What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Please can someone help a totally non technical person even s

20 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #32
You can uninstall, leave the quarantined files. If there's a log, I would like to see it. Please also run the DDS tool we had earlier and post the logs it gives. Thanks. How's the computer running?
Post #34
sorry have to go for kids soon and very confised as to what is on the computer now, Do I reactiate AVG now.? Think firewall off too. what DSS scan - please can you remind me again. I seem to have loads of icons on here now - do I leave them all here? Whn we have finished all this please can you let me know what scans I should use if I have problem again? Someone suggested buying nod 32 ( have no idea how much it is) woudo you agree? I seem to have AVG, malbyteware (sp) and other scans on here - do I need all of them on here? Finally did you have any comment about the "this is not a secure site" coming up when log into hot mail now? Thanks very much
Post #35
still running quite slow - this site anyway If I have to go before you post where to find c dribe and dds I will post as soon as I can even if it is much later - thanks for all your help
Post #36
Hi,

Yes, you can re-activate AVG now. Don't worry too much if you can't find the log. I haven't used that ESET scan in a while so I can't remember what it calls the log it saves. Can you remember what kind of items it found? If they were in the folder C:\QooBox then that's nothing to worry about.

For the DDS scan, simply double-click the DDS icon on your Desktop and wait for it to finish. Two logs should pop-up, simply copy/paste them into a new reply.

Once we are done (which we nearly are), I will provide my recommendations as to security software.

Some settings for your browser were probably reset, which is why you may be seeing this Hotmail message. Can you tell me exactly what it says? Does it happen all the time?

Let me know if there are any other problems with your computer.

Thanks.
Post #37
As for that ESET log, let's try something.

Please double-cliick SystemLook, that I had you download earlier. Copy/paste the following into the box, as before:

:contents
C:\Program Files\EsetOnlineScanner\log.txt

Post the log that pops up.

Thanks.
Post #38
was this it? SystemLook v1.0 by jpshortstuff (29.08.09) Log created at 10:48 on 15/09/2009 by Daniel (Administrator - Elevation successful) ========== dir ========== C:\WINDOWS\system32\%commonprogramfiles% - Parameters: "/s /noexpand" —Files— None found. C:\WINDOWS\system32\%commonprogramfiles%\microsoft shared d—– [07:40 13/09/2009] -=End Of File=- shall I run the eset scan again?
Post #40
this popped up SystemLook v1.0 by jpshortstuff (29.08.09) Log created at 12:18 on 15/09/2009 by Daniel (Administrator - Elevation successful) ========== contents ========== C:\Program Files\EsetOnlineScanner\log.txt - Unable to open file. -=End Of File=-
Post #42 last edited
OK, forget everything for a second, let's start again with the information I need. I'm going to ask you to download the programs again in case you've lost/deleted them. If it says they already exist just overwrite them.

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done two logs should open:
  • DDS.txt
  • Attach.txt
  • Save both reports to your desktop.
—————————————————
  • Post the contents of the DDS.txt report and the Attach.txt report in your next reply. Don't worry about zipping the file if DDS asks you to.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :contents
C:\Program Files\EsetOnlineScanner\log.txt
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

Thanks.

EDIT: I'm heading off now, should be around later on.
Post #43
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-07-30.01) Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume2 Install Date: 16/05/2007 10:05:24 System Uptime: 15/09/2009 08:06:27 (4 hours ago) Motherboard: Acer | | Grapevine Processor: Intel® Core™2 CPU T5500 @ 1.66GHz | U1 | 1662/166mhz Processor: Intel® Core™2 CPU T5500 @ 1.66GHz | U1 | 1662/166mhz ==== Disk Partitions ========================= C: is FIXED (FAT32) - 53 GiB total, 12.075 GiB free. D: is FIXED (FAT32) - 54 GiB total, 47.06 GiB free. E: is CDROM () ==== Disabled Device Manager Items ============= ==== System Restore Points =================== RP397: 12/09/2009 22:43:59 - System Checkpoint RP398: 12/09/2009 22:44:00 - System Checkpoint RP399: 12/09/2009 22:44:01 - System Checkpoint RP400: 12/09/2009 22:44:01 - System Checkpoint RP401: 12/09/2009 22:44:02 - System Checkpoint RP402: 12/09/2009 22:44:03 - System Checkpoint RP403: 12/09/2009 22:44:03 - System Checkpoint RP404: 12/09/2009 22:44:04 - System Checkpoint RP405: 12/09/2009 22:44:05 - System Checkpoint RP406: 12/09/2009 22:44:05 - System Checkpoint RP407: 12/09/2009 22:44:06 - System Checkpoint RP408: 12/09/2009 22:44:06 - System Checkpoint RP409: 12/09/2009 22:44:07 - System Checkpoint RP410: 12/09/2009 22:44:07 - System Checkpoint RP411: 12/09/2009 22:44:08 - Installed Maxtor Manager RP412: 12/09/2009 22:44:08 - Software Distribution Service 3.0 RP413: 12/09/2009 22:44:09 - Software Distribution Service 3.0 RP414: 12/09/2009 22:44:09 - System Checkpoint RP415: 12/09/2009 22:44:10 - System Checkpoint RP416: 12/09/2009 22:44:10 - System Checkpoint RP417: 12/09/2009 22:44:11 - System Checkpoint RP418: 12/09/2009 22:44:11 - System Checkpoint RP419: 12/09/2009 22:44:12 - Configured Turbo Lister 2 RP420: 12/09/2009 22:44:12 - Software Distribution Service 3.0 RP421: 12/09/2009 22:44:12 - Configured Turbo Lister 2 RP422: 12/09/2009 22:44:12 - Installed Turbo Lister 2 RP423: 12/09/2009 22:44:13 - Software Distribution Service 3.0 RP424: 12/09/2009 22:44:13 - Software Distribution Service 3.0 RP425: 12/09/2009 22:44:14 - System Checkpoint RP426: 12/09/2009 22:44:15 - System Checkpoint RP427: 12/09/2009 22:44:16 - System Checkpoint RP428: 12/09/2009 22:44:16 - System Checkpoint RP429: 12/09/2009 22:44:17 - Software Distribution Service 3.0 RP430: 12/09/2009 22:44:17 - System Checkpoint RP431: 12/09/2009 22:44:17 - System Checkpoint RP432: 12/09/2009 22:44:18 - System Checkpoint RP433: 12/09/2009 22:44:18 - System Checkpoint RP434: 12/09/2009 22:44:18 - System Checkpoint RP435: 12/09/2009 22:44:19 - System Checkpoint RP436: 12/09/2009 22:44:19 - Software Distribution Service 3.0 RP437: 12/09/2009 22:44:19 - System Checkpoint RP438: 12/09/2009 22:44:20 - System Checkpoint RP439: 12/09/2009 22:44:21 - System Checkpoint RP440: 12/09/2009 22:44:21 - System Checkpoint RP441: 12/09/2009 22:44:22 - System Checkpoint RP442: 12/09/2009 22:44:23 - System Checkpoint RP443: 12/09/2009 22:44:24 - Software Distribution Service 3.0 RP444: 12/09/2009 22:44:25 - System Checkpoint RP445: 13/09/2009 15:51:24 - Installed AVG Free 8.5 RP446: 14/09/2009 09:34:58 - Avg8 Update ==== Installed Programs ====================== 7300_Help 7300Trb 7400 Acer Arcade Acer eDataSecurity Management Acer eDataSecurity Management 1.00.26 Acer eLock Management Acer Empowering Technology framework Acer eNet Management Acer ePerformance Management Acer ePower Management Acer ePresentation Management Acer eSettings Management Acer GridVista Acer Screensaver Adobe Flash Player 10 ActiveX Adobe Reader 7.0.9 Adobe Shockwave Player AiO_Scan AiOSoftware Apple Mobile Device Support Apple Software Update µTorrent AVG Free 8.5 AVS DVDMenu Editor 1.2.1.19 AVS Video Editor 3.5 AVS Video Tools 5.6 Bonjour BufferChm CaddyConnect Camera Support Core Library Camera Window DS Camera Window DVC Camera Window MC Canon Camera Support Core Library Canon Camera Window DS for ZoomBrowser EX Canon Camera Window DVC for ZoomBrowser EX Canon Camera Window for ZoomBrowser EX Canon Internet Library for ZoomBrowser EX Canon MovieEdit Task for ZoomBrowser EX Canon PhotoRecord Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon Utilities PhotoStitch 3.1 Canon ZoomBrowser EX Copy CopyTrans Suite (remove only) CP_AtenaShokunin1Config cp_dwShrek2Albums1 cp_dwShrek2Cards1 CreativeProjects CreativeProjectsTemplates CueTour Destinations Director DocProc DocumentViewer DownloadStudio DVD Decrypter (Remove Only) Enterprise ERUNT 1.1j Fax Google Chrome Google Earth Google Update Helper Google Updater Hamachi 1.0.3.0 HDAUDIO Soft Data Fax Modem with SmartCP High Definition Audio Driver Package - KB888111 Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows XP (KB896256) Hotfix for Windows XP (KB909667) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB918005) Hotfix for Windows XP (KB935448) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB970653-v3) HP Extended Capabilities 4.7 HP Image Zone 4.7 HP Product Assistant HP PSC & OfficeJet 4.7 HP PSC & Officejet 4.7 Corporate Edition HP Software Update HPSystemDiagnostics InstantShare Intel® Graphics Media Accelerator Driver Intel® PROSet/Wireless Software Internet Library iTunes J2SE Runtime Environment 5.0 Update 3 Java™ 6 Update 3 Java™ SE Runtime Environment 6 Update 1 Keystroke Converter (remove only) Launch Manager LightScribe 1.4.97.1 LimeWire 4.12.11 Malwarebytes' Anti-Malware MarketResearch Maxtor Manager mCore Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office XP Professional Microsoft Silverlight Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable mMHouse MovieEdit Task mPfMgr mProSafe MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 6 Service Pack 2 (KB954459) mWlsSafe mXML Norton AntiVirus 2006 (Symantec Corporation) NTI Backup NOW! 4.5 NTI CD & DVD-Maker O2 Broadband Assistant PanoStandAlone PhotoGallery PhotoStitch Picture Package Music Transfer PowerProducer ProductContext QFolder QuickTime RAW Image Task Readme Realtek High Definition Audio Driver RemoteCapture Task 1.1 Safari Scan ScannerCopy Security Update for CAPICOM (KB931906) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Internet Explorer 7 (KB958215) Security Update for Windows Internet Explorer 7 (KB960714) Security Update for Windows Internet Explorer 7 (KB961260) Security Update for Windows Internet Explorer 7 (KB963027) Security Update for Windows Internet Explorer 7 (KB969897) Security Update for Windows Internet Explorer 7 (KB972260) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB968816) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901190) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937894) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958470) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961371) Security Update for Windows XP (KB961373) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB968537) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB971032) Security Update for Windows XP (KB971557) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB971961) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) SkinsHP1 Sky Broadband SkyCaddie Desktop Skype™ 3.2 Sony Picture Utility Sony USB Driver Synaptics Pointing Device Driver Tansee iPod Transfer v3.8 TrayApp Turbo Lister 2 Unload Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB912945) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB932823-v3) Update for Windows XP (KB933360) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB951072-v2) Update for Windows XP (KB955839) Update for Windows XP (KB967715) Update for Windows XP (KB973815) USB2.0 PC Camera (SN9C201&202) VideoLAN VLC media player 0.8.4a VNC Free Edition 4.1.2 WebFldrs XP WebReg Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885855 Windows XP Hotfix - KB885884 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 WinPcap 4.0.2 Yahoo! Toolbar ==== Event Viewer Messages From Past Week ======== 14/09/2009 22:03:44, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the PEVSystemStart service to connect. 14/09/2009 15:02:29, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Netman service. 13/09/2009 11:11:31, error: PlugPlayManager [11] - The device Root\LEGACY_XUBRBJ\0000 disappeared from the system without first being prepared for removal. 13/09/2009 11:05:41, error: ipnathlp [32003] - The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code. 13/09/2009 11:05:36, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 7A7905B05BF1. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. 13/09/2009 08:44:57, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: abp480n5 adpu160m agp440 agpCPQ Aha154x aic78u2 aic78xx AliIde alim1541 amdagp amsint asc asc3350p asc3550 cbidf cd20xrnt CmdIde Cpqarray dac2w2k dac960nt dpti2o hpn i2omp ini910u IntelIde mraid35x perc2 perc2hib ql1080 Ql10wnt ql12160 ql1240 ql1280 sisagp Sparrow symc810 symc8xx sym_hi sym_u3 TosIde ultra viaagp ViaIde 13/09/2009 08:44:33, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume. 13/09/2009 00:18:21, error: Service Control Manager [7028] - The ncoxmfyfajtk Registry key denied access to SYSTEM account programs so the Service Control Manager took ownership of the Registry key. 12/09/2009 22:17:06, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\eventlog.dll. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.2180. ==== End Of File ===========================
Post #44
hope these are both right:

DDS (Ver_09-07-30.01) - FAT32x86
Run by [removed] at 12:25:54.70 on 15/09/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.502.107 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\system32\spoolsv.exe
SVCHOST.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Acer\Empowering Technology\admServ.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Bonjour\mDNSResponder.exe
SVCHOST.EXE
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\O2\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Conceiva\DownloadStudio\DownloadStudioScheduleMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\DOCUME~1\Daniel\LOCALS~1\Temp\RtkBtMnt.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Daniel\Local Settings\Temporary Internet Files\Content.IE5\QQ8M54P5\dds[1].scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.yahoo.co.uk/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = hxxp://global.acer.com/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ycomp/defaults/su/*http://uk.yahoo.com
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg8\toolbar\IEToolbar.dll
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
BHO: IeMonitorBho Class: {8170d7dc-bdd6-461e-88eb-f047257898c9} - c:\program files\conceiva\downloadstudio\DLMonitr.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg8\toolbar\IEToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\windows\system32\eDStoolbar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg8\toolbar\IEToolbar.dll
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [LaunchApp] Alaunch
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SkyTel] SkyTel.EXE
mRun: [AzMixerSel] c:\program files\realtek\installshield\AzMixerSel.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [ntiMUI] c:\program files\newtech infosystems\nti cd & dvd-maker 7\ntiMUI.exe
mRun: [ADMTray.exe] "c:\acer\empowering technology\admtray.exe"
mRun: [eDataSecurity Loader] c:\acer\empowering technology\edatasecurity\eDSloader.exe
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [PCMService] "c:\program files\acer\acer arcade\PCMService.exe"
mRun: [ePower_DMC] c:\acer\empowering technology\epower\ePower_DMC.exe
mRun: [Acer ePower Management] c:\acer\empowering technology\epower\Acer ePower Management.exe boot
mRun: [LManager] c:\progra~1\launch~1\LManager.exe
mRun: [eRecoveryService] c:\acer\empowering technology\erecovery\Monitor.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_03\bin\jusched.exe"
mRun: [FixCamera] c:\windows\FixCamera.exe
mRun: [tsnp2std] c:\windows\tsnp2std.exe
mRun: [snp2std] c:\windows\vsnp2std.exe
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [O2] "c:\program files\o2\bin\sprtcmd.exe" /P O2
mRun: [DownloadStudio] c:\program files\conceiva\downloadstudio\DownloadStudioScheduleMonitor.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [mxomssmenu] "c:\program files\maxtor\onetouch status\maxmenumgr.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
StartupFolder: c:\docume~1\daniel\startm~1\programs\startup\pictur~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpimag~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: {08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.skybroadband.com
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader5.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {38AB0814-B09B-4378-9940-14A19638C3C2} - hxxp://www.auctiva.com/Aurigma/ImageUploader57.cab
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www1.snapfish.co.uk/SnapfishUKActivia.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {BF6BBE9A-0656-4598-A0CD-32DAC03959B5} - hxxps://www.tescophoto.com/wpp/tesco/app/opcuploader.cab
DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} - hxxp://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader4.cab
DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-9-13 335240]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-9-13 27784]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-9-13 108552]
R1 OsaFsLoc;OsaFsLoc;c:\windows\system32\drivers\OsaFsLoc.sys [2005-10-15 12106]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-9-13 297752]
R2 AWService;AdminWorks Agent X6;c:\acer\empowering technology\admServ.exe [2005-10-24 1314816]
R2 EpmPsd;Acer EPM Power Scheme Driver;c:\windows\system32\drivers\epm-psd.sys [2007-5-16 4096]
R2 EpmShd;Acer EPM System Hardware Driver;c:\windows\system32\drivers\epm-shd.sys [2007-5-16 78208]
R2 Maxtor Sync Service;Maxtor Service;c:\program files\maxtor\sync\SyncServices.exe [2008-4-17 181544]
R2 osaio;osaio;c:\windows\system32\drivers\osaio.sys [2005-6-30 7296]
R2 osanbm;osanbm;c:\windows\system32\drivers\osanbm.sys [2005-1-14 4010]
R3 NdisFilt;OSA NdisFilter Protocol;c:\windows\system32\drivers\NdisFilt.sys [2005-9-13 4392]
S2 gupdate1c9d1be50facd18;Google Update Service (gupdate1c9d1be50facd18);c:\program files\google\update\GoogleUpdate.exe [2009-5-10 133104]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-6 34064]

=============== Created Last 30 ================

2009-09-15 10:51 –d—– c:\program files\ESET
2009-09-14 22:02 a-dshr– C:\cmdcons
2009-09-14 22:00 229,888 a——- c:\windows\PEV.exe
2009-09-14 22:00 161,792 a——- c:\windows\SWREG.exe
2009-09-14 22:00 98,816 a——- c:\windows\sed.exe
2009-09-13 18:23 –d—– C:\$AVG8.VAULT$
2009-09-13 17:02 –d—– C:\FOUND.014
2009-09-13 15:52 108,552 a——- c:\windows\system32\drivers\avgtdix.sys
2009-09-13 15:52 11,952 a——- c:\windows\system32\avgrsstx.dll
2009-09-13 15:52 335,240 a——- c:\windows\system32\drivers\avgldx86.sys
2009-09-13 15:51 –d—– c:\windows\system32\drivers\Avg
2009-09-13 15:51 –d—– c:\docume~1\alluse~1\applic~1\AVG Security Toolbar
2009-09-13 15:51 –d—– c:\program files\AVG
2009-09-13 15:51 –d—– c:\docume~1\alluse~1\applic~1\avg8
2009-09-13 08:40 –d—– c:\windows\system32\%commonprogramfiles%
2009-09-12 23:21 –d—– c:\docume~1\daniel\applic~1\Malwarebytes
2009-09-12 23:21 38,224 a——- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-12 23:21 19,160 a——- c:\windows\system32\drivers\mbam.sys
2009-09-12 23:21 –d—– c:\program files\Malwarebytes' Anti-Malware
2009-09-12 23:21 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-09-12 23:15 –d—– c:\docume~1\daniel\applic~1\AVG8
2009-09-12 23:06 –d—– c:\windows\pss
2009-08-26 10:05 –d—– C:\FOUND.013
2009-08-20 11:20 –d—– C:\FOUND.012

==================== Find3M ====================

2009-08-13 16:16 512,000 a——- c:\windows\system32\dllcache\jscript.dll
2009-08-05 10:11 204,800 a——- c:\windows\system32\mswebdvd.dll
2009-08-05 10:11 204,800 a——- c:\windows\system32\dllcache\mswebdvd.dll
2009-07-19 14:33 3,597,824 a——- c:\windows\system32\dllcache\mshtml.dll
2009-07-19 14:33 6,067,200 ——– c:\windows\system32\dllcache\ieframe.dll
2009-07-17 19:55 58,880 a——- c:\windows\system32\dllcache\atl.dll
2009-07-17 19:55 58,880 a——- c:\windows\system32\atl.dll
2009-07-13 02:18 233,472 a——- c:\windows\system32\wmpdxm.dll
2009-07-13 02:18 233,472 a——- c:\windows\system32\dllcache\wmpdxm.dll
2009-07-13 02:18 4,960,256 a——- c:\windows\system32\dllcache\wmp.dll
2009-07-10 14:42 1,315,328 a——- c:\windows\system32\dllcache\msoe.dll
2009-06-29 12:07 70,656 a——- c:\windows\system32\dllcache\ie4uinit.exe
2009-06-29 12:07 13,824 ——– c:\windows\system32\dllcache\ieudinit.exe
2009-06-29 09:35 634,632 a——- c:\windows\system32\dllcache\iexplore.exe
2009-06-29 09:33 2,452,872 ——– c:\windows\system32\dllcache\ieapfltr.dat
2009-06-29 09:33 161,792 a——- c:\windows\system32\dllcache\ieakui.dll
2009-06-22 12:49 117,248 a——- c:\windows\system32\mqtgsvc.exe
2009-06-22 12:49 117,248 a——- c:\windows\system32\dllcache\mqtgsvc.exe
2009-06-22 12:49 19,968 a——- c:\windows\system32\mqbkup.exe
2009-06-22 12:49 19,968 a——- c:\windows\system32\dllcache\mqbkup.exe
2009-06-22 12:49 4,608 a——- c:\windows\system32\mqsvc.exe
2009-06-22 12:49 4,608 a——- c:\windows\system32\dllcache\mqsvc.exe
2009-06-22 12:48 91,776 a——- c:\windows\system32\dllcache\mqac.sys
2009-06-21 23:04 153,088 a——- c:\windows\system32\dllcache\triedit.dll
2008-06-30 21:01 42,976 a——- c:\docume~1\daniel\applic~1\GDIPFONTCACHEV1.DAT

============= FINISH: 12:27:02.65 ===============
Post #45
think this is it - will check back later thanks SystemLook v1.0 by jpshortstuff (29.08.09) Log created at 12:32 on 15/09/2009 by Daniel (Administrator - Elevation successful) ========== contents ========== C:\Program Files\EsetOnlineScanner\log.txt - Unable to open file. -=End Of File=-

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI