That's good to hear! Is there a reason you didn't fix most of the entries I suggested? 
Those I wasn't familiar with, I researched. It's up to you of course. I like to fine 
tune my system, so I usually pass it on. 

CastleCops StartupList or 
AnswersThatWork

Also, check Jack Gulley's webpage for suggestions and info. for ME system's...

Jack Gulley's ME Fixes page

Any/all ActiveX Objects - 016 DPF can be removed at any time and will be installed 
again if/when needed. It's best to occassionally clear out, those that are no longer 
needed. You have no use for WGA Validation, since WinMe is no longer a supported 
OS. Updates are not put out any longer.

Updreg.exe - Reminder to register Creative Labs SoundBlaster Live! cards

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
- C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime

Real Player spyware related app, but it'll show up in startup again everytime you 
it .. >>
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" 
-osboot

(Tip: Many users replace Real Player with Real Alternative, and QuickTime with QT 
Alternative)

These two entries are related to Alexa, a spyware/privacy issue ->>
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} 
- C:\WINDOWS\web\related.htm

You didn't uninstall and update Java ->> 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program 
Files\Java\jre1.5.0_12\bin\npjpi150_12.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} 
- C:\Program Files\Java\jre1.5.0_12\bin\npjpi150_12.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation 
Tool) - http://go.microsoft.com/fwlink/?linkid=39204

*Malware related according to what I found doing research on it... 

 ...O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.115.110,85.255.112.151

I came across several other HJT Log threads on various forums. In every case, the 
malware expert, advised them to fix the entry. That's how I know it should be fixed.

In any case, if you're comfortable with IE you might consider giving Opera a try 
instead of Firefox. You can use both. IE is a malware magnet. ActiveX is one of the 
main reasons, in addition to BHO's and toolbars. Not to mention, it's very easy to 
exploit.


Blocking Unwanted Parasites with a Hosts File

• Reply or follow-up to this message

• Search this forum
• Start a new thread on a different subject

• Report abuse of the forum