XP - SP2

  • Thread starter Thread starter LIZ
  • Start date Start date
L

LIZ

Guest
I have XP Professional and got some sort of virus or? I get a error message
that states "Windows cannot access the specified device, path, or file. You
may not have the appropriate permissions to access the item". I can not open
or start any programs and only get this message. I can run programs in safe
mode but can not update windows as I get the error code 0x8007043C. I do not
know what to do and have run a number of things to try and fix it including
hijackthis. The logfile is included.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:29:12 PM, on 12/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OL\TMAS_OL.exe
C:\DOCUME~1\CHRISJ~1\LOCALS~1\Temp\Temporary Directory 1 for
HiJackThis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page =
http://go.microsoft.com/fwlink/?LinkId=54843
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://go.microsoft.com/fwlink/?LinkId=21940
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program
Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program
Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program
Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program
Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft
IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program
Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet
Security 2007\pccguide.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows
Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software
Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security
2007\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat
7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [Tair] "C:\PROGRA~1\COMMON~1\ASKS~1\iexplore.exe" -vt yazb
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting]
"C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting]
"C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) -
http://h30155.www3.hp.com/ediags/dd/install/HPInstallMgr_v01_6.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
http://software-dl.real.com/01d1b85147621cc5ee23/netzip/RdxIE2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1168651254906
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) -
file://C:\Program Files\AutoCAD 2000i\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
file://C:\Program Files\AutoCAD 2000i\AcPreview.ocx
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel
Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program
Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend
Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend
Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel
Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel
Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. -
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. -
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. -
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R)
Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 7695 bytes
 
Re: XP - SP2

On Wed, 19 Dec 2007 21:49:56 -0600, LIZ wrote:

> I have XP Professional and got some sort of virus or? I get a error message
> that states "Windows cannot access the specified device, path, or file. You
> may not have the appropriate permissions to access the item". I can not open
> or start any programs and only get this message. I can run programs in safe
> mode but can not update windows as I get the error code 0x8007043C. I do not
> know what to do and have run a number of things to try and fix it including
> hijackthis. The logfile is included.
>
> Logfile of Trend Micro HijackThis v2.0.2

[snipped HJT logfile]

Forums where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13
 
Re: XP - SP2

O4 - HKCU\..\Run: [Tair] "C:\PROGRA~1\COMMON~1\ASKS~1\iexplore.exe" -vt yazb

This is by far what I found questionable and with regards to Windows Update
concerns you
have it would be or a possible secondary issue.

As an option you can avail of a direct free support from Microsoft (
US/CANADA )
( 866 727 2338 ) Toll Free and Free Support

"LIZ" <lizj@new.rr.com> wrote in message
news:%23AOCltrQIHA.6036@TK2MSFTNGP03.phx.gbl...
>I have XP Professional and got some sort of virus or? I get a error
>message that states "Windows cannot access the specified device, path, or
>file. You may not have the appropriate permissions to access the item". I
>can not open or start any programs and only get this message. I can run
>programs in safe mode but can not update windows as I get the error code
>0x8007043C. I do not know what to do and have run a number of things to try
>and fix it including hijackthis. The logfile is included.
>
> Logfile of Trend Micro HijackThis v2.0.2
> Scan saved at 5:29:12 PM, on 12/19/2007
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16574)
> Boot mode: Safe mode with network support
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\Program Files\Windows Defender\MsMpEng.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\Explorer.EXE
> C:\Program Files\Internet Explorer\iexplore.exe
> C:\WINDOWS\system32\ctfmon.exe
> C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
> C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OL\TMAS_OL.exe
> C:\DOCUME~1\CHRISJ~1\LOCALS~1\Temp\Temporary Directory 1 for
> HiJackThis[1].zip\HijackThis.exe
>
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
> R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page =
> http://go.microsoft.com/fwlink/?LinkId=54843
> R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
> http://go.microsoft.com/fwlink/?LinkId=21940
> O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program
> Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
> O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
> O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
> O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
> O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
> O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> Files\Java\j2re1.4.2_03\bin\jusched.exe
> O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program
> Files\Intel\Wireless\bin\ZCfgSvc.exe"
> O4 - HKLM\..\Run: [IntelWireless] "C:\Program
> Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
> O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
> O4 - HKLM\..\Run: [DVDLauncher] "C:\Program
> Files\CyberLink\PowerDVD\DVDLauncher.exe"
> O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft
> IntelliPoint\point32.exe"
> O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
> Files\QuickTime\qttask.exe" -atboottime
> O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program
> Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
> O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet
> Security 2007\pccguide.exe"
> O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows
> Defender\MSASCui.exe" -hide
> O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software
> Update\HPWuSchd2.exe
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security
> 2007\TMAS_OE\TMAS_OEMon.exe"
> O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat
> 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
> O4 - HKCU\..\Run: [Tair] "C:\PROGRA~1\COMMON~1\ASKS~1\iexplore.exe" -vt
> yazb
> O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
> Destroy\TeaTimer.exe
> O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting]
> "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
> O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting]
> "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
> O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
> Files\Adobe\Calibration\Adobe Gamma Loader.exe
> O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
> Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
> O4 - Global Startup: Digital Line Detect.lnk = ?
> O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
> Files\HP\Digital Imaging\bin\hpqtra08.exe
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
> O9 - Extra 'Tools' menuitem: Sun Java Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
> C:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
> {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
> O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
> {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
> Diagnostic\xpnetdiag.exe
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> C:\Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger -
> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
> Files\Messenger\msmsgs.exe
> O15 - Trusted Zone: http://download.windowsupdate.com
> O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController
> Control) -
> http://h30155.www3.hp.com/ediags/dd/install/HPInstallMgr_v01_6.cab
> O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
> http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
> O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
> http://software-dl.real.com/01d1b85147621cc5ee23/netzip/RdxIE2.cab
> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
> http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1168651254906
> O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
> Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
> O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) -
> file://C:\Program Files\AutoCAD 2000i\InstFred.ocx
> O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
> file://C:\Program Files\AutoCAD 2000i\AcPreview.ocx
> O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel
> Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
> O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program
> Files\Dell\QuickSet\NICCONFIGSVC.exe
> O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend
> Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
> O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend
> Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
> O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
> O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel
> Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
> O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel
> Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
> O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro
> Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
> O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. -
> C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
> O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. -
> C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
> O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) -
> Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
>
> --
> End of file - 7695 bytes
 
Re: XP - SP2

From: "LIZ" <lizj@new.rr.com>

| I have XP Professional and got some sort of virus or? I get a error message
| that states "Windows cannot access the specified device, path, or file. You
| may not have the appropriate permissions to access the item". I can not open
| or start any programs and only get this message. I can run programs in safe
| mode but can not update windows as I get the error code 0x8007043C. I do not
| know what to do and have run a number of things to try and fix it including
| hijackthis. The logfile is included.
|


Please don NOT post HJT logs here. We do not accept them!
Kayman was kind enough to post those places that do accept them and will provide their
expert examination.



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: XP - SP2

Sounds like a bug in OS, rather like some virus issue.

--
Volodymyr
"LIZ" <lizj@new.rr.com> wrote in message
news:%23AOCltrQIHA.6036@TK2MSFTNGP03.phx.gbl...
>I have XP Professional and got some sort of virus or? I get a error
>message that states "Windows cannot access the specified device, path, or
>file. You may not have the appropriate permissions to access the item". I
>can not open or start any programs and only get this message. I can run
>programs in safe mode but can not update windows as I get the error code
>0x8007043C. I do not know what to do and have run a number of things to try
>and fix it including hijackthis. The logfile is included.
>
> Logfile of Trend Micro HijackThis v2.0.2
> Scan saved at 5:29:12 PM, on 12/19/2007
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16574)
> Boot mode: Safe mode with network support
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\Program Files\Windows Defender\MsMpEng.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\Explorer.EXE
> C:\Program Files\Internet Explorer\iexplore.exe
> C:\WINDOWS\system32\ctfmon.exe
> C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
> C:\Program Files\Trend Micro\Internet Security 2007\TMAS_OL\TMAS_OL.exe
> C:\DOCUME~1\CHRISJ~1\LOCALS~1\Temp\Temporary Directory 1 for
> HiJackThis[1].zip\HijackThis.exe
>
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
> R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page =
> http://go.microsoft.com/fwlink/?LinkId=54843
> R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
> http://go.microsoft.com/fwlink/?LinkId=21940
> O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program
> Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
> O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
> O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
> O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
> O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
> O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> Files\Java\j2re1.4.2_03\bin\jusched.exe
> O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program
> Files\Intel\Wireless\bin\ZCfgSvc.exe"
> O4 - HKLM\..\Run: [IntelWireless] "C:\Program
> Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
> O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
> O4 - HKLM\..\Run: [DVDLauncher] "C:\Program
> Files\CyberLink\PowerDVD\DVDLauncher.exe"
> O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft
> IntelliPoint\point32.exe"
> O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
> Files\QuickTime\qttask.exe" -atboottime
> O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program
> Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
> O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet
> Security 2007\pccguide.exe"
> O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows
> Defender\MSASCui.exe" -hide
> O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software
> Update\HPWuSchd2.exe
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet Security
> 2007\TMAS_OE\TMAS_OEMon.exe"
> O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat
> 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
> O4 - HKCU\..\Run: [Tair] "C:\PROGRA~1\COMMON~1\ASKS~1\iexplore.exe" -vt
> yazb
> O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
> Destroy\TeaTimer.exe
> O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting]
> "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
> O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting]
> "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
> O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
> Files\Adobe\Calibration\Adobe Gamma Loader.exe
> O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program
> Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
> O4 - Global Startup: Digital Line Detect.lnk = ?
> O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program
> Files\HP\Digital Imaging\bin\hpqtra08.exe
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
> O9 - Extra 'Tools' menuitem: Sun Java Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
> C:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
> {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
> O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
> {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
> Diagnostic\xpnetdiag.exe
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> C:\Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger -
> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
> Files\Messenger\msmsgs.exe
> O15 - Trusted Zone: http://download.windowsupdate.com
> O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController
> Control) -
> http://h30155.www3.hp.com/ediags/dd/install/HPInstallMgr_v01_6.cab
> O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
> http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
> O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
> http://software-dl.real.com/01d1b85147621cc5ee23/netzip/RdxIE2.cab
> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
> http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1168651254906
> O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer
> Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
> O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred Control) -
> file://C:\Program Files\AutoCAD 2000i\InstFred.ocx
> O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) -
> file://C:\Program Files\AutoCAD 2000i\AcPreview.ocx
> O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel
> Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
> O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program
> Files\Dell\QuickSet\NICCONFIGSVC.exe
> O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend
> Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
> O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) - Trend
> Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
> O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
> O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel
> Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
> O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel
> Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
> O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro
> Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
> O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. -
> C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
> O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. -
> C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
> O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) -
> Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
>
> --
> End of file - 7695 bytes
 
Re: XP - SP2

"David H. Lipman" <DLipman~nospam~@Verizon.Net> after much
thought,came up with this jewel in
news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl:

> From: "LIZ" <lizj@new.rr.com>
> (abridged version)
>| I have XP Professional and I do not know what to do
>
> Please do NOT post HJT logs here. We do not accept them!
>

Good to see ya Dave!
max
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Tools http://max.shplink.com/tools.html
Change nomail.afraid.org to gmail.com to reply by email.
 
Re: XP - SP2

"David H. Lipman" <DLipman~nospam~@Verizon.Net> after much
thought,came up with this jewel in news:OfpZn$oRIHA.1188
@TK2MSFTNGP04.phx.gbl:

> From: "Maximus the Mad" <maxwachtel@nomail.afraid.org>
>
>
>| Good to see ya Dave!
>| max
>
> Happy Holidays Max!
>

Hope everything is going well for you!
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Tools http://max.shplink.com/tools.html
Change nomail.afraid.org to gmail.com to reply by email.
 
Re: XP - SP2

Hello David

Just for clarification who, exactly, is the "we" in your statement "We do
not accept them!"

Dave

**********************************************************

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl...
> From: "LIZ" <lizj@new.rr.com>
>
> | I have XP Professional and got some sort of virus or? I get a error
> message
> | that states "Windows cannot access the specified device, path, or file.
> You
> | may not have the appropriate permissions to access the item". I can not
> open
> | or start any programs and only get this message. I can run programs in
> safe
> | mode but can not update windows as I get the error code 0x8007043C. I do
> not
> | know what to do and have run a number of things to try and fix it
> including
> | hijackthis. The logfile is included.
> |
>
>
> Please don NOT post HJT logs here. We do not accept them!
> Kayman was kind enough to post those places that do accept them and will
> provide their
> expert examination.
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
>
 
Re: XP - SP2

Ah - So, do you not consider Milo (who *did* respond) to be a bonio-fido
responder on this group?

His (her?) advice seems to be sound.

Dave

******************************************************************************
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:O$SHAQaTIHA.1188@TK2MSFTNGP04.phx.gbl...
> From: "BoaterDave" <BoaterDave@nospam.invalid>
>
> | Hello David
> |
> | Just for clarification who, exactly, is the "we" in your statement "We
> do
> | not accept them!"
> |
> | Dave
> |
>
> Those who respond for help with informational assistance.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
>
 
Re: XP - SP2

Hello David

I've visited Claymania.com and noted this info:
Claymania Creations
Personalized Website Design and Hosting Services

Claymania.com originally started out in 1997 in Rhode Island as a sideline
website design / hosting business and place to post ad-free anti-virus
information. Claymania Creations "officially" began operation in January of
2000 offering premium website design and hosting services. Our goal is to be
responsive and helpful at all times while providing our customers with
courteous, fast service and all the hosting features needed to build and
maintain a successful Web site.

Thanks to our loyal customers and their (much appreciated) referrals,
Claymania Creations has successfully grown and developed into a cooperative
group of creative and talented individuals that form a unique and diverse
team. This dedicated group of technicians, consultants, graphic artists and
programmers have all the skills required to help individuals and businesses
fully realize their Web site goals.

The combined resources of the Claymania Creations Cooperative allow us to be
a true one-stop solution for website design, hosting and promotion services.
Please don't hesitate to contact us for more information.

*********************************************************************************************************

Please will you advise why your magic Multi-AV tool isn't hosted here, but
on a German site which most visitors here will be unable to read. It doesn't
make sense to me I'm afraid. The intimation in your signature block is that
you have some connection with Claymania. TIA

Dave

PS Milo always seems to give good advice. Do you think otherwise?





"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...
> From: "BoaterDave" <BoaterDave@nospam.invalid>
>
> | Ah - So, do you not consider Milo (who *did* respond) to be a bonio-fido
> | responder on this group?
> |
> | His (her?) advice seems to be sound.
> |
> | Dave
> |
>
> Milo goes agaisnt the grain and does NO have the support of the MVP
> community
> BTW: I am NOT a MS MVP
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
>
 
Re: XP - SP2

From: "BoaterDave" <BoaterDave@nospam.invalid>

| Hello David

| I've visited Claymania.com and noted this info:
| Claymania Creations
| Personalized Website Design and Hosting Services

| Claymania.com originally started out in 1997 in Rhode Island as a sideline
| website design / hosting business and place to post ad-free anti-virus
| information. Claymania Creations "officially" began operation in January of
| 2000 offering premium website design and hosting services. Our goal is to be
| responsive and helpful at all times while providing our customers with
| courteous, fast service and all the hosting features needed to build and
| maintain a successful Web site.

| Thanks to our loyal customers and their (much appreciated) referrals,
| Claymania Creations has successfully grown and developed into a cooperative
| group of creative and talented individuals that form a unique and diverse
| team. This dedicated group of technicians, consultants, graphic artists and
| programmers have all the skills required to help individuals and businesses
| fully realize their Web site goals.

| The combined resources of the Claymania Creations Cooperative allow us to be
| a true one-stop solution for website design, hosting and promotion services.
| Please don't hesitate to contact us for more information.

| ****************************************************************************************
| *****************

| Please will you advise why your magic Multi-AV tool isn't hosted here, but
| on a German site which most visitors here will be unable to read. It doesn't
| make sense to me I'm afraid. The intimation in your signature block is that
| you have some connection with Claymania. TIA

| Dave

| PS Milo always seems to give good advice. Do you think otherwise?

Good questions.

Thanx to the antics of 'Butts, the IK-CS.Com web site no longer exists.

A friend of mine is an editor with PCTipp magazine and she lives in Switzerland. There
were two articles written in their printed magazine about mailware (yes, written is
Swiss-German) and in their removal. The editor knows what happed with the IK-CS.Com web
site and offered to publicly host the utility on their website.

I never asked Clay if I could have him host the Multi-AV on the Claymania WebSite. That
site hosts information, not utilities.

Clay has always been a member ov the a.c.v news group and its younger sibling a.c.a-v.
Early on Clay created space on his web site for the advice culled from the news group
members.

I have the Multi AV hosted on other, sofar private, sites. Pulicly, at this time, it is
available at PCTipp Magazine's utility download section.

Milo had not always provided the right information or in the right fashion. I have not
been on Usenet too much this past years and so I have missed many of his recent posts.
His reponses amy have improved.


| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...
>> From: "BoaterDave" <BoaterDave@nospam.invalid>

>> | Ah - So, do you not consider Milo (who *did* respond) to be a bonio-fido
>> | responder on this group?
>> |
>> | His (her?) advice seems to be sound.
>> |
>> | Dave
>> |




>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp







--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
 
Re: XP - SP2

C'mon Dave tell the truth. I didn't have anything to do with that site
shutting down. You assumed I did because you know I know about all your
failed attempts to shut down not only my website but my ISP account, my
newsgroup account, and you also tried to get me fired from my job, now how
low down is that. Your problem is you are a low down troll who thinks my
name is Chris Butts. You know exactly who it was who filed that DMCA
complaint against you for stealing the components used in your multi-crap
software. Your hosting company is required to tell you. You had a choice to
fight that complaint why didn't you? or did you fight it and lose? I think
you fought it and lost and then to prevent the same thing from happening
again you stuck it up on a German site outside the reach of US DMCA laws. I
mean C'mon now all you had to do was wait 14 days, if the complaint was
fraudulent, or simply remove the link to your software and the site is back
up. You and your friends have filed 2 DMCA complaints on me yet I'm still
here. Do us all a favor and go crawl back under that rock and stay gone this
time you liar.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:OBFeQVKUIHA.4752@TK2MSFTNGP05.phx.gbl...
> From: "BoaterDave" <BoaterDave@nospam.invalid>
>
> | Hello David
>
> | I've visited Claymania.com and noted this info:
> | Claymania Creations
> | Personalized Website Design and Hosting Services
>
> | Claymania.com originally started out in 1997 in Rhode Island as a
> sideline
> | website design / hosting business and place to post ad-free anti-virus
> | information. Claymania Creations "officially" began operation in January
> of
> | 2000 offering premium website design and hosting services. Our goal is
> to be
> | responsive and helpful at all times while providing our customers with
> | courteous, fast service and all the hosting features needed to build and
> | maintain a successful Web site.
>
> | Thanks to our loyal customers and their (much appreciated) referrals,
> | Claymania Creations has successfully grown and developed into a
> cooperative
> | group of creative and talented individuals that form a unique and
> diverse
> | team. This dedicated group of technicians, consultants, graphic artists
> and
> | programmers have all the skills required to help individuals and
> businesses
> | fully realize their Web site goals.
>
> | The combined resources of the Claymania Creations Cooperative allow us
> to be
> | a true one-stop solution for website design, hosting and promotion
> services.
> | Please don't hesitate to contact us for more information.
>
> |
> ****************************************************************************************
> | *****************
>
> | Please will you advise why your magic Multi-AV tool isn't hosted here,
> but
> | on a German site which most visitors here will be unable to read. It
> doesn't
> | make sense to me I'm afraid. The intimation in your signature block is
> that
> | you have some connection with Claymania. TIA
>
> | Dave
>
> | PS Milo always seems to give good advice. Do you think otherwise?
>
> Good questions.
>
> Thanx to the antics of 'Butts, the IK-CS.Com web site no longer exists.
>
> A friend of mine is an editor with PCTipp magazine and she lives in
> Switzerland. There
> were two articles written in their printed magazine about mailware (yes,
> written is
> Swiss-German) and in their removal. The editor knows what happed with the
> IK-CS.Com web
> site and offered to publicly host the utility on their website.
>
> I never asked Clay if I could have him host the Multi-AV on the Claymania
> WebSite. That
> site hosts information, not utilities.
>
> Clay has always been a member ov the a.c.v news group and its younger
> sibling a.c.a-v.
> Early on Clay created space on his web site for the advice culled from the
> news group
> members.
>
> I have the Multi AV hosted on other, sofar private, sites. Pulicly, at
> this time, it is
> available at PCTipp Magazine's utility download section.
>
> Milo had not always provided the right information or in the right
> fashion. I have not
> been on Usenet too much this past years and so I have missed many of his
> recent posts.
> His reponses amy have improved.
>
>
> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> | news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...
>>> From: "BoaterDave" <BoaterDave@nospam.invalid>
>
>>> | Ah - So, do you not consider Milo (who *did* respond) to be a
>>> bonio-fido
>>> | responder on this group?
>>> |
>>> | His (her?) advice seems to be sound.
>>> |
>>> | Dave
>>> |
>
>
>
>
>>> --
>>> Dave
>>> http://www.claymania.com/removal-trojan-adware.html
>>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
>
>
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
 
Re: XP - SP2

Dave got busted stealing software so his site was shut down. Somebody filed
a DMCA complaint for stealing software and they shut him down. He tells
everyone I did it when he knows I did not. He's just pissed because it
happened after his many failed attempts to shut me down. He thinks I'm the
thief when he got busted for it. He put it up on a German spam site because
it is outside the jurisdiction of US DMCA laws and that's the truth.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"BoaterDave" <BoaterDave@nospam.invalid> wrote in message
news:ePqc94JUIHA.4696@TK2MSFTNGP05.phx.gbl...
> Hello David
>
> I've visited Claymania.com and noted this info:
> Claymania Creations
> Personalized Website Design and Hosting Services
>
> Claymania.com originally started out in 1997 in Rhode Island as a sideline
> website design / hosting business and place to post ad-free anti-virus
> information. Claymania Creations "officially" began operation in January
> of 2000 offering premium website design and hosting services. Our goal is
> to be responsive and helpful at all times while providing our customers
> with courteous, fast service and all the hosting features needed to build
> and maintain a successful Web site.
>
> Thanks to our loyal customers and their (much appreciated) referrals,
> Claymania Creations has successfully grown and developed into a
> cooperative group of creative and talented individuals that form a unique
> and diverse team. This dedicated group of technicians, consultants,
> graphic artists and programmers have all the skills required to help
> individuals and businesses fully realize their Web site goals.
>
> The combined resources of the Claymania Creations Cooperative allow us to
> be a true one-stop solution for website design, hosting and promotion
> services. Please don't hesitate to contact us for more information.
>
> *********************************************************************************************************
>
> Please will you advise why your magic Multi-AV tool isn't hosted here, but
> on a German site which most visitors here will be unable to read. It
> doesn't make sense to me I'm afraid. The intimation in your signature
> block is that you have some connection with Claymania. TIA
>
> Dave
>
> PS Milo always seems to give good advice. Do you think otherwise?
>
>
>
>
>
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:u1$BGGlTIHA.4280@TK2MSFTNGP06.phx.gbl...
>> From: "BoaterDave" <BoaterDave@nospam.invalid>
>>
>> | Ah - So, do you not consider Milo (who *did* respond) to be a
>> bonio-fido
>> | responder on this group?
>> |
>> | His (her?) advice seems to be sound.
>> |
>> | Dave
>> |
>>
>> Milo goes agaisnt the grain and does NO have the support of the MVP
>> community
>> BTW: I am NOT a MS MVP
>>
>>
>> --
>> Dave
>> http://www.claymania.com/removal-trojan-adware.html
>> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>>
>>
>>
>
>
 
Re: XP - SP2

Ok, my ignorance is showing. How do I access the news article listed here?

Thanks,
Debbie

"Maximus the Mad" wrote:

> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much
> thought,came up with this jewel in
> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl:
>
> > From: "LIZ" <lizj@new.rr.com>
> > (abridged version)
> >| I have XP Professional and I do not know what to do
> >
> > Please do NOT post HJT logs here. We do not accept them!
> >
>
> Good to see ya Dave!
> max
> --
> Virus Removal http://max.shplink.com/removal.html
> Keep Clean http://max.shplink.com/keepingclean.html
> Tools http://max.shplink.com/tools.html
> Change nomail.afraid.org to gmail.com to reply by email.
>
 
Re: XP - SP2

Huh. What news article ??

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"Impatience" <Impatience@discussions.microsoft.com> wrote in message news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...
> Ok, my ignorance is showing. How do I access the news article listed here?
>
> Thanks,
> Debbie
>
> "Maximus the Mad" wrote:
>
>> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much
>> thought,came up with this jewel in
>> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl:
>>
>> > From: "LIZ" <lizj@new.rr.com>
>> > (abridged version)
>> >| I have XP Professional and I do not know what to do
>> >
>> > Please do NOT post HJT logs here. We do not accept them!
>> >
>>
>> Good to see ya Dave!
>> max
>> --
>> Virus Removal http://max.shplink.com/removal.html
>> Keep Clean http://max.shplink.com/keepingclean.html
>> Tools http://max.shplink.com/tools.html
>> Change nomail.afraid.org to gmail.com to reply by email.
>>
 
Re: XP - SP2


"Impatience" <Impatience@discussions.microsoft.com> wrote in message
news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...
> Ok, my ignorance is showing. How do I access the news article listed
> here?

Use Google Groups with that as the search string.
Hmmm - didn't these news: (pseudo) url's use to be clickable?

Anyway, Google should work for a unique string.

> Thanks,
> Debbie
>
> "Maximus the Mad" wrote:
>
>> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much
>> thought,came up with this jewel in
>> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl:
>>
>> > From: "LIZ" <lizj@new.rr.com>
>> > (abridged version)
>> >| I have XP Professional and I do not know what to do
>> >
>> > Please do NOT post HJT logs here. We do not accept them!
>> >
>>
>> Good to see ya Dave!
>> max
>> --
>> Virus Removal http://max.shplink.com/removal.html
>> Keep Clean http://max.shplink.com/keepingclean.html
>> Tools http://max.shplink.com/tools.html
>> Change nomail.afraid.org to gmail.com to reply by email.
>>
 
Re: XP - SP2

"FromTheRafters" <Erratic@ne.rr.com> wrote in message
news:OLaCXpYoIHA.4104@TK2MSFTNGP03.phx.gbl...
> "Impatience" <Impatience@discussions.microsoft.com> wrote in message
> news:4CA01C66-616B-47C4-8B0D-0A5291B2FE86@microsoft.com...
>> Ok, my ignorance is showing. How do I access the news article listed
>> here?
> Use Google Groups with that as the search string.
> Hmmm - didn't these news: (pseudo) url's use to be clickable?

To be clickable msnews has to be your default server...

> Anyway, Google should work for a unique string.
>> "Maximus the Mad" wrote:
>>> "David H. Lipman" <DLipman~nospam~@Verizon.Net> after much
>>> thought,came up with this jewel in
>>> news:#wjuqX0QIHA.5692@TK2MSFTNGP02.phx.gbl:
>>> > From: "LIZ" <lizj@new.rr.com>
>>> > (abridged version)
>>> >| I have XP Professional and I do not know what to do
>>> > Please do NOT post HJT logs here. We do not accept them!
>>> Good to see ya Dave!

-jen
 

Similar threads

W
IDK if its malware connected but
Replies
0
Views
84
Wayne Rommel Tacsiat
W
S
Windows Defender Fails to Start Event 5008
Replies
0
Views
160
spartan223193
S
R
Malware or Hardware Defect or both?
Replies
0
Views
427
RobertBantele
R
V
ASP.net core API 2.1 app | Dotnet restore failing in Dockerfile while building docker images | Windows Container | Windows 10 Enterprise OS version 18
Replies
0
Views
136
vranjan34
V
Z
How to reverse what a virus changed and stop it from opening in startup.
Replies
0
Views
108
Zerlingg
Z
Back
Top