Inde

I play Battlefield2. An online First person shooter. My ISP is Comcast. Whenever I join a server to play I get packet loss and end up getting disconnected from the server. This usually only happens during the daytime. The hours from maybe 10am to 6pm. The rest of the time it is fine. I know its packet loss because I go into the command prompt and type in "ping www.comcast.net -t". Then I hop into the game and soon after I am in I get disconnected. I'll alt+tab out and see that I had about 3 or 4 lines of packet loss. I have called Comcast up multiple times and they have sent a tech over twice and nothing has been fixed. Is this a problem on my end? I run a Linksys wireless router. I have tried hooking the modem straight up to my comp but I still get the same results so I'm thinking the router isn't the problem. I have my firewall off and my AVG virus detector off while I play. I have also virus scanned and spyware scanned. What is causing this? Why only during the daytime? Any ideas? Thank you for looking.

I was able to delete it. Before all I did was restart my computer and that didn't work. This time I had to completely shut it down and then turn it back on. It fixed the problem. I'm not sure why it didn't work before. Thanks for the help guys.

I thought that might have been a solution so I restarted but it still says the same thing.

I tried to download the new BF2 patch (for a PC game). It only downloaded a tiny portion of the file. Now I am trying to delete it and I get the error message: "Error Deleting File or Folder Cannot delte bf2_patch_103: It is being used by another person or program. Close any programs that might be using the file and try again." Nothing is running. Especially anything running that could be using that file. I opened up my task manager and closed all programs under my user name. Still doesn't work. I have to be able to delete this file in order to get the whole new file to download. Or else it thinks its still there and won't download the entire file. Anyone know how to get rid of this thing?

Yes it is a linksys. I was assuming that hardwiring will fix the problem of losing signal but I have no money and can't afford to buy anything. Was just wondering if I could fix it somehow. You know, seeing as how I already have some equipment that is capable of doing the job. At least I hope it is because I paid for it. And I don't understand how it can lose connection when the blasted thing is 2 feet from it.

I have a wireless router. The computer that the router is sending signals to is in the same room, right next to it. I have been playing Battlefield2 (A video game) and I am disconnected from the servers I am playing on quite frequently. But I'll be able to jump right back into the same server seconds later. But only to find myself getting disconnected again after a few minutes. Happens on multiple servers. Sometimes other internet related programs will go offline including x-fire (instant messaging prog) and Teamspeak (VOIP prog). But all I have to do is hit reconnect and it reconnects usually w/o a problem. Sometimes when one or more of these things go down, a few seconds later the message pops up on my task bar (or whatever the one on the bottom right is called) saying "Your wireless connection is now connected; Connection Excellent" or something like that. Is this a problem with my internet going in and out? All my modem lights are always on. Or is it a problem with my router? I try and reset it often by unplugging it and turning back on. What is the deal? Thank you

When using Firefox. An error pops up saying "426 Data connection closed".

I'm trying to download the BF2 demo through various sites and I just can't do it. In Firefox it says "starting" but then doesn't ever get anywhere. In IE it goes to like 80kb and then stops. I've tried through ftp sites using browsers and ftp programs and that doesn't work. At one point it started to download and got to 27% then stopped. I called my ISP and they said they don't block anything thing to FTP's nor do they see any problems with my connection. Could my router be the problem? I am on a wireless router. I tried downloading the files on the computer that connects directly to the hardline but it does the same thing. Anybody know how to fix this?

Woot! I fixed it! Start > Control Panel > Display > Desktop tab > Customize Desktop Button > Web tab > uncheck security v2 Don't know how I figured that out but I did. Thank you guys for all of your help and making my brain force itself to find a solution. Much

No, I know how to change my desktop under normal conditions but since its been hijacked I dont know how to change it. I attached the picture that pops up when I right click and choose properties

I don't know how to change it. I'm afraid I'm gonna mess things up.

I used to goto http://music.yahoo.com/ and listen to music. It pops up a browser and you can stream music. Ever since I switched to Firefox I can't play music. The window pops up like normal but now it says... Error Sorry, we do not support Netscape on the Windows platform. Error Code: 25 - 0 Is there a plugin or something I can use to listen to music on FF?

Google is working properly now....kind of. When i goto google.com and try to search it says "Not Implemented. The server is unable to process your request." But the google search bar on my Firefox browser is working fine now. How do I fix www.google.com? My Gmail is also working correctly now. My Desktop is still hijacked though. I said before that my desktop is now an html file called "file://C:WINNTdesktop.html". I clicked on view source and this is what it says. Does this help in solving the problem? <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <!---- ***** This file is automatically generated by Microsoft Windows ***** --------><HTML><HEAD> <META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD> <BODY bgColor=#c0c0c0> <DIV style="BACKGROUND: url(file:///C:/WINNT/Firefox%20Wallpaper.bmp) no-repeat 50% 50%; LEFT: 0px; WIDTH: 1152px; POSITION: absolute; TOP: 0px; HEIGHT: 864px"></DIV><IFRAME id=1 style="Z-INDEX: 1002; BACKGROUND: none transparent scroll repeat 0% 0%; LEFT: 0px; WIDTH: 1152px; POSITION: absolute; TOP: 1px; HEIGHT: 833px" name=DeskMovrW marginWidth=0 marginHeight=0 src="file:///C:/WINNT/desktop.html" frameBorder=0 scrolling=no subscribed_url="" resizeable="粶搀ľඌ"> </IFRAME> <OBJECT id=ActiveDesktopMover style="LEFT: 0px; VISIBILITY: hidden; WIDTH: 0px; POSITION: absolute; TOP: 0px; HEIGHT: 0px; container: positioned; zIndex: 5" classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT> <OBJECT id=ActiveDesktopMoverW style="Z-INDEX: 1001; LEFT: -1px; VISIBILITY: hidden; WIDTH: 1154px; POSITION: absolute; TOP: 0px; HEIGHT: 835px; container: positioned" classid=clsid:72267F6A-A6F9-11D0-BC94-00C04FB67863></OBJECT>&nbsp; </BODY></HTML> Also, is it safe to get back on IE?

Thanks for all your help so far guys. I deleted all my host files. I also deleted those Hijack files that you said I should. Here is the new log for hijackthis Logfile of HijackThis v1.99.1 Scan saved at 3:49:38 PM, on 5/31/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:WINNTSystem32smss.exe C:WINNTsystem32winlogon.exe C:WINNTsystem32services.exe C:WINNTsystem32lsass.exe C:WINNTsystem32Ati2evxx.exe C:WINNTsystem32svchost.exe C:WINNTSystem32svchost.exe C:WINNTsystem32spoolsv.exe C:WINNTsystem32Ati2evxx.exe C:WINNTExplorer.EXE C:Program FilesRoxioEasy CD Creator 5DirectCDDirectCD.exe C:Program FilesCommon FilesMicrosoft SharedWorks SharedWkUFind.exe C:Program FilesJavaj2re1.4.2_05binjusched.exe C:Program FilesViewpointViewpoint ManagerViewMgr.exe C:PROGRA~1GrisoftAVGFRE~1avgcc.exe C:PROGRA~1GrisoftAVGFRE~1avgemc.exe C:Program FilesATI TechnologiesATI.ACEcli.exe C:Program FilesAWSWeatherBugWeather.exe C:Program FilesATI TechnologiesATI.ACECLI.exe C:Program FileseFax Messenger 3.4J2GDllCmd.exe C:Program FileseFax Messenger 3.4J2GTray.exe C:Program FilesSupport.combintgcmd.exe C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe C:WINNTSystem32wbemwmiapsrv.exe C:WINNTsystem32NOTEPAD.EXE C:WINNTsystem32wuauclt.exe C:Program FilesHijackthisHijackThis.exe R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.comcast.net R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Microsoft Internet Explorer provided by Comcast R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file) O1 - Hosts: 66.218.75.184 mail.yahoo.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:Program FilesMicrosoft MoneySystemmnyside.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:Program FilesSpybot - Search & DestroySDHelper.dll O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:Program FilesViewpointViewpoint ToolbarViewBarBHO.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O4 - HKLM..Run: [AdaptecDirectCD] "C:Program FilesRoxioEasy CD Creator 5DirectCDDirectCD.exe" O4 - HKLM..Run: [Jet Detection] C:Program FilesCreativeSBAudigyPROGRAMADGJDet.exe O4 - HKLM..Run: [Microsoft Works Update Detection] C:Program FilesCommon FilesMicrosoft SharedWorks SharedWkUFind.exe O4 - HKLM..Run: [bJCFD] C:Program FilesBroadJumpClient FoundationCFD.exe O4 - HKLM..Run: [ComcastSUPPORT] C:Program FilesSupport.combintgkill.exe /cleaneahtioga /start O4 - HKLM..Run: [sunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_05binjusched.exe O4 - HKLM..Run: [ViewMgr] C:Program FilesViewpointViewpoint ManagerViewMgr.exe O4 - HKLM..Run: [AVG7_CC] C:PROGRA~1GrisoftAVGFRE~1avgcc.exe /STARTUP O4 - HKLM..Run: [AVG7_EMC] C:PROGRA~1GrisoftAVGFRE~1avgemc.exe O4 - HKLM..Run: [ATICCC] "C:Program FilesATI TechnologiesATI.ACEcli.exe" runtime O4 - HKCU..Run: [Weather] C:Program FilesAWSWeatherBugWeather.exe 1 O4 - HKCU..Run: [intel system tool] C:WINNTsystem32winnook.exe O4 - Startup: eFax Live Menu 3.4.lnk = C:Program FileseFax Messenger 3.4J2GDllCmd.exe O4 - Startup: eFax Tray Menu 3.4.lnk = C:Program FileseFax Messenger 3.4J2GTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:Program FilesATI TechnologiesATI.ACECLI.exe O8 - Extra context menu item: &Viewpoint Search - res://C:Program FilesViewpointViewpoint ToolbarViewBar.dll/CXTSEARCH.HTML O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavaj2re1.4.2_05binnpjpi142_05.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavaj2re1.4.2_05binnpjpi142_05.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:Program FilesAIM95aim.exe O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:Program FilesPartyPokerPartyPoker.exe O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:Program FilesPartyPokerPartyPoker.exe O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:Program FilesICQLiteICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:Program FilesICQLiteICQLite.exe O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:Program FilesMicrosoft MoneySystemmnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra button: Support - {422EBA37-4B61-4334-AEFB-2D6C1F69EB1C} - http://www.comcastsupport.com (file missing) (HKCU) O9 - Extra button: Help - {5F41EF1D-18EC-4997-826D-A67B9E543E51} - http://www.comcast.net/memberservices/ (file missing) (HKCU) O9 - Extra button: ComcastHSI - {75EB1CB9-8518-4B80-A91F-6C72A04BE462} - http://www.comcast.net (file missing) (HKCU) O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:Program FilesAWSWeatherBugWeather.exe (HKCU) O10 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINNTsystem32Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:WINNTsystem32ati2sgag.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe I've also attached the zipped files you asked for.

I couldn't get the computer to start in safe mode. The instructions in the windows help didn't...help. Here is the host file 213.219.251.78 www.google.com 213.219.251.78 google.com 213.219.251.78 www.google.co.uk 213.219.251.78 google.co.uk 213.219.251.78 www.google.ca 213.219.251.78 google.ca 213.219.251.78 www.google.es 213.219.251.78 google.es 213.219.251.78 www.google.de 213.219.251.78 google.de 213.219.251.78 www.google.fr 213.219.251.78 google.fr 213.219.251.78 www.google.com.au 213.219.251.78 google.com.au 213.219.251.79 www.yahoo.com 213.219.251.79 yahoo.com 66.218.75.184 mail.yahoo.com 213.219.251.81 astalavista.com 213.219.251.81 www.astalavista.com 213.219.251.81 astalavista.box.sk 213.219.251.81 www.astalavista.box.sk 213.219.251.81 cracks.com 213.219.251.81 www.cracks.com 213.219.251.80 www.msn.com 213.219.251.80 msn.com 213.219.251.80 search.msn.com 213.219.251.80 www.search.msn.com 213.219.251.80 go.com 213.219.251.80 www.go.com # Start of entries inserted by Spybot - Search & Destroy # End of entries inserted by Spybot - Search & Destroy Here is the Hijacked file Logfile of HijackThis v1.99.1 Scan saved at 7:10:03 PM, on 5/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:WINNTSystem32smss.exe C:WINNTsystem32winlogon.exe C:WINNTsystem32services.exe C:WINNTsystem32lsass.exe C:WINNTsystem32Ati2evxx.exe C:WINNTsystem32svchost.exe C:WINNTSystem32svchost.exe C:WINNTsystem32spoolsv.exe C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe C:WINNTsystem32Ati2evxx.exe C:WINNTExplorer.EXE C:Program FilesCommon FilesSymantec SharedccApp.exe C:Program FilesRoxioEasy CD Creator 5DirectCDDirectCD.exe C:WINNTsystem32CTHELPER.EXE C:WINNTGWMDMMSG.exe C:Program FilesCommon FilesMicrosoft SharedWorks SharedWkUFind.exe C:Program FilesCommon FilesRealUpdate_OBrealsched.exe C:Program FilesQuickTimeqttask.exe C:Program FilesMusicMatchMusicMatch Jukeboxmmtask.exe C:Program FilesJavaj2re1.4.2_05binjusched.exe C:Program FilesViewpointViewpoint ManagerViewMgr.exe C:PROGRA~1GrisoftAVGFRE~1avgcc.exe C:PROGRA~1GrisoftAVGFRE~1avgemc.exe C:Program FilesATI TechnologiesATI.ACEcli.exe C:Program FilesAWSWeatherBugWeather.exe C:Program FilesATI TechnologiesATI.ACECLI.exe C:Program FileseFax Messenger 3.4J2GDllCmd.exe C:Program FileseFax Messenger 3.4J2GTray.exe C:Program FilesSupport.combintgcmd.exe C:WINNTsystem32wuauclt.exe C:Program FilesHijackthisHijackThis.exe R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.top20results.com/ R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.comcast.net R1 - HKLMSoftwareMicrosoftInternet ExplorerSearch,Default_Search_URL = http://www.searchv.com/w/search.html R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Microsoft Internet Explorer provided by Comcast R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file) O1 - Hosts: 213.219.251.78 www.google.com O1 - Hosts: 213.219.251.78 google.com O1 - Hosts: 213.219.251.78 www.google.co.uk O1 - Hosts: 213.219.251.78 google.co.uk O1 - Hosts: 213.219.251.78 www.google.ca O1 - Hosts: 213.219.251.78 google.ca O1 - Hosts: 213.219.251.78 www.google.es O1 - Hosts: 213.219.251.78 google.es O1 - Hosts: 213.219.251.78 www.google.de O1 - Hosts: 213.219.251.78 google.de O1 - Hosts: 213.219.251.78 www.google.fr O1 - Hosts: 213.219.251.78 google.fr O1 - Hosts: 213.219.251.78 www.google.com.au O1 - Hosts: 213.219.251.78 google.com.au O1 - Hosts: 213.219.251.79 www.yahoo.com O1 - Hosts: 213.219.251.79 yahoo.com O1 - Hosts: 66.218.75.184 mail.yahoo.com O1 - Hosts: 213.219.251.81 astalavista.com O1 - Hosts: 213.219.251.81 www.astalavista.com O1 - Hosts: 213.219.251.81 astalavista.box.sk O1 - Hosts: 213.219.251.81 www.astalavista.box.sk O1 - Hosts: 213.219.251.81 cracks.com O1 - Hosts: 213.219.251.81 www.cracks.com O1 - Hosts: 213.219.251.80 www.msn.com O1 - Hosts: 213.219.251.80 msn.com O1 - Hosts: 213.219.251.80 search.msn.com O1 - Hosts: 213.219.251.80 www.search.msn.com O1 - Hosts: 213.219.251.80 go.com O1 - Hosts: 213.219.251.80 www.go.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx O2 - BHO: AzEntretien Class - {0d2def3a-f4f1-42ec-ac4f-132e7ba6e292} - %SystemRoot%azentretien.dll (file missing) O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:Program FilesMicrosoft MoneySystemmnyside.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:Program FilesSpybot - Search & DestroySDHelper.dll O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:Program FilesViewpointViewpoint ToolbarViewBarBHO.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:Program FilesNorton AntiVirusNavShExt.dll O2 - BHO: ZToolbar Activator Class - {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4} - C:WINNTsystem32azesearch4.dll O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:WINNTsystem32iasada.dll O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: AZE Search - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - C:WINNTsystem32azesearch4.dll O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe" O4 - HKLM..Run: [ccRegVfy] "C:Program FilesCommon FilesSymantec SharedccRegVfy.exe" O4 - HKLM..Run: [AdaptecDirectCD] "C:Program FilesRoxioEasy CD Creator 5DirectCDDirectCD.exe" O4 - HKLM..Run: [CTHelper] CTHELPER.EXE O4 - HKLM..Run: [updReg] C:WINNTUpdReg.EXE O4 - HKLM..Run: [Jet Detection] C:Program FilesCreativeSBAudigyPROGRAMADGJDet.exe O4 - HKLM..Run: [GWMDMMSG] GWMDMMSG.exe O4 - HKLM..Run: [GWMDMpi] C:WINNTGWMDMpi.exe O4 - HKLM..Run: [Microsoft Works Update Detection] C:Program FilesCommon FilesMicrosoft SharedWorks SharedWkUFind.exe O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OBrealsched.exe" -osboot O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime O4 - HKLM..Run: [bJCFD] C:Program FilesBroadJumpClient FoundationCFD.exe O4 - HKLM..Run: [ComcastSUPPORT] C:Program FilesSupport.combintgkill.exe /cleaneahtioga /start O4 - HKLM..Run: [mmtask] C:Program FilesMusicMatchMusicMatch Jukeboxmmtask.exe O4 - HKLM..Run: [AceGain LiveUpdate] C:Program FilesAceGainLiveUpdateLiveUpdate.exe O4 - HKLM..Run: [sunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_05binjusched.exe O4 - HKLM..Run: [ViewMgr] C:Program FilesViewpointViewpoint ManagerViewMgr.exe O4 - HKLM..Run: [AVG7_CC] C:PROGRA~1GrisoftAVGFRE~1avgcc.exe /STARTUP O4 - HKLM..Run: [AVG7_EMC] C:PROGRA~1GrisoftAVGFRE~1avgemc.exe O4 - HKLM..Run: [ATICCC] "C:Program FilesATI TechnologiesATI.ACEcli.exe" runtime O4 - HKLM..Run: [0b5j7084] C:WINNTsystem320b5j7084.exe O4 - HKLM..Run: [userFaultCheck] %systemroot%system32dumprep 0 -u O4 - HKCU..Run: [Weather] C:Program FilesAWSWeatherBugWeather.exe 1 O4 - HKCU..Run: [intel system tool] C:WINNTsystem32winnook.exe O4 - Startup: eFax Live Menu 3.4.lnk = C:Program FileseFax Messenger 3.4J2GDllCmd.exe O4 - Startup: eFax Tray Menu 3.4.lnk = C:Program FileseFax Messenger 3.4J2GTray.exe O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOffice10OSA.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:Program FilesATI TechnologiesATI.ACECLI.exe O8 - Extra context menu item: &Viewpoint Search - res://C:Program FilesViewpointViewpoint ToolbarViewBar.dll/CXTSEARCH.HTML O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINNTSystem32msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINNTSystem32msjava.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:Program FilesAIM95aim.exe O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:Program FilesPartyPokerPartyPoker.exe O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:Program FilesPartyPokerPartyPoker.exe O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:Program FilesICQLiteICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:Program FilesICQLiteICQLite.exe O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:Program FilesMicrosoft MoneySystemmnyside.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe O9 - Extra button: Support - {422EBA37-4B61-4334-AEFB-2D6C1F69EB1C} - http://www.comcastsupport.com (file missing) (HKCU) O9 - Extra button: Help - {5F41EF1D-18EC-4997-826D-A67B9E543E51} - http://www.comcast.net/memberservices/ (file missing) (HKCU) O9 - Extra button: ComcastHSI - {75EB1CB9-8518-4B80-A91F-6C72A04BE462} - http://www.comcast.net (file missing) (HKCU) O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:Program FilesAWSWeatherBugWeather.exe (HKCU) O10 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net O16 - DPF: ConferenceRoom Java Client - http://irc.axpi.net:8000/java/cr.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab O16 - DPF: {084F552D-19EB-4668-9788-984CBC781A8F} (AsyncDownloader Class) - http://survey.otxresearch.com/Preloader.dll O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://support.gateway.com/support/profiler/PCPitStop.CAB O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kavwebscan.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab28578.cab O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) - O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab O16 - DPF: {2AB65D8C-517B-4830-BDD9-5530A9D9ECA2} (Tax$imple) - https://www.taxsimple.com/citrix/tax$imple.cab O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab? O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-17.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} (shizmoo Class) - http://playroom2.icq.oberon-media.com/odyssey_web8.cab O16 - DPF: {9A57B18E-2F5D-11D5-8997-00104BD12D94} (compid Class) - http://support.gateway.com/support/serialharvest/gwCID.CAB O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch3.cab O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A} (MCSendMessageHandler Class) - http://xtraz.icq.com/xtraz/activex/MISBH.cab O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINNTsystem32Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:WINNTsystem32ati2sgag.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccPwdSvc.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:Program FilesNorton AntiVirusnavapsvc.exe O23 - Service: PictureTaker - Unknown owner - c:fixitptPCTKRNT.SYS (file missing) O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:PROGRA~1COMMON~1SYMANT~1SCRIPT~1SBServ.exe