Computer Malware problem - I think.

rizla01

Hi all.

Can someone advise me re my machine.

I have spent an age trying fruitlessly to rectify the problems that I am getting and in desparation, I am having to trouble you lot again. apologies for that but If someone could help me to sort my problem there'll be a pint in it if you are ever down this way.:)

1st here is the Hijackthis list.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:56:11, on 13/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\WINDOWS\system32\hkcmd.exe
G:\Ashampoo FireWall\FireWall.exe
C:\Program Files\Prevx2\PXConsole.exe
G:\Program Files\aawservice.exe
C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
I:\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Prevx2\PXAgent.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
G:\7-Zip\7zFM.exe
C:\DOCUME~1\Terry\LOCALS~1\Temp\7zO9.tmp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://by118w.bay118.mail.live.com/mail/mail.aspx?wa=wsignin1.0&gs=true
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6061214
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - !!02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: AcroIEHlprObj Class - !!06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: McBrwHelper Class - !!227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: BitComet ClickCapture - !!39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - K:\BitComet\tools\BitCometBHO_1.1.9.24.dll
O2 - BHO: (no name) - !!53707962-6F74-2D53-2644-206D7942484F} - I:\SPYBOT~1\SDHelper.dll
O2 - BHO: Malicious Scripts Scanner - !!55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: AskBar BHO - !!5A074B21-F830-49de-A31B-5BB9D7F6B407} - C:\Program Files\AskBar\bar\bin\askBar1.dll
O2 - BHO: DriveLetterAccess - !!5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: (no name) - !!724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - !!761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - !!7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - !!9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O3 - Toolbar: &Google - !!2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &RoboForm - !!724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Ask Toolbar - !!5A074B29-F830-49de-A31B-5BB9D7F6B407} - C:\Program Files\AskBar\bar\bin\askBar1.dll
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Ashampoo FireWall] "G:\Ashampoo FireWall\FireWall.exe" -TRAY
O4 - HKLM\..\Run: [PrevxOne] "C:\Program Files\Prevx2\PXConsole.exe"
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] I:\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://K:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://K:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://K:\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Save Image to Folder - res://C:\Program Files\AskBar\bar\bin\askBar.dll/saveimagetofolder.html
O8 - Extra context menu item: &Save Image to MyStuff - res://C:\Program Files\AskBar\bar\bin\askBar.dll/saveimages.html
O8 - Extra context menu item: &Save Link to Folder - res://C:\Program Files\AskBar\bar\bin\askBar.dll/saveltof.html
O8 - Extra context menu item: &Save Link to MyStuff - res://C:\Program Files\AskBar\bar\bin\askBar.dll/savelink.html
O8 - Extra context menu item: &Save Page to Folder... - res://C:\Program Files\AskBar\bar\bin\askBar.dll/savepagetofolder.html
O8 - Extra context menu item: &Save this Page to MyStuff - res://C:\Program Files\AskBar\bar\bin\askBar.dll/savewebpage.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Customize Menu - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: SWF Capture tool - I:\Flash Decompiler\iebt.html
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: (no name) - !!08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - !!08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - !!2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - !!2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - !!2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Fill Forms - !!320AF880-6646-11D3-ABEE-C5DBF3571F46} - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - !!320AF880-6646-11D3-ABEE-C5DBF3571F46} - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - !!320AF880-6646-11D3-ABEE-C5DBF3571F49} - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - !!320AF880-6646-11D3-ABEE-C5DBF3571F49} - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - !!39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - !!39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\PROGRA~1\mcafee\SPAMKI~1\mcapfbho.dll
O9 - Extra button: BitComet Search - !!461CC20B-FB6E-4f16-8FE8-C29359DB100E} - K:\BitComet\tools\BitCometBHO_1.1.9.24.dll
O9 - Extra button: RoboForm - !!724d43aa-0d85-11d4-9908-00400523e39a} - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - !!724d43aa-0d85-11d4-9908-00400523e39a} - [URL]file://C:\Program[/URL] Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Flash Decompiler SWF Capture tool - !!86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - I:\Flash Decompiler\iebt.dll (HKCU)
O9 - Extra 'Tools' menuitem: Flash Decompiler SWF Capture tool menu - !!86B4FC19-8FA4-4FD3-B243-9AEDB42FA2D5} - I:\Flash Decompiler\iebt.dll (HKCU)
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: !!0A43D7AC-D6C1-4622-B309-BF975F427C0E} (first direct internet banking plus digital safe) - https://internetbankingplus2.firstdirect.com/ibplus/frontdoorFD.cab
O16 - DPF: !!0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: !!17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: !!39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.2.100.cab
O16 - DPF: !!3B5E9B23-7537-4601-A9E8-FA0D956DEA16} (csauie1 Control) - http://www.couponreport.net/ftp/v3123/csauie1.cab
O16 - DPF: !!4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by118fd.bay118.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: !!6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179055475578
O16 - DPF: !!9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab
O16 - DPF: !!9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\!!8F9C3009-E8F3-4B38-871C-07675FE0E6F9}: NameServer = 192.168.1.1,4.2.2.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - G:\Skype Recorder\Skype4COM.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - G:\Program Files\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: PREVXAgent - Prevx - C:\Program Files\Prevx2\PXAgent.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
--
End of file - 13879 bytes

Now this is what I get from another prog that I have (Glary utils)




As you can see, all is not well.

I also ran Panda and it told me I had 4 infections and on Malware despite having PrevX, AVG, Ashampoo & SpyBot and Ad-Aware.

do these provide any good clues and what next.

Am I best to go through the process at the beginning of the forum re:Spyware/Malware first and THEN come back to you guys?

Also SHOULD I USE HIJACK THIS TO REMOVE ALL TRACE OF MACAFFEE.
Came with the Dell but I cannot get rid of it all.

Thanks

Tallymanjohn

I'm not an expert but a couple of pointers:

you can download & use the tool from the following link to remove the remains of McAfee -
[FONT=Helvetica,Arial,sans-serif]http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe[/FONT]

I can't actually see too much wrong with your HJT log - there's a lot of stuff associated with AskBar - you may find an uninstall option in Control Panel to remove this.

I don't know a lot about the AShampoo firewall but it seems to have installed in the root directory rather than in ProgramFiles, which would be more normal. - may want to check on that.

The damaged Java files don't surprise me - you may need to download & reinstall Java, also there was a problem with Windows Defender a few months ago that required reinstallation on some systems, so it may be worth downloading & installing the latest version. do a Google for both to get the latest versions.

That's about it from me, I'm sure you'll get more advice from others.

Browntoa

I take it you downloaded taskbar ??

is this it ??

http://www.askbar.com/

Browntoa

you need to install hijackthis in its own directory and then fix

O2 - BHO: (no name) - AutorunsDisabled - (no file)

Tallymanjohn

Just out of interest, what problems are you getting?

rizla01

Hi Tallymanjohn. Fantastic prog for Macafee removal. Only prob is spybot stopped the remval of the macaffee update. How do I overcoe this?
spybot says that I have chosen to protect it from being erased but I'm pretty sure I didn't. Probably quicker to uninstall spybot - run prog again to clear and then re-install spybot. Or should I run the macaffee erase prog in safe mode?

Problems I am getting.
Hmm. where to start.
Takes an age to boot up but I have a lot of security on start-up but it takes a good 10 Mins.
IE locks up. Sometimes closes for no good reason. sometimes no internet (Even had the red light come on recently but that MAy be an Exchange problem, I guess).

Programs run OK but it's mainly the internet where the problems are.

Have run System Mechanic Pro and that gives a clean bill of health.
Ad-Aware ALWAYS has a couple of files that it clears but the keep returning. Not considered serious risks tho.

Many a time it'll crash and need a re-boot or sometimes I just need to close a prog using Task Manager.
I guess that for a powerful system, I would have expected more. It used to be a lot faster.


Hi, Browntoa, long time no chat to. Hope you are well.

No I didn't install ASKBAR. I asume that this is 'Ask Toolbar for Internet Explorer - deleted now anyway.

Placed Hijackthis into folder and then Removed O2 - BHO: (no name) - AutorunsDisabled - (no file)

Thanks for that.

Point of interest, this is what I am running.
| This report is created by ASTRA32 v.1.54 . Oct-13-2007 17:59:10 |
+

---

+
DD8SDN2J
Registered To: [Private Data]
License Type: [Private Data]
+

---

+
| System Summary |
+

---

+
Processor Summary
Processor: Intel Pentium D 945 3400 MHz
CPU Clock: 3391.6 MHz (17.0 x 199.5 MHz QDR)
Level 1 Cache: 2 x 16kB+12k uOp (data+instr.)
Level 2 Cache: 2 x 2048 kB
Motherboard Summary
System Name: Dell Inc. Dell DM061
Motherboard OEM: Dell Computer Corporation
Board Model: Dell Inc. 0WG864
BIOS Version: Phoenix ROM BIOS PLUS Version 1.10 2.3.2 for Dell
Chipset Vendor: Intel Corporation
Chipset: P965/G965 Memory Controller Hub
Southbridge Vendor: Intel Corporation
Southbridge: 82801HH (ICH8DH) LPC Interface Controller
DMI/SMBIOS Version: 2.3
Memory Summary
Memory Size: 2086752 kB (2037.84 MB)
System Memory: 2038 MB
1st Memory Module: 512MB DDR2-666 SDRAM (Samsung)
2nd Memory Module: 512MB DDR2-666 SDRAM (Samsung)
3rd Memory Module: 512MB DDR2-666 SDRAM (Samsung)
4th Memory Module: 512MB DDR2-666 SDRAM (Samsung)
Storage Summary
1st HDD Model: WDC WD2500JS-75NCB3
1st HDD Size: 238418 MB (232.83 GB)
2nd HDD Model: Canon MP Memory Card
2nd HDD Size: 122 MB (0.12 GB)
1st CD/DVD Model: TSSTcorp DVD+-RW TS-H553A
1st CD/DVD Speed: 48x (Write: 48x)
Video Summary
Monitor Vendor: Dell Computer Corp.
Monitor Model: Dell E197FP
Monitor Vendor: Dell Computer Corp.
Monitor Model: Dell E197FP
Monitor Vendor: Dell Computer Corp.
Monitor Model: Dell E197FP
Video Chip Vendor: Intel Corporation
Video Chip: G965 Integrated Graphics Controller
Video Memory: 256 MB
Sound Summary
Sound Chip Vendor: Intel Corporation
Sound Chip: 82801H (ICH8 Family) HD Audio Controller
Printer Summary
Printer Vendor: Canon
Printer Model: Unknown
Operating System Summary
Operating System: MS Windows XP Home Edition (5.1.2600 Service Pack 2)
Windows Folder: C:\WINDOWS
Network Summary
Network Name: DD8SDN2J
Adapter Vendor: Intel Corporation
Adapter Name: 82562V 10/100 Network Connection
Interface Description: Intel(R) 82562V 10/100 Network Connection
MAC Address: [Private Data]
Ports Summary
LPT Ports: None
COM Ports: None

[End of Report]


I don't know if that's of any help.

Anyway, what do I do next, please.

Chippy_Minton

rizla01 wrote: »

Only prob is spybot stopped the remval of the macaffee update. How do I overcoe this?
spybot says that I have chosen to protect it from being erased but I'm pretty sure I didn't.

This is probably Spybot's Tea Timer preventing it being changed. You can just disable the Tea Timer - see How to enable/disable Spybot Tea timer.

Reluctant_spender

Switch off teatimer in spybot as that may well be stopping things.

Also I would remove all out dated java programs from add remove programs and finally post a new hi jack log

rizla01

Hi Again,

Just D/l'd the progs listed at beginning of Techy Forum, went into Safe mode with the intention of runing the first prog, having disabled sys Restore and then was informed that the Administrater prevents the running of this program.

I did no such thing and I am the Administrater,.??


How do I get round this one, chaps (Or chapesses, so as not to offend:))

rizla01

Reluctant_spender wrote: »

Switch off teatimer in spybot as that may well be stopping things.

Also I would remove all out dated java programs from add remove programs and finally post a new hi jack log

How do I know which Java apps are outdated?

Actually, how do I know which are JAVA progs?

Browntoa

this is the latest version

http://www.java.com/en/download/index.jsp