Welcome Guest ( Log In | Join )

Discover the best free computer help!
Learn more about Geeks to Go by taking the tour. Spyware, virus, trojan, fake security or privacy alerts? Read the malware cleaning guide. Want to reply to a topic, start a new one, or remove the advertising? Join today (always free).
      
 
Closed TopicStart new topic
Trojan.Media-Codec,glitching,hangs up,scanned but still may have malew, I need recovery expert help ,thank you sincerly
gwhiz
post Jan 20 2008, 07:04 AM
Post #1


Member
**
Posts: 23
From: house full of kids TN,USA
OS: XP



Hello, I'm brian
First thing is thanks to any and all that would take you valuable time to help me out,I do realy appreciate it (if possible might need to throw it away <the pc that is>),THANK YOU!!!!!!!! also whatever I may need to do ,more info,scanning ect.. let me know.. Im not a expert laughing.gif by no means,but I'll try my best ,thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:14:53 AM, on 1/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2

(6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec

Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec

Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program

Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5

\guard.exe
C:\Program Files\Common Files\Symantec

Shared\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Common

Files\Real\Update_OB\realsched.exe
C:\Program Files\eBay\eBay Toolbar2

\eBayTBDaemon.exe
C:\Program Files\Java\jre1.5.0_03

\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3

\LMPDPSRV.EXE
C:\Program Files\Common Files\Symantec

Shared\ccApp.exe
E:\TweakNow PowerPack\RAM_XP.exe
C:\Program Files\Common Files\Symantec

Shared\CCPD-LC\symlcsvc.exe
E:\TweakNow PowerPack\PowerPack.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Juno\exec.exe
C:\Program Files\Internet

Explorer\iexplore.exe
C:\Program Files\Juno\exec.exe
C:\Program Files\Juno\qsacc\x1exec.exe
C:\Program Files\Trend

Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Search Bar =

http://my.juno.com/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Search Page =

http://my.juno.com/s/search?r=minisearch
R0 - HKCU\Software\Microsoft\Internet

Explorer\Main,Start Page =

http://www.rbauction.com/dynamic_space/view_la

unch.jsp?auction_id=2007133
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Search_URL =

http://my.juno.com/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Search Page =

http://my.juno.com/s/search?r=minisearch
R1 - HKCU\Software\Microsoft\Internet

Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet

Explorer\SearchURL,(Default) =

http://my.juno.com/s/search?r=minisearch
R1 -

HKCU\Software\Microsoft\Windows\CurrentVersion

\Internet Settings,ProxyServer =

http=127.0.0.1:7900
R1 -

HKCU\Software\Microsoft\Windows\CurrentVersion

\Internet Settings,ProxyOverride =

64.136.44.66;64.136.52.66;searchap.untd.com;12

7.0.0.1;localhost;*microsoft.com;*windowsupdat

e.com;*wustat.windows.com;*.pogo.com;*test-

speed.com;liveupdate.symantecliveupdate.com;*s

ymantec.com;*.nai.com;*.networkassociates.com;

*.dir.untd.com;cf.netzero.net;qs.netzero.net;*

.prod.untd.com;<local>
R0 - HKCU\Software\Microsoft\Internet

Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: URLSearchHook Class -

{37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} -

C:\Program Files\Juno\SearchEnh1.dll
O2 - BHO: Adobe PDF Reader Link Helper -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Adobe\Acrobat 7.0

\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-

4A5E-4DFB-845E-AAB64207F5BD} - C:\Program

Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-

B94B-0B5F309A0E64} - C:\Program

Files\Microsoft Money\System\mnyside.dll
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-

4317-BC29-C0445E82B1F9} - C:\Program

Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: X1IEHook Class - {52706EF7-D7A2-

49AD-A615-E903858CF284} - C:\Program

Files\Juno\qsacc\X1IEBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-

01DD-4d91-8333-CF10577473F7} - c:\program

files\google\googletoolbar4.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-

8758-209B6AD74ACC} - (no file)
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-

450D-BD93-B28CC7DF67CE} - C:\Program

Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-

9B18-009027A5CD4F} - c:\program

files\google\googletoolbar4.dll
O3 - Toolbar: JunoBar - {5854FAC4-5BF0-47DD-

B5A9-A5EA8CFF3CF4} - C:\Program

Files\Juno\Toolbar.dll
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [NeroCheck]

C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [VTPreset] VTPreset.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program

Files\Common

Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [eBayToolbar] C:\Program

Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched]

C:\Program Files\Java\jre1.5.0_03

\bin\jusched.exe
O4 - HKLM\..\Run: [UserFaultCheck] %

systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [KernelFaultCheck] %

systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LMPDPSRV]

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3

\LMPDPSRV.EXE
O4 - HKLM\..\Run: [ABBYY Community Agent]

C:\Program Files\ABBYY FineReader 5.0

Sprint\CAgent.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program

Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program

Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng]

"C:\Program Files\Common Files\Symantec

Shared\PIF\{B8E1DD85-8582-4c61-B58F-

2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program

Files\Common Files\Symantec

Shared\PIF\{B8E1DD85-8582-4c61-B58F-

2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [RAM Idle Professional]

E:\TweakNow PowerPack\RAM_XP.exe
O4 - HKCU\..\Run: [Juno_uoltray] C:\Program

Files\Juno\exec.exe regrun
O4 - HKCU\..\Run: [Washer] c:\Program

Files\Washer\washer.exe /0
O4 - HKCU\..\RunOnce: [untd_recovery]

C:\Program Files\Juno\qsacc\x1exec.exe
O4 - Global Startup: Adobe Reader Speed

Launch.lnk = C:\Program Files\Adobe\Acrobat

7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Display All

Images with Full Quality - res://C:\Program

Files\Juno\qsacc\appres.dll/228
O8 - Extra context menu item: Display Image

with Full Quality - res://C:\Program

Files\Juno\qsacc\appres.dll/227
O8 - Extra context menu item: E&xport to

Microsoft Excel - res://C:\PROGRA~1\MICROS~2

\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search -

res://C:\Program Files\eBay\eBay Toolbar2

\eBayTb.dll/RCSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB

-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console

- {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\jre1.5.0_03

\bin\npjpi150_03.dll
O9 - Extra button: MoneySide - {E023F504-0C5A

-4750-A1E7-A9046DEA8A21} - C:\Program

Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110

-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger

- {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program

Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-

C7C580BBF700} (Windows Genuine Advantage

Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-

44A219113CDD} (SABScanProcesses Class) -

http://www.superadblocker.com/activex/sabspx.c

ab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-

04C2F616BCA7} (get_atlcom Class) -

http://www.adobe.com/products/acrobat/nos/gp.c

ab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-

444553540000} (Shockwave Flash Object) -

https://download.macromedia.com/pub/shockwave/

cabs/flash/swflash.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-

009027438003} (Persits Software XUpload) -

http://www.auctiva.com/hostedimages/activex/xu

pload/XUpload.ocx
O17 -

HKLM\System\CCS\Services\Tcpip\..\{BB96FEEF-

E2CF-40C9-85AA-F8C10C784627}: NameServer =

64.136.44.74 64.136.52.74
O20 - Winlogon Notify: !SASWinLogon -

C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Automatic LiveUpdate Scheduler

- Symantec Corporation - C:\Program

Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard -

GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG

Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager

(ccEvtMgr) - Symantec Corporation - C:\Program

Files\Common Files\Symantec

Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager

(ccSetMgr) - Symantec Corporation - C:\Program

Files\Common Files\Symantec

Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service

(CLTNetCnService) - Symantec Corporation -

C:\Program Files\Common Files\Symantec

Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc)

- Google - C:\Program

Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation

(ISPwdSvc) - Symantec Corporation - C:\Program

Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: Kodak Camera Connection

Software (KodakCCS) - Unknown owner -

C:\WINDOWS\system32\drivers\KodakCCS.exe (file

missing)
O23 - Service: LiveUpdate - Symantec

Corporation - C:\PROGRA~1\Symantec\LIVEUP~1

\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex

(LiveUpdate Notice Ex) - Symantec Corporation

- C:\Program Files\Common Files\Symantec

Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service -

Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61

-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Symantec Core LC - Symantec

Corporation - C:\Program Files\Common

Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service

(SymAppCore) - Symantec Corporation -

C:\Program Files\Common Files\Symantec

Shared\AppCore\AppSvc32.exe
O24 - Desktop Component 0: (no name) -

http://www.machinerytrader.com/images/machiner

y/fullsize/71630468.jpg?SSImageQuality=Full
O24 - Desktop Component 1: (no name) -

http://www.audio-bible.com/images/shortcut.gif
O24 - Desktop Component 2: (no name) -

http://www.state.tn.us/environment/sitewide/TD

EC.jpg
O24 - Desktop Component 3: (no name) -

http://www.dcnonline.org/images/folder_top_rig

ht.gif

--
End of file - 9987 bytes


******************************************************************************
ABBYY FineReader 5.0 Sprint
Adobe Acrobat 5.0
Adobe Flash Player 9 ActiveX
Adobe Reader 7.0.5 Language Support
Adobe Reader 7.0.9
Adobe® Photoshop® Album Starter Edition 3.0
AppCore
Auction Client
AV
AVG Anti-Spyware 7.5
ccCommon
CCScore
CR2
eBay Toolbar
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTOOLS
essvatgt
essvcpt
getPlus®_ocx
Google Toolbar for Internet Explorer
Hair Pro 9.0 Light
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 2.0.2
HLPPDOCK
Home Plan Pro for Windows 95/98/00/ME/NT/XP
HSP56 MR Drivers
Internet Worm Protection
J2SE Runtime Environment 5.0 Update 3
Java 2 Runtime Environment, SE v1.4.1_02
Java 2 Runtime Environment, SE v1.4.1_03
Java 2 Runtime Environment, SE v1.4.2_07
Java Web Start
Juno Internet
kgcbase
Kodak EasyShare software
KSU
Lexmark X125
LiveUpdate 3.2 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Macromedia Flash Player 8
Macromedia Shockwave Player
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Money 2003
Microsoft Money 2003 System Pack
Microsoft Office XP Professional with FrontPage
Microsoft Publisher 2002
Microsoft Silverlight
MSN Music Assistant
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
Nero - Burning Rom
Norton AntiVirus
Norton AntiVirus Help
Norton AntiVirus Online (Symantec Corporation)
Norton AntiVirus Parent MSI
Norton AntiVirus SYMLT MSI
Norton Protection Center
Norton Spyware Scan provided by Yahoo!
Notifier
OfotoXMI
OTtBP
OTtBPSDK
ProSavageDDR and Utilities
QuickTime
RealPlayer
Rhapsody Player Engine
S3Display
S3Gamma2
S3Info2
S3Overlay
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB942615)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
SFR
SFR2
SHASTA
Shockwave
SKIN0001
SKINXSDK
SPBBC 32bit
Spybot - Search & Destroy 1.4
SpywareBlaster v3.3
staticcr
SUPERAntiSpyware Free Edition
Symantec
SymNet
The Print Shop
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Update for Windows XP (KB946627)
VIA Audio Driver Setup Program
VIA Rhine-Family Fast-Ethernet Adapter
ViewAhead Photo Center
VPRINTOL
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888240
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WinZip
WIRELESS

*****************************************************************************
SUPERAntiSpyware Scan Log
Generated 01/10/2008 at 10:07 PM

Application Version : 3.6.1000

Core Rules Database Version : 3378
Trace Rules Database Version: 1372

Scan type : Complete Scan
Total Scan Time : 01:23:59

Memory items scanned : 390
Memory threats detected : 0
Registry items scanned : 5036
Registry threats detected : 2
File items scanned : 60388
File threats detected : 7

Adware.Tracking Cookie
C:\Documents and Settings\Brian\Cookies\brian@track.juno[2].txt
C:\Documents and Settings\Brian\Cookies\brian@e-2dj6wjligoazecp.stats.esomniture[2].txt
C:\Documents and Settings\Brian\Cookies\brian@e-2dj6whkienczsgp.stats.esomniture[1].txt
C:\Documents and Settings\Brian\Cookies\brian@tacoda[2].txt
C:\Documents and Settings\Brian\Cookies\brian@ad.yieldmanager[2].txt
C:\Documents and Settings\Brian\Cookies\brian@qnsr[1].txt

Adware.IEPlugin
HKCR\Remove

Adware.IST/YourSiteBar
C:\WINDOWS\Downloaded Program Files\ysbactivex.inf

Trojan.Media-Codec
HKU\S-1-5-21-861567501-1078081533-1417001333-1003\Software\Internet Security


*****************************************************************************
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 1:03:01 PM 1/12/2008

+ Scan result:



HKLM\SOFTWARE\Classes\WEBInstaller.CExecute -> Adware.CashBack : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WEBInstaller.CExecute.1 -> Adware.CashBack : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WEBInstaller.CExecute\CLSID -> Adware.CashBack : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WEBInstaller.CExecute\CurVer -> Adware.CashBack : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\res -> Adware.WebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\STO -> Adware.WebSearch : Cleaned with backup (quarantined).
C:\Documents and Settings\Brian\Cookies\brian@e-2dj6whkienczsgp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\Brian\Cookies\brian@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\Brian\Cookies\brian@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\Brian\Cookies\brian@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.


::Report end
********************************************************************************
****Plplease note I cant find the results to the last scan Panda Activescan.,If need be I can scan again let me know,,Ive looked evry where I knowed..but here is two items I saved to desktop maybe its somthing to help I have no idea where they came from,my mind is overkill I got 5 boys & trying to fix this thing for days Is exausted me..

#
# An unexpected error has been detected by HotSpot Virtual Machine:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x7c9010f3, pid=456, tid=1516
#
# Java VM: Java HotSpot™ Client VM (1.5.0_03-b07 mixed mode)
# Problematic frame:
# C [ntdll.dll+0x10f3]
#

--------------- T H R E A D ---------------

Current thread (0x0399b400): JavaThread "thread applet-Ticker.class" [_thread_in_native, id=1516]

siginfo: ExceptionCode=0xc0000005, writing address 0x0dc7cf74

Registers:
EAX=0x00000000, EBX=0x1651c150, ECX=0x1ef8f734, EDX=0x0dc7cf6c
ESP=0x1ef8f744, EBP=0x1ef8f77c, ESI=0x0dc7cf58, EDI=0x0dc7cf6c
EIP=0x7c9010f3, EFLAGS=0x00010246

Top of Stack: (sp=0x1ef8f744)
0x1ef8f744: 6d0d7af2 0dc7cf6c 0399b400 0399b4bc
0x1ef8f754: 6d0c7eb3 0399b400 1651c150 1651c150
0x1ef8f764: 10e0ab88 00000000 1ef8f758 1ef8fa64
0x1ef8f774: 6d0f33a0 00000000 1ef8f7b0 0ab1899c
0x1ef8f784: 0399b4bc 1ef8f7c0 00000001 10e0ab88
0x1ef8f794: 1ef8f78c 00000000 1ef8f7c0 1651e820
0x1ef8f7a4: 00000000 1651c150 1ef8f7c0 1ef8f7e0
0x1ef8f7b4: 0ab12923 00000000 0ab16449 10e0ab88

Instructions: (pc=0x7c9010f3)
0x7c9010e3: 24 00 00 00 00 90 90 90 90 90 8b 54 24 04 33 c0
0x7c9010f3: ff 4a 08 75 26 89 42 0c f0 ff 4a 04 7d 03 c2 04


Stack: [0x1ee90000,0x1ef90000), sp=0x1ef8f744, free space=1021k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [ntdll.dll+0x10f3]
j sun.awt.windows.WComponentPeer._dispose()V+0
j sun.awt.windows.WComponentPeer.disposeImpl()V+23
j sun.awt.windows.WObjectPeer.dispose()V+42
j java.awt.Component.removeNotify()V+211
j java.awt.Container.removeNotify()V+38
j java.awt.Container.remove(I)V+43
j java.awt.Container.remove(Ljava/awt/Component;)V+45
j sun.applet.AppletPanel.run()V+552
j java.lang.Thread.run()V+11
v ~StubRoutines::call_stub
C 0x6d6c18b8
C 0x6d71431d
C 0x6d6c1789
C 0x6d6c14e6
C 0x6d6dc06b
C 0x6d73e7f5
C 0x6d73e7c3
C [msvcrt.dll+0x2a3b0]
C [kernel32.dll+0xb683]

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.awt.windows.WComponentPeer._dispose()V+0
j sun.awt.windows.WComponentPeer.disposeImpl()V+23
j sun.awt.windows.WObjectPeer.dispose()V+42
j java.awt.Component.removeNotify()V+211
j java.awt.Container.removeNotify()V+38
j java.awt.Container.remove(I)V+43
j java.awt.Container.remove(Ljava/awt/Component;)V+45
j sun.applet.AppletPanel.run()V+552
j java.lang.Thread.run()V+11
v ~StubRoutines::call_stub

--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x0db45538 JavaThread "Thread-117" [_thread_blocked, id=3104]
0x0db45238 JavaThread "Keep-Alive-Timer" daemon [_thread_blocked, id=3584]
0x0db453b8 JavaThread "AWT-EventQueue-17" [_thread_blocked, id=1336]
=>0x0399b400 JavaThread "thread applet-Ticker.class" [_thread_in_native, id=1516]
0x0ddfdda0 JavaThread "Thread-112" [_thread_blocked, id=3900]
0x0db450b8 JavaThread "Thread-94" [_thread_in_native, id=2256]
0x088e1490 JavaThread "Thread-70" [_thread_in_native, id=1556]
0x089aa2f0 JavaThread "TimerQueue" daemon [_thread_blocked, id=2340]
0x0da91ab8 JavaThread "TimerQueue" daemon [_thread_blocked, id=1668]
0x089ef870 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=3336]
0x0899d388 JavaThread "ConsoleWriterThread" daemon [_thread_blocked, id=1112]
0x08972820 JavaThread "AWT-EventQueue-1" [_thread_blocked, id=2352]
0x089588c0 JavaThread "AWT-Shutdown" [_thread_blocked, id=3548]
0x0895a848 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3568]
0x08958ca8 JavaThread "AWT-Windows" daemon [_thread_in_native, id=3608]
0x089531b0 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=3264]
0x088d0ae8 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3268]
0x088cf718 JavaThread "CompilerThread0" daemon [_thread_blocked, id=3420]
0x088ceb60 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3556]
0x088c6020 JavaThread "Finalizer" daemon [_thread_blocked, id=3476]
0x088c4b90 JavaThread "Reference Handler" daemon [_thread_blocked, id=1260]

Other Threads:
0x08813700 VMThread [id=1248]
0x088d1e58 WatcherThread [id=3332]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap
def new generation total 576K, used 181K [0x10380000, 0x10420000, 0x10ae0000)
eden space 512K, 35% used [0x10380000, 0x103ad7a8, 0x10400000)
from space 64K, 0% used [0x10410000, 0x10410000, 0x10420000)
to space 64K, 0% used [0x10400000, 0x10400000, 0x10410000)
tenured generation total 5512K, used 3306K [0x10ae0000, 0x11042000, 0x16380000)
the space 5512K, 59% used [0x10ae0000, 0x10e1ab88, 0x10e1ac00, 0x11042000)
compacting perm gen total 8448K, used 8269K [0x16380000, 0x16bc0000, 0x1a380000)
the space 8448K, 97% used [0x16380000, 0x16b93628, 0x16b93800, 0x16bc0000)
No shared spaces configured.

Dynamic libraries:
0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
0x7c900000 - 0x7c9b0000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c8f5000 C:\WINDOWS\system32\kernel32.dll
0x77c10000 - 0x77c68000 C:\WINDOWS\system32\msvcrt.dll
0x7e410000 - 0x7e4a0000 C:\WINDOWS\system32\USER32.dll
0x77f10000 - 0x77f57000 C:\WINDOWS\system32\GDI32.dll
0x77f60000 - 0x77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
0x77dd0000 - 0x77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
0x77e70000 - 0x77f02000 C:\WINDOWS\system32\RPCRT4.dll
0x77fe0000 - 0x77ff1000 C:\WINDOWS\system32\Secur32.dll
0x7e290000 - 0x7e3ff000 C:\WINDOWS\system32\SHDOCVW.dll
0x77a80000 - 0x77b14000 C:\WINDOWS\system32\CRYPT32.dll
0x77b20000 - 0x77b32000 C:\WINDOWS\system32\MSASN1.dll
0x754d0000 - 0x75550000 C:\WINDOWS\system32\CRYPTUI.dll
0x76c30000 - 0x76c5e000 C:\WINDOWS\system32\WINTRUST.dll
0x76c90000 - 0x76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
0x77120000 - 0x771ab000 C:\WINDOWS\system32\OLEAUT32.dll
0x774e0000 - 0x7761d000 C:\WINDOWS\system32\ole32.dll
0x5b860000 - 0x5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
0x771b0000 - 0x77256000 C:\WINDOWS\system32\WININET.dll
0x76f60000 - 0x76f8c000 C:\WINDOWS\system32\WLDAP32.dll
0x77c00000 - 0x77c08000 C:\WINDOWS\system32\VERSION.dll
0x76390000 - 0x763ad000 C:\WINDOWS\system32\IMM32.DLL
0x629c0000 - 0x629c9000 C:\WINDOWS\system32\LPK.DLL
0x74d90000 - 0x74dfb000 C:\WINDOWS\system32\USP10.dll
0x773d0000 - 0x774d3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
0x7c9c0000 - 0x7d1d6000 C:\WINDOWS\system32\SHELL32.dll
0x5d090000 - 0x5d12a000 C:\WINDOWS\system32\comctl32.dll
0x5ad70000 - 0x5ada8000 C:\WINDOWS\system32\uxtheme.dll
0x75f80000 - 0x7607d000 C:\WINDOWS\system32\BROWSEUI.dll
0x20000000 - 0x20012000 C:\WINDOWS\system32\browselc.dll
0x77b40000 - 0x77b62000 C:\WINDOWS\system32\appHelp.dll
0x76fd0000 - 0x7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 - 0x77115000 C:\WINDOWS\system32\COMRes.dll
0x755c0000 - 0x755ee000 C:\WINDOWS\system32\msctfime.ime
0x7e1e0000 - 0x7e280000 C:\WINDOWS\system32\urlmon.dll
0x77920000 - 0x77a13000 C:\WINDOWS\system32\SETUPAPI.dll
0x77a20000 - 0x77a74000 C:\WINDOWS\System32\cscui.dll
0x76600000 - 0x7661d000 C:\WINDOWS\System32\CSCDLL.dll
0x10000000 - 0x1037f000 c:\program files\google\googletoolbar4.dll
0x7d1e0000 - 0x7d49e000 C:\WINDOWS\system32\msi.dll
0x76b40000 - 0x76b6d000 C:\WINDOWS\system32\WINMM.dll
0x71ad0000 - 0x71ad9000 C:\WINDOWS\system32\WSOCK32.dll
0x71ab0000 - 0x71ac7000 C:\WINDOWS\system32\WS2_32.dll
0x71aa0000 - 0x71aa8000 C:\WINDOWS\system32\WS2HELP.dll
0x76380000 - 0x76385000 C:\WINDOWS\system32\MSIMG32.dll
0x5cd70000 - 0x5cd77000 C:\WINDOWS\system32\serwvdrv.dll
0x5b0a0000 - 0x5b0a7000 C:\WINDOWS\system32\umdmxfrm.dll
0x74980000 - 0x74a93000 C:\WINDOWS\system32\msxml3.dll
0x59a60000 - 0x59b01000 C:\WINDOWS\system32\DBGHELP.DLL
0x76ee0000 - 0x76f1c000 C:\WINDOWS\system32\RASAPI32.DLL
0x76e90000 - 0x76ea2000 C:\WINDOWS\system32\rasman.dll
0x76eb0000 - 0x76edf000 C:\WINDOWS\system32\TAPI32.dll
0x76e80000 - 0x76e8e000 C:\WINDOWS\system32\rtutils.dll
0x76990000 - 0x769b5000 C:\WINDOWS\system32\ntshrui.dll
0x76b20000 - 0x76b31000 C:\WINDOWS\system32\ATL.DLL
0x769c0000 - 0x76a73000 C:\WINDOWS\system32\USERENV.dll
0x77c70000 - 0x77c93000 C:\WINDOWS\system32\msv1_0.dll
0x76d60000 - 0x76d79000 C:\WINDOWS\system32\iphlpapi.dll
0x71b20000 - 0x71b32000 C:\WINDOWS\system32\MPR.dll
0x75f60000 - 0x75f67000 C:\WINDOWS\System32\drprov.dll
0x71c10000 - 0x71c1e000 C:\WINDOWS\System32\ntlanman.dll
0x71cd0000 - 0x71ce7000 C:\WINDOWS\System32\NETUI0.dll
0x71c90000 - 0x71cd0000 C:\WINDOWS\System32\NETUI1.dll
0x71c80000 - 0x71c87000 C:\WINDOWS\System32\NETRAP.dll
0x71bf0000 - 0x71c03000 C:\WINDOWS\System32\SAMLIB.dll
0x75f70000 - 0x75f79000 C:\WINDOWS\System32\davclnt.dll
0x75970000 - 0x75a67000 C:\WINDOWS\system32\MSGINA.dll
0x76360000 - 0x76370000 C:\WINDOWS\system32\WINSTA.dll
0x74320000 - 0x7435d000 C:\WINDOWS\system32\ODBC32.dll
0x763b0000 - 0x763f9000 C:\WINDOWS\system32\comdlg32.dll
0x01880000 - 0x01897000 C:\WINDOWS\system32\odbcint.dll
0x0ffd0000 - 0x0fff8000 C:\WINDOWS\system32\rsaenh.dll
0x019e0000 - 0x01a2c000 C:\Program Files\Juno\Toolbar.dll
0x01a40000 - 0x01a5f000 C:\Program Files\Juno\ToolbarR.dll
0x01a80000 - 0x01d45000 C:\WINDOWS\system32\xpsp2res.dll
0x02150000 - 0x021d9000 C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
0x022f0000 - 0x02348000 C:\Program Files\eBay\eBay Toolbar2\wsasc.dll
0x75150000 - 0x75164000 C:\WINDOWS\system32\Cabinet.dll
0x02360000 - 0x02417000 C:\Program Files\eBay\eBay Toolbar2\site.dll
0x02450000 - 0x0245d000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
0x02570000 - 0x02599000 C:\Program Files\Microsoft Money\System\mnyside.dll
0x025a0000 - 0x025b1000 C:\Program Files\Microsoft Money\System\misstub.dll
0x02620000 - 0x0263a000 C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
0x21000000 - 0x21027000 C:\Program Files\Juno\qsacc\X1IEBHO.dll
0x75e60000 - 0x75e73000 C:\WINDOWS\system32\cryptnet.dll
0x4d4f0000 - 0x4d548000 C:\WINDOWS\system32\WINHTTP.dll
0x722b0000 - 0x722b5000 C:\WINDOWS\system32\SensApi.dll
0x75e90000 - 0x75f40000 C:\WINDOWS\system32\SXS.DLL
0x02c00000 - 0x02c88000 C:\WINDOWS\system32\shdoclc.dll
0x75cf0000 - 0x75d81000 C:\WINDOWS\system32\mlang.dll
0x71a50000 - 0x71a8f000 C:\WINDOWS\system32\mswsock.dll
0x662b0000 - 0x66308000 C:\WINDOWS\system32\hnetcfg.dll
0x71a90000 - 0x71a98000 C:\WINDOWS\System32\wshtcpip.dll
0x5c080000 - 0x5c135000 c:\windows\srchasst\srchui.dll
0x77be0000 - 0x77bf5000 C:\WINDOWS\system32\MSACM32.dll
0x74c80000 - 0x74cac000 C:\WINDOWS\system32\OLEACC.dll
0x76080000 - 0x760e5000 C:\WINDOWS\system32\MSVCP60.dll
0x5c150000 - 0x5c162000 c:\windows\srchasst\srchctls.dll
0x7dc30000 - 0x7df21000 C:\WINDOWS\System32\mshtml.dll
0x746c0000 - 0x746e7000 C:\WINDOWS\System32\msls31.dll
0x76bf0000 - 0x76bfb000 C:\WINDOWS\System32\PSAPI.DLL
0x746f0000 - 0x7471a000 C:\WINDOWS\System32\msimtf.dll
0x74720000 - 0x7476b000 C:\WINDOWS\System32\MSCTF.dll
0x75c50000 - 0x75cbf000 C:\WINDOWS\System32\jscript.dll
0x66880000 - 0x6688c000 C:\WINDOWS\system32\ImgUtil.dll
0x66e50000 - 0x66e90000 C:\WINDOWS\System32\iepeers.dll
0x73000000 - 0x73026000 C:\WINDOWS\System32\WINSPOOL.DRV
0x32520000 - 0x32532000 C:\Program Files\Microsoft Office\Office10\msohev.dll
0x767f0000 - 0x76817000 C:\WINDOWS\system32\schannel.dll
0x76f20000 - 0x76f47000 C:\WINDOWS\system32\DNSAPI.dll
0x76fc0000 - 0x76fc6000 C:\WINDOWS\system32\rasadhlp.dll
0x68100000 - 0x68124000 C:\WINDOWS\system32\dssenh.dll
0x30000000 - 0x302ee000 C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx
0x72d20000 - 0x72d29000 C:\WINDOWS\system32\wdmaud.drv
0x72d10000 - 0x72d18000 C:\WINDOWS\system32\msacm32.drv
0x77bd0000 - 0x77bd7000 C:\WINDOWS\system32\midimap.dll
0x76200000 - 0x76271000 C:\WINDOWS\System32\mshtmled.dll
0x71d40000 - 0x71d5c000 C:\WINDOWS\System32\actxprxy.dll
0x76fb0000 - 0x76fb8000 C:\WINDOWS\System32\winrnr.dll
0x73300000 - 0x73367000 C:\WINDOWS\System32\vbscript.dll
0x73dd0000 - 0x73ece000 C:\WINDOWS\System32\MFC42.DLL
0x6bdd0000 - 0x6be06000 C:\WINDOWS\System32\dxtrans.dll
0x6d430000 - 0x6d43a000 C:\WINDOWS\System32\ddrawex.dll
0x73760000 - 0x737a9000 C:\WINDOWS\System32\DDRAW.dll
0x73bc0000 - 0x73bc6000 C:\WINDOWS\System32\DCIMAN32.dll
0x6be10000 - 0x6be6a000 C:\WINDOWS\System32\dxtmsft.dll

VM Arguments:
jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_03 -Djavaplugin.nodotversion=150_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~2.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_03 -Djavaplugin.nodotversion=150_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
java_command: <unknown>

Environment Variables:
PATH=C:\PROGRA~1\Java\JRE15~2.0_0\bin;C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;.
USERNAME=Brian
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 6 Model 6 Stepping 2, AuthenticAMD


--------------- S Y S T E M ---------------

OS: Windows XP Build 2600 Service Pack 2

CPU:total 1 family 6, cmov, cx8, fxsr, mmx, sse

Memory: 4k page, physical 490992k(186456k free), swap 1436356k(980632k free)

vm_info: Java HotSpot™ Client VM (1.5.0_03-b07) for windows-x86, built on Apr 13 2005 02:07:01 by "java_re" with MS VC++ 6.0

********************************************************************************
***
#
# An unexpected error has been detected by HotSpot Virtual Machine:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x7c9010f3, pid=2360, tid=1872
#
# Java VM: Java HotSpot™ Client VM (1.5.0_03-b07 mixed mode)
# Problematic frame:
# C [ntdll.dll+0x10f3]
#

--------------- T H R E A D ---------------

Current thread (0x06f3cff8): JavaThread "AWT-EventQueue-28" [_thread_in_native, id=1872]

siginfo: ExceptionCode=0xc0000005, writing address 0x1ee14f74

Registers:
EAX=0x00000000, EBX=0x161ac150, ECX=0x2beff848, EDX=0x1ee14f6c
ESP=0x2beff858, EBP=0x2beff890, ESI=0x1ee14f58, EDI=0x1ee14f6c
EIP=0x7c9010f3, EFLAGS=0x00010246

Top of Stack: (sp=0x2beff858)
0x2beff858: 6d0d7af2 1ee14f6c 06f3cff8 06f3d0b4
0x2beff868: 6d0c7eb3 06f3cff8 161ac150 161ac150
0x2beff878: 10d34b50 00000000 2beff86c 2beffd64
0x2beff888: 6d0f33a0 00000000 2beff8c4 0810899c
0x2beff898: 06f3d0b4 2beff8d4 08000001 10d34b50
0x2beff8a8: 2beff8a0 00000000 2beff8d4 161ae820
0x2beff8b8: 00000000 161ac150 2beff8d4 2beff8f4
0x2beff8c8: 08102923 00000000 08106449 10d34b50

Instructions: (pc=0x7c9010f3)
0x7c9010e3: 24 00 00 00 00 90 90 90 90 90 8b 54 24 04 33 c0
0x7c9010f3: ff 4a 08 75 26 89 42 0c f0 ff 4a 04 7d 03 c2 04


Stack: [0x2be00000,0x2bf00000), sp=0x2beff858, free space=1022k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [ntdll.dll+0x10f3]
j sun.awt.windows.WComponentPeer._dispose()V+0
j sun.awt.windows.WComponentPeer.disposeImpl()V+23
j sun.awt.windows.WObjectPeer.dispose()V+42
j java.awt.Component.removeNotify()V+211
j java.awt.Container.removeNotify()V+67
j java.awt.Container.removeNotify()V+38
j java.awt.Frame.removeNotify()V+51
j java.awt.Window$1DisposeAction.run()V+105
j java.awt.Window.doDispose()V+16
j java.awt.Window.dispose()V+1
j sun.awt.AppContext$4.run()V+16
J java.awt.event.InvocationEvent.dispatch()V
J java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V
J java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z
J java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V
v ~RuntimeStub::alignment_frame_return Runtime1 stub
j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
j java.awt.EventDispatchThread.run()V+9
v ~StubRoutines::call_stub
V [jvm.dll+0x818b8]
V [jvm.dll+0xd431d]
V [jvm.dll+0x81789]
V [jvm.dll+0x814e6]
V [jvm.dll+0x9c06b]
V [jvm.dll+0xfe7f5]
V [jvm.dll+0xfe7c3]
C [msvcrt.dll+0x2a3b0]
C [kernel32.dll+0xb683]

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.awt.windows.WComponentPeer._dispose()V+0
j sun.awt.windows.WComponentPeer.disposeImpl()V+23
j sun.awt.windows.WObjectPeer.dispose()V+42
j java.awt.Component.removeNotify()V+211
j java.awt.Container.removeNotify()V+67
j java.awt.Container.removeNotify()V+38
j java.awt.Frame.removeNotify()V+51
j java.awt.Window$1DisposeAction.run()V+105
j java.awt.Window.doDispose()V+16
j java.awt.Window.dispose()V+1
j sun.awt.AppContext$4.run()V+16
J java.awt.event.InvocationEvent.dispatch()V
J java.awt.EventQueue.dispatchEvent(Ljava/awt/AWTEvent;)V
J java.awt.EventDispatchThread.pumpOneEventForHierarchy(ILjava/awt/Component;)Z
J java.awt.EventDispatchThread.pumpEventsForHierarchy(ILjava/awt/Conditional;Ljava/awt/Component;)V
v ~RuntimeStub::alignment_frame_return Runtime1 stub
j java.awt.EventDispatchThread.pumpEvents(ILjava/awt/Conditional;)V+4
j java.awt.EventDispatchThread.pumpEvents(Ljava/awt/Conditional;)V+3
j java.awt.EventDispatchThread.run()V+9
v ~StubRoutines::call_stub

--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x06f3c1f0 JavaThread "Thread-364" [_thread_blocked, id=4080]
=>0x06f3cff8 JavaThread "AWT-EventQueue-28" [_thread_in_native, id=1872]
0x0a6c7750 JavaThread "Thread-353" [_thread_in_native, id=768]
0x0a6b6b30 JavaThread "Thread-347" [_thread_in_native, id=3288]
0x0a42d650 JavaThread "Thread-340" [_thread_in_native, id=2740]
0x07058fb8 JavaThread "Thread-177" [_thread_in_native, id=3904]
0x0a3519f0 JavaThread "Thread-12" [_thread_in_native, id=1072]
0x0a652778 JavaThread "TimerQueue" daemon [_thread_blocked, id=3876]
0x0a488118 JavaThread "TimerQueue" daemon [_thread_blocked, id=3896]
0x0a424c98 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=3144]
0x0a424030 JavaThread "ConsoleWriterThread" daemon [_thread_blocked, id=2252]
0x0a3f0990 JavaThread "AWT-EventQueue-1" [_thread_blocked, id=3836]
0x0a3cc0c0 JavaThread "AWT-Shutdown" [_thread_blocked, id=3728]
0x0a3d12b0 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3528]
0x0a3cc4a8 JavaThread "AWT-Windows" daemon [_thread_in_native, id=2300]
0x0a3c5238 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=3428]
0x0a34a938 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3248]
0x0a349568 JavaThread "CompilerThread0" daemon [_thread_blocked, id=3204]
0x0a3489b0 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=1160]
0x070ffe30 JavaThread "Finalizer" daemon [_thread_blocked, id=3132]
0x070fe9a0 JavaThread "Reference Handler" daemon [_thread_blocked, id=2972]

Other Threads:
0x070fa900 VMThread [id=3052]
0x0a34bb10 WatcherThread [id=2668]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap
def new generation total 576K, used 86K [0x10010000, 0x100b0000, 0x10770000)
eden space 512K, 15% used [0x10010000, 0x10023680, 0x10090000)
from space 64K, 13% used [0x10090000, 0x100921c8, 0x100a0000)
to space 64K, 0% used [0x100a0000, 0x100a0000, 0x100b0000)
tenured generation total 6068K, used 5958K [0x10770000, 0x10d5d000, 0x16010000)
the space 6068K, 98% used [0x10770000, 0x10d41a00, 0x10d41c00, 0x10d5d000)
compacting perm gen total 8448K, used 8237K [0x16010000, 0x16850000, 0x1a010000)
the space 8448K, 97% used [0x16010000, 0x1681b6f8, 0x1681b800, 0x16850000)
No shared spaces configured.

Dynamic libraries:
0x00400000 - 0x00419000 C:\Program Files\Internet Explorer\iexplore.exe
0x7c900000 - 0x7c9b0000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c8f5000 C:\WINDOWS\system32\kernel32.dll
0x77c10000 - 0x77c68000 C:\WINDOWS\system32\msvcrt.dll
0x7e410000 - 0x7e4a0000 C:\WINDOWS\system32\USER32.dll
0x77f10000 - 0x77f57000 C:\WINDOWS\system32\GDI32.dll
0x77f60000 - 0x77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
0x77dd0000 - 0x77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
0x77e70000 - 0x77f02000 C:\WINDOWS\system32\RPCRT4.dll
0x77fe0000 - 0x77ff1000 C:\WINDOWS\system32\Secur32.dll
0x7e290000 - 0x7e3ff000 C:\WINDOWS\system32\SHDOCVW.dll
0x77a80000 - 0x77b14000 C:\WINDOWS\system32\CRYPT32.dll
0x77b20000 - 0x77b32000 C:\WINDOWS\system32\MSASN1.dll
0x754d0000 - 0x75550000 C:\WINDOWS\system32\CRYPTUI.dll
0x76c30000 - 0x76c5e000 C:\WINDOWS\system32\WINTRUST.dll
0x76c90000 - 0x76cb8000 C:\WINDOWS\system32\IMAGEHLP.dll
0x77120000 - 0x771ab000 C:\WINDOWS\system32\OLEAUT32.dll
0x774e0000 - 0x7761d000 C:\WINDOWS\system32\ole32.dll
0x5b860000 - 0x5b8b4000 C:\WINDOWS\system32\NETAPI32.dll
0x771b0000 - 0x77256000 C:\WINDOWS\system32\WININET.dll
0x76f60000 - 0x76f8c000 C:\WINDOWS\system32\WLDAP32.dll
0x77c00000 - 0x77c08000 C:\WINDOWS\system32\VERSION.dll
0x773d0000 - 0x774d3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
0x7c9c0000 - 0x7d1d6000 C:\WINDOWS\system32\SHELL32.dll
0x5d090000 - 0x5d12a000 C:\WINDOWS\system32\comctl32.dll
0x5ad70000 - 0x5ada8000 C:\WINDOWS\system32\uxtheme.dll
0x75f80000 - 0x7607d000 C:\WINDOWS\system32\BROWSEUI.dll
0x20000000 - 0x20012000 C:\WINDOWS\system32\browselc.dll
0x77b40000 - 0x77b62000 C:\WINDOWS\system32\appHelp.dll
0x76fd0000 - 0x7704f000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77050000 - 0x77115000 C:\WINDOWS\system32\COMRes.dll
0x7e1e0000 - 0x7e280000 C:\WINDOWS\system32\urlmon.dll
0x77920000 - 0x77a13000 C:\WINDOWS\system32\SETUPAPI.dll
0x00e20000 - 0x0119f000 c:\program files\google\googletoolbar4.dll
0x7d1e0000 - 0x7d49e000 C:\WINDOWS\system32\msi.dll
0x76b40000 - 0x76b6d000 C:\WINDOWS\system32\WINMM.dll
0x71ad0000 - 0x71ad9000 C:\WINDOWS\system32\WSOCK32.dll
0x71ab0000 - 0x71ac7000 C:\WINDOWS\system32\WS2_32.dll
0x71aa0000 - 0x71aa8000 C:\WINDOWS\system32\WS2HELP.dll
0x76390000 - 0x763ad000 C:\WINDOWS\system32\IMM32.dll
0x76380000 - 0x76385000 C:\WINDOWS\system32\MSIMG32.dll
0x5cd70000 - 0x5cd77000 C:\WINDOWS\system32\serwvdrv.dll
0x5b0a0000 - 0x5b0a7000 C:\WINDOWS\system32\umdmxfrm.dll
0x74980000 - 0x74a93000 C:\WINDOWS\system32\msxml3.dll
0x59a60000 - 0x59b01000 C:\WINDOWS\system32\DBGHELP.DLL
0x76990000 - 0x769b5000 C:\WINDOWS\system32\ntshrui.dll
0x76b20000 - 0x76b31000 C:\WINDOWS\system32\ATL.DLL
0x769c0000 - 0x76a73000 C:\WINDOWS\system32\USERENV.dll
0x76ee0000 - 0x76f1c000 C:\WINDOWS\system32\RASAPI32.DLL
0x76e90000 - 0x76ea2000 C:\WINDOWS\system32\rasman.dll
0x76eb0000 - 0x76edf000 C:\WINDOWS\system32\TAPI32.dll
0x76e80000 - 0x76e8e000 C:\WINDOWS\system32\rtutils.dll
0x77c70000 - 0x77c93000 C:\WINDOWS\system32\msv1_0.dll
0x76d60000 - 0x76d79000 C:\WINDOWS\system32\iphlpapi.dll
0x0ffd0000 - 0x0fff8000 C:\WINDOWS\system32\rsaenh.dll
0x01a10000 - 0x01a5c000 C:\Program Files\Juno\Toolbar.dll
0x01a60000 - 0x01a7f000 C:\Program Files\Juno\ToolbarR.dll
0x71b20000 - 0x71b32000 C:\WINDOWS\system32\MPR.dll
0x71bf0000 - 0x71c03000 C:\WINDOWS\System32\SAMLIB.dll
0x01b90000 - 0x01c19000 C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
0x01d30000 - 0x01d88000 C:\Program Files\eBay\eBay Toolbar2\wsasc.dll
0x75150000 - 0x75164000 C:\WINDOWS\system32\Cabinet.dll
0x01da0000 - 0x01e57000 C:\Program Files\eBay\eBay Toolbar2\site.dll
0x01e80000 - 0x01e8d000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
0x01fa0000 - 0x01fc9000 C:\Program Files\Microsoft Money\System\mnyside.dll
0x763b0000 - 0x763f9000 C:\WINDOWS\system32\comdlg32.dll
0x01fd0000 - 0x01fe1000 C:\Program Files\Microsoft Money\System\misstub.dll
0x02050000 - 0x02315000 C:\WINDOWS\system32\xpsp2res.dll
0x02520000 - 0x0253a000 C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
0x21000000 - 0x21027000 C:\Program Files\Juno\qsacc\X1IEBHO.dll
0x75970000 - 0x75a67000 C:\WINDOWS\system32\MSGINA.dll
0x76360000 - 0x76370000 C:\WINDOWS\system32\WINSTA.dll
0x74320000 - 0x7435d000 C:\WINDOWS\system32\ODBC32.dll
0x02880000 - 0x02897000 C:\WINDOWS\system32\odbcint.dll
0x75e60000 - 0x75e73000 C:\WINDOWS\system32\cryptnet.dll
0x4d4f0000 - 0x4d548000 C:\WINDOWS\system32\WINHTTP.dll
0x722b0000 - 0x722b5000 C:\WINDOWS\system32\SensApi.dll
0x75e90000 - 0x75f40000 C:\WINDOWS\system32\SXS.DLL
0x02c20000 - 0x02ca8000 C:\WINDOWS\system32\shdoclc.dll
0x5ff20000 - 0x5ff46000 C:\WINDOWS\system32\MSRATING.dll
0x5ff50000 - 0x5ff61000 C:\WINDOWS\system32\msratelc.dll
0x75cf0000 - 0x75d81000 C:\WINDOWS\system32\mlang.dll
0x71a50000 - 0x71a8f000 C:\WINDOWS\system32\mswsock.dll
0x662b0000 - 0x66308000 C:\WINDOWS\system32\hnetcfg.dll
0x71a90000 - 0x71a98000 C:\WINDOWS\System32\wshtcpip.dll
0x7dc30000 - 0x7df21000 C:\WINDOWS\System32\mshtml.dll
0x746c0000 - 0x746e7000 C:\WINDOWS\System32\msls31.dll
0x76bf0000 - 0x76bfb000 C:\WINDOWS\System32\PSAPI.DLL
0x66880000 - 0x6688c000 C:\WINDOWS\system32\ImgUtil.dll
0x32520000 - 0x32532000 C:\Program Files\Microsoft Office\Office10\msohev.dll
0x75c50000 - 0x75cbf000 C:\WINDOWS\System32\jscript.dll
0x767f0000 - 0x76817000 C:\WINDOWS\system32\schannel.dll
0x76f20000 - 0x76f47000 C:\WINDOWS\system32\DNSAPI.dll
0x76fc0000 - 0x76fc6000 C:\WINDOWS\system32\rasadhlp.dll
0x68100000 - 0x68124000 C:\WINDOWS\system32\dssenh.dll
0x66e50000 - 0x66e90000 C:\WINDOWS\System32\iepeers.dll
0x73000000 - 0x73026000 C:\WINDOWS\System32\WINSPOOL.DRV
0x30000000 - 0x302ee000 C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx
0x72d20000 - 0x72d29000 C:\WINDOWS\system32\wdmaud.drv
0x72d10000 - 0x72d18000 C:\WINDOWS\system32\msacm32.drv
0x77be0000 - 0x77bf5000 C:\WINDOWS\system32\MSACM32.dll
0x77bd0000 - 0x77bd7000 C:\WINDOWS\system32\midimap.dll
0x71d40000 - 0x71d5c000 C:\WINDOWS\System32\actxprxy.dll
0x76200000 - 0x76271000 C:\WINDOWS\System32\mshtmled.dll
0x6bdd0000 - 0x6be06000 C:\WINDOWS\System32\dxtrans.dll
0x6d430000 - 0x6d43a000 C:\WINDOWS\System32\ddrawex.dll
0x73760000 - 0x737a9000 C:\WINDOWS\System32\DDRAW.dll
0x73bc0000 - 0x73bc6000 C:\WINDOWS\System32\DCIMAN32.dll
0x6be10000 - 0x6be6a000 C:\WINDOWS\System32\dxtmsft.dll
0x6d590000 - 0x6d5a1000 C:\Program Files\Java\jre1.5.0_03\bin\npjpi150_03.dll
0x5edd0000 - 0x5ede7000 C:\WINDOWS\system32\OLEPRO32.DLL
0x6d400000 - 0x6d417000 C:\Program Files\Java\jre1.5.0_03\bin\jpiexp32.dll
0x76fb0000 - 0x76fb8000 C:\WINDOWS\System32\winrnr.dll
0x6d450000 - 0x6d468000 C:\Program Files\Java\jre1.5.0_03\bin\jpishare.dll
0x6d640000 - 0x6d7c6000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\client\jvm.dll
0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\hpi.dll
0x6d610000 - 0x6d61c000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\verify.dll
0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\java.dll
0x6d630000 - 0x6d63f000 C:\PROGRA~1\Java\JRE15~2.0_0\bin\zip.dll
0x6d000000 - 0x6d167000 C:\Program Files\Java\jre1.5.0_03\bin\awt.dll
0x73940000 - 0x73a10000 C:\WINDOWS\system32\D3DIM700.DLL
0x6d240000 - 0x6d27d000 C:\Program Files\Java\jre1.5.0_03\bin\fontmanager.dll
0x6d1f0000 - 0x6d203000 C:\Program Files\Java\jre1.5.0_03\bin\deploy.dll
0x6d5d0000 - 0x6d5ed000 C:\Program Files\Java\jre1.5.0_03\bin\RegUtils.dll
0x6d3e0000 - 0x6d3f4000 C:\Program Files\Java\jre1.5.0_03\bin\jpicom32.dll
0x6d4c0000 - 0x6d4d3000 C:\Program Files\Java\jre1.5.0_03\bin\net.dll
0x6d4e0000 - 0x6d4e9000 C:\Program Files\Java\jre1.5.0_03\bin\nio.dll

VM Arguments:
jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_03 -Djavaplugin.nodotversion=150_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~2.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~2.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~2.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~2.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_03 -Djavaplugin.nodotversion=150_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE1
Go to the top of the page
 
+Quote Post
Essexboy
post Jan 20 2008, 08:36 AM
Post #2


Global Moderator
Group Icon
Posts: 9,560
From: Darkest Cornwall
OS: Vista Ultimate



Hi there, could you do me a favour and ensure that wordwrap is NOT checked on your notepad as it makes it difficult to read

Please download Deckard's System Scanner (DSS) and save it to your Desktop.
  • Close all other windows before proceeding.
  • Double-click on dss.exe and follow the prompts.
  • When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.
Go to the top of the page
 
+Quote Post
gwhiz