Finally! Been here three times...been having a few problems lately...pages taking an extremely long time to load...or not completely loading at all...errors on firefox...no data errors...page errors...

AVG reports nothing
AdWareSE reports nothing
Disk Defrag does not need defragging
Disk clean-up...tried twice...either it was taking a very long time to work ( I didn't have the patience to wait )...or it wasn't scanning at all ( it said it was scanning but that little brush was not sweeping )
just cleared my browswer cache and history yesterday
ran hijackthis and nothing unusual...

C:\WINNT\System32\smss.exe Safe.
Safe. running process. (smss.exe)
Systemprozess - Anwendung, die benutzt wird um Sitzungen zu starten, verwalten und löschen.
C:\WINNT\system32\winlogon.exe Safe.
Safe. running process. (winlogon.exe)
Systemprozess - Windows Login Routine
C:\WINNT\system32\services.exe Safe.
Safe. running process. (services.exe)
Systemprozess - Verwaltet die Systemdienste.
C:\WINNT\system32\lsass.exe Safe.
Safe. running process. (lsass.exe)
Systemprozess
C:\WINNT\system32\svchost.exe Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
C:\WINNT\system32\LEXBCES.EXE Safe.
Safe. running process. (LEXBCES.EXE)
Lexmark LexBce Service
C:\WINNT\system32\LEXPPS.EXE Safe.
Safe. running process. (LEXPPS.EXE)

C:\WINNT\system32\spoolsv.exe Safe.
Safe. running process. (spoolsv.exe)
Systemprozess
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe AV-Scanner
Safe. running process. (avgamsvr.exe)
Antivirensoftware
Possibly nasty! According to our database this process runs normally in c:\program files\grisoft\avg free! Check if you know this process and arrange a viruscheck where required.
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe AV-Scanner
Safe. running process. (avgupsvc.exe)
Antivirensoftware
Possibly nasty! According to our database this process runs normally in c:\progra~1\grisoft\avgfre~1! Check if you know this process and arrange a viruscheck where required.
C:\WINNT\system32\svchost.exe Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
C:\WINNT\system32\MSTask.exe Safe.
Safe. running process. (MSTask.exe)
Gehört zu den Windows Powertoys von MS.
C:\WINNT\system32\stisvc.exe Safe.
Safe. running process. (stisvc.exe)

C:\WINNT\system32\ZoneLabs\vsmon.exe Firewall
Safe. running process. (vsmon.exe)
ZoneAlarm Firewall
C:\WINNT\Explorer.EXE Safe.
Safe. running process. (Explorer.EXE)
Systemprozess für Desktop und Taskleiste.
C:\WINNT\System32\WBEM\WinMgmt.exe Safe.
Safe. running process. (WinMgmt.exe)

C:\WINNT\system32\svchost.exe Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
C:\Program Files\Common Files\Real\Update_OB\realsched.exe Safe.
Safe. running process. (realsched.exe)

C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe Safe.
Safe. running process. (lxbkbmgr.exe)

C:\WINNT\essspk.exe Unknown
Unknown running process. (essspk.exe)
ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets This is a unknown process.
C:\Program Files\QuickTime\qttask.exe Safe.
Safe. running process. (qttask.exe)
Part of QuickTime
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe AV-Scanner
Safe. running process. (avgcc.exe)
Antivirensoftware
Possibly nasty! According to our database this process runs normally in c:\program files\grisoft\avg free! Check if you know this process and arrange a viruscheck where required.
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe Safe.
Safe. running process. (lxbkbmon.exe)

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe AV-Scanner
Safe. running process. (avgemc.exe)
Antivirensoftware
Possibly nasty! According to our database this process runs normally in c:\program files\grisoft\avg free! Check if you know this process and arrange a viruscheck where required.
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe Safe.
Safe. running process. (jusched.exe)
Java Runtime
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Safe.
Safe. running process. (zlclient.exe)
Zone Alarm
C:\WINNT\system32\svchost.exe Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
C:\WINNT\system32\wuauclt.exe Safe.
Safe. running process. (wuauclt.exe)
Windows Update AutoUpdate Client
C:\WINNT\system32\cleanmgr.exe Safe.
Safe. running process. (cleanmgr.exe)
Windows Cleanmanager
C:\WINNT\system32\cleanmgr.exe Safe.
Safe. running process. (cleanmgr.exe)
Windows Cleanmanager
D:\WinZip\WINZIP32.EXE Safe.
Safe. running process. (WINZIP32.EXE)

Possibly nasty! According to our database this process runs normally in c:\programme\winzip\! Check if you know this process and arrange a viruscheck where required.
C:\unzipped\hijackthis\HijackThis.exe Safe.
Safe. running process. (HijackThis.exe)
Tool, mit dem sie dieses Logfile erzeugt haben. Remember that Hijackthis must be run in an own folder. Only if Hijackthis run in an own folder it will create backups!
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([06849E9F-C8D7-4D59-B87D-784B7D6BE0B3] - Result: 06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) has been checked. Hit rate: 99 %
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([AA58ED58-01DD-4d91-8333-CF10577473F7] - Result: AA58ED58-01DD-4d91-8333-CF10577473F7) has been checked. Hit rate: 99 %
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([8E718888-423F-11D2-876E-00A0C9082467] - Result: 8E718888-423F-11D2-876E-00A0C9082467) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: 99 %
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([2318C2B1-4965-11d4-9B18-009027A5CD4F] - Result: 2318C2B1-4965-11D4-9B18-009027A5CD4F) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: 96 %
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon Safe.
Safe. Find more information about its use here
Hit rate: 99 % (result) Not dangerous, but unnecessary.
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot Safe.
Safe. Part of RealPlayer
Hit rate: 99 % (result)
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe Safe.
Safe. Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
Hit rate: 91 % (result)
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" Safe.
Safe. Lexmark X1100 Series
Hit rate: 99 % (result)
O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe Safe.
Safe. ESS Technologies Call waiting, which gets installed by the drivers for V92 modems based on ESS Technologies chipsets
Hit rate: 99 % (result)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime Safe.
Safe. QuickTime
Hit rate: 99 % (result) Not dangerous, but unnecessary.
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP Safe.
Safe. AVG Anti-Virus 7.0 Control Center. Allows you to manage and control all AVG Anti-Virus components, settings and updates
Hit rate: 71 % (result)
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe Safe.
Safe. AVG Anti-Virus 7.0 Email Cleaner. Scans incoming and outgoing email for viruses
Hit rate: 69 % (result)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe Safe.
Safe. Java von Sun
Hit rate: 99 % (result)
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" Safe.
Safe. Firewall program from Zonelabs. Pro version inlcudes other online security options
Hit rate: 85 % (result)
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE Safe.
Safe.
Hit rate: 93 % (result)
O4 - Global Startup: WinZip Quick Pick.lnk = D:\WinZip\WZQKPICK.EXE Safe.
Safe. Added with WinZip version 8.1. "The new WinZip Quick Pick taskbar tray icon gives you instant access to WinZip and your Zip files. Just left click the icon to open WinZip, or right click it to instantly reopen recently used Zip files, access your Favorite Zip Folders, open WinZip Help, or start WinZip itself.". You can right-click and close it - choosing to not re-load it at start-up
Hit rate: 93 % (result) Not dangerous, but unnecessary.
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html Safe.
Safe. The entry &Google Search has been identified as safe. If the entry '&Google Search ' is not needed anymore, it should be fixed.
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html Safe.
Safe. The entry Backward Links has been identified as safe. If the entry 'Backward Links ' is not needed anymore, it should be fixed.
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html Safe.
Safe. The entry Cached Snapshot of Page has been identified as safe. If the entry 'Cached Snapshot of Page ' is not needed anymore, it should be fixed.
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html Safe.
Safe. The entry Similar Pages has been identified as safe. If the entry 'Similar Pages ' is not needed anymore, it should be fixed.
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html Safe.
Safe. The entry Translate into English has been identified as safe. If the entry 'Translate into English ' is not needed anymore, it should be fixed.
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll Safe.
Safe. The entry has been identified as safe. If the entry '' is not needed anymore, it should be fixed.
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll Safe.
Safe. The entry Sun Java Console has been identified as safe. If the entry 'Sun Java Console ' is not needed anymore, it should be fixed.
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll Safe.
Safe. Most of the entries present in this registry area are safe. Only OnFlow adds an unwanted plugins can be found here. OnFlow-Plugins have the following extension *.ofb.
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/24080c34...p/RdxIE601.cab Safe.
Safe. This entry has been identified as safe.
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe AV-Scanner
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it. This service (avgamsvr.exe) was identified as a good one.
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe AV-Scanner
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it. This service (avgupsvc.exe) was identified as a good one.
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe Safe.
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it. This service (dmadmin.exe) was identified as a good one.
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE Safe.
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it. This service (LEXBCES.EXE) was identified as a good one.
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe Firewall
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it. This service (vsmon.exe) was identified as a good one.

Any suggestions why my normal snail seems to be facing gail force winds?

For those who don't know...

Windows 2000 Pro
80GB with 93% free space
384MB Ram with 170MB free at last look
service pack 4

Thanks,


Eg