From: AWA on
Hello. Recently it appears maybe my Internet Explorer 7 Browser has been
having issues - or maybe it is my computer and something within. In any case,
I am confused.

Funky things are happening when I go to websites now - for example,
www.littletikes.com - the page completes loading, but nothing shows up on my
screen for a good 10-15 seconds. Also, at that site, I cannot "save target
as" say on a .pdf document - or even read the document in my browser. What
happens is my browser simply disappears. I asked a friend to go to that site
and download the .pdf file for me (to see if it was the site or not) and he
had no problems. I am having problems at other websites also - strange errors
and such.

It is really bothering me because I am very knowledgeable in computers,
etc., but I can not figure out if it is a BHO, or what. I started my IE
without add ons, and the .pdf file DID load inside the browser, but not
without errors. I still could not save target as though.

In any case, what I really want is someone who can actually read and
understand my hijackthis log file and tell me exactly what I should remove,
if anything. Whenever there is a "missing file" I would think that I should
delete that entry, no? Also, I can not make heads or tails of some of the
other stuff I am seeing in there either - maybe there is SOMEONE out there
that can shed some light for me?

I am running WindowsXP Media Edition SP2, Sony Vaio Desktop, 2GB RAM, IE7

I have already cleared out all the usuals - cache, temp folders, prefetch.
Even tried removing BHO's one by one to diagnose if there was a bad add-on,
etc.

Please view my log and let me know what you think???!!??
Also, why do I have TWO entries of HiJackThis in my add/remove programs? If
I uninstall 1 of them, I am left with 0 of them. If I reinstall, I get 2
entries back again. WEIRD, eh?

Also, I have run 2 spyware scans (using 2 different programs) and ran a full
system scan with Norton (all updated DATS) - Nothing! Zero!

I'll shut-up now - here is my log:

Logfile of HijackThis v1.99.1
Scan saved at 11:21:31 PM, on 12/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\AOL\1141109440\ee\AOLSoftware.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Discover deskshop Browser Helper Object -
{8DB3D69D-DA5E-4165-B781-72A761790672} - C:\WINDOWS\system32\BhoDshop.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut]
HDAudPropShortcut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software
Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [VAIO Update 3] "C:\Program Files\Sony\VAIO Update
3\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common
Files\AOL\1141109440\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common
Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe"
/a /m "C:\Program Files\Common Files\Symantec
Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US
ee://aol/imApp
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program
Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.1\AOL.EXE" -b
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program
Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Transfer by Image Converter 2 - C:\Program
Files\Sony\Image Converter 2\menu.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} -
C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Secure Online Account Numbers -
{F74E75A5-96BF-40ef-A1C8-88EAEBB82AB6} - C:\Program Files\Secure Online
Account Numbers\SOAN.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) -
http://symantec.atgnow.com/sdccommon...ad/tgctlsi.cab
O16 - DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} (VaioInfo.CMClass) -
http://esupport.sony.com/VaioInfo.CAB
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection
Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) -
http://www.ipix.com/download/ipixx.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) -
http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {85BA505F-FD01-4A91-836C-F7D502E89C9A} (Image Uploader Control) -
http://www.evite.com/html/imageUploa...eUploader4.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload
Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {A1337CC4-FF8E-11D1-9C48-00A0CC20E0D2} -
http://www.therealyellowpageslive.net/live/ezinit.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in)
- http://ak.imgag.com/imgag/cp/install/Crusher.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E9A7F56F-C40F-4928-8C6F-7A72F2A25222} (AxRUploadControl Object)
- http://www.imagestation.com/common/c...cab?v=1,0,0,37
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program
Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -
C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown
owner - C:\Program Files\Adobe\Photoshop Elements
3.0\PhotoshopElementsFileAgent.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC -
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation -
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation -
C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner -
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file
missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner -
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file
missing)
O23 - Service: .NET Runtime Optimization Service v2.0.50727_X86
(clr_optimization_v2.0.50727_32) - Unknown owner -
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown
owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h
ccCommon (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel
32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO
Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter
2\IcVzMon.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec
Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation -
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown
owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h
ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program
Files\Common Files\Symantec
Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program
Files\Common Files\Symantec
Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common
Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program
Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common
Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common
Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common
Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SonicStageMonitoring - Sony Corporation - C:\Program
Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program
Files\Sony\Sony TV Tuner Library\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program
Files\Sony\Sony TV Tuner Library\RM_SV.exe
O23 - Service: Sony TVTA Manager - Sony Corporation - C:\Program
Files\Sony\Sony TV Tuner Library\SMceMan.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program
Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation -
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common
Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation
- C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony
Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Media Integrated Server
(VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation -
C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP)
(VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program
Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe"
/Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony
Corporation\VAIO Media Platform\2.0"
/RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP)
(VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program
Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway)
- Unknown owner - C:\Program Files\Sony\VAIO Media Integrated
Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway
/RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0"
/RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway
Server (file missing)
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony
Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation -
C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony
Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony
Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzFw.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America
Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Thanks to EVERYONE who reads and replies!
From: PA Bear on
Asked/Answered in WinXP General. If you must make identical posts to
multiple newsgroups, please cross-post one (1) message to all of them.
Thank you.

Multiposting vs Crossposting:
http://www.blakjak.demon.co.uk/mul_crss.htm

Those with IE7-specific questions or comments are asked to post to and seek
support in this newsgroup: microsoft.public.internetexplorer.general

On the web:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.internetexplorer.general

In your newsreader:
news://msnews.microsoft.com/microsoft.public.internetexplorer.general
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L.ORG http://66.39.69.143/

AWA wrote:
> Hello. Recently it appears maybe my Internet Explorer 7 Browser has been
> having issues - or maybe it is my computer and something within. In any
> case, I am confused.
>
> Funky things are happening when I go to websites now - for example,
> www.littletikes.com - the page completes loading, but nothing shows up on
> my
> screen for a good 10-15 seconds. Also, at that site, I cannot "save target
> as" say on a .pdf document - or even read the document in my browser. What
> happens is my browser simply disappears. I asked a friend to go to that
> site
> and download the .pdf file for me (to see if it was the site or not) and
> he
> had no problems. I am having problems at other websites also - strange
> errors and such.
>
> It is really bothering me because I am very knowledgeable in computers,
> etc., but I can not figure out if it is a BHO, or what. I started my IE
> without add ons, and the .pdf file DID load inside the browser, but not
> without errors. I still could not save target as though.
>
> In any case, what I really want is someone who can actually read and
> understand my hijackthis log file and tell me exactly what I should
> remove,
> if anything. Whenever there is a "missing file" I would think that I
> should
> delete that entry, no? Also, I can not make heads or tails of some of the
> other stuff I am seeing in there either - maybe there is SOMEONE out there
> that can shed some light for me?
>
> I am running WindowsXP Media Edition SP2, Sony Vaio Desktop, 2GB RAM, IE7
>
> I have already cleared out all the usuals - cache, temp folders, prefetch.
> Even tried removing BHO's one by one to diagnose if there was a bad
> add-on,
> etc.
>
> Please view my log and let me know what you think???!!??
> Also, why do I have TWO entries of HiJackThis in my add/remove programs?
> If
> I uninstall 1 of them, I am left with 0 of them. If I reinstall, I get 2
> entries back again. WEIRD, eh?
>
> Also, I have run 2 spyware scans (using 2 different programs) and ran a
> full
> system scan with Norton (all updated DATS) - Nothing! Zero!
>
> I'll shut-up now - here is my log:
>
> Logfile of HijackThis v1.99.1
> Scan saved at 11:21:31 PM, on 12/6/2007
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16544)
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
> C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
> C:\WINDOWS\system32\spoolsv.exe
> C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
> C:\Program Files\Adobe\Photoshop Elements
> 3.0\PhotoshopElementsFileAgent.exe
> C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
> C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
> C:\WINDOWS\eHome\ehRecvr.exe
> C:\WINDOWS\eHome\ehSched.exe
> C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
> C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
> C:\WINDOWS\system32\HPZipm12.exe
> C:\Program Files\Common Files\Sony
> Shared\WMPlugIn\SonicStageMonitoring.exe
> C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
> C:\WINDOWS\system32\svchost.exe
> C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VCSW\VCSW.exe
> C:\WINDOWS\wanmpsvc.exe
> C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VzCdb\VzCdbSvc.exe
> C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VzCdb\VzFw.exe
> C:\WINDOWS\system32\dllhost.exe
> C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
> C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\AGRSMMSG.exe
> C:\WINDOWS\SOUNDMAN.EXE
> C:\WINDOWS\system32\ctfmon.exe
> C:\WINDOWS\system32\hkcmd.exe
> C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
> C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
> C:\Program Files\Common Files\Symantec Shared\ccApp.exe
> C:\Program Files\Common Files\AOL\1141109440\ee\AOLSoftware.exe
> C:\Program Files\AIM6\aim6.exe
> C:\Program Files\MSN Messenger\MsnMsgr.Exe
> C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
> C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
> C:\Program Files\AIM6\aolsoftware.exe
> C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
> C:\Program Files\Hijackthis\HijackThis.exe
> C:\Program Files\Internet Explorer\iexplore.exe
>
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
> http://go.microsoft.com/fwlink/?LinkId=54896
> O2 - BHO: Adobe PDF Reader Link Helper -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common
> Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
> O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
> C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
> O2 - BHO: Discover deskshop Browser Helper Object -
> {8DB3D69D-DA5E-4165-B781-72A761790672} - C:\WINDOWS\system32\BhoDshop.dll
> O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
> O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut]
> HDAudPropShortcut.exe
> O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
> O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
> O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
> O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
> O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software
> Update\HPWuSchd2.exe
> O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
> Files\Java\jre1.6.0_03\bin\jusched.exe"
> O4 - HKLM\..\Run: [VAIO Update 3] "C:\Program Files\Sony\VAIO Update
> 3\VAIOUpdt.exe" /Stationary
> O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
> Shared\ccApp.exe"
> O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton
> AntiVirus\osCheck.exe"
> O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common
> Files\AOL\1141109440\ee\AOLSoftware.exe
> O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common
> Files\Symantec
> Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe"
> /a /m "C:\Program Files\Common Files\Symantec
> Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US
> ee://aol/imApp
> O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
> /background
> O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program
> Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
> O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.1\AOL.EXE" -b
> O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
> Files\HP\Digital Imaging\bin\hpqtra08.exe
> O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program
> Files\HP\Digital Imaging\bin\hpqthb08.exe
> O8 - Extra context menu item: Transfer by Image Converter 2 - C:\Program
> Files\Sony\Image Converter 2\menu.htm
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
> O9 - Extra 'Tools' menuitem: Sun Java Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> Files\Java\jre1.6.0_03\bin\ssv.dll
> O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
> C:\WINDOWS\system32\Shdocvw.dll
> O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} -
> C:\WINDOWS\system32\shdocvw.dll
> O9 - Extra button: Secure Online Account Numbers -
> {F74E75A5-96BF-40ef-A1C8-88EAEBB82AB6} - C:\Program Files\Secure Online
> Account Numbers\SOAN.exe
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> C:\Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger -
> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
> Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL]
> International*
> O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
> O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft
> SmartIssue) -
> http://symantec.atgnow.com/sdccommon...ad/tgctlsi.cab
> O16 - DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} (VaioInfo.CMClass) -
> http://esupport.sony.com/VaioInfo.CAB
> O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data
> Collection
> Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
> O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) -
> http://www.ipix.com/download/ipixx.cab
> O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) -
> http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
> O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility
> Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
> O16 - DPF: {85BA505F-FD01-4A91-836C-F7D502E89C9A} (Image Uploader
> Control) -
> http://www.evite.com/html/imageUploa...eUploader4.cab
> O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture
> Upload
> Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
> O16 - DPF: {A1337CC4-FF8E-11D1-9C48-00A0CC20E0D2} -
> http://www.therealyellowpageslive.net/live/ezinit.cab
> O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox
> Plug-in)
> - http://ak.imgag.com/imgag/cp/install/Crusher.cab
> O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
> Object) -
> http://fpdownload2.macromedia.com/ge...sh/swflash.cab
> O16 - DPF: {E9A7F56F-C40F-4928-8C6F-7A72F2A25222} (AxRUploadControl
> Object)
> - http://www.imagestation.com/common/c...cab?v=1,0,0,37
> O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
> C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
> O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
> C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
> O20 - Winlogon Notify: !SASWinLogon - C:\Program
> Files\SUPERAntiSpyware\SASWINLO.dll
> O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
> O20 - Winlogon Notify: PCANotify - C:\WINDOWS\SYSTEM32\PCANotify.dll
> O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
> O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -
> C:\WINDOWS\system32\WPDShServiceObj.dll
> O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) -
> Unknown
> owner - C:\Program Files\Adobe\Photoshop Elements
> 3.0\PhotoshopElementsFileAgent.exe
> O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC -
> C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
> O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
> C:\WINDOWS\system32\Ati2evxx.exe
> O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation -
> C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
> O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation -
> C:\Program Files\Symantec\pcAnywhere\awhost32.exe
> O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner -
> C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
> (file missing)
> O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner -
> C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
> (file missing)
> O23 - Service: .NET Runtime Optimization Service v2.0.50727_X86
> (clr_optimization_v2.0.50727_32) - Unknown owner -
> C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (file missing)
> O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown
> owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h
> ccCommon (file missing)
> O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
> Corporation - C:\Program Files\Common
> Files\InstallShield\Driver\1050\Intel
> 32\IDriverT.exe
> O23 - Service: Image Converter video recording monitor for VAIO
> Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter
> 2\IcVzMon.exe
> O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec
> Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
> O23 - Service: LiveUpdate - Symantec Corporation -
> C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
> O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) -
> Unknown
> owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h
> ccCommon (file missing)
> O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program
> Files\Common Files\Symantec
> Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m
> "C:\Program
> Files\Common Files\Symantec
> Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file
> missing)
> O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common
> Files\LogiShrd\LVCOMSER\LVComSer.exe
> O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program
> Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
> O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common
> Files\LogiShrd\SrvLnch\SrvLnch.exe
> O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common
> Files\Sony Shared\AVLib\MSCSPTISRV.exe
> O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common
> Files\Sony Shared\AVLib\PACSPTISVR.exe
> O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
> O23 - Service: SonicStageMonitoring - Sony Corporation - C:\Program
> Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
> O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program
> Files\Sony\Sony TV Tuner Library\halsv.exe
> O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program
> Files\Sony\Sony TV Tuner Library\RM_SV.exe
> O23 - Service: Sony TVTA Manager - Sony Corporation - C:\Program
> Files\Sony\Sony TV Tuner Library\SMceMan.exe
> O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program
> Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
> O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation -
> C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
> O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common
> Files\Symantec Shared\CCPD-LC\symlcsvc.exe
> O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec
> Corporation
> - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
> O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony
> Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
> O23 - Service: VAIO Media Integrated Server
> (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation -
> C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
> O23 - Service: VAIO Media Integrated Server (HTTP)
> (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program
> Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe"
> /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony
> Corporation\VAIO Media Platform\2.0"
> /RegExt="Applications\IntegratedServer\HTTP (file missing)
> O23 - Service: VAIO Media Integrated Server (UPnP)
> (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program
> Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
> O23 - Service: VAIO Media Gateway Server
> (VAIOMediaPlatform-Mobile-Gateway)
> - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated
> Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway
> /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0"
> /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway
> Server (file missing)
> O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony
> Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VCSW\VCSW.exe
> O23 - Service: Viewpoint Manager Service - Viewpoint Corporation -
> C:\Program Files\Viewpoint\Common\ViewpointService.exe
> O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony
> Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VzCdb\VzCdbSvc.exe
> O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony
> Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment
> Platform\VzCdb\VzFw.exe
> O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America
> Online, Inc. - C:\WINDOWS\wanmpsvc.exe
>
> Thanks to EVERYONE who reads and replies!