System 32 folder?!

[pcSOSpc]

Thank you so much! I'll be patient. I looked into that HTJ key and found it to be part of my broadband servers software.

[cauzomb]

here's something to try, load MSconfig from the start/run menu, go to startup and look for checked entries that have no text between the quotes, then uncheck them, select cleanup, then apply changes, then exit msconfig and restart the computer..

[pcSOSpc]

ok I did that but there isn't a cleanup option in any tabs under MSconfig. Still did not fix the problem.

[pheonix73]

There is a clean up selection in the start control menu.One would not find it under the general ms config screen.Try going to the start up panel again and following the first instructions.If you look at the bottom right corner,you should see the clean up selection.

[pcSOSpc]

Still did not see it but I went to System Tools and used Disk Cleanup on both C:\ and D:\ drives.

[jholland1964]

pcSOSpc,
Your HJT log "looks" ok, but I don't like some of the items I see in the ISeeYouXP log.
You have a large number of programs disabled via msconfig, which is why the log looks so short to SPD I imagine.
Some of these entries are not so good.
One thing first...are you still using the AOL Firewall and security programs? If not, have you TOTALLY uninstalled them? If you did not, do so now.

I would strongly recommend that you go through all the steps listed in
READ ME Before Posting A Request For Assistance!
Once you have done all those steps then post back here with the requested logs.

[pcSOSpc]

-I cannot determine if all AOL components are uninstalled but
have a good idea that they aren't. I cannot find any AOL programs or
components in Add/Remove Programs but when using Microsoft
Windows search found multiple files and folders labeled "AOL"
"America Online" and "aolsoftware.exe" none of which were an
uninstall.exe file. How do I completely erase AOL?

I followed all instruction give in the "Read Me Before Posting" thread and
only turned up a few threats and errors:

-Kaspersky wouldn't let me clean any items but let me save
the scan logs which are attached.

-AVG would not let me save a scan log of the Complete Test. There was
no such options available in the settings menu. AVG found:
(0 threats, and 1 error on boot sector if disk C

-I ran a Full System Scan with Windows Defender and found only a few threats which were fixed for me but wouldn't let me save a scan log so
I copied it down for you in an attachment.

Please take your time and thank you so much for your help!

[jholland1964]

I see two users, correct? Tony and Catie?
Lots of AIM files noted in the Catie scan. If you do not want to use AOL at all but still wish to use AIM there is an AimLite program which you can use, I use it occasionally. Has no ads etc.
Many of the infected files show by the "Catie" Kaspersky scan were in Quarantine of the AOL spyware program.
If you do wish to be certain you have removed all of AOL and have run through all of the uninstall portion of that program then you can manually remove all of those files by doing a file search of everything AOL and deleting them manually.
Just wanted to throw that in here while I go through all of your logs.
There were/are viruses and infected files shown in both Kaspersky scans. Give me a bit and I will get back to you on those. In the meantime you can get rid of those AOL folders and also empty the quarantine of the Spybot program.

Did you use the ATF-Cleaner in Safe Mode to remove all temp files in both Internet Explorer and Firefox? There are numerous cookies, etc., showing in the Kaspersky logs which should have been removed by using ATF.

Am I correct when reading your copy of the Windows Defenders log that these items WERE removed?
Adware:Win32/180SolutionsWebInstaller
Adware:Win32/180SolutionsSearchAssistant
Adware:Win32/TwainTech
Spyware:Win32/ISTISBAR.ActiveX
Adware:Win32/Popuppers.A
Adware:Win32/Altnet
AdwareLWin32/NewDotNet

Did you run the AVG Anti-spy program (not AVG Anti-Virus) they are two separate programs. Did you run AVG Anti-spy in SAFE MODE and tell it to fix items found? It should have found at least some of these and should have allowed you to both clean and save a log.

[jholland1964]

Location of an extraordinary temporary files noted in the Kaspersky scan is
C:\Documents and Settings\Catie\Local Settings\Temporary Internet Files\Content.IE5\
Now you may not be able to see this file when you look because it may be hidden.
The Content.IE5 folder contains folders with randomly-created folder names that consist of letters and numbers (they have names like these SYIKPLTD, 49670D2V)
This folder is not visible in the C:\Documents and Settings\Catie\Local Settings\Temporary Internet Files directory. However, if you would like the Content.IE5 folder to be visible, do the procedure below.
To make the Content.IE5 folder to be visible in Temporary Internet Files directory Please note that it is not necessary to make the Content.IE5 folder to be visible in Temporary Internet Files directory when deleting files in the Content.IE5 folder.

1. Press Start and select Run.
2. Type cmd.
3. At the command prompt, type
   dir /a "%Userprofile%\Local Settings\Temporary Internet Files\*.*"

To delete all files in Content.IE5 folder using Windows Explorer

1. Close your Internet browser.
2. Set the Windows Explorer to view the address bar. To do this:
   1. Open My Documents
   2. Click View > Toolbars and check the Address Bar option.
3. In the address bar, type the path below and press the Enter key from your keyboard.
   C:\Documents and Settings\Catie\Local Settings\Temporary Internet Files\Content.IE5
4. In "C:\Documents and Settings\Catie\Local Settings\Temporary Internet Files\Content.IE5\", click each folder (and from what I can see there are at LEAST 16) you want to delete and press the Delete key from your keyboard. Then, click Yes to confirm the deletion. Please note that you cannot delete index.dat.

Just looking through the Kaspersky scans I would guess that the temporary internet files have never been removed, or if they have it has been a very long time. Please do the above steps given manually, then boot to Safe Mode and run the ATF-Cleaner again using both the Internet Explorer options and then again using the Firefox options.
Once complete then please run a full system scan with the AVG Anti-spy cleaner. Have it fix everything it finds and Save the log.
Reboot. Run a new Kaspersky scan, save the log.
Then run a new HJT log and post back with all three new logs.
Judy

P.S. by the way...

Anyway you actually were to one who helped me get rid of it. I was looking for the threads but couldn't find them. I used a different username during that point in time it was ImdefNotAGeek.

Didn't want you to think I was ignoring your comment. You couldn't find that thread or old user name because we had a total crash here a year ago this week and lost everything, including old posts and all the member lists. So we had to start from scratch.

[pcSOSpc]

Ok...Lot's of problems trying to perform all tasks listed in previous two posts...Actually there are 4 users on this OS Tony, Catie, Mom, and Vinny.
-I uninstalled all AIM files and folders and am currently using DeadAIM.
-I manually deleted any AOL/America Online files and folders I found using Microsoft Search. I also deleted the SpyBot program.
-I removed any and all items found in the Windows Defender scan.
-I didn't realize there was an AVG Anti-Spyware program before you told me so I downloaded the latest version and ran a scan both in normal boot and safe boot...I even upgraded to the PLUS version and the program STILL will not let me save any logs but DID in fact clean everything it detected.
-I followed all instructions for locating and deleting the files and folders located under "C:\Documents and Settings\Catie\Local Settings\Temporary Internet Files\Content.IE5" yet I got an error (cannot be located) when inserting the file folder path in the My Documents address bar.

What are my options??? I had no idea the server crashed last year either. I'm so glad it's back up and running...These forums are AMAZING and I thank every one of your for all of the knowledge and help you've given me. I recommend this site to EVERYONE! Thanks so much.