PunkBuster and Windows not Working together

G

Guest

Hello All,

I am looking for an answer to my punk buster issue. I use punkbuster in
my call of duty game. Problem is I can only get on a punkbuster server after
I restart my computer, but when the map cycles to the next one I get Kicked
for blocked O/S privilages 508:430. I have uninstalled all firewalls and
antivirus and spyware blockers and scanners and the issue remains so I have
deduced that it is coming from windows. Yes, I turned off the windows
firewall as well but something remains that is causing the problem! I have
admin rights and have created new accounts and still the same problem!!

Here for all to view is a string of things from Hijack this maybe it will
help. I currently have reinstalled all my protective software due to finding
that it wasn't them causing the problem!

Logfile of HijackThis v1.99.1
Scan saved at 8:35:58 PM, on 10/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe
C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
C:\Program Files\BigFix\BigFix.exe
C:\WINDOWS\twain_32\S6U12BX\WATCH.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Sprint Virtual Assistant\bin\mad.exe
C:\Program Files\Sprint Virtual Assistant\bin\mpbtn.exe
C:\PROGRA~1\Motive\ASSTCO~1\MOTIVE~1.EXE
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\ntvdm.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\EarthLink TotalAccess\MailClnt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.earthlink.net/partner/more/msie/button/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://start.sprint.earthlink.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.earthlink.net/partner/more/msie/button/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://start.sprint.earthlink.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://start.earthlink.net/AL/Search
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3}
- C:\Program Files\EarthLink TotalAccess\ElnIE.dll
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no
file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} -
C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} -
C:\Program Files\EarthLink TotalAccess\Accelerator\prpl_IePopupBlocker.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Synchronization Manager]
%SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security
Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
O4 - HKLM\..\Run: [Motive SmartBridge]
C:\PROGRA~1\SPRINT~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [SemanticInsight] C:\Program Files\RXToolBar\Semantic
Insight\SemanticInsight.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop
Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet
Security 2007\pccguide.exe"
O4 - HKCU\..\Run: [BlazeServoTool] "C:\Program Files\BlazeVideo\BlazeDVD4
Professional\MediaDetector.exe"
O4 - HKCU\..\Run: [Uniblue Registry Booster] C:\Program
Files\Uniblue\Registry Booster\RegistryBooster.exe /S
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE"
-quiet
O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security
2007\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink
TotalAccess\TaskPanl.exe" -winstart
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
Office\Office\OSA9.EXE
O4 - Global Startup: Sprint FastConnect virtual assistant.lnk = C:\Program
Files\Sprint Virtual Assistant\bin\matcli.exe
O4 - Global Startup: Virtual Assistant.lnk = C:\Program Files\Sprint Virtual
Assistant\bin\matcli.exe
O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\S6U12BX\WATCH.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program
Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Search -
http://km.bar.need2find.com/KM/menusearch.html?p=KM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
C:\Program Files\Yahoo!\Companion\Modules\messmod4\v6\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
{4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
Files\Yahoo!\Companion\Modules\messmod4\v6\yhexbmes.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.exe.imgfarm.com/images/no...opularScreenSaversFWBInitialSetup1.0.0.15.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) -
http://download.zonelabs.com/bin/free/cm/ICSCM_ca.cab
O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) -
http://asp.mathxl.com/wizmodules/testgen/installers/TestGenXInstall.cab
O16 - DPF: {38D63471-E630-4492-A986-B8C48B79F2F8} (CVideoEgg_ActiveXCtl
Object) - http://update.videoegg.com/wintel/VideoEggPublisher.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,99/mcinsctl.cab
O16 - DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} (PearsonAsstX Control) -
http://asp.mathxl.com/applets/PearsonInstallAsst.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} -
http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) -
http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {9903F4ED-B673-456A-A15F-ED90C7DE9EF5} (Sol Control) -
http://www.worldwinner.com/games/v45/sol/sol.cab
O16 - DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} (WoF Control) -
http://www.worldwinner.com/games/v46/wof/wof.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} -
http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O16 - DPF: {C738EA53-97C2-441B-AC52-DFBC597BCBE5} (Chess Control) -
http://www.worldwinner.com/games/v48/chess/chess.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
http://download.games.yahoo.com/games/web_games/popcap/chuzzle/popcaploader_v6.cab
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) -
http://asp.mathxl.com/books/_Players/MathPlayer.cab
O18 - Filter: text/html - (no CLSID) - (no file)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: hubbsi - {7b1eeccd-0a6d-4ad5-8ac1-4af5722b3885} -
C:\WINDOWS\system32\vwlummc.dll (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program
Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. -
C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend
Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend
Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program
Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. -
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. -
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. -
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
 
J

Jimmy S.

Hi Blazzbin109,

If you haven't already contacted Punkbuster support, here is the URL:
http://www.punkbuster.com/index.php?page=support.php

They should be aware of what would trigger that blocked O/S privilages
508:430 error message, and what are the common solutions for the issue.


--
Cheers, *Windows_XP_MVP_Shell/User*
Jimmy S. http://mvp.support.microsoft.com

Visit my MSN Games and Windows Gaming Help Site: www.msce.mvps.org
MS Games Help and Support Center: http://support.microsoft.com/?pr=gms
My advice is donated "AS IS" without warranty; nor do I confer any rights.
_________________________________________________________

Blazzbin109 Wrote:
=================
| Hello All,
|
| I am looking for an answer to my punk buster issue. I use punkbuster in
| my call of duty game. Problem is I can only get on a punkbuster server after
| I restart my computer, but when the map cycles to the next one I get Kicked
| for blocked O/S privilages 508:430. I have uninstalled all firewalls and
| antivirus and spyware blockers and scanners and the issue remains so I have
| deduced that it is coming from windows. Yes, I turned off the windows
| firewall as well but something remains that is causing the problem! I have
| admin rights and have created new accounts and still the same problem!!
|
| Here for all to view is a string of things from Hijack this maybe it will
| help. I currently have reinstalled all my protective software due to finding
| that it wasn't them causing the problem!
|
| Logfile of HijackThis v1.99.1
| Scan saved at 8:35:58 PM, on 10/8/2006
| Platform: Windows XP SP2 (WinNT 5.01.2600)
| MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
|
| Running processes:
| C:\WINDOWS\System32\smss.exe
| C:\WINDOWS\system32\winlogon.exe
| C:\WINDOWS\system32\services.exe
| C:\WINDOWS\system32\lsass.exe
| C:\WINDOWS\system32\svchost.exe
| C:\WINDOWS\System32\svchost.exe
| C:\WINDOWS\system32\LEXBCES.EXE
| C:\WINDOWS\system32\spoolsv.exe
| C:\WINDOWS\system32\LEXPPS.EXE
| C:\WINDOWS\Explorer.EXE
| C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
| C:\WINDOWS\system32\igfxtray.exe
| C:\WINDOWS\system32\hkcmd.exe
| C:\Program Files\QuickTime\qttask.exe
| C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
| C:\Program Files\iTunes\iTunesHelper.exe
| C:\Program Files\PowerISO\PWRISOVM.EXE
| C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe
| C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OE\TMAS_OEMon.exe
| C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
| C:\Program Files\BigFix\BigFix.exe
| C:\WINDOWS\twain_32\S6U12BX\WATCH.exe
| C:\Program Files\WinZip\WZQKPICK.EXE
| C:\Program Files\Sprint Virtual Assistant\bin\mad.exe
| C:\Program Files\Sprint Virtual Assistant\bin\mpbtn.exe
| C:\PROGRA~1\Motive\ASSTCO~1\MOTIVE~1.EXE
| C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
| C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
| C:\WINDOWS\system32\svchost.exe
| C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
| C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
| C:\WINDOWS\system32\ntvdm.exe
| C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
| C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
| C:\Program Files\EarthLink TotalAccess\MailClnt.exe
| C:\Program Files\iPod\bin\iPodService.exe
| C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
| C:\Program Files\Internet Explorer\iexplore.exe
| C:\WINDOWS\system32\wbem\wmiapsrv.exe
| C:\Documents and Settings\Owner\Desktop\HijackThis.exe
|
| R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
| http://start.earthlink.net
| R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
| http://www.earthlink.net/partner/more/msie/button/search.html
| R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
| http://start.earthlink.net/AL/Search
| R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
| http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
| R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://start.sprint.earthlink.net/
| R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
| http://www.earthlink.net/partner/more/msie/button/search.html
| R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
| http://start.sprint.earthlink.net/
| R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
| http://start.earthlink.net/AL/Search
| R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
| http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
| R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
| http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
| R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
| Settings,ProxyOverride = 127.0.0.1
| R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3}
| - C:\Program Files\EarthLink TotalAccess\ElnIE.dll
| R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no
| file)
| O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} -
| C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
| O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
| C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
| O2 - BHO: IE_PopupBlocker Class - {656EC4B7-072B-4698-B504-2A414C1F0037} -
| C:\Program Files\EarthLink TotalAccess\Accelerator\prpl_IePopupBlocker.dll
| O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
| C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
| O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
| C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
| O4 - HKLM\..\Run: [Synchronization Manager]
| %SystemRoot%\system32\mobsync.exe /logon
| O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
| Files\Java\jre1.5.0_06\bin\jusched.exe
| O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\eTrust Internet Security
| Suite\eTrust Anti-Spam\QSP-4.0.380.0\QOELoader.exe"
| O4 - HKLM\..\Run: [Motive SmartBridge]
| C:\PROGRA~1\SPRINT~1\SMARTB~1\MotiveSB.exe
| O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
| O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
| O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
| -atboottime
| O4 - HKLM\..\Run: [SemanticInsight] C:\Program Files\RXToolBar\Semantic
| Insight\SemanticInsight.exe
| O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop
| Album Starter Edition\3.0\Apps\apdproxy.exe"
| O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
| O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
| O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet
| Security 2007\pccguide.exe"
| O4 - HKCU\..\Run: [BlazeServoTool] "C:\Program Files\BlazeVideo\BlazeDVD4
| Professional\MediaDetector.exe"
| O4 - HKCU\..\Run: [Uniblue Registry Booster] C:\Program
| Files\Uniblue\Registry Booster\RegistryBooster.exe /S
| O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE"
| -quiet
| O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security
| 2007\TMAS_OE\TMAS_OEMon.exe"
| O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink
| TotalAccess\TaskPanl.exe" -winstart
| O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
| O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft
| Office\Office\OSA9.EXE
| O4 - Global Startup: Sprint FastConnect virtual assistant.lnk = C:\Program
| Files\Sprint Virtual Assistant\bin\matcli.exe
| O4 - Global Startup: Virtual Assistant.lnk = C:\Program Files\Sprint Virtual
| Assistant\bin\matcli.exe
| O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\S6U12BX\WATCH.exe
| O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program
| Files\WinZip\WZQKPICK.EXE
| O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
| O8 - Extra context menu item: &Search -
| http://km.bar.need2find.com/KM/menusearch.html?p=KM
| O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
| C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
| O9 - Extra 'Tools' menuitem: Sun Java Console -
| {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
| Files\Java\jre1.5.0_06\bin\ssv.dll
| O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
| C:\Program Files\Yahoo!\Companion\Modules\messmod4\v6\yhexbmes.dll
| O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
| {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
| Files\Yahoo!\Companion\Modules\messmod4\v6\yhexbmes.dll
| O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
| C:\WINDOWS\system32\Shdocvw.dll
| O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
| C:\Program Files\Messenger\msmsgs.exe
| O9 - Extra 'Tools' menuitem: Windows Messenger -
| {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
| O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
| Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
| O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
| http://ak.exe.imgfarm.com/images/no...opularScreenSaversFWBInitialSetup1.0.0.15.cab
| O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) -
| http://download.zonelabs.com/bin/free/cm/ICSCM_ca.cab
| O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) -
| http://asp.mathxl.com/wizmodules/testgen/installers/TestGenXInstall.cab
| O16 - DPF: {38D63471-E630-4492-A986-B8C48B79F2F8} (CVideoEgg_ActiveXCtl
| Object) - http://update.videoegg.com/wintel/VideoEggPublisher.exe
| O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
| http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,99/mcinsctl.cab
| O16 - DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} (PearsonAsstX Control) -
| http://asp.mathxl.com/applets/PearsonInstallAsst.cab
| O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} -
| http://www.nick.com/common/groove/gx/GrooveAX27.cab
| O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) -
| http://www.worldwinner.com/games/shared/wwlaunch.cab
| O16 - DPF: {9903F4ED-B673-456A-A15F-ED90C7DE9EF5} (Sol Control) -
| http://www.worldwinner.com/games/v45/sol/sol.cab
| O16 - DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} (WoF Control) -
| http://www.worldwinner.com/games/v46/wof/wof.cab
| O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} -
| http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
| O16 - DPF: {C738EA53-97C2-441B-AC52-DFBC597BCBE5} (Chess Control) -
| http://www.worldwinner.com/games/v48/chess/chess.cab
| O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) -
| http://download.games.yahoo.com/games/web_games/popcap/chuzzle/popcaploader_v6.cab
| O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) -
| http://asp.mathxl.com/books/_Players/MathPlayer.cab
| O18 - Filter: text/html - (no CLSID) - (no file)
| O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
| O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
| O21 - SSODL: hubbsi - {7b1eeccd-0a6d-4ad5-8ac1-4af5722b3885} -
| C:\WINDOWS\system32\vwlummc.dll (file missing)
| O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
| Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel
| 32\IDriverT.exe
| O23 - Service: iPodService - Apple Computer, Inc. - C:\Program
| Files\iPod\bin\iPodService.exe
| O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. -
| C:\WINDOWS\system32\LEXBCES.EXE
| O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend
| Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
| O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend
| Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
| O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program
| Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
| O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. -
| C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
| O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. -
| C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
| O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. -
| C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Windows XP Windows XP Malware, Please Help. 2
Windows 7 "Windows cannot find svchost.exe?" 1
Windows XP Dell PC: c:\WINDOWS\system32\wavojami.dll not valid Windows image 2
Howzit!!! :) 2
HijackThis Log Analysis Please 1
IE redirection problem 2
Windows XP Rundll32.exe not responding while shutting down 2
printer.exe, control panel missing and administration rights 1

Top