sweetcheekies
Thread Starter
- Joined
- Aug 23, 2001
- Messages
- 1,218
Okay here is my situation.. for some reason my computer has been running wierd lately .I run win 98 se and ie 6. I have tried everything i can think of to get it working again.. done the adaware, virus check etc.. with my adaware a new thing i havent seen before came up. msbb.exe ? what is that.. also i removed it with adaware anyways.. but i ran a check and i have msbb.dll is that needed? and from what i have looked up about msbb does the quartz.dll go with it? anyways.. if anyone can understand my gibberish and can help let me know here is my start up list in case its needed.
StartupList report, 1/8/03, 1:02:09 PM
StartupList version: 1.50
Started from : C:\WINDOWS\DESKTOP\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NOADS\NOADS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\DESKTOP\STARTUPLIST.EXE
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SystemTray = SysTray.Exe
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
NoAds = "C:\PROGRAM FILES\NOADS\NOADS.EXE"
--------------------------------------------------
Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)
[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}
[>PerUser_MSN_Clean] *
StubPath = C:\WINDOWS\msnmgsr1.exe
[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L
[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}
[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}
[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl
--------------------------------------------------
Load/Run keys from C:\WINDOWS\WIN.INI:
load=
run=
--------------------------------------------------
Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:
Shell=explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv
--------------------------------------------------
Checking for EXPLORER.EXE instances:
C:\WINDOWS\Explorer.exe: PRESENT!
C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
--------------------------------------------------
C:\WINDOWS\WININIT.BAK listing:
(Created 8/1/2003, 12:51:20)
[Rename]
NUL=C:\WINDOWS\SYSTEM\URLMON.DLL
C:\WINDOWS\SYSTEM\URLMON.DLL=C:\WINDOWS\SYSTEM\SET3135.TMP
NUL=C:\WINDOWS\SYSTEM\MSHTML.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL=C:\WINDOWS\SYSTEM\SET3140.TMP
NUL=C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL=C:\WINDOWS\SYSTEM\SET3141.TMP
--------------------------------------------------
C:\AUTOEXEC.BAT listing:
SET BLASTER=A220 I7 D1 H5 P330 T6
SET CTSYN=C:\WINDOWS
C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM
--------------------------------------------------
C:\CONFIG.SYS listing:
DEVICE=C:\WINDOWS\HIMEM.SYS
DEVICE=C:\WINDOWS\EMM386.EXE
--------------------------------------------------
C:\WINDOWS\DOSSTART.BAT listing:
C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM
--------------------------------------------------
Checking for superhidden extensions:
.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden
--------------------------------------------------
Enumerating Browser Helper Objects:
(no name) - C:\WINDOWS\SYSTEM\F1.DLL - {00000EF1-34E3-4633-87C6-1AA7A44296DA}
BabeIE - (no file) - {00000000-0000-0000-0000-000000000000}
--------------------------------------------------
Enumerating Task Scheduler jobs:
Tune-up Application Start.job
Symantec NetDetect.job
Windows Critical Update Notification.job
--------------------------------------------------
Enumerating Download Program Files:
[CV3 Class]
InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
CODEBASE = http://windowsupdate.microsoft.com/R1062/V31Controls/x86/w98/en/actsetup.cab
[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab
[YahooYMailTo Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YMMAPI.DLL
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/installs/essentials/ymmapi_0727.dll
[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
[Word Cubes Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\WORDCUBE.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/wordcube/wordcube.cab
[Sol Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\SOL.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/sol/sol.cab
[FreeCell Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FREECELL.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/freecell/freecell.cab
[GolfSol Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\GOLFSOL.OCX
CODEBASE = http://mirror.worldwinner.com/games/v41/golfsol/golfsol.cab
[BJA Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\BJA.OCX
CODEBASE = http://mirror.worldwinner.com/games/v42/bjattack/bjattack.cab
[Focus Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FOCUS.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/focus/focus.cab
[Hangman Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\HANGMAN.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/hangman/hangman.cab
[Puzzle Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\JIGSAW.OCX
CODEBASE = http://mirror.worldwinner.com/games/v41/jigsaw/jigsaw.cab
[Maze Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\MAZE.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/maze/maze.cab
[Tilecity Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TILECITY.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/tilecity/tilecity.cab
[XWord Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XWORD.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/xword/xword.cab
[Darts Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\DARTS.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/darts/darts.cab
[Pencil Wars Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TERRIT~1.OCX
CODEBASE = http://mirror.worldwinner.com/games/v42/territory/territory.cab
[DepHlp Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\DEPHLP.OCX
CODEBASE = http://www.worldwinner.com/games/shared/dephlp.cab
[Ttt Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TTT.OCX
CODEBASE = http://mirror.worldwinner.com//games/v40/ttt/ttt.cab
[Trivia Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TRIVIA.OCX
CODEBASE = http://mirror.worldwinner.com//games/v41/trivia/trivia.cab
[Bash Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\BASH.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/bash/bash.cab
[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
CODEBASE = http://a840.g.akamai.net/7/840/537/2002121801/housecall.antivirus.com/housecall/xscan53.cab
[CscClnt Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CSCCTRL.DLL
CODEBASE = http://www.panel3.angusreid.com/central/02030105/cccabs/CleverContent.cab
[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
[Yahoo! Webcam Viewer Wrapper]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YVWRCTL.DLL
CODEBASE = http://chat.yahoo.com/cab/yvwrctl.cab
[CRegistryDownload Class]
InProcServer32 = C:\WINDOWS\SYSTEM\REGDLOAD.DLL
CODEBASE = http://www.paltalk.com/prod/RegDload.CAB
[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab
[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
[{459729AC-727D-4D97-B18A-72EE224EFEC0}]
CODEBASE = http://defender.veloz.com/pub/download/scandl_adteg.cab
[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37591.5638078704
[PWMediaSendControl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PWACTIVEXIMGCTL.DLL
CODEBASE = http://216.249.24.142/code/PWActiveXImgCtl.CAB
[{8522F9B3-38C5-4AA4-AE40-7401F1BBC851}]
CODEBASE = http://www.trinsic.org/download_serial.exe
--------------------------------------------------
End of report, 10,154 bytes
Report generated in 0.639 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
thanks if anyone sees anything weird please let me know ..
sweetcheekies
StartupList report, 1/8/03, 1:02:09 PM
StartupList version: 1.50
Started from : C:\WINDOWS\DESKTOP\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NOADS\NOADS.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\DESKTOP\STARTUPLIST.EXE
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SystemTray = SysTray.Exe
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
NoAds = "C:\PROGRAM FILES\NOADS\NOADS.EXE"
--------------------------------------------------
Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)
[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}
[>PerUser_MSN_Clean] *
StubPath = C:\WINDOWS\msnmgsr1.exe
[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L
[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}
[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}
[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl
--------------------------------------------------
Load/Run keys from C:\WINDOWS\WIN.INI:
load=
run=
--------------------------------------------------
Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:
Shell=explorer.exe
SCRNSAVE.EXE=
drivers=mmsystem.dll power.drv
--------------------------------------------------
Checking for EXPLORER.EXE instances:
C:\WINDOWS\Explorer.exe: PRESENT!
C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
--------------------------------------------------
C:\WINDOWS\WININIT.BAK listing:
(Created 8/1/2003, 12:51:20)
[Rename]
NUL=C:\WINDOWS\SYSTEM\URLMON.DLL
C:\WINDOWS\SYSTEM\URLMON.DLL=C:\WINDOWS\SYSTEM\SET3135.TMP
NUL=C:\WINDOWS\SYSTEM\MSHTML.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL=C:\WINDOWS\SYSTEM\SET3140.TMP
NUL=C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL=C:\WINDOWS\SYSTEM\SET3141.TMP
--------------------------------------------------
C:\AUTOEXEC.BAT listing:
SET BLASTER=A220 I7 D1 H5 P330 T6
SET CTSYN=C:\WINDOWS
C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM
--------------------------------------------------
C:\CONFIG.SYS listing:
DEVICE=C:\WINDOWS\HIMEM.SYS
DEVICE=C:\WINDOWS\EMM386.EXE
--------------------------------------------------
C:\WINDOWS\DOSSTART.BAT listing:
C:\PROGRA~1\CREATIVE\SBLIVE\DOSDRV\SBEINIT.COM
--------------------------------------------------
Checking for superhidden extensions:
.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden
--------------------------------------------------
Enumerating Browser Helper Objects:
(no name) - C:\WINDOWS\SYSTEM\F1.DLL - {00000EF1-34E3-4633-87C6-1AA7A44296DA}
BabeIE - (no file) - {00000000-0000-0000-0000-000000000000}
--------------------------------------------------
Enumerating Task Scheduler jobs:
Tune-up Application Start.job
Symantec NetDetect.job
Windows Critical Update Notification.job
--------------------------------------------------
Enumerating Download Program Files:
[CV3 Class]
InProcServer32 = C:\WINDOWS\SYSTEM\WUV3IS.DLL
CODEBASE = http://windowsupdate.microsoft.com/R1062/V31Controls/x86/w98/en/actsetup.cab
[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE = http://download.yahoo.com/dl/installs/yinst.cab
[YahooYMailTo Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YMMAPI.DLL
CODEBASE = http://us.dl1.yimg.com/download.yahoo.com/dl/installs/essentials/ymmapi_0727.dll
[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
[Word Cubes Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\WORDCUBE.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/wordcube/wordcube.cab
[Sol Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\SOL.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/sol/sol.cab
[FreeCell Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FREECELL.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/freecell/freecell.cab
[GolfSol Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\GOLFSOL.OCX
CODEBASE = http://mirror.worldwinner.com/games/v41/golfsol/golfsol.cab
[BJA Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\BJA.OCX
CODEBASE = http://mirror.worldwinner.com/games/v42/bjattack/bjattack.cab
[Focus Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\FOCUS.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/focus/focus.cab
[Hangman Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\HANGMAN.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/hangman/hangman.cab
[Puzzle Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\JIGSAW.OCX
CODEBASE = http://mirror.worldwinner.com/games/v41/jigsaw/jigsaw.cab
[Maze Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\MAZE.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/maze/maze.cab
[Tilecity Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TILECITY.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/tilecity/tilecity.cab
[XWord Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XWORD.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/xword/xword.cab
[Darts Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\DARTS.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/darts/darts.cab
[Pencil Wars Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TERRIT~1.OCX
CODEBASE = http://mirror.worldwinner.com/games/v42/territory/territory.cab
[DepHlp Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\DEPHLP.OCX
CODEBASE = http://www.worldwinner.com/games/shared/dephlp.cab
[Ttt Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TTT.OCX
CODEBASE = http://mirror.worldwinner.com//games/v40/ttt/ttt.cab
[Trivia Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\TRIVIA.OCX
CODEBASE = http://mirror.worldwinner.com//games/v41/trivia/trivia.cab
[Bash Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\BASH.OCX
CODEBASE = http://mirror.worldwinner.com/games/v40/bash/bash.cab
[HouseCall Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\XSCAN53.OCX
CODEBASE = http://a840.g.akamai.net/7/840/537/2002121801/housecall.antivirus.com/housecall/xscan53.cab
[CscClnt Class]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CSCCTRL.DLL
CODEBASE = http://www.panel3.angusreid.com/central/02030105/cccabs/CleverContent.cab
[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
[Yahoo! Webcam Viewer Wrapper]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YVWRCTL.DLL
CODEBASE = http://chat.yahoo.com/cab/yvwrctl.cab
[CRegistryDownload Class]
InProcServer32 = C:\WINDOWS\SYSTEM\REGDLOAD.DLL
CODEBASE = http://www.paltalk.com/prod/RegDload.CAB
[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE = http://www.apple.com/qtactivex/qtplugin.cab
[{41F17733-B041-4099-A042-B518BB6A408C}]
CODEBASE = http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
[{459729AC-727D-4D97-B18A-72EE224EFEC0}]
CODEBASE = http://defender.veloz.com/pub/download/scandl_adteg.cab
[Update Class]
InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37591.5638078704
[PWMediaSendControl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\PWACTIVEXIMGCTL.DLL
CODEBASE = http://216.249.24.142/code/PWActiveXImgCtl.CAB
[{8522F9B3-38C5-4AA4-AE40-7401F1BBC851}]
CODEBASE = http://www.trinsic.org/download_serial.exe
--------------------------------------------------
End of report, 10,154 bytes
Report generated in 0.639 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
thanks if anyone sees anything weird please let me know ..
sweetcheekies