Skip to main content
Super User

Return to Question

sauteed squash with fried onions (anyone is anywhere)
Source Link
random ♦
random ♦
  • 15.1k
  • 9
  • 55
  • 58

Long Shutdown Time Windows is shutting down screen takes a long 20 minutes

Can anyone think of anything thatWhat may be causing it to take so long? I removed the mapped network drives that are no longer in use, but I don't think that would make a difference. Here

Here is my HijackThis log for reference:

Long Shutdown Time

Can anyone think of anything that may be causing it to take so long? I removed the mapped network drives that are no longer in use, but I don't think that would make a difference. Here is my HijackThis log for reference:

Windows is shutting down screen takes a long 20 minutes

What may be causing it to take so long? I removed the mapped network drives that are no longer in use, but I don't think that would make a difference.

Here is my HijackThis log for reference:

added 388 characters in body
Source Link
Molly7244
Molly7244

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:06:31 AM, on 12/2/2009 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal

Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\system32\LxrJD31s.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\pctspk.exe C:\WINDOWS\System32\atiptaxx.exe C:\WINDOWS\ATK0100\Hcontrol.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

  • C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F}
  • C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467}
  • C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655}
  • (no file) O4 - HKLM..\Run: [PCTVOICE] pctspk.exe O4 - HKLM..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKUS\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
  • C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
  • C:\WINDOWS\System32\msjava.dll O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
  • http://bin.mcafee.com/molbin/shared/mcinsctl/en-gb/4,0,0,74/mcinsctl.cab O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab O17 - HKLM\System\CCS\Services\Tcpip..{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}: NameServer = 158.152.1.58,158.152.1.43 O17 - HKLM\System\CS1\Services\Tcpip..{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}: NameServer = 158.152.1.58,158.152.1.43 O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: C-DillaCdaC11BA - Macrovision
  • C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc.
  • C:
> Logfile of Trend Micro HijackThis
> v2.0.2 Scan saved at 11:06:31 AM, on
> 12/2/2009 Platform: Windows XP SP1
> (WinNT 5.01.2600) MSIE: Internet
> Explorer v6.00 SP1 (6.00.2800.1106)
> Boot mode: Normal
> 
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\system32\spoolsv.exe
> C:\WINDOWS\System32\Ati2evxx.exe
> C:\WINDOWS\System32\drivers\CDAC11BA.EXE
> C:\Program Files\Cisco Systems\VPN
> Client\cvpnd.exe
> C:\WINDOWS\system32\LxrJD31s.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\System32\pctspk.exe
> C:\WINDOWS\System32\atiptaxx.exe
> C:\WINDOWS\ATK0100\Hcontrol.exe
> C:\Program Files\Common
> Files\Real\Update_OB\realsched.exe
> C:\Program
> Files\Java\j2re1.4.2_04\bin\jusched.exe
> C:\WINDOWS\ATK0100\ATKOSD.exe
> C:\WINDOWS\System32\wuauclt.exe
> C:\WINDOWS\System32\wuauclt.exe
> C:\Program Files\Trend
> Micro\HijackThis\HijackThis.exe
> 
> R0 - HKCU\Software\Microsoft\Internet
> Explorer\Main,Local Page =  O2 - BHO:
> AcroIEHlprObj Class -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
> - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F}
> - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467}
> - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: (no name) -
> {BA52B914-B692-46c4-B683-905236F6F655}
> - (no file) O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe O4 -
> HKLM\..\Run: [ATIModeChange]
> Ati2mdxx.exe O4 - HKLM\..\Run:
> [AtiPTA] atiptaxx.exe O4 -
> HKLM\..\Run: [Hcontrol]
> C:\WINDOWS\ATK0100\Hcontrol.exe O4 -
> HKLM\..\Run: [TkBellExe] "C:\Program
> Files\Common
> Files\Real\Update_OB\realsched.exe" 
> -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> Files\Java\j2re1.4.2_04\bin\jusched.exe
> O4 - HKUS\S-1-5-19\..\Run:
> [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'LOCAL SERVICE') O4 -
> HKUS\S-1-5-20\..\Run: [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'NETWORK SERVICE') O4 -
> HKUS\S-1-5-18\..\Run: [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run:
> [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'Default user') O9 - Extra button: (no
> name) -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
> - C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java
> Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
> - C:\WINDOWS\System32\msjava.dll O16 - DPF:
> {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
> - http://bin.mcafee.com/molbin/shared/mcinsctl/en-gb/4,0,0,74/mcinsctl.cab
> O16 - DPF:
> {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6}
> (MSN Chat Control 4.5) -
> http://fdl.msn.com/public/chat/msnchat45.cab
> O17 -
> HKLM\System\CCS\Services\Tcpip\..\{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}:
> NameServer = 158.152.1.58,158.152.1.43
> O17 -
> HKLM\System\CS1\Services\Tcpip\..\{1D93AED5-2A9C-4968-A6A

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:06:31 AM, on 12/2/2009 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal

Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\system32\LxrJD31s.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\pctspk.exe C:\WINDOWS\System32\atiptaxx.exe C:\WINDOWS\ATK0100\Hcontrol.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

  • C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F}
  • C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467}
  • C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655}
  • (no file) O4 - HKLM..\Run: [PCTVOICE] pctspk.exe O4 - HKLM..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKUS\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
  • C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
  • C:\WINDOWS\System32\msjava.dll O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
  • http://bin.mcafee.com/molbin/shared/mcinsctl/en-gb/4,0,0,74/mcinsctl.cab O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab O17 - HKLM\System\CCS\Services\Tcpip..{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}: NameServer = 158.152.1.58,158.152.1.43 O17 - HKLM\System\CS1\Services\Tcpip..{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}: NameServer = 158.152.1.58,158.152.1.43 O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: C-DillaCdaC11BA - Macrovision
  • C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc.
  • C:
> Logfile of Trend Micro HijackThis
> v2.0.2 Scan saved at 11:06:31 AM, on
> 12/2/2009 Platform: Windows XP SP1
> (WinNT 5.01.2600) MSIE: Internet
> Explorer v6.00 SP1 (6.00.2800.1106)
> Boot mode: Normal
> 
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\system32\spoolsv.exe
> C:\WINDOWS\System32\Ati2evxx.exe
> C:\WINDOWS\System32\drivers\CDAC11BA.EXE
> C:\Program Files\Cisco Systems\VPN
> Client\cvpnd.exe
> C:\WINDOWS\system32\LxrJD31s.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\System32\pctspk.exe
> C:\WINDOWS\System32\atiptaxx.exe
> C:\WINDOWS\ATK0100\Hcontrol.exe
> C:\Program Files\Common
> Files\Real\Update_OB\realsched.exe
> C:\Program
> Files\Java\j2re1.4.2_04\bin\jusched.exe
> C:\WINDOWS\ATK0100\ATKOSD.exe
> C:\WINDOWS\System32\wuauclt.exe
> C:\WINDOWS\System32\wuauclt.exe
> C:\Program Files\Trend
> Micro\HijackThis\HijackThis.exe
> 
> R0 - HKCU\Software\Microsoft\Internet
> Explorer\Main,Local Page =  O2 - BHO:
> AcroIEHlprObj Class -
> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
> - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F}
> - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467}
> - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: (no name) -
> {BA52B914-B692-46c4-B683-905236F6F655}
> - (no file) O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe O4 -
> HKLM\..\Run: [ATIModeChange]
> Ati2mdxx.exe O4 - HKLM\..\Run:
> [AtiPTA] atiptaxx.exe O4 -
> HKLM\..\Run: [Hcontrol]
> C:\WINDOWS\ATK0100\Hcontrol.exe O4 -
> HKLM\..\Run: [TkBellExe] "C:\Program
> Files\Common
> Files\Real\Update_OB\realsched.exe" 
> -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program
> Files\Java\j2re1.4.2_04\bin\jusched.exe
> O4 - HKUS\S-1-5-19\..\Run:
> [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'LOCAL SERVICE') O4 -
> HKUS\S-1-5-20\..\Run: [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'NETWORK SERVICE') O4 -
> HKUS\S-1-5-18\..\Run: [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run:
> [CTFMON.EXE]
> C:\WINDOWS\System32\CTFMON.EXE (User
> 'Default user') O9 - Extra button: (no
> name) -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
> - C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java
> Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
> - C:\WINDOWS\System32\msjava.dll O16 - DPF:
> {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
> - http://bin.mcafee.com/molbin/shared/mcinsctl/en-gb/4,0,0,74/mcinsctl.cab
> O16 - DPF:
> {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6}
> (MSN Chat Control 4.5) -
> http://fdl.msn.com/public/chat/msnchat45.cab
> O17 -
> HKLM\System\CCS\Services\Tcpip\..\{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}:
> NameServer = 158.152.1.58,158.152.1.43
> O17 -
> HKLM\System\CS1\Services\Tcpip\..\{1D93AED5-2A9C-4968-A6A
Source Link
Jim Fell
Jim Fell
  • 6k
  • 17
  • 56
  • 77

Long Shutdown Time

I have an old Windows XP Pro SP1 machine that is having a problem shutting down. In know that XP takes longer to shut down than to startup, but 20 minutes is a little excessive. It always does shut down (eventually), but it stays on that "Windows is shutting down..." screen for about 20 minutes.

Can anyone think of anything that may be causing it to take so long? I removed the mapped network drives that are no longer in use, but I don't think that would make a difference. Here is my HijackThis log for reference:

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:06:31 AM, on 12/2/2009 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal

Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\system32\LxrJD31s.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\pctspk.exe C:\WINDOWS\System32\atiptaxx.exe C:\WINDOWS\ATK0100\Hcontrol.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

  • C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F}
  • C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467}
  • C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655}
  • (no file) O4 - HKLM..\Run: [PCTVOICE] pctspk.exe O4 - HKLM..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKUS\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
  • C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
  • C:\WINDOWS\System32\msjava.dll O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
  • http://bin.mcafee.com/molbin/shared/mcinsctl/en-gb/4,0,0,74/mcinsctl.cab O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab O17 - HKLM\System\CCS\Services\Tcpip..{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}: NameServer = 158.152.1.58,158.152.1.43 O17 - HKLM\System\CS1\Services\Tcpip..{1D93AED5-2A9C-4968-A6A2-C059EFB89F66}: NameServer = 158.152.1.58,158.152.1.43 O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: C-DillaCdaC11BA - Macrovision
  • C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc.
  • C: