new items on startup

I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the startup
section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda



--
Wanda M

Start with a full scan of the drive with an up to date anti virus program
and follow up with a hunt for spyware.

Spyware/scumware/adware are causing numerous system problems. I recommend
you download and use the following programs and consider removing everything
these programs identify. Be aware that there are frequent updates to these
programs and you need to check for them before every use.

AdAwa http://www.lavasoftusa.com/software/adaware/

CWShredder: http://www.spywareinfo.com/~merijn/cwschronicles.html (download
link near the bottom)

Spybot: http://www.safer-networking.org/


--
Regards

Ron Badour, MS MVP for W98
Tips: http://home.satx.rr.com/badour
Knowledge Base Info:
http://support.microsoft.com/default.aspx?pr=kbinfo

"W J Malsbury" wrote in message
...
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the startup
section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda



--
Wanda M

Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files
(http://service1.symantec.com/SUPPORT...02092715262339)
and then run a full system scan in Safe Mode
(http://service1.symantec.com/SUPPORT...01052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,
http://securityresponse.symantec.com...favorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup More options Delete all but the most
recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

W J Malsbury wrote:
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the startup
section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda

Bad news for you, I fear:

http://securityresponse.symantec.com...gaobot.bc.html

--
Richard G. Harper [MVP Win9x]
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


"W J Malsbury" wrote in message
...
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the startup
section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda



--
Wanda M

-----Original Message-----
I went away for the weekend and now 'mysteriously' have
new items on
startup - ie. no one says they did anything to cause
it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect
them in the startup
section a
alchem

I have run Spy-Bot and a virus-scan but this problem
still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda



--
Wanda M

ALCHEM.exe, is a trojan virus!! Get a good virus program
and run it!!

Thanks for the instructions. This got all but two of the items. So now I
have posted to spywareinfo to see if they can help me out. The good thing
is that none of this appears to be virus-driven. It really does pay to keep
your av software updated -- paranoia is more like it, in our household.

It is so strange, though. I sure wish we could figure out how we got the
stuff. We've had nothing weird for a couple of years and now wham!!

Wanda
not as frustrated in Alberta


"PA Bear" wrote in message
...
Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before each
and every use, even "right out of the box". But even they can't catch
everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the preferred
tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files

(http://service1.symantec.com/SUPPORT...02092715262339)
and then run a full system scan in Safe Mode

(http://service1.symantec.com/SUPPORT...01052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,

http://securityresponse.symantec.com...favorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup More options Delete all but the most
recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

W J Malsbury wrote:
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the
startup
section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda

Did you miss?...

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
~PA Bear

W J Malsbury wrote:
Thanks for the instructions. This got all but two of the items. So now I
have posted to spywareinfo to see if they can help me out. The good thing
is that none of this appears to be virus-driven. It really does pay to
keep your av software updated -- paranoia is more like it, in our
household.

It is so strange, though. I sure wish we could figure out how we got the
stuff. We've had nothing weird for a couple of years and now wham!!

Wanda
not as frustrated in Alberta


"PA Bear" wrote in message
...
Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and remove any
hijackware/spyware. **Post your files to http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files

(http://service1.symantec.com/SUPPORT...02092715262339)
and then run a full system scan in Safe Mode

(http://service1.symantec.com/SUPPORT...01052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV maker's
online support pages (e.g.,

http://securityresponse.symantec.com...favorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup More options Delete all but the most
recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

W J Malsbury wrote:
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the
startup section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda

Didn't miss this, I just hadn't got to that section yet. Wanted to let you
know that I had had some success with the removal process.

Still don't have all the problems solved, but your suggestions did remove a
number of spywares, etc. What I have found is that my initial problem
started on 7/8/04 when msbb.exe got onto the system. What has been
happening is that, at exactly the same time, these other nasties have got
onto our system. Needless to say, we will not be signing onto the net,
during that timeframe, until we get this all cleaned up.

Thanks for your instructions!

Wanda


"PA Bear" wrote in message
...
Did you miss?...

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
~PA Bear

W J Malsbury wrote:
Thanks for the instructions. This got all but two of the items. So now
I
have posted to spywareinfo to see if they can help me out. The good
thing
is that none of this appears to be virus-driven. It really does pay to
keep your av software updated -- paranoia is more like it, in our
household.

It is so strange, though. I sure wish we could figure out how we got
the
stuff. We've had nothing weird for a couple of years and now wham!!

Wanda
not as frustrated in Alberta


"PA Bear" wrote in message
...
Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and remove
any
hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/
or http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files


(http://service1.symantec.com/SUPPORT...02092715262339)
and then run a full system scan in Safe Mode


(http://service1.symantec.com/SUPPORT...01052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV
maker's
online support pages (e.g.,


http://securityresponse.symantec.com...favorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup More options Delete all but the
most
recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

W J Malsbury wrote:
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the
startup section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is
occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda

msbb.exe = nCASE hijacker
http://www.doxdesk.com/parasite/nCase.html

I suggest you post your HijackThis log to one of the appropriate forums.
--
~PA Bear

W J Malsbury wrote:
Didn't miss this, I just hadn't got to that section yet. Wanted to let
you know that I had had some success with the removal process.

Still don't have all the problems solved, but your suggestions did remove
a number of spywares, etc. What I have found is that my initial problem
started on 7/8/04 when msbb.exe got onto the system. What has been
happening is that, at exactly the same time, these other nasties have got
onto our system. Needless to say, we will not be signing onto the net,
during that timeframe, until we get this all cleaned up.

Thanks for your instructions!

Wanda


"PA Bear" wrote in message
...
Did you miss?...

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
~PA Bear

W J Malsbury wrote:
Thanks for the instructions. This got all but two of the items. So
now I have posted to spywareinfo to see if they can help me out. The
good thing is that none of this appears to be virus-driven. It really
does pay to keep your av software updated -- paranoia is more like it,
in our household.

It is so strange, though. I sure wish we could figure out how we got
the stuff. We've had nothing weird for a couple of years and now wham!!

Wanda
not as frustrated in Alberta


"PA Bear" wrote in message
...
Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and remove
any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/); then...

2. Update your virus definitions, enable Show Hidden Files


(http://service1.symantec.com/SUPPORT...02092715262339)
and then run a full system scan in Safe Mode


(http://service1.symantec.com/SUPPORT...01052409420406)
with nothing else running in background. Note the files identified and
removed then find the corresponding page for the file at your AV
maker's online support pages (e.g.,


http://securityresponse.symantec.com...favorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup More options Delete all but the
most recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

W J Malsbury wrote:
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the
startup section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is
occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda

Yes! They are finally gone. The forum helped. Thanks for all your
suggestions.

The only thing I haven't been able to do is the NAV virus scan in safe mode.
It gives an error message and the NAV support forms solution doesn't work.

Wanda

"PA Bear" wrote in message
...
msbb.exe = nCASE hijacker
http://www.doxdesk.com/parasite/nCase.html

I suggest you post your HijackThis log to one of the appropriate forums.
--
~PA Bear

W J Malsbury wrote:
Didn't miss this, I just hadn't got to that section yet. Wanted to let
you know that I had had some success with the removal process.

Still don't have all the problems solved, but your suggestions did
remove
a number of spywares, etc. What I have found is that my initial problem
started on 7/8/04 when msbb.exe got onto the system. What has been
happening is that, at exactly the same time, these other nasties have
got
onto our system. Needless to say, we will not be signing onto the net,
during that timeframe, until we get this all cleaned up.

Thanks for your instructions!

Wanda


"PA Bear" wrote in message
...
Did you miss?...

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
~PA Bear

W J Malsbury wrote:
Thanks for the instructions. This got all but two of the items. So
now I have posted to spywareinfo to see if they can help me out. The
good thing is that none of this appears to be virus-driven. It really
does pay to keep your av software updated -- paranoia is more like it,
in our household.

It is so strange, though. I sure wish we could figure out how we got
the stuff. We've had nothing weird for a couple of years and now
wham!!

Wanda
not as frustrated in Alberta


"PA Bear" wrote in message
...
Check your system for "hijackware":

Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm

CoolWebSearch Chronicles
http://www.spywareinfo.com/~merijn/cwschronicles.html

Run these tools in the following order with nothing else running in
background:

1. CWShredder (fix all found)

2. Ad-Aware (fix all found)

3. Spybot (RTFM but generally fix everything in red)

Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
each and every use, even "right out of the box". But even they can't
catch everything, 24/7. When all else fails, HijackThis
(http://www.spywareinfo.com/~merijn/files/HijackThis.exe) is the
preferred tool to use. It will help you to both identify and remove
any hijackware/spyware. **Post your files to
http://forums.spywareinfo.com/ or
http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
here.**

[Alternate download pages for many of the above tools may be found at
http://aumha.org/a/parasite.htm.]

Also:

1. Download and run Stinger (http://vil.nai.com/vil/stinger/);
then...

2. Update your virus definitions, enable Show Hidden Files



(http://service1.symantec.com/SUPPORT...02092715262339)
and then run a full system scan in Safe Mode



(http://service1.symantec.com/SUPPORT...01052409420406)
with nothing else running in background. Note the files identified
and
removed then find the corresponding page for the file at your AV
maker's online support pages (e.g.,



http://securityresponse.symantec.com...favorites.html)
and follow all Removal steps.

WinXP Only (WinME similar): If this scan finds anything, create a new
Restore Point then Disk Cleanup More options Delete all but the
most recent Restore Point.

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957

--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

Protect Your PC
http://www.microsoft.com/security/protect

W J Malsbury wrote:
I went away for the weekend and now 'mysteriously' have new items on
startup - ie. no one says they did anything to cause it
I am on Windows 98.

In the startup tab the new entries a

Windupdates calling windupdates.exe
timjxxz calling nqcoqhpc.exe
amldpvzfxditm calling nqcoqhpc.exe
xijsj calling xijsj.exe
alchem calling alchem.exe
xqslsc calling nqcoqhpc.exe

When I
ctrl, alt, delete

the new items that list a

nqcoqhpc
winupdt
winka
alchem

The only items that stay off the list when I unselect them in the
startup section a
alchem

I have run Spy-Bot and a virus-scan but this problem still is
occurring.

Can anyone help?

Thanks.

frustrated in Alberta,
Wanda