|
| |||||||
 |
 |
| | Thread Tools |
|
#11
9th Mar 2009, 17:50
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search After reboot log file popped up: ========== PROCESSES ========== Process explorer.exe killed successfully. ========== FILES ========== File/Folder c:\windows\NV2321292.TMP not found. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\Mark\LOCALS~1\Temp\~DF428.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\Mark\LOCALS~1\Temp\~DF43F.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_584.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03092009_194547 Files moved on Reboot... File C:\DOCUME~1\Mark\LOCALS~1\Temp\~DF428.tmp not found! File C:\DOCUME~1\Mark\LOCALS~1\Temp\~DF43F.tmp not found! File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. File C:\WINDOWS\temp\Perflib_Perfdata_584.dat not found! |
|
#12
9th Mar 2009, 18:01
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Looks good. Let me know if you have any questions.
__________________  |
|
#13
9th Mar 2009, 21:49
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Sadly, the redirects in firefox are back again. All else seems normal. Hope to tackle this again tomorrow, time for bed  |
|
#14
10th Mar 2009, 08:22
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Good morning, ready to do battle again. Here's a Hijackthis log, if it helps: Thanks for your help! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:18:57 AM, on 3/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ICO.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\Pmxmiced.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\Mark\Desktop\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4070907 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [dscactivate] c:\dell\dsca.exe 3 O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {FAA26872-BB40-4AB2-8A6D-A49183581AAA} (TSBnwCam Control) - http://wildmountain.dyndns.org:8080/user/TSBnwCam.CAB O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing) -- End of file - 6117 bytes |
|
#15
10th Mar 2009, 10:22
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Use the ESET Online Antivirus Scanner This scanner requires Internet Explorer 1. Check the box next to YES, I accept the Terms of Use. 2. Click Start 3. When asked, allow the activex control to install 4. Click Start 5. Make sure that the option Remove found threats and the option Scan unwanted applications is check marked. 6. Click Scan 7. Wait for the scan to finish 8. Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt 9. Add the C:\Program Files\EsetOnlineScanner\log.txt log into your next reply. ---------- Download random's system information tool (RSIT) by random/random from and save it to your Desktop.
__________________ |
|
#16
10th Mar 2009, 12:21
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Ok, here are those 3 log files: # version=4 # OnlineScanner.ocx=1.0.0.635 # OnlineScannerDLLA.dll=1, 0, 0, 79 # OnlineScannerDLLW.dll=1, 0, 0, 78 # OnlineScannerUninstaller.exe=1, 0, 0, 49 # vers_standard_module=3924 (20090310) # vers_arch_module=1.064 (20080214) # vers_adv_heur_module=1.066 (20070917) # EOSSerial=ea109bc55ae81545b56fa92ab23f00ec # end=finished # remove_checked=true # unwanted_checked=true # utc_time=2009-03-10 07:04:20 # local_time=2009-03-10 02:04:20 (-0600, Central Daylight Time) # country="United States" # osver=5.1.2600 NT Service Pack 3 # scanned=325108 # found=0 # scan_time=2033 ==================== info.txt logfile of random's system information tool 1.05 2009-03-10 14:19:40 ======Uninstall list====== -->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu -->MsiExec /X{DD1865F0-AD73-40FB-B23E-1822E02396FF} -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plug in.exe Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_acti veX.exe Adobe InDesign CS-->RunDll32 "C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Inte l32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{416DFEDD-9F1B-4EFC-AF70-FCA891AE0251}\zidxp.exe" Adobe Photoshop 7.0-->C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll" Adobe Reader 7.1.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A71000000002} Attack on Pearl Harbor Demo-->"C:\Program Files\Steam\steam.exe" steam://uninstall/8630 AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL Canon Camera Access Library-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CAL\Uninst.ini" Canon Camera Support Core Library-->"C:\Program Files\Common Files\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CSCLIB\Uninst.ini" Canon Camera Window DC_DV 5 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC\Uninst.in i" Canon G.726 WMP-Decoder-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\G726Decoder\G726DecUnInstall.ini" Canon iP4500 series User Registration-->C:\Program Files\Canon\IJEREG\iP4500 series\UNINST.EXE Canon iP4500 series-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4500_series\DelDrv.exe" /U:{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4500_series /L0x0009 Canon MovieEdit Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\MVWUninst.ini" Canon My Printer-->C:\Program Files\Canon\MyPrinter\uninst.exe uninst.ini Canon RAW Image Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.1.0.0\Uninst.exe" "C:\Program Files\Canon\RAW Image Task\Uninst.ini" Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDVC6\Uninst.i ni" Canon Utilities CameraWindow DC-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowDC\Uninst.ini " Canon Utilities CameraWindow-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\CameraWindowLauncher\Unin st.ini" Canon Utilities Easy-PhotoPrint EX-->C:\Program Files\Canon\Easy-PhotoPrint EX\uninst.exe uninst.ini Canon Utilities EOS Utility-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\EOS Utility\Uninst.ini" Canon Utilities MyCamera DC-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\MyCameraDC\Uninst.ini" Canon Utilities MyCamera-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\MyCamera\Uninst.ini" Canon Utilities PhotoStitch-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\PhotoStitch\Uninst.ini" Canon Utilities RemoteCapture DC-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureDC\Uninst.in i" Canon Utilities RemoteCapture Task for ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\CameraWindow\RemoteCaptureTask DC\Uninst.ini" Canon Utilities Solution Menu-->C:\Program Files\Canon\SolutionMenu\uninst.exe uninst.ini Canon Utilities ZoomBrowser EX-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX\Program\Uninst.ini" Canon ZoomBrowser EX Memory Card Utility-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\ZoomBrowser EX MCU\Uninst.ini" COMODO Internet Security-->C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe -u Company of Heroes-->MsiExec.exe /X{25724802-CC14-4B90-9F3B-3D6955EE27B1} Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE} Condition Zero Deleted Scenes-->"C:\Program Files\Steam\steam.exe" steam://uninstall/100 Condition Zero-->"C:\Program Files\Steam\steam.exe" steam://uninstall/80 Conexant D850 56K V.9x DFVc Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SU BSYS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf Dell Driver Reset Tool-->MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76} Dell Support Center-->MsiExec.exe /X{B8C54AB1-7E1A-40E8-B794-EDB6E8921F3A} DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D} Digital Line Detect-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText Documentation & Support Launcher-->MsiExec.exe /X{B0DF58A2-40DF-4465-AA56-38623EC9938C} DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe" EPSON Printer Software-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDA TE.EXE /R ESET Online Scanner-->C:\WINDOWS\system32\OnlineScannerUninstaller.ex e Exact Audio Copy 0.99pb3-->C:\Program Files\Exact Audio Copy\uninst.exe EXIF Date Changer v1.1-->"C:\Program Files\EXIF Date Changer\unins000.exe" Gallery Remote-->"C:\Program Files\Gallery Remote\UninstallerData\Uninstall gallery_remote.exe" Games, Music, & Photos Launcher-->MsiExec.exe /X{B6884A07-0305-47AE-9969-8F26FADC17DE} Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72} Google SketchUp 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\ 50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98736A65-3C79-49EC-B7E9-A3C77774B0E6}\setup.exe" -l0x9 -removeonly Google SketchUp 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\ 50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}\setup.exe" -l0x9 -removeonly GTA San Andreas-->"C:\Program Files\GTA San Andreas\unins000.exe" Half-Life 2: Deathmatch-->"C:\Program Files\Steam\steam.exe" steam://uninstall/320 Half-Life 2-->"C:\Program Files\Steam\steam.exe" steam://uninstall/220 High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spun inst.exe HijackThis 2.0.2-->"C:\Documents and Settings\Mark\Desktop\HijackThis.exe" /uninstall Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT="" Hotfix for Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spunin st.exe" Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spunin st.exe" Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spunin st.exe" ImgBurn (Remove Only)-->"C:\Program Files\ImgBurn\uninstall.exe" Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall Intel(R) PRO Network Connections Drivers-->Prounstl.exe Java(TM) 6 Update 12-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF} jv16 PowerTools 1.3-->"C:\Program Files\jv16 PowerTools\unins000.exe" Macromedia Dreamweaver MX 2004-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}\Setup.exe" -l0x9 mmUninstall Macromedia Extension Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5BA14E0-7384-11D4-BAE7-00409631A2C8}\setup.exe" -l0x9 mmUninstall magicolor 2200 DeskLaser-->ZUNINST.EXE /PRN:"magicolor 2200 DeskLaser" Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" MediaMonkey 3.0-->"C:\Program Files\MediaMonkey\unins000.exe" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microso ft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\sp uninst.exe" Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationA PIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMa pping$\spuninst\spuninst.exe" Microsoft Office XP Professional with FrontPage-->MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9} Microsoft Plus! Digital Media Edition Installer-->MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7} Microsoft Plus! Photo Story 2 LE-->MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuni nst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Modem Diagnostic Tool-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\ 00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C252EB7B-7AE0-46DE-9BEE-DF681B885F13}\setup.exe" -l0x9 -removeonly Mouse Suite for Desktop Computers-->C:\Program Files\InstallShield Installation Information\{448E2D77-E504-4221-B2C2-93646B344729}\setup.exe -runfromtemp -l0x0009 -removeonly Mozilla Firefox (3.0.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} Nero OEM-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL Netflix Movie Viewer-->MsiExec.exe /X{BCE72AED-3332-4863-9567-C5DCB9052CA2} NetWaiting-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI NVIDIA PhysX-->MsiExec.exe /X{DD1865F0-AD73-40FB-B23E-1822E02396FF} OpenOffice.org Installer 1.0-->MsiExec.exe /X{0D499481-22C6-4B25-8AC2-6D3F6C885FB9} QuickTime Alternative 2.8.0-->"C:\Program Files\QuickTime Alternative\unins000.exe" Realtek High Definition Audio Driver-->RtlUpd.exe -r -m Sansa Updater-->C:\Program Files\InstallShield Installation Information\{E2D7E05E-C8C7-45F4-8D89-D6696075E0B7}\setup.exe -runfromtemp -l0x0009 -removeonly Screen Paver Screen Saver-->C:\WINDOWS\ScreenPaver.scr -u SearchAssist-->C:\DELL\SearchAssist\UninstSA.bat Security Update for Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\sp uninst.exe" Security Update for Windows Media Player 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\ spuninst.exe" Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\ spuninst.exe" Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\s puninst.exe" Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spunin st.exe" Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spunin st.exe" Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spunin st.exe" Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spunin st.exe" Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spunin st.exe" Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spunin st.exe" Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spunin st.exe" Security Update for Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spunin st.exe" Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spunin st.exe" Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spunin st.exe" Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spunin st.exe" Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spunin st.exe" Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spunin st.exe" Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spunin st.exe" Security Update for Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spunin st.exe" Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spunin st.exe" Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spunin st.exe" Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spunin st.exe" Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spunin st.exe" Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spunin st.exe" Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spunin st.exe" Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spunin st.exe" Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spunin st.exe" Security Update for Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spunin st.exe" Security Update for Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spunin st.exe" Source SDK Base-->"C:\Program Files\Steam\steam.exe" steam://uninstall/215 Source SDK-->"C:\Program Files\Steam\steam.exe" steam://uninstall/211 Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" StationRipper 2.91D-->C:\Program Files\Ratajik Software\StationRipper\uninstall-StationRipper.exe Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} SyncBack-->"C:\Program Files\2BrightSparks\SyncBack\unins000.exe" System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spunin st.exe" Update for Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spunin st.exe" Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spunin st.exe" URL Assistant-->regsvr32 /u /s "C:\Program Files\BAE\BAE.dll" vanBasco's Karaoke Player-->C:\Program Files\vanBasco's Karaoke Player\uninst.exe VideoLAN VLC media player 0.8.6c-->C:\Program Files\VideoLAN\VLC\uninstall.exe Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuni nst.exe" Windows Media Player 10-->MsiExec.exe /I{33BB4982-DC52-4886-A03B-F4C5C80BEE89} Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst. exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spu ninst.exe" WinHTTrack Website Copier 3.42-2-->"C:\Program Files\WinHTTrack\unins000.exe" =====HijackThis Backups===== O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing) ======Hosts File====== 127.0.0.1 localhost ======Security center information====== AV: AVG Anti-Virus Free FW: COMODO Firewall System event log Computer Name: DELL_PC Event Code: 7036 Message: The Application Management service entered the stopped state. Record Number: 23724 Source Name: Service Control Manager Time Written: 20090308225403.000000-360 Event Type: information User: Computer Name: DELL_PC Event Code: 7035 Message: The Application Management service was successfully sent a start control. Record Number: 23723 Source Name: Service Control Manager Time Written: 20090308225403.000000-360 Event Type: information User: DELL_PC\Mark Computer Name: DELL_PC Event Code: 7023 Message: The Application Management service terminated with the following error: The specified module could not be found. Record Number: 23722 Source Name: Service Control Manager Time Written: 20090308225403.000000-360 Event Type: error User: Computer Name: DELL_PC Event Code: 7036 Message: The Application Management service entered the stopped state. Record Number: 23721 Source Name: Service Control Manager Time Written: 20090308225403.000000-360 Event Type: information User: Computer Name: DELL_PC Event Code: 7035 Message: The Application Management service was successfully sent a start control. Record Number: 23720 Source Name: Service Control Manager Time Written: 20090308225403.000000-360 Event Type: information User: DELL_PC\Mark Application event log Computer Name: DELL_PC Event Code: 4097 Message: The application, C:\Program Files\Mozilla Firefox\firefox.exe, generated an application error The error occurred on 06/05/2008 @ 23:02:32.812 The exception generated was c0000005 at address 6036179E (xpcom_core!nsQueryInterface__operator()) Record Number: 1583 Source Name: DrWatson Time Written: 20080605230232.000000-300 Event Type: information User: Computer Name: DELL_PC Event Code: 1000 Message: Faulting application firefox.exe, version 1.8.20080.40413, faulting module xpcom_core.dll, version 1.8.20080.40413, fault address 0x0000179e. Record Number: 1582 Source Name: Application Error Time Written: 20080605230227.000000-300 Event Type: error User: Computer Name: DELL_PC Event Code: 0 Message: Record Number: 1581 Source Name: RoxSniffer9 Time Written: 20080605190716.000000-300 Event Type: information User: Computer Name: DELL_PC Event Code: 1800 Message: The Windows Security Center Service has started. Record Number: 1580 Source Name: SecurityCenter Time Written: 20080605190715.000000-300 Event Type: information User: Computer Name: DELL_PC Event Code: 0 Message: Record Number: 1579 Source Name: RoxSniffer9 Time Written: 20080605190712.000000-300 Event Type: information User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%systemroot%\system32;%systemroot%;%systemr oot%\system32\wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 11, GenuineIntel "PROCESSOR_REVISION"=0f0b "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;. WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\ "sourcesdk"=c:\program files\steam\steamapps\markmcgaa\sourcesdk "VProject"=c:\program files\steam\steamapps\markmcgaa\half-life 2\hl2 -----------------EOF----------------- Logfile of random's system information tool 1.05 (written by random/random) Run by Mark at 2009-03-10 14:17:00 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 193 GB (69%) free of 280 GB Total RAM: 2046 MB (65% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:18:57 AM, on 3/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ICO.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\Pmxmiced.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\Mark\Desktop\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4070907 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [dscactivate] c:\dell\dsca.exe 3 O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB O16 - DPF: {FAA26872-BB40-4AB2-8A6D-A49183581AAA} (TSBnwCam Control) - http://wildmountain.dyndns.org:8080/user/TSBnwCam.CAB O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: stllssvr - Unknown owner - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (file missing) -- End of file - 6117 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-02-04 1078552] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2009-03-09 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}] CBrowserHelperObject Object - C:\Program Files\BAE\BAE.dll [2006-12-08 98304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-07-16 142104] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-07-16 162584] "PMX Daemon"=C:\WINDOWS\system32\ICO.EXE [2007-03-08 49152] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-07-16 16132608] "ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\IS USPM.exe [2006-10-03 221184] "dscactivate"=c:\dell\dsca.exe [2007-07-30 16384] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-02-09 13680640] "nwiz"=nwiz.exe /install [] "CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152] "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-02-04 1601304] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.d ll [2009-02-09 86016] "Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-07-16 138008] "CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696] "ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-10-03 81920] "COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2009-03-09 1851128] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888] [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2008-04-23 29696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk] C:\PROGRA~1\DIGITA~1\DLG.exe [2003-10-29 24576] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk] C:\PROGRA~1\MICROS~4\Office10\OSA.EXE [2001-02-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 "RoxWatch9"=2 "RoxMediaDB9"=3 "Macromedia Licensing Service"=3 "DSBrokerService"=3 "JavaQuickStarterService"=2 "aawservice"=2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter] C:\WINDOWS\system32\avgrsstx.dll [2009-02-04 10520] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2007-07-16 204800] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\aawservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\network\aawservice] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\explorer] "HonorAutoRunSetting"= "NoDriveAutoRun"= "NoDriveTypeAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32 \sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Common Files\AOL\Loader\aolload.exe"="C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Application Loader" "C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam Client" "C:\Program Files\Steam\steamapps\markmcgaa\half-life 2 deathmatch\hl2.exe"="C:\Program Files\Steam\steamapps\markmcgaa\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2" "C:\Program Files\Steam\steamapps\markmcgaa\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\markmcgaa\counter-strike\hl.exe:*:Enabled:Half-Life Launcher" "C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealP layer" "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe" "C:\WINDOWS\system32\spool\drivers\w32x86\3\SAGENT 4.EXE"="C:\WINDOWS\system32\spool\drivers\w32x86\3 \SAGENT4.EXE:*:Enabled:SAgent4" "C:\Program Files\Steam\steamapps\markmcgaa\condition zero deleted scenes\hl.exe"="C:\Program Files\Steam\steamapps\markmcgaa\condition zero deleted scenes\hl.exe:*:Enabled:Half-Life Launcher" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Ratajik Software\StationRipper\StationRipperConsole.exe"=" C:\Program Files\Ratajik Software\StationRipper\StationRipperConsole.exe:*: Enabled:StationRipperConsole" [HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32 \sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" ======File associations====== .js - open - "C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1" ======List of files/folders created in the last 1 months====== 2009-03-10 14:17:00 ----D---- C:\rsit 2009-03-10 13:20:41 ----D---- C:\Program Files\EsetOnlineScanner 2009-03-09 20:38:00 ----D---- C:\WINDOWS\system32\XPSViewer 2009-03-09 20:37:55 ----D---- C:\Program Files\MSBuild 2009-03-09 20:37:46 ----D---- C:\Program Files\Reference Assemblies 2009-03-09 20:36:47 ----N---- C:\WINDOWS\system32\prntvpt.dll 2009-03-09 20:36:46 ----N---- C:\WINDOWS\system32\xpssvcs.dll 2009-03-09 20:36:46 ----N---- C:\WINDOWS\system32\xpsshhdr.dll 2009-03-09 20:35:51 ----D---- C:\428e67a5d13529c8909bd4 2009-03-09 20:31:37 ----D---- C:\WINDOWS\SxsCaPendDel 2009-03-09 20:18:10 ----D---- C:\Program Files\Sun 2009-03-09 20:17:56 ----A---- C:\WINDOWS\system32\javaws.exe 2009-03-09 20:17:56 ----A---- C:\WINDOWS\system32\javaw.exe 2009-03-09 20:17:56 ----A---- C:\WINDOWS\system32\java.exe 2009-03-09 20:16:35 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2009-03-09 19:42:35 ----SHD---- C:\RECYCLER 2009-03-09 14:58:54 ----A---- C:\Boot.bak 2009-03-09 14:58:46 ----RASHD---- C:\cmdcons 2009-03-09 11:50:33 ----D---- C:\Documents and Settings\Mark\Application Data\WinRAR 2009-03-09 11:42:12 ----D---- C:\WINDOWS\ERUNT 2009-03-09 10:07:00 ----D---- C:\Documents and Settings\Mark\Application Data\Mozilla 2009-03-09 00:45:07 ----D---- C:\Program Files\Windows Installer Clean Up 2009-03-09 00:03:09 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo 2009-03-09 00:03:08 ----A---- C:\WINDOWS\system32\guard32.dll 2009-03-09 00:03:04 ----D---- C:\Program Files\COMODO 2009-03-08 20:43:22 ----D---- C:\WINDOWS\temp 2009-03-08 16:24:52 ----A---- C:\WINDOWS\system32\userinit.exe 2009-03-08 15:38:43 ----A---- C:\WINDOWS\system32\userinit(2).exe 2009-03-06 22:58:06 ----A---- C:\WINDOWS\ntbtlog.txt 2009-03-06 22:28:51 ----D---- C:\WINDOWS\ERDNT 2009-03-05 09:42:37 ----D---- C:\My Music 2009-03-03 23:54:37 ----D---- C:\Documents and Settings\Mark\Application Data\Malwarebytes 2009-03-03 23:54:33 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-03-03 23:54:33 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2009-03-03 14:30:30 ----D---- C:\WINDOWS\pss 2009-02-26 02:33:30 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$ 2009-02-21 19:41:16 ----D---- C:\Program Files\GTA San Andreas 2009-02-21 19:17:05 ----D---- C:\Program Files\SystemRequirementsLab 2009-02-21 19:16:58 ----D---- C:\Documents and Settings\Mark\Application Data\SystemRequirementsLab 2009-02-13 12:26:54 ----A---- C:\WINDOWS\CDPlayer.ini 2009-02-12 15:45:35 ----D---- C:\Program Files\mp3DirectCut 2009-02-11 22:56:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$ ======List of files/folders modified in the last 1 months====== 2009-03-10 14:17:00 ----D---- C:\WINDOWS\Prefetch 2009-03-10 13:20:41 ----RD---- C:\Program Files 2009-03-10 13:20:33 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-03-10 13:20:33 ----D---- C:\WINDOWS\system32 2009-03-10 10:17:06 ----D---- C:\Program Files\Mozilla Firefox 2009-03-10 09:19:35 ----D---- C:\WINDOWS\system32\CatRoot2 2009-03-10 09:19:26 ----D---- C:\WINDOWS 2009-03-10 09:18:47 ----A---- C:\WINDOWS\ModemLog_Conexant D850 56K V.9x DFVc Modem.txt 2009-03-09 23:55:45 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-03-09 21:59:01 ----RASH---- C:\boot.ini 2009-03-09 21:59:01 ----A---- C:\WINDOWS\win.ini 2009-03-09 21:59:01 ----A---- C:\WINDOWS\system.ini 2009-03-09 21:06:30 ----HD---- C:\$AVG8.VAULT$ 2009-03-09 20:57:38 ----D---- C:\WINDOWS\Microsoft.NET 2009-03-09 20:57:37 ----RSD---- C:\WINDOWS\assembly 2009-03-09 20:45:03 ----D---- C:\Config.Msi 2009-03-09 20:42:36 ----SHD---- C:\WINDOWS\Installer 2009-03-09 20:41:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-03-09 20:41:25 ----D---- C:\WINDOWS\WinSxS 2009-03-09 20:37:57 ----D---- C:\WINDOWS\system32\en-US 2009-03-09 20:37:52 ----RSD---- C:\WINDOWS\Fonts 2009-03-09 20:37:37 ----HD---- C:\WINDOWS\inf 2009-03-09 20:37:12 ----D---- C:\WINDOWS\system32\spool 2009-03-09 20:37:08 ----SHD---- C:\WINDOWS\system32\dllcache 2009-03-09 20:30:02 ----D---- C:\Program Files\Internet Explorer 2009-03-09 20:22:56 ----D---- C:\WINDOWS\SoftwareDistribution 2009-03-09 20:20:20 ----D---- C:\Program Files\Java 2009-03-09 20:19:38 ----D---- C:\Program Files\Common Files 2009-03-09 20:16:30 ----D---- C:\Program Files\Common Files\Adobe 2009-03-09 20:10:50 ----D---- C:\Program Files\Common Files\Real 2009-03-09 20:10:41 ----D---- C:\WINDOWS\system32\drivers 2009-03-09 20:04:17 ----A---- C:\WINDOWS\system32\msvcp71.dll 2009-03-09 19:56:49 ----SHD---- C:\System Volume Information 2009-03-09 19:56:49 ----D---- C:\WINDOWS\system32\Restore 2009-03-09 15:00:58 ----D---- C:\WINDOWS\AppPatch 2009-03-09 09:39:18 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2009-03-09 09:38:39 ----D---- C:\Program Files\Spybot - Search & Destroy 2009-03-09 01:24:09 ----A---- C:\WINDOWS\system32\deploytk.dll 2009-03-09 00:55:45 ----D---- C:\Program Files\Dell 2009-03-09 00:45:07 ----SD---- C:\Documents and Settings\Mark\Application Data\Microsoft 2009-03-09 00:44:24 ----D---- C:\Program Files\MSECache 2009-03-09 00:19:58 ----D---- C:\Documents and Settings 2009-03-08 21:00:16 ----D---- C:\Documents and Settings\All Users\Application Data\avg8 2009-03-08 20:54:35 ----D---- C:\WINDOWS\system32\config 2009-03-08 20:54:17 ----D---- C:\WINDOWS\system32\wbem 2009-03-08 20:54:16 ----D---- C:\WINDOWS\Registration 2009-03-05 09:36:53 ----D---- C:\Program Files\Common Files\Roxio Shared 2009-03-05 09:36:50 ----D---- C:\Documents and Settings\All Users\Application Data\Roxio 2009-03-03 02:39:37 ----D---- C:\WINDOWS\Minidump 2009-03-03 00:25:00 ----A---- C:\WINDOWS\NeroDigital.ini 2009-02-25 10:47:32 ----HD---- C:\WINDOWS\$hf_mig$ 2009-02-23 23:32:41 ----A---- C:\WINDOWS\system32\DellPM.ini 2009-02-21 19:23:31 ----D---- C:\WINDOWS\nview 2009-02-21 19:21:36 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2009-02-21 19:21:15 ----D---- C:\Program Files\AGEIA Technologies 2009-02-21 19:20:39 ----D---- C:\WINDOWS\Help 2009-02-21 19:06:05 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA 2009-02-11 22:56:12 ----A---- C:\WINDOWS\imsins.BAK ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-02-04 325128] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-02-04 27656] R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2009-03-09 110992] R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2009-03-09 24336] R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352] R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592] R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032] R2 dsunidrv;DellSupport UniDriver; C:\WINDOWS\system32\DRIVERS\dsunidrv.sys [2007-02-25 5376] R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043] R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-07-19 254872] R3 Eplpdx02;Eplpdx02; \??\C:\WINDOWS\system32\Drivers\EPLPDX02.SYS [] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-11-17 1042432] R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2003-11-17 212224] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-07-16 4403712] R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128] R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-09 6307328] R3 pmxmouse;PMXMOUSE; C:\WINDOWS\system32\DRIVERS\pmxmouse.sys [2006-04-24 18432] R3 pmxusblf;PMXUSBLF; C:\WINDOWS\system32\DRIVERS\pmxusblf.sys [2006-04-24 14336] R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-11-17 680704] S1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [] S1 DLARTL_M;DLARTL_M; C:\WINDOWS\System32\Drivers\DLARTL_M.SYS [] S2 DLABMFSM;DLABMFSM; C:\WINDOWS\System32\DLA\DLABMFSM.SYS [] S2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [] S2 DLADResM;DLADResM; C:\WINDOWS\System32\DLA\DLADResM.SYS [] S2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [] S2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [] S2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [] S2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [] S2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [] S2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [] S3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys [] S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-17 117760] S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-07-16 5760096] S3 PciCon;PciCon; \??\D:\PciCon.sys [] S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs \20050901.036\symidsco.sys [] S3 usbbus;LGE CDMA Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2005-05-26 21344] S3 USBModem;LGE CDMA USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2005-06-24 39036] S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys [2003-01-10 33588] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368] S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928] S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752] S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008] S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952] S4 IntelIde;IntelIde; C:\WINDOWS\system32\DRIVERS\intelide.sys [2008-04-13 5504] S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960] S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-02-04 298264] R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2007-01-31 96370] R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2009-03-09 700152] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-09 163908] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-13 267776] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspn et_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\Presen tationFontCache.exe [2008-07-29 46104] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S4 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664] S4 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2007-03-19 70656] S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984] S4 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2007-09-14 68096] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] S4 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [] S4 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [] S4 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [] S4 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408] -----------------EOF----------------- |
|
#17
10th Mar 2009, 16:37
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Go to Add or Remove Programs and uninstall: URL Assistant -- Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop. Link #1 Link #2 **Note: It is important that it is saved directly to your Desktop Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix. Temporarily disable your antivirus, and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them. Double click combofix.exe & follow the prompts. When finished ComboFix will produce a log for you. Post the ComboFix log in your next reply. Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall. Remember to re-enable your antivirus and antispyware protection when ComboFix is complete. If you have problems with ComboFix usage, see How to use ComboFix
__________________ |
|
#18
10th Mar 2009, 19:12
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Here's the new log, thank! ComboFix 09-03-10.01 - Mark 2009-03-10 20:59:59.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1351 [GMT -5:00] Running from: c:\documents and settings\Mark\Desktop\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) FW: COMODO Firewall *disabled* * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2009-02-11 to 2009-03-11 ))))))))))))))))))))))))))))))) . 2009-03-10 18:36 . 2009-03-10 18:36 <DIR> d-------- c:\windows\LastGood 2009-03-10 14:17 . 2009-03-10 14:19 <DIR> d-------- C:\rsit 2009-03-10 13:20 . 2009-03-10 14:04 <DIR> d-------- c:\program files\EsetOnlineScanner 2009-03-09 20:38 . 2009-03-09 20:38 <DIR> d-------- c:\windows\system32\XPSViewer 2009-03-09 20:37 . 2009-03-09 20:37 <DIR> d-------- c:\program files\Reference Assemblies 2009-03-09 20:37 . 2009-03-09 20:37 <DIR> d-------- c:\program files\MSBuild 2009-03-09 20:36 . 2008-07-06 07:06 1,676,288 --------- c:\windows\system32\xpssvcs.dll 2009-03-09 20:36 . 2008-07-06 07:06 1,676,288 --------- c:\windows\system32\dllcache\xpssvcs.dll 2009-03-09 20:36 . 2008-07-06 05:50 597,504 --------- c:\windows\system32\dllcache\printfilterpipelinesv c.exe 2009-03-09 20:36 . 2008-07-06 07:06 575,488 --------- c:\windows\system32\xpsshhdr.dll 2009-03-09 20:36 . 2008-07-06 07:06 575,488 --------- c:\windows\system32\dllcache\xpsshhdr.dll 2009-03-09 20:36 . 2008-07-06 07:06 117,760 --------- c:\windows\system32\prntvpt.dll 2009-03-09 20:36 . 2008-07-06 07:06 89,088 --------- c:\windows\system32\dllcache\filterpipelineprintpr oc.dll 2009-03-09 20:35 . 2009-03-09 20:37 <DIR> d-------- C:\428e67a5d13529c8909bd4 2009-03-09 20:31 . 2009-03-09 20:32 <DIR> d-------- c:\windows\SxsCaPendDel 2009-03-09 20:18 . 2009-03-09 20:18 <DIR> d-------- c:\program files\Sun 2009-03-09 11:44 . 2009-03-09 11:44 578,560 --a------ c:\windows\system32\dllcache\user32.dll 2009-03-09 11:42 . 2009-03-09 11:42 <DIR> d-------- c:\windows\ERUNT 2009-03-09 01:24 . 2009-03-09 01:24 73,728 --a------ c:\windows\system32\javacpl.cpl 2009-03-09 00:45 . 2009-03-09 00:45 <DIR> d-------- c:\program files\Windows Installer Clean Up 2009-03-09 00:20 . 2007-09-07 17:33 <DIR> d-------- c:\documents and settings\Administrator.DELL_PC\Application Data\You've Got Pictures Screensaver 2009-03-09 00:20 . 2007-09-07 17:37 <DIR> d-------- c:\documents and settings\Administrator.DELL_PC\Application Data\Roxio 2009-03-09 00:20 . 2007-09-07 17:20 <DIR> d-------- c:\documents and settings\Administrator.DELL_PC\Application Data\InstallShield 2009-03-09 00:20 . 2007-09-07 17:27 <DIR> d-------- c:\documents and settings\Administrator.DELL_PC\Application Data\GTek 2009-03-09 00:20 . 2007-09-13 17:44 <DIR> d-------- c:\documents and settings\Administrator.DELL_PC\Application Data\AOL 2009-03-09 00:19 . 2009-03-09 00:20 <DIR> d-------- c:\documents and settings\Administrator.DELL_PC 2009-03-09 00:03 . 2009-03-09 00:03 <DIR> d-------- c:\program files\COMODO 2009-03-09 00:03 . 2009-03-09 00:12 <DIR> d-------- c:\documents and settings\All Users\Application Data\Comodo 2009-03-09 00:03 . 2009-03-09 00:03 155,384 --a------ c:\windows\system32\guard32.dll 2009-03-09 00:03 . 2009-03-09 00:03 110,992 --a------ c:\windows\system32\drivers\cmdguard.sys 2009-03-09 00:03 . 2009-03-09 00:03 24,336 --a------ c:\windows\system32\drivers\cmdhlp.sys 2009-03-08 16:24 . 2004-08-03 19:56 24,576 --a------ c:\windows\system32\userinit.exe 2009-03-08 15:38 . 2004-08-03 19:56 24,576 --a------ c:\windows\system32\userinit(2).exe 2009-03-05 09:42 . 2009-03-05 09:42 <DIR> d-------- C:\My Music 2009-03-03 23:54 . 2009-03-08 23:28 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-03-03 23:54 . 2009-03-03 23:54 <DIR> d-------- c:\documents and settings\Mark\Application Data\Malwarebytes 2009-03-03 23:54 . 2009-03-03 23:54 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-03-03 23:54 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-03-03 23:54 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-03-03 15:00 . 2009-03-09 00:22 664 --a------ c:\windows\system32\d3d9caps.dat 2009-03-03 14:32 . 2007-09-07 17:33 <DIR> d-------- c:\documents and settings\Administrator\Application Data\You've Got Pictures Screensaver 2009-03-03 14:32 . 2007-09-07 17:37 <DIR> d-------- c:\documents and settings\Administrator\Application Data\Roxio 2009-03-03 14:32 . 2007-09-07 17:20 <DIR> d-------- c:\documents and settings\Administrator\Application Data\InstallShield 2009-03-03 14:32 . 2007-09-07 17:27 <DIR> d-------- c:\documents and settings\Administrator\Application Data\GTek 2009-03-03 14:32 . 2007-09-13 17:44 <DIR> d-------- c:\documents and settings\Administrator\Application Data\AOL 2009-03-03 14:32 . 2009-03-03 14:55 <DIR> d-------- c:\documents and settings\Administrator 2009-02-21 19:41 . 2009-02-21 19:47 <DIR> d-------- c:\program files\GTA San Andreas 2009-02-21 19:17 . 2009-02-21 19:17 <DIR> d-------- c:\program files\SystemRequirementsLab 2009-02-21 19:16 . 2009-02-21 19:16 <DIR> d-------- c:\documents and settings\Mark\Application Data\SystemRequirementsLab 2009-02-13 12:26 . 2009-02-20 11:54 2,634 --a------ c:\windows\CDPlayer.ini 2009-02-12 16:54 . 2009-02-12 16:55 <DIR> d-------- c:\documents and settings\Mark\.SunDownloadManager 2009-02-12 15:45 . 2009-02-12 15:54 <DIR> d-------- c:\program files\mp3DirectCut . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )) . 2009-03-10 01:20 --------- d-----w c:\program files\Java 2009-03-10 01:16 --------- d-----w c:\program files\Common Files\Adobe 2009-03-10 01:10 --------- d-----w c:\program files\Common Files\Real 2009-03-10 01:04 499,712 ----a-w c:\windows\system32\msvcp71.dll 2009-03-09 14:39 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-03-09 14:38 --------- d-----w c:\program files\Spybot - Search & Destroy 2009-03-09 06:24 410,984 ----a-w c:\windows\system32\deploytk.dll 2009-03-09 05:55 --------- d-----w c:\program files\Dell 2009-03-09 05:44 --------- d-----w c:\program files\MSECache 2009-03-09 02:00 --------- d-----w c:\documents and settings\All Users\Application Data\avg8 2009-03-05 14:36 --------- d-----w c:\program files\Common Files\Roxio Shared 2009-03-05 14:36 --------- d-----w c:\documents and settings\All Users\Application Data\Roxio 2009-02-22 00:21 --------- d-----w c:\program files\Common Files\Wise Installation Wizard 2009-02-22 00:21 --------- d-----w c:\program files\AGEIA Technologies 2009-02-22 00:06 --------- d-----w c:\documents and settings\All Users\Application Data\NVIDIA 2009-02-10 21:18 --------- d-----w c:\program files\QuickTime Alternative 2009-02-10 21:18 --------- d-----w c:\documents and settings\All Users\Application Data\Apple Computer 2009-02-10 19:13 --------- d-----w c:\program files\Ratajik Software 2009-02-10 17:22 --------- d-----w c:\program files\MediaMonkey 2009-02-08 15:53 --------- d-----w c:\documents and settings\Mark\Application Data\ZoomBrowser EX 2009-02-08 15:52 --------- d-----w c:\documents and settings\Mark\Application Data\CameraWindowDC 2009-02-05 03:47 --------- d-----w c:\documents and settings\Mark\Application Data\AdobeUM 2009-02-05 02:47 --------- d--h--w c:\documents and settings\Jessica\Application Data\GTek 2009-02-05 02:41 325,128 ----a-w c:\windows\system32\drivers\avgldx86.sys 2009-02-05 02:41 10,520 ----a-w c:\windows\system32\avgrsstx.dll 2009-01-28 00:25 37,256 ----a-w c:\documents and settings\Mark\Application Data\GDIPFONTCACHEV1.DAT 2009-01-28 00:13 --------- d-----w c:\documents and settings\All Users\Application Data\ZoomBrowser 2009-01-20 00:41 --------- d-----w c:\program files\Steam 2009-01-17 03:35 3,594,752 ----a-w c:\windows\system32\dllcache\mshtml.dll 2009-01-17 00:24 70,936 ----a-w c:\windows\system32\PhysXLoader.dll 2008-12-26 06:08 453,152 ----a-w c:\windows\system32\nvudisp.exe 2008-12-24 03:58 453,152 ----a-w c:\windows\system32\NVUNINST.EXE 2008-12-19 09:10 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe 2008-12-19 09:10 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe 2008-12-19 05:25 634,024 ------w c:\windows\system32\dllcache\iexplore.exe 2008-12-19 05:23 161,792 ------w c:\windows\system32\dllcache\ieakui.dll 2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys 2008-08-06 14:06 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008080620080 807\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-07-16 142104] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-07-16 162584] "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\I SUSPM.exe" [2006-10-03 221184] "dscactivate"="c:\dell\dsca.exe" [2007-07-30 16384] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-09 13680640] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-04 1601304] "NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2009-02-09 86016] "Persistence"="c:\windows\system32\igfxpers.ex e" [2007-07-16 138008] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696] "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2006-10-03 81920] "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2009-03-09 1851128] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888] "PMX Daemon"="ICO.EXE" [2007-03-08 c:\windows\system32\ico.exe] "RTHDCPL"="RTHDCPL.EXE" [2007-07-16 c:\windows\RTHDCPL.EXE] "nwiz"="nwiz.exe" [2009-02-09 c:\windows\system32\nwiz.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter] 2009-02-04 21:41 10520 c:\windows\system32\avgrsstx.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\session manager] BootExecute REG_MULTI_SZ lsdelete [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk backup=c:\windows\pss\Digital Line Detect.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk backup=c:\windows\pss\Microsoft Office.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] -ra------ 2001-07-09 13:50 155648 c:\windows\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "RoxWatch9"=2 (0x2) "RoxMediaDB9"=3 (0x3) "Macromedia Licensing Service"=3 (0x3) "DSBrokerService"=3 (0x3) "JavaQuickStarterService"=2 (0x2) "aawservice"=2 (0x2) [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"= "c:\\Program Files\\Steam\\Steam.exe"= "c:\\Program Files\\Steam\\steamapps\\markmcgaa\\half-life 2 deathmatch\\hl2.exe"= "c:\\Program Files\\Steam\\steamapps\\markmcgaa\\counter-strike\\hl.exe"= "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\ \SAGENT4.EXE"= "c:\\Program Files\\Steam\\steamapps\\markmcgaa\\condition zero deleted scenes\\hl.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Ratajik Software\\StationRipper\\StationRipperConsole.exe" = R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-05-28 325128] R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2009-03-09 110992] R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2009-03-09 24336] R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-05-28 298264] R3 pmxmouse;PMXMOUSE;c:\windows\system32\drivers\pmxm ouse.sys [2007-09-13 18432] R3 pmxusblf;PMXUSBLF;c:\windows\system32\drivers\pmxu sblf.sys [2007-09-13 14336] S3 PciCon;PciCon;\??\d:\pcicon.sys --> d:\PciCon.sys [?] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office10\EXCEL.EXE/3000 DPF: {FAA26872-BB40-4AB2-8A6D-A49183581AAA} - hxxp://wildmountain.dyndns.org:8080/user/TSBnwCam.CAB FF - ProfilePath - c:\documents and settings\Mark\Application Data\Mozilla\Firefox\Profiles\jw0hkjhu.default\ FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll . ************************************************** ************************ catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-10 21:02:04 Windows 5.1.2600 Service Pack 3 NTFS detected NTDLL code modification: ZwClose, ZwOpenFile scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************** ************************ . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(740) c:\windows\system32\guard32.dll - - - - - - - > 'lsass.exe'(800) c:\windows\system32\guard32.dll . Completion time: 2009-03-10 21:04:05 ComboFix-quarantined-files.txt 2009-03-11 02:04:02 Pre-Run: 202,518,204,416 bytes free Post-Run: 202,655,842,304 bytes free 203 --- E O F --- 2009-03-10 01:42:37 |
|
#19
10th Mar 2009, 19:35
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Download HostsXpert
Note: if you use SpywareBlaster, Spybot and/or IE-SPYAD, it will be necessary to re-install the protection they afford. For SpywareBlaster, run the program and select Enable all protection. For Spybot run the program and select Immunize. For IE-SPYAD, run the batch file and reinstall the protection. ---------- Please download from DDS by sUBs and save it to your Desktop. Vista users. Right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)
__________________ |
|
#20
10th Mar 2009, 23:46
| |||
| |||
| Firefox Redirects to Bogus Site when Using Google Search Thanks for your help, here are the logs. DDS (Ver_09-02-01.01) - NTFSx86 Run by Mark at 1:44:29.84 on Wed 03/11/2009 Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_12 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1344 [GMT -5:00] AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) FW: COMODO Firewall *disabled* ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\WINDOWS\system32\ICO.EXE C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\Pmxmiced.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\Mark\Desktop\dds.com ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [PMX Daemon] ICO.EXE mRun: [RTHDCPL] RTHDCPL.EXE mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup mRun: [dscactivate] c:\dell\dsca.exe 3 mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office10\EXCEL.EXE/3000 IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {36ECAF82-3300-8F84-092E-AFF36D6C7040} - {86529161-034E-4F8A-88D2-3C625E612E04} - c:\program files\winhttrack\WinHTTrackIEBar.dll DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} - hxxp://support.dell.com/systemprofiler/SysPro.CAB DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - hxxp://www.eset.eu/buxus/docs/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab DPF: {FAA26872-BB40-4AB2-8A6D-A49183581AAA} - hxxp://wildmountain.dyndns.org:8080/user/TSBnwCam.CAB Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll Notify: avgrsstarter - avgrsstx.dll Notify: igfxcui - igfxdev.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\mark\applic~1\mozilla\firefox\profiles \jw0hkjhu.default\ FF - component: c:\program files\avg\avg8\firefox\components\avgssff.dll ============= SERVICES / DRIVERS =============== R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-5-28 325128] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2007-9-13 27656] R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [2009-3-9 110992] R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2009-3-9 24336] R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2008-5-28 298264] R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2009-3-9 700152] R3 pmxmouse;PMXMOUSE;c:\windows\system32\drivers\pmxm ouse.sys [2007-9-13 18432] R3 pmxusblf;PMXUSBLF;c:\windows\system32\drivers\pmxu sblf.sys [2007-9-13 14336] S3 PciCon;PciCon;\??\d:\pcicon.sys --> d:\PciCon.sys [?] S4 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-7-7 611664] =============== Created Last 30 ================ 2009-03-10 20:59 161,792 a------- c:\windows\SWREG.exe 2009-03-10 20:59 98,816 a------- c:\windows\sed.exe 2009-03-10 13:20 <DIR> --d----- c:\program files\EsetOnlineScanner 2009-03-09 20:38 <DIR> --d----- c:\windows\system32\XPSViewer 2009-03-09 20:36 597,504 -------- c:\windows\system32\dllcache\printfilterpipelinesv c.exe 2009-03-09 20:36 117,760 -------- c:\windows\system32\prntvpt.dll 2009-03-09 20:36 89,088 -------- c:\windows\system32\dllcache\filterpipelineprintpr oc.dll 2009-03-09 20:36 1,676,288 -------- c:\windows\system32\xpssvcs.dll 2009-03-09 20:36 1,676,288 -------- c:\windows\system32\dllcache\xpssvcs.dll 2009-03-09 20:36 575,488 -------- c:\windows\system32\xpsshhdr.dll 2009-03-09 20:36 575,488 -------- c:\windows\system32\dllcache\xpsshhdr.dll 2009-03-09 20:35 <DIR> --d----- C:\428e67a5d13529c8909bd4 2009-03-09 20:31 <DIR> --d----- c:\windows\SxsCaPendDel 2009-03-09 20:18 <DIR> --d----- c:\program files\Sun 2009-03-09 14:58 <DIR> a-dshr-- C:\cmdcons 2009-03-09 11:44 578,560 a------- c:\windows\system32\dllcache\user32.dll 2009-03-09 11:42 <DIR> --d----- c:\windows\ERUNT 2009-03-09 01:24 73,728 a------- c:\windows\system32\javacpl.cpl 2009-03-09 00:45 <DIR> --d----- c:\program files\Windows Installer Clean Up 2009-03-09 00:03 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Comodo 2009-03-09 00:03 155,384 a------- c:\windows\system32\guard32.dll 2009-03-09 00:03 110,992 a------- c:\windows\system32\drivers\cmdguard.sys 2009-03-09 00:03 24,336 a------- c:\windows\system32\drivers\cmdhlp.sys 2009-03-09 00:03 <DIR> --d----- c:\program files\COMODO 2009-03-08 16:24 24,576 a------- c:\windows\system32\userinit.exe 2009-03-08 15:38 24,576 a------- c:\windows\system32\userinit(2).exe 2009-03-05 09:42 <DIR> --d----- C:\My Music 2009-03-03 23:54 <DIR> --d----- c:\docume~1\mark\applic~1\Malwarebytes 2009-03-03 23:54 15,504 a------- c:\windows\system32\drivers\mbam.sys 2009-03-03 23:54 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys 2009-03-03 23:54 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware 2009-03-03 23:54 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-03-03 15:00 664 a------- c:\windows\system32\d3d9caps.dat 2009-03-03 14:30 <DIR> --d----- c:\windows\pss 2009-02-21 19:41 <DIR> --d----- c:\program files\GTA San Andreas 2009-02-21 19:17 <DIR> --d----- c:\program files\SystemRequirementsLab 2009-02-13 12:26 2,634 a------- c:\windows\CDPlayer.ini 2009-02-12 16:54 <DIR> --d----- c:\documents and settings\mark\.SunDownloadManager 2009-02-12 15:45 <DIR> --d----- c:\program files\mp3DirectCut 2009-02-10 16:18 90,112 a------- c:\windows\system32\QuickTimeVR.qtx 2009-02-10 16:18 57,344 a------- c:\windows\system32\QuickTime.qts 2009-02-10 16:18 <DIR> --d----- c:\program files\QuickTime Alternative 2009-02-10 14:13 <DIR> --d----- c:\program files\Ratajik Software 2009-02-10 12:22 <DIR> --d----- c:\program files\MediaMonkey 2009-02-09 14:18 401,408 a------- c:\windows\system32\nvcuvid.dll ==================== Find3M ==================== 2009-03-09 20:04 499,712 a------- c:\windows\system32\msvcp71.dll 2009-03-09 01:24 410,984 a------- c:\windows\system32\deploytk.dll 2009-02-04 21:41 325,128 a------- c:\windows\system32\drivers\avgldx86.sys 2009-02-04 21:41 10,520 a------- c:\windows\system32\avgrsstx.dll 2009-01-27 19:25 37,256 a------- c:\docume~1\mark\applic~1\GDIPFONTCACHEV1.DAT 2009-01-16 22:35 3,594,752 a------- c:\windows\system32\dllcache\mshtml.dll 2009-01-16 19:24 70,936 a------- c:\windows\system32\PhysXLoader.dll 2008-12-26 01:08 453,152 a------- c:\windows\system32\nvudisp.exe 2008-12-23 22:58 453,152 a------- c:\windows\system32\NVUNINST.EXE 2008-12-19 04:10 70,656 -------- c:\windows\system32\dllcache\ie4uinit.exe 2008-12-19 04:10 13,824 -------- c:\windows\system32\dllcache\ieudinit.exe 2008-12-19 00:25 634,024 -------- c:\windows\system32\dllcache\iexplore.exe 2008-12-19 00:23 161,792 -------- c:\windows\system32\dllcache\ieakui.dll 2008-12-11 05:57 333,952 -------- c:\windows\system32\dllcache\srv.sys 2008-08-06 09:06 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008080620080 807\index.dat ============= FINISH: 1:44:49.73 =============== UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-02-01.01) Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume2 Install Date: 9/13/2007 5:08:29 PM System Uptime: 3/10/2009 8:18:09 AM (17 hours ago) Motherboard: Dell Inc. | | 0RY007 Processor: Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz | Socket 775 | 2327/333mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 274 GiB total, 188.73 GiB free. E: is Removable F: is Removable G: is Removable H: is Removable ==== Disabled Device Manager Items ============= Class GUID: {4D36E965-E325-11CE-BFC1-08002BE10318} Description: CD-ROM Drive Device ID: IDE\CDROMPBDS_DVD+-RW_DH-16W1S___________________2D14____\5&384A886&0&0.0.0 Manufacturer: (Standard CD-ROM drives) Name: PBDS DVD+-RW DH-16W1S PNP Device ID: IDE\CDROMPBDS_DVD+-RW_DH-16W1S___________________2D14____\5&384A886&0&0.0.0 Service: cdrom ==== System Restore Points =================== RP1: 3/9/2009 6:57:04 PM - System Checkpoint RP2: 3/9/2009 7:16:21 PM - Installed Adobe Reader 7.1.0 RP3: 3/9/2009 7:17:39 PM - Installed Java(TM) 6 Update 11 RP4: 3/9/2009 7:18:07 PM - Installed OpenOffice.org Installer 1.0 RP5: 3/9/2009 7:19:29 PM - Removed J2SE Runtime Environment 5.0 Update 6 RP6: 3/9/2009 7:20:07 PM - Removed Java(TM) 6 Update 11 RP7: 3/9/2009 7:23:25 PM - Software Distribution Service 3.0 RP8: 3/9/2009 7:28:16 PM - Software Distribution Service 3.0 RP9: 3/9/2009 7:34:52 PM - Software Distribution Service 3.0 RP10: 3/10/2009 7:59:43 PM - ComboFix created restore point ==== Installed Programs ====================== Ad-Aware Adobe Flash Player 10 Plugin Adobe Flash Player ActiveX Adobe InDesign CS Adobe Photoshop 7.0 Adobe Reader 7.1.0 Attack on Pearl Harbor Demo AVG Free 8.0 Canon Camera Access Library Canon Camera Support Core Library Canon Camera Window DC_DV 5 for ZoomBrowser EX Canon G.726 WMP-Decoder Canon iP4500 series Canon iP4500 series User Registration Canon MovieEdit Task for ZoomBrowser EX Canon My Printer Canon RAW Image Task for ZoomBrowser EX Canon Utilities CameraWindow Canon Utilities CameraWindow DC Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX Canon Utilities Easy-PhotoPrint EX Canon Utilities EOS Utility Canon Utilities MyCamera Canon Utilities MyCamera DC Canon Utilities PhotoStitch Canon Utilities RemoteCapture DC Canon Utilities RemoteCapture Task for ZoomBrowser EX Canon Utilities Solution Menu Canon Utilities ZoomBrowser EX Canon ZoomBrowser EX Memory Card Utility COMODO Internet Security Company of Heroes Compatibility Pack for the 2007 Office system Condition Zero Condition Zero Deleted Scenes Conexant D850 56K V.9x DFVc Modem Dell Driver Reset Tool Dell Support Center Dell System Restore DellSupport Digital Line Detect Documentation & Support Launcher DVD Shrink 3.2 EPSON Printer Software ESET Online Scanner Exact Audio Copy 0.99pb3 EXIF Date Changer v1.1 Gallery Remote Games, Music, & Photos Launcher Google Earth Google SketchUp 6 GTA San Andreas Half-Life 2 Half-Life 2: Deathmatch High Definition Audio Driver Package - KB835221 HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) ImgBurn (Remove Only) Intel(R) Graphics Media Accelerator Driver Intel(R) PRO Network Connections Drivers Java(TM) 6 Update 12 jv16 PowerTools 1.3 Macromedia Dreamweaver MX 2004 Macromedia Extension Manager magicolor 2200 DeskLaser Malwarebytes' Anti-Malware MediaMonkey 3.0 Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office XP Professional with FrontPage Microsoft Plus! Digital Media Edition Installer Microsoft Plus! Photo Story 2 LE Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Modem Diagnostic Tool Mouse Suite for Desktop Computers Mozilla Firefox (3.0.7) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) Nero OEM Netflix Movie Viewer NetWaiting NVIDIA Drivers NVIDIA PhysX OpenOffice.org Installer 1.0 QuickTime Alternative 2.8.0 Realtek High Definition Audio Driver Sansa Updater Screen Paver Screen Saver SearchAssist Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Internet Explorer 7 (KB958215) Security Update for Windows Internet Explorer 7 (KB960714) Security Update for Windows Internet Explorer 7 (KB961260) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player 10 (KB936782) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB960715) Source SDK Source SDK Base Spybot - Search & Destroy StationRipper 2.91D Steam SyncBack System Requirements Lab Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Update for Windows XP (KB955839) Update for Windows XP (KB967715) vanBasco's Karaoke Player VideoLAN VLC media player 0.8.6c WebFldrs XP Windows Genuine Advantage Validation Tool (KB892130) Windows Installer 3.1 (KB893803) Windows Installer Clean Up Windows Internet Explorer 7 Windows Media Format 11 runtime Windows Media Player 10 Windows Media Player 11 Windows XP Service Pack 3 WinHTTrack Website Copier 3.42-2 ==== Event Viewer Messages From Past Week ======== 3/8/2009 11:55:47 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found. 3/8/2009 11:36:58 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Imapi 3/8/2009 11:24:23 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 3/8/2009 11:23:43 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046} 3/8/2009 11:22:11 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 3/8/2009 11:21:12 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AvgLdx86 AvgMfx86 Cdrom cmdGuard cmdHlp Fips Imapi intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip WS2IFSL 3/8/2009 11:21:12 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning. 3/8/2009 11:21:12 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning. 3/8/2009 11:21:12 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning. 3/8/2009 11:21:12 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning. 3/8/2009 11:20:47 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E} 3/9/2009 12:04:17 AM, error: Dhcp [1002] - The IP address lease 192.168.0.100 for the Network Card with network address 001AA08CF012 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message). 3/9/2009 10:41:23 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811} 3/9/2009 7:30:50 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x800706be: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86. 3/10/2009 8:20:08 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HTTP SSL service to connect. 3/10/2009 8:20:08 AM, error: Service Control Manager [7000] - The HTTP SSL service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. ==== End Of File =========================== |
