Hello Gus,
Yes, you were absolutely correct to fix that entry;
O2 - BHO: (no name) - {066A2CDC-319E-4460-BA45-C24562CD51AA} - C:\WINDOWS\system32\nnnlmjk.dll (file missing)
That was an omission on my part, actually a bad copy/paste. I do my "HJT fix recommendations" on Wordpad and then copy/paste them to the thread, I just didn't copy/paste that one.
You should go back into services and see if that WinTrust32 is still there and set it to disabled. That is a remnant of a trojan on the system which is/was set to always run at start up. You want to be sure that it is set to disabled if it is still there.That "might be" your constant "sample" program starting or attempting to start.
Also, even though it is not showing in your new HJT log you should do a file search for C:\WINDOWS\system32\apexktlc.dll.
Go to C:\WINDOWS\system32\ and see if you can find that file noted in red. If you do find it, delete it. It may not be there but do this just to be sure.
One thing you must do is update your java to the latest version which is version 6 update 1. You will need to uninstall all previous versions via Control Panel, Add/Remove. Download the newest version here Download Java software
Follow instructions there including verification after the install.
All in all your newest HJT log looks pretty good.
You do have some items automatically starting which are unnecessary and can easily be run manually. These are up to you really but some can slow your start up;
TrueImageMonitor.exe>>> Part of Acronis True Image - backup software. Can be disabled without affecting TrueImage.
igfxtray>>>Part of Intels Common User Interface for chipsets with integrated graphics controllers - which allows user to change different driver properties through Windows User Interface. Quick access to the control panel via a System Tray icon. Available via Start -> Settings -> Control Panel
IntelliPoint>>>Microsoft_Intellipoint software for their Intellimouse series of mice - only required if you use non-standard Windows driver features
Mediafour XPlay Tray Notification Icon>>>Mediafour Xplay - allows you to use an Apple iPod digital music player with a PC running Windows. If not used regularily start manually before connecting the iPod
MDDiskProtect.exe>>>MediaFour MacDrive for Windows - easily open, edit and save files from Mac-formatted disks, format Mac disks and burn Mac CDs and DVDs
QuickTime Task>>>System Tray access to Apple's "Quick Time" viewer
icq.com>>>ICQ Lite - compact version of the popular messaging program
MMReminderService>>>Related to Mind_Manager from Mindjet
MsnMsgr>>>MSN Messenger, can easily be run manually
NMBgMonitor>>>related to Nero Home, can be run manually if needed.
swg>>>Google Toolbar notifier
DellSupport>>>Agent which offers additional support for the Dell computer but can easily be run manually
X1FileMonitor.exe>>>Related to X1's_Enterprise_Desktop Search Resource Center
X1Systray.exe>>>Related to X1's_Enterprise_Desktop Search Resource Center
YPOPs>>>Related to YPOPs! an application that provides POP3 access to Yahoo! Mail. Yahoo! Mail disabled free access to its POP3 service in 2002. This application emulates a POP3 server and enables popular email clients like Outlook, Netscape, Eudora, Mozilla, etc., to download email from Yahoo! account.
Adobe Acrobat Speed Launcher>>>Supposedly speeds up the launch of Adobe (Acrobat) Reader 7. Really doesn't add much speed and can easily be launched manually
Adobe Acrobat Synchronizer>>>Related to Adobe_Synchronizer component installed along with Adobe Acrobat Reader or other products. Doesn't need to run at Start.
All of the above programs are really user choice on whether to run at start. Can easily be started manually. I recommend using Mike Lin's StartUp ControlPanel to easily manage start programs. It is free and a very small download. Once downloaded it can be found in the Control Panel.
With all of the removals and scans I also recommend that you do a simple cleanup of the registry using RegCleaner. Another free program, very easy to use. Download the program. Click to open. Choose Tools, Registry Cleanup, Do them All. Let the program scan. It will find unnecessary or "dead" registry entries. Once the scan is complete then choose Select, Select All. Then click Remove Selected.
I also recommend using SpywareBlaster to better protect the computer. Blocks malicious ActiveX installs by implementing a “kill bit” to prevent those ActiveX programs with known CLSIDs from being executed. Highly recommended! From Javacool Software.
Finally, you should set a new, clean restore point for the computer.
Right click the My Computer icon on the Desktop and click on Properties.
Click on the System Restore tab.
Put a check mark next to 'Turn off System Restore on All Drives'.
System Restore will turn off.
Wait a few minutes and then turn it back on doing the reverse.
Judy


Reply With Quote