Hope I am in the right place

chajun · June 3, 2008

My curent Laptop a Toshiba Equium has developed a couple of faults going slow and audio problem distorted through speaker, loud and clear through headphones. Am thinking of buying a new one. If I do how would I get all files etc from old to new including the Outlook Express addresses" cant lose those" Any help appreciated.

Thanks

Seth · June 3, 2008

Welcome to Extreme Tech Support - Free PC Help Chajun.

You can copy and paste the files on to an external hard drive, USB flash drive, or burn them to a disk. Click on the following link for the OE question:

How to back up and to restore Outlook Express data

With that being said, would you like assistance in getting the laptop running properly?

chajun · June 3, 2008

Thanks for the reply. If there's anyway to get the audio issue and the speed up a bit before I blow a fortune.

Thank you

Seth · June 3, 2008

You're welcome.

First let's have a look at what's running on your computer via a program called HijackThis:

Please download the latest version of HijackThis from Trend Micro and click on Download Hijack This Installer and save it to your desktop.

Doubleclick HJTInstall.exe to install HijackThis.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in Notepad. Include this log in your next reply.

Notes:

Do not use the AnalyseThis button, its findings are dangerous if misinterpreted.

Do not have Hijackthis fix anything yet. Most of what it finds will be harmless, or required for your computer to run like it should.

RandyL · June 3, 2008

On the first question it's always a good idea to backup the address book and save it somewhere besides the main drive.

If you do get a new computer it will likely have Vista and Windows Mail and not Outlook Express. If you only use Outlook Express and not Outlook and if you only have one identity I would export the address book as WAB.

This format will import all the data seemlessly into Windows Mail.

chajun · June 3, 2008

Hello "Seth" was the log correct for checking. Also "RandyL" can I back up address book to a CD-RW If so how? Edited June 3, 2008 by chajun

Seth · June 3, 2008

Where's that log? :)

chajun · June 3, 2008

Sent it once dont know where it went it's too long will send in several bits

I hope

Take 2

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 22:12:05, on 03/06/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Unable to get Internet Explorer version!

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ACS.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\WINDOWS\system32\DVDRAMSV.exe

C:\Program Files\Kontiki\KService.exe

C:\WINDOWS\system32\svchost.exe

C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe

C:\WINDOWS\system32\fxssvc.exe

C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\TOSHIBA\TouchPad\TPTray.exe

C:\WINDOWS\system32\TCtrlIOHook.exe

C:\Program Files\TOSHIBA\Tvs\TvsTray.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\Apoint2K\Apoint.exe

C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe

C:\WINDOWS\system32\TPSMain.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

C:\Program Files\Kontiki\KHost.exe

C:\Program Files\TomTom HOME 2\HOMERunner.exe

C:\Downloads\AusLogics BoostSpeed\boostspeed.exe

C:\Program Files\Cactus Spam Filter 2.13\cactusspamfilter.exe

C:\Program Files\Microsoft ActiveSync\Wcescomm.exe

C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe

C:\Program Files\Apoint2K\Apntex.exe

C:\WINDOWS\system32\TPSBattM.exe

C:\PROGRA~1\MICROS~3\rapimgr.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe

C:\Program Files\Outlook Express\msimn.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Avant Browser\avant.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Virgin Media - digital TV, broadband, phone and mobile

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Virgin Media - digital TV, broadband, phone and mobile

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Starware -=

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R3 - URLSearchHook: HamInfoBar Toolbar - {380d8a93-650c-4c55-8c93-3a3dce49af12} - C:\Program Files\HamInfoBar\tbHamI.dll

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: HamInfoBar Toolbar - {380d8a93-650c-4c55-8c93-3a3dce49af12} - C:\Program Files\HamInfoBar\tbHamI.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O2 - BHO: OrbiscomROTBho2 Class - {D81AB57B-7327-4347-B7C7-9EF7CA87CE09} - C:\WINDOWS\system32\SlimBho2.dll

O3 - Toolbar: HamInfoBar Toolbar - {380d8a93-650c-4c55-8c93-3a3dce49af12} - C:\Program Files\HamInfoBar\tbHamI.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

12162 bytes

chajun · June 3, 2008

O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe

O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL

O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe

O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe

O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe

O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe

O4 - HKLM\..\Run: [TPSMain] TPSMain.exe

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [QuickTime Task(1)] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [smartDefrag] "C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe" /StartUp

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe

O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"

O4 - HKCU\..\Run: [Auslogics BoostSpeed 4] C:\Downloads\AusLogics BoostSpeed\boostspeed.exe

O4 - HKCU\..\Run: [com.codeode.cactusspamfilter] "C:\Program Files\Cactus Spam Filter 2.13\cactusspamfilter.exe" -minimized

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"

O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')

O4 - Global Startup: BlueSoleil.lnk = ?

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll

O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\ACS.exe

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe (file missing)

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe (file missing)

O23 - Service: AVG E-mail Scanner (AVGEMS) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe (file missing)

O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: DVD-RAM_Service - Matsu****a Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe

--

End of file - 12162 bytes

Seth · June 3, 2008

There are a couple of problems showing in the log.

1) You shouldn't be running two antivirus programs. You have to remove one of them. I suggest you remove AVG.

2) You have way too many programs needlessly starting up when your computer starts. Go to Start>Run, type in msconfig and click "ok". Put a dot on Selective Startup and click on the Startup tab. Scroll through the list and uncheck every entry other than Avast. Click Apply then Ok and restart the computer when prompted.

3) Install and run the free version (not the Professional version) of SUPERAntiSpyware from SUPERAntiSpyware.com

Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
You do not have to send them your e-mail address, just click next.
You can leave the automated check for updates on.
You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
DO NOT allow SUPERAntiSpyware to protect your Home Page settings.
On the Top Left select the Scan your computer button.
Make sure there is a CHECK MARK on all Fixed Drives.
Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.

4) Run hard drive error checking by going to Start>Run, type in chkdsk /f (space between the K and the /), and click Ok. Press Y at the black screen that appears and restart the computer to start the error correction.

Following the above four steps, the laptop should run significantly better.

chajun · June 3, 2008

If I click on run enter msconfig message appears can't find it use search. this locates the application ok. click on it as you state but avast not listed?

chajun · June 3, 2008

Avast is there under services tab?

Seth · June 3, 2008

Avast has to be in there. Did you scroll through the list?

Don't forget to remove AVG. That's very important.

Seth · June 3, 2008

Don't worry about the services tab.

Also, please post the SuperAntiSpyware log when the scan is complete and you have restarted. Run the program and double click the yellow bug icon near the time. Choose Preferences>Statistics and Logs. Post that log here please.

chajun · June 3, 2008

Hate to say it no Avast not even Avg they are just abrivations such as

TPTRAY

SVTWUPIL ?????

Seth · June 3, 2008

Is Avast showing near the time?

chajun · June 3, 2008

Not sure what you mean time. There are no actual names mentioned just letters in the first column then things like c:PROGRA \ ALWIL which might be avast but not called avast not sure what AVG might be called as there's no mention of "AVG"

Seth · June 3, 2008

That's not possible. Are you using the scroll bar to see all the entries?

Have a look here and you'll see AVG:

http://www.technibble.com/articlecontent/msconfig/msconfig1.gif

You may have to "stretch" the vertical lines between Startup Item, Command, and location to see the full names.

chajun · June 3, 2008

Hello AWIL is Avast thats the supplier but under services its called Avast just to confuse. But no AVG unless its called another name.

Seth · June 3, 2008

I have to go. Back in a couple of hours.

Check out my previous post.

Seth · June 3, 2008

If AVG is in Add/Remove programs, then uninstall it. When all the steps are done, post the SuperAntiSpyware log and another HijackThis Log.

chajun · June 3, 2008

SUPERAntispy logs

SUPERAntiSpyware Scan Log

SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!

Generated 06/04/2008 at 00:27 AM

Application Version : 4.15.1000

Core Rules Database Version : 3473

Trace Rules Database Version: 1464

Scan type : Complete Scan

Total Scan Time : 00:54:36

Memory items scanned : 406

Memory threats detected : 0

Registry items scanned : 6297

Registry threats detected : 0

File items scanned : 20242

File threats detected : 59

Adware.Tracking Cookie

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[11].txt

C:\Documents and Settings\Charles\Cookies\charles@tracking.summitmedia.co[2].txt

C:\Documents and Settings\Charles\Cookies\charles@quick-advert[1].txt

C:\Documents and Settings\Charles\Cookies\charles@accessories.virginmedia[1].txt

C:\Documents and Settings\Charles\Cookies\charles@ad.uk.tangozebra[1].txt

C:\Documents and Settings\Charles\Cookies\charles@adecn[1].txt

C:\Documents and Settings\Charles\Cookies\charles@anad.tacoda[2].txt

C:\Documents and Settings\Charles\Cookies\charles@adopt.euroclick[2].txt

C:\Documents and Settings\Charles\Cookies\charles@ads.guru3d[2].txt

C:\Documents and Settings\Charles\Cookies\charles@ads.honestjohn.co[2].txt

C:\Documents and Settings\Charles\Cookies\charles@ads.telegraph.co[1].txt

C:\Documents and Settings\Charles\Cookies\charles@ads.thestage.co[2].txt

C:\Documents and Settings\Charles\Cookies\charles@adv.alice[1].txt

C:\Documents and Settings\Charles\Cookies\charles@allyours.virginmedia[2].txt

C:\Documents and Settings\Charles\Cookies\charles@anat.tacoda[2].txt

C:\Documents and Settings\Charles\Cookies\charles@atwola[2].txt

C:\Documents and Settings\Charles\Cookies\charles@bannersng.yell[1].txt

C:\Documents and Settings\Charles\Cookies\charles@bedroommedia[1].txt

C:\Documents and Settings\Charles\Cookies\charles@boards.virginmedia[1].txt

C:\Documents and Settings\Charles\Cookies\charles@bravenet[1].txt

C:\Documents and Settings\Charles\Cookies\charles@clickbed[2].txt

C:\Documents and Settings\Charles\Cookies\charles@e-2dj6wbk4soc5cbp.stats.esomniture[2].txt

C:\Documents and Settings\Charles\Cookies\charles@e-2dj6wglicjdjwlo.stats.esomniture[1].txt

C:\Documents and Settings\Charles\Cookies\charles@eas.apm.emediate[1].txt

C:\Documents and Settings\Charles\Cookies\charles@fortunecity[1].txt

C:\Documents and Settings\Charles\Cookies\charles@forums.virginmedia[1].txt

C:\Documents and Settings\Charles\Cookies\charles@haynet.adbureau[2].txt

C:\Documents and Settings\Charles\Cookies\charles@hc2.humanclick[2].txt

C:\Documents and Settings\Charles\Cookies\charles@kontera[2].txt

C:\Documents and Settings\Charles\Cookies\charles@latestnews.virginmedia[2].txt

C:\Documents and Settings\Charles\Cookies\charles@nextag.co[2].txt

C:\Documents and Settings\Charles\Cookies\charles@optimize.indieclick[1].txt

C:\Documents and Settings\Charles\Cookies\charles@partypoker[1].txt

C:\Documents and Settings\Charles\Cookies\charles@richmedia.yahoo[2].txt

C:\Documents and Settings\Charles\Cookies\charles@revsci[1].txt

C:\Documents and Settings\Charles\Cookies\charles@server.lon.liveperson[1].txt

C:\Documents and Settings\Charles\Cookies\charles@server.lon.liveperson[3].txt

C:\Documents and Settings\Charles\Cookies\charles@stat.onestat[2].txt

C:\Documents and Settings\Charles\Cookies\charles@tacoda[2].txt

C:\Documents and Settings\Charles\Cookies\charles@tripod[2].txt

C:\Documents and Settings\Charles\Cookies\charles@tracking.summitmedia.co[1].txt

C:\Documents and Settings\Charles\Cookies\charles@traffic.buyservices[1].txt

C:\Documents and Settings\Charles\Cookies\charles@vhost.oddcast[2].txt

C:\Documents and Settings\Charles\Cookies\charles@virginmedia[2].txt

C:\Documents and Settings\Charles\Cookies\charles@www.bedroommedia[1].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[6].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[10].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[1].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[2].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[3].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[4].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[5].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[7].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[8].txt

C:\Documents and Settings\Charles\Cookies\charles@www.googleadservices[9].txt

C:\Documents and Settings\Charles\Cookies\charles@www.inteletrack[2].txt

C:\Documents and Settings\Charles\Cookies\charles@www.virginmedia[2].txt

C:\Documents and Settings\Charles\Cookies\charles@xiti[1].txt

Adware.OneStepSearch

C:\Program Files\OneStepSearch

-----------------------------------------------------------

SUPERAntiSpyware Scan Log

SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!

Generated 06/03/2008 at 11:32 PM

Application Version : 4.15.1000

Core Rules Database Version : 3473

Trace Rules Database Version: 1464

Scan type : Complete Scan

Total Scan Time : 00:00:41

Memory items scanned : 93

Memory threats detected : 0

Registry items scanned : 0

Registry threats detected : 0

File items scanned : 0

File threats detected : 0

chajun · June 4, 2008

TEVISED HIJACK LOG PART 1

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 01:02:36, on 04/06/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Unable to get Internet Explorer version!

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ACS.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe

C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

C:\WINDOWS\system32\DVDRAMSV.exe

C:\Program Files\Kontiki\KService.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\svchost.exe

C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe

C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe

C:\WINDOWS\system32\fxssvc.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe