C
Claudiaoc
Dear helpers,
I was having several different problems with Internet
Explorer (errors closing the application, running slow,
uninvited ads,.) and after reading about it, I installed
and ran a few anti-pest software. After deleting plenty of
pests, NOW I CANNOT OPEN INTERNET EXPLORER. I have
followed several leads (thank you for your suggestions)
with no luck. I am sending the error report, the history
and list of installed anti-pests files, and the hijack
log.
I DEEPLY appreciate your help!
Claudia
The error report:
Iexplore has caused an error in Shell32.dll. Iexplore will
now close. If you continue to experience problems, try
restarting your computer.
Details:
AppName: iexplore AppVer: 6.0.2800.1106
Mod Name: Shell32.dll Mod Ver: 5.50.4134100
Offset: 00002006
Before IE stopped working: I had installed and run the
following as part of the pests-cleaning process (My OS is
Windows ME):
Spyboy 1.2.: Found plenty of pests, all deleted.
Pest Patrol: Found plenty of pests (402), all deleted. I
still have problems when I run it (shortly after it starts
scanning, a window shows to say: "PestPatrol: an Error has
occurred in your program. You can close . or ignore." . I
have ignored it.
Also, before IE stopped working ,I had run Norton
Antivirus (professional 2003 + updates), installed a few
Microsoft windows updates for ME (non critical). I check
periodically for the critical updates and always installed
them. I have not installed all ME (non critical). About
those I installed last, I wrote down KB837009 and
kb832894. I 're-installed' them because when I checked the
logs and noticed that it said 'failure' to install - that
was in April. However after the re-installations, the log
(history of updates) did not changed.
Among the non-critical (ME), I remember I installed one
having to do with NET. I also reinstalled q273017. I also
wrote down that I checked for 831167 (?) and that q823559
was running.
I did not turn the NAV (Norton Anti-virus) before
installing the updates.
Also, I went to add/remove programs and uninstalled
programs were not used anymore such as: SBC used to be my
prior internet provider (now I use cable), Yahoo and AOL
which I do not use, software for HP printer I do not use
any more. NAV was not disabled when I uninstalled the
applications from add/remove programs.
Also I installed all pest cleaners with NAV on.
I have not reinstalled WinME.
And IE does not open if I Restart in Safe Mode.
PLEASE HELP!
Last time my internet explorer was alive, I was visiting a
page that used real player (version 10)
Then Interner explorer DIE: error in shell32.dll.
This is what I have done to try to solve the problem
following your advise:
I tried to run the QUICK CHECK from Aumha but again I can
open IE.
Spyboy: I have updated to 1.3, originally installed as
1.2 . One more pest found, and deleted
Ad-adware 6.0 181: I have downloaded and installed, it
found 36 files/keys- All were deleted
CWShredder: I have downloaded and installed, it Installed
it and run it today: found nothing.
Norton Antivirus (professional 2003 + updates): I ran it
after disabling system restore (Millennium edition).
However last update definition was 5/19 and I do not have
the most recent update because again I have no access to
IE..
Latest I am sending this message USING NESCAPE 6.
BUT IT IS EXPERIENCING PROBLEMS NOW AS WELL. PLEASE HELP!
HijackThis: I have downloaded and installed. I have the
HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 7:14:39 AM, on 5/25/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\WSCRIPT.EXE
C:\WINDOWS\SYSTEM\HPZTSB03.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\PESTPATROL\PPCONTROL.EXE
C:\PROGRAM FILES\PESTPATROL\PPMEMCHECK.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRAM FILES\SONY\VAIO ACTION SETUP\VASERV.EXE
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ACROTRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\SUPPORT.COM\CLIENT\BIN\TGCMD.EXE
C:\WINDOWS\WUAUCLT.EXE
C:\CLAUDIA OCANA AUSTIIN DEC 2002\COMPUTER
STUFF\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://rd.yahoo.com/customize/sbcy/defaults/sb/*http://www.
yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL = http://www.prodigy.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) =
http://rd.yahoo.com/customize/sbcy/defaults/su/*http://www.
yahoo.com
R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-
3D5FEC94A183} - (no file)
N2 - Netscape 6: user_pref
("browser.startup.homepage", "http://eltiempo.terra.com.co/
"); (C:\WINDOWS\Application
Data\Mozilla\Profiles\default\jx1255sr.slt\prefs.js)
N2 - Netscape 6: user_pref
("browser.search.defaultengine", "engine://C%3A%5CPROGRAM%
20FILES%5CNETSCAPE%5CNETSCAPE%206%5Csearchplugins%
5CSBWeb_01.src"); (C:\WINDOWS\Application
Data\Mozilla\Profiles\default\jx1255sr.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\ACROBAT\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
FADC6B084872} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\temp\Spybot - Search &
Destroy\SDHelper.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-
7859DF00B1D6} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-
00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry]
C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth]
C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [OmgStartup] C:\Program Files\Common
Files\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\PROGRA~1
\ADAPTEC\DIRECTCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program
files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\SYSTEM\hpztsb03.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [SBC Yahoo! Connection Manager]
C:\Program Files\SBC Yahoo!\Connection
Manager\ConnectionManager.exe -Show
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\PROGRAM
FILES\SBC YAHOO!\CONNECTION MANAGER\IP
INSIGHT\IPMon32.exe"
O4 - HKLM\..\Run: [C:\Program Files\SBC Yahoo!\Connection
Manager\ConnectionManager.exe ] SBC Yahoo! Connection
Manager
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common
Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common
Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1
\NORTON~1\ADVTOOLS\ADVCHK.EXE
O4 - HKLM\..\Run: [NPROTECT] C:\PROGRA~1\NORTON~1
\ADVTOOLS\NPROTECT.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1
\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1
\PPMemCheck.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV]
C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr]
C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program
Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [NPROTECT] C:\PROGRA~1\NORTON~1
\ADVTOOLS\NPROTECT.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program
Files\Common Files\Symantec Shared\Script
Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [WinTools] C:\Program
Files\Common files\WinTools\WToolsA.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1
\msmsgs.exe" /background
O4 - HKCU\..\Run: [System Soap Pro] C:\PROGRAM
FILES\SYSTEM SOAP PRO\SOAP.exe min
O4 - Startup: VAIO Action Setup (Server).lnk = C:\Program
Files\Sony\VAIO Action Setup\VAServ.exe
O4 - Startup: Adobe Gamma Loader.exe.lnk = C:\Program
Files\Common Files\Adobe\Calibration\Adobe Gamma
Loader.exe
O4 - Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Acrobat Assistant.lnk = C:\Program
Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Coches (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1
\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.prodigy.net/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab}
(YInstStarter Class) - C:\Program Files\Yahoo!
\common\yinsthelper.dll
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37861.6914351852
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7}
(ActiveDataObj Class) - https://www-
secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office
Update Installation Engine) -
http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4EBD0320-3FA7-4234-9461-638469C74E25} -
http://www.pinksandsmediagroup.com/external/cabs/packages/c
ab_4.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289}
(DialerWeb Class) -
http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE
Class) - http://software-
dl.real.com/04dddf6353279a834306/netzip/RdxIE601.cab
I was having several different problems with Internet
Explorer (errors closing the application, running slow,
uninvited ads,.) and after reading about it, I installed
and ran a few anti-pest software. After deleting plenty of
pests, NOW I CANNOT OPEN INTERNET EXPLORER. I have
followed several leads (thank you for your suggestions)
with no luck. I am sending the error report, the history
and list of installed anti-pests files, and the hijack
log.
I DEEPLY appreciate your help!
Claudia
The error report:
Iexplore has caused an error in Shell32.dll. Iexplore will
now close. If you continue to experience problems, try
restarting your computer.
Details:
AppName: iexplore AppVer: 6.0.2800.1106
Mod Name: Shell32.dll Mod Ver: 5.50.4134100
Offset: 00002006
Before IE stopped working: I had installed and run the
following as part of the pests-cleaning process (My OS is
Windows ME):
Spyboy 1.2.: Found plenty of pests, all deleted.
Pest Patrol: Found plenty of pests (402), all deleted. I
still have problems when I run it (shortly after it starts
scanning, a window shows to say: "PestPatrol: an Error has
occurred in your program. You can close . or ignore." . I
have ignored it.
Also, before IE stopped working ,I had run Norton
Antivirus (professional 2003 + updates), installed a few
Microsoft windows updates for ME (non critical). I check
periodically for the critical updates and always installed
them. I have not installed all ME (non critical). About
those I installed last, I wrote down KB837009 and
kb832894. I 're-installed' them because when I checked the
logs and noticed that it said 'failure' to install - that
was in April. However after the re-installations, the log
(history of updates) did not changed.
Among the non-critical (ME), I remember I installed one
having to do with NET. I also reinstalled q273017. I also
wrote down that I checked for 831167 (?) and that q823559
was running.
I did not turn the NAV (Norton Anti-virus) before
installing the updates.
Also, I went to add/remove programs and uninstalled
programs were not used anymore such as: SBC used to be my
prior internet provider (now I use cable), Yahoo and AOL
which I do not use, software for HP printer I do not use
any more. NAV was not disabled when I uninstalled the
applications from add/remove programs.
Also I installed all pest cleaners with NAV on.
I have not reinstalled WinME.
And IE does not open if I Restart in Safe Mode.
PLEASE HELP!
Last time my internet explorer was alive, I was visiting a
page that used real player (version 10)
Then Interner explorer DIE: error in shell32.dll.
This is what I have done to try to solve the problem
following your advise:
I tried to run the QUICK CHECK from Aumha but again I can
open IE.
Spyboy: I have updated to 1.3, originally installed as
1.2 . One more pest found, and deleted
Ad-adware 6.0 181: I have downloaded and installed, it
found 36 files/keys- All were deleted
CWShredder: I have downloaded and installed, it Installed
it and run it today: found nothing.
Norton Antivirus (professional 2003 + updates): I ran it
after disabling system restore (Millennium edition).
However last update definition was 5/19 and I do not have
the most recent update because again I have no access to
IE..
Latest I am sending this message USING NESCAPE 6.
BUT IT IS EXPERIENCING PROBLEMS NOW AS WELL. PLEASE HELP!
HijackThis: I have downloaded and installed. I have the
HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 7:14:39 AM, on 5/25/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\WSCRIPT.EXE
C:\WINDOWS\SYSTEM\HPZTSB03.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\PESTPATROL\PPCONTROL.EXE
C:\PROGRAM FILES\PESTPATROL\PPMEMCHECK.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRAM FILES\SONY\VAIO ACTION SETUP\VASERV.EXE
C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\DISTILLR\ACROTRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\SUPPORT.COM\CLIENT\BIN\TGCMD.EXE
C:\WINDOWS\WUAUCLT.EXE
C:\CLAUDIA OCANA AUSTIIN DEC 2002\COMPUTER
STUFF\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search
Bar =
http://rd.yahoo.com/customize/sbcy/defaults/sb/*http://www.
yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL = http://www.prodigy.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) =
http://rd.yahoo.com/customize/sbcy/defaults/su/*http://www.
yahoo.com
R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-
3D5FEC94A183} - (no file)
N2 - Netscape 6: user_pref
("browser.startup.homepage", "http://eltiempo.terra.com.co/
"); (C:\WINDOWS\Application
Data\Mozilla\Profiles\default\jx1255sr.slt\prefs.js)
N2 - Netscape 6: user_pref
("browser.search.defaultengine", "engine://C%3A%5CPROGRAM%
20FILES%5CNETSCAPE%5CNETSCAPE%206%5Csearchplugins%
5CSBWeb_01.src"); (C:\WINDOWS\Application
Data\Mozilla\Profiles\default\jx1255sr.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0
\ACROBAT\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-
FADC6B084872} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-
206D7942484F} - C:\temp\Spybot - Search &
Destroy\SDHelper.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-
7859DF00B1D6} - C:\Program Files\Norton
AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-
00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry]
C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth]
C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [OmgStartup] C:\Program Files\Common
Files\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\PROGRA~1
\ADAPTEC\DIRECTCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program
files\support.com\client\lserver\server.vbs
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\SYSTEM\hpztsb03.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [SBC Yahoo! Connection Manager]
C:\Program Files\SBC Yahoo!\Connection
Manager\ConnectionManager.exe -Show
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\PROGRAM
FILES\SBC YAHOO!\CONNECTION MANAGER\IP
INSIGHT\IPMon32.exe"
O4 - HKLM\..\Run: [C:\Program Files\SBC Yahoo!\Connection
Manager\ConnectionManager.exe ] SBC Yahoo! Connection
Manager
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common
Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common
Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1
\NORTON~1\ADVTOOLS\ADVCHK.EXE
O4 - HKLM\..\Run: [NPROTECT] C:\PROGRA~1\NORTON~1
\ADVTOOLS\NPROTECT.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common
files\WinTools\WToolsA.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1
\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1
\PPMemCheck.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV]
C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr]
C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program
Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [NPROTECT] C:\PROGRA~1\NORTON~1
\ADVTOOLS\NPROTECT.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program
Files\Common Files\Symantec Shared\Script
Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [WinTools] C:\Program
Files\Common files\WinTools\WToolsA.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1
\msmsgs.exe" /background
O4 - HKCU\..\Run: [System Soap Pro] C:\PROGRAM
FILES\SYSTEM SOAP PRO\SOAP.exe min
O4 - Startup: VAIO Action Setup (Server).lnk = C:\Program
Files\Sony\VAIO Action Setup\VAServ.exe
O4 - Startup: Adobe Gamma Loader.exe.lnk = C:\Program
Files\Common Files\Adobe\Calibration\Adobe Gamma
Loader.exe
O4 - Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Acrobat Assistant.lnk = C:\Program
Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Coches (HKLM)
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1
\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.prodigy.net/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swf
lash.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab}
(YInstStarter Class) - C:\Program Files\Yahoo!
\common\yinsthelper.dll
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update
Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CA
B?37861.6914351852
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7}
(ActiveDataObj Class) - https://www-
secure.symantec.com/techsupp/activedata/ActiveData.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office
Update Installation Engine) -
http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4EBD0320-3FA7-4234-9461-638469C74E25} -
http://www.pinksandsmediagroup.com/external/cabs/packages/c
ab_4.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289}
(DialerWeb Class) -
http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE
Class) - http://software-
dl.real.com/04dddf6353279a834306/netzip/RdxIE601.cab