[hopthwoks]

How about I just rename this computer problem child.
today I retried bitdefender it loder the scanner ran for 2-1/2 hours to 95% then stoped and rebooted my computer . I never sall any file .
Tried that drweb-cureit.exe that took about an hour to load and when I try to open it I ger the following.

winRAR self-extracting achive
Extracting be-cureit.dwl Can not open be-cureit.dwl
Extracting bg-cureit.dwl Can not open bg-cureit.dwl
an that is the same for all of the following
cn-cureit.dwl
cs-cureit.dwl
de-cureit.dwl
dwebio16.dll
dwebio32.dll
el-cureit.dwl
eo-cureit.dwl
et-cureit.dwl
fr-cureit.dwl
hu-cureit.dwl
it-cureit.dwl
ja-cureit.dwl
ko-cureit.dwl
lt-cureit.dwl
lv-cureit.dwl
nl-cureit.dwl
no-cureit.dwl
ru-drwedgui.chm
setup.dll
setup.key
sk-cureit.dwl
tr-cureit.dwl
tr-cureit.500
uk-cureit.dwl
zh-cureit.dwl
start.dat
start.exe
cfo41e6f
435ba048
4809d165
74408249
just to name some. this program will not open

[evilfantasy]

Try this.

Scan with Panda ActiveScan 2.0

This scanner requires Internet Explorer

• Once you are on the Panda site click the Scan your PC now button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Select the appropriate Yes or No to receiving marketing information
• Click the Free Online Scan button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Post the contents of the ActiveScan report in your next reply.

[hopthwoks]

well I will try it but I can tell you now that it will not work . For I tried it when I had panda and at that time it would not work.
I am about read to remove everything and run a wipe drive on it then reset it back to what came from the factory.
Before I try Panda can I remove the following program LopSD, SuperAnti-Spyware and OtMovelt3

[evilfantasy]

Keep Superantispyware, it's free.

Unistall LOP S&D

Click START then RUN
Now type C:\Lop SD\Uninstal.exe in the runbox.

Then click OK.

----------

Download OTCleanIt.exe and save it to your Desktop.

• Double-click OTCleanIt.exe.
• Click the CleanUp! button.
• Select Yes when the "Begin cleanup Process?" prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not delete it yourself.

[hopthwoks]

LopSD would not delete So I used file ASSASSIN
Something about file could not be found,

[hopthwoks]

Tried Panda Active Scan2 and when it comes to the updating I let it run for 1-1/2 with no % shown.
Same problem I had withit before .It would never update.

[hopthwoks]

Found an online trogen scanner by Windows and was able to get it to work here is the file.
a-squared Web Malware Scanner v. 4.0
(C) 2003-2009 Emsi Software GmbH - www.emsisoft.com
ID Object
0 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@www.computer-juice[2].txt detected: Trace.TrackingCookie.www.com!A2
1 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@computer-juice[2].txt detected: Trace.TrackingCookie.com!A2
2 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@tribalfusion[2].txt detected: Trace.TrackingCookie.tribalfusion!A2
3 Value: HKEY_CURRENT_USER\Software\PrivacyControl --> Start detected: Trace.Registry.PrivacyControl!A2
4 Key: HKEY_CURRENT_USER\software\kazaa detected: Trace.Registry.KaZaA!A2
5 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> scan_minute detected: Trace.Registry.PrivacyControl!A2
6 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@media6degrees[2].txt detected: Trace.TrackingCookie.media!A2
7 D:\i386\APPS\App00577\comps\toolbar\toolbr.exe detected: Adware.Win32.SearchIt.t!A2
8 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> scan_day detected: Trace.Registry.PrivacyControl!A2
9 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> scan_hour detected: Trace.Registry.PrivacyControl!A2
10 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@mediaplex[1].txt detected: Trace.TrackingCookie.mediaplex!A2
11 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> update_option detected: Trace.Registry.PrivacyControl!A2
12 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> general_autostart detected: Trace.Registry.PrivacyControl!A2
13 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@advertising[1].txt detected: Trace.TrackingCookie.advertising!A2
14 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@doubleclick[2].txt detected: Trace.TrackingCookie.doubleclick!A2
15 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@trafficmp[1].txt detected: Trace.TrackingCookie.trafficmp!A2
16 C:\Documents and Settings\Owner.YOUR-DC0C6E8137\Cookies\owner@atdmt[2].txt detected: Trace.TrackingCookie.atdmt!A2
17 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> log_option detected: Trace.Registry.PrivacyControl!A2
18 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> general_browserwarning detected: Trace.Registry.PrivacyControl!A2
19 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> scan_ampm detected: Trace.Registry.PrivacyControl!A2
20 Value: HKEY_CURRENT_USER\Software\PrivacyControl\PrivacyC ontrol\PrivacyControl --> scan_schedule detected: Trace.Registry.PrivacyControl!A2

[evilfantasy]

How is the computer running now?

[hopthwoks]

About the same.
I also ran ESET scan and that deleted 12 more items. Could not find a way to save report.
But maybe this will explane some thing found it on desk top don"t remember placing it there.
#
# An unexpected error has been detected by Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6d0aeb44, pid=3592, tid=1060
#
# Java VM: Java HotSpot(TM) Client VM (11.2-b01 mixed mode, sharing windows-x86)
# Problematic frame:
# C [awt.dll+0xaeb44]
#
# If you would like to submit a bug report, please visit:
# http://java.sun.com/webapps/bugreport/crash.jsp
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#
--------------- T H R E A D ---------------
Current thread (0x03119000): JavaThread "AWT-Windows" daemon [_thread_in_native, id=1060, stack(0x03400000,0x03450000)]
siginfo: ExceptionCode=0xc0000005, reading address 0x00000000
Registers:
EAX=0x00000000, EBX=0x0314c790, ECX=0x00000000, EDX=0x00000037
ESP=0x0344f5d8, EBP=0x0344f718, ESI=0x02a75980, EDI=0x80004005
EIP=0x6d0aeb44, EFLAGS=0x00010246
Top of Stack: (sp=0x0344f5d8)
0x0344f5d8: 0314c78c 6d0b304d 00009824 03119114
0x0344f5e8: 00000001 00000001 00000001 00000000
0x0344f5f8: 03140f60 0344f5c8 00000000 03119114
0x0344f608: 03140898 7e418830 00000000 7e41882a
0x0344f618: 7e42a013 00000000 6d06d870 00020944
0x0344f628: 22eb1088 22eb1080 0344f648 0344f648
0x0344f638: 22eb5a60 00000003 22eb1088 0344f680
0x0344f648: 0344f698 00a945f9 0344f680 22eb1080
Instructions: (pc=0x6d0aeb44)
0x6d0aeb34: 4e 04 85 c9 74 07 6a 00 e8 1f 79 00 00 8b 46 28
0x6d0aeb44: 8b 08 6a 00 68 ae 00 00 00 50 ff 91 e4 00 00 00

Stack: [0x03400000,0x03450000], sp=0x0344f5d8, free space=317k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [awt.dll+0xaeb44]
C [awt.dll+0x9c60c]
C [USER32.dll+0x8734]
C [USER32.dll+0x8816]
C [USER32.dll+0x18ea0]
C [USER32.dll+0x18eec]
C [ntdll.dll+0xe453]
C [USER32.dll+0x9402]
Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.awt.windows.WToolkit.eventLoop()V+0
j sun.awt.windows.WToolkit.run()V+69
j java.lang.Thread.run()V+11
v ~StubRoutines::call_stub
--------------- P R O C E S S ---------------
Java Threads: ( => current thread )
0x02b01c00 JavaThread "Thread-18" [_thread_in_native, id=3716, stack(0x03060000,0x030b0000)]
0x031d5800 JavaThread "TimerQueue" daemon [_thread_blocked, id=3536, stack(0x03ba0000,0x03bf0000)]
0x031f9400 JavaThread "AWT-EventQueue-1" [_thread_blocked, id=488, stack(0x04580000,0x045d0000)]
0x03194c00 JavaThread "D3D Screen Updater" daemon [_thread_blocked, id=3584, stack(0x03c00000,0x03c50000)]
0x02af1400 JavaThread "thread applet-com.kaspersky.kosp.ReportApplet.class-3" [_thread_blocked, id=3756, stack(0x03b10000,0x03b60000)]
0x02a86800 JavaThread "thread applet-com.kaspersky.kosp.MainApplet.class-2" [_thread_blocked, id=2592, stack(0x03930000,0x03980000)]
0x0314a000 JavaThread "Applet 3 LiveConnect Worker Thread" [_thread_blocked, id=2532, stack(0x03ac0000,0x03b10000)]
0x03165400 JavaThread "AWT-EventQueue-3" [_thread_blocked, id=3128, stack(0x039d0000,0x03a20000)]
0x03157800 JavaThread "Applet 2 LiveConnect Worker Thread" [_thread_blocked, id=2548, stack(0x03980000,0x039d0000)]
0x0313b400 JavaThread "Browser Side Object Cleanup Thread" [_thread_blocked, id=2944, stack(0x038e0000,0x03930000)]
0x03136800 JavaThread "Windows Tray Icon Thread" [_thread_in_native, id=536, stack(0x03710000,0x03760000)]
0x03134800 JavaThread "CacheCleanUpThread" daemon [_thread_blocked, id=2440, stack(0x036c0000,0x03710000)]
0x03128000 JavaThread "CacheMemoryCleanUpThread" daemon [_thread_blocked, id=1848, stack(0x03670000,0x036c0000)]
0x02b3e000 JavaThread "Java Plug-In Heartbeat Thread" [_thread_blocked, id=3360, stack(0x03620000,0x03670000)]
0x0311bc00 JavaThread "AWT-EventQueue-0" [_thread_in_native, id=2428, stack(0x035c0000,0x03610000)]
=>0x03119000 JavaThread "AWT-Windows" daemon [_thread_in_native, id=1060, stack(0x03400000,0x03450000)]
0x03117800 JavaThread "AWT-Shutdown" [_thread_blocked, id=4064, stack(0x033b0000,0x03400000)]
0x03113000 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=2072, stack(0x03360000,0x033b0000)]
0x02b4e800 JavaThread "Java Plug-In Pipe Worker Thread (Client-Side)" daemon [_thread_in_native, id=2252, stack(0x030b0000,0x03100000)]
0x02b48400 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3816, stack(0x02fd0000,0x03020000)]
0x02ad2400 JavaThread "Timer-0" [_thread_blocked, id=612, stack(0x02f80000,0x02fd0000)]
0x02a81800 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3700, stack(0x02d30000,0x02d80000)]
0x02a7c400 JavaThread "CompilerThread0" daemon [_thread_blocked, id=2972, stack(0x02ce0000,0x02d30000)]
0x02a79c00 JavaThread "Attach Listener" daemon [_thread_blocked, id=2964, stack(0x02c90000,0x02ce0000)]
0x02a78800 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=968, stack(0x02c40000,0x02c90000)]
0x02a70800 JavaThread "Finalizer" daemon [_thread_blocked, id=2980, stack(0x02bf0000,0x02c40000)]
0x02a6f000 JavaThread "Reference Handler" daemon [_thread_blocked, id=2204, stack(0x02ba0000,0x02bf0000)]
0x002b6800 JavaThread "main" [_thread_blocked, id=3724, stack(0x008c0000,0x00910000)]
Other Threads:
0x02a6d800 VMThread [stack: 0x02b50000,0x02ba0000] [id=2276]
0x02a8b800 WatcherThread [stack: 0x02d80000,0x02dd0000] [id=3916]
VM state:not at safepoint (normal execution)
VM Mutex/Monitor currently owned by a thread: None
Heap
def new generation total 960K, used 160K [0x22990000, 0x22a90000, 0x22e70000)
eden space 896K, 15% used [0x22990000, 0x229b35d0, 0x22a70000)
from space 64K, 30% used [0x22a70000, 0x22a74e18, 0x22a80000)
to space 64K, 0% used [0x22a80000, 0x22a80000, 0x22a90000)
tenured generation total 5788K, used 4746K [0x22e70000, 0x23417000, 0x26990000)
the space 5788K, 82% used [0x22e70000, 0x23312a90, 0x23312c00, 0x23417000)
compacting perm gen total 12288K, used 4505K [0x26990000, 0x27590000, 0x2a990000)
the space 12288K, 36% used [0x26990000, 0x26df6600, 0x26df6600, 0x27590000)
ro space 8192K, 63% used [0x2a990000, 0x2aea7e48, 0x2aea8000, 0x2b190000)
rw space 12288K, 53% used [0x2b190000, 0x2b7fcb38, 0x2b7fcc00, 0x2bd90000)
Dynamic libraries:
0x00400000 - 0x00424000 C:\Program Files\Java\jre6\bin\java.exe
0x7c900000 - 0x7c9af000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c8f6000 C:\WINDOWS\system32\kernel32.dll
0x77dd0000 - 0x77e6b000 C:\WINDOWS\system32\ADVAPI32.dll
0x77e70000 - 0x77f02000 C:\WINDOWS\system32\RPCRT4.dll
0x77fe0000 - 0x77ff1000 C:\WINDOWS\system32\Secur32.dll
0x7c340000 - 0x7c396000 C:\Program Files\Java\jre6\bin\msvcr71.dll
0x6d800000 - 0x6da56000 C:\Program Files\Java\jre6\bin\client\jvm.dll
0x7e410000 - 0x7e4a1000 C:\WINDOWS\system32\USER32.dll
0x77f10000 - 0x77f59000 C:\WINDOWS\system32\GDI32.dll
0x76b40000 - 0x76b6d000 C:\WINDOWS\system32\WINMM.dll
0x76390000 - 0x763ad000 C:\WINDOWS\system32\IMM32.DLL
0x6d290000 - 0x6d298000 C:\Program Files\Java\jre6\bin\hpi.dll
0x76bf0000 - 0x76bfb000 C:\WINDOWS\system32\PSAPI.DLL
0x6d7b0000 - 0x6d7bc000 C:\Program Files\Java\jre6\bin\verify.dll
0x6d330000 - 0x6d34f000 C:\Program Files\Java\jre6\bin\java.dll
0x6d7f0000 - 0x6d7ff000 C:\Program Files\Java\jre6\bin\zip.dll
0x6d430000 - 0x6d436000 C:\Program Files\Java\jre6\bin\jp2native.dll
0x6d1d0000 - 0x6d1e3000 C:\Program Files\Java\jre6\bin\deploy.dll
0x77a80000 - 0x77b15000 C:\WINDOWS\system32\CRYPT32.dll
0x77b20000 - 0x77b32000 C:\WINDOWS\system32\MSASN1.dll
0x77c10000 - 0x77c68000 C:\WINDOWS\system32\msvcrt.dll
0x7c9c0000 - 0x7d1d7000 C:\WINDOWS\system32\SHELL32.dll
0x77f60000 - 0x77fd6000 C:\WINDOWS\system32\SHLWAPI.dll
0x774e0000 - 0x7761d000 C:\WINDOWS\system32\ole32.dll
0x77120000 - 0x771ab000 C:\WINDOWS\system32\OLEAUT32.dll
0x63000000 - 0x630e5000 C:\WINDOWS\system32\WININET.dll
0x02dd0000 - 0x02dd9000 C:\WINDOWS\system32\Normaliz.dll
0x1a400000 - 0x1a52b000 C:\WINDOWS\system32\urlmon.dll
0x5dca0000 - 0x5de85000 C:\WINDOWS\system32\iertutil.dll
0x773d0000 - 0x774d3000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
0x6d6b0000 - 0x6d6f2000 C:\Program Files\Java\jre6\bin\regutils.dll
0x77c00000 - 0x77c08000 C:\WINDOWS\system32\VERSION.dll
0x7d1e0000 - 0x7d49c000 C:\WINDOWS\system32\msi.dll
0x6d610000 - 0x6d623000 C:\Program Files\Java\jre6\bin\net.dll
0x71ab0000 - 0x71ac7000 C:\WINDOWS\system32\WS2_32.dll
0x71aa0000 - 0x71aa8000 C:\WINDOWS\system32\WS2HELP.dll
0x6d630000 - 0x6d639000 C:\Program Files\Java\jre6\bin\nio.dll
0x6d000000 - 0x6d14a000 C:\Program Files\Java\jre6\bin\awt.dll
0x73000000 - 0x73026000 C:\WINDOWS\system32\WINSPOOL.DRV
0x5ad70000 - 0x5ada8000 C:\WINDOWS\system32\uxtheme.dll
0x74720000 - 0x7476c000 C:\WINDOWS\system32\MSCTF.dll
0x10000000 - 0x10178000 C:\WINDOWS\system32\nview.dll
0x77690000 - 0x776b1000 C:\WINDOWS\system32\NTMARTA.DLL
0x71bf0000 - 0x71c03000 C:\WINDOWS\system32\SAMLIB.dll
0x76f60000 - 0x76f8c000 C:\WINDOWS\system32\WLDAP32.dll
0x03560000 - 0x03567000 C:\Program Files\Common Files\AOL\ACS\WLHook.dll
0x755c0000 - 0x755ee000 C:\WINDOWS\system32\msctfime.ime
0x6d230000 - 0x6d284000 C:\Program Files\Java\jre6\bin\fontmanager.dll
0x4fdd0000 - 0x4ff76000 C:\WINDOWS\system32\d3d9.dll
0x03570000 - 0x03576000 C:\WINDOWS\system32\d3d8thk.dll
0x71a50000 - 0x71a8f000 C:\WINDOWS\System32\mswsock.dll
0x76f20000 - 0x76f47000 C:\WINDOWS\system32\DNSAPI.dll
0x76d60000 - 0x76d79000 C:\WINDOWS\system32\iphlpapi.dll
0x76fb0000 - 0x76fb8000 C:\WINDOWS\System32\winrnr.dll
0x68000000 - 0x68036000 C:\WINDOWS\system32\rsaenh.dll
0x662b0000 - 0x66308000 C:\WINDOWS\system32\hnetcfg.dll
0x71a90000 - 0x71a98000 C:\WINDOWS\System32\wshtcpip.dll
0x76fc0000 - 0x76fc6000 C:\WINDOWS\system32\rasadhlp.dll
0x6d1a0000 - 0x6d1c3000 C:\Program Files\Java\jre6\bin\dcpr.dll
0x6d790000 - 0x6d798000 C:\Program Files\Java\jre6\bin\sunmscapi.dll
0x67f00000 - 0x67f06000 C:\Program Files\America Online 9.0\idleproc.dll
0x769c0000 - 0x76a74000 C:\WINDOWS\system32\USERENV.dll
0x5b860000 - 0x5b8b5000 C:\WINDOWS\system32\netapi32.dll
VM Arguments:
jvm_args: -D__jvm_launched=44525059810 -Xbootclasspath/a:C:\PROGRA~1\Java\jre6\lib\deploy.jar;C:\PROGRA~1 \Java\jre6\lib\javaws.jar;C:\PROGRA~1\Java\jre6\li b\plugin.jar
java_command: sun.plugin2.main.client.PluginMain write_pipe_name=jpi2_pid3312_pipe3,read_pipe_name= jpi2_pid3312_pipe2
Launcher Type: SUN_STANDARD
Environment Variables:
PATH=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOW S\system32\wbem;C:\Program Files\Panda Security\Panda Internet Security 2008
USERNAME=Owner
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 15 Model 75 Stepping 2, AuthenticAMD

--------------- S Y S T E M ---------------
OS: Windows XP Build 2600 Service Pack 3
CPU:total 2 (2 cores per cpu, 1 threads per core) family 15 model 75 stepping 2, cmov, cx8, fxsr, mmx, sse, sse2, sse3, mmxext, 3dnow, 3dnowext
Memory: 4k page, physical 2097151k(2097151k free), swap 4194303k(4194303k free)
vm_info: Java HotSpot(TM) Client VM (11.2-b01) for windows-x86 JRE (1.6.0_12-b04), built on Jan 17 2009 09:57:14 by "java_re" with MS VC++ 7.1
time: Tue Mar 17 04:36:37 2009
elapsed time: 406 seconds
Don't even know what program it is from.

[evilfantasy]

I need a log that I know how to read.

Delete Dr Web, run CCleaner then restart the computer. Install a new version of Dr Web and try to run it and get the log.