Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest
I have a virus
-
21-07-2011 11:52pm#1As the title says I have a virus.
PC is Dell Dimension 2400
OS is Windows XP Home SP3
I ran updates and scans with everything I had: AVG, Adaware, Spybots, EMCO, Malwarebytes and Super-antispyware. Adaware was the only one that found anything and I thought that was problem solved. Not so.
So I tried installing PC Tools Antivirus as that has resolved issues for me in the past. It just seemed to make matters worse, particularly as it installed Browser Defender Tool without asking and Add/ Remove Programs won't delete it.
I tried running the steps in the I have a virus thread but not all of the steps worked. I did manage to get the log files which I'll post below.
In the meantime I read some of the stickies here and the consensus seems to be that Microsoft Security Essentials is the way to go and that AVG isn't what it used to be. So I followed the instructions for installing MSE including deleting all my existing anti-virus software only to find that MSE can't complete it's install. And this is the same for just about everything I've tried since. I get runtime errors or messages saying windows explorer has to close.
I ran an online scan using Trend which found nothing and I managed to install Panda but again it also found nothing.
I don't have a clue where I am at this stage and I would really appreciate some help in solving this.
Here are the log files firstly from yesterday and again from just now:DDS (Ver_2011-07-14.01) - NTFS_x86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_26
Run by Owner at 22:32:05 on 2011-07-19
Microsoft Windows XP Home Edition 5.1.2600.3.1252.353.1033.18.1015.345 [GMT 1:00]
.
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ================
.
\??\C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\PC Tools Security\BDT\FGuard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
\??\C:\PROGRA~1\AVG\AVG10\avgrsx.exe
\??\C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.expatshield.com/g/?c=h
uURLSearchHooks: PC Tools Browser Guard: {472734EA-242A-422b-ADF8-83D1E48CC825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - c:\program files\avg\avg10\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: {AA58ED58-01DD-4d91-8333-CF10577473F7} - <orphaned>
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: PC Tools Browser Guard: {472734EA-242A-422B-ADF8-83D1E48CC825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
TB: PC Tools Browser Guard: {472734EA-242A-422B-ADF8-83D1E48CC825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - <orphaned>
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [PCTools FGuard] c:\program files\pc tools security\bdt\FGuard.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\office~1.lnk - c:\program files\microsoft office\office\OSA.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1295893113083
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: NameServer = 89.101.160.4 89.101.160.5
TCP: Interfaces\{69483A58-0085-49EC-8312-6BAE553AD016} : DHCPNameServer = 89.101.160.4 89.101.160.5
Handler: ipp - <Clsid value has no data>
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Handler: msdaipp - <Clsid value has no data>
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - <orphaned>
mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "c:\program files\outlook express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
mASetup: {7790769C-0471-11d2-AF11-00C04FA35D02} - "c:\program files\outlook express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
IFEO: Your Image File Name Here without a path - ntsd -d
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\owner\application data\mozilla\firefox\profiles\52tqz8gr.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.boards.ie/?filter=all
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 32592]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-1-25 64288]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34896]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 297168]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-2-17 66632]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-4-18 7398752]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2011-2-8 269520]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-1-24 366640]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 134480]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 24144]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 27216]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-1-24 22712]
S1 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\drivers\pctsd.sys --> c:\windows\system32\drivers\PCTSD.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-4-25 136176]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys --> c:\windows\system32\drivers\ew_hwusbdev.sys [?]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys --> c:\windows\system32\drivers\ewusbnet.sys [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-4-25 136176]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys --> c:\windows\system32\drivers\ew_jubusenum.sys [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2010-8-12 2151640]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\lavasoft\ad-aware\kernexplorer.sys [2010-8-12 15232]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-2-17 12872]
.
=============== Created Last 30 ================
.
2011-07-19 19:24:41 32768 ----a-w- c:\windows\system32\drivers\taphss.sys
2011-07-19 19:24:41
d
w- c:\program files\Eusing Free Registry Cleaner
2011-07-19 15:49:30
d
w- C:\FU_Backup
2011-07-19 15:49:30
d
w- c:\documents and settings\owner\application data\CheeseSoft
2011-07-19 15:49:21
d
w- c:\program files\FinalUninstaller
2011-07-19 10:25:17 767952 ----a-w- c:\windows\BDTSupport.dll
2011-07-19 10:25:16 2000848 ----a-w- c:\windows\PCTBDCore.dll
2011-07-19 10:25:16 1533904 ----a-w- c:\windows\PCTBDRes.dll
2011-07-19 10:25:16 149456 ----a-w- c:\windows\SGDetectionTool.dll
2011-07-14 18:39:25
d
w- C:\Expat Shield
2011-07-09 22:06:42
d
w- c:\documents and settings\owner\local settings\application data\Freemake
2011-07-09 21:41:53
d
w- c:\program files\Freemake
2011-07-09 21:39:35
d
w- c:\documents and settings\owner\application data\AnvSoft
2011-07-09 20:59:03
d
w- c:\documents and settings\owner\local settings\application data\Wondershare
2011-07-09 20:59:00
d
w- c:\program files\common files\Wondershare
2011-07-09 20:58:36 496640 ----a-w- c:\windows\system32\xvid.ax
2011-07-09 20:58:35 892928 ----a-w- c:\windows\system32\iconv.dll
2011-07-09 20:58:35 675840 ----a-w- c:\windows\system32\ac3filter.ax
2011-07-09 20:58:31
d
w- c:\program files\Wondershare
2011-07-09 20:51:06
d
w- c:\documents and settings\all users\application data\AVS4YOU
2011-07-09 20:51:01
d
w- c:\documents and settings\owner\application data\AVS4YOU
2011-07-09 20:49:19 10833920 ----a-w- c:\windows\system32\libmfxsw32.dll
2011-07-09 20:49:16 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2011-07-09 20:49:16 10915840 ----a-w- c:\windows\system32\libmfxhw32.dll
2011-07-09 20:49:15 24576 ----a-w- c:\windows\system32\msxml3a.dll
2011-07-09 20:48:51
d
w- c:\program files\AVS4YOU
2011-07-09 20:48:41
d
w- c:\program files\common files\AVSMedia
2011-07-06 14:30:00 719872 ----a-w- c:\windows\system32\devil.dll
2011-07-06 14:30:00 70656 ----a-w- c:\windows\system32\yv12vfw.dll
2011-07-06 14:30:00 70656 ----a-w- c:\windows\system32\i420vfw.dll
2011-07-06 14:30:00 369152 ----a-w- c:\windows\system32\avisynth.dll
2011-07-06 14:30:00 32256 ----a-w- c:\windows\system32\AVSredirect.dll
2011-07-06 14:30:00
d
w- c:\program files\AviSynth 2.5
2011-07-06 14:24:41
d
w- c:\program files\eRightSoft
2011-06-21 19:34:15 2106216 ----a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll
2011-06-21 19:34:14 1998168 ----a-w- c:\program files\mozilla firefox\d3dx9_43.dll
.
==================== Find3M ====================
.
2011-07-19 14:53:09 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-07-09 21:07:05 9200
w- c:\windows\system32\drivers\cdralw2k.sys
2011-07-09 21:07:05 9072
w- c:\windows\system32\drivers\cdr4_xp.sys
2011-07-09 21:07:05 45200
w- c:\windows\system32\drivers\PxHelp20.sys
2011-07-09 21:06:50 59888
w- c:\windows\system32\pxwma.dll
2011-07-06 18:52:42 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 18:52:42 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-20 10:39:59 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-14 23:03:31 499712 ----a-w- c:\windows\system32\msvcp71.dll
2011-06-14 23:03:31 348160 ----a-w- c:\windows\system32\msvcr71.dll
2011-06-02 14:02:05 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-05-04 03:52:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-04 01:25:49 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19:43 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-26 11:07:50 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-04-26 11:07:50 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-04-25 15:51:58 832512 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 15:51:57 78336
w- c:\windows\system32\ieencode.dll
2011-04-25 15:51:57 1830912
w- c:\windows\system32\inetcpl.cpl
2011-04-25 15:51:57 17408 ----a-w- c:\windows\system32\corpol.dll
2011-04-25 12:01:21 389120
w- c:\windows\system32\html.iec
2011-04-21 13:37:43 105472 ----a-w- c:\windows\system32\drivers\mup.sys
.
============= FINISH: 22:32:24.46 ===============.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-07-14.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 24/01/2011 17:32:56
System Uptime: 19/07/2011 22:11:52 (0 hours ago)
.
Motherboard: Dell Computer Corp. | | 0G1548
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2790/533mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 59 GiB total, 15.638 GiB free.
is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP73: 21/04/2011 14:23:58 - System Checkpoint
RP74: 22/04/2011 14:43:43 - System Checkpoint
RP75: 23/04/2011 23:42:14 - System Checkpoint
RP76: 25/04/2011 12:46:55 - System Checkpoint
RP77: 27/04/2011 19:40:06 - Software Distribution Service 3.0
RP78: 28/04/2011 20:18:51 - System Checkpoint
RP79: 30/04/2011 10:21:27 - System Checkpoint
RP80: 02/05/2011 14:43:56 - System Checkpoint
RP81: 08/05/2011 15:28:19 - System Checkpoint
RP82: 09/05/2011 21:48:56 - System Checkpoint
RP83: 11/05/2011 16:57:43 - Software Distribution Service 3.0
RP84: 12/05/2011 14:29:13 - Printer Driver HP Officejet 4300 series fax Installed
RP85: 12/05/2011 15:09:46 - Removed HP Photosmart Essential
RP86: 13/05/2011 15:56:47 - System Checkpoint
RP87: 13/05/2011 16:44:52 - Software Distribution Service 3.0
RP88: 14/05/2011 10:32:12 - Software Distribution Service 3.0
RP89: 16/05/2011 13:48:49 - System Checkpoint
RP90: 18/05/2011 18:19:02 - System Checkpoint
.
==== Installed Programs ======================
.
4300
4300_Help
4300Trb
Abexo Free Registry Cleaner
Ad-Aware
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.5
Adobe Shockwave Player 11.5
AiO_Scan_CDA
AiOSoftwareNPI
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG 2011
Bonjour
Broadcom 440x 10/100 Integrated Controller
CCleaner
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
Dell ResourceCD
Fax_CDA
FLV Player 2.0 (build 25)
Google Earth Plug-in
Google Toolbar for Internet Explorer
Google Update Helper
Hotfix for Windows XP (KB976002-v5)
HP PSC & OfficeJet 6.1.A
HP Update
Image Resizer Powertoy for Windows XP
Intel(R) 537EP V9x DF PCI Modem
Intel(R) Extreme Graphics Driver
iTunes
Java Auto Updater
Java(TM) 6 Update 26
Malware Destroyer
Malwarebytes' Anti-Malware version 1.51.1.1800
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office 97, Professional Edition
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works 7.0
Mozilla Firefox 5.0 (x86 en-US)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NewCopy_CDA
ProductContextNPI
QuickTime
Readme
RealNetworks - Microsoft Visual C++ 2005 Runtime
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
RealUpgrade 1.1
Scan
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB2416400)
Security Update for Windows Internet Explorer 7 (KB2482017)
Security Update for Windows Internet Explorer 7 (KB2497640)
Security Update for Windows Internet Explorer 7 (KB2530548)
Security Update for Windows Internet Explorer 7 (KB2544521)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows XP (KB923789)
SoundMAX
Spybot - Search & Destroy
SpywareBlaster 4.4
SUPERAntiSpyware Free Edition
VideoLAN VLC media player 0.8.6i
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
.
==== Event Viewer Messages From Past Week ========
.
19/07/2011 16:14:02, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
19/07/2011 16:13:06, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
19/07/2011 16:11:53, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
19/07/2011 16:11:50, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
17/07/2011 19:42:16, error: Dhcp [1002] - The IP address lease 10.201.48.54 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.203.47.254 (The DHCP Server sent a DHCPNACK message).
17/07/2011 14:38:50, error: Dhcp [1002] - The IP address lease 10.201.24.57 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.201.55.254 (The DHCP Server sent a DHCPNACK message).
15/07/2011 14:04:35, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 000F1F549173. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
14/07/2011 20:57:53, error: Dhcp [1002] - The IP address lease 10.201.24.32 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.201.31.254 (The DHCP Server sent a DHCPNACK message).
14/07/2011 20:07:35, error: Dhcp [1002] - The IP address lease 10.201.48.7 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.201.31.254 (The DHCP Server sent a DHCPNACK message).
14/07/2011 20:01:51, error: Dhcp [1002] - The IP address lease 10.204.24.111 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.201.55.254 (The DHCP Server sent a DHCPNACK message).
14/07/2011 19:55:17, error: Dhcp [1002] - The IP address lease 10.204.56.47 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.204.31.254 (The DHCP Server sent a DHCPNACK message).
14/07/2011 19:53:02, error: Dhcp [1002] - The IP address lease 10.204.64.31 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.204.63.254 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================DDS (Ver_2011-07-14.01) - NTFS_x86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_26
Run by Owner at 0:39:05 on 2011-07-22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.353.1033.18.1015.460 [GMT 1:00]
.
AV: Panda Antivirus Pro 2012 *Enabled/Updated* {EEE2D94A-D4C1-421A-AB2C-2CE8FE51747A}
.
============== Running Processes ================
.
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\PC Tools Security\BDT\BDTUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\PC Tools Security\BDT\FGuard.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.expatshield.com/g/?c=h
uURLSearchHooks: PC Tools Browser Guard: {472734EA-242A-422b-ADF8-83D1E48CC825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: PC Tools Browser Guard BHO: {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: {AA58ED58-01DD-4d91-8333-CF10577473F7} - <orphaned>
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: PC Tools Browser Guard: {472734EA-242A-422B-ADF8-83D1E48CC825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
TB: PC Tools Browser Guard: {472734EA-242A-422B-ADF8-83D1E48CC825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - <orphaned>
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [PCTools FGuard] c:\program files\pc tools security\bdt\FGuard.exe
mRun: [APVXDWIN] "c:\program files\panda security\panda antivirus pro 2012\APVXDWIN.EXE" /s
mRun: [SCANINICIO] "c:\program files\panda security\panda antivirus pro 2012\Inicio.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\office~1.lnk - c:\program files\microsoft office\office\OSA.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: c:\windows\system32\ESPFSPI.DLL
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1295893113083
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: NameServer = 89.101.160.4 89.101.160.5
TCP: Interfaces\{69483A58-0085-49EC-8312-6BAE553AD016} : DHCPNameServer = 89.101.160.4 89.101.160.5
Handler: ipp - <Clsid value has no data>
Handler: msdaipp - <Clsid value has no data>
Notify: avldr - avldr.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "c:\program files\outlook express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
mASetup: {7790769C-0471-11d2-AF11-00C04FA35D02} - "c:\program files\outlook express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
IFEO: Your Image File Name Here without a path - ntsd -d
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\owner\application data\mozilla\firefox\profiles\52tqz8gr.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.boards.ie/?filter=all
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-1-25 64288]
R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2011-7-21 26696]
R0 XPacket;XFilter Packet;c:\windows\system32\xpacket.sys [2004-4-1 44671]
R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2011-7-21 37448]
R2 AmFSM;AmFSM;c:\windows\system32\drivers\amm8651.sys [2011-7-21 59080]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\pc tools security\bdt\BDTUpdateService.exe [2011-7-21 337872]
R2 Panda Software Controller;Panda Software Controller;c:\program files\panda security\panda antivirus pro 2012\PsCtrlS.exe [2011-7-21 173312]
R2 PAVFNSVR;Panda Function Service;c:\program files\panda security\panda antivirus pro 2012\PavFnSvr.exe [2011-7-21 202048]
R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2011-7-21 163848]
R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda security\pavshld\PavPrSrv.exe [2011-7-21 62768]
R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda security\panda antivirus pro 2012\pavsrvx86.exe [2011-7-21 314176]
R2 PskSvcRetail;Panda PSK service;c:\program files\panda security\panda antivirus pro 2012\psksvc.exe [2011-7-21 28992]
R3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys --> c:\windows\system32\drivers\av5flt.sys [?]
R3 PavSRK.sys;PavSRK.sys;\??\c:\windows\system32\pavsrk.sys --> c:\windows\system32\PavSRK.sys [?]
R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\pavtpk.sys --> c:\windows\system32\PavTPK.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-4-25 136176]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys --> c:\windows\system32\drivers\ew_hwusbdev.sys [?]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys --> c:\windows\system32\drivers\ewusbnet.sys [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-4-25 136176]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys --> c:\windows\system32\drivers\ew_jubusenum.sys [?]
.
=============== File Associations ===============
.
FileExt: .vbe: VBEFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %*
FileExt: .vbs: VBSFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %*
FileExt: .js: JSFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %*
FileExt: .jse: JSEFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %*
FileExt: .wsf: WSFFile=c:\progra~1\pandas~1\pandaa~1\PAVSCRIP.EXE "%1" %*
.
=============== Created Last 30 ================
.
2011-07-21 22:47:03 1060864 ----a-w- c:\windows\system32\MFC71.dll
2011-07-21 22:20:05
d
w- c:\documents and settings\owner\local settings\application data\Threat Expert
2011-07-21 21:22:07
d
w- c:\documents and settings\owner\local settings\application data\Panda Security
2011-07-21 21:19:22 753664 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iKernel.dll
2011-07-21 21:19:22 69714 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\ctor.dll
2011-07-21 21:19:22 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\DotNetInstaller.exe
2011-07-21 21:19:22 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll
2011-07-21 21:19:22 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iscript.dll
2011-07-21 21:19:22 184320 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iuser.dll
2011-07-21 21:19:19 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\setup.dll
2011-07-21 21:19:19 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iGdi.dll
2011-07-21 21:19:16 37448 ----a-w- c:\windows\system32\drivers\ShlDrv51.sys
2011-07-21 21:19:16 163848 ----a-w- c:\windows\system32\drivers\PavProc.sys
2011-07-21 21:19:16
d
w- c:\program files\common files\Panda Security
2011-07-21 21:05:51
d
w- c:\program files\PC Tools Security
2011-07-21 20:59:59
d
w- c:\program files\Microsoft Security Client
2011-07-21 20:46:37
d
w- c:\program files\Enigma Software Group
2011-07-19 19:24:41 32768 ----a-w- c:\windows\system32\drivers\taphss.sys
2011-07-19 19:24:41
d
w- c:\program files\Eusing Free Registry Cleaner
2011-07-19 15:49:30
d
w- C:\FU_Backup
2011-07-19 15:49:30
d
w- c:\documents and settings\owner\application data\CheeseSoft
2011-07-19 15:49:21
d
w- c:\program files\FinalUninstaller
2011-07-19 10:25:17 767952 ----a-w- c:\windows\BDTSupport.dll
2011-07-19 10:25:16 2078672 ----a-w- c:\windows\PCTBDCore.dll
2011-07-19 10:25:16 1533904 ----a-w- c:\windows\PCTBDRes.dll
2011-07-19 10:25:16 149456 ----a-w- c:\windows\SGDetectionTool.dll
2011-07-14 18:39:25
d
w- C:\Expat Shield
2011-07-09 22:06:42
d
w- c:\documents and settings\owner\local settings\application data\Freemake
2011-07-09 21:39:35
d
w- c:\documents and settings\owner\application data\AnvSoft
2011-07-09 20:59:03
d
w- c:\documents and settings\owner\local settings\application data\Wondershare
2011-07-09 20:59:00
d
w- c:\program files\common files\Wondershare
2011-07-09 20:58:36 496640 ----a-w- c:\windows\system32\xvid.ax
2011-07-09 20:58:35 892928 ----a-w- c:\windows\system32\iconv.dll
2011-07-09 20:58:35 675840 ----a-w- c:\windows\system32\ac3filter.ax
2011-07-09 20:58:31
d
w- c:\program files\Wondershare
2011-07-09 20:51:06
d
w- c:\documents and settings\all users\application data\AVS4YOU
2011-07-09 20:51:01
d
w- c:\documents and settings\owner\application data\AVS4YOU
2011-07-09 20:49:19 10833920 ----a-w- c:\windows\system32\libmfxsw32.dll
2011-07-09 20:49:16 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
2011-07-09 20:49:16 10915840 ----a-w- c:\windows\system32\libmfxhw32.dll
2011-07-09 20:49:15 24576 ----a-w- c:\windows\system32\msxml3a.dll
2011-07-06 14:30:00 719872 ----a-w- c:\windows\system32\devil.dll
2011-07-06 14:30:00 70656 ----a-w- c:\windows\system32\yv12vfw.dll
2011-07-06 14:30:00 70656 ----a-w- c:\windows\system32\i420vfw.dll
2011-07-06 14:30:00 369152 ----a-w- c:\windows\system32\avisynth.dll
2011-07-06 14:30:00 32256 ----a-w- c:\windows\system32\AVSredirect.dll
.
==================== Find3M ====================
.
2011-07-19 14:53:09 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-07-09 21:07:05 9200
w- c:\windows\system32\drivers\cdralw2k.sys
2011-07-09 21:07:05 9072
w- c:\windows\system32\drivers\cdr4_xp.sys
2011-07-09 21:07:05 45200
w- c:\windows\system32\drivers\PxHelp20.sys
2011-07-09 21:06:50 59888
w- c:\windows\system32\pxwma.dll
2011-06-20 10:39:59 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-14 23:03:31 499712 ----a-w- c:\windows\system32\msvcp71.dll
2011-06-14 23:03:31 348160 ----a-w- c:\windows\system32\msvcr71.dll
2011-06-02 14:02:05 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-05-04 03:52:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-04 01:25:49 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19:43 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-26 11:07:50 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-04-26 11:07:50 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-04-25 15:51:58 832512 ----a-w- c:\windows\system32\wininet.dll
2011-04-25 15:51:57 78336
w- c:\windows\system32\ieencode.dll
2011-04-25 15:51:57 1830912
w- c:\windows\system32\inetcpl.cpl
2011-04-25 15:51:57 17408 ----a-w- c:\windows\system32\corpol.dll
2011-04-25 12:01:21 389120
w- c:\windows\system32\html.iec
.
============= FINISH: 0:41:48.51 ===============.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-07-14.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 24/01/2011 17:32:56
System Uptime: 22/07/2011 00:16:01 (0 hours ago)
.
Motherboard: Dell Computer Corp. | | 0G1548
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2790/533mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 59 GiB total, 16.066 GiB free. is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
4300
4300_Help
4300Trb
Abexo Free Registry Cleaner
Ad-Aware
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.5
Adobe Shockwave Player 11.5
AiO_Scan_CDA
AiOSoftwareNPI
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Bonjour
Broadcom 440x 10/100 Integrated Controller
Browser Defender 3.0
CCleaner
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
Dell ResourceCD
EnigmaFireWall
Fax_CDA
FLV Player 2.0 (build 25)
Google Earth Plug-in
Google Toolbar for Internet Explorer
Google Update Helper
Hotfix for Windows XP (KB976002-v5)
HP PSC & OfficeJet 6.1.A
HP Update
Image Resizer Powertoy for Windows XP
Intel(R) 537EP V9x DF PCI Modem
Intel(R) Extreme Graphics Driver
iTunes
Java Auto Updater
Java(TM) 6 Update 26
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office 97, Professional Edition
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works 7.0
Mozilla Firefox 5.0 (x86 en-US)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NewCopy_CDA
Panda Antivirus Pro 2012
Panda Secure Vault 5
ProductContextNPI
QuickTime
Readme
RealNetworks - Microsoft Visual C++ 2005 Runtime
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
RealUpgrade 1.1
Scan
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB2416400)
Security Update for Windows Internet Explorer 7 (KB2482017)
Security Update for Windows Internet Explorer 7 (KB2497640)
Security Update for Windows Internet Explorer 7 (KB2530548)
Security Update for Windows Internet Explorer 7 (KB2544521)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows XP (KB923789)
SoundMAX
VideoLAN VLC media player 0.8.6i
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
.
==== Event Viewer Messages From Past Week ========
.
19/07/2011 16:14:02, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
19/07/2011 16:13:06, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
19/07/2011 16:11:53, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
19/07/2011 16:11:50, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
17/07/2011 19:42:16, error: Dhcp [1002] - The IP address lease 10.201.48.54 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.203.47.254 (The DHCP Server sent a DHCPNACK message).
17/07/2011 14:38:50, error: Dhcp [1002] - The IP address lease 10.201.24.57 for the Network Card with network address 00FF41CC1CE8 has been denied by the DHCP server 10.201.55.254 (The DHCP Server sent a DHCPNACK message).
15/07/2011 14:04:35, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 000F1F549173. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
.
==== End Of File ===========================Genealogy Forum Mod
0
Comments
-
-
-
-
-
-
Advertisement
-
-
-
-
-
-
Advertisement
-
-
-
-
Advertisement