Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Internet connection problem 1

Status
Not open for further replies.

SirBlack

Technical User
Apr 17, 2007
234
US
I posted this to another forum but I think it belongs here.

I'm stumped! A client brought his tower in for repairs. He had Dial-up connection but switched to Comcast broadband. He claims he had connection until a week ago after 3-4 months with no problems. According to him, he picked up a virus but was able to remove it (not surprising since he disabled Windows Firewall, set IE privacy setting to allow all cookies & IE Security to medium). I'm sure his wife wouldn't appreciate some of his downloads either but I digress.
I've run CCleaner,chkdsk, cwshredder, PeperFix, Grisoft's AV, AS & Anti-RootKit, WinsockxpFix, Ispfix and RegCleaner all to no avail. All junk files, malware & viruses have been deleted. He connects via a USB cable to Comcast using their modem. He was told he needed to install a driver for his Network adapter card but Device Manager displays no Network adapter. Here are the errors I found in Event Viewer:

The following boot-start or system-start driver(s) failed to load: i8042prt

The IPSEC Services service terminated with the following error: The authentication service is unknown.

The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

The IP address lease 192.168.100.10 for the Network Card with network address 0019474C871F has been denied by the DHCP server 68.87.68.32 (The DHCP Server sent a DHCPNACK message).

The server {C7E39D60-7A9F-42BF-ABB1-03DC0FA4F493} did not register with DCOM within the required timeout.

Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

It also showed the following warnings:

TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 0019474C871F. The following error occurred: The semaphore timeout period has expired. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

Your computer has automatically configured the IP address for the Network Card with network address 0019474C871F. The IP address being used is 169.254.32.95.

OS is Windows XP Home SP2 with IE 6.0. I'm going to run Belarc Advisor later & copy it to a floppy to print & add to this thread if needed. Also plan on installing HijackThis & posting the log (again, if needed) but until then, if anyone has some suggestions, please let me know. Also ran System Restore with no help there.

Thanks in advance!

Bob B-)
 
Event ID: 26
Source i8042prt
Type Error
Description Exceeded the allowable number of retries (configurable via the registry) on device \Device\KeyboardPort0.
Comments Event usually generated by computers connected to a faulty KVM (keyboard, monitor, mouse) switch. If no KVM switch is used and if the keyboard is behaving normally, no action is needed. To avoid this message, try increasing the value of ResendInterations in the Registry key Current Control Set\\Services\\i804prt\\parameters. Or, try using a different keyboard.
More info Q102989
Contributors Adrian Grigorof"



He is not going to go far without a Network Adapter. What do you see if you show "Hidden Devices" in Device Manager?

 
OK! Network adapter is displayed in Device Manager when clicking on show hidden devices including the following sub-levels:

Direct Parallel
WAN Miniport (ATW)
WAN Miniport (IP)
WAN Miniport (L2TP)
WAN Miniport (PPPOE)
WAN Miniport (PPTP)

When I checked Properties, Device status showed all devices working properly & all enabled. Device Manager shows no ! ? or X but still unable to connect. Not concerned about keyboard as it's a spare that I have. Thanks for your help so far, linney.

Bob B-)
 
Have you tried just "Safe Mode with Networking"?

Is Comcast able to be connected to by any old Router or Modem, or whatever? Are there special settings that you, yourself, require?

Now that you have found the Network Adapter, are there any newer drivers for it?

I see you used a few Winsock type applications; as the machine is at SP2, did you try this one?

WinXP Connectivity Issues
faq779-4625

Will the machine connect to other machines in your possession?

Some mention of Comcast in these semi-related links.

INternet explorer will only go to ip addresses not web site names
thread779-1050898

IP Address
thread779-1195257

 
Thanks linney for those sites. It looks like a lot for me to read thru. I'll try booting in "Safe Mode with Networking" & let you know how that works. I made a few adjustments & reran Event Viewer. That cleared all error messages except for:

The IPSEC Services service terminated with the following error: The authentication service is unknown.

I also picked up a new error message:

NetDDE Initialization of "NDDENBL"DLL failed.

Thanks again & will keep you posted as to results.

Bob B-)
 
Nothing so far except for a new error message at reboot:

Error loading C:\windows\system32\meafkekn.dll
The specific module could not be found.
Googling found no matches to this dll.

Here's what I've done today:

"Safe Mode with Networking" No luck.

Diconnected my system from the modem, installed files & drivers for modem on client's PC & connected it to my modem. "Device Manager" shows modem installed in Network adapter as well as all the hidden ones with no conflicts
Rebooted & got a message stating limited or no connectivity

Connected modem to different USB port, only got yellow ! warning with same message for limited or no connectivity.

Ran command prompt netsh winsock reset - still no go.

Ran Castner's utility. [thumbsdown]

Ran ipconfig /all & got the following results:

Physical Address....:00-15-2F-F6-09-11
IP Address............:169-254-134-138
Subnet Mask.........:255.255.0.0
Default Gateway.....:
DNS Server............:
WINS Server..........:

Shouldn't the results be the same as my PC when I connect his to my modem? Opening Network places dispays a LAN connection with yellow! All attempts to renew IP address return as unable. Would installing a NIC resolve this issue? Pulling my hair out here trying to figure out what's wrong & correct it. >:-<

Any other suggestions would be greatly appreciated. Thanks again liney!

Bob B-)

 
C:\windows\system32\meafkekn.dll, what do the Properties of the file tell you?

Check with Comcast for the settings applicable to their Servers and enter their settings, you might even need the clients actual modem if it was supplied by his ISP?

Can you get this machine to see your other machines on a LAN?

See if this interactive troubleshooter from George Michna is of any use to you?


What is Castner's utility? Any relation to Bill Castner?
 
The file meafkekn.dll does not exist in system32 or anywhere on his HD (I searched for that file when I couldn’t find it under system32).

My ISP is Comcast also and my modem is the same type that Comcast supplies. According to client, he was using a dial-up connection prior to switching to Comcast & all worked well until his PC was infected by a virus. He does not remember what the virus was that he cleaned out.

His PC cannot see any of my machines as I disconnect my wireless router before connecting his USB cable to my modem. I installed all files & driver for my modem onto his HD. Device Manager displays my modem under Network adapters as well as the hidden devices mentioned earlier so I don’t think it’s a Comcast issue.
In addition, when I ran ipconfig /all, the Physical Address: 00-15-2F-F6-09-11 is the same as my USB MAC address of my modem.

Castner's utility is the FAQ 779-4625 about ‘Lost Connectivity after Registry or Malware Cleanup’ by Bill Castner that you sent me.

I may have stumbled on the cause of the problem though. I talked with the client earlier concerning the problem & how I disabled an app that kept popping up at reboot that was hard to stop. I thought it was a trial version of a spyware remover. He told me he did not know what it was but tried using the Add/Remove program utility but couldn’t find it listed there and it wasn’t. I exported the Registry to Desktop & then deleted all keys associated with it. After checking more, I discovered the app, MalwareAlarm, was a bug.
When I double checked msconfig, it was no longer listed there but I did find a Startup item called meafkekn. The command line is: rundll32.exe “C\Windows\system32\meafkekn.dll”,sitypnow located in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. I don’t know if this is related to the connectivity issue. I can run HijackThis & post the log if that’ll help. There’s an item also in msconfig for WeatherBug but its location is in drive E: which is slaved off of his C: drive.

Finally, I noticed his MacAfee icon is no longer in the task bar or listed in the Add/Remove programs nor a Startup item in msconfig. A folder for it is in ProgramDesktop shortcut & start menu shortcuts are there but when I click on them, the screen popped up for a split second & disappeared.

Any other suggestions would still be greatly appreciated. Thanks for your help again lnney!

Bob B-)


 
Is it possible to ping the Comcast Modem, does it have an IP Address? Can the machine respond to a Ping to 127.0.0.1?

Can you re-install McAfee and reconfigure it, is it a suite that includes Firewall and Antivirus software? If it has been corrupted it may be causing the problems you are seeing?

With various bits and pieces missing it may be time to consider a repair install or at least running SFC /scannow to see if that helps?

If you think the problem or part of it is malware then by all means post the Hijack This log.
 
Thanks for the help! The sites you sent didn't directly solve the issue but steered me in the right direction. At 1st, I was only able to ping 127.0.0.1 & a few others but still not connect. I ended up installing a few more protocols & TCP/IP connections and Voila, I connected to the internet. [2thumbsup]
I ran Windows update & installed all critical updates including IE 7.0. I also updated all the Grisoft apps & ran AS, AV & AntiRootkit. With all the threats, viruses, etc. discovered, it's amazing this machine ran at all.
I still have the Startup item called meafkekn but I disabled it & all seems to be OK. McAfee still isn't running but I think that may be due to running netsh winsock reset. I'll have the client bring his disc for it when he comes to pick it up.
I ran HijackThis & will check the log tomorrow. Here's the log if you want to check it yourself.

Logfile of HijackThis v1.99.1
Scan saved at 12:59:57 AM, on 10/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Seekmo\bin\10.0.275.0\OEAddOn.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C4E6167C9AAE6B2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.275.0\HostIE.dll
O2 - BHO: (no name) - {1D7B70B4-FFA0-4BB0-AC0D-A12899F7E374} - C:\WINDOWS\system32\pmnll.dll (file missing)
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: {f26cbb3b-7b1e-a55b-ee14-1e03824c9e5b} - {b5e9c428-30e1-41ee-b55a-e1b7b3bbc62f} - C:\WINDOWS\system32\kveusecj.dll (file missing)
O2 - BHO: (no name) - {C093EB08-34A7-4891-8055-FDF36C236735} - C:\WINDOWS\system32\mlljj.dll (file missing)
O2 - BHO: (no name) - {CB049399-2643-4C4A-8DF1-A2FC57AD471A} - C:\WINDOWS\system32\ddcyw.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.275.0\HostIE.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SeekmoOE] C:\Program Files\Seekmo\bin\10.0.275.0\OEAddOn.exe
O4 - HKLM\..\Run: [SeekmoSA] "C:\Program Files\Seekmo\bin\10.0.275.0\SeekmoSA.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Weather] E:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - O20 - Winlogon Notify: awtqr - C:\WINDOWS\system32\awtqr.dll (file missing)
O20 - Winlogon Notify: ddcyw - C:\WINDOWS\system32\ddcyw.dll (file missing)
O20 - Winlogon Notify: gebcd - C:\WINDOWS\system32\gebcd.dll (file missing)
O20 - Winlogon Notify: mljjk - C:\WINDOWS\system32\mljjk.dll
O20 - Winlogon Notify: mllml - C:\WINDOWS\system32\mllml.dll (file missing)
O20 - Winlogon Notify: mllmn - C:\WINDOWS\system32\mllmn.dll (file missing)
O20 - Winlogon Notify: nnnljki - nnnljki.dll (file missing)
O20 - Winlogon Notify: pmnli - C:\WINDOWS\system32\pmnli.dll (file missing)
O20 - Winlogon Notify: pmnll - C:\WINDOWS\system32\pmnll.dll (file missing)
O20 - Winlogon Notify: ssqro - C:\WINDOWS\system32\ssqro.dll (file missing)
O20 - Winlogon Notify: ssqrr - C:\WINDOWS\system32\ssqrr.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Thanks again for all your help!

Bob B-)
 
According to this site there are quite a few problems with your Hijack This log (including that there is a later version available).

Too many for me to list here, so check this site out, but only use it as a guide, you'll see what I mean by the number of errors flagged.

HijackThis log file analysis

Anyway you have at least solved the Customer's major problem, well done.
 
Thanks once more! The site you sent found a couple more that I missed. I left a few entries alone regarding Seekmo until I speak to the client. All appears to be running smoothly. I realize I'm running an old version of HJT but new v is Beta & I'm always reluctant to run Beta versions, especially on a client's machine. Here's the lates log:

Logfile of HijackThis v1.99.1
Scan saved at 2:53:08 PM, on 10/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Support.com\bin\tgcmd.exe
C:\Program Files\Seekmo\bin\10.0.275.0\OEAddOn.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Seekmo /fleok=1D8A83A5C4E6167C9AAE6B2A1FBB39BFE4976E26CAEDA120180A196D6093 - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.275.0\HostIE.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL
O3 - Toolbar: Seekmo - {07AA283A-43D7-4CBE-A064-32A21112D94D} - C:\Program Files\Seekmo\bin\10.0.275.0\HostIE.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SeekmoOE] C:\Program Files\Seekmo\bin\10.0.275.0\OEAddOn.exe
O4 - HKLM\..\Run: [SeekmoSA] "C:\Program Files\Seekmo\bin\10.0.275.0\SeekmoSA.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} (Rhapsody Player Engine) - O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Bob B-)
 
Yes. When I went to Merijn.org, it said it was currently at 2.00 beta. I had checked out Seekmo but will talk to the client & advise him to remove this app. In discussions with him, his wife hardly ever uses the PC & he admitted to not being computer savvy. I'll deliver his tower tomorrow & walk him thru a few basic security messages to take as well as not logging on as Admistrator always.
Thanks for all your help.

Bob B-)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top