major Help PLEASE(Resolved)

[Suzymarie39]

Help please!!!! I know this is long please forgive me.

I have many problems and so glad to find this forum and hope that someone will please help me. I have followed the READ ME before posing a request for assistance. My problems started after my 19 year daughter used my computer for what she said was research for school.

Problems
1. Earthlink tool bar I click Email and then check mail all I get are envelopes with no subject or sender name I have to go to Earthlink.com to web mail to Email.

2. When I do get on my IE7 web, browser if I am quick I can get somewhere but then nowhere fast. Pages keep popping up blank and the other say my accounts nationalcity.com/m/apps/yps_er over and over. I have to bring up IE7 with no add ons but that does not help I cannot do much on the computer with out the add ons. I have disabled some of the add ons but no luck yet. I can get on sometimes with no problems and others times which is mostly I have this crazy problem. To stop it I have to hit ctrl+alt+del and end the tasks.

3. My Mcafee programs are a mess. The virus scan keeps disabling it self. I did what the Mcafee site said I uninstalled my virus scan, the firewall, and privacy service. I reinstalled the virus scanned and updated it and then the firewall and updated this but the privacy service downloads but gets and error at the installing part. I have restarted the computer and tried again but the same thing happens. Virus scan is still disabling it self will not stay enabled. I installed fix it utilities 7 professional with the virus scan and I am running it for protection. I want my Mcafee’s back and running.


Could not download Microsoft windows defender due to something about a file called FILExt- What is this how do I remove or do I keep this?
I loaded the other program just fine, SPYbotSD or Spyware doctor.

Then I start the initial cleaning process
And here are the things that were asked for to get help.
Did not see anything suspicious in the add or remove programs
Microsoft windows malicious software removal tool found nothing.
Ran the VCOM fix it utilities 7 pro deep scan for viruses and this is a copy of the results
Virus Scan Results:

Run: 1/6/2007 1:48:00 PM

Scanned:
Boot Sector
Boot Sector
All files, including those in archives, on all local hard drives

Results:

Files not scanned:
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c41f30b2efe 34d9ff980e8bfc23a51f_7b71fbce-dff3-42c2-9259-d2367eb8daa9
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2456158167bc 4ce9694973cf677c80cd_7b71fbce-dff3-42c2-9259-d2367eb8daa9
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a7a638ddc3a4 c959f5440e8afb0cbcd3_7b71fbce-dff3-42c2-9259-d2367eb8daa9
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b4fb4d4114bd 54ce275573feea63e451_7b71fbce-dff3-42c2-9259-d2367eb8daa9
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
C:\Documents and Settings\LocalService\NTUSER.DAT
C:\Documents and Settings\LocalService\ntuser.dat.LOG
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
C:\Documents and Settings\NetworkService\NTUSER.DAT
C:\Documents and Settings\NetworkService\ntuser.dat.LOG
C:\Documents and Settings\Stephen\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
C:\Documents and Settings\Stephen\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
C:\Documents and Settings\Stephen\ntuser.dat
C:\Documents and Settings\Stephen\ntuser.dat.LOG
C:\hiberfil.sys
C:\pagefile.sys
C:\System Volume Information\catalog.wci\CiCL0001.000
C:\System Volume Information\catalog.wci\CiP10000.000
C:\System Volume Information\catalog.wci\CiP20000.000
C:\System Volume Information\catalog.wci\CiPT0000.000
C:\System Volume Information\catalog.wci\CiSL0001.000
C:\System Volume Information\catalog.wci\CiSP0000.000
C:\System Volume Information\catalog.wci\CiST0000.000
C:\System Volume Information\catalog.wci\CiVP0000.000
C:\System Volume Information\catalog.wci\INDEX.000
C:\WINDOWS\$NtUninstallKB824141$\user32.dll
C:\WINDOWS\$NtUninstallKB824141$\win32k.sys
C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll
C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll
C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll
C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll
C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll
C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll
C:\WINDOWS\$NtUninstallKB828741$\colbact.dll
C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll
C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe
C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll
C:\WINDOWS\$NtUninstallKB828741$\comuid.dll
C:\WINDOWS\$NtUninstallKB828741$\es.dll
C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll
C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll
C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll
C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll
C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll
C:\WINDOWS\$NtUninstallKB828741$\ole32.dll
C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll
C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll
C:\WINDOWS\$NtUninstallKB828741$\txflog.dll
C:\WINDOWS\$NtUninstallKB835732$\callcont.dll
C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll
C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll
C:\WINDOWS\$NtUninstallKB835732$\h323.tsp
C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll
C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe
C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll
C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll
C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll
C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll
C:\WINDOWS\$NtUninstallKB835732$\msgina.dll
C:\WINDOWS\$NtUninstallKB835732$\mst120.dll
C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll
C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll
C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll
C:\WINDOWS\$NtUninstallKB835732$\schannel.dll
C:\WINDOWS\$NtUninstallKB835732$\xpsp2res.dll
C:\WINDOWS\$NtUninstallKB837001$\dao360.dll
C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll
C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll
C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll
C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll
C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll
C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll
C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll
C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll
C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll
C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll
C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll
C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll
C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll
C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll
C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll
C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll
C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll
C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll
C:\WINDOWS\$NtUninstallKB839645$\fldrclnr.dll
C:\WINDOWS\$NtUninstallKB839645$\shell32.dll
C:\WINDOWS\$NtUninstallKB839645$\shlwapi.dll
C:\WINDOWS\$NtUninstallKB839645$\sxs.dll
C:\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll
C:\WINDOWS\$NtUninstallQ329115$\reg00003
C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx
C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll
C:\WINDOWS\SYSTEM32\CatRoot2\edb.log
C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG

16226 Executables scanned
514 Macros scanned
4742 Files inside archives scanned
106 Files that could not be scanned (files in use, encrypted archives, etc.)
155859 Total files scanned

Recommended action:

Some files could not be scanned. These files may be encrypted or in use by either Windows or another application.

The scanner cannot scan files that are locked by Windows, but most of these files are at a very low risk of infection. These include files with a .log extension (or no extension at all), virtual memory files (*.swp in Windows 95/98 or pagefile.sys in Windows NT/2000) and System Registry files (user.dat, system.dat, ntuser.dat).

If you would like to scan these files, close all open applications, decrypt any encrypted files, and try again. If you still cannot access the files, use the Virus Rescue Disk to scan them.

In some cases you may need to use the Virus Rescue Disk set. The disk set, including instructions, can be downloaded from http://www.v-com.com/virusinfo/rescue.html. Please use a machine that is not infected with a virus to create the disk set. Please note the Virus Rescue Disk set is only compatible with FAT file systems. Windows NT and operating systems that are installed on NTFS file system are incompatible.

You may wish to boot into Safe Mode and run Deep Scan.


Following this I booted into safe mode.
Ran the Atf- Cleaner
Ran the AVG anti spyware following is this report
AVG Anti-Spyware - Scan Report
---------------------------------------------------------


Ran spyware doctor got this report
Spyware Doctor Activity Report
Generated on 1/6/2007 4:06:21 PM Spyware Doctor Homepage
PC Tools Homepage
Technical Support



Scans (basic information only):

Scan Results:
scan start: 1/6/2007 4:08:19 PM
scan stop: 1/6/2007 4:47:59 PM
scanned items: 124560
found items: 100
found and ignored: 0
tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



Infection Name Location Risk
My Yodlee Assistant C:\WINDOWS\SYSTEM32\Yodelizer.dll Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID## Medium
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000} High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}## High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore## High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Blocked High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Count High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Flags High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Time High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Type High
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore## Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Blocked Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Count Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Flags Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Time Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Type Medium
DSSAgent HKLM\software\broderbund software\dss High
DSSAgent HKLM\software\broderbund software\dss## High
DSSAgent HKLM\software\broderbund software\dss\SSIDs High
DSSAgent HKLM\software\broderbund software\dss\SSIDs## High
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
DSSAgent multiple High

Scan Results:
scan start: 1/6/2007 4:54:44 PM
scan stop: 1/6/2007 4:54:58 PM
scanned items: 1125
found items: 1
found and ignored: 0
tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



Infection Name Location Risk
DSSAgent multiple High

Scan Results:
scan start: 1/6/2007 4:56:13 PM
scan stop: 1/6/2007 5:00:02 PM
scanned items: 44073
found items: 5
found and ignored: 0
tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



Infection Name Location Risk
DSSAgent HKLM\software\broderbund software\dss High
DSSAgent HKLM\software\broderbund software\dss## High
DSSAgent HKLM\software\broderbund software\dss\SSIDs High
DSSAgent HKLM\software\broderbund software\dss\SSIDs## High
DSSAgent multiple High

Scan Results:
scan start: 1/6/2007 5:03:13 PM
scan stop: 1/6/2007 5:41:39 PM
scanned items: 124619
found items: 98
found and ignored: 0
tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



Infection Name Location Risk
My Yodlee Assistant C:\WINDOWS\SYSTEM32\Yodelizer.dll Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKCR\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKCR\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID## Medium
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000} High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}## High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore## High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Blocked High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Count High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Flags High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Time High
CommonName HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{00000000-0000-0000-0000-000000000000}\iexplore##Type High
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore## Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Blocked Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Count Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Flags Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Time Medium
My Yodlee Assistant HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\iexplore##Type Medium
DSSAgent HKLM\software\broderbund software\dss High
DSSAgent HKLM\software\broderbund software\dss## High
DSSAgent HKLM\software\broderbund software\dss\SSIDs High
DSSAgent HKLM\software\broderbund software\dss\SSIDs## High
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B3-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\TypeLib## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{0C9EE8B4-927C-11d5-AB98-0050DA664D35}\VersionIndependentProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35} Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32 Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\InprocServer32##ThreadingModel Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\ProgID## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\Programmable## Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID Medium
My Yodlee Assistant HKLM\Software\Classes\CLSID\{6BC013D0-77D9-11d5-AB95-0050DA664D35}\VersionIndependentProgID## Medium
DSSAgent multiple High

Scan Results:
scan start: 1/6/2007 5:42:47 PM
scan stop: 1/6/2007 5:43:11 PM
scanned items: 1178
found items: 1
found and ignored: 0
tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



Infection Name Location Risk
DSSAgent multiple High


Other Sections:






Copyright � 2003 PC Tools. All rights reserved. Legal Notice





Rebooted to normal windows
I am 39 year old online college student working towards my bachelors in Accounting and I need my computer please help me. Classes start back on January 12th. Thank you for taking the time to help me. I sorry for all the information but I wanted to make sure everything is included with my plea for help.

Suzanne

[jholland1964]

Whoa! Give me a little bit and I will see what I can find. I will be honest, have never heard "symptoms" like this or really even seen logs like this but don't give up!
I don't see your AVG scan report...can you repost that one?
On second thought...let's back up.
Reboot to Safe Mode
Run your Anti-virus program.
Run AdAwareSE
Run Spybot
Tell all of them to fix whatever they find.
Run AVG Anti-spy. Have it fix whatever it finds. Save THAT log.
Reboot to Normal Mode. Run HJT again. Save THAT log.
Post back here with JUST THOSE TWO LOGS...AVG and HJT.

[Suzymarie39]

I am scared now!!!! But I am attaching the ATV.

[Suzymarie39]

Sorry that should read AVG file not an ATV.

[jholland1964]

No, No, No don't be scared. We just don't need those other logs unless we ask for them. All we need to know is what they fixed.
DON'T PANIC!!!

[jholland1964]

Take a deep breath
Now you say that your McAfee was not running right...where did the VCOM come from? Was this always on the machine with the McAfee or did you just install it because the McAfee was not working correctly?
Never, ever run two anti-virus programs on the same machine at the same time. There are at least portions of both running, which may be why your McAfee wouldn't run correctly.
Do you have a McAfee disk or is this a downloaded program?
You must totally uninstall one of these anti-virus programs. To do this begin in Add/Remove. Go to the one you are going to NOT WANT TO KEEP and highlight, then click remove. Follow all the prompts. Once you are told it is removed, you may have to reboot to complete the removal, then go to Start, Search, Files and Folders and search for all files with the name of the program you removed. If any are found, delete them. Reboot.
THEN, go back to Add/Remove and uninstall the OTHER anti-virus program completely. Follow the same steps including the reboot and then the file search and deletion of any remaining files.
THEN reinstall the anti-virus program you are keeping. Update it once it is reinstalled.
THEN, reboot to safe mode and do a full system scan with the anti-virus program you just installed and updated. Fix everything found.
THEN do a NEW AVG Anti-spy scan. Fix everything found and save the log.
Reboot to normal mode and run a new HJT scan, save the log. Post back here with both new logs.

[Suzymarie39]

I am trying not panic. the VCOM was installed after all the problems showed up but the virus scanner for the VCOM was disabled, until I needed to run a virus scanner for the report.
McAfee is a downloaded program from their site. Ok
Ok I will report back soon with the results after I uninstall the virsus scanners and reinstall the Mcafee virus scanner and the others stuff as per your instructions. Thank you.

[Suzymarie39]

I have only McAfee virus scan installed and it is staying enable. YES!
I have gone into the safe mode ran the virus scan it came back that there were no viruses detected. I ran the AVG report and went back into normal mode and ran Hijack.

[Suzymarie39]

Email is working, another YES. Still having problem download Privacy service from McAfee during the installation and programs says, I have to restart my computer and try again.

[jholland1964]

Give me a bit to check all this out and I will get back to you.
Judy