Start Button Does Not Link To "My Computer"

[WolfpackRon]

Start button does not link to "My Computer", "My Pictures", etc. Also I cannot "close" pages, attachments, etc. I have scanned for viruses, removed spyware with Spybot and Ad-aware, and deleted temp internet files. Any suggestions? WolfpackRon.

[ski]

Which O/S are you using?

[WolfpackRon]

WinXP

[ski]

Make sure that your AV program has been updated with the latest files, and also run CWShredder.

If nothing shows up, then see if a system restore helps.

[WolfpackRon]

What is an AV program? Like Nero? Where do I get CWShredder? I am also removing Easy Creator 5 which may be the problem with a conflict with Nero. Thanks, WolfpackRon.

[Steve]

Right click Start > Properties > Start menu > Customize > Advanced and see if they are set to show on the start menu. Yes/no?

Which pages can't you close? Web pages? Word documents? Do you mean you can't right click and close? Can't close with the x in the upper right corner?

[WolfpackRon]

My computer, My pictures, etc. are listed as "Open as a Link." Word docs close with the "X", but internet pages such as the Road Runner main page will not close with the "X". Must use Control/Alt/Delete. Pop-ups do not close with and "X". Thanks, WolfpackRon.

[WolfpackRon]

What does it mean when the Symantec Antivirus program shield has a yellow exclamation mark on it. It will not let me "check" the "enable the antivirus program. Thanks.

[WolfpackRon]

I also ran the CWShredder program and it removed something. Still not working properly though. WolfpackRon.

[ski]

Sorry about the abbreviation. AV stands for antivirus.

There are some viruses, like Bagle, that disables antivirus programs.
Suggest that you go to the Symantec site and update your program there.
If that does not help, then look for a virus removal tool.

[WolfpackRon]

Ski,
I scanned the C drive with Symantec AntiVirus and it found no viruses. At the beginning of this problem, the Shield at the bottom had a yellow circle with an exclamation mark in it. I removed the program and installed it again. I have scanned the C drive two times without finding any viruses. I will keep plugging. I have used Spybot, Ad-Aware, and then CWShredder. Still have the prob. Thanks, WolfpackRon.

[ski]

Did you try a system restore, or a system repair?

[WolfpackRon]

Ski,
I did try a system restore, but I may go back in time a little farther. As for system repair, do you mean with the WinXP program disk? I did not format the computer, which is the final "fix", but I did what I forget was called like a system repair. I used the recommended update for a previously installed WinXP program. Upgrade or Update, I forget what it was called. Thanks, WolfpackRon.

[ski]

This link explains how to do a system repair on Win XP:
http://www.techspot.com/vb/showthread.php?s=&threadid=8356

[WolfpackRon]

Ski,
I completed the "system repair" per the article's instructions, and I am still completing the "updates." This did not solve my problem. This is the second pass on this and the updates. I am still looking for a fix. Thanks, WolfpackRon.

[Fruss Tray Ted]

I don't believe 'System Repair' would affect your antivirus softwares therefore the virus has still left it's mark in the program and or registry pertaining to the affected softwares.

I would try uninstalling your antivirus software then reinstall and update first. If this doesn't work, the virus may still be lurking and you may want to consider a full reformat and reinstall of your OS also.

[WolfpackRon]

I have removed and reinstalled the antivirus program two times, updated and scanned, without finding any viruses. They may have done their damage and the only recourse may be to format the computer. WolfpackRon.

[Sylvander]

The best way to eliminate infection [from the file system] is to have made backup[s] of the C: drive when the system was clean, then when the C: drive becomes infected you re-format it and restore a backup.
You should also have made a "Rescue Boot Disk" that can be used to "re-build" the Master Partition Sector from the backup made on this disk.
This eliminates any "Boot Sector" virus.

It seems like the infection has disbled your antivirus program.
NO BACKUP AVAILABLE
My son has the same right now [his AV program is disabled] and I was trying to eliminate the infection and was thwarted at everything I tried such as:

1. Virus scan at one of the anti-virus websites.

2. Scanning with anti-virus software on a write-protected floppy.
When I tried using the software it was reported as a "non-system disk".
[Presumably the infective agent refusing to accept a write-protected disk and giving a false reason to the user]
When I used a Win98 Startup disk [I must have forgotten to write-protect it] it accepted that [and probably infected it].
I was then able to run the anti-virus floppy using the A:> prompt, but I think it wasn't working correctly [its operation had been subverted].
Almost all the files being detected were ".tmp" files!

3. I think the answer is to copy only the necessary DATA files [to CD's] and scan them for infectiion on a clean PC, then re-format the existing drive, erase all the contents [write random 0's & 1's] and re-build the software by re-installing the OS & programs.

[WolfpackRon]

I have at least partially solved my problem. As instructed on another forum "PC-Media Tech," I unchecked the block listed under Control Panel-Internet Options-Advanced-Settings that stated "allow 3rd party browser extensions." I am able to use the start button to go to the link "My Computer" on one account, but not the other user account. The account that works is my wife's, so the problem is solved since it is on her computer. Not sure why but it worked. WolfpackRon.

[classicsoftware]

First try an on ;ine scan. The links are in Budefreds sig. Also download and install hijack this. Install it into it's own folder and run the program. DO NOT fix anything on your own and paste the contents of the log in your next post.

[WolfpackRon]

ClassicSoftware,
This is a log from HijackThis. I had previously scanned the computer using HouseCall. Next step please. Thanks, WolfpackRon.

Logfile of HijackThis v1.97.7
Scan saved at 5:30:12 PM, on 5/5/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Symantec\SAV8\DefWatch.exe
C:\PROGRA~1\Symantec\SAV8\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\PROGRA~1\Symantec\SAV8\vptray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Microsoft Shared\Media Manager\Airsvcu.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Microsoft Office\Office\Osa.exe
C:\Program Files\Microsoft Office\Office\Findfast.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Cynthia Parks\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://if.searchcentrix.com/sidecat.jsp?p=98567&appid=21&id=0949201921680101
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://if.searchcentrix.com/sidecat.jsp?p=98567&appid=21&id=0949201921680101
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = http=proxy-server:8080;https=proxy-server:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = ams-server*;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50026
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: (no name) - {000006B1-19B5-414A-849F-2A3C64AE6939} - C:\WINDOWS\bi.dll
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: (no name) - {30A56549-9D5B-4D34-AFA7-440A7F0538A9} - C:\Program Files\Open Site\opnste.dll
O2 - BHO: (no name) - {4E7BD74F-2B8D-469E-DFF7-EC6BF4D5FA7D} - C:\WINDOWS\gsim.dll
O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [Belt] C:\WINDOWS\Belt.exe
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\Symantec\SAV8\vptray.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Media Manager Indexer.lnk = C:\Program Files\Common Files\Microsoft Shared\Media Manager\AIRSVCU.EXE
O4 - Global Startup: Introducing Media Manager.lnk = C:\Program Files\Common Files\Microsoft Shared\Media Manager\SPLASHA.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtw32.dll
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - [url]http://www.ipix.com/download/ipixx.cab[/url]
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - [url]http://imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab[/url]
O16 - DPF: {1FDEC088-A699-46FE-BF76-D5FD6DAE6150} (UCSearch.ucUCSearch) - [url]http://www.armbender.com/UCSearch.CAB[/url]
O16 - DPF: {20000273-8230-4DD4-BE4F-6889D1E74167} - [url]http://download.abetterinternet.com/download/cabs/FON39120/payload2.cab[/url]
O16 - DPF: {30000273-8230-4DD4-BE4F-6889D1E74167} - [url]http://download.abetterinternet.com/download/cabs/FON39120/flash.cab[/url]
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - [url]http://software-dl.real.com/31b6de92b8d825eafe20/netzip/RdxIE601.cab[/url]
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - [url]http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab[/url]
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - [url]http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38107.5200347222[/url]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [url]http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab[/url]

[Steve]

Hi WolfpackRon,

I'd suggest running Housecall (http://housecall.trendmicro.com/) again.
Reboot.
Download, update and run Ad-Aware (http://www.lavasoftusa.com/support/download/) .
Reboot.
Download, update and run Spybot Search & Destroy (http://www.safer-networking.org/index.php?page=download) .
Reboot and post a new HJT log.

:)

[classicsoftware]

I'll go with Steve. Do the Adaware and Spybot S&D. It does appear you have CWS or one of it's varients. Go to Budfed's links and download CWS. When you report the HJT log. You MUST put it in it's own folder.

[WolfpackRon]

I scanned with Housecall, Ad-Aware, Spybot, and CWS. Not sure how to put Hijack This file in a folder. WolfpackRon.

Logfile of HijackThis v1.97.7
Scan saved at 12:35:17 PM, on 5/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Symantec\SAV8\DefWatch.exe
C:\PROGRA~1\Symantec\SAV8\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\PROGRA~1\Symantec\SAV8\vptray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Microsoft Shared\Media Manager\Airsvcu.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Microsoft Office\Office\Osa.exe
C:\Program Files\Microsoft Office\Office\Findfast.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Cynthia Parks\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = http=proxy-server:8080;https=proxy-server:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = ams-server*;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50026
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: (no name) - {30A56549-9D5B-4D34-AFA7-440A7F0538A9} - C:\Program Files\Open Site\opnste.dll
O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\Symantec\SAV8\vptray.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKLM\..\RunOnce: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" "+b1"
O4 - Global Startup: Media Manager Indexer.lnk = C:\Program Files\Common Files\Microsoft Shared\Media Manager\AIRSVCU.EXE
O4 - Global Startup: Introducing Media Manager.lnk = C:\Program Files\Common Files\Microsoft Shared\Media Manager\SPLASHA.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O9 - Extra button: AIM (HKLM)
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtw32.dll
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/31b6de92b8d825eafe20/netzip/RdxIE601.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38107.5200347222
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[Steve]

Lookin' pretty good.

You can just put HJT into "My Documents" or any permanent folder. Just right click on the HijackThis.exe file and send to "My Documents". Drag and drop works good too.

Go to Contol Panel > Add/Remove Programs and uninstall MyWebSearch. Then have HJT fix any of the following that remain:

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50026
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/31b6de9...ip/RdxIE601.cab

Reboot and post one more log, just to make sure everything is gone.

Others may see things I've missed...
;)

[WolfpackRon]

Everything seems to work properly now on both accounts. "Checking" or "fixing" in Hijack This did remove my links to Zone Alarm and my anti virus program. Not a problem though. Thanks for the help. WolfpackRon.


Logfile of HijackThis v1.97.7
Scan saved at 8:12:58 PM, on 5/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZONELABS\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Symantec\SAV8\DefWatch.exe
C:\PROGRA~1\Symantec\SAV8\Rtvscan.exe
C:\PROGRA~1\Symantec\SAV8\vptray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Documents and Settings\Cynthia Parks\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/flash/index.cfm
O4 - HKLM\..\Run: [vptray] C:\Program Files\Symantec\SAV8\vptray.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[classicsoftware]

This looks much better to me. I think you should check to make sure zone alarm and the AV are working. I assume by your post your system is now performing up to par.