deejd1

Please help me!!! this all started when the DVD player would not play. I looked in device manager and yellow splash marked under other devices on multimedia controller and multimedia vedio controller. I downloaded updated drivers for video and sound cards but this did not work. I tried uninstalling controllers and letting wizard in windows install drivers, it did not work. I'm not sure these are the drivers I need. Please can anyone help?

V2premier Intel Pentium 4 1.8Ghz
Windowsxp home
60 gb western digital hard drive
s3 pro savageddr video
via ac97 audio controller
p4vmm mainboard
liteon dvd ltr321235
liteon cdrw ltd163

Any help would be greatly appreciated. Thanks in advance.

deejd1

I thought this might be helpful.
I did not know how to edit my post, so I thought this would work.
Computer
Operating System Microsoft Windows XP Home Edition
OS Service Pack Service Pack 2
DirectX 4.09.00.0904 (DirectX 9.0c)
Computer Name JEFFSTOY (JEFFS ROOM)
User Name g-ma

Motherboard
CPU Type Intel Pentium 4, 1800 MHz (18 x 100)
Motherboard Name ECS P4VMM / Matsonic MS9118E
Motherboard Chipset VIA VT8751(A) ProSavageDDR P4M266(A)
System Memory 224 MB (PC2100 DDR SDRAM)
BIOS Type Award Modular (01/02/02)
Communication Port Communications Port (COM1)
Communication Port Communications Port (COM2)
Communication Port ECP Printer Port (LPT1)

Display
Video Adapter S3 Graphics ProSavageDDR (32 MB)
3D Accelerator S3 ProSavageDDR
Monitor Plug and Play Monitor [NoDB] (E210560290)

Multimedia
Audio Adapter BrookTree Bt878 Video Capture Device - Audio Section
Audio Adapter VIA AC'97 Enhanced Audio Controller

Storage
IDE Controller VIA Bus Master IDE Controller
Floppy Drive Floppy disk drive
Disk Drive WDC WD600AB-32CDB0 (55 GB, IDE)
Optical Drive LITEON DVD-ROM LTD163 (16x/48x DVD-ROM)
Optical Drive LITE-ON LTR-32123S (32x/12x/40x CD-RW)
SMART Hard Disks Status OK

Partitions
C: (NTFS) 57239 MB (41952 MB free)

Input
Keyboard Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Mouse HID-compliant mouse

Network
Network Adapter Realtek RTL8139 Family PCI Fast Ethernet NIC (192.168.1.124)
Modem Lucent Win Modem

Peripherals
Printer Impact ColorFax
Printer Lexmark X73
USB1 Controller VIA VT83C572 PCI-USB Controller
USB1 Controller VIA VT83C572 PCI-USB Controller
USB1 Controller VIA VT83C572 PCI-USB Controller
USB Device Generic USB Hub
USB Device Lexmark X73 MFP Scanner
USB Device USB Human Interface Device
USB Device USB Printing Support

DeathHawk

i had this on a friends pc a few weeks ago-i spent almost 3 days searching till i found my answer

Have you gone on to the mobo website and updated your chipset drivers?

Like you, i kept updating contollers and nothing was happening-i did the chipset update and the video started working again

Heres a good prog to find all your pc info in case of future problems

http://pc-wizard-2007.en.softonic.com/

deejd1

Thanks for input. I went to mb website just keeps redirecting me all over the web. It was no help. Also I am not sure how to update chip set, not that computer literate.

DeathHawk

http://www.viaarena.com/default.aspx...D=1&CatID=1070

scroll down to where you see "4 in 1 driver" and follow the instructions underneath

If you have any probs just post back

deejd1

I did as you advised. after extracting I get the msg "can't run 16 bit program"

Terrister

Try here
http://www.s3graphics.com/en/resourc...re_archive.jsp

__________________

deejd1

That didn't work either. popup can't run 16 bit windows program. Perhaps I am extracting to a wrong path? It says it can't find setup.exe. This is so frustrating. I really want to thank you for your time. I'm sorry I am not more computer savy.

Terrister

There is some malware that will cause the error you are seeing.
Let's rule that out before we go further.
http://www.techsupportforum.com/secu...sting-log.html

__________________

deejd1

Deckard's System Scanner v20070328.36
Run by g-ma on 2007-04-04 at 22:01:12
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
63: 2007-04-05 02:01:22 UTC - RP95 - Deckard's System Scanner Restore Point
62: 2007-04-05 00:03:27 UTC - RP94 - Installed Ad-Aware SE Personal
61: 2007-04-04 23:29:40 UTC - RP93 - Removed URGE
60: 2007-04-04 21:39:59 UTC - RP92 - System Checkpoint
59: 2007-04-03 21:03:22 UTC - RP91 - Software Distribution Service 2.0


-- First Restore Point --
1: 2007-01-05 01:07:00 UTC - RP33 - System Checkpoint


Backed up registry hives.

Performed disk cleanup.


-- HijackThis (run as g-ma.exe) ------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 10:05:31 PM, on 4/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\InterVideo\WinDVR\WinScheduler.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Documents and Settings\g-ma\Desktop\Temp\tech guys\dss.exe
C:\PROGRA~1\HijackThis\g-ma.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Optimum Online Toolbar - {720B3C59-7EDE-44d1-AD9C-71106A7550AF} - C:\Program Files\OptimumOnline\insptbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: InterVideo WinScheduler.lnk = C:\Program Files\InterVideo\WinDVR\WinScheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Reboot.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.7 85.255.112.174
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.7 85.255.112.174
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE


-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 GoldenCd2K - c:\windows\system32\drivers\goldencd2k.sys
R2 LXARScan (Lexmark X73 MFP Scanner) - c:\windows\system32\drivers\lxarscan.sys
R2 MCSTRM - c:\windows\system32\drivers\mcstrm.sys
R3 ltmodem5 (LT Modem Driver) - c:\windows\system32\drivers\ltmdmnt.sys
R3 S3Psddr - c:\windows\system32\drivers\s3gnbm.sys

S3 S3Twistr - c:\windows\system32\drivers\s3gnbm.sys
S3 TVICHW32 - c:\windows\system32\drivers\tvichw32.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

All services whitelisted.


-- Files created between 2007-03-04 and 2007-04-04 -----------------------------

2100-02-23 15:35:34 768 --a------ C:\Program Files\x73_lut.dat
2100-02-08 17:03:54 53248 --a------ C:\Program Files\ACMonitor_X73.exe
2007-04-04 21:49:38 0 d-------- C:\ie-spyad
2007-04-04 21:49:05 0 d-------- C:\Program Files\SpywareBlaster
2007-04-04 21:48:30 0 d-------- C:\Program Files\SpywareGuard
2007-04-04 20:49:54 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-04-04 20:49:50 0 d-------- C:\WINDOWS\LastGood
2007-04-04 2058 0 d-------- C:\Documents and Settings\g-ma\Application Data\Lavasoft
2007-04-04 20:03:30 0 d-------- C:\Program Files\Lavasoft
2007-04-04 20:02:48 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-04-04 19:38:09 0 d-------- C:\Documents and Settings\g-ma\Application Data\Sun
2007-04-04 10:22:47 0 d-------- C:\Program Files\Lavalys
2007-04-04 10:11:30 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-04-03 13:51:50 0 d---s---- C:\Documents and Settings\g-ma\UserData
2007-04-03 13:42:31 315392 -ra------ C:\WINDOWS\system32\S3Ovrlay.dll
2007-04-03 12:18:51 0 d-------- C:\Program Files\MTV Networks
2007-04-03 12:01:24 331184 -----n--- C:\WINDOWS\system32\difxapi.dll
2007-04-03 12:01:24 0 d-------- C:\Program Files\VIA
2007-04-03 12:00:02 203648 --a------ C:\WINDOWS\system32\drivers\vinyl97.sys
2007-04-03 11:34:53 0 d-------- C:\S3Graphics
2007-04-03 09:52:03 0 d-------- C:\Documents and Settings\g-ma\WINDOWS
2007-04-02 16:55:06 0 d-------- C:\Program Files\InterActual
2007-04-02 16:37:13 43648 -ra------ C:\WINDOWS\system32\drivers\viaudio.sys
2007-04-02 16:36:56 0 d-------- C:\temp
2007-04-02 15:10:50 387072 --a------ C:\WINDOWS\system32\LostRun.exe
2007-04-02 15:10:50 351232 --a------ C:\WINDOWS\system32\CheckPath.exe
2007-04-02 15:10:49 532480 --a------ C:\WINDOWS\system32\DeleteFiles.exe
2007-04-02 14:20:28 0 d-------- C:\Documents and Settings\g-ma\Application Data\AdobeUM
2007-04-02 11:38:58 0 d-------- C:\Documents and Settings\g-ma\Application Data\InterVideo
2007-03-30 21:15:27 4 --a------ C:\WINDOWS\system32\71EB14
2007-03-30 21:13:18 8413 --a------ C:\WINDOWS\system32\drivers\mcstrm.sys


-- Find3M Report ---------------------------------------------------------------

2007-04-04 21:20:16 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-04-04 21:18:01 0 d-------- C:\Program Files\Messenger<MESSEN~1>
2007-04-04 21:13:48 0 d-------- C:\Program Files\Google
2007-04-04 14:41:02 0 d---s---- C:\Documents and Settings\g-ma\Application Data\Microsoft
2007-04-02 15:34:51 0 d-------- C:\Program Files\Java
2007-04-02 15:02:27 0 d-------- C:\Documents and Settings\g-ma\Application Data\Macromedia
2007-04-02 14:51:34 0 d-------- C:\Documents and Settings\g-ma\Application Data\Google
2007-04-02 14:23:17 0 d-------- C:\Program Files\InterVideo<INTERV~1>
2007-04-02 14:23:15 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-04-02 14:19:20 0 d-------- C:\Documents and Settings\g-ma\Application Data\Adobe
2007-04-02 11:38:06 0 d-------- C:\Program Files\Best Buy Rhapsody
2007-04-02 09:18:45 0 d-------- C:\Program Files\RegScrubXP<REGSCR~1>
2007-03-31 20:16:44 0 d-------- C:\Program Files\Beachhead 2000<BEACHH~1>
2007-03-30 21:13:28 0 d-------- C:\Program Files\Common Files\Real
2007-03-08 11:36:28 577536 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 11:36:28 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 11:36:28 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 09:47:48 1843584 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-08 21:32:54 0 d-------- C:\Program Files\Ricochet Lost Worlds Recharged
2007-02-05 18:46:48 0 d-------- C:\Program Files\Real
2007-02-05 18:43:57 0 d-------- C:\Program Files\Common Files\SWF Studio
2007-01-28 17:18:16 10 --a------ C:\WINDOWS\popcinfo.dat
2007-01-15 13:32:07 689280 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-01-15 13:23:20 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.1128.5462\\GoogleToolbarNotifier.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"PrinTray"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\printray.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"QuickFinder Scheduler"="\"C:\\Program Files\\Corel\\WordPerfect Office 2002\\Programs\\QFSCHD100.EXE\""
"SoundMan"="SOUNDMAN.EXE"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"S3TRAY2"="S3tray2.exe"
"AudioDeck"="C:\\Program Files\\VIA\\VIAudioi\\SBADeck\\ADeck.exe 1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Event Planner Reminders Tray Icon.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Event Planner Reminders Tray Icon.lnk"
"backup"="C:\\WINDOWS\\pss\\Event Planner Reminders Tray Icon.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\SIERRA\\CARDST~1\\PLNRnote.exe "
"item"="Event Planner Reminders Tray Icon"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^InterVideo WinCinema Manager.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\InterVideo WinCinema Manager.lnk"
"backup"="C:\\WINDOWS\\pss\\InterVideo WinCinema Manager.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\INTERV~1\\Common\\Bin\\WINCIN~1.EXE "
"item"="InterVideo WinCinema Manager"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^InterVideo WinScheduler.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\InterVideo WinScheduler.lnk"
"backup"="C:\\WINDOWS\\pss\\InterVideo WinScheduler.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\INTERV~1\\WinDVR\\WINSCH~1.EXE "
"item"="InterVideo WinScheduler"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^JEFFERY HOFF^Start Menu^Programs^Startup^MediaRing Talk.lnk]
"path"="C:\\Documents and Settings\\JEFFERY HOFF\\Start Menu\\Programs\\Startup\\MediaRing Talk.lnk"
"backup"="C:\\WINDOWS\\pss\\MediaRing Talk.lnkStartup"
"location"="Startup"
"command"="C:\\PROGRA~1\\MEDIAR~1\\mrtalk.exe /m"
"item"="MediaRing Talk"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Goldensoft_MndlSvr]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MndlSvr"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\GOLDEN~1\\CDGHOS~1\\MndlSvr.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AOLSoftware"
"hkey"="HKLM"
"command"="C:\\Program Files\\Common Files\\AOL\\1145313299\\ee\\AOLSoftware.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X73 Button Manager]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AcBtnMgr_X73"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\LEXMAR~1\\AcBtnMgr_X73.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X73 Button Monitor]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ACMonitor_X73"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\LEXMAR~1\\ACMonitor_X73.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msmsgs"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NeroCheck"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\System32\\NeroCheck.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="qttask"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Register MediaRing Talk]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="register"
"hkey"="HKLM"
"command"="C:\\Program Files\\MediaRing Talk\\register.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\S3TRAY2]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="S3tray2"
"hkey"="HKLM"
"command"="S3tray2.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SOUNDMAN"
"hkey"="HKLM"
"command"="SOUNDMAN.EXE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TimeSink Ad Client]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="TSAdBot"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\TimeSink\\AdGateway\\TSAdBot.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VCDTower]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="VCDTower"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\GOLDEN~1\\CDGHOS~1\\VCDTower.exe"
"inimapping"="0"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{81559C35-8464-49F7-BB0E-07A383BEF910}"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0



-- End of Deckard's System Scanner: finished at 2007-04-04 at 2210 ---------

Incident Status Location

Potentially unwanted tool:Application/Reboot.A Not disinfected C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Reboot.exe
Adware:adware/aureate-radiate Not disinfected c:\program files\MediaRing Talk
Spyware:spyware/dogpile Not disinfected c:\documents and settings\all users\application data\Infospace
Adware:adware/zango Not disinfected Windows Registry
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@burstnet[2].txt
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@cdfreaks[2].txt
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@club.cdfreaks[1].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@com[1].txt
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@toplist[1].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@www.burstbeacon[1].txt
Spyware:Cookie/Virusbursters Not disinfected C:\Documents and Settings\g-ma\Cookies\g-ma@www.virusbursters[1].txt
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\g-ma\Desktop\UTILITIES\SmitfraudFix\Process.exe
Virus:Trj/Shutdown.Z Disinfected C:\Documents and Settings\g-ma\Desktop\UTILITIES\SmitfraudFix\restart.exe
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\g-ma\Desktop\UTILITIES\SmitfraudFix.zip[SmitfraudFix/Process.exe]
Virus:Trj/Shutdown.Z Disinfected C:\Documents and Settings\g-ma\Desktop\UTILITIES\SmitfraudFix.zip[SmitfraudFix/restart.exe]
Potentially unwanted tool:Application/VirusBursters Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temp\vb14.exe[Virus-Bursters.exe]
Adware:Adware/VideoAccess Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\1SR1SHVY\videosaccess1107[1].exe
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\4DSL2N01\popup[1].htm
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\CHO3SBWJ\popup[1].htm
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\GHEJ456N\popup[1].htm
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\GHEJ456N\popup[2].htm
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\GTU7C9UN\popup[1].htm
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\GTU7C9UN\popup[2].htm
Adware:Adware/Gmter Not disinfected C:\Documents and Settings\JEFFERY HOFF\Local Settings\Temporary Internet Files\Content.IE5\GXEBSLUV\popup[1].htm
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@atwola[2].txt
Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@azjmp[2].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@belnk[1].txt
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@did-it[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@dist.belnk[2].txt
Spyware:Cookie/Kmpads Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@kmpads[1].txt
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@toplist[2].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\MIKE HOFF\Cookies\mike hoff@www.burstbeacon[1].txt
Adware:Adware/Dogpile Not disinfected C:\Program Files\OptimumOnline\insptbar.dll
Virus:Trj/DNSChanger.NY Disinfected C:\WINDOWS\system32\kdpet.exe

deejd1

Deckard's System Scanner v20070328.36
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel(R) Pentium(R) 4 CPU 1.80GHz
Percentage of Memory in Use: 64%
Physical Memory (total/avail): 223.49 MiB / 79.23 MiB
Pagefile Memory (total/avail): 546.81 MiB / 353.56 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1994.98 MiB

A: is Removable (Unformatted)
C: is Fixed (NTFS) - 55.9 GiB total, 40.77 GiB free.
D: is CDROM (No Media)
E: is CDROM (No Media)
F: is CDROM (No Media)


-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

AV: avast! antivirus 4.7.942 [VPS 000730-3] v4.7.942 (ALWIL Software)


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\g-ma\Application Data
CLASSPATH=C:\Program Files\QuickTime\QTSystem\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=JEFFSTOY
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\g-ma
LOGONSERVER=\\JEFFSTOY
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 1 Stepping 2, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0102
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\g-ma\Local Settings\Temp
TMP=C:\DOCUME~1\g-ma\Local Settings\Temp
USERDOMAIN=JEFFSTOY
USERNAME=g-ma
USERPROFILE=C:\Documents and Settings\g-ma
windir=C:\WINDOWS


-- User Profiles ---------------------------------------------------------------

JEFFERY HOFF (admin)
MIKE HOFF (admin)
g-ma (admin)
Administrator (new local, admin)


-- Add/Remove Programs ---------------------------------------------------------

extra

-- End of Deckard's System Scanner: finished at 2007-04-04 at 2210 ---------

Terrister