# attn: JackUp, or any other PC guys

**URL:** <https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570>\
**Category:** PittSpeed Off Topic\
**Created:** [January 22, 2007, 8:09am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570 "2007-01-22T08:09:19Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 8:09am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/1 "2007-01-22T08:09:19Z")

</div>

home pc on the fritz, please gimme a hand

```auto
Logfile of HijackThis v1.99.1
Scan saved at 10:55:57 AM, on 01/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/english
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RunBus Class - {4865F155-CE00-4E93-A414-147844D7C81A} - C:\WINDOWS\system32	cblcxoa.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [D-Link Wireless G WUA-1340] C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\chaz\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install.exe -startup -product IncrediMail
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Chckup] C:\WINDOWS\system32\Netverchk.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://awbeta.net-nucleus.com (HKLM)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://games.pogo.com/online2/pogo/chuzzle/popcaploader_v6.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Unknown owner - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

 

```

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 8:37am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/2 "2007-01-22T08:37:27Z")

</div>

Clean-up the following items in hijackthis:

```auto

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe

O2 - BHO: RunBus Class - {4865F155-CE00-4E93-A414-147844D7C81A} - C:\WINDOWS\system32	cblcxoa.dll
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\chaz\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install.exe -startup -product IncrediMail
O4 - HKCU\..\Run: [Chckup] C:\WINDOWS\system32\Netverchk.exe
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://awbeta.net-nucleus.com (HKLM)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://games.pogo.com/online2/pogo/chuzzle/popcaploader_v6.cab

```

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 8:48am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/3 "2007-01-22T08:48:55Z")

</div>

when you say clean up, you mean check the box next to it, and then click fix checked?

---

<div class="post-metadata">

**Author:** ![burnyd](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/burnyd/32/6020_2.png) [@burnyd](https://forums.speedlife.net/u/burnyd)\
**Post date:** [January 22, 2007, 8:52am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/4 "2007-01-22T08:52:28Z")

</div>

yes

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 8:52am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/5 "2007-01-22T08:52:44Z")

</div>

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe

cant find this in the list now

---

<div class="post-metadata">

**Author:** ![imported\_Sleeper](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/imported_sleeper/32/5939_2.png) [@imported\_Sleeper](https://forums.speedlife.net/u/imported_Sleeper)\
**Post date:** [January 22, 2007, 8:56am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/6 "2007-01-22T08:56:46Z")

</div>

Then go back to ut last known working settings and start over from there

---

<div class="post-metadata">

**Author:** ![4doors5gears](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/4doors5gears/32/6006_2.png) [@4doors5gears](https://forums.speedlife.net/u/4doors5gears)\
**Post date:** [January 22, 2007, 8:57am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/7 "2007-01-22T08:57:16Z")

</div>

IIRC don’t you need svchost.exe to run in the background?

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 8:58am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/8 "2007-01-22T08:58:16Z")

</div>

Not from a “Documents and Settings” area. That’s supposed to be a system32 directory on the front of it.

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 9:00am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/9 "2007-01-22T09:00:00Z")

</div>

New scan since fix

```auto
 Logfile of HijackThis v1.99.1
Scan saved at 11:48:03 AM, on 01/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/english
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [D-Link Wireless G WUA-1340] C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Unknown owner - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

```

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 9:03am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/10 "2007-01-22T09:03:59Z")

</div>

still cant access the task manager either.

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 9:04am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/11 "2007-01-22T09:04:34Z")

</div>

I think you got it all.

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 9:04am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/12 "2007-01-22T09:04:53Z")

</div>

start -\> run  
enter “taskmgr.exe”

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 9:06am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/13 "2007-01-22T09:06:29Z")

</div>

what is this? O4 - HKLM…\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

it wont allow me to delet it from the remove programs, and i dont have photo shop on my home pc

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 9:06am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/14 "2007-01-22T09:06:43Z")

</div>

Wait a second. That all users svchost.exe is still there. Did you blast it?

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 9:07am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/15 "2007-01-22T09:07:22Z")

</div>

> [@Custom Plates](https://forums.speedlife.net/t/custom-plates/27466/33):
>
> start -\> run  
> enter “taskmgr.exe”

DONG, another program is currently using the file taskmgr.exe

---

<div class="post-metadata">

**Author:** ![burnyd](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/burnyd/32/6020_2.png) [@burnyd](https://forums.speedlife.net/u/burnyd)\
**Post date:** [January 22, 2007, 9:08am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/16 "2007-01-22T09:08:02Z")

</div>

> [@Do you know him?](https://forums.speedlife.net/t/do-you-know-him/27470/8):
>
> C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
> 
> cant find this in the list now

run it in safe mode delete this file.

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 9:08am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/17 "2007-01-22T09:08:54Z")

</div>

> [@Do you know him?](https://forums.speedlife.net/t/do-you-know-him/27470/9):
>
> what is this? O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
> 
> it wont allow me to delet it from the remove programs, and i dont have photo shop on my home pc

You can blast these old photochop related items.

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 9:10am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/18 "2007-01-22T09:10:48Z")

</div>

i think i did, heres another scan

```auto
 Logfile of HijackThis v1.99.1
Scan saved at 11:58:53 AM, on 01/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com/english
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [D-Link Wireless G WUA-1340] C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Unknown owner - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (file missing)
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

```

---

<div class="post-metadata">

**Author:** ![JackdUp](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jackdup/32/6015_2.png) [@JackdUp](https://forums.speedlife.net/u/JackdUp)\
**Post date:** [January 22, 2007, 9:12am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/19 "2007-01-22T09:12:33Z")

</div>

That’s much better!

you can whack the following if you want, they’re optional

```auto

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\SIMPLE~1\PHOTOS~1\data\Xtras\mssysmgr.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Unknown owner - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (file missing)

```

---

<div class="post-metadata">

**Author:** ![F-B-A](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/f-b-a/32/6022_2.png) [@F-B-A](https://forums.speedlife.net/u/F-B-A)\
**Post date:** [January 22, 2007, 9:14am UTC](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570/20 "2007-01-22T09:14:05Z")

</div>

cool, thanks, no idea how to access safe mode though

[Next page](https://forums.speedlife.net/t/attn-jackup-or-any-other-pc-guys/187570.md?page=2)