Sign in with
Sign up | Sign in
Your question

Explorer.exe - Error 0xfe9ed40f

Last response: in Windows XP
Share
Anonymous
July 1, 2005 3:26:03 AM

Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

My computer is not able to run except in safe mode.

When I try to start up normally, I get persistent messages that Explorer has
the error 0xfe9ed40f and is unable to write to memory. ACK

I ran Spybot, Norton, and Hijackthis and have enclosed my log. PLEASE HELP

Tracy

Logfile of HijackThis v1.99.1
Scan saved at 10:59:31 PM, on 6/30/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Outlook Express\MSIMN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\Program Files\Kasamba\Kasamba.exe
C:\Program Files\Franklin Covey\Planner\planner.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\TRACYF~1\LOCALS~1\Temp\Temporary Directory 1 for
hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/customize/.../search/ie...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://red.clientapps.yahoo.com/customize/...//www.yaho...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.com/?.home=ytie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://red.clientapps.yahoo.com/customize/...//www.yaho...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/customize/...rch/search...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://red.clientapps.yahoo.com/customize/...//www.yaho...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/?.home=ytie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://red.clientapps.yahoo.com/customize/...//www.yaho...
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.dell4me.com/myway
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program
Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} -
C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} -
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} -
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [DwlClient] c:\Program Files\Common
Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [Auto EPSON Stylus C84 Series on G6266]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
Stylus C84 Series on G6266" /O24 "\\G6266\Epson Stylus C84" /M "Stylus C84"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet
Security\UrlLstCk.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common
Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Symantec NetDriver Monitor]
C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97
Audio Drivers\stacmon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program
Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media
Experience\PCMService.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Fellowes Proxy] C:\WINDOWS\system32\r3proxy.exe
O4 - HKLM\..\Run: [EPSON Stylus C84 Series (Copy 1)]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P32 "EPSON Stylus
C84 Series (Copy 1)" /O6 "USB002" /M "Stylus C84"
O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON Stylus
C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
Shared\ccApp.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKCU\..\Run: [Auto EPSON Stylus C84 Series on G6266]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
Stylus C84 Series on G6266" /M "Stylus C84" /EF "HKCU"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program
Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Connect Kasamba.lnk = C:\Program Files\Kasamba\Kasamba.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program
Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
O4 - Startup: Yahoo! Desktop Search.lnk = C:\Program Files\Yahoo!\Yahoo!
Desktop Search\YahooDesktopSearch.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program
Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program
Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program
Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
{4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -
%windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -
{85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file
missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: YExplorer1_8US.CAB -
http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.ca...
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {03177121-226B-11D4-B0BE-005004AD3039} (UploaderCtrl Class) -
http://members12.clubphoto.com/_img/upload...tl_uploade...
O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} -
http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup...
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x40...
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
https://www-secure.symantec.com/techsupp/asa/LSSupCtl.c...
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
http://tools.ebayimg.com/eps/wl/activex/EP...ol_v1-0-3-...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {610C8626-86E0-4082-A89F-F186C839B26F} (SingleTap Web Client) -
http://lexus.singletap.net/ses/plugins/Sin...Client_103...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/...b?11201518...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient
Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab3126...
O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) -
https://echat.us.dell.com/Media/VisitorChat/TLIEFlash.C...
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control)
- http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments
Control) - https://webresponse.one.microsoft.com/oas/A...eX/FileXf...
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMesse...pDownloade...
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
https://www-secure.symantec.com/techsupp/asa/SymAData.c...
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O23 - Service: Ati HotKey Poller - Unknown owner -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation -
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON
CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec
Corporation - C:\Program Files\Norton Internet Security\Norton
AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation -
C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel
Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton
Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program
Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Anonymous
July 1, 2005 11:41:49 AM

Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

To repair all system files, go to Start/Run, and type: SFC /SCANNOW

--
Mark L. Ferguson
FAQ for Windows Antispy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
"Tracy Fulce" <tracyfulce@hotmail.com> wrote in message news:22CF5200-C3B2-4D86-9C7F-F9BA286E19A1@microsoft.com...
> My computer is not able to run except in safe mode.
>
> When I try to start up normally, I get persistent messages that Explorer has
> the error 0xfe9ed40f and is unable to write to memory. ACK
>
> I ran Spybot, Norton, and Hijackthis and have enclosed my log. PLEASE HELP
>
> Tracy
>
> Logfile of HijackThis v1.99.1
> Scan saved at 10:59:31 PM, on 6/30/2005
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\system32\ZCfgSvc.exe
> C:\WINDOWS\Explorer.EXE
> C:\Program Files\Outlook Express\MSIMN.EXE
> C:\WINDOWS\system32\ctfmon.exe
> C:\Program Files\Yahoo!\Messenger\YPager.exe
> C:\Program Files\Kasamba\Kasamba.exe
> C:\Program Files\Franklin Covey\Planner\planner.exe
> C:\Program Files\Internet Explorer\iexplore.exe
> C:\DOCUME~1\TRACYF~1\LOCALS~1\Temp\Temporary Directory 1 for
> hijackthis.zip\HijackThis.exe
>
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://www.dell4me.com/myway
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
> http://red.clientapps.yahoo.com/customize/.../search/ie...
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://red.clientapps.yahoo.com/customize/...//www.yaho...
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://www.yahoo.com/
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://www.yahoo.com/?.home=ytie
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
> http://red.clientapps.yahoo.com/customize/...//www.yaho...
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
> http://red.clientapps.yahoo.com/customize/...rch/search...
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://red.clientapps.yahoo.com/customize/...//www.yaho...
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://www.yahoo.com/?.home=ytie
> R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
> http://red.clientapps.yahoo.com/customize/...//www.yaho...
> R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
> http://www.dell4me.com/myway
> O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
> C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
> O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program
> Files\Spybot - Search & Destroy\SDHelper.dll
> O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} -
> C:\WINDOWS\system32\dla\tfswshx.dll
> O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} -
> C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
> O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
> Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
> O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
> C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
> O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} -
> C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
> O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
> C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
> O4 - HKLM\..\Run: [DwlClient] c:\Program Files\Common
> Files\Dell\EUSW\Support.exe
> O4 - HKLM\..\Run: [Auto EPSON Stylus C84 Series on G6266]
> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
> Stylus C84 Series on G6266" /O24 "\\G6266\Epson Stylus C84" /M "Stylus C84"
> O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
> O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
> O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet
> Security\UrlLstCk.exe
> O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common
> Files\Sonic\Update Manager\sgtray.exe" /r
> O4 - HKLM\..\Run: [Symantec NetDriver Monitor]
> C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
> O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> Files\Java\jre1.5.0_02\bin\jusched.exe
> O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97
> Audio Drivers\stacmon.exe
> O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
> -atboottime
> O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program
> Files\Intel\NCS\PROSet\PRONoMgr.exe
> O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media
> Experience\PCMService.exe"
> O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
> O4 - HKLM\..\Run: [Fellowes Proxy] C:\WINDOWS\system32\r3proxy.exe
> O4 - HKLM\..\Run: [EPSON Stylus C84 Series (Copy 1)]
> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P32 "EPSON Stylus
> C84 Series (Copy 1)" /O6 "USB002" /M "Stylus C84"
> O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON Stylus
> C84 Series" /O6 "USB001" /M "Stylus C84"
> O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
> O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
> O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
> Shared\ccApp.exe"
> O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
> O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
> Panel\atiptaxx.exe
> O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
> O4 - HKCU\..\Run: [Auto EPSON Stylus C84 Series on G6266]
> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
> Stylus C84 Series on G6266" /M "Stylus C84" /EF "HKCU"
> O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program
> Files\Yahoo!\Messenger\ypager.exe -quiet
> O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
> Destroy\TeaTimer.exe
> O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
> /background
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - Startup: Connect Kasamba.lnk = C:\Program Files\Kasamba\Kasamba.exe
> O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
> O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program
> Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
> O4 - Startup: Yahoo! Desktop Search.lnk = C:\Program Files\Yahoo!\Yahoo!
> Desktop Search\YahooDesktopSearch.exe
> O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
> Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
> O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program
> Files\Yahoo!\Common/ycsrch.htm
> O8 - Extra context menu item: E&xport to Microsoft Excel -
> res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
> O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program
> Files\Yahoo!\Common/ycdict.htm
> O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program
> Files\Yahoo!\Common/ycdict.htm
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
> O9 - Extra 'Tools' menuitem: Sun Java Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
> O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
> C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
> O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
> {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
> Files\Yahoo!\Messenger\yhexbmes0521.dll
> O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -
> %windir%\bdoscandel.exe (file missing)
> O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -
> {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file
> missing)
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
> C:\WINDOWS\System32\Shdocvw.dll
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> C:\Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger -
> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
> O16 - DPF: YExplorer1_8US.CAB -
> http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.ca...
> O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
> http://support.dell.com/systemprofiler/SysPro.CAB
> O16 - DPF: {03177121-226B-11D4-B0BE-005004AD3039} (UploaderCtrl Class) -
> http://members12.clubphoto.com/_img/upload...tl_uploade...
> O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} -
> http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup...
> O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
> http://housecall60.trendmicro.com/housecall/xscan60.cab
> O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
> Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x40...
> O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
> https://www-secure.symantec.com/techsupp/asa/LSSupCtl.c...
> O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
> https://support.microsoft.com/OAS/ActiveX/odc.cab
> O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
> http://tools.ebayimg.com/eps/wl/activex/EP...ol_v1-0-3-...
> O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
> http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
> O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
> http://www.bitdefender.com/scan8/oscan8.cab
> O16 - DPF: {610C8626-86E0-4082-A89F-F186C839B26F} (SingleTap Web Client) -
> http://lexus.singletap.net/ses/plugins/Sin...Client_103...
> O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
> http://update.microsoft.com/windowsupdate/...b?11201518...
> O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient
> Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab3126...
> O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) -
> https://echat.us.dell.com/Media/VisitorChat/TLIEFlash.C...
> O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control)
> - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
> O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments
> Control) - https://webresponse.one.microsoft.com/oas/A...eX/FileXf...
> O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
> (MsnMessengerSetupDownloadControl Class) -
> http://messenger.msn.com/download/MsnMesse...pDownloade...
> O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
> https://www-secure.symantec.com/techsupp/asa/SymAData.c...
> O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
> O23 - Service: Ati HotKey Poller - Unknown owner -
> C:\WINDOWS\system32\Ati2evxx.exe
> O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
> C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation -
> C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
> O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
> Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
> O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
> C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON
> CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
> O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec
> Corporation - C:\Program Files\Norton Internet Security\Norton
> AntiVirus\navapsvc.exe
> O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation -
> C:\Program Files\Intel\NCS\Sync\NetSvc.exe
> O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
> O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel
> Corporation - C:\WINDOWS\system32\S24EvMon.exe
> O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton
> Internet Security\Norton AntiVirus\SAVScan.exe
> O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
> C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
> O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
> Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
> O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program
> Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
>
Anonymous
July 1, 2005 3:20:04 PM

Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

MARK!

IT WORKED!

Thank you so much I appreciate your help!

Tracy

"Mark L. Ferguson" wrote:

> To repair all system files, go to Start/Run, and type: SFC /SCANNOW
>
> --
> Mark L. Ferguson
> FAQ for Windows Antispy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
Related resources
Anonymous
July 2, 2005 8:22:01 PM

Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

It worked once and then started AGAIN!

Ideas?

"Mark L. Ferguson" wrote:

> To repair all system files, go to Start/Run, and type: SFC /SCANNOW
>
> --
> Mark L. Ferguson
> FAQ for Windows Antispy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
> "Tracy Fulce" <tracyfulce@hotmail.com> wrote in message news:22CF5200-C3B2-4D86-9C7F-F9BA286E19A1@microsoft.com...
> > My computer is not able to run except in safe mode.
> >
> > When I try to start up normally, I get persistent messages that Explorer has
> > the error 0xfe9ed40f and is unable to write to memory. ACK
> >
> > I ran Spybot, Norton, and Hijackthis and have enclosed my log. PLEASE HELP
> >
> > Tracy
> >
> > Logfile of HijackThis v1.99.1
> > Scan saved at 10:59:31 PM, on 6/30/2005
> > Platform: Windows XP SP2 (WinNT 5.01.2600)
> > MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
> >
> > Running processes:
> > C:\WINDOWS\System32\smss.exe
> > C:\WINDOWS\system32\winlogon.exe
> > C:\WINDOWS\system32\services.exe
> > C:\WINDOWS\system32\lsass.exe
> > C:\WINDOWS\system32\svchost.exe
> > C:\WINDOWS\System32\svchost.exe
> > C:\WINDOWS\system32\ZCfgSvc.exe
> > C:\WINDOWS\Explorer.EXE
> > C:\Program Files\Outlook Express\MSIMN.EXE
> > C:\WINDOWS\system32\ctfmon.exe
> > C:\Program Files\Yahoo!\Messenger\YPager.exe
> > C:\Program Files\Kasamba\Kasamba.exe
> > C:\Program Files\Franklin Covey\Planner\planner.exe
> > C:\Program Files\Internet Explorer\iexplore.exe
> > C:\DOCUME~1\TRACYF~1\LOCALS~1\Temp\Temporary Directory 1 for
> > hijackthis.zip\HijackThis.exe
> >
> > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> > http://www.dell4me.com/myway
> > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
> > http://red.clientapps.yahoo.com/customize/.../search/ie...
> > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
> > R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
> > http://www.yahoo.com/
> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> > http://www.yahoo.com/?.home=ytie
> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
> > http://red.clientapps.yahoo.com/customize/...rch/search...
> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
> > R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> > http://www.yahoo.com/?.home=ytie
> > R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
> > R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
> > http://www.dell4me.com/myway
> > O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
> > C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
> > O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program
> > Files\Spybot - Search & Destroy\SDHelper.dll
> > O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} -
> > C:\WINDOWS\system32\dla\tfswshx.dll
> > O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} -
> > C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
> > O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
> > Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
> > O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
> > C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
> > O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} -
> > C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
> > O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
> > C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
> > O4 - HKLM\..\Run: [DwlClient] c:\Program Files\Common
> > Files\Dell\EUSW\Support.exe
> > O4 - HKLM\..\Run: [Auto EPSON Stylus C84 Series on G6266]
> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
> > Stylus C84 Series on G6266" /O24 "\\G6266\Epson Stylus C84" /M "Stylus C84"
> > O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
> > O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
> > O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet
> > Security\UrlLstCk.exe
> > O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common
> > Files\Sonic\Update Manager\sgtray.exe" /r
> > O4 - HKLM\..\Run: [Symantec NetDriver Monitor]
> > C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
> > O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> > Files\Java\jre1.5.0_02\bin\jusched.exe
> > O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97
> > Audio Drivers\stacmon.exe
> > O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
> > -atboottime
> > O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program
> > Files\Intel\NCS\PROSet\PRONoMgr.exe
> > O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media
> > Experience\PCMService.exe"
> > O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
> > O4 - HKLM\..\Run: [Fellowes Proxy] C:\WINDOWS\system32\r3proxy.exe
> > O4 - HKLM\..\Run: [EPSON Stylus C84 Series (Copy 1)]
> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P32 "EPSON Stylus
> > C84 Series (Copy 1)" /O6 "USB002" /M "Stylus C84"
> > O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON Stylus
> > C84 Series" /O6 "USB001" /M "Stylus C84"
> > O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
> > O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
> > O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
> > Shared\ccApp.exe"
> > O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
> > O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
> > Panel\atiptaxx.exe
> > O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
> > O4 - HKCU\..\Run: [Auto EPSON Stylus C84 Series on G6266]
> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
> > Stylus C84 Series on G6266" /M "Stylus C84" /EF "HKCU"
> > O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program
> > Files\Yahoo!\Messenger\ypager.exe -quiet
> > O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
> > Destroy\TeaTimer.exe
> > O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
> > /background
> > O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> > O4 - Startup: Connect Kasamba.lnk = C:\Program Files\Kasamba\Kasamba.exe
> > O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
> > O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program
> > Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
> > O4 - Startup: Yahoo! Desktop Search.lnk = C:\Program Files\Yahoo!\Yahoo!
> > Desktop Search\YahooDesktopSearch.exe
> > O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
> > Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
> > O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program
> > Files\Yahoo!\Common/ycsrch.htm
> > O8 - Extra context menu item: E&xport to Microsoft Excel -
> > res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
> > O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program
> > Files\Yahoo!\Common/ycdict.htm
> > O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program
> > Files\Yahoo!\Common/ycdict.htm
> > O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> > C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
> > O9 - Extra 'Tools' menuitem: Sun Java Console -
> > {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> > Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
> > O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
> > C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
> > O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
> > {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
> > Files\Yahoo!\Messenger\yhexbmes0521.dll
> > O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -
> > %windir%\bdoscandel.exe (file missing)
> > O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -
> > {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file
> > missing)
> > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> > C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
> > O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
> > C:\WINDOWS\System32\Shdocvw.dll
> > O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> > C:\Program Files\Messenger\msmsgs.exe
> > O9 - Extra 'Tools' menuitem: Windows Messenger -
> > {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
> > O16 - DPF: YExplorer1_8US.CAB -
> > http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.ca...
> > O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
> > http://support.dell.com/systemprofiler/SysPro.CAB
> > O16 - DPF: {03177121-226B-11D4-B0BE-005004AD3039} (UploaderCtrl Class) -
> > http://members12.clubphoto.com/_img/upload...tl_uploade...
> > O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} -
> > http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup...
> > O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
> > http://housecall60.trendmicro.com/housecall/xscan60.cab
> > O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
> > Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x40...
> > O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
> > https://www-secure.symantec.com/techsupp/asa/LSSupCtl.c...
> > O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
> > https://support.microsoft.com/OAS/ActiveX/odc.cab
> > O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
> > http://tools.ebayimg.com/eps/wl/activex/EP...ol_v1-0-3-...
> > O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
> > http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
> > O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
> > http://www.bitdefender.com/scan8/oscan8.cab
> > O16 - DPF: {610C8626-86E0-4082-A89F-F186C839B26F} (SingleTap Web Client) -
> > http://lexus.singletap.net/ses/plugins/Sin...Client_103...
> > O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
> > http://update.microsoft.com/windowsupdate/...b?11201518...
> > O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient
> > Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab3126...
> > O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) -
> > https://echat.us.dell.com/Media/VisitorChat/TLIEFlash.C...
> > O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control)
> > - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
> > O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments
> > Control) - https://webresponse.one.microsoft.com/oas/A...eX/FileXf...
> > O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
> > (MsnMessengerSetupDownloadControl Class) -
> > http://messenger.msn.com/download/MsnMesse...pDownloade...
> > O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
> > https://www-secure.symantec.com/techsupp/asa/SymAData.c...
> > O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
> > O23 - Service: Ati HotKey Poller - Unknown owner -
> > C:\WINDOWS\system32\Ati2evxx.exe
> > O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
> > C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> > O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation -
> > C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
> > O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
> > Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
> > O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
> > C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> > O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON
> > CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
> > O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec
> > Corporation - C:\Program Files\Norton Internet Security\Norton
> > AntiVirus\navapsvc.exe
> > O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation -
> > C:\Program Files\Intel\NCS\Sync\NetSvc.exe
> > O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
> > O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel
> > Corporation - C:\WINDOWS\system32\S24EvMon.exe
> > O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton
> > Internet Security\Norton AntiVirus\SAVScan.exe
> > O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
> > C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
> > O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
> > Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
> > O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program
> > Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
> >
>
>
>
Anonymous
July 3, 2005 10:50:55 AM

Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

Something is corrupting your system files. I don't know which installed app that might be. I see nothing I recognize in the
Hijackthis log. I would try a Repair, or Upgrade setup of XP, next.

If you run an XP "Upgrade"setup, from the original, or "Gold" version of the setup CD, and you have SP2 installed, it might go into
a setup loop, and you could lose your install. Uninstall SP2, BEFORE you Upgrade setup from CD (that lacks sp2 on it.)
875350 - How to remove Windows XP Service Pack 2 from your computer: http://support.microsoft.com/default.aspx?kbid=875350

How to Perform a Windows XP Repair Install: http://michaelstevenstech.com/XPrepairinstall.htm

--
Mark L. Ferguson
FAQ for Windows Antispy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
"Tracy Fulce" <tracyfulce@hotmail.com> wrote in message news:976940FE-8693-485F-A560-3206C57CE860@microsoft.com...
> It worked once and then started AGAIN!
>
> Ideas?
>
> "Mark L. Ferguson" wrote:
>
>> To repair all system files, go to Start/Run, and type: SFC /SCANNOW
>>
>> --
>> Mark L. Ferguson
>> FAQ for Windows Antispy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm
>> "Tracy Fulce" <tracyfulce@hotmail.com> wrote in message news:22CF5200-C3B2-4D86-9C7F-F9BA286E19A1@microsoft.com...
>> > My computer is not able to run except in safe mode.
>> >
>> > When I try to start up normally, I get persistent messages that Explorer has
>> > the error 0xfe9ed40f and is unable to write to memory. ACK
>> >
>> > I ran Spybot, Norton, and Hijackthis and have enclosed my log. PLEASE HELP
>> >
>> > Tracy
>> >
>> > Logfile of HijackThis v1.99.1
>> > Scan saved at 10:59:31 PM, on 6/30/2005
>> > Platform: Windows XP SP2 (WinNT 5.01.2600)
>> > MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
>> >
>> > Running processes:
>> > C:\WINDOWS\System32\smss.exe
>> > C:\WINDOWS\system32\winlogon.exe
>> > C:\WINDOWS\system32\services.exe
>> > C:\WINDOWS\system32\lsass.exe
>> > C:\WINDOWS\system32\svchost.exe
>> > C:\WINDOWS\System32\svchost.exe
>> > C:\WINDOWS\system32\ZCfgSvc.exe
>> > C:\WINDOWS\Explorer.EXE
>> > C:\Program Files\Outlook Express\MSIMN.EXE
>> > C:\WINDOWS\system32\ctfmon.exe
>> > C:\Program Files\Yahoo!\Messenger\YPager.exe
>> > C:\Program Files\Kasamba\Kasamba.exe
>> > C:\Program Files\Franklin Covey\Planner\planner.exe
>> > C:\Program Files\Internet Explorer\iexplore.exe
>> > C:\DOCUME~1\TRACYF~1\LOCALS~1\Temp\Temporary Directory 1 for
>> > hijackthis.zip\HijackThis.exe
>> >
>> > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
>> > http://www.dell4me.com/myway
>> > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
>> > http://red.clientapps.yahoo.com/customize/.../search/ie...
>> > R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
>> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
>> > R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
>> > http://www.yahoo.com/
>> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
>> > http://www.yahoo.com/?.home=ytie
>> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
>> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
>> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
>> > http://red.clientapps.yahoo.com/customize/...rch/search...
>> > R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
>> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
>> > R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
>> > http://www.yahoo.com/?.home=ytie
>> > R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
>> > http://red.clientapps.yahoo.com/customize/...//www.yaho...
>> > R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
>> > http://www.dell4me.com/myway
>> > O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
>> > C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
>> > O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program
>> > Files\Spybot - Search & Destroy\SDHelper.dll
>> > O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} -
>> > C:\WINDOWS\system32\dla\tfswshx.dll
>> > O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} -
>> > C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
>> > O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program
>> > Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
>> > O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -
>> > C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
>> > O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} -
>> > C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
>> > O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} -
>> > C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
>> > O4 - HKLM\..\Run: [DwlClient] c:\Program Files\Common
>> > Files\Dell\EUSW\Support.exe
>> > O4 - HKLM\..\Run: [Auto EPSON Stylus C84 Series on G6266]
>> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
>> > Stylus C84 Series on G6266" /O24 "\\G6266\Epson Stylus C84" /M "Stylus C84"
>> > O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
>> > O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
>> > O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet
>> > Security\UrlLstCk.exe
>> > O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common
>> > Files\Sonic\Update Manager\sgtray.exe" /r
>> > O4 - HKLM\..\Run: [Symantec NetDriver Monitor]
>> > C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
>> > O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
>> > Files\Java\jre1.5.0_02\bin\jusched.exe
>> > O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97
>> > Audio Drivers\stacmon.exe
>> > O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
>> > -atboottime
>> > O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program
>> > Files\Intel\NCS\PROSet\PRONoMgr.exe
>> > O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media
>> > Experience\PCMService.exe"
>> > O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
>> > O4 - HKLM\..\Run: [Fellowes Proxy] C:\WINDOWS\system32\r3proxy.exe
>> > O4 - HKLM\..\Run: [EPSON Stylus C84 Series (Copy 1)]
>> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P32 "EPSON Stylus
>> > C84 Series (Copy 1)" /O6 "USB002" /M "Stylus C84"
>> > O4 - HKLM\..\Run: [EPSON Stylus C84 Series]
>> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P23 "EPSON Stylus
>> > C84 Series" /O6 "USB001" /M "Stylus C84"
>> > O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
>> > O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
>> > O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec
>> > Shared\ccApp.exe"
>> > O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
>> > O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control
>> > Panel\atiptaxx.exe
>> > O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
>> > O4 - HKCU\..\Run: [Auto EPSON Stylus C84 Series on G6266]
>> > C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2D1.EXE /P37 "Auto EPSON
>> > Stylus C84 Series on G6266" /M "Stylus C84" /EF "HKCU"
>> > O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program
>> > Files\Yahoo!\Messenger\ypager.exe -quiet
>> > O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
>> > Destroy\TeaTimer.exe
>> > O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe"
>> > /background
>> > O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
>> > O4 - Startup: Connect Kasamba.lnk = C:\Program Files\Kasamba\Kasamba.exe
>> > O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
>> > O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program
>> > Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
>> > O4 - Startup: Yahoo! Desktop Search.lnk = C:\Program Files\Yahoo!\Yahoo!
>> > Desktop Search\YahooDesktopSearch.exe
>> > O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
>> > Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
>> > O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program
>> > Files\Yahoo!\Common/ycsrch.htm
>> > O8 - Extra context menu item: E&xport to Microsoft Excel -
>> > res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
>> > O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program
>> > Files\Yahoo!\Common/ycdict.htm
>> > O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program
>> > Files\Yahoo!\Common/ycdict.htm
>> > O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
>> > C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
>> > O9 - Extra 'Tools' menuitem: Sun Java Console -
>> > {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
>> > Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
>> > O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -
>> > C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
>> > O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
>> > {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program
>> > Files\Yahoo!\Messenger\yhexbmes0521.dll
>> > O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -
>> > %windir%\bdoscandel.exe (file missing)
>> > O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -
>> > {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file
>> > missing)
>> > O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
>> > C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
>> > O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} -
>> > C:\WINDOWS\System32\Shdocvw.dll
>> > O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
>> > C:\Program Files\Messenger\msmsgs.exe
>> > O9 - Extra 'Tools' menuitem: Windows Messenger -
>> > {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
>> > O16 - DPF: YExplorer1_8US.CAB -
>> > http://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.ca...
>> > O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
>> > http://support.dell.com/systemprofiler/SysPro.CAB
>> > O16 - DPF: {03177121-226B-11D4-B0BE-005004AD3039} (UploaderCtrl Class) -
>> > http://members12.clubphoto.com/_img/upload...tl_uploade...
>> > O16 - DPF: {0335A685-ED24-4F7B-A08E-3BD15D84E668} -
>> > http://dl.filekicker.com/send/file/128985-NZIL/PhPSetup...
>> > O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
>> > http://housecall60.trendmicro.com/housecall/xscan60.cab
>> > O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage
>> > Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x40...
>> > O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
>> > https://www-secure.symantec.com/techsupp/asa/LSSupCtl.c...
>> > O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -
>> > https://support.microsoft.com/OAS/ActiveX/odc.cab
>> > O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
>> > http://tools.ebayimg.com/eps/wl/activex/EP...ol_v1-0-3-...
>> > O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
>> > http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
>> > O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
>> > http://www.bitdefender.com/scan8/oscan8.cab
>> > O16 - DPF: {610C8626-86E0-4082-A89F-F186C839B26F} (SingleTap Web Client) -
>> > http://lexus.singletap.net/ses/plugins/Sin...Client_103...
>> > O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
>> > http://update.microsoft.com/windowsupdate/...b?11201518...
>> > O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient
>> > Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab3126...
>> > O16 - DPF: {94B82441-A413-4E43-8422-D49930E69764} (TLIEFlashObj Class) -
>> > https://echat.us.dell.com/Media/VisitorChat/TLIEFlash.C...
>> > O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control)
>> > - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
>> > O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments
>> > Control) - https://webresponse.one.microsoft.com/oas/A...eX/FileXf...
>> > O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
>> > (MsnMessengerSetupDownloadControl Class) -
>> > http://messenger.msn.com/download/MsnMesse...pDownloade...
>> > O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
>> > https://www-secure.symantec.com/techsupp/asa/SymAData.c...
>> > O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
>> > O23 - Service: Ati HotKey Poller - Unknown owner -
>> > C:\WINDOWS\system32\Ati2evxx.exe
>> > O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -
>> > C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>> > O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation -
>> > C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
>> > O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec
>> > Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
>> > O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -
>> > C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>> > O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON
>> > CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
>> > O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec
>> > Corporation - C:\Program Files\Norton Internet Security\Norton
>> > AntiVirus\navapsvc.exe
>> > O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation -
>> > C:\Program Files\Intel\NCS\Sync\NetSvc.exe
>> > O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
>> > O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel
>> > Corporation - C:\WINDOWS\system32\S24EvMon.exe
>> > O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton
>> > Internet Security\Norton AntiVirus\SAVScan.exe
>> > O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation -
>> > C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
>> > O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec
>> > Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
>> > O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program
>> > Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
>> >
>>
>>
>>
!