|
|
#11
9th Jan 2008, 13:53
| |||
| |||
| -Downloaded DSS to the desktop and ran it. here is main.txt: Deckard's System Scanner v20071014.68 Run by Administrator on 2008-01-09 14:46:22 Computer is in Normal Mode. -------------------------------------------------------------------------------- Backed up registry hives. Performed disk cleanup. -- HijackThis (run as Administrator.exe) --------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:47 PM, on 1.9.2008 Platform: Windows 2003 SP2 (WinNT 5.02.3790) MSIE: Internet Explorer v6.00 SP2 (6.00.3790.1830) Boot mode: Normal Running processes: C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files (x86)\Gizmo Project\mDNSResponder.exe C:\WINDOWS\SysWOW64\CTsvcCDA.EXE C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\WINDOWS\SysWOW64\PnkBstrA.exe C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files (x86)\Java\jre1.6.0_03\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Documents and Settings\Administrator\Desktop\dss.exe C:\PROGRA~2\TRENDM~1\HIJACK~1\Administrator.exe O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [Info Close] C:\DOCUME~1\ADMINI~1\APPLIC~1\MANAGE~1\THE CASH.exe O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files (x86)\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1172077335171 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shoc...sh/swflash.cab O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files (x86)\Gizmo Project\mDNSResponder.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing) O23 - Service: Event Log (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing) O23 - Service: Gizmo VoIP Service (Gizmo Plugin) - SIPphone, Inc. - C:\Program Files (x86)\GizmoPlugin\GizmoPlugin.exe O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing) O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\WINDOWS\system32\msdtc.exe (file missing) O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc64.exe (file missing) O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe (file missing) O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe (file missing) O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing) -- End of file - 6247 bytes -- HijackThis Fixed Entries (C:\PROGRA~2\TRENDM~1\HIJACK~1\backups\) ----------- backup-20080108-132032-417 O4 - Startup: hc_tray.lnk.disabled backup-20080108-132032-638 O4 - HKCU\..\Run: [Info Close] C:\DOCUME~1\ADMINI~1\APPLIC~1\MANAGE~1\THE CASH.exe backup-20080108-132032-720 F2 - REG:system.ini: UserInit=userinit -- File Associations ----------------------------------------------------------- .com - comfile - DefaultIcon - %SystemRoot%\SysWow64\shell32.dll,2 .cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%* -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R0 ACPI (Microsoft ACPI Driver) - c:\windows\system32\drivers\acpi.sys (file missing) R0 atapi (Standard IDE/ESDI Hard Disk Controller) - c:\windows\system32\drivers\atapi.sys (file missing) R0 crcdisk (CRC Disk Filter Driver) - c:\windows\system32\drivers\crcdisk.sys (file missing) R0 Disk (Disk Driver) - c:\windows\system32\drivers\disk.sys (file missing) R0 dmio (Logical Disk Manager Driver) - c:\windows\system32\drivers\dmio.sys (file missing) R0 dmload - c:\windows\system32\drivers\dmload.sys (file missing) R0 FltMgr - c:\windows\system32\drivers\fltmgr.sys (file missing) R0 Ftdisk (Volume Manager Driver) - c:\windows\system32\drivers\ftdisk.sys (file missing) R0 isapnp (PnP ISA/EISA Bus Driver) - c:\windows\system32\drivers\isapnp.sys (file missing) R0 KSecDD - c:\windows\system32\drivers\ksecdd.sys (file missing) R0 MountMgr (Mount Point Manager) - c:\windows\system32\drivers\mountmgr.sys (file missing) R0 Mup - c:\windows\system32\drivers\mup.sys (file missing) R0 NDIS (NDIS System Driver) - c:\windows\system32\drivers\ndis.sys (file missing) R0 nvata64 - c:\windows\system32\drivers\nvata64.sys (file missing) R0 PartMgr (Partition Manager) - c:\windows\system32\drivers\partmgr.sys (file missing) R0 PCI (PCI Bus Driver) - c:\windows\system32\drivers\pci.sys (file missing) R0 PCIIde - c:\windows\system32\drivers\pciide.sys (file missing) R0 sptd - c:\windows\system32\drivers\sptd.sys (file missing) R0 sr (System Restore Filter Driver) - c:\windows\system32\drivers\sr.sys (file missing) R0 VolSnap (Storage volumes) - c:\windows\system32\drivers\volsnap.sys (file missing) R0 WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - c:\windows\system32\drivers\wudfpf.sys (file missing) R1 AFD - c:\windows\system32\drivers\afd.sys (file missing) R1 aswTdi (avast! Network Shield Support) - c:\windows\system32\drivers\aswtdi.sys (file missing) R1 Beep - c:\windows\system32\drivers\beep.sys (file missing) R1 Cdrom (CD-ROM Driver) - c:\windows\system32\drivers\cdrom.sys (file missing) R1 Fips - c:\windows\system32\drivers\fips.sys (file missing) R1 imapi (CD-Burning Filter Driver) - c:\windows\system32\drivers\imapi.sys (file missing) R1 IPSec (IPSEC driver) - c:\windows\system32\drivers\ipsec.sys (file missing) R1 Kbdclass (Keyboard Class Driver) - c:\windows\system32\drivers\kbdclass.sys (file missing) R1 kbdhid (Keyboard HID Driver) - c:\windows\system32\drivers\kbdhid.sys (file missing) R1 mnmdd - c:\windows\system32\drivers\mnmdd.sys (file missing) R1 Mouclass (Mouse Class Driver) - c:\windows\system32\drivers\mouclass.sys (file missing) R1 MRxSmb - c:\windows\system32\drivers\mrxsmb.sys (file missing) R1 Msfs - c:\windows\system32\drivers\msfs.sys (file missing) R1 NetBIOS (NetBIOS Interface) - c:\windows\system32\drivers\netbios.sys (file missing) R1 NetBT (NetBios over Tcpip) - c:\windows\system32\drivers\netbt.sys (file missing) R1 Npfs - c:\windows\system32\drivers\npfs.sys (file missing) R1 Null - c:\windows\system32\drivers\null.sys (file missing) R1 RasAcd (Remote Access Auto Connection Driver) - c:\windows\system32\drivers\rasacd.sys (file missing) R1 Rdbss - c:\windows\system32\drivers\rdbss.sys (file missing) R1 RDPCDD - c:\windows\system32\drivers\rdpcdd.sys (file missing) R1 redbook (Digital CD Audio Playback Filter Driver) - c:\windows\system32\drivers\redbook.sys (file missing) R1 Serial (Serial port driver) - c:\windows\system32\drivers\serial.sys (file missing) R1 Tcpip (TCP/IP Protocol Driver) - c:\windows\system32\drivers\tcpip.sys (file missing) R1 TermDD (Terminal Device Driver) - c:\windows\system32\drivers\termdd.sys (file missing) R1 VgaSave (VGA Display Controller.) - c:\windows\system32\drivers\vga.sys (file missing) R2 aswMonFlt - c:\windows\system32\drivers\aswmonflt.sys (file missing) R2 CdaC15BA - c:\windows\system32\drivers\cdac15ba.sys (file missing) R2 CdaD10BA - c:\windows\system32\drivers\cdad10ba.sys (file missing) R2 irda (IrDA Protocol) - c:\windows\system32\drivers\irda.sys (file missing) R2 Secdrv (Security Driver) - c:\windows\system32\drivers\secdrv.sys (file missing) R3 aswRdr - c:\windows\system32\drivers\aswrdr.sys (file missing) R3 audstub (Audio Stub Driver) - c:\windows\system32\drivers\audstub.sys (file missing) R3 Gpc (Generic Packet Classifier) - c:\windows\system32\drivers\msgpc.sys (file missing) R3 HDAudBus (Microsoft UAA Bus Driver for High Definition Audio) - c:\windows\system32\drivers\hdaudbus.sys (file missing) R3 HidUsb (Microsoft HID Class Driver) - c:\windows\system32\drivers\hidusb.sys (file missing) R3 HTTP - c:\windows\system32\drivers\http.sys (file missing) R3 IntcAzAudAddService (Service for Realtek HD Audio (WDM)) - c:\windows\system32\drivers\rtkhda64.sys (file missing) R3 IpNat (IP Network Address Translator) - c:\windows\system32\drivers\ipnat.sys (file missing) R3 IRENUM (IR Enumerator Service) - c:\windows\system32\drivers\irenum.sys (file missing) R3 irsir (Microsoft Serial Infrared Driver) - c:\windows\system32\drivers\irsir.sys (file missing) R3 kmixer (Microsoft Kernel Wave Audio Mixer) - c:\windows\system32\drivers\kmixer.sys (file missing) R3 ksthunk (Kernel Streaming WOW64 Thunk Service) - c:\windows\system32\drivers\ksthunk.sys (file missing) R3 mouhid (Mouse HID Driver) - c:\windows\system32\drivers\mouhid.sys (file missing) R3 MRxDAV (WebDav Client Redirector) - c:\windows\system32\drivers\mrxdav.sys (file missing) R3 mssmbios (Microsoft System Management BIOS Driver) - c:\windows\system32\drivers\mssmbios.sys (file missing) R3 NdisTapi (Remote Access NDIS TAPI Driver) - c:\windows\system32\drivers\ndistapi.sys (file missing) R3 Ndisuio (NDIS Usermode I/O Protocol) - c:\windows\system32\drivers\ndisuio.sys (file missing) R3 NdisWan (Remote Access NDIS WAN Driver) - c:\windows\system32\drivers\ndiswan.sys (file missing) R3 NDProxy (NDIS Proxy) - c:\windows\system32\drivers\ndproxy.sys (file missing) R3 nv - c:\windows\system32\drivers\nv4_mini.sys (file missing) R3 NVENETFD (NVIDIA nForce Networking Controller Driver) - c:\windows\system32\drivers\nvenetfd.sys (file missing) R3 nvnetbus (NVIDIA Network Bus Enumerator) - c:\windows\system32\drivers\nvnetbus.sys (file missing) R3 Parport (Parallel port driver) - c:\windows\system32\drivers\parport.sys (file missing) R3 Point64 (Microsoft IntelliPoint Filter Driver) - c:\windows\system32\drivers\point64.sys (file missing) R3 PptpMiniport (WAN Miniport (PPTP)) - c:\windows\system32\drivers\raspptp.sys (file missing) R3 Processor (Processor Driver) - c:\windows\system32\drivers\processr.sys (file missing) R3 PSched (QoS Packet Scheduler) - c:\windows\system32\drivers\psched.sys (file missing) R3 Ptilink (Direct Parallel Link Driver) - c:\windows\system32\drivers\ptilink.sys (file missing) R3 Rasirda (WAN Miniport (IrDA)) - c:\windows\system32\drivers\rasirda.sys (file missing) R3 Rasl2tp (WAN Miniport (L2TP)) - c:\windows\system32\drivers\rasl2tp.sys (file missing) R3 RasPppoe (Remote Access PPPOE Driver) - c:\windows\system32\drivers\raspppoe.sys (file missing) R3 Raspti (Direct Parallel) - c:\windows\system32\drivers\raspti.sys (file missing) R3 rdpdr (Terminal Server Device Redirector Driver) - c:\windows\system32\drivers\rdpdr.sys (file missing) R3 serenum (Serenum Filter Driver) - c:\windows\system32\drivers\serenum.sys (file missing) R3 Srv - c:\windows\system32\drivers\srv.sys (file missing) R3 swenum (Software Bus Driver) - c:\windows\system32\drivers\swenum.sys (file missing) R3 sysaudio (Microsoft Kernel System Audio Device) - c:\windows\system32\drivers\sysaudio.sys (file missing) R3 Update (Microcode Update Driver) - c:\windows\system32\drivers\update.sys (file missing) R3 usbccgp (Microsoft USB Generic Parent Driver) - c:\windows\system32\drivers\usbccgp.sys (file missing) R3 usbehci (Microsoft USB 2.0 Enhanced Host Controller Miniport Driver) - c:\windows\system32\drivers\usbehci.sys (file missing) R3 usbhub (USB2 Enabled Hub) - c:\windows\system32\drivers\usbhub.sys (file missing) R3 usbohci (Microsoft USB Open Host Controller Miniport Driver) - c:\windows\system32\drivers\usbohci.sys (file missing) R3 Wanarp (Remote Access IP ARP Driver) - c:\windows\system32\drivers\wanarp.sys (file missing) R3 wdmaud (Microsoft WINMM WDM Audio Compatibility Driver) - c:\windows\system32\drivers\wdmaud.sys (file missing) R4 Cdfs - c:\windows\system32\drivers\cdfs.sys (file missing) R4 Ntfs - c:\windows\system32\drivers\ntfs.sys (file missing) S1 AmdK8 (AMD Processor Driver) - c:\windows\system32\drivers\amdk8.sys (file missing) S1 Fdc - c:\windows\system32\drivers\fdc.sys (file missing) S1 Flpydisk - c:\windows\system32\drivers\flpydisk.sys (file missing) S1 i8042prt (i8042 Keyboard and PS/2 Mouse Port Driver) - c:\windows\system32\drivers\i8042prt.sys (file missing) S1 SASDIFSV - c:\program files (x86)\superantispyware\sasdifsv.sys S1 Sfloppy - c:\windows\system32\drivers\sfloppy.sys (file missing) S2 V7 - c:\windows\system32\drivers\v7.sys <Not Verified; IBM Corporation; IBM V7 Driver for Windows NT/2000> S3 aec (Microsoft Kernel Acoustic Echo Canceller) - c:\windows\system32\drivers\aec.sys (file missing) S3 AsyncMac (RAS Asynchronous Media Driver) - c:\windows\system32\drivers\asyncmac.sys (file missing) S3 Atmarpc (ATM ARP Client Protocol) - c:\windows\system32\drivers\atmarpc.sys (file missing) S3 Ip6Fw (IPv6 Windows Firewall Driver) - c:\windows\system32\drivers\ip6fw.sys (file missing) S3 IpFilterDriver (IP Traffic Filter Driver) - c:\windows\system32\drivers\ipfltdrv.sys (file missing) S3 IpInIp (IP in IP Tunnel Driver) - c:\windows\system32\drivers\ipinip.sys (file missing) S3 Iviaspi (IVI ASPI Shell) - c:\windows\system32\drivers\iviaspi.sys <Not Verified; InterVideo, Inc.; InterVideo ASPI Shell> S3 Modem - c:\windows\system32\drivers\modem.sys (file missing) S3 MSKSSRV (Microsoft Streaming Service Proxy) - c:\windows\system32\drivers\mskssrv.sys (file missing) S3 MSPCLOCK (Microsoft Streaming Clock Proxy) - c:\windows\system32\drivers\mspclock.sys (file missing) S3 MSPQM (Microsoft Streaming Quality Manager Proxy) - c:\windows\system32\drivers\mspqm.sys (file missing) S3 RDPWD - c:\windows\system32\drivers\rdpwd.sys (file missing) S3 SASENUM - c:\program files (x86)\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware> S3 splitter (Microsoft Kernel Audio Splitter) - c:\windows\system32\drivers\splitter.sys (file missing) S3 swmidi (Microsoft Kernel GS Wavetable Synthesizer) - c:\windows\system32\drivers\swmidi.sys (file missing) S3 TDPIPE - c:\windows\system32\drivers\tdpipe.sys (file missing) S3 TDTCP - c:\windows\system32\drivers\tdtcp.sys (file missing) S3 usbscan (USB Scanner Driver) - c:\windows\system32\drivers\usbscan.sys (file missing) S3 USBSTOR (USB Mass Storage Driver) - c:\windows\system32\drivers\usbstor.sys (file missing) S3 vga - c:\windows\system32\drivers\vgapnp.sys (file missing) S3 WpdUsb - c:\windows\system32\drivers\wpdusb.sys (file missing) S3 WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - c:\windows\system32\drivers\wudfrd.sys (file missing) S4 ACPIEC - c:\windows\system32\drivers\acpiec.sys (file missing) S4 dmboot - c:\windows\system32\drivers\dmboot.sys (file missing) S4 Fastfat - c:\windows\system32\drivers\fastfat.sys (file missing) S4 Pcmcia - c:\windows\system32\drivers\pcmcia.sys (file missing) S4 Udfs - c:\windows\system32\drivers\udfs.sys (file missing) -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 Bonjour Service - c:\program files (x86)\gizmo project\mdnsresponder.exe R2 Eventlog (Event Log) - c:\windows\system32\services.exe (file missing) R2 NVSvc (NVIDIA Display Driver Service) - c:\windows\system32\nvsvc64.exe (file missing) R2 PlugPlay (Plug and Play) - c:\windows\system32\services.exe (file missing) R2 PolicyAgent (IPSEC Services) - c:\windows\system32\lsass.exe (file missing) R2 ProtectedStorage (Protected Storage) - c:\windows\system32\lsass.exe (file missing) R2 SamSs (Security Accounts Manager) - c:\windows\system32\lsass.exe (file missing) R2 StarWindServiceAE (StarWind AE Service) - c:\program files (x86)\alcohol soft\alcohol 120\starwind\starwindserviceae.exe R3 HTTPFilter (HTTP SSL) - c:\windows\system32\lsass.exe (file missing) S2 Gizmo Plugin (Gizmo VoIP Service) - "c:\program files (x86)\gizmoplugin\gizmoplugin.exe" <Not Verified; SIPphone, Inc.; Gizmo Plugin VOIP Service> S3 dmadmin (Logical Disk Manager Administrative Service) - c:\windows\system32\dmadmin.exe /com (file missing) S3 ImapiService (IMAPI CD-Burning COM Service) - c:\windows\system32\imapi.exe (file missing) S3 MSDTC (Distributed Transaction Coordinator) - c:\windows\system32\msdtc.exe (file missing) S3 Netlogon (Net Logon) - c:\windows\system32\lsass.exe (file missing) S3 NtLmSsp (NT LM Security Support Provider) - c:\windows\system32\lsass.exe (file missing) S3 RDSessMgr (Remote Desktop Help Session Manager) - c:\windows\system32\sessmgr.exe (file missing) S3 vds (Virtual Disk Service) - c:\windows\system32\vds.exe (file missing) S3 VSS (Volume Shadow Copy) - c:\windows\system32\vssvc.exe (file missing) S3 WmiApSrv (WMI Performance Adapter) - c:\windows\system32\wbem\wmiapsrv.exe (file missing) S4 TlntSvr (Telnet) - c:\windows\system32\tlntsvr.exe (file missing) -- Device Manager: Disabled ---------------------------------------------------- No disabled devices found. -- Scheduled Tasks ------------------------------------------------------------- 2008-01-09 14:00:00 282 --ah----- C:\WINDOWS\Tasks\9DFA304CA205A9A4.job 2008-01-04 17:26:00 296 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job -- Files created between 2007-12-09 and 2008-01-09 ----------------------------- 2008-01-08 13:32:05 0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2008-01-08 13:32:01 0 d-------- C:\Program Files (x86)\SUPERAntiSpyware 2008-01-08 13:32:01 0 d-------- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com 2008-01-08 13:28:52 0 dr-h----- C:\Documents and Settings\Administrator\Recent 2008-01-08 13:24:09 0 d-------- C:\Program Files (x86)\CCleaner 2008-01-08 11:56:07 0 d-------- C:\Program Files (x86)\Trend Micro 2008-01-07 20:46:09 0 d-------- C:\Documents and Settings\All Users\Application Data\Cast ping base frag 2008-01-07 20:45:53 0 d-------- C:\Documents and Settings\Administrator\Application Data\manager copy hold 2007-12-17 16:28:34 0 d-------- C:\Program Files (x86)\EA GAMES -- Find3M Report --------------------------------------------------------------- 2008-01-08 13:31:49 0 d-------- C:\Program Files (x86)\Common Files\Wise Installation Wizard 2008-01-08 09:57:29 0 d-------- C:\Documents and Settings\Administrator\Application Data\Azureus 2008-01-03 13:22:56 0 d-------- C:\Program Files (x86)\Microsoft Games 2007-12-27 11:42:26 0 d-------- C:\Program Files (x86)\Azureus 2007-12-17 16:28:34 0 d--h----- C:\Program Files (x86)\InstallShield Installation Information 2007-11-10 14:07:30 0 d-------- C:\Program Files (x86)\Other Games 2007-11-02 23:00:42 2721 --a------ C:\WINDOWS\mozver.dat 2007-10-13 18:08:22 370 --a------ C:\WINDOWS\system32\vfw_32.reg -- Registry Dump --------------------------------------------------------------- -- Hosts ----------------------------------------------------------------------- 127.0.0.1 serial.alcohol-soft.com 127.0.0.1 www.alcohol-soft.com 127.0.0.1 images.alcohol-soft.com 127.0.0.1 trial.alcohol-soft.com 127.0.0.1 alcohol-soft.com 127.0.0.1 bin.errorprotector.com ## added by CiD 127.0.0.1 br.errorsafe.com ## added by CiD 127.0.0.1 br.winantivirus.com ## added by CiD 127.0.0.1 br.winfixer.com ## added by CiD 127.0.0.1 cdn.drivecleaner.com ## added by CiD 65 more entries in hosts file. -- End of Deckard's System Scanner: finished at 2008-01-09 14:48:02 ------------ ------------------------End of main.txt--------------------- extra.txt --->next post |
|
#12
9th Jan 2008, 13:55
| |||
| |||
| From DSS: here is extra.txt: Deckard's System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft(R) Windows(R) XP Professional x64 Edition (build 3790) SP 2.0 Architecture: X64; Language: English CPU 0: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ CPU 1: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ Percentage of Memory in Use: 20% Physical Memory (total/avail): 3071.25 MiB / 2427.19 MiB Pagefile Memory (total/avail): 4417.29 MiB / 3969.86 MiB Virtual Memory (total/avail): 4095.88 MiB / 3953.64 MiB C: is Fixed (NTFS) - 50 GiB total, 8.53 GiB free. D: is CDROM (No Media) E: is CDROM (Unformatted) F: is Fixed (NTFS) - 182.88 GiB total, 116.6 GiB free. G: is CDROM (No Media) \\.\PHYSICALDRIVE0 - ST3250820AS - 232.88 GiB - 2 partitions \PARTITION0 (bootable) - Installable File System - 50 GiB - C: \PARTITION1 - Installable File System - 182.88 GiB - F: -- Security Center ------------------------------------------------------------- Windows Internal Firewall is enabled. [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files (x86)\\NovaLogic\\Delta Force Xtreme Demo\\DFXDemo.exe"="C:\\Program Files (x86)\\NovaLogic\\Delta Force Xtreme Demo\\DFXDemo.exe:*:Enabled:DFXDemo" "C:\\Program Files (x86)\\NovaLogic\\Comanche 4\\c4.exe"="C:\\Program Files (x86)\\NovaLogic\\Comanche 4\\c4.exe:*:Enabled:c4" "C:\\Program Files (x86)\\Valve\\Steam\\SteamApps\\User\\Half-Life 2\\hl2.exe"="C:\\Program Files (x86)\\Valve\\Steam\\SteamApps\\User\\Half-Life 2\\hl2.exe:*:Disabled:hl2" "C:\\Program Files (x86)\\Azureus\\Azureus.exe"="C:\\Program Files (x86)\\Azureus\\Azureus.exe:*:Enabled:Azureus" "C:\\Program Files (x86)\\Valve\\Steam\\SteamApps\\User\\Counter-Strike Source\\hl2.exe"="C:\\Program Files (x86)\\Valve\\Steam\\SteamApps\\User\\Counter-Strike Source\\hl2.exe:*:Disabled:hl2" "C:\\Program Files (x86)\\AIM\\aim.exe"="C:\\Program Files (x86)\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger" "C:\\Program Files (x86)\\NovaLogic\\Delta Force Xtreme Demo\\Delta Force - Xtreme.exe"="C:\\Program Files (x86)\\NovaLogic\\Delta Force Xtreme Demo\\Delta Force - Xtreme.exe:*:Enabled:Delta Force - Xtreme" "C:\\Program Files (x86)\\Xfire\\xfire.exe"="C:\\Program Files (x86)\\Xfire\\xfire.exe:*:Enabled:Xfire" "C:\\Program Files (x86)\\NovaLogic\\Joint Operations Demo\\UPDATE.EXE"="C:\\Program Files (x86)\\NovaLogic\\Joint Operations Demo\\UPDATE.EXE:*:Enabled:UPDATE" "C:\\Program Files (x86)\\NovaLogic\\Joint Operations Demo\\jodemo.exe"="C:\\Program Files (x86)\\NovaLogic\\Joint Operations Demo\\jodemo.exe:*:Enabled:jodemo" "C:\\Program Files (x86)\\NovaLogic\\Delta Force Xtreme\\dfx.exe"="C:\\Program Files (x86)\\NovaLogic\\Delta Force Xtreme\\dfx.exe:*:Enabled:dfx" "C:\\Program Files (x86)\\Microsoft Games\\Combat Flight Simulator 3\\cfs3.exe"="C:\\Program Files (x86)\\Microsoft Games\\Combat Flight Simulator 3\\cfs3.exe:*:Enabled:Microsoft® Combat Flight Simulator 3" "C:\\Program Files (x86)\\Kuma Games\\KumaClient.exe"="C:\\Program Files (x86)\\Kuma Games\\KumaClient.exe:*:Enabled:KumaClient" "C:\\Program Files (x86)\\Gizmo Project\\mDNSResponder.exe"="C:\\Program Files (x86)\\Gizmo Project\\mDNSResponder.exe:*:Enabled:Bonjour" "C:\\Program Files (x86)\\Gizmo Project\\Gizmo.exe"="C:\\Program Files (x86)\\Gizmo Project\\Gizmo.exe:*:Enabled:Gizmo Project" "C:\\Program Files (x86)\\Microsoft Games\\FS2000\\FS2000.ICD"="C:\\Program Files (x86)\\Microsoft Games\\FS2000\\FS2000.ICD:*:Enabled:Flight Simulator 2000 Module" "C:\\Program Files (x86)\\Other Games\\Insane\\Game.exe"="C:\\Program Files (x86)\\Other Games\\Insane\\Game.exe:*:Enabled:INSANE" "C:\\WINDOWS\\SysWOW64\\dplaysvr.exe"="C:\\WINDOWS\\SysWOW64\\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper" "C:\\Program Files (x86)\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"="C:\\Program Files (x86)\\EA GAMES\\Battlefield 2 Demo\\BF2.exe:*:Enabled:Battlefield 2" "C:\\Program Files (x86)\\Microsoft Games\\Halo\\halo.exe"="C:\\Program Files (x86)\\Microsoft Games\\Halo\\halo.exe:*:Enabled:Halo" -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Administrator\Application Data CommonProgramFiles=C:\Program Files (x86)\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=KRENX2 ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Administrator LOGONSERVER=\\KRENX2 NUMBER_OF_PROCESSORS=2 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_ARCHITEW6432=AMD64 PROCESSOR_IDENTIFIER=AMD64 Family 15 Model 75 Stepping 2, AuthenticAMD PROCESSOR_LEVEL=15 PROCESSOR_REVISION=4b02 ProgramFiles=C:\Program Files (x86) ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp TMP=C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp USERDOMAIN=KRENX2 USERNAME=Administrator USERPROFILE=C:\Documents and Settings\Administrator windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Administrator (admin) -- Add/Remove Programs --------------------------------------------------------- --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{836612F0-1571-4C65-A4B7-58A39AA578EE}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{836612F0-1571-4C65-A4B7-58A39AA578EE}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9104A09A-EC83-11D8-8469-00D0B726B56E}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9104A09A-EC83-11D8-8469-00D0B726B56E}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9744AE38-1CC6-414F-96CE-0643AEE30A9B}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9744AE38-1CC6-414F-96CE-0643AEE30A9B}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9AB14DF5-3B04-4E3B-9969-695DBA7F2008}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9AB14DF5-3B04-4E3B-9969-695DBA7F2008}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9E54F486-CD4A-44A5-B041-16D4E1E56A53}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{9E54F486-CD4A-44A5-B041-16D4E1E56A53}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CB99E420-8071-48F9-9567-4A53BE7569C4}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CB99E420-8071-48F9-9567-4A53BE7569C4}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D42EFA6C-0553-45F7-AD03-6D36207CA6D4}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D42EFA6C-0553-45F7-AD03-6D36207CA6D4}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D524239C-FD5C-4183-A49C-7930915A9C0A}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D524239C-FD5C-4183-A49C-7930915A9C0A}\setup.exe" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{DAAC5938-8026-4D0C-A476-D1954917B7F5}\SETUP.EXE" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{DAAC5938-8026-4D0C-A476-D1954917B7F5}\SETUP.EXE" -l0x9 /remove --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{DD2D9012-E5A1-4717-8EE9-8DB3F36E2F8C}\setup.exe" -l0x9 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{DD2D9012-E5A1-4717-8EE9-8DB3F36E2F8C}\setup.exe" -l0x9 /remove 3DMark06 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -l0x9 -removeonly Ad-Aware SE Personal --> MsiExec.exe /X{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747} Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock Adobe Flash Player Plugin --> C:\WINDOWS\SysWOW64\Macromed\Flash\uninstall_plugin.exe Adobe Reader 8.1.1 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81000000003} Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log AGEIA PhysX v2.4.4 --> "C:\Program Files (x86)\AGEIA Technologies\uninstall.exe" AOL Instant Messenger --> C:\Program Files (x86)\AIM\uninstll.exe -LOG= C:\Program Files (x86)\AIM\install.log -OEM= Apple Software Update --> MsiExec.exe /I{A260B422-70E1-41E2-957D-F76FA21266D5} ArcSoft MediaConverter 2 --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{CFF08881-43E4-4082-91C4-0E17F82E849D}\setup.exe" -l0x9 avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup Azureus --> C:\Program Files (x86)\Azureus\Uninstall.exe Battlefield 2(TM) Demo --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{8BECF123-B0EF-4E51-B7F3-923EFE15CC4A}\setup.exe" -l0x9 -removeonly Best Buy Rhapsody --> C:\PROGRA~2\BESTBU~1\Unwise32.exe /A C:\PROGRA~2\BESTBU~1\install.log CCleaner (remove only) --> "C:\Program Files (x86)\CCleaner\uninst.exe" CiD Help --> C:\DOCUME~1\ADMINI~1\APPLIC~1\MANAGE~1\THE CASH.exe -uninstall Comanche 4 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files (x86)\NovaLogic\Comanche 4\Uninst.isu" Core Center --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files (x86)\MSI\Core Center\Uninst.isu" Creative Jukebox Driver --> C:\Program Files (x86)\Creative\Jukebox 3 Drivers\DrvUnins.exe /s Creative MediaSource --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}\SETUP.EXE" -l0x9 /remove Creative Removable Disk Manager --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{57FA4E0F-82C9-417D-87BC-0186D6CB7A44}\setup.exe" -l0x9 /remove Creative System Information --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{63A317D0-60A6-43FC-848A-9FE4A53B29CE}\setup.exe" -l0x9 /remove Creative Zen Micro --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D944236D-7992-41D6-8257-930B5832F1CC}\SETUP.EXE" -l0x9 /remove Delta Force: Xtreme --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{961C4925-5B53-4127-969D-1CACF2426C05}\setup.exe" -l0x9 Delta Force: Xtreme - Demo --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{31777F40-593D-4331-A236-D2580CD319BE}\setup.exe" -l0x9 DirectDVD 6 HD --> C:\PROGRA~2\ORIONS~1\UNWISE.EXE C:\PROGRA~2\ORIONS~1\INSTALL.LOG DivX Web Player --> C:\Program Files (x86)\DivX\DivXWebPlayerUninstall.exe /PLUGIN Fraps --> "C:\Fraps\uninstall.exe" Gizmo Plugin --> C:\Program Files (x86)\GizmoPlugin\uninstall.exe Gizmo Project 3.1 --> C:\Program Files (x86)\Gizmo Project\uninst.exe Google Earth --> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72} Greetings Workshop --> C:\Program Files (x86)\Greetings Workshop\SETUP\setup.exe GTA San Andreas --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe" -l0x9 -removeonly HijackThis 2.0.2 --> "C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe" /uninstall J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110} Java(TM) 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030} Java(TM) SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Microsoft .NET Framework 3.0 --> c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe Microsoft .NET Framework 3.0 --> MsiExec.exe /X{340DFCEA-8855-4722-99B3-1BBAC5DDC088} Microsoft Combat Flight Simulator 3.0 --> "C:\Program Files (x86)\Microsoft Games\Combat Flight Simulator 3\UNINSTAL.EXE" /runtemp /addremove Microsoft Flight Simulator 2000 --> "C:\Program Files (x86)\Microsoft Games\FS2000\UNINSTAL.EXE" /runtemp /uninstall Microsoft Flight Simulator X --> C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{9527A496-5DF9-412A-ADC7-168BA5379CA6} Microsoft Halo --> "C:\Program Files (x86)\Microsoft Games\Halo\UNINSTAL.EXE" /runtemp /addremove Microsoft Office 2000 Premium --> MsiExec.exe /I{00000409-78E1-11D2-B60F-006097C998E7} Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Microsoft Windows XP Video Decoder Checkup Utility --> RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\DECCHECK.inf,Uninstall Mozilla Firefox (2.0.0.11) --> C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB936181) --> MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 Parser and SDK --> MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC} Musicnotes Player V1.22.3 --> "C:\Program Files (x86)\Musicnotes\Player\unins000.exe" Orion Studios DDV --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Mediamatics\DVDExpress\Uninst.isu" Real Alternative 1.52 --> "C:\Program Files (x86)\Real Alternative\unins000.exe" Realtek High Definition Audio Driver --> RtlUpd64.exe -r -m Rhapsody Player Engine --> MsiExec.exe /I{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31} Rhapsody Player Engine --> MsiExec.exe /I{6A136B9A-1895-436F-83F8-30D9C68BB6EA} Samsung USB Driver (MCCI 4.16) --> C:\Program Files (x86)\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{1485ABFA-12D7-4107-9148-54EE30CDBA67} Sansa Media Converter --> "C:\Program Files (x86)\InstallShield Installation Information\{FC053571-8507-44E4-8B6D-AACEAB8CA57C}\setup.exe" --u:{FC053571-8507-44E4-8B6D-AACEAB8CA57C} Sansa Updater --> C:\Program Files (x86)\InstallShield Installation Information\{E2D7E05E-C8C7-45F4-8D89-D6696075E0B7}\setup.exe -runfromtemp -l0x0009 -removeonly Security Update for Microsoft .NET Framework 2.0 (x64) (KB928365) --> C:\WINDOWS\SysWOW64\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {B6EC01E7-431D-4D29-B9D4-E1D74CAF0AB0} Security Update for Windows XP (KB923789) --> C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf Spybot - Search & Destroy 1.4 --> "C:\Program Files (x86)\Spybot - Search & Destroy\unins000.exe" Steam(TM) --> MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3} SUPERAntiSpyware Free Edition --> MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} System Requirements Lab --> C:\Program Files (x86)\Common Files\SystemRequirementsLab\Uninstall.exe Tony Hawk's Pro Skater 2 --> C:\PROGRA~2\ACTIVI~1\THPS2\UNINST~1\UNINST~1.EXE C:\Program Files (x86)\Activision\THPS2\uninstall\Tony Hawk's Pro Skater 2.log WinRAR archiver --> C:\Program Files (x86)\WinRAR\uninstall.exe Xfire (remove only) --> "C:\Program Files (x86)\Xfire\uninst.exe" Xingtone Ringtone Maker --> RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{625304B0-2976-473B-AD81-5CA376093F03}\setup.exe" -l0x9 -removeonly Xvid 1.1.2 final uninstall --> "C:\Program Files (x86)\Xvid\unins000.exe" -- Application Event Log ------------------------------------------------------- Event Record #/Type1915 / Error Event Submitted/Written: 01/08/2008 10:19:43 PM Event ID/Source: 1000 / Application Error Event Description: Faulting application firefox.exe, version 1.8.20071.12718, faulting module npswf32.dll, version 9.0.47.0, fault address 0x000a3bac. Processing media-specific event for [firefox.exe!ws!] Event Record #/Type1864 / Error Event Submitted/Written: 01/08/2008 10:33:47 AM Event ID/Source: 8211 / VSS Event Description: WMI Writer{a6ad56c2-b509-4e6c-bb19-49d8f43532f0} Event Record #/Type1861 / Error Event Submitted/Written: 01/07/2008 09:47:27 PM Event ID/Source: 1000 / Application Error Event Description: Faulting application corecenter.exe, version 2.0.2.2, faulting module corecenter.exe, version 2.0.2.2, fault address 0x00017f0b. Processing media-specific event for [corecenter.exe!ws!] Event Record #/Type1852 / Error Event Submitted/Written: 01/04/2008 08:52:48 PM Event ID/Source: 1002 / Application Hang Event Description: Hanging application wmplayer.exe, version 11.0.5721.5145, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Event Record #/Type1851 / Error Event Submitted/Written: 01/03/2008 09:43:02 PM Event ID/Source: 1002 / Application Hang Event Description: Hanging application wmplayer.exe, version 11.0.5721.5145, hang module hungapp, version 0.0.0.0, hang address 0x00000000. -- Security Event Log ---------------------------------------------------------- No Errors/Warnings found. -- System Event Log ------------------------------------------------------------ Event Record #/Type10525 / Error Event Submitted/Written: 01/09/2008 10:04:26 AM Event ID/Source: 7034 / Service Control Manager Event Description: The Gizmo VoIP Service service terminated unexpectedly. It has done this 1 time(s). Event Record #/Type10514 / Error Event Submitted/Written: 01/09/2008 01:42:21 AM Event ID/Source: 7000 / Service Control Manager Event Description: The SASENUM service failed to start due to the following error: %%1275 Event Record #/Type10508 / Error Event Submitted/Written: 01/09/2008 01:42:21 AM Event ID/Source: 7000 / Service Control Manager Event Description: The SASDIFSV service failed to start due to the following error: %%1275 Event Record #/Type10503 / Error Event Submitted/Written: 01/09/2008 01:42:21 AM Event ID/Source: 7000 / Service Control Manager Event Description: The V7 service failed to start due to the following error: %%1275 Event Record #/Type10502 / Error Event Submitted/Written: 01/09/2008 01:42:19 AM Event ID/Source: 1060 / Application Popup Event Description: \??\C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. -- End of Deckard's System Scanner: finished at 2008-01-09 14:48:02 ------------ ----------------------end of extra.txt---------------------- |
|
#13
9th Jan 2008, 14:43
| |||
| |||
| You got the Avast installed  Go to add/remove programs and uninstall CiD Help J2SE Runtime Environment 5.0 Update 11 Java(TM) 6 Update 2 Java(TM) SE Runtime Environment 6 Update 1 Don't uninstall Java(TM) 6 Update 3 Reboot the computer. Post a new Hijackthis log.
__________________  |
|
#14
9th Jan 2008, 16:19
| |||
| |||
| haha nice smiley. lol. you might want to help me out with how to configure avast, to make sure it detects things and all of that. I removed: CiD Help J2SE Runtime Environment 5.0 Update 11 Java(TM) 6 Update 2 Java(TM) SE Runtime Environment 6 Update 1 -Then I restarted the computer -Ran sniper.exe (HijackThis) -here is the new HJT log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:14 PM, on 1.9.2008 Platform: Windows 2003 SP2 (WinNT 5.02.3790) MSIE: Internet Explorer v6.00 SP2 (6.00.3790.1830) Boot mode: Normal Running processes: C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files (x86)\Gizmo Project\mDNSResponder.exe C:\WINDOWS\SysWOW64\CTsvcCDA.EXE C:\Program Files (x86)\GizmoPlugin\GizmoPlugin.exe C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\WINDOWS\SysWOW64\PnkBstrA.exe C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files (x86)\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files (x86)\Trend Micro\HijackThis\sniper.exe O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [Info Close] C:\DOCUME~1\ADMINI~1\APPLIC~1\MANAGE~1\THE CASH.exe O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_03\bin\npjpi160_03.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_03\bin\npjpi160_03.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files (x86)\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1172077335171 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shoc...sh/swflash.cab O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files (x86)\Gizmo Project\mDNSResponder.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing) O23 - Service: Event Log (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing) O23 - Service: Gizmo VoIP Service (Gizmo Plugin) - SIPphone, Inc. - C:\Program Files (x86)\GizmoPlugin\GizmoPlugin.exe O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing) O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\WINDOWS\system32\msdtc.exe (file missing) O23 - Service: Net Logon (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc64.exe (file missing) O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe (file missing) O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Virtual Disk Service (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe (file missing) O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing) -- End of file - 6267 bytes hopefully things look good!  have a great day! |
|
#15
9th Jan 2008, 16:47
| |||
| |||
| Yea, I have smileys for all occasions....... I will get something together on the Avast. It usually installs to the correct settings so it should be good to go. If you choose to have scheduled scans then adjustments will need to be done. Just one file that seems to be a problem. This is a lot of instructions, but is actually just a few steps. Please download OTMoveIt2 by OldTimer OTMoveIt2.exe and save it to your desktop. Double click OTMoveIt2.exe to launch it. Be sure there is a check mark next to Unregister Dll's and OCX's
Next post OTMoveIt log
__________________ |
|
#16
9th Jan 2008, 18:49
| |||
| |||
| I have not set avast to do any sort of checks, but let me know what you recommend...you seem to have a wealth of knowledge. It would be nice though to know what avast does, and if it checks programs im running and is you know, constantly checking so I would have some background on it. I would also like to know what you recommend for a good scan schedule. But put that on the back burner. Anyway.... -Downloaded OTMoveIt2 to desktop and ran it -copied C:\DOCUME~1\ADMINI~1\APPLIC~1\MANAGE~1\THE CASH.exe filepath to the Paste List of Files/Folders to be moved window -after pressing the 'MoveIt' button a box came up and told me an error occured when trying to move the file here is the log on the Results Box of OTMoveIt2 program: File/Folder C:\DOCUME~1\ADMINI~1\APPLIC~1\MANAGE~1\THE CASH.exe not found. OTMoveIt2 v1.0.5 log created on 01092008_193406 -I also went to that location in my computer and did not find the file "THE CASH.exe" -It did not require a restart and I simply closed out OTMoveIt2 program. Hopefully not finding the file is a good sign, but I'll leave that up to you. Take your time. Thanks for being very kind. |
|
#17
9th Jan 2008, 19:14
| |||
| |||
| It looks like the file is gone, so there should be no worries. Time to cleanup the mess and secure the work you did. Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if launched accidentally. Please download OTMoveIt2 by OldTimer OTMoveIt2.exe and place it on your desktop. 1. Double click OTMoveIt2.exe to launch it. 2. Click on the CleanUp! button. 3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access. 4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
Next. Clear your infected system restore points and establish a new clean restore point:
Check out this post for tips and free tools to keep you safe in the future. Also see this post for free cleaning/maintenance tools to help keep your computer running smooth. Setting Avast to do scheduled scans.
"C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "C:Program Files" E:Downloads - this will scan the contents of the Program Files folder on the C: drive and the Downloads folder on the E: drive, including all subfolders (Note the first path is in quotes due to the space in the folder name "Program Files")
More information on configuring the settings for the best protection can be found HERE If you need anything else just let us know.
__________________ |
|
#18
9th Jan 2008, 20:45
| |||
| |||
| [IMG]file:///C:/DOCUME%7E1/ADMINI%7E1/LOCALS%7E1/Temp/moz-screenshot.jpg[/IMG]okay....so -I downloaded OTMoveIt2.exe and ran it. -It prompted me to restart the computer after it finished, so I did. -When computer came back I created a new restore point and cleared the old restore points. -Everything was going fine with setting up the Task Scheduler until I got an error in the advanced options. -Also, when trying to run the program from Scheduled Tasks (by right clicking and clicking run), the computer did nothing. the error read: " An error has occured while attempting to set task account information. The specific error is: 0x80070095: Access is denied. You do not have permission to perform the requested operation. " -To clarify: > I am logged in as the administrator > There is no password set and no other accounts on the computer > The computer name is "KRENX2" > I am pretty sure I followed your instructions step by step I have a screen shot of the error if you would like it, but I cannot figure out a way to send it to you or how to post in the "Gallery" that I've seen on this forum. I am not all that worried about scheduling avast! to run, do other more important things first, you have helped me so much already. I have bookmarked the links above. What I've read so far they seem to be very helpful and I will most likely pass them on as well as use them in the future. Thank you so much for all of your help. You are such a nice person for helping me out and taking the time to do it right with detail and accuracy (and a ton of knowledge!). I would not have been able to do any of this without you. I really appreciate all that you did and will probably continue to do. Have a great week. Thanks again. |
|
#19
9th Jan 2008, 21:02
| |||
| |||
| I have never tried to set the Avast for an automated scan, I just run it whenever I think it may be a good time (or when I think my daughter has downloaded something bad lol). So I am not sure on the error. You have to attach pictures to a post. That or host them online then use the [img] tags. How To Attach Items To A Post No problem on the help. It's what we do. If anything else comes up don't hesitate to come back and let us know. You have a great week also!!!!!!! Safe surfing............. 
__________________ |
|
#20
9th Jan 2008, 21:36
| |||
| |||
| The scheduled task error is below, if you care to see it. I don't expect you to come up with a fix for it, I will just do as you do, scan when i think its right and when I feel either I or someone in my family has got something undesired...lol I read your "how to add attachments to your post" post....it was very helpful. You have an excellent way to doing step by step instructions and knowing what problems people usually run into when following them, it makes it really easy and comforting to know you know what you are doing. You are very modest, thats awesome. I hope you had a great holiday season! With such help like this I will probably be on this forum more often. It was truly a pleasure to be helped by you. Thanks once again. I'll tell all of my friends "The Computer Forums.com...great help with a smiley!  " |
 |
 |
Similar Threads | ||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Winzix Virus Delete/Removal | Insaneman1731 | Virus, Spyware & Security | 23 | 6th Dec 2009 10:36 |
| Trojan Winzix and Consequences. | ddd13 | Virus, Spyware & Security | 13 | 20th Feb 2009 18:42 |
| Winzix adware iexplore.exe issue. Please help!! | winzix moron | Virus, Spyware & Security | 35 | 18th Dec 2008 16:47 |
| Remove Winzix | Azycool | Virus, Spyware & Security | 1 | 19th Feb 2008 19:26 |
| AVG cant remove virus | TomIsFat | Virus, Spyware & Security | 6 | 30th Dec 2007 16:11 |
| Thread Tools | |
| |
