[hewee]

SUPERAntiSpyware v4.30.1004 released November 11, 2009
http://www.superantispyware.com/download.html

[q11]

flavallee and hewee,

SUPERAntiSpyware v4.30.1004 found the following:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/12/2009 at 11:22 AM

Application Version : 4.30.1004

Core Rules Database Version : 4265
Trace Rules Database Version: 2149

Scan type : Complete Scan
Total Scan Time : 00:41:36

Memory items scanned : 451
Memory threats detected : 0
Registry items scanned : 4839
Registry threats detected : 47
File items scanned : 17141
File threats detected : 16

Trojan.Agent/Gen
HKLM\Software\Classes\CLSID\{4254E07D-1B18-446C-BA07-20A70E629F88}
HKCR\CLSID\{4254E07D-1B18-446C-BA07-20A70E629F88}
HKCR\CLSID\{4254E07D-1B18-446C-BA07-20A70E629F88}
HKCR\CLSID\{4254E07D-1B18-446C-BA07-20A70E629F88}\InprocServer32
HKCR\CLSID\{4254E07D-1B18-446C-BA07-20A70E629F88}\InprocServer32#ThreadingModel
C:\PROGRA~1\AEVITA~1\SAVEFL~1.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4254E07D-1B18-446C-BA07-20A70E629F88}
HKU\S-1-5-21-449893683-3494348615-2549310642-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4254E07D-1B18-446C-BA07-20A70E629F88}
HKLM\SOFTWARE\AvScan
HKLM\SOFTWARE\AvScan#knkd
HKLM\SOFTWARE\AvScan#aazalirt
HKLM\SOFTWARE\AvScan#skaaanret
HKLM\SOFTWARE\AvScan#jungertab
HKLM\SOFTWARE\AvScan#zibaglertz
HKLM\SOFTWARE\AvScan#iddqdops
HKLM\SOFTWARE\AvScan#ronitfst
HKLM\SOFTWARE\AvScan#tobmygers
HKLM\SOFTWARE\AvScan#jikglond
HKLM\SOFTWARE\AvScan#tobykke
HKLM\SOFTWARE\AvScan#klopnidret
HKLM\SOFTWARE\AvScan#jiklagka
HKLM\SOFTWARE\AvScan#salrtybek
HKLM\SOFTWARE\AvScan#seeukluba
HKLM\SOFTWARE\AvScan#jrjakdsd
HKLM\SOFTWARE\AvScan#krkdkdkee
HKLM\SOFTWARE\AvScan#dkewiizkjdks
HKLM\SOFTWARE\AvScan#dkekkrkska
HKLM\SOFTWARE\AvScan#rkaskssd
HKLM\SOFTWARE\AvScan#kuruhccdsdd
HKLM\SOFTWARE\AvScan#krujmmwlrra
HKLM\SOFTWARE\AvScan#kkwknrbsggeg
HKLM\SOFTWARE\AvScan#ktknamwerr
HKLM\SOFTWARE\AvScan#iqmcnoeqz
HKLM\SOFTWARE\AvScan#ienotas
HKLM\SOFTWARE\AvScan#krkmahejdk
HKLM\SOFTWARE\AvScan#otpeppggq
HKLM\SOFTWARE\AvScan#krtawefg
HKLM\SOFTWARE\AvScan#oranerkka
HKLM\SOFTWARE\AvScan#kitiiwhaas
HKLM\SOFTWARE\AvScan#otowjdseww
HKLM\SOFTWARE\AvScan#otnnbektre
HKLM\SOFTWARE\AvScan#oropbbsee
HKLM\SOFTWARE\AvScan#irprokwks
HKLM\SOFTWARE\AvScan#ooorjaas
HKLM\SOFTWARE\AvScan#id
HKLM\SOFTWARE\AvScan#ready

Trojan.FakeAlert-IEBT
HKU\S-1-5-21-449893683-3494348615-2549310642-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{144A6B24-0EBC-4D89-BF09-A06A718E57B5}
HKU\S-1-5-21-449893683-3494348615-2549310642-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BE1A344F-9FF5-4024-949B-52205E6DB2D0}

Adware.Tracking Cookie
C:\Documents and Settings\1\Cookies\1@mediaplex[1].txt
C:\Documents and Settings\1\Cookies\1@trafficmp[1].txt
C:\Documents and Settings\1\Cookies\1@ads.techguy[2].txt
C:\Documents and Settings\1\Cookies\1@doubleclick[2].txt
C:\Documents and Settings\1\Cookies\1@ad.yieldmanager[2].txt
C:\Documents and Settings\1\Cookies\1@apmebf[2].txt
C:\Documents and Settings\1\Cookies\1@a1.interclick[1].txt
C:\Documents and Settings\1\Cookies\1@collective-media[1].txt
C:\Documents and Settings\1\Cookies\1@fastclick[2].txt
C:\Documents and Settings\1\Cookies\1@content.yieldmanager[2].txt
C:\Documents and Settings\1\Cookies\1@atdmt[1].txt
C:\Documents and Settings\1\Cookies\1@insightexpressai[1].txt
C:\Documents and Settings\1\Cookies\1@chitika[1].txt
C:\Documents and Settings\1\Cookies\1@interclick[2].txt
C:\Documents and Settings\1\Cookies\1@ak[2].txt

I tried to open and run Malwarebytes Anti-Malware as have many times before successfully, it would not open immediately after the SUPERAntiSpyware scan and a message comes up:

An error has occurred. Please report the following error code to Malwarebytes Anti-Malware support team.

Error code: 703 (0, 48)
---------------------------------------
What does this mean and what should I do since I can't open Malwarebytes scan?

BTW, I have not removed and quarantined what was found by SUPERAntiSpyware scan. Are all the items found safe to remove and quarantine?

Any idea why Malwarebytes will not open and run? It has many times in the past.

I enormously appreciate your help; a huge thanks!
q11

[flavallee]

Run another scan with SUPERAntiSpyware, and this time select and remove EVERYTHING it finds. After you restart your computer, try running a scan again with Malwarebytes. If it still won't run, uninstall it and allow it to remove its logs and quarantined items. Restart your computer, then reinstall it again and go from there.

-----------------------------------------------------------------

[q11]

flavallee,

SUPERAntiSpyware cleaned all the items found from the 1st scan, and a 2nd scan came up clean.

Malwarebytes opened and ran with a clean outcome as well:

Malwarebytes' Anti-Malware 1.41
Database version: 3159
Windows 5.1.2600 Service Pack 2

11/12/2009 10:56:08 PM
mbam-log-2009-11-12 (22-56-08).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 147934
Time elapsed: 35 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

I am SUPER HAPPY!!! And I am immensely grateful your valuable help! And thanks to all the members of techguy.org

I will continue to try to resolve the System Restore issue, but I least the computer has NO "Nasty Bugs."

Many thanks and have a great day,
q11

[flavallee]

Post a new HijackThis log here so I can see if we need to do anything else with it.

---------------------------------------------------------------

[q11]

flavallee,

How do I delete all remaining Bitdefinder files & components that were downloaded as a result of the free online scan? Is it necessary to clean them out?

With respect to both SUPERAntiSpyware and Malwarebytes Anti-malware, should I customize them to perform deeper scans, i.e.; scan files larger than 4MB and non-executable files?

Much thanks,
q11

Here is a new Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:35:12 AM, on 11/13/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {33973600-925A-11D9-A1F6-9234C84D2622} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=laptop
O16 - DPF: {14C1B87C-3342-445F-9B5E-365FF330A3AC} (Hewlett-Packard Online Support Services) - http://h50203.www5.hp.com/HPISWeb/Cu...ataManager.CAB
O16 - DPF: {5ACAA414-FCF1-468F-9442-71A7B6D2079E} (CitrixActivator Control) - https://www.myswa.com/maestroap_if/CitrixActivator.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 5563 bytes

[flavallee]

The default settings for SAS and MBAM are fine as they are. You can run a full/complete scan with them about once a month if you want to, but a quick scan seems to do a good job.

-----------------------------------------------------------------

Start HijackThis and run a scan, then put a checkmark in

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab

then click Fix Checked - Yes, then close HijackThis.

------------------------------------------------------------------

What other components are you referring to?

------------------------------------------------------------------

[q11]

flavallee,

Referring back to Java, I did a search for Java. Java 2 Runtime Env came up along with other Java files. Should I delete any of the found Java files?

With respect to Bidefinder online scanner files, I just deleted all searched BD files since BD is no longer used, incliding all .dll files created on the scan date. Okay???

BTW, how do I copy and paste what is found after a search is done? I tried to copy what search found for Java but it failed to paste.

Thanks,
q11

Here a new Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:45:16 PM, on 11/14/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=laptop
O16 - DPF: {14C1B87C-3342-445F-9B5E-365FF330A3AC} (Hewlett-Packard Online Support Services) - http://h50203.www5.hp.com/HPISWeb/Cu...ataManager.CAB
O16 - DPF: {5ACAA414-FCF1-468F-9442-71A7B6D2079E} (CitrixActivator Control) - https://www.myswa.com/maestroap_if/CitrixActivator.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 5330 bytes

[flavallee]

Go into Start - Run - MSCONFIG - OK - Startup(tab) and uncheck

IgfxTray C:\WINDOWS\system32\igfxtray.exe

HotKeysCmds C:\WINDOWS\system32\hkcmd.exe

SunJavaUpdateSched C:\Program Files\Java\jre6\bin\jusched.exe

(Note: .exe may not be present in the names)

After you're done, click Apply - OK - Exit Without Restart.

Go into Start - Run - SERVICES.MSC - OK.

Double-click on

Java Quick Starter

Change "Startup Type" to Manual, then click Apply - OK.

Close all open windows, then restart.

When the "System Configuration Utility" window appears, ignore the message.

Put a checkmark in that wiwndow, then click OK.

----------------------------------------------------------------

Other than deleting any leftover folders to earlier java versions in the C:\Program Files\Java folder, I wouldn't go hunting for other java-related files and then deleting them.

----------------------------------------------------------------