Missing File?

[Shack]

I'm not sure why, but in the last couple of days I've been getting a message at startup saying, "Windows Cannot Find File acsmillm".

I click OK on the message window, startup then continues normally and everything seems to work ok after that. I've done a couple of web seaches, incuding this site and I can't find any reference to this file anywhere.

[Chuck]

On Wed, 18 Feb 2004 10:41:07 -0800, "Shack"
> wrote:

>I'm not sure why, but in the last couple of days I've been getting a message at startup saying, "Windows Cannot Find File acsmillm".
>
>I click OK on the message window, startup then continues normally and everything seems to work ok after that. I've done a couple of web seaches, incuding this site and I can't find any reference to this file anywhere.

You're right, no discussion about "acsmillm" on the web. So probably
not known spyware, and Spybot would be useless. But HijackThis
<http://mjc1.com/mirror/hjt/> might give a clue. Download and run it,
Scan, ONLY Save Log, Post the log here.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

[nick murphy]

It is likely something in your "Startup" folder or
something in the registry
in "HKLM\Software\microsoft\windows\currentversion\run".
If you find a value in that key for acsmillm it is
probably safe to delete it. Just to be sure, back up the
key before deleting. Something put that value into the
registry, could be a legit application that you installed
or possibly a malicious file.


>-----Original Message-----
>On Wed, 18 Feb 2004 10:41:07 -0800, "Shack"
> wrote:
>
>>I'm not sure why, but in the last couple of days I've
been getting a message at startup saying, "Windows Cannot
Find File acsmillm".
>>
>>I click OK on the message window, startup then
continues normally and everything seems to work ok after
that. I've done a couple of web seaches, incuding this
site and I can't find any reference to this file anywhere.
>
>You're right, no discussion about "acsmillm" on the
web. So probably
>not known spyware, and Spybot would be useless. But
HijackThis
><http://mjc1.com/mirror/hjt/> might give a clue.
Download and run it,
>Scan, ONLY Save Log, Post the log here.
>
>Cheers,
>Chuck
>Paranoia comes from experience - and is not necessarily
a bad thing.
>.
>

[Chuck]

On Wed, 18 Feb 2004 18:21:06 -0800, "Shack"
> wrote:

>Ok heres what Hijack This gave me. I see acsmillm listed twice about a third of the way down as FO and F2 with associations with Explorer.exe
>
>Logfile of HijackThis v1.97.7
>Scan saved at 6:06:25 PM, on 2/18/2004
>Platform: Windows XP SP1 (WinNT 5.01.2600)
>MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/qry/myhome
>R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
>F0 - system.ini: Shell=Explorer.exe acsmillm
>F2 - REG:system.ini: Shell=Explorer.exe acsmillm

Kewl. Rerun HJT, first check Config make sure "Make backups before
fixing items" is checked, then select the F0 and F2 items only, and
hit "Fix checked". And Reboot.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

[Chuck]

On Wed, 18 Feb 2004 18:21:06 -0800, "Shack"
> wrote:

>Ok heres what Hijack This gave me. I see acsmillm listed twice about a third of the way down as FO and F2 with associations with Explorer.exe
>
>Logfile of HijackThis v1.97.7
>Scan saved at 6:06:25 PM, on 2/18/2004
>Platform: Windows XP SP1 (WinNT 5.01.2600)
>MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/qry/myhome
>R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
>F0 - system.ini: Shell=Explorer.exe acsmillm
>F2 - REG:system.ini: Shell=Explorer.exe acsmillm

Kewl. Rerun HJT, first check Config make sure "Make backups before
fixing items" is checked, then select the F0 and F2 items only, and
hit "Fix checked". And Reboot.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

[Chuck]

On Wed, 18 Feb 2004 18:21:06 -0800, "Shack"
> wrote:

>Ok heres what Hijack This gave me. I see acsmillm listed twice about a third of the way down as FO and F2 with associations with Explorer.exe
>
>Logfile of HijackThis v1.97.7
>Scan saved at 6:06:25 PM, on 2/18/2004
>Platform: Windows XP SP1 (WinNT 5.01.2600)
>MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

>R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/qry/myhome
>R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
>F0 - system.ini: Shell=Explorer.exe acsmillm
>F2 - REG:system.ini: Shell=Explorer.exe acsmillm

Kewl. Rerun HJT, first check Config make sure "Make backups before
fixing items" is checked, then select the F0 and F2 items only, and
hit "Fix checked". And Reboot.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

[Chuck]

On Thu, 19 Feb 2004 10:21:07 -0800, "Shack"
> wrote:

>That did it.
>
>Thanks for the help Chuck.

Excellent. You're welcome.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.