What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] The Following is my ''LOG'' TRYING TO

54 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi there this is my log a little help PLEASE would be good CHeers >>>> Platform:Windows Vista SP1[WinNT 6.00.1905] MSIE:INTERNET EXPLORER V [8.00.6001.18702]Boot mode:Normal Running Processes: C:\Win\Explo,EXE C:\Win\Syst32\Dwm.exe C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernal\DMS\PCMMediaSharing.exe C:\Acer\Empowering Technology\SysMonitor C:\Acer\Empowering Technology\eDSLoader.exe C:\Acer\WR_PopUp.exe C:\Program Files\Common Files\AcerSoft\Connection Service\Bin\ACDaemon.exe C:\Win\System32\igfxtray.exe C:\Win\System32\hkcmd.exe C:\Win\System32\igfxpers.exe C:\Program Files\Kontik\KHost.exe C:\Program Files\Adobe\Reader9.0_si.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Google\Quick searchBox.exe C:\Program Files\ThreatFire\TFTray.exe C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe C:\Program Files\Sana Security\Primary Response Identity Protection\Agent\Bin\SanaSafeConnect.exe C:\Program Files\Yahoo!\common\YMailAdvisor.exe C:\Program Files\ParentoLogic\Anti-Virus PLUS\Parento_AV.EXE C:\Win\System32\igfxsrvc.exe C:\Win\System32\wermgr.exe C:\Program Files\Sana Security\Primary Response Identity Protection Agent \Bin\SanaMonitor.exe C:\Program Files\Common Files\AcerSoft\Connection Service\Bin\ArcCon.ac C:\Win\system32\WerFault.exe C:\Program Files\Common Files\Trend Micro\HijackThis\HijackThis.exe C:\Win\system32\SearchFilterHost.exe C:\Win\system32\notepad.exe RO-HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName= 02-BHO: & yAHOO! toolbar Helper-{02478D38-C3F9-4efb-9B51-7695ECA05670}-C:\Program Files\Yahoo!\Companion\iNSTALLS\cpn1\yt.dll 02-BHO: AcrolIEHelperStub-{18DF081C-EAD-4283-A596-FA578C2EBDC3}-C\Program Files\Common Files\Adobe\acrobat\ActiveX\AcroIEHelperShim.dll 02-BHO: Spybot-S&D; IE Protection-{53707962-6F74-2D53-2644=206D7942484F}-c\pROG fILE\sPYBOT-search & DESTROY\SDHelper.dll 02-BHO:(no name)-{5C255C8A-E604-49b4- 9D64-9098857 1CECB}-(no file) 02-BHO:Search Helper-{6EBF7485-159F-4bff-A14f-B9E3AAC4465B}-C Prog File\Microsoft\Search Enhasement Pack\Search Helper\SEPsearchhelperie.dll 02-BHO:(no name)-{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}-(no file) 02-BHO:Windows Live Sign in Helper-{9030D464-4C02-4ABF-8ECC-5164760863C6-C:\Prog File\Common File\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 02-BHO:Google Toolbar Helper-{AA58ED58-01DD-4d91=8333-CF10577473F}-C:\Prog File\Google\Google Toolbar\Google Toolbar.dll 02-BHO:Google Toolbar Notifier BHO-{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}-C\Prog File\GoogleToolbar Notifier\5.1.1309.15642\swg.dll 02-BHO:Google Dictionary Compression sdch-{C84D72FE-E1D-4195-BB24-76C02E2E7C4E}-C\Prog File\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll 02-BHO:NitroPDFBHO Class-{CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54}-(no file) 02-BHO:Java™Plug-in 2 SSV Helper-{DBC844-A445-435b-BC74-9C25C1C588A9}-C\Prog File\Java\jre6\bin\jp2ssv.dll 02-BHO:Windows Live Toolbar Helper-{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}-C\pROG fILE\WINDOWS lIVE\tOOLBAR\WITCORE.DLL 02-BHO:Search Assistant-{F0626A63-410B-45E2-99A1-3F2475B2D695}-C\Prog File\SGPSA\BHO.dll 02-BHO:XBTBPos00-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}-C\Prog File\Fast Browser Search\IE\FBStoolbar.dll 02-BHO:SingleInstance Class-{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}- C\pROG File\Yahoo\Companion\Instaulls\cpn1\YTSingleinstance.dll 03-Toolbar:Acer eDataSecurity Management-{5CBE3B7C-1E47-477e-A7DD-369DB0476E29}-C\Windows\system32\eDStoobar.dll 03-Toolbar:Yahoo1 Toolbar-{EF99BD32-C1FB-11D2-892F-0090271D4F88}-C\Prog File\Yahoo!\Companion\Installs\cpn1\yt.dll 03-Toolbar:ITunes Class-{DC0C2640-1415-4644-875C-6F4D769839BA}-(NO FILE) 03-Toolbar:ITunesAdmin Class-{20ADDA11-8287-44D0-8C63-27CDA87ACC46}-C\Prog File\iTunesAdmin.dll 03-Toolbar:ITunesAdminAudible Class-{6c2589c3-96f8-4863-A511-9C33EB2C7E2A}-C\Prog File\ITunesAdmin.dll 03-Toolbar:ITunesAdminEnableAutoRun Class-{B8DF592B-DE05-49f5-BB21-084F548F12A9}-C\Prog File iTUNESaDMIN.dll 03-Toolbar:ITunesAdminRepairIPodSW Class-{62A560B8-09DB-4cc6-AE1B-9D8F7ADDB8F3}-C\Prog File\iTunesAdmin.dill 03-Toolbar:ITunesAdmin ParentalControls Class-{08A6AF6A-8FF2-4a3b-BECF-C2FAC8630BBF}-C\Prog File\ItUNESaDMIN.dll 03-Toolbar:(no name)-{50A48915-ADC1-41144-91FE-5E28B4926BD0}-(no file) 03-Toolbar:Google Toolbar-{2318C2B1-4965-11d4-9B 18-009027A5CD4F}-C:\Prog File\Google Toolbar.dll 03-Toolbar:& Windows Live Toolbar-{21FA44EF-376D-4D53-9B0F-8A89D3229068}-C:\Prog File Windows Live \Toolbar\witcore.dll 04-HKLM\.\Run:{Windows Defender}%prog Files%Windows Defender\MSASCui.exe-hide 04-HKLM\.\Run:{RtHDVCpl}RtHDVCpl.exe 04-HKLM\.\Run:{PCMMediaSharing}C\Prog File\Acer Arcade Live\Acer HomeMedia Connect\kERNAL\DMS\PCMMEDIASharing.exe 04-HKLM\.\Run:{Acer Empowering Technology Monitor} C:\Acer\Empowering Technology\SysMonitor:exe 04-HKLM\.\Run:{eDataSecurity Loader}C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe 04-HKLM\.\Run:{NMSSupport}''C:\Prog Files\Common Files\Intel\IntelDH\NMS\Support\InteLHCTAgent.exe"/startup 04-HKLM\.\Run:{CCUTRAYICON} FactoryMode 04-HKLM\.\Run:{WarReg_Pop Up}C:\Acer\WR_PopUp\WarReg_PopUp.exe 04-HKLM\.\Run:{ArcSoft Connection Service}C:\Prog Files\Common Files\Arcsoft\Connection Service\Bin\ACDaemon.exe 04-HKLM\.\Run:{lgfxTray}C:\Windows\System32\igfxtray.exe 04-HKLM\.\Run:{HotKeysCmds}C:\wINDOWS\sYSTEM32\HKCMD.exe 04-HKLM\.\Run:{Persistance}C:\Windows\System32igfxpers.exe 04-HKLM\.\Run:{Skytel}skytel.exe 04-HKLM\.\Run:{4oD}"c:\pROG fILE\Kontiki\KHost.exe"-all 04-HKLM\.\Run:{Adobe Reader Speed Launcher}"C:\Prog File\Adobe\Reader9.0_sl.exe 04-HKLM\.\Run:{SunJavaUpdateSched}"c:\Prog File\Java\jre6\bin\jusched.exe" 04-HKLM\.\Run:{Google Quick Search Box}"C:\pROG fILE\gOOGLE\Quick Search Box\Google.exe/autorun 04-HKLM\.\Run:{TreatFire}C:\Prog File\ThreatFire\TFTray.exe 04-HKLM\.\Run:{QuickTime Task}"C\pROG fILE\QTTask.exe"-atboottime 04-HKLM\.\Run:{iTunesHelper}"C:\Prog Files\iTunesHelper.exe" 04-HKLM\.\Run:{vspdfprsrv.exe}"C:\Prog Files\Visage\PDF Printer\vspdfprsrv.exe–background 04-HKLM\.\Run:{SanaSafeConnect}"C:\pROG fILE\SanaSafeConnect.exe" 04-HKLM\.\Run:{YMailAdvisor}"C:pROG fILE\ymAILaDVISOR.EXE 04-HKLM\.\Run:{ParetoLogic Anti-Virus PLUS}"c:\pROG File\Pareto_AV.ink"-NM-hidesplash 04-HKUS\S-1-5-19\..\Run:{Sidebar}% Prog File%\Windows Sidebar.exe/detectMem (User'?') 04-HKUS\S-1-5-19\..\Run:{WindowsWelcomeCentre}rundll32.exe oobefldr.dll,ShowWelcomeCenter(User'?') 04-HKUS\S-1-5-19\..\Run:{Sidebar}%Prog File%\Windows Sidebar.exe/detectMem (User'?') 04-HKUS\S-1-5-19\..\Run:{Nokia.PCSync}C:\Prog Files\Nokia PC SUITE 6\PCSync2.exe./No Dialog (User'?') 04-HKUS\DEFAULT\..\Run:{Nokia.PCSync}C:\pROG fILE\nOKIA PC Suite 6\PcSync2exe (User 'Default user') 09-Extra button: Blog This-{219c3416-8Cb2-491a-A3C7-D9FCDDC9D600}-C:\Prog File\Windows Live\WriterBrowserExtension.dll 09-Extra 'Tools'menuitem:&Blog; This in Windows Live Writer-{219C3416-8CB2-491a-A3C7-D9FCDDC9D600}-C:\Prog File\Windows Live\WriterBrowserExtension.dll 09-Extra button: Send to OneNote-{2670000A-7350-4f3c-8081-5663EE0C6C49}-c:\PROGRA~1\MICROS~2\OFFICE12\ONBttnIE.dll 09-Extra 'Tools'menuitem:S&end; to OneNote-{2670000A-7350-4f3c-8081-5663EE0C6C49}-C:\PROGRA~1\MICROS~2\OFFICE12\ONBttIE.dll 09-Extra button: Research-{92780B25-18CC-41C8-B9BE-3C9C571A8263}-C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL 09-Extra button:(NO NAME)-{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}-C:\C Prog Files\Spybot -Search & Destroy\SDHelper.dll 09-Extra 'Tools'menuitem: Spybot-Search & Destroy Config -{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}-C:\Prog File\SDHelper.dll 010-Broken Internet access because of LSP chain gap (#2 in chain 6 missing) 013 - Gopher Prefix: 018-Filter: x-sdch-{B1759355-3EEC-4C1E-B0F1-B719FE26E377}-C:\Prog File\Google Toolbar\Comp\Fastsearch-A8904FB862BD9564.DLL 023-Service: ArcSoft Connect Daemon (ACDaemon)-ArcSoft-C:\Prog File\Common File\ArcSoft\Connetion\Bin.exe 023-Service:Acer HomeMedia Connect Service-CyberLink-C:\Prog File\Kernal\DMS\CLMSServer.exe 023-Service:AcerTV Share Service-CyberLink-C:\Prog File\Acer Arcade Live\Acer TV Share\kERNAL\dmstv\clmssERVER.EXE 023-Service:ePerformance Service(AcerMemUsageCheckService)-Unknown owner-C:\aCER\eMPOWERING tECHNOLOGY\EpERFORMANCE\mEMCHECK.EXE 023-Service:Intel® AlertService -intel® Coporation-C:\pROG fILE \Intel\intelDH\CCU\AlertService.exe 023-Service: Apple Mobile Device-Apple Inc-C:\Prog File\Common Files\Apple\Mobile Device Support\bin\AppleModileDeviceService.exe 023-Service:Symantec Lic NetConnect Service (CLTNetCnService)-Unknown owner-c:\Prog Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) 023-Service:Intel® DHTrace Controller (DHTRACE) -INTEL® cOPERATION-c:\prog file\Common Files\Intel\INTELDH\Bin\DHTraceController.exe 023-Service:DQLWinService-Unkown owner-C:\pROG fILE\cOMMON fILES\IntelDH\NMS\AdpPlugins\DQLWinService.exe 023-Service: eData Security Service-HiTRSUT-C:\Acer\Empowering Tecnolog\eDataSecurity\eDSService.exe 023-Service: eRecovery Service-Acer inc.-C:\Acer\Empowering Technology\eROCOVERYsERVICE.EXE 023-Service:Firebird Server-MAGIX Instance-C:\Prog File\MAGIX\Common\Database\bin\fbserver.exe 023-Service:getPLUS® hELPER-nos mICROSSYSTEMS lTD-C:\Prog File\NOS\bin\getPlus_HelperSvc.exe 023-Service: Google Software Updator (gusvc)-C:\Prog File \google\common\GoogleUpdaterService.exe 023-Service:INTELIDHSVCCONF-INTEL®C:\Prog File\intelDH\INTEL Media Server\tools\intelDHSvcConf.exe 023-Service:iPod Service-Apple inc C:\Prog File\iPod\bin\ipodService.exe 023-Service:intel®(ISSM) C:\Prog File\INTELDH\INTELMEDIA SERVER\Media server\bin\ISSM.exe 023-Service:KService-Kontiki inc. - C:\Program Files\Kontiki\KService.exe 023-Service:LightScribeService Direct Disc Labling Service-C:\Prog File\LSSrvc.exe 023-Service:Intel Application Tracker (MCLServiceATL) c:\prog file\IntelDH\Shells\MCLSERVICEatl.exe 023-Service:Intel NMSCore-C:\prog file\commonFiles\IntelDH\NMS\NMSCore\nmscORE.EXE 023-Service:INTEL (QualityManager)C:\Prog File\Media Server\bin\qualitymanager.exe 023-Service:Intel Remoting Service C:\Prog File \server\shells\Remote UI Service.exe 023-Service:Cyberlink Rich Video Service -Unknown Owner-c:\Prog File \CyberLink\ShareFiles\RichVideo.exe 023-Service:SanaSafeConnectAgent-Sana Security c:\PROG FILE \AGENT\BIN\SANAAGENT,exe 023-Service:SanaSafeconnectWATCHER C:\Prog file \agent\bin\sanasafeconnectWatcher.exe 023-Service:ServiceLayer-Nokia-C:\Prog File\PC Connectivity Solution\ServiceLayer.exe 023-Service:ThreatFire=PC Tools=C:|Prog File\ThreatFire\TFService.exe 023-Service:Yahoo! Updater C:\pROG File\Yahoo!\softwareUpdate\YahooAUService.exe 023-Service:plasservice (ZepplinService)=ParentoLogic-C:\Prog File\common Files\ParentoLogic\PLAS\plasservice.exe END OF FILE - 12979 BYTES Hi inzanity ''Thanks for the Welcome'' I Hope UR Well and UR URL is running FINE OK . Iam Running VISTA PREMIUM and got attacked bye Kuasio / Smitfraud-c.genetic Which is a C@@T ok I Downloaded these FOLLOWING PROGRAMS ' INSTAULED THEM Smitfraudfix 2.432 and pluss AFT Cleaner [removed] ccsetup221 Pareto_AV_Setup_RW rootalyz-0,3,4,47 SmitfraudFix snITCNTplugins01 TO GET RID OF THESE THREATS and followed all the instructions, inzanity iam STILL GETTING BLUE SCREEN DEATH & NO INTERNET !!!!!!
Post #2
Malwarebytes'Anti-Malware 1.39 Database version:2421 Windows 6.0.6oo1 Service Pack 1 20/07/09 18:22:11 Scan type:Quick Scan Objectsscannned:82810 Time: 11Minutes 35seconds Memory Proccess 0 Infected Memory Modules 0 INFECTED Regestry Keys 0 Infected Regestry Values 0 Infected Regestry Data Items 0 Infected FOLDERS 1 INFECTED FILES 1 INFECTED ( the following 0 items infected Memory Processes / Memory Modules / Regestry Keys / Regestry Values / Regestry Data ) Folders INFECTED: C:\Prog File \ Live_TV (Adware Agent)> Quarantined and Deleted Successfully. Files Infected C:\Windows\System32\AlxTB1.dll(Trojon.Agent)>Delete on reboot
Post #3
Platform:Windows Vista SP1[WinNT 6.00.1905] MSIE:INTERNET EXPLORER V [8.00.6001.18702]Boot mode:Normal Running Processes: C:\Win\Explo,EXE C:\Win\Syst32\Dwm.exe C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernal\DMS\PCMMediaSharing.exe C:\Acer\Empowering Technology\SysMonitor C:\Acer\Empowering Technology\eDSLoader.exe C:\Acer\WR_PopUp.exe C:\Program Files\Common Files\AcerSoft\Connection Service\Bin\ACDaemon.exe C:\Win\System32\igfxtray.exe C:\Win\System32\hkcmd.exe C:\Win\System32\igfxpers.exe C:\Program Files\Kontik\KHost.exe C:\Program Files\Adobe\Reader9.0_si.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Google\Quick searchBox.exe C:\Program Files\ThreatFire\TFTray.exe C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe C:\Program Files\Sana Security\Primary Response Identity Protection\Agent\Bin\SanaSafeConnect.exe C:\Program Files\Yahoo!\common\YMailAdvisor.exe C:\Program Files\ParentoLogic\Anti-Virus PLUS\Parento_AV.EXE C:\Win\System32\igfxsrvc.exe C:\Win\System32\wermgr.exe C:\Program Files\Sana Security\Primary Response Identity Protection Agent \Bin\SanaMonitor.exe C:\Program Files\Common Files\AcerSoft\Connection Service\Bin\ArcCon.ac C:\Win\system32\WerFault.exe C:\Program Files\Common Files\Trend Micro\HijackThis\HijackThis.exe C:\Win\system32\SearchFilterHost.exe C:\Win\system32\notepad.exe RO-HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName= 02-BHO: & yAHOO! toolbar Helper-{02478D38-C3F9-4efb-9B51-7695ECA05670}-C:\Program Files\Yahoo!\Companion\iNSTALLS\cpn1\yt.dll 02-BHO: AcrolIEHelperStub-{18DF081C-EAD-4283-A596-FA578C2EBDC3}-C\Program Files\Common Files\Adobe\acrobat\ActiveX\AcroIEHelperShim.dll 02-BHO: Spybot-S&D IE Protection-{53707962-6F74-2D53-2644=206D7942484F}-c\pROG fILE\sPYBOT-search & DESTROY\SDHelper.dll 02-BHO:(no name)-{5C255C8A-E604-49b4- 9D64-9098857 1CECB}-(no file) 02-BHO:Search Helper-{6EBF7485-159F-4bff-A14f-B9E3AAC4465B}-C Prog File\Microsoft\Search Enhasement Pack\Search Helper\SEPsearchhelperie.dll 02-BHO:(no name)-{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}-(no file) 02-BHO:Windows Live Sign in Helper-{9030D464-4C02-4ABF-8ECC-5164760863C6-C:\Prog File\Common File\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 02-BHO:Google Toolbar Helper-{AA58ED58-01DD-4d91=8333-CF10577473F}-C:\Prog File\Google\Google Toolbar\Google Toolbar.dll 02-BHO:Google Toolbar Notifier BHO-{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}-C\Prog File\GoogleToolbar Notifier\5.1.1309.15642\swg.dll 02-BHO:Google Dictionary Compression sdch-{C84D72FE-E1D-4195-BB24-76C02E2E7C4E}-C\Prog File\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll 02-BHO:NitroPDFBHO Class-{CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54}-(no file) 02-BHO:Java™Plug-in 2 SSV Helper-{DBC844-A445-435b-BC74-9C25C1C588A9}-C\Prog File\Java\jre6\bin\jp2ssv.dll 02-BHO:Windows Live Toolbar Helper-{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}-C\pROG fILE\WINDOWS lIVE\tOOLBAR\WITCORE.DLL 02-BHO:Search Assistant-{F0626A63-410B-45E2-99A1-3F2475B2D695}-C\Prog File\SGPSA\BHO.dll 02-BHO:XBTBPos00-{FCBCCB87-9224-4B8D-B117-F56D924BEB18}-C\Prog File\Fast Browser Search\IE\FBStoolbar.dll 02-BHO:SingleInstance Class-{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}- C\pROG File\Yahoo\Companion\Instaulls\cpn1\YTSingleinstance.dll 03-Toolbar:Acer eDataSecurity Management-{5CBE3B7C-1E47-477e-A7DD-369DB0476E29}-C\Windows\system32\eDStoobar.dll 03-Toolbar:Yahoo1 Toolbar-{EF99BD32-C1FB-11D2-892F-0090271D4F88}-C\Prog File\Yahoo!\Companion\Installs\cpn1\yt.dll 03-Toolbar:ITunes Class-{DC0C2640-1415-4644-875C-6F4D769839BA}-(NO FILE) 03-Toolbar:ITunesAdmin Class-{20ADDA11-8287-44D0-8C63-27CDA87ACC46}-C\Prog File\iTunesAdmin.dll 03-Toolbar:ITunesAdminAudible Class-{6c2589c3-96f8-4863-A511-9C33EB2C7E2A}-C\Prog File\ITunesAdmin.dll 03-Toolbar:ITunesAdminEnableAutoRun Class-{B8DF592B-DE05-49f5-BB21-084F548F12A9}-C\Prog File iTUNESaDMIN.dll 03-Toolbar:ITunesAdminRepairIPodSW Class-{62A560B8-09DB-4cc6-AE1B-9D8F7ADDB8F3}-C\Prog File\iTunesAdmin.dill 03-Toolbar:ITunesAdmin ParentalControls Class-{08A6AF6A-8FF2-4a3b-BECF-C2FAC8630BBF}-C\Prog File\ItUNESaDMIN.dll 03-Toolbar:(no name)-{50A48915-ADC1-41144-91FE-5E28B4926BD0}-(no file) 03-Toolbar:Google Toolbar-{2318C2B1-4965-11d4-9B 18-009027A5CD4F}-C:\Prog File\Google Toolbar.dll 03-Toolbar:& Windows Live Toolbar-{21FA44EF-376D-4D53-9B0F-8A89D3229068}-C:\Prog File Windows Live \Toolbar\witcore.dll 04-HKLM\.\Run:{Windows Defender}%prog Files%Windows Defender\MSASCui.exe-hide 04-HKLM\.\Run:{RtHDVCpl}RtHDVCpl.exe 04-HKLM\.\Run:{PCMMediaSharing}C\Prog File\Acer Arcade Live\Acer HomeMedia Connect\kERNAL\DMS\PCMMEDIASharing.exe 04-HKLM\.\Run:{Acer Empowering Technology Monitor} C:\Acer\Empowering Technology\SysMonitor:exe 04-HKLM\.\Run:{eDataSecurity Loader}C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe 04-HKLM\.\Run:{NMSSupport}''C:\Prog Files\Common Files\Intel\IntelDH\NMS\Support\InteLHCTAgent.exe"/startup 04-HKLM\.\Run:{CCUTRAYICON} FactoryMode 04-HKLM\.\Run:{WarReg_Pop Up}C:\Acer\WR_PopUp\WarReg_PopUp.exe 04-HKLM\.\Run:{ArcSoft Connection Service}C:\Prog Files\Common Files\Arcsoft\Connection Service\Bin\ACDaemon.exe 04-HKLM\.\Run:{lgfxTray}C:\Windows\System32\igfxtray.exe 04-HKLM\.\Run:{HotKeysCmds}C:\wINDOWS\sYSTEM32\HKCMD.exe 04-HKLM\.\Run:{Persistance}C:\Windows\System32igfxpers.exe 04-HKLM\.\Run:{Skytel}skytel.exe 04-HKLM\.\Run:{4oD}"c:\pROG fILE\Kontiki\KHost.exe"-all 04-HKLM\.\Run:{Adobe Reader Speed Launcher}"C:\Prog File\Adobe\Reader9.0_sl.exe 04-HKLM\.\Run:{SunJavaUpdateSched}"c:\Prog File\Java\jre6\bin\jusched.exe" 04-HKLM\.\Run:{Google Quick Search Box}"C:\pROG fILE\gOOGLE\Quick Search Box\Google.exe/autorun 04-HKLM\.\Run:{TreatFire}C:\Prog File\ThreatFire\TFTray.exe 04-HKLM\.\Run:{QuickTime Task}"C\pROG fILE\QTTask.exe"-atboottime 04-HKLM\.\Run:{iTunesHelper}"C:\Prog Files\iTunesHelper.exe" 04-HKLM\.\Run:{vspdfprsrv.exe}"C:\Prog Files\Visage\PDF Printer\vspdfprsrv.exe–background 04-HKLM\.\Run:{SanaSafeConnect}"C:\pROG fILE\SanaSafeConnect.exe" 04-HKLM\.\Run:{YMailAdvisor}"C:pROG fILE\ymAILaDVISOR.EXE 04-HKLM\.\Run:{ParetoLogic Anti-Virus PLUS}"c:\pROG File\Pareto_AV.ink"-NM-hidesplash 04-HKUS\S-1-5-19\..\Run:{Sidebar}% Prog File%\Windows Sidebar.exe/detectMem (User'?') 04-HKUS\S-1-5-19\..\Run:{WindowsWelcomeCentre}rundll32.exe oobefldr.dll,ShowWelcomeCenter(User'?') 04-HKUS\S-1-5-19\..\Run:{Sidebar}%Prog File%\Windows Sidebar.exe/detectMem (User'?') 04-HKUS\S-1-5-19\..\Run:{Nokia.PCSync}C:\Prog Files\Nokia PC SUITE 6\PCSync2.exe./No Dialog (User'?') 04-HKUS\DEFAULT\..\Run:{Nokia.PCSync}C:\pROG fILE\nOKIA PC Suite 6\PcSync2exe (User 'Default user') 09-Extra button: Blog This-{219c3416-8Cb2-491a-A3C7-D9FCDDC9D600}-C:\Prog File\Windows Live\WriterBrowserExtension.dll 09-Extra 'Tools'menuitem:&Blog This in Windows Live Writer-{219C3416-8CB2-491a-A3C7-D9FCDDC9D600}-C:\Prog File\Windows Live\WriterBrowserExtension.dll 09-Extra button: Send to OneNote-{2670000A-7350-4f3c-8081-5663EE0C6C49}-c:\PROGRA~1\MICROS~2\OFFICE12\ONBttnIE.dll 09-Extra 'Tools'menuitem:S&end to OneNote-{2670000A-7350-4f3c-8081-5663EE0C6C49}-C:\PROGRA~1\MICROS~2\OFFICE12\ONBttIE.dll 09-Extra button: Research-{92780B25-18CC-41C8-B9BE-3C9C571A8263}-C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL 09-Extra button:(NO NAME)-{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}-C:\C Prog Files\Spybot -Search & Destroy\SDHelper.dll 09-Extra 'Tools'menuitem: Spybot-Search & Destroy Config -{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}-C:\Prog File\SDHelper.dll 010-Broken Internet access because of LSP chain gap (#2 in chain 6 missing) 013 - Gopher Prefix: 018-Filter: x-sdch-{B1759355-3EEC-4C1E-B0F1-B719FE26E377}-C:\Prog File\Google Toolbar\Comp\Fastsearch-A8904FB862BD9564.DLL 023-Service: ArcSoft Connect Daemon (ACDaemon)-ArcSoft-C:\Prog File\Common File\ArcSoft\Connetion\Bin.exe 023-Service:Acer HomeMedia Connect Service-CyberLink-C:\Prog File\Kernal\DMS\CLMSServer.exe 023-Service:AcerTV Share Service-CyberLink-C:\Prog File\Acer Arcade Live\Acer TV Share\kERNAL\dmstv\clmssERVER.EXE 023-Service:ePerformance Service(AcerMemUsageCheckService)-Unknown owner-C:\aCER\eMPOWERING tECHNOLOGY\EpERFORMANCE\mEMCHECK.EXE 023-Service:Intel® AlertService -intel® Coporation-C:\pROG fILE \Intel\intelDH\CCU\AlertService.exe 023-Service: Apple Mobile Device-Apple Inc-C:\Prog File\Common Files\Apple\Mobile Device Support\bin\AppleModileDeviceService.exe 023-Service:Symantec Lic NetConnect Service (CLTNetCnService)-Unknown owner-c:\Prog Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) 023-Service:Intel® DHTrace Controller (DHTRACE) -INTEL® cOPERATION-c:\prog file\Common Files\Intel\INTELDH\Bin\DHTraceController.exe 023-Service:DQLWinService-Unkown owner-C:\pROG fILE\cOMMON fILES\IntelDH\NMS\AdpPlugins\DQLWinService.exe 023-Service: eData Security Service-HiTRSUT-C:\Acer\Empowering Tecnolog\eDataSecurity\eDSService.exe 023-Service: eRecovery Service-Acer inc.-C:\Acer\Empowering Technology\eROCOVERYsERVICE.EXE 023-Service:Firebird Server-MAGIX Instance-C:\Prog File\MAGIX\Common\Database\bin\fbserver.exe 023-Service:getPLUS® hELPER-nos mICROSSYSTEMS lTD-C:\Prog File\NOS\bin\getPlus_HelperSvc.exe 023-Service: Google Software Updator (gusvc)-C:\Prog File \google\common\GoogleUpdaterService.exe 023-Service:INTELIDHSVCCONF-INTEL®C:\Prog File\intelDH\INTEL Media Server\tools\intelDHSvcConf.exe 023-Service:iPod Service-Apple inc C:\Prog File\iPod\bin\ipodService.exe 023-Service:intel®(ISSM) C:\Prog File\INTELDH\INTELMEDIA SERVER\Media server\bin\ISSM.exe 023-Service:KService-Kontiki inc. - C:\Program Files\Kontiki\KService.exe 023-Service:LightScribeService Direct Disc Labling Service-C:\Prog File\LSSrvc.exe 023-Service:Intel Application Tracker (MCLServiceATL) c:\prog file\IntelDH\Shells\MCLSERVICEatl.exe 023-Service:Intel NMSCore-C:\prog file\commonFiles\IntelDH\NMS\NMSCore\nmscORE.EXE 023-Service:INTEL (QualityManager)C:\Prog File\Media Server\bin\qualitymanager.exe 023-Service:Intel Remoting Service C:\Prog File \server\shells\Remote UI Service.exe 023-Service:Cyberlink Rich Video Service -Unknown Owner-c:\Prog File \CyberLink\ShareFiles\RichVideo.exe 023-Service:SanaSafeConnectAgent-Sana Security c:\PROG FILE \AGENT\BIN\SANAAGENT,exe 023-Service:SanaSafeconnectWATCHER C:\Prog file \agent\bin\sanasafeconnectWatcher.exe 023-Service:ServiceLayer-Nokia-C:\Prog File\PC Connectivity Solution\ServiceLayer.exe 023-Service:ThreatFire=PC Tools=C:|Prog File\ThreatFire\TFService.exe 023-Service:Yahoo! Updater C:\pROG File\Yahoo!\softwareUpdate\YahooAUService.exe 023-Service:plasservice (ZepplinService)=ParentoLogic-C:\Prog File\common Files\ParentoLogic\PLAS\plasservice.exe END OF FILE - 12979 BYTES
Post #4
Hi to Everyone at ''What The Tech'' and THANKS for all your ''HELP''. I have an ACER P.C. which is INFECTED with ''Kuasio / Smitfraud-c.genetic'' which is not reapeat not good at all however with your help i hope to get it SORTED . AND i also have a 350 Gig Back UP CLICK FREE Which i use to Back up 2 P.C. and 2 Laptops so i dont no if those F### Things have infected those as well so i might be hear for the Long haul, but i have Posted my LOG and my Malware so i think its a start.However iam using my Kids Laptop to Post the Reply's as there is No ''internet Accses'' on the ACER P.C. And i Also have a ''Wireless Network'' which is Working Fine for the other P.C. and the Laptops and i contacted Virgin on Saturday but they said everything is working fine at there end. And i was first aware Something Was UP on Friday as i was ''Downloading The new Version of ITunes and i also opend up an Email from my Gmail account and it had a free PDF Attached with BRANDABLE SOFTWARE / HOW TO MAKE YOUR OWN PDF'' Then i noticed that the ITUNES UPDATE Was Taking 30 Minutes to 45 Minutes still not Downloaded which WAS strange as i do have a Lott of Music on the P.C. BUT THE LAST UPDATE FROM itunes was fineshed in about 20 Minutes mybe it may be one of those Files that brought those C###TS in .Now i have to type everything into the notepad file and copy paste it to you Guy's at ''WHAT THE TECH'' CHEERS.
Post #5
ECHOES,

The text of these logs is extremely difficult to read because it is formatted as serial-position and run-on, instead of separate lines.

Please let your Malware Specialist Helper know if you are having difficulty with Select All - Copy - Paste functions.

Take it easy and step-by-step and maybe we can be of some help to you and your machine(s)

If these posts represent more than one machine, them pick one to start with and do not move to a 2nd or 3rd one until instructed to do so by your Malware Specialist helper.

Best Regards
Post #6 last edited
Hi ECHOES

we cannot read the logs you have posted.

what program are you using?

if you look into a couple of other people's posts you will see the difference in what has been posted, compared to what you have posted.

we would very much like to assist you, however we need to be able to read it.

If you are using notepad - please open it now.

Look at the top bar

Click on the word Format

If there is a tick beside Wordwrap - click on it so the tick goes away.

Now I need you to download and run a program

Please follow the instructions - print them out and keep them handy if that helps.

Copy/paste the log into this topic (please do not start more topics - you will notice all your topics have been merged into one - otherwise it becomes confusing)

If you need help with anything, or something isn't clear - please stop and ask.



I managed to decipher some of what was posted - I take it you have no connection.

I believe your Winsock is in need of repair.

Please do the following:

To repair and reset the LSP chain in Windows Vista

  • Click on Start button.
  • Type Cmd in the Start Search text box.
  • Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator. Allow elevation request.
    • Type netsh winsock reset in the Command Prompt shell, and then press the Enter key.
  • Restart the computer.


If that does not restore your connection you will need to download the following program onto another computer then transfer it over to the infected computer via USB stick.

Please do the following:

Please download Malwarebytes' Anti-Malware
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <– very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MalwareBytes and can be viewed by clicking the Logs tab in MalwareBytes
  • Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
Post #7
Hi Doug & Catbite ''THANK YOU'' Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:32:37, on 21/07/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\Windows\Explorer.EXE C:\Windows\system32\Dwm.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe C:\Acer\WR_PopUp\WarReg_PopUp.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Kontiki\KHost.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe C:\Program Files\ThreatFire\TFTray.exe C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnect.exe C:\Program Files\Yahoo!\common\YMailAdvisor.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaMonitor.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac C:\Windows\system32\WerFault.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\mobsync.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: NitroPDFBHO Class - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - (no file) O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O3 - Toolbar: iTunes Class - {DC0C2640-1415-4644-875C-6F4D769839BA} - (no file) O3 - Toolbar: iTunesAdmin Class - {20ADDA11-8287-44D0-8C63-27CDA87ACC46} - C:\Program Files\iTunes\iTunesAdmin.dll O3 - Toolbar: iTunesAdminAudible Class - {6C2589C3-96F8-4863-A511-9C33EB2C7E2A} - C:\Program Files\iTunes\iTunesAdmin.dll O3 - Toolbar: iTunesAdminEnableAutoRun Class - {B8DF592B-DE05-49f5-BB21-084F548F12A9} - C:\Program Files\iTunes\iTunesAdmin.dll O3 - Toolbar: iTunesAdminRepairIPodSW Class - {62A560B8-09DB-4cc6-AE1B-9D8F7ADDB8F3} - C:\Program Files\iTunes\iTunesAdmin.dll O3 - Toolbar: iTunesAdminParentalControls Class - {08A6AF6A-8FF2-4a3b-BECF-C2FAC8630BBF} - C:\Program Files\iTunes\iTunesAdmin.dll O3 - Toolbar: (no name) - {50A48915-ADC1-4144-91FE-5E28B4926BD0} - (no file) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe O4 - HKLM\..\Run: [NMSSupport] "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup O4 - HKLM\..\Run: [CCUTRAYICON] FactoryMode O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [Skytel] Skytel.exe O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [vspdfprsrv.exe] C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe –background O4 - HKLM\..\Run: [SanaSafeConnect] "C:\Program Files\Sana Security\Primary Response Identity Protection\agent\bin\SanaSafeConnect.exe" O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe" O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User '?') O4 - HKUS\S-1-5-18\..\Run: [iLike] C:\Program Files\iLike\1.2.14\ilikesidebar.exe /checkforupdate (User '?') O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user') O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O10 - Broken Internet access because of LSP chain gap (#2 in chain of 6 missing) O13 - Gopher Prefix: O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: Acer TV Share Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer TV Share\Kernel\DMSTV\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Intel® Alert Service (AlertService) - Intel® Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: Intel® DHTrace Controller (DHTRACE) - Intel® Corporation - C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe O23 - Service: eDataSecurity Service - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: IntelDHSvcConf - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel® Software Services Manager (ISSM) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Intel® Application Tracker (MCLServiceATL) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe O23 - Service: Intel® NMSCore (NMSCore) - Intel® Corporation - C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe O23 - Service: Intel® Quality Manager (QualityManager) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe O23 - Service: Intel® Remoting Service (Remote UI Service) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: SanaSafeConnectAgent - Sana Security - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaAgent.exe O23 - Service: SanaSafeConnectWatcher - Sana Security - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnectWatcher.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe – End of file - 12440 bytes
Post #8
''thank you'' CATBYTE & DOUG Malwarebytes' Anti-Malware 1.39 Database version: 2421 Windows 6.0.6001 Service Pack 1 21/07/2009 21:36:31 mbam-log-2009-07-21 (21-36-31).txt Scan type: Quick Scan Objects scanned: 82789 Time elapsed: 10 minute(s), 19 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Windows\system32\AlxTB1.dll (Trojan.Agent) -> Delete on reboot.
Post #9
Hi,

Please do the following:

**Vista users - right click on the IE icon and run as administrator

Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:
  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
Post #10
catbyte & doug THANKS Malwarebytes' Anti-Malware 1.39 Database version: 2421 Windows 6.0.6001 Service Pack 1 21/07/2009 21:36:31 mbam-log-2009-07-21 (21-36-31).txt Scan type: Quick Scan Objects scanned: 82789 Time elapsed: 10 minute(s), 19 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Windows\system32\AlxTB1.dll (Trojan.Agent) -> Delete on reboot.
Post #11

Hi,

Please do the following:

**Vista users - right click on the IE icon and run as administrator

Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:

  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database. Hi Catbyte cannot do this as i have no Internet connection on my ACER P.C.
Please be patient as this can take quite a long time to download.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

Post #12
ECHOES, you have quoted my previous post and reposted the MalwareBytes log…nothing else Please try and explain what your outstanding issues are
Post #13

ECHOES,

The text of these logs is extremely difficult to read because it is formatted as serial-position and run-on, instead of separate lines.

Please let your Malware Specialist Helper know if you are having difficulty with Select All - Copy - Paste functions.

Take it easy and step-by-step and maybe we can be of some help to you and your machine(s)

If these posts represent more than one machine, them pick one to start with and do not move to a 2nd or 3rd one until instructed to do so by your Malware Specialist helper.

Best Regards

Hi Doug & THANK YOU . There is only one Machine INFECTED at the moment the ACER P.C. however the CLICKFREE Externall Harddrive iam not to sure about all the other Machine's the 2 Laptops and the other P.C. are Working Fine The NetGear WNR 2000 Wireless Network all online and running OK. However no Reapeat INTERNET ACCSESS with the ACER P.C.
Post #14 last edited

ECHOES, you have quoted my previous post and reposted the MalwareBytes log…nothing else

Please try and explain what your outstanding issues are

Hi CatByte & THANK YOU OutStanding Issues Are No Internet Access on the ACER P.C. whare the Virgin Modem / the Netgear WNR 2000 is CatByte its a INTERNET ISSUE No Internet Access and i Also Think although not to Sure if the CLICKFREE Back Up External Harddisk
is infected or not. Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:32:37, on 21/07/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Acer\WR_PopUp\WarReg_PopUp.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\ThreatFire\TFTray.exe
C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe
C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnect.exe
C:\Program Files\Yahoo!\common\YMailAdvisor.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaMonitor.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Windows\system32\WerFault.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: NitroPDFBHO Class - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - (no file)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: iTunes Class - {DC0C2640-1415-4644-875C-6F4D769839BA} - (no file)
O3 - Toolbar: iTunesAdmin Class - {20ADDA11-8287-44D0-8C63-27CDA87ACC46} - C:\Program Files\iTunes\iTunesAdmin.dll
O3 - Toolbar: iTunesAdminAudible Class - {6C2589C3-96F8-4863-A511-9C33EB2C7E2A} - C:\Program Files\iTunes\iTunesAdmin.dll
O3 - Toolbar: iTunesAdminEnableAutoRun Class - {B8DF592B-DE05-49f5-BB21-084F548F12A9} - C:\Program Files\iTunes\iTunesAdmin.dll
O3 - Toolbar: iTunesAdminRepairIPodSW Class - {62A560B8-09DB-4cc6-AE1B-9D8F7ADDB8F3} - C:\Program Files\iTunes\iTunesAdmin.dll
O3 - Toolbar: iTunesAdminParentalControls Class - {08A6AF6A-8FF2-4a3b-BECF-C2FAC8630BBF} - C:\Program Files\iTunes\iTunesAdmin.dll
O3 - Toolbar: (no name) - {50A48915-ADC1-4144-91FE-5E28B4926BD0} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [NMSSupport] "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup
O4 - HKLM\..\Run: [CCUTRAYICON] FactoryMode
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [4oD] "C:\Program Files\Kontiki\KHost.exe" -all
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [vspdfprsrv.exe] C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe –background
O4 - HKLM\..\Run: [SanaSafeConnect] "C:\Program Files\Sana Security\Primary Response Identity Protection\agent\bin\SanaSafeConnect.exe"
O4 - HKLM\..\Run: [YMailAdvisor] "C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User '?')
O4 - HKUS\S-1-5-18\..\Run: [iLike] C:\Program Files\iLike\1.2.14\ilikesidebar.exe /checkforupdate (User '?')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O10 - Broken Internet access because of LSP chain gap (#2 in chain of 6 missing)
O13 - Gopher Prefix:
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: Acer TV Share Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer TV Share\Kernel\DMSTV\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Intel® Alert Service (AlertService) - Intel® Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Intel® DHTrace Controller (DHTRACE) - Intel® Corporation - C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe
O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: eDataSecurity Service - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IntelDHSvcConf - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel® Software Services Manager (ISSM) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel® Application Tracker (MCLServiceATL) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: Intel® NMSCore (NMSCore) - Intel® Corporation - C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe
O23 - Service: Intel® Quality Manager (QualityManager) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe
O23 - Service: Intel® Remoting Service (Remote UI Service) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SanaSafeConnectAgent - Sana Security - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaAgent.exe
O23 - Service: SanaSafeConnectWatcher - Sana Security - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnectWatcher.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 12440 bytes
Post #15 last edited
Hi,

did you follow the instructions I gave to fix the internet issue?


Please do this on the computer that cannot access the internet


  • Click on Start button.
  • Type Cmd in the Start Search text box.
  • Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator. Allow elevation request.
  • Type the following command at the command prompt


    netsh winsock reset

  • then press the Enter key.

  • Restart the computer.



Please let me know if this resolves the internet access issue.

If there is anything you don't understand - please ask

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI