StartupList version: 1.51
Started from : C:\UNZIPPED\STARTUPLIST151\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\PRECISIONTIME\PRECISIONTIME.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\UNZIPPED\STARTUPLIST151\STARTUPLIST.EXE
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SystemTray = SysTray.Exe
Tweak UI = RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
TaskMonitor = C:\WINDOWS\taskmon.exe
wcmdmgr = C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch
LoadQM = loadqm.exe
NAV CfgWiz = C:\PROGRA~1\NORTON~1\CFGWIZ.EXE /R
ccApp = C:\Program Files\Common Files\Symantec Shared\ccApp.exe
ccRegVfy = C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
BootWarn = C:\Program Files\Norton AntiVirus\BootWarn.exe /a
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
SchedulingAgent = mstask.exe
ccEvtMgr = C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
ScriptBlocking = "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background
--------------------------------------------------
C:\WINDOWS\WININIT.BAK listing:
(Created 16/11/2002, 18:56:38)
[Rename]
C:\WINDOWS\SYSTEM\CABINET.DLL=C:\WINDOWS\SYSTEM\TBMF0D0.TMP
NUL=C:\WINDOWS\STARTM~1\PROGRAMS\NORTON~1\NORTON~1
NUL=C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBSETUP.EXE
NUL=C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1
NUL=C:\PROGRA~1\NORTON~1\QUARAN~1
NUL=C:\WINDOWS\STARTM~1\PROGRAMS\NORTON~1\NORTON~1
C:\WINDOWS\SYSTEM\shfolder.dll=C:\WINDOWS\SYSTEM\shfolder.001
NUL=C:\WINDOWS\TEMP\PFT1334.TMP\VCSETUP.EXE
--------------------------------------------------
C:\AUTOEXEC.BAT listing:
SET BLASTER=A220 I5 D1 T4
--------------------------------------------------
Enumerating Browser Helper Objects:
(no name) - C:\WINDOWS\DOWNLOADED PROGRAM FILES\YCOMP5_0_2_7.DLL - {02478D38-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
Webster Toolbar - C:\WINDOWS\DOWNLOADED PROGRAM FILES\M-WTOOLBAR.DLL - {9E1128F1-53FA-11d5-8490-0048548030CA}
--------------------------------------------------
Enumerating Task Scheduler jobs:
Disk Cleanup.job
Disk Defragmenter.job
Symantec NetDetect.job
--------------------------------------------------
Enumerating Download Program Files:
[Live365Player Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PLAY365.DLL
CODEBASE =
http://www.live365.com/players/play365.cab
[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE =
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
[WildTangent Control]
InProcServer32 = C:\WINDOWS\WT\WEBDRIVER\WEBDRIVER.DLL
CODEBASE =
http://www.wildtangent.com/install/wdriver/racing/tundramadness/microsoft/wtinst.cab
[RdxIE Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\RDXIE.DLL
CODEBASE =
http://207.188.17.22/02dc0860264c95df4814/netzip/RdxIE.cab
[{E87A6788-1D0F-4444-8898-1D25829B6755}]
CODEBASE =
http://fdl.msn.com/public/chat/msnchat4.cab
[Microsoft Office Tools on the Web Control]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\OUTC.DLL
CODEBASE =
http://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab
[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE =
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
[CDToolCtrl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\CDTOOL.DLL
CODEBASE =
http://free.aol.com/tryaolfree/cdt175/aolcdt175.cab
[{018B7EC3-EECA-11D3-8E71-0000E82C6C0D}]
CODEBASE =
http://www.greatplugin.com/diallerfiles/014192.exe
[SnoopyCtrl Class]
InProcServer32 = C:\PROGRAM FILES\EACOM\UPDATE\NPSNPY.DLL
CODEBASE =
http://www.ea.com/downloads/games/common/snoopy/iesnoopy.cab
[WONWebLauncher Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\WONWEBLAUNCHERCONTROL.OCX
CODEBASE =
http://www.virtualvegas.com/cab/WONWebLauncherControl.cab
[HeartbeatCtl Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CONFLICT.1\HRTBEAT.OCX
CODEBASE =
http://fdl.msn.com/zone/Z4/heartbeat.cab
[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE =
http://download.yahoo.com/dl/installs/yinst.cab
[{29C13B62-B9F7-4CD3-8CEF-0A58A1A99441}]
CODEBASE =
http://fdl.msn.com/public/chat/msnchat41.cab
[MSN Chat Control 4.2]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT42.OCX
CODEBASE =
http://fdl.msn.com/public/chat/msnchat42.cab
[MP3.com Beam-it]
InProcServer32 = C:\WINDOWS\SYSTEM\BEAMITCONTROL.DLL
CODEBASE =
http://signup.backstagevip.com/beamit/Beam-itActiveXControl.cab
[Yahoo! Companion]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YCOMP5_0_2_7.DLL
CODEBASE =
http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio5_0_2_7.cab
[Yahoo! Audio UI1]
InProcServer32 = C:\PROGRAM FILES\YAHOO!\MESSENGER\YACSUI.DLL
CODEBASE =
http://chat.yahoo.com/cab/yacsui.cab
[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE =
http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37612.6927662037
[DepHlp Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\DEPHLP.OCX
CODEBASE =
http://www.worldwinner.com/games/shared/dephlp.cab
[{F798683C-FE05-436C-B0FF-35B9122E9787}]
CODEBASE =
http://merriamwebster.com/tools/toolbar/cabs/m-w.cab
[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
CODEBASE =
http://a840.g.akamai.net/7/840/537/2003012801/housecall.antivirus.com/housecall/xscan53.cab
--------------------------------------------------
End of report, 7,468 bytes
Report generated in 5.587 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only