Hi, thanks once again for the quick reply.
Now that you mention something writing to the drive... I was trying to defrag yesterday and it kept having to restart because it was saying the "drives contents had changed" I was kinda worried because last time it did that I had the Benjamin Worm. I only had systray and explorer in my CTRL + ALT + DEL menu thingy, so I have no idea what it was...
I have an IBM Clone, Pentium III 500(?) with 128mb RAM
Thanks.
--------------
StartupList report, 5/02/03, 3:07:24 PM
StartupList version: 1.51
Started from : C:\WINDOWS\TEMP\STARTUPLIST.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
==================================================
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\TABLET.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\NISUM.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\CCPXYSVC.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\STARTUPLIST.EXE
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
iamapp = C:\Program Files\Norton Internet Security\IAMAPP.EXE
ccApp = C:\Program Files\Common Files\Symantec Shared\ccApp.exe
ccRegVfy = C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
Tablet = C:\WINDOWS\SYSTEM\Tablet.exe
SchedulingAgent = mstask.exe
nisserv = C:\Program Files\Norton Internet Security\NISSERV.EXE
ccEvtMgr = C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
Nisum = C:\Program Files\Norton Internet Security\NISUM.EXE
ccPxySvc = C:\PROGRA~1\NORTON~2\CCPXYSVC.EXE
--------------------------------------------------
C:\WINDOWS\WININIT.BAK listing:
(Created 4/2/2003, 13:22:52)
[Rename]
C:\PROGRA~1\NORTON~2\ALERTAST.EXE=C:\PROGRA~1\NORTON~2\ALERTAST.EX^
C:\PROGRA~1\NORTON~2\FREINTEG.DLL=C:\PROGRA~1\NORTON~2\FREINTEG.DL^
C:\PROGRA~1\NORTON~2\HNETCORE.DLL=C:\PROGRA~1\NORTON~2\HNETCORE.DL^
C:\PROGRA~1\NORTON~2\HNETWIZ.EXE=C:\PROGRA~1\NORTON~2\HNETWIZ.EX^
C:\PROGRA~1\NORTON~2\IAMSTATS.EXE=C:\PROGRA~1\NORTON~2\IAMSTATS.EX^
C:\PROGRA~1\NORTON~2\INTROWIZ.EXE=C:\PROGRA~1\NORTON~2\INTROWIZ.EX^
C:\PROGRA~1\NORTON~2\INTRWRAP.DLL=C:\PROGRA~1\NORTON~2\INTRWRAP.DL^
C:\PROGRA~1\NORTON~2\LICALERT.DLL=C:\PROGRA~1\NORTON~2\LICALERT.DL^
C:\PROGRA~1\NORTON~2\NISFSTDL.DLL=C:\PROGRA~1\NORTON~2\NISFSTDL.DL^
C:\PROGRA~1\NORTON~2\NIS_SMUI.DLL=C:\PROGRA~1\NORTON~2\NIS_SMUI.DL^
C:\PROGRA~1\NORTON~2\NISABOUT.DLL=C:\PROGRA~1\NORTON~2\NISABOUT.DL^
C:\PROGRA~1\NORTON~2\NISEMAIL.DLL=C:\PROGRA~1\NORTON~2\NISEMAIL.DL^
C:\PROGRA~1\NORTON~2\NISFETA.DLL=C:\PROGRA~1\NORTON~2\NISFETA.DL^
C:\PROGRA~1\NORTON~2\NISFETP.DLL=C:\PROGRA~1\NORTON~2\NISFETP.DL^
C:\PROGRA~1\NORTON~2\NISLCOM.DLL=C:\PROGRA~1\NORTON~2\NISLCOM.DL^
C:\PROGRA~1\NORTON~2\NISLUCBK.DLL=C:\PROGRA~1\NORTON~2\NISLUCBK.DL^
C:\PROGRA~1\NORTON~2\NISOPTS.DLL=C:\PROGRA~1\NORTON~2\NISOPTS.DL^
C:\PROGRA~1\NORTON~2\NISPLUG.DLL=C:\PROGRA~1\NORTON~2\NISPLUG.DL^
C:\PROGRA~1\NORTON~2\NISPROD.DLL=C:\PROGRA~1\NORTON~2\NISPROD.DL^
C:\PROGRA~1\NORTON~2\PCWIZ.DLL=C:\PROGRA~1\NORTON~2\PCWIZ.DL^
C:\PROGRA~1\NORTON~2\PCWIZ.EXE=C:\PROGRA~1\NORTON~2\PCWIZ.EX^
C:\PROGRA~1\NORTON~2\RLEVEL.DLL=C:\PROGRA~1\NORTON~2\RLEVEL.DL^
C:\PROGRA~1\NORTON~2\SYMMONI.EXE=C:\PROGRA~1\NORTON~2\SYMMONI.EX^
C:\PROGRA~1\NORTON~2\SYMURL.DLL=C:\PROGRA~1\NORTON~2\SYMURL.DL^
C:\PROGRA~1\NORTON~2\TDIT_MSG.DLL=C:\PROGRA~1\NORTON~2\TDIT_MSG.DL^
C:\PROGRA~1\NORTON~2\URLUPDAT.EXE=C:\PROGRA~1\NORTON~2\URLUPDAT.EX^
C:\PROGRA~1\NORTON~2\ACDISP.DLL=C:\PROGRA~1\NORTON~2\ACDISP.DL^
C:\PROGRA~1\NORTON~2\ALESCAN.EXE=C:\PROGRA~1\NORTON~2\ALESCAN.EX^
C:\PROGRA~1\NORTON~2\ATRACK.DLL=C:\PROGRA~1\NORTON~2\ATRACK.DL^
C:\PROGRA~1\NORTON~2\CCALE.DLL=C:\PROGRA~1\NORTON~2\CCALE.DL^
C:\PROGRA~1\NORTON~2\CCANTISP.DLL=C:\PROGRA~1\NORTON~2\CCANTISP.DL^
C:\PROGRA~1\NORTON~2\CCFWRULS.DLL=C:\PROGRA~1\NORTON~2\CCFWRULS.DL^
C:\PROGRA~1\NORTON~2\CCFWSETG.DLL=C:\PROGRA~1\NORTON~2\CCFWSETG.DL^
C:\PROGRA~1\NORTON~2\CCPROXY.DLL=C:\PROGRA~1\NORTON~2\CCPROXY.DL^
C:\PROGRA~1\NORTON~2\CCPXYEVT.DLL=C:\PROGRA~1\NORTON~2\CCPXYEVT.DL^
C:\PROGRA~1\NORTON~2\CCPXYSVC.EXE=C:\PROGRA~1\NORTON~2\CCPXYSVC.EX^
C:\PROGRA~1\NORTON~2\CCRULEIO.DLL=C:\PROGRA~1\NORTON~2\CCRULEIO.DL^
C:\PROGRA~1\NORTON~2\CCSCANSP.DLL=C:\PROGRA~1\NORTON~2\CCSCANSP.DL^
C:\PROGRA~1\NORTON~2\DATAHTTP.DLL=C:\PROGRA~1\NORTON~2\DATAHTTP.DL^
C:\PROGRA~1\NORTON~2\EVTPWRAP.DLL=C:\PROGRA~1\NORTON~2\EVTPWRAP.DL^
C:\PROGRA~1\NORTON~2\FWUI.DLL=C:\PROGRA~1\NORTON~2\FWUI.DL^
C:\PROGRA~1\NORTON~2\IAMAPP.DLL=C:\PROGRA~1\NORTON~2\IAMAPP.DL^
C:\PROGRA~1\NORTON~2\IAMPW.DLL=C:\PROGRA~1\NORTON~2\IAMPW.DL^
C:\PROGRA~1\NORTON~2\LOGEXPRT.EXE=C:\PROGRA~1\NORTON~2\LOGEXPRT.EX^
C:\PROGRA~1\NORTON~2\NISADBLK.DLL=C:\PROGRA~1\NORTON~2\NISADBLK.DL^
C:\PROGRA~1\NORTON~2\NISALERT.DLL=C:\PROGRA~1\NORTON~2\NISALERT.DL^
C:\PROGRA~1\NORTON~2\NISCMNHT.DLL=C:\PROGRA~1\NORTON~2\NISCMNHT.DL^
C:\PROGRA~1\NORTON~2\NISCONFD.DLL=C:\PROGRA~1\NORTON~2\NISCONFD.DL^
C:\PROGRA~1\NORTON~2\NISEVT.DLL=C:\PROGRA~1\NORTON~2\NISEVT.DL^
C:\PROGRA~1\NORTON~2\NISUM.EXE=C:\PROGRA~1\NORTON~2\NISUM.EX^
C:\PROGRA~1\NORTON~2\NISUMPS.DLL=C:\PROGRA~1\NORTON~2\NISUMPS.DL^
C:\PROGRA~1\NORTON~2\PPROFILE.DLL=C:\PROGRA~1\NORTON~2\PPROFILE.DL^
C:\PROGRA~1\NORTON~2\PXYHTTP.DLL=C:\PROGRA~1\NORTON~2\PXYHTTP.DL^
C:\PROGRA~1\NORTON~2\PXYIM.DLL=C:\PROGRA~1\NORTON~2\PXYIM.DL^
C:\PROGRA~1\NORTON~2\PXYNNTP.DLL=C:\PROGRA~1\NORTON~2\PXYNNTP.DL^
C:\PROGRA~1\NORTON~2\STRMFILT.DLL=C:\PROGRA~1\NORTON~2\STRMFILT.DL^
C:\PROGRA~1\NORTON~2\SYMICONV.DLL=C:\PROGRA~1\NORTON~2\SYMICONV.DL^
C:\PROGRA~1\NORTON~2\TLEVEL.DLL=C:\PROGRA~1\NORTON~2\TLEVEL.DL^
C:\PROGRA~1\NORTON~2\UMCBK.DLL=C:\PROGRA~1\NORTON~2\UMCBK.DL^
C:\PROGRA~1\NORTON~2\WRAPUM.DLL=C:\PROGRA~1\NORTON~2\WRAPUM.DL^
C:\PROGRA~1\NORTON~2\NISFIRST.EXE=C:\PROGRA~1\NORTON~2\NISFIRST.EX^
C:\PROGRA~1\NORTON~2\NISRES.DLL=C:\PROGRA~1\NORTON~2\NIS76A2.TMP
C:\PROGRA~1\NORTON~1\BOOTWARN.EXE=C:\PROGRA~1\NORTON~1\BOOTWARN.EX^
C:\PROGRA~1\NORTON~1\ABOUTPLG.DLL=C:\PROGRA~1\NORTON~1\ABOUTPLG.DL^
C:\PROGRA~1\NORTON~1\APWUTIL.DLL=C:\PROGRA~1\NORTON~1\APWUTIL.DL^
C:\PROGRA~1\NORTON~1\CCIMSCAN.DLL=C:\PROGRA~1\NORTON~1\CCIMSCAN.DL^
C:\PROGRA~1\NORTON~1\CCIMSCAN.EXE=C:\PROGRA~1\NORTON~1\CCIMSCAN.EX^
C:\PROGRA~1\NORTON~1\CFGWIZ.DLL=C:\PROGRA~1\NORTON~1\CFGWIZ.DL^
C:\PROGRA~1\NORTON~1\CFGWIZ.EXE=C:\PROGRA~1\NORTON~1\CFGWIZ.EX^
C:\PROGRA~1\NORTON~1\DEC2.DLL=C:\PROGRA~1\NORTON~1\DEC2.DL^
C:\PROGRA~1\NORTON~1\DEC2AMG.DLL=C:\PROGRA~1\NORTON~1\DEC2AMG.DL^
C:\PROGRA~1\NORTON~1\DEC2ARJ.DLL=C:\PROGRA~1\NORTON~1\DEC2ARJ.DL^
C:\PROGRA~1\NORTON~1\DEC2CAB.DLL=C:\PROGRA~1\NORTON~1\DEC2CAB.DL^
C:\PROGRA~1\NORTON~1\DEC2EXE.DLL=C:\PROGRA~1\NORTON~1\DEC2EXE.DL^
C:\PROGRA~1\NORTON~1\DEC2GZIP.DLL=C:\PROGRA~1\NORTON~1\DEC2GZIP.DL^
C:\PROGRA~1\NORTON~1\DEC2HQX.DLL=C:\PROGRA~1\NORTON~1\DEC2HQX.DL^
C:\PROGRA~1\NORTON~1\DEC2ID.DLL=C:\PROGRA~1\NORTON~1\DEC2ID.DL^
C:\PROGRA~1\NORTON~1\DEC2LHA.DLL=C:\PROGRA~1\NORTON~1\DEC2LHA.DL^
C:\PROGRA~1\NORTON~1\DEC2LZ.DLL=C:\PROGRA~1\NORTON~1\DEC2LZ.DL^
C:\PROGRA~1\NORTON~1\DEC2RTF.DLL=C:\PROGRA~1\NORTON~1\DEC2RTF.DL^
C:\PROGRA~1\NORTON~1\DEC2SS.DLL=C:\PROGRA~1\NORTON~1\DEC2SS.DL^
C:\PROGRA~1\NORTON~1\DEC2TAR.DLL=C:\PROGRA~1\NORTON~1\DEC2TAR.DL^
C:\PROGRA~1\NORTON~1\DEC2TEXT.DLL=C:\PROGRA~1\NORTON~1\DEC2TEXT.DL^
C:\PROGRA~1\NORTON~1\DEC2TNEF.DLL=C:\PROGRA~1\NORTON~1\DEC2TNEF.DL^
C:\PROGRA~1\NORTON~1\DEC2UUE.DLL=C:\PROGRA~1\NORTON~1\DEC2UUE.DL^
C:\PROGRA~1\NORTON~1\DEC2ZIP.DLL=C:\PROGRA~1\NORTON~1\DEC2ZIP.DL^
C:\PROGRA~1\NORTON~1\DECSDK.DLL=C:\PROGRA~1\NORTON~1\DECSDK.DL^
C:\PROGRA~1\NORTON~1\DEFALERT.DLL=C:\PROGRA~1\NORTON~1\DEFALERT.DL^
C:\PROGRA~1\NORTON~1\N32CALL.DLL=C:\PROGRA~1\NORTON~1\N32CALL.DL^
C:\PROGRA~1\NORTON~1\N32EXCLU.DLL=C:\PROGRA~1\NORTON~1\N32EXCLU.DL^
C:\PROGRA~1\NORTON~1\N32VLIST.DLL=C:\PROGRA~1\NORTON~1\N32VLIST.DL^
C:\PROGRA~1\NORTON~1\NAVAP32.DLL=C:\PROGRA~1\NORTON~1\NAVAP32.DL^
C:\PROGRA~1\NORTON~1\NAVAPI.VXD=C:\PROGRA~1\NORTON~1\NAVAPI.VX^
C:\PROGRA~1\NORTON~1\NAVAPI32.DLL=C:\PROGRA~1\NORTON~1\NAVAPI32.DL^
C:\PROGRA~1\NORTON~1\NAVAPSCR.DLL=C:\PROGRA~1\NORTON~1\NAVAPSCR.DL^
C:\PROGRA~1\NORTON~1\NAVCOMUI.DLL=C:\PROGRA~1\NORTON~1\NAVCOMUI.DL^
C:\PROGRA~1\NORTON~1\NAVDEFS.DLL=C:\PROGRA~1\NORTON~1\NAVDEFS.DL^
C:\PROGRA~1\NORTON~1\NAVDX.EXE=C:\PROGRA~1\NORTON~1\NAVDX.EX^
C:\PROGRA~1\NORTON~1\NAVDX.OVL=C:\PROGRA~1\NORTON~1\NAVDX.OV^
C:\PROGRA~1\NORTON~1\NAVEMAIL.DLL=C:\PROGRA~1\NORTON~1\NAVEMAIL.DL^
C:\PROGRA~1\NORTON~1\NAVERROR.DLL=C:\PROGRA~1\NORTON~1\NAVERROR.DL^
C:\PROGRA~1\NORTON~1\NAVEVENT.DLL=C:\PROGRA~1\NORTON~1\NAVEVENT.DL^
C:\PROGRA~1\NORTON~1\NAVINOC.DLL=C:\PROGRA~1\NORTON~1\NAVINOC.DL^
C:\PROGRA~1\NORTON~1\NAVKRNLO.VXD=C:\PROGRA~1\NORTON~1\NAVKRNLO.VX^
C:\PROGRA~1\NORTON~1\NAVLCOM.DLL=C:\PROGRA~1\NORTON~1\NAVLCOM.DL^
C:\PROGRA~1\NORTON~1\NAVLNCH.DLL=C:\PROGRA~1\NORTON~1\NAVLNCH.DL^
C:\PROGRA~1\NORTON~1\NAVLOGV.DLL=C:\PROGRA~1\NORTON~1\NAVLOGV.DL^
C:\PROGRA~1\NORTON~1\NAVLUCBK.DLL=C:\PROGRA~1\NORTON~1\NAVLUCBK.DL^
C:\PROGRA~1\NORTON~1\NAVOPTS.DLL=C:\PROGRA~1\NORTON~1\NAVOPTS.DL^
C:\PROGRA~1\NORTON~1\NAVPROD.DLL=C:\PROGRA~1\NORTON~1\NAVPROD.DL^
C:\PROGRA~1\NORTON~1\NAVSCAN.DLL=C:\PROGRA~1\NORTON~1\NAVSCAN.DL^
C:\PROGRA~1\NORTON~1\NAVSHEXT.DLL=C:\PROGRA~1\NORTON~1\NAVSHEXT.DL^
C:\PROGRA~1\NORTON~1\NAVSTATS.DLL=C:\PROGRA~1\NORTON~1\NAVSTATS.DL^
C:\PROGRA~1\NORTON~1\NAVSTUB.EXE=C:\PROGRA~1\NORTON~1\NAVSTUB.EX^
C:\PROGRA~1\NORTON~1\NAVTASKS.DLL=C:\PROGRA~1\NORTON~1\NAVTASKS.DL^
C:\PROGRA~1\NORTON~1\NAVTSKWZ.DLL=C:\PROGRA~1\NORTON~1\NAVTSKWZ.DL^
C:\PROGRA~1\NORTON~1\NAVUI.DLL=C:\PROGRA~1\NORTON~1\NAVUI.DL^
C:\PROGRA~1\NORTON~1\NAVW32.EXE=C:\PROGRA~1\NORTON~1\NAVW32.EX^
C:\PROGRA~1\NORTON~1\NETBREXT.DLL=C:\PROGRA~1\NORTON~1\NETBREXT.DL^
C:\PROGRA~1\NORTON~1\OEHEUR.DLL=C:\PROGRA~1\NORTON~1\OEHEUR.DL^
C:\PROGRA~1\NORTON~1\OFFICEAV.DLL=C:\PROGRA~1\NORTON~1\OFFICEAV.DL^
C:\PROGRA~1\NORTON~1\PATCH32I.DLL=C:\PROGRA~1\NORTON~1\PATCH32I.DL^
C:\PROGRA~1\NORTON~1\QCONRES.DLL=C:\PROGRA~1\NORTON~1\QCONRES.DL^
C:\PROGRA~1\NORTON~1\QCONSOLE.EXE=C:\PROGRA~1\NORTON~1\QCONSOLE.EX^
C:\PROGRA~1\NORTON~1\QSPAK32.DLL=C:\PROGRA~1\NORTON~1\QSPAK32.DL^
C:\PROGRA~1\NORTON~1\QUAR32.DLL=C:\PROGRA~1\NORTON~1\QUAR32.DL^
C:\PROGRA~1\NORTON~1\S32ALOGO.DLL=C:\PROGRA~1\NORTON~1\S32ALOGO.DL^
C:\PROGRA~1\NORTON~1\S32INTEG.DLL=C:\PROGRA~1\NORTON~1\S32INTEG.DL^
C:\PROGRA~1\NORTON~1\S32NAVO.DLL=C:\PROGRA~1\NORTON~1\S32NAVO.DL^
C:\PROGRA~1\NORTON~1\SAVRT.VXD=C:\PROGRA~1\NORTON~1\SAVRT.VX^
C:\PROGRA~1\NORTON~1\SAVRT32.DLL=C:\PROGRA~1\NORTON~1\SAVRT32.DL^
C:\PROGRA~1\NORTON~1\SAVRTPEL.VXD=C:\PROGRA~1\NORTON~1\SAVRTPEL.VX^
C:\PROGRA~1\NORTON~1\SCANDLVR.DLL=C:\PROGRA~1\NORTON~1\SCANDLVR.DL^
C:\PROGRA~1\NORTON~1\SCANDRES.DLL=C:\PROGRA~1\NORTON~1\SCANDRES.DL^
C:\PROGRA~1\NORTON~1\SCANMGR.DLL=C:\PROGRA~1\NORTON~1\SCANMGR.DL^
C:\PROGRA~1\NORTON~1\SCRIPTUI.DLL=C:\PROGRA~1\NORTON~1\SCRIPTUI.DL^
C:\PROGRA~1\NORTON~1\SDFLT32I.DLL=C:\PROGRA~1\NORTON~1\SDFLT32I.DL^
C:\PROGRA~1\NORTON~1\SDPCK32I.DLL=C:\PROGRA~1\NORTON~1\SDPCK32I.DL^
C:\PROGRA~1\NORTON~1\SDSND32I.DLL=C:\PROGRA~1\NORTON~1\SDSND32I.DL^
C:\PROGRA~1\NORTON~1\SDSOK32I.DLL=C:\PROGRA~1\NORTON~1\SDSOK32I.DL^
C:\PROGRA~1\NORTON~1\SDSTP32I.DLL=C:\PROGRA~1\NORTON~1\SDSTP32I.DL^
C:\PROGRA~1\NORTON~1\SFSTR32I.DLL=C:\PROGRA~1\NORTON~1\SFSTR32I.DL^
C:\PROGRA~1\NORTON~1\SMSTR32I.DLL=C:\PROGRA~1\NORTON~1\SMSTR32I.DL^
C:\PROGRA~1\NORTON~1\SYMNAVO.DLL=C:\PROGRA~1\NORTON~1\SYMNAVO.DL^
C:\PROGRA~1\NORTON~1\TKNV16O.DLL=C:\PROGRA~1\NORTON~1\TKNV16O.DL^
C:\PROGRA~1\NORTON~1\TKNV32O.DLL=C:\PROGRA~1\NORTON~1\TKNV32O.DL^
C:\PROGRA~1\NORTON~1\UNDOBOOT.EXE=C:\PROGRA~1\NORTON~1\UNDOBOOT.EX^
C:\PROGRA~1\NORTON~1\V32SCAN.DLL=C:\PROGRA~1\NORTON~1\V32SCAN.DL^
C:\WINDOWS\SYSTEM\SAVRTGUI.DLL=C:\WINDOWS\SYSTEM\SAVRTGUI.DL^
C:\PROGRA~1\NORTON~1\APWCMD9X.DLL=C:\PROGRA~1\NORTON~1\APWCMD9X.000
C:\PROGRA~1\NORTON~1\NAVAPW32.DLL=C:\PROGRA~1\NORTON~1\NAVAPW32.000
--------------------------------------------------
C:\AUTOEXEC.BAT listing:
PATH C:\BITWARE\
--------------------------------------------------
Enumerating Browser Helper Objects:
(no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
NAV Helper - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
--------------------------------------------------
Enumerating Task Scheduler jobs:
Tune-up Application Start.job
Symantec NetDetect.job
Norton AntiVirus - Scan my computer.job
--------------------------------------------------
Enumerating Download Program Files:
[YInstStarter Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\YINSTHELPER.DLL
CODEBASE =
http://download.yahoo.com/dl/installs/yinst.cab
[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
CODEBASE =
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
[QuickTime Object]
InProcServer32 = C:\WINDOWS\SYSTEM\QTPLUGIN.OCX
CODEBASE =
http://www.apple.com/qtactivex/qtplugin.cab
[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
CODEBASE =
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
[ContentAuditX Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\CONTEN~1.OCX
CODEBASE =
http://a840.g.akamai.net/7/840/5805...ch.com/audit/includes/ContentAuditControl.cab
--------------------------------------------------
End of report, 14,576 bytes
Report generated in 0.505 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only