wininet.dll again I also am still getting this post can'r be poste

G

Guest

AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: wininet.dll
ModVer: 6.0.2900.2518 Offset: 00001743

tech details from temp file

<?xml version="1.0" encoding="UTF-16"?>
<DATABASE>
<EXE NAME="iexplore.exe" FILTER="GRABMI_FILTER_PRIVACY">
<MATCHING_FILE NAME="iexplore.exe" SIZE="93184" CHECKSUM="0xE187626E"
BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180"
PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Explorer"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="IEXPLORE.EXE" INTERNAL_NAME="iexplore" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x23C72" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 06:00:33"
UPTO_LINK_DATE="08/04/2004 06:00:33" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="iedw.exe" SIZE="18432" CHECKSUM="0x88F1640"
BIN_FILE_VERSION="5.1.2600.2180" BIN_PRODUCT_VERSION="5.1.2600.2180"
PRODUCT_VERSION="5.1.2600.2180" FILE_DESCRIPTION="IE Crash Detection"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="iedw.exe" INTERNAL_NAME="iedw.exe" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x67D2" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="5.1.2600.2180"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.2180" LINK_DATE="08/04/2004 06:02:35"
UPTO_LINK_DATE="08/04/2004 06:02:35" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="hmmapi.dll" SIZE="38912" CHECKSUM="0xD85D870C"
BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180"
PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Microsoft HTTP Mail Simple
MAPI" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="HMMAPI.DLL" INTERNAL_NAME="HMMAPI" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x1667F" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:15"
UPTO_LINK_DATE="08/04/2004 07:56:15" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="iedetect.dll" SIZE="14336" CHECKSUM="0xD1EB3951"
BIN_FILE_VERSION="6.0.2800.1106" BIN_PRODUCT_VERSION="6.0.2800.1106"
PRODUCT_VERSION="6.00.2800.1106" FILE_DESCRIPTION="Internet Explorer
Detection" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft®
Windows® Operating System" FILE_VERSION="6.00.2800.1106"
ORIGINAL_FILENAME="IEDETECT.DLL" INTERNAL_NAME="IEDETECT" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x4E1A" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2800.1106"
UPTO_BIN_PRODUCT_VERSION="6.0.2800.1106" LINK_DATE="08/29/2002 11:23:38"
UPTO_LINK_DATE="08/29/2002 11:23:38" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="MUI\0409\mscorier.dll" SIZE="16896"
CHECKSUM="0x4AABD360" BIN_FILE_VERSION="1.1.4322.2032"
BIN_PRODUCT_VERSION="1.1.4322.2032" PRODUCT_VERSION="1.1.4322.2032"
FILE_DESCRIPTION="Microsoft .NET Runtime IE resources"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft .NET Framework"
FILE_VERSION="1.1.4322.2032" ORIGINAL_FILENAME="mscorier.dll"
INTERNAL_NAME="MSCORIER.DLL" LEGAL_COPYRIGHT="Copyright © Microsoft
Corporation 1998-2002. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x131F3" LINKER_VERSION="0x50000"
UPTO_BIN_FILE_VERSION="1.1.4322.2032"
UPTO_BIN_PRODUCT_VERSION="1.1.4322.2032" LINK_DATE="07/15/2004 06:34:05"
UPTO_LINK_DATE="07/15/2004 06:34:05" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwconn.dll" SIZE="61440"
CHECKSUM="0xDD04DAB" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="icwconn.dll" INTERNAL_NAME="icwconn" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x11BD7" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:14"
UPTO_LINK_DATE="08/04/2004 07:56:14" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwres.dll" SIZE="61440"
CHECKSUM="0xA488AA92" BIN_FILE_VERSION="6.0.2600.0"
BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)"
ORIGINAL_FILENAME="icwres.dll" INTERNAL_NAME="icwres" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x1AA60" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0"
LINK_DATE="08/18/2001 05:35:05" UPTO_LINK_DATE="08/18/2001 05:35:05"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwconn1.exe" SIZE="214528"
CHECKSUM="0xC9B5555" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="icwconn1.exe" INTERNAL_NAME="icwconn1" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x3C746" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:19"
UPTO_LINK_DATE="08/04/2004 05:59:19" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwdl.dll" SIZE="32768"
CHECKSUM="0xF4CC9266" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Service MIME Mutlipart Download"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="ICWDL.DLL" INTERNAL_NAME="ICWDL" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x174A9" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:16"
UPTO_LINK_DATE="08/04/2004 07:56:16" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwutil.dll" SIZE="49152"
CHECKSUM="0xB9156DF5" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="icwutil.dll" INTERNAL_NAME="icwutil" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0xF816" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:19"
UPTO_LINK_DATE="08/04/2004 07:56:19" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\trialoc.dll" SIZE="40960"
CHECKSUM="0x68F70073" BIN_FILE_VERSION="6.0.2600.0"
BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000"
FILE_DESCRIPTION="Internet Connection Wizard Trial Reminder Helper"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)"
ORIGINAL_FILENAME="trialoc.dll" INTERNAL_NAME="trialoc" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x198FE" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0"
LINK_DATE="08/18/2001 05:36:03" UPTO_LINK_DATE="08/18/2001 05:36:03"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwhelp.dll" SIZE="172032"
CHECKSUM="0xCBAB0AC0" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard Helper functions"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="icwhelp.dll" INTERNAL_NAME="icwhelp" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x33E62" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:17"
UPTO_LINK_DATE="08/04/2004 07:56:17" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwconn2.exe" SIZE="86016"
CHECKSUM="0x7DE2AFFE" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="ICWCONN2.EXE" INTERNAL_NAME="ICWCONN2" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x1DDE9" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:22"
UPTO_LINK_DATE="08/04/2004 05:59:22" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\isignup.exe" SIZE="16384"
CHECKSUM="0xF8AB8D6E" BIN_FILE_VERSION="6.0.2600.0"
BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000"
FILE_DESCRIPTION="Internet Signup" COMPANY_NAME="Microsoft Corporation"
PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)"
ORIGINAL_FILENAME="ISIGNUP.EXE" INTERNAL_NAME="ISIGNUP" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x443C" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0"
LINK_DATE="08/17/2001 20:48:46" UPTO_LINK_DATE="08/17/2001 20:48:46"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwtutor.exe" SIZE="73728"
CHECKSUM="0xF945F7EB" BIN_FILE_VERSION="6.0.2600.0"
BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)"
ORIGINAL_FILENAME="icwtutor.exe" INTERNAL_NAME="icwtutor" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x16B27" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0"
LINK_DATE="08/17/2001 20:49:08" UPTO_LINK_DATE="08/17/2001 20:49:08"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="Connection Wizard\icwrmind.exe" SIZE="24576"
CHECKSUM="0x70643FDC" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard Reminder"
COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="ICWRMIND.EXE" INTERNAL_NAME="ICWRMIND" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x13447" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:09"
UPTO_LINK_DATE="08/04/2004 05:59:09" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="Connection Wizard\inetwiz.exe" SIZE="20480"
CHECKSUM="0x3D8A325B" BIN_FILE_VERSION="6.0.2900.2180"
BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180"
FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft
Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="INETWIZ.EXE" INTERNAL_NAME="INETWIZ" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32"
PE_CHECKSUM="0xE297" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2180"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:25"
UPTO_LINK_DATE="08/04/2004 05:59:25" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="PLUGINS\nppdf32.dll" SIZE="133376"
CHECKSUM="0x4906ED95" BIN_FILE_VERSION="6.0.0.878"
BIN_PRODUCT_VERSION="6.0.0.878" PRODUCT_VERSION="6.0.0.2003051500"
FILE_DESCRIPTION="Adobe Acrobat Plug-In Version 6.00 for Netscape"
COMPANY_NAME="Adobe Systems Inc." PRODUCT_NAME="Adobe Acrobat"
FILE_VERSION="6.0.0.2003051500" ORIGINAL_FILENAME="NPPDF32.DLL"
LEGAL_COPYRIGHT="Copyright 1984-2003 Adobe Systems Incorporated and its
licensors. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0"
VERFILEOS="0x10001" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x28D49" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.0.0.878"
UPTO_BIN_PRODUCT_VERSION="6.0.0.878" LINK_DATE="05/15/2003 08:01:47"
UPTO_LINK_DATE="05/15/2003 08:01:47" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="PLUGINS\nphppi.dll" SIZE="49152"
CHECKSUM="0xA9ED804D" BIN_FILE_VERSION="1.0.0.4"
BIN_PRODUCT_VERSION="1.0.0.4" PRODUCT_VERSION="1, 0, 0, 4"
FILE_DESCRIPTION="nphppi.dll" COMPANY_NAME="HP" PRODUCT_NAME="HP Peripheral
Interrogator" FILE_VERSION="1, 0, 0, 4" ORIGINAL_FILENAME="nphppi.dll"
INTERNAL_NAME="Peripheral Interrogator" LEGAL_COPYRIGHT="Copyright © 2000"
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"
MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="1.0.0.4" UPTO_BIN_PRODUCT_VERSION="1.0.0.4"
LINK_DATE="03/14/2000 21:10:33" UPTO_LINK_DATE="03/14/2000 21:10:33"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin2.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin3.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin4.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin5.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin6.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\npmeadax.dll" SIZE="63057"
CHECKSUM="0xB2B1E62F" BIN_FILE_VERSION="1.0.0.25"
BIN_PRODUCT_VERSION="1.0.0.25" PRODUCT_VERSION="1, 0, 0, 25"
FILE_DESCRIPTION="MeadCo's Neptune" COMPANY_NAME="MeadCo Corp."
PRODUCT_NAME="MeadCo's Neptune" FILE_VERSION="1, 0, 0, 25"
ORIGINAL_FILENAME="npmeadax.dll" INTERNAL_NAME="WBPlugin"
LEGAL_COPYRIGHT="Copyright © 2001" VERFILEDATEHI="0x0" VERFILEDATELO="0x0"
VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x17EF0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="1.0.0.25"
UPTO_BIN_PRODUCT_VERSION="1.0.0.25" LINK_DATE="06/27/2001 10:25:23"
UPTO_LINK_DATE="06/27/2001 10:25:23" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="PLUGINS\npqtplugin7.dll" SIZE="106496"
CHECKSUM="0xAD03DAC2" BIN_FILE_VERSION="6.5.0.48"
BIN_PRODUCT_VERSION="6.5.0.48" PRODUCT_VERSION="QuickTime 6.5"
FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of
multimedia content in Web pages. For more information, visit the <A
HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site."
COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.5"
FILE_VERSION="6.5" ORIGINAL_FILENAME="npqtplugin.dll"
INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc.
1992-2004" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4"
VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0"
UPTO_BIN_FILE_VERSION="6.5.0.48" UPTO_BIN_PRODUCT_VERSION="6.5.0.48"
LINK_DATE="12/14/2003 07:15:39" UPTO_LINK_DATE="12/14/2003 07:15:39"
VER_LANGUAGE="English (United States) [0x409]" />
<MATCHING_FILE NAME="PLUGINS\RichFX\Player\nprfxins.dll" SIZE="569397"
CHECKSUM="0x79C10EAB" BIN_FILE_VERSION="3.31.659.0"
BIN_PRODUCT_VERSION="3.31.659.0" PRODUCT_VERSION="3.31.0659"
FILE_DESCRIPTION="RichFX Basic Player" COMPANY_NAME="RichFX Inc."
PRODUCT_NAME="RichFX Basic Player 3.31.0659" FILE_VERSION="3.31.0659"
ORIGINAL_FILENAME="nprfxins.dll" INTERNAL_NAME="nprfxins"
LEGAL_COPYRIGHT="Copyright © RichFX Inc. 2001" VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="3.31.659.0"
UPTO_BIN_PRODUCT_VERSION="3.31.659.0" LINK_DATE="11/11/2002 15:56:38"
UPTO_LINK_DATE="11/11/2002 15:56:38" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="PLUGINS\RichFX\Player\npvpg005.dll" SIZE="1523768"
CHECKSUM="0x7CB86D8E" BIN_FILE_VERSION="3.10.581.0"
BIN_PRODUCT_VERSION="3.10.581.0" PRODUCT_VERSION="3.10.0581"
FILE_DESCRIPTION="RichFX Player" COMPANY_NAME="RichFX Inc."
PRODUCT_NAME="RichFX Player 3.10.0581" FILE_VERSION="3.10.0581"
ORIGINAL_FILENAME="npvpg005.dll" INTERNAL_NAME="npvpg005"
LEGAL_COPYRIGHT="Copyright © RichFX Inc. 2001" VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="3.10.581.0"
UPTO_BIN_PRODUCT_VERSION="3.10.581.0" LINK_DATE="10/30/2001 16:39:24"
UPTO_LINK_DATE="10/30/2001 16:39:24" VER_LANGUAGE="English (United States)
[0x409]" />
<MATCHING_FILE NAME="PLUGINS\RichFX\Player\dBenderC1.0.0.dll"
SIZE="278528" CHECKSUM="0x8F5AACA" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0"
LINKER_VERSION="0x0" LINK_DATE="09/20/2001 08:51:05"
UPTO_LINK_DATE="09/20/2001 08:51:05" />
<MATCHING_FILE NAME="W2K\expinst.exe" SIZE="23552" CHECKSUM="0x98D31F1"
BIN_FILE_VERSION="6.0.2800.1106" BIN_PRODUCT_VERSION="6.0.2800.1106"
PRODUCT_VERSION="6.00.2800.1106" FILE_DESCRIPTION="Microsoft Internet
Explorer Windows2000 Installer" COMPANY_NAME="Microsoft Corporation"
PRODUCT_NAME="Microsoft® Windows® Operating System"
FILE_VERSION="6.00.2800.1106" ORIGINAL_FILENAME="W2KExcp.EXE"
INTERNAL_NAME="W2KExcp" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights
reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004"
VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x15630"
LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2800.1106"
UPTO_BIN_PRODUCT_VERSION="6.0.2800.1106" LINK_DATE="08/29/2002 11:23:45"
UPTO_LINK_DATE="08/29/2002 11:23:45" VER_LANGUAGE="English (United States)
[0x409]" />
</EXE>
<EXE NAME="WININET.dll" FILTER="GRABMI_FILTER_THISFILEONLY">
<MATCHING_FILE NAME="wininet.dll" SIZE="656896" CHECKSUM="0x41B4DD82"
BIN_FILE_VERSION="6.0.2900.2518" BIN_PRODUCT_VERSION="6.0.2900.2518"
PRODUCT_VERSION="6.00.2900.2518" FILE_DESCRIPTION="Internet Extensions for
Win32" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="6.00.2900.2518 (xpsp_sp2_gdr.040919-1056)"
ORIGINAL_FILENAME="wininet.dll" INTERNAL_NAME="wininet.dll"
LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved."
VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2"
MODULE_TYPE="WIN32" PE_CHECKSUM="0xA9D94" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="6.0.2900.2518"
UPTO_BIN_PRODUCT_VERSION="6.0.2900.2518" LINK_DATE="09/29/2004 18:47:04"
UPTO_LINK_DATE="09/29/2004 18:47:04" VER_LANGUAGE="English (United States)
[0x409]" />
</EXE>
<EXE NAME="kernel32.dll" FILTER="GRABMI_FILTER_THISFILEONLY">
<MATCHING_FILE NAME="kernel32.dll" SIZE="983552" CHECKSUM="0x4CE79457"
BIN_FILE_VERSION="5.1.2600.2180" BIN_PRODUCT_VERSION="5.1.2600.2180"
PRODUCT_VERSION="5.1.2600.2180" FILE_DESCRIPTION="Windows NT BASE API Client
DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows®
Operating System" FILE_VERSION="5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)"
ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="©
Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0"
VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32"
PE_CHECKSUM="0xFF848" LINKER_VERSION="0x50001"
UPTO_BIN_FILE_VERSION="5.1.2600.2180"
UPTO_BIN_PRODUCT_VERSION="5.1.2600.2180" LINK_DATE="08/04/2004 07:56:36"
UPTO_LINK_DATE="08/04/2004 07:56:36" VER_LANGUAGE="English (United States)
[0x409]" />
</EXE>
</DATABASE>
 
P

PA Bear

Your previous posts here: http://snipurl.com/a62v.

Please see...

What You Should Know About Spyware
http://www.microsoft.com/athome/security/spyware/devioussoftware.mspx

There is no 'silver bullet' solution [to your problem]
http://go.microsoft.com/fwlink/?LinkId=33131

A more detailed explanation of steps to take:

Dealing with Trojans & Hijackware

A. Trojans

1. Check in at Windows Update and install all critical updates & reboot.

2. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

3. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com/avcenter/venc/data/adware.winfavorites.html)
and follow *all* Removal steps, including editing the Registry if directed.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then:

Disk Cleanup > More options > Delete all but the most recent Restore
Point.

B. Hijackware

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder v1.59.1 (no updates available currently; fix all found)

2. Ad-Aware SE (reconfigure per Post #2 in
http://aumha.org/forum/viewtopic.php?t=5877; fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You must seek updates for Ad-Aware, Spybot, etc., before each and
every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://forum.aumha.org/downloads/hijackthis.zip) is the preferred tool to
use. It will help you to both identify and remove any hijackware/spyware.
**Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: wininet.dll
ModVer: 6.0.2900.2518 Offset: 00001743
Click to expand...
<snip>
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

"Internet Explorer has encountered a problem and needs to close... 2
Jscript Error in IE6 1
IE7 crashes when I visit.... 1
Internet Explorer - Error Message. 11
IE 6.x crashed 1
IE Immediately Crashes When Loading A HTML Page From A CD/DVD 2
MSIE6 crashes when visiting the Interenet 1
IE has encountered a problem and needs to close 2

Top