Hi CATBYTE TRYED IT all iam getting on CMD EXE. is netsh winsock reset Initialisation Function InitHelper in NSHHTTP.DLL Failed to Start with error code 11003 the requires operation requires elivation CATBYETE STILL NOT CONNECTED!!!!!!Hi,
did you follow the instructions I gave to fix the internet issue?
Please do this on the computer that cannot access the internet
- Click on Start button.
- Type Cmd in the Start Search text box.
- Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator. Allow elevation request.
- Type the following command at the command prompt
netsh winsock reset
- then press the Enter key.
- Restart the computer.
Please let me know if this resolves the internet access issue.
If there is anything you don't understand - please ask
[Resolved] The Following is my ''LOG'' TRYING TO
54 min read
It's very important you follow the instructions EXACTLY
Click on the Start button.
Type Cmd in the Start Search text box.
Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator.
This is very important !!!
—-> Allow elevation request.
Now type the following command at the command prompt
netsh winsock reset
Now press the Enter key.
Restart the computer.
Catbyte fowllowed your INSTRUCTIONS TO A 'T' what i dont understand is ALLOW ELEVATION !!! STILL NO CONNECTIONechoes
It's very important you follow the instructions EXACTLY
Click on the Start button.
Type Cmd in the Start Search text box.
Press Ctrl-Shift-Enter keyboard shortcut to run Command Prompt as Administrator.
This is very important !!!
—-> Allow elevation request.
Now type the following command at the command prompt
netsh winsock reset
Now press the Enter key.
Restart the computer.
when you type Cmd into the start search text box….you have to run that command as an Administrator
you have to press the Ctrl key + the Shift key + the Enter key at the same time…this will bring up a dialog box that asks you to ALLOW the command to be run as an Administrator.
You have to ALLOW the computer to do this so that your privileges will be elevated to that of an Administrator….
once that happens then you can type the command netsh winsock reset at the command prompt…press enter
then restart your computer.
what happens when you try and type Cmd and elevate the privileges?
Catebyte Admin Problem Fix't typede in all your INSTRUCTIONS Restarted , changed the home page back to Google from Microsoft, done all of the ABOVE WHAT YOU SAID TO DO ABOUT 4 TIMES NOW STILL NOT ONLINE!! Iam wondering should i just RESET/ START MY WIRELESS NETWORK / AS I JUST DONT GET THIS I SHOULD BE ONLINE . or isHi,
when you type Cmd into the start search text box….you have to run that command as an Administrator
you have to press the Ctrl key + the Shift key + the Enter key at the same time…this will bring up a dialog box that asks you to ALLOW the command to be run as an Administrator.
You have to ALLOW the computer to do this so that your privileges will be elevated to that of an Administrator….
once that happens then you can type the command netsh winsock reset at the command prompt…press enter
then restart your computer.
what happens when you try and type Cmd and elevate the privileges?
it THE Balloon next to it saying ( FAILED TO CONNECT TO A WINDOWS SERVICE WINDOWS COULD NOT CONNECT TO THE SYSTEM EVENT NOTIFICATION SERVICE !! OR IS IT THE ARCSOFT CONNECT NOTIFIER HAS STOPPED WORKING !! OR WSA START UP FAILED!! OR MICROSOFT NET FRAMEWORK CANNOT CREATE ACTIVE X COMPONENT !!! ) THAT IS ALL THAT'S ON MY DESKTOP + THE DEATH BLUE SCREEN
there may be another reason why your connection isn't working:
Try this first:
manually restore the connection by …
* Going to Control Panel > Network Connections.
* Right click on their Network icons & select "Repair"
[external image: Posted Image]
Alternately, if the Network icon appears in the notification area in the lower right corner of Desktop, right-click it, and then click Repair from the shortcut menu.
[external image: Posted Image]
If that doesn't work:
If you have access to another computer can you download this program to another computer - copy it to a USB stick…take it to the computer without the connection - copy it to the desktop of that computer then run the program and post the log back here
As a Vista user I will require that all the programs I ask you to run, be run by right clicking the icon and selecting Run as Administrator. Otherwise some programs may fail to operate correctly
- Download OTL to your desktop.
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- When the window appears, underneath Output at the top change it to Minimal Output.
- Check the boxes beside LOP Check and Purity Check.
- Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically. - Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
OTL by OldTimer - Version 3.0.10.0 Folder = C:\Users\ECHOES\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18783)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1013.57 Mb Total Physical Memory | 295.42 Mb Available Physical Memory | 29.15% Memory free
2.24 Gb Paging File | 1.03 Gb Available in Paging File | 46.20% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 111.69 Gb Total Space | 71.63 Gb Free Space | 64.13% Space Free | Partition Type: NTFS
Drive D: | 111.43 Gb Total Space | 94.21 Gb Free Space | 84.54% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 3.72 Gb Total Space | 3.70 Gb Free Space | 99.29% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: JAI
Current User Name: ECHOES
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Windows\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft)
PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
PRC - C:\Program Files\Acer Arcade Live\Acer TV Share\Kernel\DMSTV\CLMSServer.exe (CyberLink)
PRC - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
PRC - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe (Intel® Corporation)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
PRC - C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
PRC - C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe (Intel® Corporation)
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
PRC - C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
PRC - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnectWatcher.exe (Sana Security)
PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files\ThreatFire\TFService.exe (PC Tools)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Windows\System32\WUDFHost.exe (Microsoft Corporation)
PRC - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
PRC - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe (Intel® Corporation)
PRC - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe (Intel® Corporation)
PRC - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaAgent.exe (Sana Security)
PRC - C:\Windows\System32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
PRC - C:\Acer\Empowering Technology\SysMonitor.exe ()
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe (HiTRUST)
PRC - C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft)
PRC - C:\Windows\System32\igfxtray.exe (Intel Corporation)
PRC - C:\Windows\System32\hkcmd.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxpers.exe (Intel Corporation)
PRC - C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
PRC - C:\Program Files\ThreatFire\TFTray.exe (PC Tools)
PRC - C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe (Visagesoft)
PRC - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnect.exe (Sana Security)
PRC - C:\Program Files\Yahoo!\common\YMailAdvisor.exe (Yahoo! Inc.)
PRC - C:\Windows\System32\igfxsrvc.exe (Intel Corporation)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaMonitor.exe (Sana Security)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (ArcSoft)
PRC - C:\Windows\System32\WerFault.exe (Microsoft Corporation)
PRC - C:\Users\ECHOES\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\osk.exe (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (ACDaemon [Auto | Running]) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft)
SRV - (Acer HomeMedia Connect Service [Auto | Running]) – C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe (CyberLink)
SRV - (Acer TV Share Service [Auto | Running]) – C:\Program Files\Acer Arcade Live\Acer TV Share\Kernel\DMSTV\CLMSServer.exe (CyberLink)
SRV - (AcerMemUsageCheckService [Auto | Running]) – C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
SRV - (AlertService [Auto | Running]) – C:\Program Files\Intel\IntelDH\CCU\AlertService.exe (Intel® Corporation)
SRV - (Apple Mobile Device [Auto | Stopped]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (clr_optimization_v2.0.50727_32 [Auto | Stopped]) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (CLTNetCnService [Auto | Stopped]) – File not found
SRV - (DHTRACE [Auto | Stopped]) – C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe (Intel® Corporation)
SRV - (DQLWinService [Auto | Stopped]) – C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe ()
SRV - (eDataSecurity Service [Auto | Running]) – C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
SRV - (ehRecvr [Auto | Running]) – C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Auto | Running]) – C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart [Auto | Stopped]) – C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (eRecoveryService [Auto | Running]) – C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
SRV - (Eventlog [Auto | Stopped]) – C:\Windows\System32\wevtsvc.dll (Microsoft Corporation)
SRV - (FirebirdServerMAGIXInstance [On_Demand | Stopped]) – C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe (MAGIX®)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (fsssvc [Auto | Running]) – C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (getPlus® Helper [On_Demand | Stopped]) – C:\Program Files\NOS\bin\getPlus_HelperSvc.exe (NOS Microsystems Ltd.)
SRV - (gusvc [Auto | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (idsvc [Unknown | Stopped]) – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (IntelDHSvcConf [Auto | Running]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe (Intel® Corporation)
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (ISSM [Auto | Running]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe (Intel® Corporation)
SRV - (KService [Auto | Stopped]) – C:\Program Files\Kontiki\KService.exe (Kontiki Inc.)
SRV - (LightScribeService [Auto | Running]) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (M1 Server [Disabled | Stopped]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe ()
SRV - (MCLServiceATL [Auto | Running]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe (Intel® Corporation)
SRV - (NetTcpPortSharing [Auto | Running]) – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NMSCore [Auto | Stopped]) – C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe (Intel® Corporation)
SRV - (odserv [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (QualityManager [Auto | Stopped]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe (Intel® Corporation)
SRV - (Remote UI Service [On_Demand | Stopped]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe (Intel® Corporation)
SRV - (RichVideo [Auto | Running]) – C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
SRV - (SanaSafeConnectAgent [Auto | Running]) – C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaAgent.exe (Sana Security)
SRV - (SanaSafeConnectWatcher [Auto | Running]) – C:\Program Files\Sana Security\Primary Response Identity Protection\agent\Bin\SanaSafeConnectWatcher.exe (Sana Security)
SRV - (SeaPort [Auto | Running]) – C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (ServiceLayer [On_Demand | Stopped]) – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (ThreatFire [Auto | Running]) – C:\Program Files\ThreatFire\TFService.exe (PC Tools)
SRV - (WinDefend [Auto | Running]) – C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc [Auto | Stopped]) – C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (YahooAUService [Auto | Running]) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
========== Driver Services (SafeList) ==========
DRV - (adp94xx [Disabled | Stopped]) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (adpahci [Disabled | Stopped]) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (adpu160m [Disabled | Stopped]) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (adpu320 [Disabled | Stopped]) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (Afc [On_Demand | Running]) – C:\Windows\System32\drivers\Afc.sys (Arcsoft, Inc.)
DRV - (aic78xx [Disabled | Stopped]) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (aliide [Disabled | Stopped]) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (arc [Disabled | Stopped]) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (arcsas [Disabled | Stopped]) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (athrusb6 [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\athru6.sys (Atheros Communications, Inc.)
DRV - (AVerM115S [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\AVerM115S.sys (AVerMedia TECHNOLOGIES, Inc.)
DRV - (BrFiltLo [On_Demand | Stopped]) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp [On_Demand | Stopped]) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (Brserid [Disabled | Stopped]) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrSerWdm [Disabled | Stopped]) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm [Disabled | Stopped]) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer [On_Demand | Stopped]) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BVRPMPR5 [On_Demand | Stopped]) – C:\Windows\System32\drivers\BVRPMPR5.SYS (Avanquest Software)
DRV - (cmdide [Disabled | Stopped]) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (e1express [On_Demand | Running]) – C:\Windows\System32\DRIVERS\e1e6032.sys (Intel Corporation)
DRV - (E1G60 [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\E1G60I32.sys (Intel Corporation)
DRV - (elxstor [Disabled | Stopped]) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (fssfltr [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\fssfltr.sys (Microsoft Corporation)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\Windows\System32\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (HpCISSs [Disabled | Stopped]) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (iaStorV [Disabled | Stopped]) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (igfx [On_Demand | Running]) – C:\Windows\System32\DRIVERS\igdkmd32.sys (Intel Corporation)
DRV - (iirsp [Disabled | Stopped]) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (int15 [Auto | Running]) – C:\Acer\Empowering Technology\eRecovery\int15.sys (Acer, Inc.)
DRV - (IntcAzAudAddService [On_Demand | Running]) – C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (IntelDH [On_Demand | Running]) – C:\Windows\System32\Drivers\IntelDH.sys (Intel Corporation)
DRV - (iteatapi [Disabled | Stopped]) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (iteraid [Disabled | Stopped]) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (LSI_FC [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (LSI_SAS [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (LSI_SCSI [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (megasas [Disabled | Stopped]) – C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (Mraid35x [Disabled | Stopped]) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (nfrd960 [Disabled | Stopped]) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (nmsunidr [Auto | Running]) – C:\Windows\System32\DRIVERS\nmsunidr.sys (Gteko Ltd.)
DRV - (nmwcd [On_Demand | Stopped]) – C:\Windows\System32\drivers\ccdcmb.sys (Nokia)
DRV - (nmwcdc [On_Demand | Stopped]) – C:\Windows\System32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcdnsu [On_Demand | Stopped]) – C:\Windows\System32\drivers\nmwcdnsu.sys (Nokia)
DRV - (nmwcdnsuc [On_Demand | Stopped]) – C:\Windows\System32\drivers\nmwcdnsuc.sys (Nokia)
DRV - (NTIDrvr [On_Demand | Running]) – C:\Windows\System32\DRIVERS\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (ntrigdigi [Disabled | Stopped]) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (nvraid [Disabled | Stopped]) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor [Disabled | Stopped]) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (OmniTV [On_Demand | Running]) – C:\Windows\System32\DRIVERS\OmniTV.sys (YUAN High-Tech Development Co. Ltd.)
DRV - (pccsmcfd [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\pccsmcfd.sys (Nokia)
DRV - (PSDFilter [Boot | Running]) – C:\Windows\system32\DRIVERS\psdfilter.sys (HiTRUST)
DRV - (PSDNServ [Boot | Running]) – C:\Windows\system32\drivers\PSDNServ.sys (HiTRUST)
DRV - (psdvdisk [Boot | Running]) – C:\Windows\system32\drivers\psdvdisk.sys (HiTRUST)
DRV - (ql2300 [Disabled | Stopped]) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (ql40xx [Disabled | Stopped]) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (RMCAST [Auto | Running]) – C:\Windows\System32\DRIVERS\RMCAST.sys (Microsoft Corporation)
DRV - (SanaSafeConnectDriver [On_Demand | Running]) – C:\Program Files\Sana Security\Primary Response Identity Protection\agent\driver\platform_VISTA\SafeConnectDriver.sys (Sana Security, Inc. )
DRV - (SanaSafeConnectFilter [On_Demand | Running]) – C:\Program Files\Sana Security\Primary Response Identity Protection\agent\driver\platform_VISTA\SafeConnectFilter.sys (Sana Security, Inc. )
DRV - (SanaSafeConnectShim [On_Demand | Running]) – C:\Program Files\Sana Security\Primary Response Identity Protection\agent\driver\platform_VISTA\SafeConnectShim.sys (Sana Security, Inc. )
DRV - (secdrv [Auto | Running]) – C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SiSRaid2 [Disabled | Stopped]) – C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid4 [Disabled | Stopped]) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (Symc8xx [Disabled | Stopped]) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_hi [Disabled | Stopped]) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Sym_u3 [Disabled | Stopped]) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (TfFsMon [Boot | Running]) – C:\Windows\system32\drivers\TfFsMon.sys (PC Tools)
DRV - (TfNetMon [On_Demand | Running]) – C:\Windows\System32\drivers\TfNetMon.sys (PC Tools)
DRV - (TfSysMon [Boot | Running]) – C:\Windows\system32\drivers\TfSysMon.sys (PC Tools)
DRV - (TSHWMDTCP [On_Demand | Stopped]) – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\TSHWMDTCP.sys ()
DRV - (uliahci [Disabled | Stopped]) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (UlSata [Disabled | Stopped]) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (ulsata2 [Disabled | Stopped]) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (upperdev [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\usbser_lowerflt.sys (Windows ® Codename Longhorn DDK provider)
DRV - (USBAAPL [On_Demand | Stopped]) – C:\Windows\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (usbser [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\usbser.sys (Microsoft Corporation)
DRV - (UsbserFilt [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\usbser_lowerfltj.sys (Windows ® Codename Longhorn DDK provider)
DRV - (viaide [Disabled | Stopped]) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (vsmraid [Disabled | Stopped]) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (WSVD [On_Demand | Stopped]) – C:\Windows\System32\drivers\WSVD.sys (Wasay)
========== Standard Registry (SafeList) ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?p…&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?p…ER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
[2009/07/21 13:39:11 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/01/23 19:24:03 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
[2007/04/10 18:21:08 | 00,163,256 | —- | M] (Microsoft Corporation) – C:\Program Files\mozilla firefox\plugins\np-mswmp.dll
[2009/01/16 20:17:04 | 00,114,688 | —- | M] (Adobe Systems, Inc.) – C:\Program Files\mozilla firefox\plugins\np32dsw.dll
[2009/01/23 19:22:52 | 00,410,984 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeploytk.dll
[2008/11/06 17:33:48 | 01,332,224 | —- | M] (DivX,Inc.) – C:\Program Files\mozilla firefox\plugins\npdivx32.dll
[2008/12/11 01:33:34 | 00,098,304 | —- | M] (DivX, Inc) – C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2009/06/07 20:29:13 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
[2009/06/07 20:29:13 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
[2009/06/07 20:29:13 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
[2009/06/07 20:29:13 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
[2009/06/07 20:29:13 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll
[2009/06/07 20:29:14 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll
[2009/06/07 20:29:14 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll
O1 HOSTS File: (0 bytes) - C:\Windows\System32\drivers\etc\Hosts
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (no name) - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - No CLSID value found.
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll ()
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (iTunesAdminParentalControls Class) - {08A6AF6A-8FF2-4a3b-BECF-C2FAC8630BBF} - C:\Program Files\iTunes\iTunesAdmin.dll (Apple Inc.)
O3 - HKLM\..\Toolbar: (iTunesAdmin Class) - {20ADDA11-8287-44D0-8C63-27CDA87ACC46} - C:\Program Files\iTunes\iTunesAdmin.dll (Apple Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - {50A48915-ADC1-4144-91FE-5E28B4926BD0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKLM\..\Toolbar: (iTunesAdminRepairIPodSW Class) - {62A560B8-09DB-4cc6-AE1B-9D8F7ADDB8F3} - C:\Program Files\iTunes\iTunesAdmin.dll (Apple Inc.)
O3 - HKLM\..\Toolbar: (iTunesAdminAudible Class) - {6C2589C3-96F8-4863-A511-9C33EB2C7E2A} - C:\Program Files\iTunes\iTunesAdmin.dll (Apple Inc.)
O3 - HKLM\..\Toolbar: (iTunesAdminEnableAutoRun Class) - {B8DF592B-DE05-49f5-BB21-084F548F12A9} - C:\Program Files\iTunes\iTunesAdmin.dll (Apple Inc.)
O3 - HKLM\..\Toolbar: (iTunes Class) - {DC0C2640-1415-4644-875C-6F4D769839BA} - C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Elevation - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O4 - HKLM..\Run: [4oD] C:\Program Files\Kontiki\KHost.exe (Kontiki Inc.)
O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe ()
O4 - HKLM..\Run: [Acer Tour] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft)
O4 - HKLM..\Run: [CCUTRAYICON] File not found
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [NMSSupport] File not found
O4 - HKLM..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe ()
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SanaSafeConnect] C:\Program Files\Sana Security\Primary Response Identity Protection\agent\bin\SanaSafeConnect.exe (Sana Security)
O4 - HKLM..\Run: [Skytel] C:\Windows\Skytel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe (PC Tools)
O4 - HKLM..\Run: [vspdfprsrv.exe] C:\Program Files\Visage\PDF Printer\vspdfprsrv.exe (Visagesoft)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [YMailAdvisor] C:\Program Files\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 00,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
========== Files/Folders - Created Within 30 Days ==========
[2009/07/20 18:07:25 | 00,000,822 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/07/20 18:07:22 | 00,038,160 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/07/20 18:07:20 | 00,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2009/07/20 18:07:15 | 00,019,096 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2009/07/20 18:07:14 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/07/19 13:45:08 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/07/18 23:19:10 | 00,000,000 | —D | C] – C:\Program Files\CCleaner
[2009/07/18 21:09:17 | 10,635,75552 | -HS- | C] () – C:\hiberfil.sys
[2009/07/18 20:26:17 | 00,005,614 | —- | C] () – C:\Windows\System32\tmp.reg
[2009/07/18 20:25:15 | 00,082,944 | —- | C] (S!Ri.URZ) – C:\Windows\System32\IEDFix.C.exe
[2009/07/18 20:25:15 | 00,080,384 | —- | C] (S!Ri.URZ) – C:\Windows\System32\o4Patch.exe
[2009/07/18 20:25:15 | 00,078,336 | —- | C] (S!Ri.URZ) – C:\Windows\System32\Agent.OMZ.Fix.exe
[2009/07/18 20:25:14 | 00,289,144 | —- | C] (S!Ri) – C:\Windows\System32\VCCLSID.exe
[2009/07/18 20:25:14 | 00,288,417 | —- | C] (S!Ri) – C:\Windows\System32\SrchSTS.exe
[2009/07/18 20:25:14 | 00,135,168 | —- | C] (SteelWerX) – C:\Windows\System32\swreg.exe
[2009/07/18 20:25:14 | 00,087,552 | —- | C] (S!Ri.URZ) – C:\Windows\System32\VACFix.exe
[2009/07/18 20:25:14 | 00,082,944 | —- | C] (S!Ri.URZ) – C:\Windows\System32\IEDFix.exe
[2009/07/18 20:25:14 | 00,082,432 | —- | C] (S!Ri.URZ) – C:\Windows\System32\404Fix.exe
[2009/07/18 20:25:14 | 00,079,360 | —- | C] (SteelWerX) – C:\Windows\System32\swxcacls.exe
[2009/07/18 20:25:14 | 00,075,776 | —- | C] () – C:\Windows\System32\WS2Fix.exe
[2009/07/18 20:25:14 | 00,053,248 | —- | C] (http://www.beyondlogic.org) – C:\Windows\System32\Process.exe
[2009/07/18 20:25:14 | 00,051,200 | —- | C] () – C:\Windows\System32\dumphive.exe
[2009/07/18 20:25:14 | 00,040,960 | —- | C] () – C:\Windows\System32\swsc.exe
[2009/07/18 19:46:27 | 00,591,904 | -HS- | C] () – C:\Windows\System32\drivers\fidbox.dat
[2009/07/18 19:46:27 | 00,010,100 | -HS- | C] () – C:\Windows\System32\drivers\fidbox.idx
[2009/07/18 19:25:33 | 00,000,000 | —D | C] – C:\Program Files\Common Files\ParetoLogic
[2009/07/18 11:38:04 | 00,000,000 | —D | C] – C:\ProgramData\RegCure
[2009/07/18 11:38:03 | 00,000,000 | —D | C] – C:\Program Files\RegCure
[2009/07/14 22:44:23 | 00,289,792 | —- | C] (Adobe Systems Incorporated) – C:\Windows\System32\atmfd.dll
[2009/07/14 22:44:23 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\t2embed.dll
[2009/07/14 22:44:23 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fontsub.dll
[2009/07/14 22:44:23 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dciman32.dll
[2009/07/03 21:58:31 | 00,000,000 | —D | C] – C:\MAGIX
[2009/07/03 14:46:48 | 00,000,000 | —D | C] – C:\Program Files\Alexa Toolbar
[2009/07/01 23:33:58 | 00,000,816 | —- | C] () – C:\Users\Public\Desktop\Google Goggles.lnk
[2009/07/01 23:33:58 | 00,000,000 | —D | C] – C:\Program Files\Google Goggles
[2009/06/28 22:01:12 | 00,000,000 | —D | C] – C:\Program Files\SGPSA
[2009/06/28 22:00:43 | 00,000,000 | —D | C] – C:\Program Files\Fast Browser Search
[2009/06/19 22:13:44 | 00,014,336 | —- | C] () – C:\Windows\System32\vsmon1.dll
[2009/02/07 00:39:37 | 00,120,200 | —- | C] () – C:\Windows\System32\DLLDEV32i.dll
[2009/02/07 00:39:04 | 00,005,937 | —- | C] () – C:\Windows\mgxoschk.ini
[2009/02/06 22:17:54 | 00,000,036 | —- | C] () – C:\Windows\magix.ini
[2009/01/17 14:49:41 | 00,000,097 | —- | C] () – C:\Windows\System32\PICSDK.ini
[2008/11/06 17:37:32 | 03,596,288 | —- | C] () – C:\Windows\System32\qt-dx331.dll
[2008/11/06 17:34:00 | 00,000,416 | —- | C] () – C:\Windows\System32\dtu100.dll.manifest
[2008/11/06 17:34:00 | 00,000,416 | —- | C] () – C:\Windows\System32\dpl100.dll.manifest
[2008/11/06 17:33:02 | 00,012,288 | —- | C] () – C:\Windows\System32\DivXWMPExtType.dll
[2008/02/11 20:55:18 | 00,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1437.dll
[2007/12/28 19:38:44 | 00,000,044 | —- | C] () – C:\Windows\Acer(Normal).ini
[2007/12/28 19:38:44 | 00,000,042 | —- | C] () – C:\Windows\Acer(Wide).ini
[2007/08/16 03:39:17 | 00,001,024 | RH– | C] () – C:\Windows\System32\NTIBUN4.dll
[2007/08/16 02:50:06 | 00,053,248 | —- | C] ( ) – C:\Windows\System32\Interop.Shell32.dll
[2007/08/16 02:50:04 | 00,331,776 | —- | C] () – C:\Windows\System32\ScrollBarLib.dll
[2007/08/16 01:53:36 | 00,000,707 | —- | C] () – C:\Windows\generic.ini
[2007/08/16 01:53:36 | 00,000,107 | —- | C] () – C:\Windows\Alaunch.ini
[2007/08/16 01:53:35 | 00,910,464 | —- | C] () – C:\Windows\System32\igmedkrn.dll
[2007/08/16 01:53:35 | 00,204,800 | —- | C] () – C:\Windows\System32\igfxCoIn_v1283.dll
[2007/08/16 01:53:34 | 00,003,072 | —- | C] () – C:\Windows\System32\34CoInstaller.dll
[2007/04/26 00:33:22 | 00,266,240 | —- | C] () – C:\Windows\System32\NotesExtmngr.dll
[2007/04/26 00:32:50 | 00,204,800 | —- | C] () – C:\Windows\System32\NotesActnMenu.dll
[2007/04/26 00:32:46 | 00,086,016 | —- | C] () – C:\Windows\System32\MSNSpook.dll
[2007/04/26 00:31:00 | 00,028,672 | —- | C] () – C:\Windows\System32\BatchCrypto.dll
[2007/04/26 00:30:52 | 00,073,728 | —- | C] () – C:\Windows\System32\APISlice.dll
[2007/04/26 00:30:44 | 00,063,488 | —- | C] () – C:\Windows\System32\ShowErrMsg.dll
[2006/12/25 23:44:48 | 00,022,016 | —- | C] () – C:\Windows\System32\MailFormat_U.dll
[2006/11/02 13:35:32 | 00,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 11:23:31 | 00,000,219 | —- | C] () – C:\Windows\system.ini
[2006/11/02 11:23:31 | 00,000,144 | —- | C] () – C:\Windows\win.ini
[2006/11/02 08:40:29 | 00,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/06/23 19:09:34 | 00,019,968 | R— | C] () – C:\Windows\System32\cpuinf32.dll
[2001/12/27 00:12:30 | 00,065,536 | —- | C] () – C:\Windows\System32\multiplex_vcd.dll
[2001/09/04 07:46:38 | 00,110,592 | —- | C] () – C:\Windows\System32\Hmpg12.dll
[2001/07/31 00:33:56 | 00,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC.dll
[2001/07/24 06:04:36 | 00,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC_MMX.dll
========== Files - Modified Within 30 Days ==========
[2 C:\Windows\*.tmp files]
[2009/07/22 12:37:03 | 00,032,768 | —- | M] () – C:\Windows\System32\Ikeext.etl
[2009/07/22 12:34:05 | 00,003,168 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/07/22 12:34:05 | 00,003,168 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/07/22 12:33:56 | 00,067,584 | —- | M] () – C:\Windows\bootstat.dat
[2009/07/22 12:33:55 | 10,635,75552 | -HS- | M] () – C:\hiberfil.sys
[2009/07/21 21:26:56 | 00,690,960 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2009/07/21 21:26:56 | 00,599,942 | —- | M] () – C:\Windows\System32\perfh009.dat
[2009/07/21 21:26:56 | 00,105,448 | —- | M] () – C:\Windows\System32\perfc009.dat
[2009/07/21 19:03:51 | 00,591,904 | -HS- | M] () – C:\Windows\System32\drivers\fidbox.dat
[2009/07/21 19:03:51 | 00,010,100 | -HS- | M] () – C:\Windows\System32\drivers\fidbox.idx
[2009/07/20 18:07:25 | 00,000,822 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/07/18 21:02:07 | 00,005,614 | —- | M] () – C:\Windows\System32\tmp.reg
[2009/07/18 21:02:03 | 00,000,000 | —- | M] () – C:\Windows\System32\drivers\etc\hosts
[2009/07/17 21:28:43 | 00,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2009/07/15 14:50:25 | 00,400,384 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 13:36:34 | 00,038,160 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/07/13 13:36:12 | 00,019,096 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2009/07/07 16:10:56 | 24,539,592 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mrt.exe
[2009/07/01 23:33:58 | 00,000,816 | —- | M] () – C:\Users\Public\Desktop\Google Goggles.lnk
========== LOP Check ==========
[2009/07/17 21:28:43 | 00,000,006 | -H– | M] () – C:\Windows\Tasks\SA.DAT
[2009/07/17 21:29:06 | 00,032,602 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2009/05/19 18:43:40 | 00,000,424 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{36A248DF-CCA9-45F5-87D5-74967E4D12A2}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:1CA73D29
< End of report >
Please do the following:
Run OTL.exe
- Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
:OTL PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found. O2 - BHO: (no name) - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - No CLSID value found. O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB) O2 - BHO: (Fast Browser Search Toolbar Helper) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll () O3 - HKLM\..\Toolbar: (no name) - {50A48915-ADC1-4144-91FE-5E28B4926BD0} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Elevation - No CLSID value found. :Commands [purity] [emptytemp] [start explorer] [Reboot] - Then click the Run Fix button at the top
- Let the program run unhindered, reboot when it is done
- Then post the resulting OTL log
NEXT
were you ever successful in running the command I gave you previously in the elevated Admin mode?
what message did you get back.
were you able to repair your internet connection?
please run the OTL fix as instructed above. Then describe for me how your computer is running
whether or not you have internet connection
what error messages you are receiving.
(there is no need to quote my posts - just post your response, it makes for a long answer - use the ADD REPLY button)
log into an Administrators account in safe mode
to log into safe mode do this:
- Go to Start> Shut off your Computer> Restart
- As the computer starts to boot-up, Tap the F8 KEY repeatedly,
- this will bring up a menu.
- Use the Up and Down Arrow Keys to scroll up to Safemode
- Then press the Enter Key on your Keyboard
- go into the ADMINISTRATOR's account
NOW:
- Click on Start button.
- Type Cmd in the Start Search text box.
- Type the following command at the command prompt
netsh winsock reset
- then press the Enter key.
- Restart the computer back into normal mode
Please let me know if this resolves the internet access issue.
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI