[JaMoniJones]

Hi today i tried to open my ms works 2000 program and it wasnt work i first recieved a bunch of erros saying that some .dll files were missing so i downloaded them and placed them in the ms works folder then i started to recieve a arror that says

Works cannot access the program you selected. Necessary files may be missing, corrupted, or may have been deleted. To restore the files, reinstall the program, and then try starting the program again. If you no longer use the program, with the right mouse button, click the program name, and then click Delete

also

Application failed to initialize properly (0xc0000142).Click ok to terminate the application

i reinstalled ms works twice and still the same errors are coming up is someone could help me that would be great i posetd a HJT log also my computer boots slowly if someone could help me with that, that would be great thank you

Logfile of HijackThis v1.99.1
Scan saved at 10:05:52 AM, on 7/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\WINDOWS\system32\mptft.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\WINDOWS\system32\ssec.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\WINDOWS\system32\tfthot.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\ipwins\ipwins.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Windows NT\Accessories\wordpad.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.mrfindalo...asp?si=20065&k=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.mrfindalo...asp?si=20065&k=
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe,
F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,lsbxhwh.exe
O2 - BHO: (no name) - {01C3675A-742C-F571-C549-9B7E893FC5E9} - (no file)
O2 - BHO: (no name) - {13E5C772-B343-3E92-8EAA-062101478BB1} - (no file)
O2 - BHO: (no name) - {26EF4D54-8C05-397E-2B2B-97AE54BB0973} - (no file)
O2 - BHO: (no name) - {2B4D7BB4-8681-4CA0-C521-E8676541199C} - (no file)
O2 - BHO: (no name) - {2FD7B633-A927-FA82-4276-954F455935FD} - (no file)
O2 - BHO: (no name) - {42D993BF-DAA5-9B03-563D-AD0D6ECE5987} - (no file)
O2 - BHO: (no name) - {5119C22B-D730-E865-0371-47DC9029E5BD} - (no file)
O2 - BHO: (no name) - {5E940647-A153-0D81-849D-912EFEE6B0FD} - (no file)
O2 - BHO: (no name) - {6BFF9B92-3016-5346-D92F-607FAF27C19B} - (no file)
O2 - BHO: (no name) - {8D3DEC13-35FB-F46F-9660-0F00C3EB95DF} - (no file)
O2 - BHO: (no name) - {B55C470C-BF9A-4E07-04A8-8F833E899FF4} - (no file)
O2 - BHO: (no name) - {DA449B1C-6227-6EDD-B86E-B9A67844A7FD} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [ftexc] C:\WINDOWS\system32\mptft.exe
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\Yahoo!\Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\Yahoo!\Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKCU\..\Run: [gcoix] C:\WINDOWS\system32\kndpwr.exe reg_run
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O10 - Hijacked Internet access by New.Net
O20 - Winlogon Notify: Nls - C:\WINDOWS\system32\l2p2lc7o1f.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\UkFESU9TSEFDSzYzNDM\command.exe (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe

[Advertisements]

Hey there JaMoniJones, welcome to Geeks To Go Forums.

It seems that you are infected with malware. Please read the following (Below) and follow the instructions. The instructions will help you get rid of most of what you have and make the staff's job easier. Make sure to post your hijackthis log in the malware forum.

Please read this: Read This Before Posting A Hijackthis Log (Click on the link)

That will give you steps that will help you clean up 70% of the problems yourself. Then please download "Hijackthis" and run Hijackthis with log. Save the log file here: Malware Removal - HiJackThis Logs Go Here

When you have followed all these steps. A Geeks To Go Staff Member will help you fix your problem.

(Note: Please be patient, the "Malware Forum" is a very busy place and a two or three day wait is not unusual.)

Thank you and goodluck.

[Spike]

Hey there JaMoniJones, welcome to Geeks To Go Forums.

It seems that you are infected with malware. Please read the following (Below) and follow the instructions. The instructions will help you get rid of most of what you have and make the staff's job easier. Make sure to post your hijackthis log in the malware forum.

Please read this: Read This Before Posting A Hijackthis Log (Click on the link)

That will give you steps that will help you clean up 70% of the problems yourself. Then please download "Hijackthis" and run Hijackthis with log. Save the log file here: Malware Removal - HiJackThis Logs Go Here

When you have followed all these steps. A Geeks To Go Staff Member will help you fix your problem.

(Note: Please be patient, the "Malware Forum" is a very busy place and a two or three day wait is not unusual.)

Thank you and goodluck.

[JaMoniJones]

OKAY I REPOSTED IN MALWARE