[xena11]

My kids computer has programs that just seem to keep coming back.
Dr. PMon, BMAN1, Elitum, show 1 bird .exe, are all items I assume should be eliminated. The first 3 I have been battling for weeks and just can not seem to get rid of them. I just went through all of the downloads and scans. Here is a copy of my CWS report

Can you tell me if there is anything else I need to do.
Thanks So Much!!


**** Run Keys ****

RUN: [hpsysdrv] c:\windows\system\hpsysdrv.exe
RUN: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
RUN: [KBD] C:\HP\KBD\KBD.EXE
RUN: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
RUN: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
RUN: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
RUN: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
RUN: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
RUN: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
RUN: [AlcxMonitor] ALCXMNTR.EXE
RUN: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
RUN: [PS2] C:\WINDOWS\system32\ps2.exe
RUN: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
RUN: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
RUN: [winupdtl] C:\WINDOWS\System32\winupdt.exe
RUN: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16
RUN: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
RUN: [2smO3nO] psbepad.exe
RUN: [WinTask driver] C:\WINDOWS\System32\wintask.exe
RUN: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
RUN: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
RUN: [checkrun] C:\windows\system32\eliteplv32.exe
RUN: [5jodh7g9] C:\WINDOWS\System32\5jodh7g9.exe
RUN: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
RUN: [hxrirnu] c:\windows\system32\ovsegfs.exe
RUN: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
RUN: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
RUN: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
RUN: [usrcpx] C:\WINDOWS\System32\usrcpx.exe
RUN: [JB5ERhi6R] promg32.exe
RUN: [msoeacct] C:\WINDOWS\System32\msoeacct.exe
RUN: [atiupdate] C:\WINDOWS\System32\msshed32.exe


**** Browser Helper Objects ****

BHO: [] C:\PROGRA~1\SPYBOT~1\SDHelper.dll


**** IE Toolbars ****



**** IE Extensions ****

IEExt: [Web Browser Applet Control] C:\WINDOWS\system32\msjava.dll
IEExt: [MoneySide] C:\WINDOWS\system32\msjava.dll
IEExt: [Messenger] C:\Program Files\Messenger\msmsgs.exe


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 localhost


**** IE Settings ****

IEBypass: localhost
Default Page: http://qus9.hpwis.com/
Default Search: http://srch-qus9.hpwis.com/
Local Page: C:\WINDOWS\system32\blank.htm
Search Bar: http://www.microsoft...=ie&ar=iesearch
Search Page: http://www.microsoft...=ie&ar=iesearch


**** IE Context Menu (Right click) ****

IEContext: [E&xport to Microsoft Excel] res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000


**** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0B1C2890-D4FF-4126-A517-7A6C964BB745}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0B1C2890-D4FF-4126-A517-7A6C964BB745}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2F17DFF4-27D1-4D03-9AE6-1DDEDD8943E3}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2F17DFF4-27D1-4D03-9AE6-1DDEDD8943E3}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C699B226-139A-49F0-9F58-C0725F1CB8E9}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C699B226-139A-49F0-9F58-C0725F1CB8E9}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0A464EC7-33D3-4367-9E26-5B82BD71F6AA}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0A464EC7-33D3-4367-9E26-5B82BD71F6AA}] DATAGRAM 2


**** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No


**** Downloaded Program Files ****

DirectAnimation Java Classes [file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
{166B1BCA-3F9C-11CF-8075-444553540000} [http://download.macr...irector/sw.cab]
{17492023-C23A-453E-A040-C7C580BBF700} [http://go.microsoft....67&clcid=0x409] C:\WINDOWS\system32\GWFSPidGen.DLL C:\WINDOWS\system32\LegitCheckControl.DLL
{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} [http://office.micros...tent/opuc2.cab]
{8AD9C840-044E-11D1-B3E9-00805F499D93} [http://java.sun.com/...ndows-i586.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn...Downloader.cab]
{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} [http://java.sun.com/...ndows-i586.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://fpdownload.ma...sh/swflash.cab]


**** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://ie.search.msn...st/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn...st/srchcust.htm

[Advertisements]

Welcome to Geeks 2 Go. Sorry about the delay in getting to your post, we have been very busy.

Do you still require help or are your problems resolved.

Please let me know and if you still require assistance, please post a fresh HJT log.

Regards,

Usetobe