tman70

Members
  • Content Count

    277
  • Joined

  • Last visited

Posts posted by tman70

  1. I downloaded IE7 on my son's Compaq Presario and I get this error message:

    (Internet Explorer cannot display the webpage)

    I ran the diagnostic scan and got this:

    (Last diagnostic run time: 03/25/08 19:38:49 HTTP, HTTPS, FTP Diagnostic

    HTTP, HTTPS, FTP connectivity

    info HTTP: Successfully connected to www.microsoft.com.

    info HTTPS: Successfully connected to www.microsoft.com.

    info FTP (Passive): Successfully connected to ftp.microsoft.com. )

    On my computer using same modem and router my IE7 works fine.

    Updated and ran all scans. Still same message.

    I uninstalled IE7 and IE6 works fine. I then reinstalled IE7 and rebooted twice and it still won't show web page.

    I even set the security to medium low in Internet Options and still get error message.

    I went to this web site (http://support.microsoft.com/kb/926431) and tried each of the methods and still get the error message.

    I have been all day on it so what else can I try?

    Thanks

  2. My understanding is logemin works without port forwarding. That adds a layer of security that VNC does not. Since logmein is making all the connections for you, you are very safe(no holes in your router). I suppose the biggest risk would be if logmein its self would be compromised

    This is one of my main concerns. Would I be opening up both of our computers to hackers or other problems?

    Mainly all I'm interested in is updating and running their spyware and virus programs and working on their web site. At Christmas when I was installing XP Home I discovered that Firefox was last updated at .06 instead of .11. They just seem to not want to take the time to keep everything updated.

  3. As I have stated previously, I have just installed XP Home on my daughter-in-laws computer.

    They have a web site they use for their business and it is up to me to maintain it. With both of them working and two small children their time is limited.

    I am out of state and can only get up there about every 4 months and then I spend several hours updating and cleaning out their system.

    They send me pictures to adjust and resize and install on the web site from here.

    We both have XP Home. We both run the same programs. I am on Cable with a router and she is on DSL with a wireless router.

    I know nothing about Remote Access so I have some questions.

    1-Can I access and run her programs from here?

    2-Does anyone need to be there if computer is on so I can access it?

    3-Can I access her photo program to change pictures and install to her folders and then to web site?

    4-What are the pro's and con's to using Remote Access?

    5-Basically is it the same as me being there?

    Sorry if these question's are silly, but just trying to gather information to explain to them.

    As I said they don't have much time and that is all I have.

    Thanks

    to number 5, its dangerous and will leave a big hole in the system open to any attack. if you are already clearing problems off of the computer, it can be compromised and get your system in trouble.

    to fix that I use VPN software like, OpenVPN. many router have it already so it's easy. this will allow you to connect to their network securely, and not to just their computer, but entire network.

    I suggest you use IPsec for encryption protocol, along with a strong password. if you have the option choose something like blowfish instead of DES3 (DES3 encryption can be cracked in under an hour) but its better than nothing, but if you do have to use it, change your key every 30 days.

    if none of this makes sense then ask more questions, any one on the site would be glad to help.

    but if you are going to take on administrating their PC, you need to learn the tools.

    other good choices are VNC, ultra VNC http://www.uvnc.com/ is free and it can use AES encryption..

    they have a good forum, but we could also answer questions.

    also with this you do need to setup port forwarding on the router, but I don't like how longme "get" through the firewall. as I, in practice see this as a security issues, I believe ports should be dedicated to use, This way you can monitor it, and not have a pc broadcast its connections to a server.

    nothing is fool proof, I just don't trust others to keep me safe..

    also longmein states they are HIPAA complient (well they suggests with out saying it), but its right of the line that I would not approve it for corporate use.

    Hmmmmmm, now it doesn't sound as simple as I first thought.

    Thanks for the info.

  4. Can you get access to the ISP that's hosting their website? There are some good FTP programs out there like SmartFTP you could use. You can download and upload the pages as needed and change everything there. Or copy their website files to your PC. Make the changes and then upload them.

    That's what I do. I have my whole site loaded on my PC. I make any or all changes on my PC, and then upload it all at once. and you have no downtime or "Under Construction" pages.

    Wait... Never mind.. I reread your post.. You want to know how to clean up their PC from your house...

    Silly me.. Duh...

    Yes, you are right about keeping their computer clean. Also I want to be able to keep my genealogy files up to date on their computer as a backup to mine.

    The web site is real simple compared to others there in the same business. I believe simple is the best. I must be doing it right because we get a lot of compliments from the guests. I have all the login and passwords and can access it from here. Also when they have pictures to post and I am here I have to wait for them to e-mail me so I can work on them.

    I just sent you a PM so you can see it.

  5. As I have stated previously, I have just installed XP Home on my daughter-in-laws computer.

    They have a web site they use for their business and it is up to me to maintain it. With both of them working and two small children their time is limited.

    I am out of state and can only get up there about every 4 months and then I spend several hours updating and cleaning out their system.

    They send me pictures to adjust and resize and install on the web site from here.

    We both have XP Home. We both run the same programs. I am on Cable with a router and she is on DSL with a wireless router.

    I know nothing about Remote Access so I have some questions.

    1-Can I access and run her programs from here?

    2-Does anyone need to be there if computer is on so I can access it?

    3-Can I access her photo program to change pictures and install to her folders and then to web site?

    4-What are the pro's and con's to using Remote Access?

    5-Basically is it the same as me being there?

    Sorry if these question's are silly, but just trying to gather information to explain to them.

    As I said they don't have much time and that is all I have.

    Thanks

  6. I am not sure about all of this sofware, but I hook up my sister's camera without any software and windows xp will take a couple of seconds and then it finds the device. A Window pops up and says what I would like to do and I pick view files and folders and then just go to the pictures folder and I drag and drop them into another folder or the desktop.

    Thanks everybody!!!

    Just got off the phone with my Daughter-in-law and had her uninstall the Kodak Easy Share from add/remove program. It was a large file. Then I had her search for it using Regseeker. Then she hooked up her camera and the MS Wizard popped up. She can now download pictures from her camera at a later date.

    I then had her run JKDefrag.

    Thanks again for all the replies.

  7. I prefer Microsoft's applications to retrieve the pictures from my camera over the manufacturer's software. There are many reports of Kodak's Easy Share of being problemic.

    I noticed before that kodak was a resource hog in Wme, plus it took 15 or 20 seconds to load every time you wanted to open a picture.

    I'm not familiar with these programs other than using theirs to put pictures in their web site.

    How do you use MS to download pictures from a Kodak easy share camera?

  8. I have got everything running good and have cloned another HD for them for backup.

    They have a Kodak digital camera.

    I had downloaded the Kodak program from their Kodak cd. I had noticed that it did not take over the pics in their MY Pictures folder the way it did in Wme. Pics still use MS to open. I could not check it out as I could not get their camera until this morning.

    I have had to return home today. However, before I left I tried to download some pictures for them from their Kodak camera and could not get them to show in the Kodak program. As I could only spend about 10 minutes trying, I did not get it figured out. It is an easy share camera about two or three years old. Sorry but I do not know the model.

    Would having her uninstalling the program from add/remove and then reinstalling correct the problem or should she look for some other setting?

  9. Start > Run > Type cmd the press the <Enter> key. At the command prompt type userpasswords2 then press the <Enter> key. Select the Users tab in the window that pops up. Uncheck the option Users Must Enter A User Name And Password To Use This Computer. Click OK. Enter the username and password of the account you would like Windows to automatically log into after booting up. Close the window and reboot.

    Thanks TT_75

    Tried that and got this:

    Not Recognized as an internal or external command, operable program or batch file.

    I do not have any password set.

  10. Thanks everyone. There was a pci master scsi card that I had not paid any attention to before. It had never been used so I removed it and that solved that problem.

    I now have another problem as I can not get the files and setting to transfer.

    I open up the wizard and select old computer(E drive) to transfer from.

    I then put files and settings into a new folder called "fast" on the E drive.

    I then reopen the wizard and select new computer to transfer to.

    I choose new folder in E drive called "fast" and let the wizard complete.

    It says all files and setting are transfered, but the C drive is still the same.

    Nothing has been transfered.

    I will keep searching.

  11. Is their an actual scsi pci card installed, or is this onboard? From what I read onboard scsi controllers are very rare. If you just have the card in their and it is not connected to any scsi devices can it be removed? Did you let windows update look for the driver, I am surprised it can find some difficult ones on occasion.

    Thanks everyone. There was a pci master scsi card that I had not paid any attention to before. It had never been used so I removed it and that solved that problem.

    I now have another problem as I can not get the files and setting to transfer.

    I open up the wizard and select old computer(E drive) to transfer from.

    I then put files and settings into a new folder called "fast" on the E drive.

    I then reopen the wizard and select new computer to transfer to.

    I choose new folder in E drive called "fast" and let the wizard complete.

    It says all files and setting are transfered, but the C drive is still the same.

    Nothing has been transfered.

    I will keep searching.

  12. Thats odd. I can't imagine what kind of scsi device that computer would use. Are both the harddrive and cdrom using regular ide cables or scsi cables?

    Hi shanenin,

    The cables are the original cables and are ide.

    Both HD's are Maxtor 30(Orginal) and Maxtor 15.

    I am using the 15 to be sure everything works.

    Here is what the wme hd has for that scsi controller:

    ACARD AEC 6710 DPCI ULTRA SCSI-3 ADAPTER

    c:\windows\system\iosubsys\aec6710D, MPD

    c:\windows\system\vmm32.vxd(ios,vxd)

    Does that help?

  13. I thought I would give my daughter-in-law an early Christmas present and install XP SP2 Home on her XE783 computer that is running WME. I have done every check and it is able to run XP without any problems.

    I have another HD and the new XP Cd.

    I started the install on the new HD and it said it could not install because the bios was not right and to press f7 to continue. After the 3rd try I pressed f7 and xp installed and is running fine as far as I can tell at this time.

    When I checked the device manager it shows the scsi controller with a yellow question mark. When I try to update the driver it says no driver can be found and gives a code 28.

    How can I correct this problem?

    Thanks.

  14. Dear Consumers:

    It has come to our attention that a few copies of the

    WINDOWS Vista West Virginia EDITION may have accidentally been

    shipped outside of the STATE of West Virginia.

    If you have one of these, you may need help understanding

    the commands. The West Virginia EDITION may be recognized by

    the unique opening screen.

    It reads: WINDERS Vista, with a background picture of Willie Nelson

    superimposed on a bottle of Jack Daniels.

    Please also note:

    The Recycle Bin is labeled "Outhouse"

    My Computer is called "This Dern Contraption"

    Dial Up Networking is called "Good Ol' Boys"

    Control Panel is known as "The Dashboard"

    Hard Drive is referred to as "4-Wheel Drive"

    Floppies are "Them little ol' plastic thangs"

    Instead of an error message, "Duct Tape" pops up

    CHANGES IN TERMINOLOGY IN West Virginia EDITION:

    Cancel............stopdat

    Reset.............try'er agin

    Yes...............yep

    No................nope

    Find..............hunt fer it

    Go to.............over yonder

    Back..............back yonder

    Help..............hep me out here

    Stop..............kwitit (WHOA!)

    Start.............crank'er up

    Settings..........settins

    Programs......... stuff at duz stuff

    Documents....... ..stuff ah done did

    Also note that the West Virginia EDITION does not recognize

    capital letters or punctuation marks.

    Some programs that are exclusive to WINDERS Vista:

    Tiperiter.....................a word processing program

    Colerin' Book.................a graphics program

    Cyferin' Mersheen.............calculator

    Outhouse Paper................notepad

    Inner-net.....................Microsoft explorer 7.0

    Pitchers......................a graphics viewer

    We regret any inconvenience it may have caused.

    If you received a copy of the West Virginia EDITION,

    you may return it to Microsoft for a replacement version.

    I hope this helps all y'all!

    Billy Bob Gates

  15. My daughter-in-law has an HP Pavilion xe783 running Wme. (Trying to talk her into getting XP.)

    A few days ago she asked me to install a wireless connection so she could use her work laptop.

    She is on Verizon DSL using a Westell 2200 and her wireless router is a Netgear WGR614 v7.

    I installed a wireless ethernet card.

    Everything installed OK and I set the security mode. She can now connect with her laptop anywhere in the house or yard.

    The problem is when we turn off the computer at night it keeps running even though the screen goes black. It then reboots after 5 minutes and we have to do a hard shutdown.

    It worked normally until I hooked up the wireless.

    Is there a setting I need to set to correct this?

    Thanks.

  16. I just ran across this and downloaded the MaxBlast 5 version.

    I installed it and followed the simple prompts and cloned my HD.

    Unlike XXclone I had used before and had to fine tune the HD afterwards, MaxBlast 5 was an exact copy.

    If you have Maxtor or Seagate HD's and are looking for a cloning program, you will want to try this.

    http://www.theinquirer.net/default.aspx?article=39779

    Thanks. I'm downloading them.

    Are they the same programs? Website is a little confusing. I have a Seagate.

    Joe

    I have Maxtor HD's so that is the one I downloaded.

    Since you have Seagate I would use that one.

    Some one else with more knowledge than me will have to explain the differences between the two.

    Tman70

  17. Good to see the two of you got it. Besides the bad IP redirect I would also suggest getting rid of the Hits2uToolbar. It can contain adware/spyware. I take it the kid is using Traffic Swarm to direct hits to a personal web site/blog.

    Hi TT_75,

    Thanks for the information. I will ask my son about it.

    I think he has a business web site, but I don't ask or pry as it is his affair not mine.

    He was all for taking his computer to a repair shop until I convinced him that you guys here would help solve the problem. There are a lot of good people on this board.

    He was real pleased when he found out the only cost was a few days time.

    Of course my time is expensive as tomorrow he has to help me with some plumbing.

    Him working and me supervising. LOL

    The wife and I are both disabled and the son (man) helps take care of us.

    We could not make it without him.

    So to stay busy I get to keep both computers working.

    Thanks TT_75 we both appreciate the advise.

  18. I would strongly advise you to have someone with training to read your HJT log first before doing anything.

    Here is the link to the HJT thread:

    http://www.besttechie.net/forums/Paypal-Pr...ved-t12185.html

    Here is a condensed version that sari, from the HJT Forums, had me fix with HJT to get rid of the snakeoil.dom certificate.

    I needed to reset my network information, especially my DNS servers.

    This line was redirecting me.

    O17 - HKLM\System\CCS\Services\Tcpip\..\{144F6782-9984-4E25-9848-BC7F1AA97616}: NameServer = 72.21.36.74

    That address appears to go to a company called Layered Tech, in Texas, but it actually resolves to a Brazilian address.

    He had me run HJT again and put check marks at these entries and then click fix.

    O17 - HKLM\System\CCS\Services\Tcpip\..\{144F6782-9984-4E25-9848-BC7F1AA97616}: NameServer = 72.21.36.74

    O17 - HKLM\System\CCS\Services\Tcpip\..\{15CCB216-4184-4A68-B1CD-FCF69BC4CCAE}: NameServer = 72.21.36.74

    O17 - HKLM\System\CCS\Services\Tcpip\..\{3C6FC0D7-5F21-4ACB-8D12-623FC013CF14}: NameServer = 72.21.36.74

    Then I went to Start > Run and typed cmd.

    Typed> ipconfig /flushdns and hit enter.

    I did this for both computers.

    Then I shut off both PCs and then unpluged the cable modem and the router for 1 hr.

    I then rebooted and went to Start > Run and typed cmd.

    Then I typed> ipconfig /renew. I did this for both computers.

    This will get new network addresses.

    The snakeoil certificate was gone and paypal was back to orginal setting and paypal certificate.

    I hope this helps someone else.

  19. tman,

    Sure. I want to clear all the network equipment of any existing IP addresses.

    sari,

    Thank you so much. What a relief.

    That has eliminated the problem.

    Paypal site now works and the certificate is for paypal.

    My son had already changed his name and password thru my computer when this started so I guess he is safe there.

    However he does not remember what he removed with the spyware and virus programs.

    Do I need a special uninstaller for the programs you had me download to his desktop

    dss.exe-smitfraudfix-GMER-combofix

    or do I just delete them and do search in the registry for left overs?

    Now I am going to start checking on removing a lot of compaq programs he doesn't need and see if I can clean his computer a little better.

    Thanks again for the time and effort you put into this.

    Tman70 :thumbsup: :thumbsup: :thumbsup: :thumbsup: :thumbsup: :thumbsup:

    Here is the HJT log

    Logfile of HijackThis v1.99.1

    Scan saved at 4:58:02 PM, on 7/19/2007

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    C:\Program Files\Alwil Software\Avast4\ashServ.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\LEXBCES.EXE

    C:\WINDOWS\StartupMonitor.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\system32\LEXPPS.EXE

    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    C:\Program Files\WordWeb\wweb32.exe

    C:\Program Files\a-squared Free\a2service.exe

    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    C:\WINDOWS\System32\nvsvc32.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trafficswarm.com/cgi-bin/swarm....02de7a766c9c63d

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll

    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

    O2 - BHO: TBSB06220 - {A519CE41-E431-407D-8A79-B8FA3FBEBD0A} - C:\PROGRA~1\HITS2U~1\HITS2U~1.DLL

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll

    O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe

    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    O4 - Startup: WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe

    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm

    O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm

    O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

    O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab

    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab

    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll

    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll

    O21 - SSODL: eitheror - {2016a466-91a2-43c6-97d8-2fd380f065ef} - (no file)

    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe