make the forum easier to use and to keep only the most helpful and recent content active.

Post your questions in the Xfinity Community

Frequent Visitor

newbie needs help

ok, so i've had my computer for three days now and comcast as well.  Well yesterday I aquired a virus called the contra virus and I have tried everything.  I've used the free McAfee that comcast provides, looked all over the internet, and still I can only find programs to scan for the virus.  I know I have them, thats obvious.  Everytime I look up free anti-virus I find something that looks like it's gonna do the job, and then they say I have to purchase 'the complete program' in order for them to get rid of the infected files.  So what I really need to know, is there any program out there that I can download that will actually clean out the bad files without my credit card?
Most Valued Poster

Re: newbie needs help

Before attempting anything further, please follow steps 1-5 in this thread: "READ THIS FIRST IF YOU'VE BEEN HIJACKED, HAVE SPYWARE, OR YOUR PC'S INFECTED." When you reach step 5, post your HiJackThis log here in your thread. One of the Security Experts will be along to move this thread to the Security Forum and advise a fix tailored to your situation.
Photobucket - Video and Image Hosting

Frequent Visitor

Re: newbie needs help

Thank you so much.  Contra is gone.  That was all I needed.
Most Valued Poster

Re: newbie needs help

Even though you have completed the requested scans, it is still in your best interest to post a HiJack This log to be evaluated by one of the Security Experts. There may still be remnants of that infection or other active nasties of which you are not yet aware.
Photobucket - Video and Image Hosting

Frequent Visitor

Re: newbie needs help

Is this what I need?
 
Process list saved on 5:32:13 PM, on 6/11/07
Platform: Windows 98  (Windows 95 .)
[pid] [full path to filename]  [file version] [company name]
4293911459 C:\WINDOWS\SYSTEM\KERNEL32.DLL  4.10.2222 Microsoft Corporation
4294915911 C:\WINDOWS\SYSTEM\MSGSRV32.EXE  4.10.2222 Microsoft Corporation
4294910167 C:\WINDOWS\SYSTEM\MPREXE.EXE  4.10.1998 Microsoft Corporation
4294924387 C:\WINDOWS\SYSTEM\mmtask.tsk  4.03.1998 Microsoft Corporation
4294926923 C:\WINDOWS\EXPLORER.EXE  4.72.3110.1 Microsoft Corporation
4294840439 C:\WINDOWS\TASKMON.EXE  4.10.1998 Microsoft Corporation
4294842431 C:\PROGRAM FILES\WINAMP\WINAMPA.EXE   
4294839131 C:\WINDOWS\SYSTEM\XPUUPDATE.EXE   
4294736643 C:\WINDOWS\SYSTEM\DDHELP.EXE  4.07.00.0700 Microsoft Corporation
4294717723 C:\PROGRAM FILES\XOFTSPYSE\XOFTSPY.EXE  4, 31, 0, 12 ParetoLogic
4294765607 C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE  6.00.2800.1106 Microsoft Corporation
4294691099 C:\WINDOWS\SYSTEM\PSTORES.EXE  5.00.1877.3 Microsoft Corporation
4294734103 C:\PROGRAM FILES\A-SQUARED HIJACKFREE\A2HIJACKFREE.EXE  2.1.0.34 Emsi Software GmbH
Most Valued Poster

Re: newbie needs help

I'm going to redirect you to this thread: "READ THIS FIRST IF YOU'VE BEEN HIJACKED, HAVE SPYWARE, OR YOUR PC'S INFECTED." Step 5 includes the link to the appropriate version of HiJackThis (do not use the beta version offered by A2). Follow the instructions in that thread to post the HiJack This log.
Photobucket - Video and Image Hosting

Frequent Visitor

Re: newbie needs help

okay so i've been redirected and found out how to get this log.  now what do i do?
 
Logfile of HijackThis v1.99.1
Scan saved at 6:00:16 PM, on 6/11/07
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\WINDOWS\SYSTEM\XPUUPDATE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\A-SQUARED HIJACKFREE\A2HIJACKFREE.EXE
C:\HJT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
O2 - BHO: IEExtension Class - {DBE5BEE8-F032-11DB-826A-C4BB56D89593} - C:\PROGRAM FILES\CONTRAVIRUS\SECIEADDIN.DLL (file missing)
O3 - Toolbar: Ad-Protect Toolbar - {EA038DDD-0FE0-41f5-BA60-FC3660529E71} - C:\PROGRAM FILES\CONTRAVIRUS\TOOLBAND.DLL (file missing)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Windows Updater Servc] C:\WINDOWS\SYSTEM\xpuupdate.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5049/mcfscan.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
Most Valued Poster

Re: newbie needs help

If you ran HJT while in safe mode, please run HJT again with a normal startup. One of the Experts will be along to advise further action.
Photobucket - Video and Image Hosting

Frequent Visitor

Re: newbie needs help

Here is my safe mode results
 
Logfile of HijackThis v1.99.1
Scan saved at 7:02:10 PM, on 6/11/07
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\HJT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
O2 - BHO: IEExtension Class - {DBE5BEE8-F032-11DB-826A-C4BB56D89593} - C:\PROGRAM FILES\CONTRAVIRUS\SECIEADDIN.DLL (file missing)
O3 - Toolbar: Ad-Protect Toolbar - {EA038DDD-0FE0-41f5-BA60-FC3660529E71} - C:\PROGRAM FILES\CONTRAVIRUS\TOOLBAND.DLL (file missing)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Windows Updater Servc] C:\WINDOWS\SYSTEM\xpuupdate.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5049/mcfscan.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
 
Most Valued Poster

Re: newbie needs help

I assumed your first log was in safe mode because it did not show the startup of any security programs. If you are running an unprotected machine there is no mystery as to how you became infected. Please wait for advice from one of our Security Experts.
Photobucket - Video and Image Hosting

Bronze Problem Solver

Re: newbie needs help

Ok rhmleech,
 
Run hijackthis again, this time select scan only, place a check next each of these lines, close all browser windows and click on fix:
 
 
O2 - BHO: IEExtension Class - {DBE5BEE8-F032-11DB-826A-C4BB56D89593} - C:\PROGRAM FILES\CONTRAVIRUS\SECIEADDIN.DLL (file missing)
O3 - Toolbar: Ad-Protect Toolbar - {EA038DDD-0FE0-41f5-BA60-FC3660529E71} - C:\PROGRAM FILES\CONTRAVIRUS\TOOLBAND.DLL (file missing)
O4 - HKLM\..\Run: [Windows Updater Servc] C:\WINDOWS\SYSTEM\xpuupdate.exe
 
Now, set windows to show hidden files:
 
  • Open My Computer.
  • Select the View menu and click Folder Options.
  • Select the View Tab.
  • In the Hidden files section select Show all files.

 

Navigate to C:\WINDOWS\SYSTEM\  and delete xpuupdate.exe

 

Reboot, Download this free antivirus and scan with it: http://www.free-av.com/  post another Hijackthis log..

 


  • Click OK.

 

TANSTAAFL!!


Frequent Visitor

Re: newbie needs help

ok, i did all that and here the new log in normal mode
 
Logfile of HijackThis v1.99.1
Scan saved at 9:03:21 PM, on 6/11/07
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\ANTIVIR PERSONALEDITION CLASSIC\AVGCTRL.EXE
C:\PROGRAM FILES\ANTIVIR PERSONALEDITION CLASSIC\SCHEDM.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\HJT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHL.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [avgctrl] "C:\Program Files\AntiVir PersonalEdition Classic\avgctrl.exe" /min
O4 - HKLM\..\RunServices: [schedm] "C:\Program Files\AntiVir PersonalEdition Classic\schedm.exe"
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5049/mcfscan.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
 
Bronze Problem Solver

Re: newbie needs help

Did antivir find anything? any reports etc?
TANSTAAFL!!


Frequent Visitor

Re: newbie needs help

i have no idea.  all i can see is stuff about updates.  how do i run a scan and see the reports
Expert

Re: newbie needs help

N.M. Unecessary post.
 
 
The O.P.is you, the Original poster.
 
Please disregard that post, it was only up for a minute and I am surprised that you even saw it.....
 
It was irrelevant and unecessary as I have stated. I misread this thread and all posters here have my apologies !!

Message Edited by EG on 06-11-2007 09:34 PM

Message Edited by EG on 06-11-2007 09:47 PM



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Frequent Visitor

Re: newbie needs help

I have no idea what you are talking about.  Was that directed towards me, or the person helping me?  And what is the O.P. ?
Bronze Problem Solver

Re: newbie needs help

Follow the instructions about updating antivir, then run the program and select do a full system scan.. I also suggest you go to add/remove programs and remove the MCaffee components there.. They won't function properly in Windows 98..
TANSTAAFL!!


Frequent Visitor

Re: newbie needs help

Well it must have worked.  This is the report.  7 bad files were found and I deleted them.
 

AntiVir PersonalEdition Classic
Report file date: Monday, June 11, 2007  21:42
Scanning for 814031 virus strains and unwanted programs.
Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows 98
Windows version:  ( A ) [4.10.2222] 
Username:         unknown
Computer name:    D5H8X9
Version information:
BUILD.DAT    : 247           11838 Bytes     5/10/07 11:48:00
AVSCAN.EXE   : 7.0.4.15     274472 Bytes     6/12/07 00:55:38
AVSCAN.DLL   : 7.0.4.4       33832 Bytes     3/27/07 17:13:38
LUKE.DLL     : 7.0.4.11     135208 Bytes     3/27/07 17:10:58
LUKERES.DLL  : 7.0.4.0       10280 Bytes     3/20/07 13:44:12
ANTIVIR0.VDF : 6.35.0.1    7371264 Bytes     5/31/06 19:08:58
ANTIVIR1.VDF : 6.38.1.170  5569024 Bytes     5/21/07 00:55:44
ANTIVIR2.VDF : 6.38.1.227   320000 Bytes      6/5/07 00:55:44
ANTIVIR3.VDF : 6.38.2.17    111104 Bytes     6/11/07 00:55:44
AVEWIN32.DLL : 7.4.0.32    2478592 Bytes     6/12/07 00:55:48
AVWINLL.DLL  : 1.0.0.7       14376 Bytes     2/26/07 15:21:50
AVPREF.DLL   : 7.0.2.1       18984 Bytes     3/27/07 17:13:32
AVREP.DLL    : 7.0.0.1      122920 Bytes     4/16/07 18:16:28
AVPACK32.DLL : 7.3.0.10     348200 Bytes     6/12/07 00:55:50
AVREG.DLL    : 7.0.1.2       31784 Bytes     3/15/07 13:58:54
AVEVTLOG.DLL : 7.0.0.18      81960 Bytes     3/27/07 17:08:16
RCIMAGE.DLL  : 7.0.1.15    2228264 Bytes     3/13/07 15:45:42
RCTEXT.DLL   : 7.0.45.0      86056 Bytes     3/19/07 17:42:26
Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: C:\PROGRAM FILES\ANTIVIR PERSONALEDITION CLASSIC\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: E:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: Monday, June 11, 2007  21:42
The scan of running processes will be started
Scan process 'AVSCAN.EXE' - '1' Module(s) have been scanned
Scan process 'AVCENTER.EXE' - '1' Module(s) have been scanned
Scan process 'PSTORES.EXE' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'SCHEDM.EXE' - '1' Module(s) have been scanned
Scan process 'AVGCTRL.EXE' - '1' Module(s) have been scanned
Scan process 'DDHELP.EXE' - '1' Module(s) have been scanned
Scan process 'WINAMPA.EXE' - '1' Module(s) have been scanned
Scan process 'TASKMON.EXE' - '1' Module(s) have been scanned
Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned
Scan process 'mmtask.tsk' - '1' Module(s) have been scanned
Scan process 'MPREXE.EXE' - '1' Module(s) have been scanned
Scan process 'MSGSRV32.EXE' - '1' Module(s) have been scanned
Scan process 'KERNEL32.DLL' - '1' Module(s) have been scanned
14 processes with 14 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
     [NOTE]      No virus was found!
Boot sector 'A:\'
     [NOTE]      In the drive 'A:\' no data medium is inserted!
Starting to scan the registry.
The registry was scanned ( '6' files ).

Starting the file scan:
Begin scan in 'C:\'
C:\WINDOWS\TEMP\sa70D4.exe
     [DETECTION] Contains signature of the dropper DR/FraudTool.ContaVir.B
     [INFO]      The file was deleted!
C:\WINDOWS\TEMP\14712A3.exe
     [DETECTION] Contains signature of the dropper DR/FraudTool.ContaVir.B
     [INFO]      The file was deleted!
C:\WINDOWS\TEMP\saC1F6.exe
     [DETECTION] Contains signature of the dropper DR/FraudTool.ContaVir.B
     [INFO]      The file was deleted!
C:\WINDOWS\TEMP\sa82C5.exe
     [DETECTION] Contains signature of the dropper DR/FraudTool.ContaVir.B
     [INFO]      The file was deleted!
C:\WINDOWS\TEMP\sa7336.exe
     [DETECTION] Contains signature of the dropper DR/FraudTool.ContaVir.B
     [INFO]      The file was deleted!
C:\WINDOWS\TEMP\sa296.exe
     [DETECTION] Contains signature of the dropper DR/FraudTool.ContaVir.B
     [INFO]      The file was deleted!
C:\WINDOWS\TEMP\lafC122.TMP
     [DETECTION] Is the Trojan horse TR/Dldr.Zlob.btq.78
     [INFO]      The file was deleted!
Begin scan in 'A:\'
Search path A:\ could not be opened!
The device is not ready.
Begin scan in 'D:\'
Search path D:\ could not be opened!
The device is not ready.
Begin scan in 'E:\'
Search path E:\ could not be opened!
The device is not ready.
 
End of the scan: Monday, June 11, 2007  21:51
Used time: 09:31 min
The scan has been done completely.
   564 Scanning directories
 38270 Files were scanned
     7 viruses and/or unwanted programs were found
     0 classified as suspicious:
     7 files were deleted
     0 files were repaired
     0 files were moved to quarantine
     0 files were renamed
     0 Files cannot be scanned
 38263 Files not concerned
   207 Archives were scanned
     0 Warnings
     0 Notes
     0 Hidden objects were found
 
Bronze Problem Solver

Re: newbie needs help

Excellent, it appears it cleaned up everything else.
 
Post another Hijackthis log just to be sure..
TANSTAAFL!!


Frequent Visitor

Re: newbie needs help

sorry for the delay, i had to go to work.  here is the  hijackthis log
 
Logfile of HijackThis v1.99.1
Scan saved at 5:28:16 PM, on 6/12/07
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\ANTIVIR PERSONALEDITION CLASSIC\SCHEDM.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\PROGRAM FILES\ANTIVIR PERSONALEDITION CLASSIC\AVGCTRL.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\HJT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [avgctrl] "C:\Program Files\AntiVir PersonalEdition Classic\avgctrl.exe" /min
O4 - HKLM\..\RunServices: [schedm] "C:\Program Files\AntiVir PersonalEdition Classic\schedm.exe"
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5049/mcfscan.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
 
Bronze Problem Solver

Re: newbie needs help

Looks clean!! any problems?
 
 
TANSTAAFL!!


Highlighted
Frequent Visitor

Re: newbie needs help

NO promlems.  Thank you so much for all of your time and help.  I would have never fix it otherwise.