[idev]

I hope you can help me!
I am able to open 'My computer, Internet explorer and folders' and certain shortcuts from my desktop, but I'm unable to open anything from the Start-Programs path. Double clicking or pressing enter starts my anti virus scanner, an option now topping the right click menu now the 'open' command has disappeared.

I have looked at the files with Explorer, the majority of the files seem to open with the correct path. Example, Quicktime image opens with Picture viewer and by selecting the Edit button the action in the 'Edit file type' shows 'open'.

The only grey area is in the 'Registered file type' with 'Application', which does not allow me to Edit. It is also set to open with my virus scanner.

If this is the problem I am unsure how to redirect the pathway as I do not have the option to edit.

I hope the information I have given is helpful and gives you an idea where my troubles lie.
I am very grateful for any help you offer.
(copy of previous message)

Thank you for getting back to me, unfortunatly I could not download Hijack this directly to my computer as one of the first victims of any issue with my computer is my internet connection.

I saved to disc from another computer, ran hijack from disc and saved the results. I realise this is not recommend by you but had no option.
I hope the information that is posted below is helpful and provides you with details to help me.

Once again thankyou for any help, your time and knowledge is greatly appreciated.

Logfile of HijackThis v1.97.7
Scan saved at 19:37:36, on 04/05/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\QUICK HEAL\MAILSVR.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\ACTIVE KEYS\AKEYS.EXE
F:\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
F1 - win.ini: run=c:\WINDOWS\SYSTEM\CMMPU.EXE
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_11_0.DLL
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_3_11_0.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [3dfx Tools] rundll32.exe 3dfxCmn.dll,UpdateRegSettings
O4 - HKLM\..\Run: [Quick Heal e-mail Protection] C:\PROGRA~1\QUICKH~1\MailSvr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [QHFW] C:\PROGRA~1\QUICKH~1\DOTBK.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [ActiveKeys.AAB635BD7D054a37A576] C:\Program Files\Active Keys\akeys.exe -a
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKCU\..\Run: [HDDHealth] C:\PROGRAM FILES\HDD HEALTH\HDDHEALTH.EXE -wl
O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: CorrectConnect.lnk = C:\Program Files\CConnect\CConnect.exe
O4 - Startup: Active SMART.lnk = C:\Program Files\Active SMART\ASmartCore.exe
O8 - Extra context menu item: Write a Review... - http://client.alexa....ions/review.htm
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://E:\SuperCD\IntraLaunch.CAB
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg...v43/yacscom.cab
O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.14...tiveXImgCtl.CAB
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/p...t/msnchat45.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...7879.8241435185
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com...ex/qtplugin.cab
O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://www.sis.com/s...tect/OSInfo.cab
O16 - DPF: {BA549C46-AD38-11D7-A476-00D0590EC9DE} (SiS_OCX98 Control) - http://www.sis.com/s...utodetect98.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yaho...alls/yinstc.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://us.games2.yim...ctl_0_0_0_1.ocx

[Advertisements]

Sorry I missed your last post

This entry look suspicious:
O4 - HKLM\..\Run: [QHFW] C:\PROGRA~1\QUICKH~1\DOTBK.EXE

Due to the lack of a hijack I'm guessing it's a virus or trojan. Run this free online virus scan here:
http://housecall.antivirus.com/

And this free trojan scan here:
http://www.moosoft.com/

[admin]

Sorry I missed your last post

This entry look suspicious:
O4 - HKLM\..\Run: [QHFW] C:\PROGRA~1\QUICKH~1\DOTBK.EXE

Due to the lack of a hijack I'm guessing it's a virus or trojan. Run this free online virus scan here:
http://housecall.antivirus.com/

And this free trojan scan here:
http://www.moosoft.com/

[Kat]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.