Omg i hate Elitebar :(

[DarkSpidey]

i understand go to safe mode.. but how could i switch .exe to .old? do i just simply rename it?

my log:

C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\cisvc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\tcpsvcs.exe
C:\WINNT\System32\snmp.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\system32\Ati2evxx.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\WINNT\system32\defragfatx.exe
C:\WINNT\system32\mswes1.exe
C:\WINNT\explorer.exe
F:\Program Files\C-Media\WIN_ME\W2KSetup.dat
C:\WINNT\system32\cidaemon.exe
F:\Program Files 2\Cursor XP\CursorXP.exe
C:\WINNT\system32\msiexec.exe
F:\Program Files 2\Mozilla Firefox\firefox.exe
F:\Program Files 2\WinRAR\WinRAR.exe
C:\DOCUME~1\Calvin\LOCALS~1\Temp\Rar$EX00.625\Hija ckThis.exe

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINNT\system32\defragfatx.exe
O4 - HKLM\..\Run: [Mcafee Auto Protect] mswes1.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Replace C-Media Mixer] C:\WINNT\W2KSetup.exe -ReplaceMixer
O4 - HKLM\..\Run: [kalvsys] c:\winnt\system32\kalvvlo32.exe
O4 - HKLM\..\RunServices: [Update Microsoft System] updsrv.exe
O4 - HKLM\..\RunServices: [Mcafee Auto Protect] mswes1.exe
O4 - HKCU\..\Run: [Update Microsoft System] updsrv.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Mcafee Auto Protect] mswes1.exe
O4 - HKCU\..\Run: [CursorXP] F:\Program Files 2\Cursor XP\CursorXP.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - C:\WINNT\system32\ati2sgag.exe
O23 - Service: Logical Disk Manager Administrative Service - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe


my modem is also constantly sending packets out for some reason, and my start bar in non-safe mode, screws up when i search. Also my program files always pop up when i turn on my comp, and then it crashes explorer.

[nightowl]

O4 - HKLM\..\Run: [kalvsys] c:\winnt\system32\kalvvlo32.exe


This is the one you need to rename, Heres how:

Go to Safe Mode (F8 on startup)
You need to do a search on your computer and look for any files where the first 4 letters begin with KALV

kalvvlo32.exe

may be several on your computer.

When you find these files you need to rename them. You need to remove the exe and replace it with the name old so the file looks like this

kalvvlo32.old

(The Files may not have vlo They can be any 3 letters but the first 4 letters are always KALV)

If it works, you can go back to safe mode, and search "*.OLD" And delete those files. Empty Recycle Bin. Reboot and post a new log..........Jim