Windows ME in a mess

I guess I posted in the wrong place and they sent me to spyware specific
I'm trying to fix my friends Me machine it is slow and has had virus problems
too numerous to name she can not access her pogo.com games machine won't defrag. I did the don't post until you do this thing online bit defender ravantivirus ect. I am at aloss PP helped me last time with my machine so I was hoping somebody could help me clean up this mess.

steph

 

OK Chaslang here goes HJT attached I hope never mind it give me an invalid file name error

 

I apparently amdoing something wrong as I can't get the log to save to C:\Program Files HJT and when I go to get it under attachments it says invalid file extension ? Do you have any clue as to what I am doing wrong?

 

what a dumba$$ am I no Zip on Windows ME

 

Hey Chaslang,
It was locking up, just had to unplug it. It is a friends machine and she likes to play games in Pogo.com and it wont let you play. I uninstalled Weatherbug two weeks ago but the exe error still pops up at start up and I can.t get it off. It won't defrag. When I first started with installing and scanning three weeks ago it had 222 critical objects removed , AVG is some how corrupted and won't update and a kazaa oriented virus keeps coming back I am only able to work afew hours at the time so it has gotten really drawn out I used the Kaza begone yesterday so I am waiting to see what happens this morning
and I am going to the Pogo web site once I get it cleaned up and see if they can figure out her game problem. can I go into the hijack file and remove this stuff that you listed? Can I also disable some of the stuff that comes up in the tray at start up? There is a Wauclt (sp) that I end and it comes right back.

 

back home for a day,
I did all you said in the last posts Chaslang, the weather bug exe error is gone and I got the manual update for AVG from the site list and it is ok now but the machine has gotten much slower and now almost no games from pogo.com will load any ideas? should I start at the beginning again?
Thanks in advance ya'll are the greatest.
Step

 

I checked and fixed all pogo that u requested I did all that you asked the day after you posted I just was not a aplace I had Internet access until today like I said it is a friends machine and she called me after I left home to tell me she could not even access the pogo games after I cleaned up the HJT file but I will start over anyway.
thanks
tester36

 

Chaslang,
I ran se adware Avg, cleanup, ccleaner, spybot - DSO exploit shows and fixed then did HJT log all of the 016 were removed after the last HJT scan when you told me to remove them I did these are back since then
steph

 

If this hjt file is not dated 8/20 I did something wrong let me know and I will send again
steph

 

Chaslang,
I know you probably think I am an idiot, I maybe am crazy but that is it. This computer is running me nuts. I got on the ME machine when I sent you the HJT file and it seemed slow but not so bad after I took off that DSO exploit
but I was reading in that pogo.com help and it says that your pop up blocker or firewall could make these" Cripes" errors and then it proceeds to tell you things to do. Is this place a bad place for her to go? It appears not too threatening as far as the games go. When I got home I went into the game that she is trying to access and I have all the same protection she has and I could play the game (Fortune Bingo). I did not disable any thing on my machine. I ran a new spybot and all after I went in to the game and it did not load anything except the cookies and I guess what runs the game.The only other thing I notice different is that there are alot of office applications on her machine as her daughter uses them in her work.
steph

 

I have also noticed 2 extra task bars that have not been on internet explorer one is searchfuel.com the other I can't find an address

 

To add an addendum this morning when you click on the start button to shut the computer down it takes about 75 seconds for the menu to come up. I must leave going back to work to night hope to hear soon.
Thanks again.
steph

 

Hey Chaslang ,
Happy AM to you. I to do not play these things and did not know what pogo.com was until this. and I only went to the site to see if it was just her machine or as they said she needed to disable her spyware firewall. I went to pogo.om on my machine and opened that bingo game and then exited then I reran my spybot on my machine because I am paranoid and wanted to make sure it did not put any thing on my machine and it did not my machine was and continues to be clean because of all of my fighting equipment I got from majorgeeks.
The machine sometimes is slow sometimes not so slow even like in msn.com ect. and no I still cannot defrag because of a error it says to scandisk which restarts and restarts. No memory test run can I get that on the site? What about the extra tool bar?from Search fuel it just showed up the other day?
Again Thanks in advance,
tester36

 

Chaslang,
I did get the scan disk to run and defragged. I am gettiing ready to install and do the memory test. I don't mean to ask a dumb question but all I have to do is let the memory test run and note the results?
later
steph

 

Hey,
I have run the memory test for 6 hrs and no errors are recognized. The machine memory is 32 bit virtual and 127 mb RAM memory Windows ME.

On the scan disc it shows 1,050,165,248 bytes in hidden files no bad areas
It runs fine some then it will slow to a crawl. I saw in the download area of the web site the toolbarcop and I was wondering if I could download that and have you to send me whereever I belong to have the scan looked at?
I 'm out of ideas and patience as you well know this has been going on along time now and I think we have all the malware removed except this tool bar thing.
I too am working for free. You folks are indeed the best.

steph

 

c2lop problem Mr stupidhead descibes the same toolbar I am talking about
Links Auction Chat Dating Debt ect it does not show in add or remove programs and when you move the cursor over it is shows searchfuel.com/?

steph

 

http://forums.majorgeeks.com/member.php?u=41526
I hope I have the actual link right
steph

 

No Sir, his post does not mention searchfuel.com but his description is exactly the same. As I pass the arrow over the toolbar ( my stupid inaccurate description earlier as a taskbar) it pops up searchfuel.com. The description is also my inaccuracy it should read" have not been showing up in Internet Explorer earlier". I assume the other toolbar is MSN associated but when I pass the arrow over it no address shows. I am sorry but I don't know how to do a screenshot.
ps I have to work tomorrow and won't be back til friday night.
Thanks so much
steph

 

Hey Chaslang,
i removed the 04 Hklm like you asked and I ran the new toolbarcop but I am not really sure what to do with results I do not see the tool bar I am talking about llisted but I notice alot of start up items .
down next to the start button there is a little e with a folder behind it with an address of 280352 1-UIT=G&TargetID=4659&CtxID=2&PID=659423&AN=24984
I believe this is the address of that toolbar it does not show up in the view on IE and I am not seeing it on toolbarcop. I am trying to send you this toolbarcop log and as I was looking for it I found some type of back up file with tons of backups in it could this be something that has caused such a slow down in this machine how can I show it to you I tried to attach it it appears to be a backup file maybe weekly ?

 

Hey Chaslang,
I have this HJT uninstall_list:
56K AC-Link Voice Modem
AC-Link 3D Game Audio
Ad-Aware SE Personal
Adobe Acrobat 5.0
Adobe Download Manager (Remove Only)
AVG Free Edition
Backyard Football
Bird Hunter Wild Wings Edition
BJ Printer Driver
BJC-2100 Series Canon Creative Launcher
CCleaner (remove only)
CleanUp!
Deer Hunter 3
eAcceleration
Easy CD Creator 5 Basic
Efficient Networks SpeedStream DSL
Efficient Networks USB Virtual Bus for USB/Ethernet ADSL Modem
FoneSync
Gateway Ink Monitor
Gateway ISelect
GoBack
HijackThis 1.99.1
Hoyle Solitaire
Internet Explorer Q896727
Internet Explorer Q903235
J2SE Runtime Environment 5.0 Update 4
Kodak EasyShare software
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
Microsoft Data Access Components KB870669
Microsoft Encarta Encyclopedia Standard 2001
Microsoft Internet Explorer 6 SP1 and Internet Tools
Microsoft Money 2001
Microsoft Office XP Media Content
Microsoft Office XP Standard for Students and Teachers
Microsoft Outlook Express 6
Microsoft Picture It! Publishing 2001
Microsoft Streets and Trips 2001
Microsoft VGX Q833989
Microsoft Works 2001 Setup Launcher
Microsoft Works 6.0
Microsoft Works Suite Add-in for Microsoft Word
Microsoft XML Parser and SDK
MusicMatch Jukebox
My Disney Kitchen
Outlook Express Q887797
QuickTime
Shockwave
Spybot - Search & Destroy 1.4
SpywareBlaster v3.4
SysSnap
Ultimate Solitaire
USB Millennium Keyboard
Windows Millennium Edition KB891711 Update
Windows Millennium Edition Q823559 Update
WinZip
ZoneAlarm

I tried to send a screen shot but it says the file is to large max ot 2.0mb.
the e icon I am talking about is a URL 280352 1-UIT=G&TargetID=4659&CtxID=2&PID=659423&AN=24984 when I right click under properties that is listed. Her niece used this macine and after she used it this toolbar showed up
steph

 

Hey,
We did uninstall eAcceleration. I have no idea what SySnap is but I will see if I can find it. I also don't know about the URL thing I just right clicked and under properties it says Url ect ect. the e icon is in the taskbar down by the start button next to outlook express icon and internet explorer. The relation may well be to eAacceleration. Probably for a day or so we might not have power we are under Hurricaine watch from Hurricaine Katrina, I hope we will not be affected this time, Ivan ,and Dennis really messed everything up but just in case I did not want you to think I am not interested. Hopefully I can get to her computer tomorrow.
thanks ahead of time,
Steph

 

Hey Chaslang we made it through the storm Bless those poor people in N.O. and Miss. and south of us in Al.
I went to add and remove programs and it said eAcceleration was not there did I want the name removed from the list I said yes and now it is gone the little e is deleted from the quick launch. And I don't know what that SysSnap is and can't find it on the computer search?
I am going to try and send the screenshot again.
steph

 

Hey Chaslang,
Here is the log and it said one problem and fixed it "Ad mediacharger"
soon,
stephanie

 

I can't find anything in add/ remove that is anything like SysSnap.
If this machine is virus free and all I don't think she cares about the toolbar if it is not a threat. The computer is still very slow sometimes,sometimes it runs fine could her loaded up startup list cause that? I am at a loss I think a car wash to buy her a new computer would be more constructive with your and my time.
Steph

 

Hey Chaslang,
Afriend of mine sent me a web page that says syssnap is a windows XP restore program or a connection to same.
Stephanie

 

Hey Chaslang,
I sent you a screenshot in reference to the toolbar that has been the main topic of discussion lately.

I did the toolbar cop. the Spysweeper and it did not remove or change it. I have not done a Ewido scan as she has Windows ME and that scan can not be done on ME maybe it was a HJT uninstall list? I do not know I am just hunting for info you asked if I knew about SysSnap and I don't, my friend was reading all this and found the info on SysSnap. I will do whatever you think I need to do no problem. You said that the Spysweeper was OK so I was just assuming if no more spyware and it is still not right maybe I need to look elsewhere maybe software, This is exactly why I don't have an ME system but I was trying to help this lady, she has no monetary resources.
Just trying to help. I agree about the eAcceleration but nothing is moving this toolbar nor changing the performance of her machine. Without you telling me what to do I am helpless.
Thanks in advance,
Stephanie

 

Hey Chaslang,
You again hit the nail on the head. If I read you right we have accomplished
what I came here for to clean her machine up and I too also believe that after over a month and a half we have done that.Thank you and thank God.
The work that ya'll do here is the absolute greatest, I don't know how you do it I am just helping one and when it doesn't go right it runs me crazy, and ya'll are helping thousands that don't know what they are doing, won't follow instructions ect ect and you trudge on out of the goodness of your heart. My hat is off to you all. To find out about her start up menu and the pogo.com issue would that be software?
Again many, many thanks,
Stephanie

 

Hey All
I have been working away from home and have not been able to do anything but I 'm home for a few days. Chaslang I posted in games and the Major said to come back here first so I did I redid all the scans and steps in do before you post. The good thing is she has come up clean of spyware I also did a
WPFind and thought you might could look at it and if it is ok send me to the right place like games or software ect. The main problem since all the malware is gone is the same the performance of the machine is just really slow in gaming especially on the pogo.com web site.
Thanks again in advance steph I also have a new hjt log if you would like.

 

First off Happy Birthday Chaslang!!!!
Thanks for all you do.
Back to computer problem I tried yesterday for a long while just using different programs, word, solitaire not on line, just looking through files, ect and the machine does appear to slow down. Just surfing around on the internet I did not notice it being that slow unless multitasking (scanning and surfing ect. or talking and surfing ).
steph