[dmlutchen]

Hello board,

My name is David and this is my first time to this website Im not a "techie" by any means, Im 25 and use to hate computers but im starting to learn more as I go. I see alot of you users really know what you are talking about so maybe you can help me. Hmm...where to start, well, I have had my PC for a while ( Windows 2000 Pro Dell 1.0ghz 256RAM 40gig hard drive) And I just got connected to high speed internet. After talking to the shop where I baught my PC and my ISP I started to learn about all the adware, virus's and stuff that can hurt my PC. So I started to go out there and get software like Norton AntiVirus and other software, after reading some PC magazines and going to computer message boards like this, I was told that Norton as well as Mcafee are "software viruses" in-themselves because they attach to your computer like a cancer and its extreemly hard to remove. So on that advice I removed Norton the best I could and downloaded other software. Well after alot of installing/uninstalling looking for the right software I currently have the following:

AntiVirus Software : AVG 6.0 AntiVirus System (free version)
Firewall Software : Sygate Personal Firewall
Lavasoft Ad-Aware 6.0
SpyBot 1.3
Registry Mechanic 3.0
Pc Bug Doctor
Pest Patrol
Spyware blaster
System Mechanic 5 Pro
Mozilla Firefox

Not really knowing what Im doing, Im starting to realize that I probably dont need all this software, So I want to post this message to experts who know all about this stuff and might be able to tell me what I should keep and what I should get rid of and why. I have called Dell and my ISP and called local PC stores and cant seem to get any real, unbias, straight help without selling me something or getting bogus help. Another problem Im facing is, Once I started to look around for software I thought I needed and installing/uninstalling stuff that didnt pan out I started to pick up trojans, rebate ads, and all this trash thats seems to be infecting my computer. My Internet Explorer Browser (I.E. 6.0) isnt loading properly anymore and some pages load with errors, some pages dont open at all and sometimes my homepage is changed. I clearly messed around wth my computer not knowing what im doing and messed alot of things up. So my last question I guess is what can I do to clean alot of this up and keep my computer clean for good. I obviously have some issues going on and didnt really know where to start. Im learning as I go and want to eventually know what im doing. Thank you for having the patience to read this posting and I appreciate any usefull feedback and assistance.

[Advertisements]

I dont know how to edit my posting, I forgot to also add to the software list is

HijackThis Software

[dmlutchen]

I dont know how to edit my posting, I forgot to also add to the software list is

HijackThis Software

[dmlutchen]

I also have TrendMicro HouseCall Program too, that seems to work well, but is it nessesary?

[Gregec]

look

if you will use the thisHijack and deleted all of icons, will be dsl address deleted

you can use this program....but you must write the dsl address on paper or on computer

the best idea is:

wait on administrators

[mpfeif101]

AntiVirus Software : AVG 6.0 AntiVirus System (free version)
Firewall Software : Sygate Personal Firewall
Lavasoft Ad-Aware 6.0
SpyBot 1.3
Registry Mechanic 3.0
Pc Bug Doctor
Pest Patrol
Spyware blaster
System Mechanic 5 Pro
Mozilla Firefox

Upgrade to the new version of Ad-Aware
Trash Pestpatrol, pc bug doctor, and system mechanic 5 pro
I personally use Norton and like it but it's all personal preference

[freek]

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[dmlutchen]

You recomend Norton? I just was using Norton AntiVirus 2004 and hated it. I think Norton is a software virus in it-self. Norton is a big,strong monster that sinks its teeth into every nook and crany of your computer, deep down into the harddirve and registry and is extreemly difficult to remove. Dont get me wrong, the service is great and it does a good job, but there are other antivirus software that i think do just as good of a job such as what im using now, AVG (and its free and doesnt sink its teeth into your system and isnt that hard to remove if nessesary) Im starting to look into this other antivirus software called Avast. Im hearing its just ask good as Norton, Mcafee and AVG and the service is similar to AVG, its free, and does much of the same. And, whats wrong with PestPatrol pc bug doctor, and system mechanic 5 pro? Just curious. (seems like they all hav worked well and have found bugs,junk,etc...and removed them without a problem) I would like to hear some other opinions on what I think. By no means do I think I know anything about software, I could be wrong, I am just learning as I go by personal expereince. Thanks for all the reply's.

[-=jonnyrotten=-]

I agree with you on Norton. Don't get me wrong, Norton does a good job of protection, but you are pretty much marrying the guy once he's in. He eats up Waaaay too much ram for my liking too. Avg is a nice program, very good for being a free service. Personally I like "Computer Associates" Etrust Antivirus, Firewall, and Spam blocker. I got these programs free with my roadrunner internet account and I was a little skeptical at first. I tried them out and I love it. I'm sort of at a tossup between Sygate and Etrust Firewall. They're both equally as good in my opinion. Well anyways this is my setup, and I have not really needed anything else.

AdAware SE Personal (you need to upgrade to this)
Spybot Search and Destroy (with Tea Timer)
Spyware Blaster (does not remove spyware, but does a really good job blocking it)
Computer Associates etrust AntiVirus
Computer Associates etrust Firewall (sometimes I switch back to Sygate, don't really know why, I just like it)
Firefox

I also use Moosoft's "The Cleaner" for trojan detection every once in awhile, but It never finds anything, but it is very good free trojan detector.
That's my army of choice and Hasn't failed me yet. The best thing about the etrust software is it is not a resource hog by anymeans...at all, and I think it is only $30 bucks retail for antivirus, spam blocker, and firewall. Also it is easily removable.

You should post a Hijack This log to be inspected so we can help you clean up and stay that way.

-=jonnyrotten=-

[dmlutchen]

Great in-depth reply, thanks jonny. Well as posted before my army is the following:

AntiVirus Software : AVG 6.0 AntiVirus System (free version)
Firewall Software : Sygate Personal Firewall
Lavasoft Ad-Aware 6.0
SpyBot 1.3
Registry Mechanic 3.0
Pc Bug Doctor
Pest Patrol
Spyware blaster
System Mechanic 5 Pro
Mozilla Firefox
HijackThis Software
TrendMicro HouseCall

Looking back at what I have Im sure some of it is overkill, but like jonny said some of my software doesnt detect what its suppost to very well but does great in other aspects, i.e. PestPatrol. I am just curious why mpfeif101 said I should upgrade my adware, afterall its 6.0 isnt that the latest? I update it all the time. And also why he said to trash Pestpatrol, pc bug doctor, and system mechanic 5 pro. Im not saying I shouldnt or he is wrong im just wondering why he thinks they are useless. I will take your advice jonny and do a HijackThis scan and post it on here, honestly at this point Im pretty sure I still have a bug or two on my system (even though most of my tools above say im clean) One problem Im facing ever since I started to explorer and trial-n-error on software to get where I am now, my Internet Explorer doesnt seem to be the same since I first got my ISP. ( I know i know I should be using Firefox, IE sucks, But I use IE for work and I guess its just a habbit) Before when i first got my system and signed up for my ISP (Comcast Broadband Internet) My IE worked fine all the pages I went to loaded fine and nothing goofy happend. Well now, My homepage from my ISP (http://www.comcast.net) doesnt load the same. The taskbar says its "loaded" correctly but the images on the screen are not right, I called the ISP and they said everything is running fine, so after a dozen phone calls I was told to run my operating system cd-rom and use the repair untility in the install program and it will restore your orginal IE program, well the kicker is I dont have the cd-rom anymore. So worse comes to worse Ill bring to a local PC (A+ MCSE certified) shop and have them clean it and configure my IE for me. Ill go and run the HijackThis program now and post the results on my next post. Thanks for the responses and please let me know what you think because afterall im just a beginner and am learning as I go.

[dmlutchen]

Logfile of HijackThis v1.98.2
Scan saved at 3:50:50 PM, on 10/26/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\lotus\notes\ntmulti.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\srccode\SDCService\SDCService.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\support.com\bin\tgcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINNT\System32\igfxtray.exe
C:\WINNT\System32\hkcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Win Comm\WinComm.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Win Comm\WinLock.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\iolo\Common\Task Agent\Task_Agent.exe
C:\PROGRA~1\iolo\SYSTEM~1\PopupStopper.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\INTERN~1\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/chsi.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapp...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = corpproxy1.mmm.com:3128
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {E434D3C7-A673-4100-8140-79C020945017} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {53829F91-1B06-4DB9-B13E-812A986169F9} - (no file)
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\support.com\bin\tgcmd.exe" /server
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PestPatrol Control Center] c:\PROGRA~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] c:\PROGRA~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] c:\PROGRA~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [Win Comm] C:\Program Files\Win Comm\WinComm.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [WebRebates0] C:\Program Files\Web_Rebates\WebRebates0.exe
O4 - HKLM\..\RunOnce: [djtopr1150.exe] "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\djtopr1150.exe"
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [iolo Task Agent] C:\Program Files\iolo\Common\Task Agent\Task_Agent.exe
O4 - HKCU\..\Run: [System Mechanic Popup Stopper] "C:\PROGRA~1\iolo\SYSTEM~1\PopupStopper.exe"
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Broderbund\Broderbund Party and Crafts Creator\pmremind.exe
O4 - Global Startup: Forget Me Not.lnk = C:\Program Files\Broderbund\AG CreataCard\AGRemind.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\QUICKENW\bagent.exe
O4 - Global Startup: Quicken Startup.lnk = C:\QUICKENW\QWDLLS.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\Msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\Msjava.dll
O9 - Extra button: TREND MICRO HouseCall - {2B5EA4F8-620A-4A8B-B003-4C8C5EBEA826} - http://uk.trendmicro...usecall_pre.php (file missing)
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {67B50696-04BA-48ea-A697-28AA0EAA9C26} - (no file) (HKCU)
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg...t/c381/chat.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt1_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.game...ts/y/pote_x.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zone...ee/cm/ICSCM.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg...v45/yacscom.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.wea...Transporter.cab?
O16 - DPF: {33E54F7F-561C-49E6-929B-D7E76D3AFEB1} (Pool Control) - http://mirror.worldw...5/pool/pool.cab
O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://zone.msn.com/...bGameLoader.cab
O16 - DPF: {53D1658C-D028-49B6-9C26-2C41665718FE} (RequestX.SDC) - http://intra3.mmm.com/sdc/cabs/SDC.CAB
O16 - DPF: {610FB8B8-2427-4375-BCF9-2F7AE17173A6} (Snapfish File Upload ActiveX Control) - http://www.snapfish....pfishUpload.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {7ED7005B-4AF6-4CFF-9AE0-F243C4B8260F} (HouseCallButton.setup) - http://de.trendmicro...eCallButton.CAB
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://mirror.worldw...ed/wwlaunch.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {B160422D-0A48-11D4-BD9B-00A0C9B0AB7B} (Download Class) - http://expressit.bro...in/Download.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.c...utocomplete.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.s...ta/SymAData.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.s.../ActiveData.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcaf...397/mcfscan.cab
O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot....ownload/kdx.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab

[-=jonnyrotten=-]

This link is courtesy of Staff member "The_Other_Side" it has some interesting information on it you'll probably want to check out.

http://www.spywarewa...nti-spyware.htm

I think what Mpfeif is saying is too many spyware programs and/or antivirus programs running at the same time actually provide less protection because they confilict with eachother. I don't see anything wrong with keeping a few legit ones layin around that are extra, but don't have them running all the time. Just run adaware, spybot and spyware blaster. When you want to do a random scan with the others then start them up manually and scan. AdAware 6.0 is good, but AdAware Se Personal is better. It is also free. Click here http://www.lavasoftu...ftware/adaware/
to download it. You might want to uninstall version 6.0 first before installing the other version. I would save the installation file for 6.0 and see which one you like to use better. that way you don't have to download it again if you want to revert back to it.
I am working on your log right now.

-=jonnyrotten=-

[-=jonnyrotten=-]

First go into control panel, add/remove programs and uninstall any or all of these:
Viewpoint
Viewpoint Manager
Weather Bug
Webrebates
Win Comm
Windows Communicator
Gain
Gator
Gmt
Wild Tangent
Any search/toolbars you do not know or trust eg: mysearchbar

Next clear your temporary files.
Go to "My computer" right click your hard drive (ususlly C:\) click properties, then click the "disk cleanup" button. Make sure all folders with Temp/Temporary are selected and clean them up.

You may wish to print out a copy of these instructions to follow while you complete this procedure.

Please save Hijack This in a permanent folder (i.e. C:\HJT). This ensures backups are saved and accessible.

Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.

O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: (no name) - {E434D3C7-A673-4100-8140-79C020945017} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - (no file)
O3 - Toolbar: (no name) - {53829F91-1B06-4DB9-B13E-812A986169F9} - (no file)
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O4 - HKLM\..\Run: [Win Comm] C:\Program Files\Win Comm\WinComm.exe
O4 - HKLM\..\Run: [WebRebates0] C:\Program Files\Web_Rebates\WebRebates0.exe
O4 - HKLM\..\RunOnce: [djtopr1150.exe] "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\djtopr1150.exe"
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {67B50696-04BA-48ea-A697-28AA0EAA9C26} - (no file) (HKCU)
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://wdownload.wea...Transporter.cab?

Please reboot into safe mode - How do I boot into "Safe" mode?.
Be sure you're able to view hidden files, and remove the following files in bold (if found): Some of them may be gone due to the uninstallation of programs and scanning.

C:\Program Files\Win Comm
C:\Program Files\AWS
C:\Program Files\Web_Rebates
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\djtopr1150.exe
C:\Program Files\Viewpoint

Reboot normally and post fresh new hijack this log.

-=jonnyrotten=-

[dmlutchen]

Jonny,

Ok here is what I have down so far, I uninstalled Ad-Aware 6.0 and downloaded Ad-Aware SE Personal with all the new add- ons and updates, then I went through and checked all the boxes you said for me to check in the HijackThis program and removed those. But when I tried to goto
My Computer>C Drive>Properties>Disk Cleanup, and ran the Disk Cleanup Utility, It would run and say:

_______________________________________________________________

Disk Cleanup is calculating how much space you will be able to free on (C:),

Calculating...
_______
***This is where the (little blue squares) task indicator bar is*** | Cancel |

Scanning:

________________________________________________________________


Thats what the message screen looks like. Now I started it like at 5pm tonight my time. And when I got back to it 2 1/2 hours later now at 7:27pm my time, It looks the same, like its stuck or something. I would of thought after 2 1/2 hours the task indicator bar would atleast be moving forward and would be scanning. So for my operating system (Windows 2000) if you push ctrl-alt-del once at the same time you can bring up the task manager and see whats currently running and if its responding or not. So I did that and it says the Disk Cleanup utility is "running" and is responding but it doesnt look like it so I really dont know how I can run it. But I was able to do everything else you said, I didnt run it in safe mode yet cause i didnt have enough time, but now that im back ill do that now. Thanks again for the help.

[-=jonnyrotten=-]

Ok, I don't know why it would freeze like that, but it only takes like 30 seconds for me, so I don't think 2 1/2 hrs it right. Try using it again in safe mode.

-=jonnyrotten=-

[dmlutchen]

I just tried logging into Safe Mode and using the Disk Cleanup utility, unforatantly, atleast with W2K, when you log into Safe Mode and right click the C: drive the OS doesnt provide a Disk Cleanup option, its not even there. You can right click the drive in Safe Mode but when it comes up it just gives the pie chart and info about the drive like normal but doesnt allow any options like Disk Cleanup or degragmenting the drive like it normally would in normal mode. I think I might need to bring it in and get it looked at, I dunno at this point. I have followed everything everyone has been telling me on this message board and others to a T. And most of the advice has worked perfect. So thanks for the help. Worse comes to worse ill bring it in to a local, respected A+, MSCE certified computer service / sales shop @ http://www.nanosys1.com There they can do a diagnostic check and maybe restore some stuff and clean it for me.