|
|
|
iedll.exe
Showing all messages in thread #1063306650 Windows Me Annoyances Discussion Forum
The following are all of the messages in this thread (16 in all), shown in chronological order. Click any message subject to view that message by itself or to view the thread hierarchy.
|
iedll.exe
Thursday, September 11, 2003 at 11:57 am Posted by Geo
(2 messages posted)
Greetings i need to replace this file but i cant find it anyware. and what do i do
when i get it please direct me on how to replace it thanks alot==Geo==
file needed is----idell.exe
:->
[Reply or follow-up to this message]
| |
re: iedll.exe
Thursday, September 11, 2003 at 4:26 pm Posted by jabuck
(2274 messages posted)
Geo, That file is a BHO trying to write to your registry and will begin to cause
problem with internet explorer. It is associated with coolwebsearch.The removal tool
is at this link Compliments
of Mr. Charlie ---jabuck
On Thursday, September 11, 2003 at 11:57 am, Geo wrote:
>Greetings i need to replace this file but i cant find it anyware. and what do i
do
>when i get it please direct me on how to replace it thanks alot==Geo==
> file needed is----idell.exe
>:->
[Reply or follow-up to this message]
|
re: iedll.exe
Friday, September 12, 2003 at 3:02 pm Posted by jabuck
(2274 messages posted)
Geo, It may be because your java file in ie is being affected by iedll.exe. Click
here for a java test Java
Test Seems I heard that somewhere. If you can't use the auto removal tool
try downloading Hijack This
Once you scan your files delete any entries of coolwebsearch. If you don't know what
you are deleting other than this it is best to wait. Then copy paste you scan to
the forum for someone to take a look at. Be sure to check the box below(preserve
your spacing) or the post will be hard to read. Once you run hijack, if you have
these they can be safely deleted : R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL
= http://www.fastwebfinder.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.fastwebfinder.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.fastwebfinder.com/sp.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.fastwebfinder.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.fastwebfinder.com/hp.php
O4 - HKCU\..\Run: [iedll] C:\WINDOWS\iedll.exe
O4 - HKCU\..\Run: [loader] C:\WINDOWS\LOADER.EXE
Restart your computer I'm e-mailing a copy of shredder ---jabuck
On Thursday, September 11, 2003 at 11:57 am, Geo wrote:
>Greetings i need to replace this file but i cant find it anyware. and what do i
do
>when i get it please direct me on how to replace it thanks alot==Geo==
> file needed is----idell.exe
>:->
[Reply or follow-up to this message]
|
re: iedll.exe
Friday, September 19, 2003 at 8:30 am Posted by Charles
(2 messages posted)
I realized I had a problem w/ iedll.exe when upon booting my machine, I got a message
that this file was generating errors and would be closed.
I searched for the file and found it in my c:\winnt directory. I simply deleted
the file and then removed it from my recycle bin, and the next bootup went without
incident.
Should I still follow the instructions below, or am I safe?
Thanks.
On Friday, September 12, 2003 at 3:02 pm, jabuck wrote:
>Geo, It may be because your java file in ie is being affected by iedll.exe. Click
>here for a java test Java
>Test Seems I heard that somewhere. If you can't use the auto removal tool
>try downloading Hijack
This
>Once you scan your files delete any entries of coolwebsearch. If you don't know
what
>you are deleting other than this it is best to wait. Then copy paste you scan to
>the forum for someone to take a look at. Be sure to check the box below(preserve
>your spacing) or the post will be hard to read. Once you run hijack, if you have
>these they can be safely deleted : R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL
>= http://www.fastwebfinder.com/sp.php
>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.fastwebfinder.com/sp.php
>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.fastwebfinder.com/sp.php
>R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.fastwebfinder.com/sp.php
>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.fastwebfinder.com/hp.php
>O4 - HKCU\..\Run: [iedll] C:\WINDOWS\iedll.exe
>O4 - HKCU\..\Run: [loader] C:\WINDOWS\LOADER.EXE
> Restart your computer I'm e-mailing a copy of shredder ---jabuck
>
>
[Reply or follow-up to this message]
|
re: iedll.exe
Friday, September 19, 2003 at 2:20 pm Posted by jabuck
(2274 messages posted)
Charles, I don't think getting rid of one file will remove it. If you have those
items they need to be deleted. This will usually get all of iedll.exe.
Download Hijack This
to the desktop, it is free. Open it up and click the scan button put a check in the
boxes beside:
O4 - HKCU\..\Run: [winpopup] C:\WINDOWS\winupie.exe
O4 - HKCU\..\Run: [iedll] C:\WINDOWS\iedll.exe
O4 - HKCU\..\Run: [loader] C:\WINDOWS\LOADER.EXE
Fix Checked.
Don't delete anything else unless you know exactly what you are doing.
Restart your computer.
Then go to my computer>local disk[C:]>windows>right click on these files>delete:
C:\WINDOWS\winupie.exe
C:\WINDOWS\iedll.exe
C:\WINDOWS\LOADER.EXE
Then you need to download Spybot
a free spyware remover to your desktop,update it, restart your computer and run it. For
great free added protection use Spyblaster
With these on your computer and a good antivirus, you will be well protected.
Hope this helps. ---jabuck
On Friday, September 19, 2003 at 8:30 am, Charles wrote:
>I realized I had a problem w/ iedll.exe when upon booting my machine, I got a message
>that this file was generating errors and would be closed.
>
>I searched for the file and found it in my c:\winnt directory. I simply deleted
>the file and then removed it from my recycle bin, and the next bootup went without
>incident.
>
>Should I still follow the instructions below, or am I safe?
>
>Thanks.
>
[Reply or follow-up to this message]
|
re: iedll.exe
Saturday, September 20, 2003 at 7:28 am Posted by L. Smith
(1 messages posted)
Download a copy of cwshredder http://www.spywareinfo.com/~merijn/files/cwshredder.zip.
Unzip and run. Your problem with iedll.exe will be gone.
On Thursday, September 11, 2003 at 11:57 am, Geo wrote:
>Greetings i need to replace this file but i cant find it anyware. and what do i
do
>when i get it please direct me on how to replace it thanks alot==Geo==
> file needed is----idell.exe
>:->
[Reply or follow-up to this message]
|
re: iedll.exe
Saturday, September 20, 2003 at 6:44 pm Posted by Charles
(2 messages posted)
jabuck
thanks so much for the information. i followed your instructions and was mostly
successful.
I downloaded hijack this and was able to locate two of the three files you indicated
below. The third (winupie.exe) was not in my c:\winnt directory or anywhere else
on my hard drive (i ran a search for it).
After checking them, I rebooted and then deleted the two .exe files.
Here's my question: Is it possible to skip the step that involves downloading and
running Spybot, or will this leave my current problem unresolved? I am reluctant
to install new programs on this computer because it belongs to my employer and if
the network administrator sees that I installed another program, it could lead to
problems for me.
I'm not even sure if I will be able to install the program because the system typically
does not allow me to install anything without going thru the network administrator.
If there are no other options, I will get the net. admin. involved and hope for
the best.
Thanks in advance!
Charles
On Friday, September 19, 2003 at 2:20 pm, jabuck wrote:
>Charles, I don't think getting rid of one file will remove it. If you have those
>items they need to be deleted. This will usually get all of iedll.exe.
>Download Hijack This
>to the desktop, it is free. Open it up and click the scan button put a check in
the
>boxes beside:
>O4 - HKCU\..\Run: [winpopup] C:\WINDOWS\winupie.exe
>O4 - HKCU\..\Run: [iedll] C:\WINDOWS\iedll.exe
>O4 - HKCU\..\Run: [loader] C:\WINDOWS\LOADER.EXE
>Fix Checked.
>Don't delete anything else unless you know exactly what you are doing.
>Restart your computer.
>Then go to my computer>local disk[C:]>windows>right click on these files>delete:
>C:\WINDOWS\winupie.exe
>C:\WINDOWS\iedll.exe
>C:\WINDOWS\LOADER.EXE
>Then you need to download Spybot
>a free spyware remover to your desktop,update it, restart your computer and run
it.
For
>great free added protection use Spyblaster
>With these on your computer and a good antivirus, you will be well protected.
>Hope this helps. ---jabuck
>
>
[Reply or follow-up to this message]
|
re: iedll.exe
Saturday, September 20, 2003 at 7:04 pm Posted by jabuck
(2274 messages posted)
Charles, Spybot is an added precaution and a valuable tool but adding it to your
employers computer requires his/her permission. Thanks for your response. ---jabuck
On Saturday, September 20, 2003 at 6:44 pm, Charles wrote:
>jabuck
>
>thanks so much for the information. i followed your instructions and was mostly
>successful.
>
>I downloaded hijack this and was able to locate two of the three files you indicated
>below. The third (winupie.exe) was not in my c:\winnt directory or anywhere else
>on my hard drive (i ran a search for it).
>
>After checking them, I rebooted and then deleted the two .exe files.
>
>Here's my question: Is it possible to skip the step that involves downloading and
>running Spybot, or will this leave my current problem unresolved? I am reluctant
>to install new programs on this computer because it belongs to my employer and if
>the network administrator sees that I installed another program, it could lead to
>problems for me.
>
>I'm not even sure if I will be able to install the program because the system typically
>does not allow me to install anything without going thru the network administrator.
> If there are no other options, I will get the net. admin. involved and hope for
>the best.
>
>Thanks in advance!
>
>Charles
[Reply or follow-up to this message]
|
re: iedll.exe
Saturday, September 20, 2003 at 7:38 pm Posted by Ms. Eagle
(33640 messages posted)
Charles, all you should need to do to get rid of this hijacker is run the CWShredder
tool. This page has information that will give you an idea what you're dealing with.
The CoolWebSearch Chronicles: The story of a thousand hijacks
There's really nothing you could have done to prevent it. A firewall doesn't stop
it. Disabling ActiveX installs doesn't stop it, etc. Once you reboot, it may execute
again, so just make sure you have the most recent shredder tool and run it again
after rebooting. After looking at the article, you'll see it's a strange one.
[Reply or follow-up to this message]
|
re: iedll.exe
Sunday, October 12, 2003 at 10:56 pm Posted by Keith
(1 messages posted)
Carol,
Thank you to the N!
This rocks.
K
[Reply or follow-up to this message]
|
re: iedll.exe
Tuesday, October 14, 2003 at 7:01 am Posted by JohnM
(2 messages posted)
I came here thru a search on ie.dll however I am running win98. But I tried simply
deleting the ie.dll file and it did boot up no prob but once I ran ie another ie.dll
file was generated in the same directory so I am guessing theres a bit more to it.
BTW does anyone know if you can simply block BHO's. I dont like the idea of outsiders
messin w/ my reg...thnks
On Friday, September 19, 2003 at 8:30 am, Charles wrote:
>I realized I had a problem w/ iedll.exe when upon booting my machine, I got a message
>that this file was generating errors and would be closed.
>
>I searched for the file and found it in my c:\winnt directory. I simply deleted
>the file and then removed it from my recycle bin, and the next bootup went without
>incident.
>
>Should I still follow the instructions below, or am I safe?
>
>Thanks.
>
[Reply or follow-up to this message]
|
re: iedll.exe
Tuesday, October 14, 2003 at 7:32 am Posted by JohnM
(2 messages posted)
Carol,
Thankyou so much for posting this most informative link...
On Saturday, September 20, 2003 at 7:38 pm, Carol wrote:
>
>Charles, all you should need to do to get rid of this hijacker is run the CWShredder
>tool. This page has information that will give you an idea what you're dealing with.
>
>The CoolWebSearch Chronicles: The story of a thousand hijacks
>
>There's really nothing you could have done to prevent it. A firewall doesn't stop
>it. Disabling ActiveX installs doesn't stop it, etc. Once you reboot, it may execute
>again, so just make sure you have the most recent shredder tool and run it again
>after rebooting. After looking at the article, you'll see it's a strange one.
>
>
>
>
>
[Reply or follow-up to this message]
|
You're welcome! (n/t)
Wednesday, October 15, 2003 at 12:12 am Posted by Ms. Eagle
(33640 messages posted)
:)
On Sunday, October 12, 2003 at 10:56 pm, Keith wrote:
>Carol,
>
>Thank you to the N!
>This rocks.
>
>K
[Reply or follow-up to this message]
|
You're so welcome (n/t)
Wednesday, October 15, 2003 at 12:14 am Posted by Ms. Eagle
(33640 messages posted)
:)
On Tuesday, October 14, 2003 at 7:32 am, JohnM wrote:
>Carol,
>Thankyou so much for posting this most informative link...
>
>
[Reply or follow-up to this message]
|
re: iedll.exe
Thursday, November 6, 2003 at 3:08 am Posted by David
(1 messages posted)
Hi everyone,
I am in a bit of trouble. My problem is that everytime I start up the computer and
go into internet explorer I am sent to www.fastwebfinder.com.
I have tried to download Highjack This, CWS Shredder etc but every time i click on
the link I end up at the fastwebfinder page again. If anybody knows what I might
be able to do let mw know because it is driving me insane.
On Saturday, September 20, 2003 at 7:28 am, L. Smith wrote:
>Download a copy of cwshredder http://www.spywareinfo.com/~merijn/files/cwshredder.zip.
> Unzip and run. Your problem with iedll.exe will be gone.
>
>
[Reply or follow-up to this message]
|
re: iedll.exe
Thursday, November 6, 2003 at 6:22 am Posted by T McKenna
(1 messages posted)
I to am having the same problem with iedll.exe, here is my LOG from hijackthis which
of these can I delete <, thanks
Logfile of HijackThis v1.97.3
Scan saved at 14:16:13, on 06/11/2003
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS\AVPCC.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\SISTRAY.EXE
C:\WINDOWS\SYSTEM\KHOOKER.EXE
C:\WINDOWS\SYSTEM\IRMON.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\AHEAD\INCD\INCD.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS\AVPCC.EXE
C:\PROGRAM FILES\MCAFEE\QUICKCLEAN\PLGUNI.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\HOTBAR\BIN\4.3.6.0\HBINST.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\INSTANT UPDATER\RULAUNCH.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\QBROWSE.EXE
C:\PROGRAM FILES\SERIF\GRAPHICSPLUS\GPSTART.EXE
C:\PROGRAM FILES\HOTBAR\BIN\4.3.6.0\HBSRV.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SLLIGHTS.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://tooncomics.com/main/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://tooncomics.com/main/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://tooncomics.com/main/sp.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tooncomics.com/main/hp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://out.true-counter.com/a/?351418
(obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://out.true-counter.com/b/?351418
(obfuscated)
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://tooncomics.com/main/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://out.true-counter.com/b/?351418
(obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://out.true-counter.com/a/?351418
about:blank (obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://out.true-counter.com/b/?351418
(obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://out.true-counter.com/b/?351418
(obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://out.true-counter.com/b/?351418
(obfuscated)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://out.true-counter.com/c/?351418
(obfuscated)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.freehqmovies.com/enter.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.fastwebfinder.com/hp.php
R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://out.true-counter.com/b/?351418
(obfuscated)
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://out.true-counter.com/b/?351418
(obfuscated)
F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSINFO\msinfo.exe hpfsched
N1 - Netscape 4: user_pref("browser.startup.homepage","http://www.123found.com");
(C:\Program Files\Netscape\Users\terence\prefs.js)
O1 - Hosts: 645238813 auto.search.msn.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT
5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar.dll
O2 - BHO: Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\PROGRAM FILES\HOTBAR\BIN\4.3.6.0\HBHOSTIE.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467}
- C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar.dll
O3 - Toolbar: &Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\PROGRAM FILES\HOTBAR\BIN\4.3.6.0\HBHOSTIE.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\SYSTEM\SISTRAY.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\SYSTEM\khooker.exe
O4 - HKLM\..\Run: [QBROWSE] "C:\Progra~1\uniwill\qbrowse\qbrowse.exe"
O4 - HKLM\..\Run: [IrMon] irmon.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AVPCC] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus\avpcc.exe
/wait
O4 - HKLM\..\Run: [Imonitor] "C:\Program Files\McAfee\QuickClean\Plguni.exe" /START
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Internat Conf] \bootconf.exe
O4 - HKLM\..\Run: [Hotbar] C:\PROGRAM FILES\HOTBAR\BIN\4.3.6.0\HBINST.EXE /Upgrade
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [AVPCC Service] C:\Program Files\Kaspersky Lab\Kaspersky
Anti-Virus\avpcc.exe /Service
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee
Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\Run: [od-stnd59] c:\program files\Webdialer\od-stnd59.exe -m
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - HKCU\..\Run: [iedll] C:\WINDOWS\iedll.exe
O4 - HKCU\..\Run: [loader] C:\WINDOWS\LOADER.EXE
O4 - HKCU\..\RunServices: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee
Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR
O4 - HKCU\..\RunServices: [od-stnd59] c:\program files\Webdialer\od-stnd59.exe -m
O4 - HKCU\..\RunServices: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE"
/background
O4 - HKCU\..\RunServices: [iedll] C:\WINDOWS\iedll.exe
O4 - HKCU\..\RunServices: [loader] C:\WINDOWS\LOADER.EXE
O4 - Startup: Qbrowse.lnk = C:\WINDOWS\Qbrowse.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: GraphicsPlus.lnk = C:\Program Files\Serif\GraphicsPlus\GpStart.exe
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\GOOGLETOOLBAR.DLL/cmsearch.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\WINDOWS\GOOGLETOOLBAR.DLL/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\WINDOWS\GOOGLETOOLBAR.DLL/cmsimilar.html
O8 - Extra context menu item: Backward &Links - res://C:\WINDOWS\GOOGLETOOLBAR.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate Page - res://C:\WINDOWS\GOOGLETOOLBAR.DLL/cmtrans.html
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .swf: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npswf32.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {02C20140-76F8-4763-83D5-B660107B7A90} (Loader Class) - http://connect.online-dialer.com/MaConnect.cab
O16 - DPF: {1E89F686-B78D-4C85-9EFC-3474516E3FE2} - http://80.96.119.2/tes/anna/webcam.exe
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {841A9192-5690-11D4-A258-0040954A01BE} (DialXSCtl Object) - http://dialxs.nl/install/dialxs.ocx
O19 - User stylesheet: C:\WINDOWS\Web\oslogo.bmp
O19 - User stylesheet: C:\WINDOWS\default.css (HKLM)
[Reply or follow-up to this message]
| |
| |
Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread
| |
Return to the Windows Me Discussion Forum
|
|
|
|