Here's what was found on the start up list, guess I'll have to go through it and see what I need. Thanks.
StartupList report, 11/7/2003, 12:54:55 PM
StartupList version: 1.52
Started from : C:\unzipped\hijackthis\HijackThis.EXE
Detected: Windows 2000 SP3 (WinNT 5.00.2195)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\WINNT\system32\drivers\dcfssvc.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\KODAK\KODAK EASYSHARE Software\bin\ptssvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\program files\Support.com\bin\tgcmd.exe
C:\PROGRA~1\NORTON~2\navapw32.exe
C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
C:\WINNT\system32\SYSWB6.exe
C:\WINNT\TVMD.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Webshots\WebshotsTray.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\BellSouth\FastAccessConnectionAgent\fastacc.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\PROGRA~1\INCRED~1\bin\IncMail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\unzipped\hijackthis\HijackThis.exe
--------------------------------------------------
Listing of startup folders:
Shell folders Startup:
[C:\Documents and Settings\Administrator\Start Menu\Programs\Startup]
Desktop Alert.lnk = C:\Program Files\Desktop Alert\desktopalert_1215022.exe
SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Kodak EasyShare software.lnk = C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe
Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
--------------------------------------------------
Checking Windows NT UserInit:
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINNT\system32\userinit.exe,
--------------------------------------------------
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Synchronization Manager = mobsync.exe /logon
PrinTray = C:\WINNT\System32\spool\DRIVERS\W32X86\2\printray.exe
LoadQM = loadqm.exe
tgcmd = "c:\program files\Support.com\bin\tgcmd.exe" /server /nosystray /deaf
NAV Agent = C:\PROGRA~1\NORTON~2\navapw32.exe
QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime
PopUpKiller = C:\Program Files\PopUp Killer\popupkiller.EXE
Canary =
LVCOMS = C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
LogitechGalleryRepair = C:\Program Files\Logitech\ImageStudio\ISStart.exe
LogitechImageStudioTray = C:\Program Files\Logitech\ImageStudio\LogiTray.exe
QD FastAndSafe = C:\PROGRA~1\NORTON~1\QDCSFS.exe /scheduler
(Default) =
SYSWB6 = SYSWB6
TVMD = C:\WINNT\TVMD.exe
--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
WebCamRT.exe =
IncrediMail = C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
LDM = \Program\BackWeb-8876480.exe
--------------------------------------------------
Shell & screensaver key from C:\WINNT\SYSTEM.INI:
Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*
Shell & screensaver key from Registry:
Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINNT\Webshots.scr
drivers=*Registry value not found*
Policies Shell key:
HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*
--------------------------------------------------
Enumerating Browser Helper Objects:
(no name) - C:\Program Files\Yahoo!\Common\ycomp5_1_3_0.dll - {02478D38-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
SpywareGuard Download Protection - C:\Program Files\SpywareGuard\dlprotect.dll - {4A368E80-174F-4872-96B5-0B27DDD11DB2}
(no name) - c:\program files\google\googletoolbar2.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:\Program Files\Norton AntiVirus\NavShExt.dll - {BDF3E430-B101-42AD-A544-FADC6B084872}
--------------------------------------------------
Enumerating Task Scheduler jobs:
Norton AntiVirus - Scan my computer.job
Symantec NetDetect.job
--------------------------------------------------
Enumerating Download Program Files:
[QuickTime Object]
InProcServer32 = C:\Program Files\QuickTime\QTPlugin.ocx
CODEBASE =
http://www.apple.com/qtactivex/qtplugin.cab
[Microsoft ProgressBar Control, version 5.0 (SP2)]
InProcServer32 = C:\WINNT\System32\comctl32.ocx
CODEBASE =
http://bin.mcafee.com/molbin/Shared/Com ... mCtl32.cab
[Shockwave ActiveX Control]
InProcServer32 = C:\WINNT\system32\Macromed\Director\SwDir.dll
CODEBASE =
http://download.macromedia.com/pub/shoc ... tor/sw.cab
[YInstStarter Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\yinsthelper.dll
CODEBASE =
http://download.yahoo.com/dl/installs/yinst.cab
[{7A32634B-029C-4836-A023-528983982A49}]
CODEBASE =
http://sc.communities.msn.com/controls/ ... chat42.cab
[{82202BE7-C56A-487E-9E55-D84BDC1A5776}]
CODEBASE =
http://install.anark.com/client/version ... Client.cab
[Yahoo! Webcam Upload Wrapper]
InProcServer32 = C:\WINNT\Downloaded Program Files\yuplapp.dll
CODEBASE =
http://chat.yahoo.com/cab/yuplapp.cab
[Update Class]
InProcServer32 = C:\WINNT\System32\iuctl.dll
CODEBASE =
http://v4.windowsupdate.microsoft.com/C ... 3387615741
[YahooYMailTo Class]
InProcServer32 = C:\WINNT\Downloaded Program Files\ymmapi.dll
CODEBASE =
http://us.dl1.yimg.com/download.yahoo.c ... i_0727.dll
[Toontown Installer ActiveX Control]
InProcServer32 = C:\WINNT\Downloaded Program Files\ttinst.dll
CODEBASE =
http://media.toontown.com/toontown/sv1. ... ttinst.cab
[MSN Photo Upload Tool]
InProcServer32 = C:\WINNT\Downloaded Program Files\MsnPUpld.dll
CODEBASE =
http://sc.communities.msn.com/controls/ ... nPUpld.cab
[Shockwave Flash Object]
InProcServer32 = C:\WINNT\System32\macromed\flash\Flash.ocx
CODEBASE =
http://download.macromedia.com/pub/shoc ... wflash.cab
[Microsoft Office Tools on the Web Control]
InProcServer32 = C:\WINNT\Downloaded Program Files\OUTC.DLL
CODEBASE =
http://officeupdate.microsoft.com/Templ ... s/outc.cab
[Yahoo! Webcam Viewer Wrapper]
InProcServer32 = C:\WINNT\Downloaded Program Files\CONFLICT.1\yvwrctl.dll
CODEBASE =
http://chat.yahoo.com/cab/yvwrctl.cab
[Yahoo! Companion]
InProcServer32 = C:\Program Files\Yahoo!\Common\ycomp5_1_3_0.dll
CODEBASE =
http://us.dl1.yimg.com/download.yahoo.c ... _1_3_0.cab
[MSN Chat Control 4.5]
InProcServer32 = C:\WINNT\Downloaded Program Files\MSNChat45.ocx
CODEBASE =
http://fdl.msn.com/public/chat/msnchat45.cab
--------------------------------------------------
Enumerating ShellServiceObjectDelayLoad items:
Network.ConnectionTray: C:\WINNT\system32\NETSHELL.dll
WebCheck: C:\WINNT\System32\webcheck.dll
SysTray: stobject.dll
--------------------------------------------------
End of report, 8,789 bytes
Report generated in 0.941 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only