ad ware vs spyware

Discussion in 'Software' started by rmbler, Mar 12, 2004.

  1. rmbler

    rmbler Private First Class

    hi all this may seem a stupid question but i gotta ask anyway is ad ware the same as spy ware i run spy bot s & d but i seem to be experiencing slow internet connections latey i have cable and have noticed a drop off in speeds. So my question is if i'm running sb search and destroy do i need to run ad ware and if so what would you recommend

    thank Phil
     
    Last edited by a moderator: Mar 12, 2004
    rmbler, Mar 12, 2004
    #1
  2. Tater

    Tater Tot

    It definetly not a bad idea to try both and I know many on this board use both. I almost always find extra badies when I run one right after the other.
     
    Tater, Mar 12, 2004
    #2
  3. Greyhound

    Greyhound Sergeant

    I agree with tater, run them both and make sure you keep them updated. It would also be good if you ran spyblaster too. If you can now run HiJackThis and post it, we may find a problem there that is slowing you down. :rolleyes:
     
    Greyhound, Mar 12, 2004
    #3
  4. rmbler

    rmbler Private First Class

    hijack file

    thanks so much for taking the time guys here is the file



    ogfile of HijackThis v1.97.7
    Scan saved at 10:33:52 AM, on 3/12/04
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
    C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
    C:\WINDOWS\SYSTEM\TBCTRAY.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
    C:\WINDOWS\TEMP\HIJACKTHIS.EXE
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
    R3 - URLSearchHook: (no name) - {D6DFF6D8-B94B-4720-B730-1C38C7065C3B} - (no file)
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\CCHELPER.DLL
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\PSTOPPER.DLL
    O3 - Toolbar: FlowGoBar - {4E7BD74F-2B8D-469E-C0FF-FD63B399BC7D} - C:\PROGRA~1\FLOWGO~1\TOOLBAR\FLGOBAR.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
    O4 - HKLM\..\Run: [AVG_CC] C:\PROGRAM FILES\GRISOFT\AVG6\avgcc32.exe /startup
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
    O4 - HKLM\..\Run: [TraySantaCruz] C:\WINDOWS\SYSTEM\TBCTRAY.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
    O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedContent/sc/bin/cabsa.cab
    O16 - DPF: {4DB565BD-A306-415B-ADCB-336EAAE8D262} (ChainCast VMR Client Proxy) - http://64.124.45.181/download/ccpm_0223.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37874.5623263889
    O16 - DPF: {7CF052DE-C74F-421B-B04A-3B3037EF5887} (CCMPGui Class) - http://64.124.45.181/chaincast/proxy/CCMP.cab
    O16 - DPF: {EE5CA45C-BFAC-48E6-BE6C-3C607620FF43} (IMViewerControl Class) - http://companion.logitech.com/companion/logitech/ver1.3.1.2083/bin/imvid.cab
    O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://64.124.45.181/downloads/ccpm_0237.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - http://www.symantec.com/techsupp/activedata/ActiveData.cab
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedata/SymAData.dll
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab
    O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
     
    rmbler, Mar 12, 2004
    #4
  5. Adrynalyne

    Adrynalyne Guest

    Adrynalyne, Mar 12, 2004
    #5
  6. goldfish

    goldfish Lt. Sushi.DC

    goldfish, Mar 12, 2004
    #6
  7. rmbler

    rmbler Private First Class

    re: safe mode

    i'm not all that computer savy and not sure safe mode will help me in this situation i just hope that if anyone finds anything with the hijacked file you will also be able to help me take care of it step by step
    thanks again everyone
    Phil

    ps now that i have adware 6.0 installed i get a compatibillty warning i wasn't able to post it as i couldn't copy and paste it i am sorry it seems that my post falls under the definition of a project rather than a post but i need help
     
    Last edited: Mar 12, 2004
    rmbler, Mar 12, 2004
    #7
  8. Ginanatl

    Ginanatl Specialist

    You're in the best hands here...

    But I just wanted to mention this app as well:
    http://www.majorgeeks.com/download2859.html

    It is listed on the "Immunize" page of Spybot Search & Destroy so you may have it already, but it is awesome! :D It blocks the baddies before they damage your PC, takes NO CPU and it's freeware... :D :D

    Sorry, hijacked files elude me, but you are in good hands with the members that are helping you. Be sure to install the above app and keep it updated when you get everything fixed. (It has saved my computer. I have not been hijacked once since installing it!)

    Good luck,
    Gina
    :)

    BTW rmbler, I just saw this part of your post:
    I think you were referring to Adrynalyne's signature. Adrynalyne isn't advising you to try safe mode (to my knowledge.) It's just a part of the general signature because safe mode and searching MG and Microsoft solves so many problems... I've made the same mistake. ;)
     
    Last edited: Mar 12, 2004
    Ginanatl, Mar 12, 2004
    #8
  9. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Tough to answer. Some Adware and spyware go together, some ads or programs install and spy on you without you knowing. Spyware can also be key loogers, etc., though programs like Spybot and Ad-aware are not really designed to remove the programs. I wrote a article explaining the basics of some spyware which you can read here:
    http://www.majorgeeks.com/vb/showthread.php?t=25834

    Internet speeds are tricky and subject to a lot of variables, if you think thats a problem i would start a new thread with your details.


     
    Major Attitude, Mar 12, 2004
    #9
  10. billH

    billH Master Sergeant

    Hi memb, you might want to look at what google has to say about:
    R3 - URLSearchHook: (no name) - {D6DFF6D8-B94B-4720-B730-1C38C7065C3B} - (no file)

    Look here
     
    billH, Mar 13, 2004
    #10
  11. NonSuch

    NonSuch Private E-2

     
    Last edited: Mar 13, 2004
    NonSuch, Mar 13, 2004
    #11
  12. rmbler

    rmbler Private First Class

    thanks so much for all the help now i know where to start. i agree with not running both anto virus programs i have tried to remove norton but unable to when i try it messes up my registry and i can't boot with out problems.
    i tried add/remove programs no entry there no uninstaller either it came with system works any ideas?

    thanks again
    phil
     
    Last edited: Mar 13, 2004
    rmbler, Mar 13, 2004
    #12
  13. Greyhound

    Greyhound Sergeant

    You can find their uninstaller on their site.
     
    Greyhound, Mar 13, 2004
    #13
  14. NonSuch

    NonSuch Private E-2

    Get Rid of FlowGo as Well as Panicware Popup Stopper!

    Check Symantec's site for removal tools for the Norton software as suggested by Greyhound, get rid of the R3 item mentioned in BillH's post, and the two Panicware Popup Stopper items, also get rid of the FlowGo Toolbar. (Nasty parasite!) Read about it here:

    http://www.pestpatrol.com/pestinfo/e/euniverse.asp

    You should also download SpywareBlaster and SpywareGuard, both of which will help PREVENT spyware/adware from installing itself on your system. Use them along with Ad-Aware and Spybot Search and Destroy, which find and REMOVE spyware/adware.

    Pay a visit to SpywareInfo's Forums as previously mentioned: http://www.spywareinfo.com/forums/ Their forums are devoted to the hunting down and killing of spyware/adware/malware. There is a wealth of knowledge on that site.

    After you've fixed all the above items, run HijackThis again and post your new log at SpywareInfo.

    You're going to be OK! http://www.emotipad.com/newemoticons/Grin-Nod.gif
     
    NonSuch, Mar 13, 2004
    #14
  15. Risus

    Risus Private E-2

    Is the spyblaster you refer to the same as Spyware blaster????
     
    Risus, Mar 13, 2004
    #15
  16. rmbler

    rmbler Private First Class

    thank you all for all the help and taking the time to reply to and read my hijack log. not sure if i can remove thinks from the registry without messing it up but i will try regclean. or can i just go into the registry local machine -software and delete it from the registry

    thank you all so much again
    Phil
     
    Last edited: Mar 16, 2004
    rmbler, Mar 16, 2004
    #16
  17. pegg

    pegg MajorGeek

    is Panicware Popup Stopper spyware?

    OK - I guess I'm asking the silly question now...I looked at that site. So....Popup Stopper is a type of ADWARE (which is "bad"???)

    (I just found info. posted here under "Tips..." for pop-up stoppers to install") But I'd like to know if this Panicware is a type of Spyware and I need to go and uninstall everything first.

    Thanks.
     
    Last edited: Mar 16, 2004
    pegg, Mar 16, 2004
    #17
  18. rmbler

    rmbler Private First Class

    popup stopper

    ok heres a question hope someone can help if panicware popup stopper isn't good as far as adware goes can anyone give me an idea of what they use and what your ideas of the best free one might be
    thank you
    Phil
    ps. can anyone tell me what they think of using reg cleaner i really don't have much experience editing registry and need a very safe way to clean it out

    thank you so much
    phil
     
    Last edited: Mar 17, 2004
    rmbler, Mar 17, 2004
    #18
  19. alanc

    alanc MajorGeek

    RegSupreme is a good one, by the same author as RegCleaner, they're both handy.
     
    alanc, Mar 17, 2004
    #19
  20. j_n_alize

    j_n_alize Private E-2

     
    j_n_alize, Mar 17, 2004
    #20
  21. rmbler

    rmbler Private First Class

    just a quick thanks to all for the help

    thank you very much
    Phil
     
    rmbler, Mar 17, 2004
    #21
  22. NonSuch

    NonSuch Private E-2

    Well, usually if you're trying to block pop-ups it's because you're trying to avoid ads. Since this particular software, Popup Stopper, is adware and puts ads on your system, I would not consider it a good thing by any means and certainly would not want it on any of my computers. As to whether or not it places tracking cookies on your system, I really haven't checked that out so I honestly don't know.

    I use the Google Toolbar and have it set to block pop-ups. Additionally, my ISP has an option for blocking pop-ups, and my firewall also has the pop-up blocking capability.
     
    NonSuch, Mar 18, 2004
    #22
  23. alanc

    alanc MajorGeek

    Regarding Panicware Popup Stopper, I really don't think it is anything to be afraid of. I used it with IE for awhile last year before I switched to MyIE2, and the only thing I remember that remotely resembled an ad was the splash screen that displayed when it launched. It blocked popups pretty well, and I had no problem uninstalling it, IIRC.

    Pestpatrol.com is a great resource, but sometimes they get a little paranoid about 'adware', IMO.

    As always, common sense and regular use of Ad-aware and Spybot is going to be your best line of defense.
     
    alanc, Mar 18, 2004
    #23
  24. Greyhound

    Greyhound Sergeant

    I also used Panicware Popup Stopper, and had the same reaction as you alanc, now I use Google Tool Bar and had no problems with uninstalling Panicware.
     
    Greyhound, Mar 18, 2004
    #24
  25. rmbler

    rmbler Private First Class

    hijack this

    ok all again i want to thank everyone for all the help i removed the flo glo bar as earler recommened or at least i hope i did didn't remove the pop up blocker as yet.Not very comfortable messing with the registry here is my hijack log if someone would be kind enough to review it i would be greatfull. also found no help on removing norton av thank you again
    Logfile of HijackThis v1.97.7
    Scan saved at 10:18:53 AM, on 3/18/04
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
    C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
    C:\WINDOWS\SYSTEM\TBCTRAY.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\DESKTOP\ALL FOLDERS\HIJACK THIS\HIJACKTHIS.EXE
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about_:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about_:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about_:blank
    R3 - Default URLSearchHook is missing
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\CCHELPER.DLL
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\PSTOPPER.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
    O4 - HKLM\..\Run: [AVG_CC] C:\PROGRAM FILES\GRISOFT\AVG6\avgcc32.exe /startup
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
    O4 - HKLM\..\Run: [TraySantaCruz] C:\WINDOWS\SYSTEM\TBCTRAY.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
    O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedContent/sc/bin/cabsa.cab
    O16 - DPF: {4DB565BD-A306-415B-ADCB-336EAAE8D262} (ChainCast VMR Client Proxy) - http://64.124.45.181/download/ccpm_0223.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37874.5623263889
    O16 - DPF: {7CF052DE-C74F-421B-B04A-3B3037EF5887} (CCMPGui Class) - http://64.124.45.181/chaincast/proxy/CCMP.cab
    O16 - DPF: {EE5CA45C-BFAC-48E6-BE6C-3C607620FF43} (IMViewerControl Class) - http://companion.logitech.com/companion/logitech/ver1.3.1.2083/bin/imvid.cab
    O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://64.124.45.181/downloads/ccpm_0237.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - http://www.symantec.com/techsupp/activedata/ActiveData.cab
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedata/SymAData.dll
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab
    O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20031216/qtinstall.info.apple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab

    any suggestions would be greatly appreciated
    thanks again
    Phil
    ps. if i remove norton av from the registry will that remove it from my machine if so could someone tell me the exact path i need to use to remove the bad entrys
     
    Last edited: Mar 18, 2004
    rmbler, Mar 18, 2004
    #25
  26. pegg

    pegg MajorGeek

    thanks

    Thanks for replying...I've uninstalled Popup Stopper -- but then I ran Adaware and found some more components. I went ahead and installed the Google Toolbar also. Who knew -- I thought installing a Popup stopper would be a good thing...glad this website is here!!
     
    pegg, Mar 19, 2004
    #26

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds