re: HT log. i am trying to fix fastwebfinder problem. Monday, November 17, 2003 at 2:51 pm Windows Me Annoyances Discussion Forum Posted by Mike (1 messages posted) Remove ld.exe from your windwos directory. This program causes all your problems On Saturday, November 15, 2003 at 1:45 pm, amy wrote: >what should i remove/fix. > >Logfile of HijackThis v1.97.6 >Scan saved at 1:43:02 PM, on 11/15/2003 >Platform: Windows XP SP1 (WinNT 5.01.2600) >MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) > >Running processes: >C:\WINDOWS\System32\smss.exe >C:\WINDOWS\system32\winlogon.exe >C:\WINDOWS\system32\services.exe >C:\WINDOWS\system32\lsass.exe >C:\WINDOWS\system32\svchost.exe >C:\WINDOWS\System32\svchost.exe >C:\WINDOWS\system32\spoolsv.exe >C:\WINDOWS\system32\HPConfig.exe >C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe >C:\Program Files\Norton AntiVirus\navapsvc.exe >C:\WINDOWS\System32\svchost.exe >C:\WINDOWS\system32\ZoneLabs\vsmon.exe >C:\WINDOWS\Explorer.EXE >C:\WINDOWS\System32\carpserv.exe >C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe >C:\Program Files\Synaptics\SynTP\SynTPLpr.exe >C:\Program Files\Synaptics\SynTP\SynTPEnh.exe >C:\Program Files\Common Files\Symantec Shared\ccApp.exe >C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe >C:\WINDOWS\System32\P2P Networking\P2P Networking.exe >C:\Program Files\Window Active\winactive.exe >C:\Program Files\Common Files\Real\Update_OB\realsched.exe >C:\Program Files\MSN Messenger\MsnMsgr.Exe >C:\Program Files\Yahoo!\Messenger\ypager.exe >C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe >C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe >C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe >C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe >C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe >C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe >C:\WINDOWS\System32\wuauclt.exe >C:\Program Files\Internet Explorer\iexplore.exe >C:\Program Files\Messenger\msmsgs.exe >C:\Documents and Settings\Amy Jackson\Desktop\HijackThis.exe > >R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus8l.hpwis.com >R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride >= 127.0.0.1 >R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://qus8l.hpwis.com/ >O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat >5.0\Reader\ActiveX\AcroIEHelper.ocx >O2 - BHO: DNSErr object - {1E1B2879-88FF-11D2-8D96-D7ACAC95951F} - C:\WINDOWS\dnse.dll >O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft >Money\System\mnyside.dll >O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton >AntiVirus\NavShExt.dll >O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) >O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx >O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program >Files\Norton AntiVirus\NavShExt.dll >O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe >O4 - HKLM\..\Run: [CARPService] carpserv.exe >O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe >O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe >O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe >-d >O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe >O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe >O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe >/s >O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe >O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe >O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" >O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" >O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" >O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe >/AUTOSTART >O4 - HKLM\..\Run: [winactive] C:\Program Files\Window Active\winactive.exe >O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" >-osboot >O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl >O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background >O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet >O4 - Global Startup: hp psc 1000 series.lnk = ? >O4 - Global Startup: hpoddt01.exe.lnk = ? >O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE >O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe >O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 >O9 - Extra button: Messenger (HKLM) >O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM) >O9 - Extra button: AIM (HKLM) >O9 - Extra button: Related (HKLM) >O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) >O9 - Extra button: MoneySide (HKLM) >O14 - IERESET.INF: START_PAGE_URL=http://qus8l.hpwis.com >O16 - DPF: {0122955E-1FB0-11D2-A238-006097FAEE8B} (CscClnt Class) - http://205.159.125.199/central/02030106/cccabs/CleverContent.cab >O16 - DPF: {018B7EC3-EECA-11D3-8E71-0000E82C6C0D} - http://www.positivebeats.com/dlmp3.exe >O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab >O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0309.cab >O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/1312d526c60d30be0918/netzip/RdxIE601.cab >O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab >O17 - HKLM\System\CCS\Services\Tcpip\..\{151A020C-8414-49B8-A136-0906FE16E734}: Domain >= usc.edu >O17 - HKLM\System\CCS\Services\Tcpip\..\{151A020C-8414-49B8-A136-0906FE16E734}: NameServer >= 128.125.253.183,128.125.253.166,128.125.253.136 >O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = usc.edu,hsc.usc.edu >O17 - HKLM\System\CS1\Services\Tcpip\..\{151A020C-8414-49B8-A136-0906FE16E734}: Domain >= usc.edu >O17 - HKLM\System\CS1\Services\Tcpip\..\{151A020C-8414-49B8-A136-0906FE16E734}: NameServer >= 128.125.253.183,128.125.253.166,128.125.253.136 >O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = usc.edu,hsc.usc.edu >O17 - HKLM\System\CS2\Services\Tcpip\..\{151A020C-8414-49B8-A136-0906FE16E734}: Domain >= usc.edu >O17 - HKLM\System\CS2\Services\Tcpip\..\{151A020C-8414-49B8-A136-0906FE16E734}: NameServer >= 128.125.253.183,128.125.253.166,128.125.253.136 >O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = usc.edu,hsc.usc.edu > > Written in response to: HT log. i am trying to fix fastwebfinder problem. (amy: Saturday, November 15, 2003 at 1:45 pm) There are presently no replies to this message. All messages in this thread [show all] HT log. i am trying to fix fastwebfinder problem. (amy: Sat, Nov 15, 2003, 1:45 pm) re: HT log. Run CWShredder.exe (Jack Gulley: Sat, Nov 15, 2003, 3:01 pm) re: HT log. Run CWShredder.exe (amy: Sat, Nov 15, 2003, 3:32 pm) re: HT log. Run CWShredder.exe (Jack Gulley: Sat, Nov 15, 2003, 3:51 pm) re: HT log. i am trying to fix fastwebfinder problem. (Ms. Eagle: Sun, Nov 16, 2003, 12:06 am) re: HT log. i am trying to fix fastwebfinder problem. (Mike: Mon, Nov 17, 2003, 2:51 pm) Reply or follow-up to this message Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows Me Discussion Forum