What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Wor.win32.net sky virus detected

25 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #46
heres the results to eset scan……… ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK # version=7 # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) # OnlineScanner.ocx=1.0.0.6211 # api_version=3.0.2 # EOSSerial=2a0cc589efd7dc42b9c31e0e3aa02278 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2010-01-16 02:33:18 # local_time=2010-01-15 07:33:18 (-0700, Mountain Standard Time) # country="United States" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=3587 16777189 100 94 0 11755129 0 0 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=154839 # found=4 # cleaned=0 # scan_time=9710 C:\Documents and Settings\Paul\My Documents\Downloads\SetupGamevance(2).exe a variant of Win32/Adware.Gamevance.AE application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\WINDOWS\system32\warning.html.vir Win32/TrojanDownloader.FakeAlert.AED virus 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\WINDOWS\system32\winsts.sys.vir Win32/Agent.QMG trojan 00000000000000000000000000000000 I F:\Program Files\IEToolbar\Bullseye Tool Bar\lwpopper.html Win32/Adware.Toolbar.Bullseye application 00000000000000000000000000000000 I
Post #47 last edited
Hi,

Sorry, I should have been more clear,

I just wanted to know if MBAM had deleted it or not (the log said it didn't)

If it is still on your system, please do the following:

  • Make sure to use Internet Explorer for this
  • Please go to VirSCAN.org FREE on-line scan service
  • Copy and paste the following file path into the "Suspicious files to scan" box on the top of the page:


    F:\WINDOWS\system32\mfsdisk.sys

  • Click on the Upload button
  • If a pop-up appears saying the file has been scanned already, please select the ReScan button.
  • Once the Scan is completed, click on the "Copy to Clipboard" button. This will copy the link of the report into the Clipboard.
  • Paste the contents of the Clipboard in your next reply.

You can delete the copy from mediafire
Post #48
VirSCAN.org Scanned Report :
Scanned time : 2010/01/15 21:08:23 (MST)
Scanner results: 14% Scanner(s) (5/37) found malware!
File Name : mfsdisk.sys
File Size : 2304 byte
File Type : PE32 executable for MS Windows (native) Intel 80386 32-bit
MD5 : e57286f853bfe9a59c7ce51d6543d407
SHA1 : 5b650c05caeee698e7371c8e486820c663ab3133
Online report : http://virscan.org/report/8e9fd91f8554d639…e3b1973ff9.html

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 4.5.0.8 20100116023211 2010-01-16 4.13 -
AhnLab V3 2010.01.16.00 2010.01.16 2010-01-16 1.14 -
AntiVir 8.2.1.142 7.10.2.202 2010-01-15 0.33 -
Antiy 2.0.18 20100112.3695772 2010-01-12 0.02 -
Arcavir 2009 201001151710 2010-01-15 0.02 -
Authentium 5.1.1 201001152349 2010-01-15 1.26 -
AVAST! 4.7.4 100115-2 2010-01-15 0.00 -
AVG 8.5.288 270.14.144/2625 2010-01-16 0.31 -
BitDefender 7.81008.4859871 7.29903 2010-01-16 4.15 -
CA (VET) 35.1.0 7239 2010-01-15 5.57 -
ClamAV 0.95.2 10303 2010-01-16 0.01 -
Comodo 3.13.579 3409 2010-01-15 0.92 -
CP Secure 1.3.0.5 2010.01.16 2010-01-16 0.03 Troj.W32.Inject.albu
Dr.Web 4.44.0.9170 2010.01.15 2010-01-15 8.52 -
F-Prot 4.4.4.56 20100115 2010-01-15 1.25 -
F-Secure 7.02.73807 2010.01.15.13 2010-01-15 0.10 -
Fortinet 11.378- 11.378 2010-01-15 0.29 Suspicious
GData 19.9985/19.678 20100115 2010-01-15 7.50 -
ViRobot 20100115 2010.01.15 2010-01-15 0.44 -
Ikarus T3.1.01.80 2010.01.15.74974 2010-01-15 4.34 -
JiangMin 13.0.900 2010.01.13 2010-01-13 16.79 -
Kaspersky 5.5.10 2010.01.16 2010-01-16 0.06 -
KingSoft 2009.2.5.15 2010.1.15.18 2010-01-15 0.57 -
McAfee 5.3.00 5862 2010-01-15 3.37 -
Microsoft 1.5302 2010.01.16 2010-01-16 6.84 -
Norman 6.01.09 6.01.00 2010-01-15 4.01 -
Panda 9.05.01 2010.01.15 2010-01-15 2.33 Rootkit/Agent.MUL
Trend Micro 9.120-1004 6.772.06 2010-01-15 0.02 -
Quick Heal 10.00 2010.01.15 2010-01-15 1.29 Trojan.Rootkitdrv.gc
Rising 20.0 22.30.05.01 2010-01-16 1.07 -
Sophos 3.03.0 4.49 2010-01-16 3.11 Mal/Rootkit-Q
Sunbelt 3.9.2390.2 5619 2010-01-15 2.90 -
Symantec 1.3.0.24 20100112.005 2010-01-12 0.39 -
nProtect 20100115.01 6886403 2010-01-15 4.00 -
The Hacker [removed] v00153 2010-01-15 0.79 -
VBA32 3.12.12.1 20100115.0633 2010-01-15 2.38 -
VirusBuster 4.5.11.10 10.119.5/2015407 2010-01-15 2.35 -
Post #49
VirSCAN.org Scanned Report :
Scanned time : 2010/01/15 21:16:03 (MST)
Scanner results: 14% Scanner(s) (5/37) found malware!
File Name : mfsdisk.sys
File Size : 2304 byte
File Type : PE32 executable for MS Windows (native) Intel 80386 32-bit
MD5 : e57286f853bfe9a59c7ce51d6543d407
SHA1 : 5b650c05caeee698e7371c8e486820c663ab3133
Online report : http://virscan.org/report/0a4acb0da0485655…8902a2fd81.html

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 4.5.0.8 20100116023211 2010-01-16 4.57 -
AhnLab V3 2010.01.16.00 2010.01.16 2010-01-16 1.10 -
AntiVir 8.2.1.142 7.10.2.202 2010-01-15 0.40 -
Antiy 2.0.18 20100112.3695772 2010-01-12 0.02 -
Arcavir 2009 201001151710 2010-01-15 0.02 -
Authentium 5.1.1 201001152349 2010-01-15 1.40 -
AVAST! 4.7.4 100115-2 2010-01-15 0.00 -
AVG 8.5.288 270.14.144/2625 2010-01-16 0.38 -
BitDefender 7.81008.4859871 7.29903 2010-01-16 4.39 -
CA (VET) 35.1.0 7239 2010-01-15 6.14 -
ClamAV 0.95.2 10303 2010-01-16 0.01 -
Comodo 3.13.579 3409 2010-01-15 1.01 -
CP Secure 1.3.0.5 2010.01.16 2010-01-16 0.03 Troj.W32.Inject.albu
Dr.Web 4.44.0.9170 2010.01.15 2010-01-15 8.54 -
F-Prot 4.4.4.56 20100115 2010-01-15 1.25 -
F-Secure 7.02.73807 2010.01.15.13 2010-01-15 0.10 -
Fortinet 11.379- 11.379 2010-01-15 0.16 Suspicious
GData 19.9985/19.678 20100115 2010-01-15 6.74 -
ViRobot 20100115 2010.01.15 2010-01-15 0.47 -
Ikarus T3.1.01.80 2010.01.15.74974 2010-01-15 4.33 -
JiangMin 13.0.900 2010.01.13 2010-01-13 10.25 -
Kaspersky 5.5.10 2010.01.16 2010-01-16 0.07 -
KingSoft 2009.2.5.15 2010.1.15.18 2010-01-15 0.66 -
McAfee 5.3.00 5862 2010-01-15 3.36 -
Microsoft 1.5302 2010.01.16 2010-01-16 7.30 -
Norman 6.01.09 6.01.00 2010-01-15 4.01 -
Panda 9.05.01 2010.01.15 2010-01-15 2.23 Rootkit/Agent.MUL
Trend Micro 9.120-1004 6.772.06 2010-01-15 0.02 -
Quick Heal 10.00 2010.01.15 2010-01-15 1.30 Trojan.Rootkitdrv.gc
Rising 20.0 22.30.05.01 2010-01-16 1.24 -
Sophos 3.03.0 4.49 2010-01-16 3.16 Mal/Rootkit-Q
Sunbelt 3.9.2390.2 5619 2010-01-15 2.71 -
Symantec 1.3.0.24 20100112.005 2010-01-12 0.56 -
nProtect 20100115.01 6886403 2010-01-15 4.03 -
The Hacker [removed] v00153 2010-01-15 0.78 -
VBA32 3.12.12.1 20100115.0633 2010-01-15 2.45 -
VirusBuster 4.5.11.10 10.119.5/2015407 2010-01-15 0.00 -
Post #51
Hi,

Enough scanners found it suspicious, so re-run MBAM and have it delete that file, no need to have it delete the combofix, qoobox or system restore locations though.

Please post a fresh DDS and attach.txt and advise how your computer is running now and if there are any outstanding issues.

I suggest you navigate to the following file and delete it:

F:\Program Files\IEToolbar\Bullseye Tool Bar\lwpopper.html
Post #56
DDS (Ver_09-12-01.01) - NTFSx86 Run by [removed] at 21:38:46.73 on Fri 01/15/2010 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1228 [GMT -7:00] AV: Norton AntiVirus *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE svchost.exe C:\xampp\apache\bin\httpd.exe C:\xampp\FileZillaFTP\FileZilla server.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\xampp\xampp_service_mercury.exe C:\xampp\mysql\bin\mysqld.exe C:\xampp\MercuryMail\mercury.exe C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe C:\Program Files\Norton AntiVirus\Engine\16.7.2.11\ccSvcHst.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Norton AntiVirus\Engine\16.7.2.11\ccSvcHst.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe C:\Program Files\ScanSoft\OmniPage15.0\Opware15.exe C:\xampp\apache\bin\httpd.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\ScanSoft\OmniPage15.0\OpAgent.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\Paul\Desktop\dds.com ============== Pseudo HJT Report =============== uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2418376 BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll TB: PageRage Toolbar: {9565115d-c7d6-46d3-bd63-b67b481a4368} - c:\program files\pagerage\tbPage.dll TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" uRun: [LightScribe Control Panel] c:\program files\common files\lightscribe\LightScribeControlPanel.exe -hidden uRun: [OpAgent] "c:\program files\scansoft\omnipage15.0\OpAgent.exe" /agent uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [Smapp] c:\program files\analog devices\soundmax\SMTray.exe mRun: [DrvLsnr] c:\program files\analog devices\soundmax\DrvLsnr.exe mRun: [igfxpers] c:\windows\system32\igfxpers.exe mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE mRun: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon mRun: [WrtMon.exe] c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot mRun: [Opware15] "c:\program files\scansoft\omnipage15.0\Opware15.exe" mRun: [ScanSoft OmniPage 15.0-reminder] "c:\program files\scansoft\omnipage15.0\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\scansoft\omnipage15.0\ereg\ereg.ini" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\privoxy.lnk - c:\program files\vidalia bundle\privoxy\privoxy.exe IE: {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://c:\program files\iespell\iespell.dll/SPELLCHECK.HTM IE: {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://c:\program files\iespell\iespell.dll/SPELLOPTION.HTM IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {36ECAF82-3300-8F84-092E-AFF36D6C7040} - {86529161-034E-4F8A-88D2-3C625E612E04} - c:\program files\winhttrack\WinHTTrackIEBar.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Notify: igfxcui - igfxsrvc.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe" ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\paul\applic~1\mozilla\firefox\profiles\cjntr7m9.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT840126&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT840126&SearchSource=2&q= FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\ipsffplgn\components\IPSFFPl.dll FF - component: c:\documents and settings\paul\application data\mozilla\firefox\profiles\cjntr7m9.default\extensions\{81bf1d23-5f17-408d-ac6b-bd6df7caf670}\components\XpcomOpusConnector.dll FF - component: c:\documents and settings\paul\application data\mozilla\firefox\profiles\cjntr7m9.default\extensions\{9565115d-c7d6-46d3-bd63-b67b481a4368}\components\FFExternalAlert.dll FF - component: c:\program files\mozilla firefox\extensions\{b0410fca-f0cd-3ae6-f27c-ccdab925b073}\components\aV-pnGf3_.dll FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\program files\virtools\3d life player\npvirtools.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: LoudMo Contextual Ad Assistant: No Registry Reference - c:\program files\mozilla firefox\extensions\{b0410fca-f0cd-3ae6-f27c-ccdab925b073} —- FIREFOX POLICIES —- FF - user.js: google.toolbar.linkdoctor.enabled - false c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); ============= SERVICES / DRIVERS =============== R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1007020.00b\SymEFA.sys [2009-9-22 310320] R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\nav\1007020.00b\BHDrvx86.sys [2009-9-22 259632] R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nav\1007020.00b\cchpx86.sys [2009-9-22 482432] R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20100112.001\IDSXpx86.sys [2010-1-14 329592] R2 Apache2.2;Apache2.2;c:\xampp\apache\bin\httpd.exe [2009-12-10 24640] R2 Mercury;Mercury;c:\xampp\xampp_service_mercury.exe [2009-12-10 73728] R2 Norton AntiVirus;Norton AntiVirus;c:\program files\norton antivirus\engine\16.7.2.11\ccSvcHst.exe [2009-9-22 117640] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-12-9 102448] R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20100114.048\NAVENG.SYS [2010-1-15 84912] R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20100114.048\NAVEX15.SYS [2010-1-15 1323568] R3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;c:\windows\system32\drivers\nwusbser2.sys [2009-6-3 174720] R3 NWVNDIS;Novatel Wireless Virtual Network Adapter;c:\windows\system32\drivers\NWVNdis.sys [2009-6-3 341504] S2 gupdate1ca47b5aa865164;Google Update Service (gupdate1ca47b5aa865164);c:\program files\google\update\GoogleUpdate.exe [2009-10-7 133104] S3 ndisdrv;ndisdrv;\??\c:\windows\system32\ndisdrv.sys –> c:\windows\system32\ndisdrv.sys [?] S3 NWUSBCDFIL;Novatel Wireless Installation CD;c:\windows\system32\drivers\NwUsbCdFil.sys [2009-6-15 20480] S3 rt2870;Linksys 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-9-23 709248] S3 SMSIVZAM5;SMSIVZAM5 NDIS Protocol Driver;c:\progra~1\verizo~1\vzacce~1\SMSIVZAM5.SYS [2009-5-25 32408] =============== Created Last 30 ================ 2010-01-16 04:34:12 0 —-a-w- c:\documents and settings\paul\null 2010-01-15 23:39:07 0 d—–w- c:\program files\ESET 2010-01-14 22:09:28 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-01-14 22:09:27 19160 —-a-w- c:\windows\system32\drivers\mbam.sys 2010-01-14 22:09:26 0 d—–w- c:\program files\Malwarebytes' Anti-Malware 2010-01-14 05:01:45 0 d-sha-r- C:\cmdcons 2010-01-14 04:58:30 98816 —-a-w- c:\windows\sed.exe 2010-01-14 04:58:30 77312 —-a-w- c:\windows\MBR.exe 2010-01-14 04:58:30 261632 —-a-w- c:\windows\PEV.exe 2010-01-14 04:58:30 161792 —-a-w- c:\windows\SWREG.exe 2010-01-14 04:58:05 0 d—–w- C:\Dave.exe11613D 2010-01-14 01:27:17 0 d—–w- C:\Dave.exe 2010-01-11 01:16:54 0 d—–w- C:\!KillBox ==================== Find3M ==================== 2010-01-11 00:34:48 96512 ——w- c:\windows\system32\drivers\atapi.sys 2009-12-05 00:17:30 108144 —-a-w- c:\windows\system32\CmdLineExt.dll 2009-10-31 17:10:15 319488 —-a-w- c:\windows\win-get.exe 2009-10-31 17:10:06 324608 —-a-w- c:\windows\wget.exe 2009-10-29 07:45:38 916480 ——w- c:\windows\system32\wininet.dll 2009-10-21 05:38:36 75776 —-a-w- c:\windows\system32\strmfilt.dll 2009-10-21 05:38:36 25088 —-a-w- c:\windows\system32\httpapi.dll ============= FINISH: 21:39:17.09 ===============
Post #57 last edited
F: is FIXED (NTFS) - 37 GiB total, 31.239 GiB free.
H: is Removable
I: is CDROM (CDFS)
J: is Removable

==== Disabled Device Manager Items =============

Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
Description: PS/2 Compatible Mouse
Device ID: ACPI\PNP0F13\4&369939D9&0
Manufacturer: Logitech
Name: PS/2 Compatible Mouse
PNP Device ID: ACPI\PNP0F13\4&369939D9&0
Service: i8042prt

Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Description: PS/2 Keyboard
Device ID: ACPI\PNP0303\4&369939D9&0
Manufacturer: Logitech
Name: PS/2 Keyboard
PNP Device ID: ACPI\PNP0303\4&369939D9&0
Service: i8042prt

Class GUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
Description: Canon MX700 ser Network
Device ID: ROOT\CANON_IJ_NETWORK\0000
Manufacturer: Canon
Name: Canon MX700 ser Network
PNP Device ID: ROOT\CANON_IJ_NETWORK\0000
Service: StillCam

==== System Restore Points ===================

RP1: 1/14/2010 9:06:07 AM - System Checkpoint
RP2: 1/14/2010 1:27:14 PM - Removed Adobe Reader 8
RP3: 1/14/2010 1:29:01 PM - Installed Adobe Reader 9.3.
RP4: 1/15/2010 3:00:19 AM - Software Distribution Service 3.0

==== Installed Programs ======================

3D Object Converter for Windows 4.40
3DVIA player 5.0
AAC Decoder
Acrobat.com
Adobe AIR
Adobe Anchor Service CS4
Adobe Bridge CS4
Adobe CMaps CS4
Adobe Color - Photoshop Specific CS4
Adobe Color EU Extra Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Recommended Settings CS4
Adobe Color Video Profiles CS CS4
Adobe CSI CS4
Adobe Default Language CS4
Adobe Device Central CS4
Adobe Dreamweaver CS4
Adobe Drive CS4
Adobe Dynamiclink Support
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Fireworks CS4
Adobe Flash CS4
Adobe Flash CS4 Extension - Flash Lite STI en
Adobe Flash CS4 Professional
Adobe Flash CS4 STI-en
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Fonts All
Adobe Linguistics CS4
Adobe Media Encoder CS4
Adobe Media Encoder CS4 Importer
Adobe Media Player
Adobe Output Module
Adobe PDF Library Files CS4
Adobe Photoshop CS4
Adobe Photoshop CS4 Support
Adobe Reader 9.3
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe Type Support CS4
Adobe Update Manager CS4
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
AdobeColorCommonSetRGB
Advertising Center
Apple Application Support
Apple Software Update
ATI - Software Uninstall Utility
ATI Catalyst Control Center
AutoUpdate
Broadcom NetXtreme Ethernet Controller
Call of Duty Single Player Demo
Canon IJ Network Scan Utility
Canon IJ Network Tool
Canon MP Navigator EX 1.0
Canon MX700 series
Canon MX700 series User Registration
Canon My Printer
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Solution Menu
CDDRV_Installer
Connect
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Version Checker
DivX Web Player
DolbyFiles
Driver Detective
ESET Online Scanner v3
EVGA Display Driver
ffdshow [rev 2202] [2008-10-10]
Google Chrome
Google SketchUp Pro 7
Google Update Helper
H.264 Decoder
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
HP Product Detection
ieSpell
ImagXpress
Java™ 6 Update 16
KhalInstallWrapper
kuler
LightScribe System Software
Logitech SetPoint
Malwarebytes' Anti-Malware
Menu Templates - Starter Kit
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Combat Flight Simulator 2
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
MKV Splitter
Mobile Broadband Generic Drivers
Movie Templates - Starter Kit
Mozilla Firefox (3.5.7)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 9 Trial
Nero BurnRights
Nero ControlCenter
Nero CoverDesigner
Nero DiscSpeed
Nero DriveSpeed
Nero InfoTool
Nero Installer
Nero PhotoSnap
Nero Recode
Nero Rescue Agent
Nero ShowTime
Nero StartSmart
Nero Vision
Nero WaveEditor
NeroBurningROM
NeroExpress
neroxml
Norton AntiVirus
OJOsoft Total Video Converter
PageRage Toolbar
PDF Settings CS4
Photoshop Camera Raw
Pixel Bender Toolkit
PIXMA Extended Survey Program
PowerDVD
Presto! PageManager 7.15.16
Privoxy 3.0.6
QuickTime
RAD Video Tools
ScanSoft OmniPage 15.0
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974455)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
SoundMAX
SoundTrax
Starcraft
Suite Shared Configuration CS4
Swift 3D PS v1.0
System Requirements Lab
Tor 0.2.1.19
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB973874)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VC80CRTRedist - 8.0.50727.762
Vidalia 0.1.15
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VZAccess Manager
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
WinHTTrack Website Copier 3.43-7
WinRAR archiver
Yontoo Layers Client 1.10.01

==== Event Viewer Messages From Past Week ========

1/9/2010 9:44:10 PM, error: PlugPlayManager [12] - The device 'Novatel Wireless Network Adapter' (NWADI\NOVATEL_WIRELESS-VNIC_1410_6000\1&2d12bed1&0&112) disappeared from the system without first being prepared for removal.
1/9/2010 9:25:53 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/9/2010 7:01:07 PM, error: Service Control Manager [7034] - The MySQL service terminated unexpectedly. It has done this 1 time(s).
1/9/2010 4:26:20 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: i8042prt
1/9/2010 4:24:17 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/9/2010 4:00:11 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/9/2010 10:48:46 AM, error: Service Control Manager [7023] - The Mercury service terminated with the following error: Incorrect function.
1/8/2010 5:26:12 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/8/2010 4:48:33 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/8/2010 10:37:31 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/8/2010 10:37:28 PM, error: ipnathlp [32003] - The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
1/8/2010 10:36:15 PM, error: Service Control Manager [7022] - The Apache2.2 service hung on starting.
1/8/2010 10:29:15 PM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
1/8/2010 10:25:02 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/8/2010 1:19:35 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/8/2010 1:16:10 AM, error: Service Control Manager [7034] - The WebClient service terminated unexpectedly. It has done this 1 time(s).
1/15/2010 9:46:34 AM, error: Service Control Manager [7034] - The LAlarm Service service terminated unexpectedly. It has done this 1 time(s).
1/15/2010 9:34:15 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/15/2010 3:19:03 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/15/2010 1:19:17 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/14/2010 5:39:36 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the service.
1/14/2010 5:39:00 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Mercury service.
1/14/2010 5:38:51 PM, error: Service Control Manager [7022] - The LAlarm Service service hung on starting.
1/14/2010 3:18:49 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: i8042prt PCIIde
1/14/2010 3:18:02 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/14/2010 12:53:57 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/14/2010 11:21:52 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 9:55:10 PM, error: System Error [1003] - Error code 000000f4, parameter1 00000003, parameter2 89410778, parameter3 894108ec, parameter4 805fb066.
1/13/2010 9:53:59 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 8:19:35 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 7:32:14 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 7:27:24 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 7:24:51 PM, error: Service Control Manager [7023] - The System Restore Service service terminated with the following error: The system cannot find the file specified.
1/13/2010 7:24:11 PM, error: SRService [104] - The System Restore initialization process failed.
1/13/2010 7:23:49 PM, error: System Error [1003] - Error code 000000f4, parameter1 00000003, parameter2 8a623da0, parameter3 8a623f14, parameter4 805fb066.
1/13/2010 7:23:02 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 6:39:21 PM, error: System Error [1003] - Error code 000000f4, parameter1 00000003, parameter2 89380398, parameter3 8938050c, parameter4 805fb066.
1/13/2010 6:38:35 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 3:34:48 PM, error: Service Control Manager [7031] - The Lavasoft Ad-Aware Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
1/13/2010 2:35:19 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 11:19:58 PM, error: Removable Storage Service [15] - RSM cannot manage library PhysicalDrive4. The database is corrupt.
1/13/2010 11:19:23 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the ShellHWDetection service.
1/13/2010 11:18:53 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the WZCSVC service.
1/13/2010 11:18:53 PM, error: Service Control Manager [7000] - The Wireless Zero Configuration service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/13/2010 11:18:24 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the NtmsSvc service.
1/13/2010 10:30:51 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 10:29:07 PM, error: PlugPlayManager [11] - The device Root\LEGACY_WINSTS\0000 disappeared from the system without first being prepared for removal.
1/13/2010 10:11:17 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/13/2010 10:04:33 PM, error: Service Control Manager [7034] - The PIXMA Extended Survey Program service terminated unexpectedly. It has done this 1 time(s).
1/12/2010 7:35:36 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/12/2010 7:32:05 AM, error: Service Control Manager [7022] - The MySQL service hung on starting.
1/12/2010 3:19:35 PM, error: Print [6161] - The document http://www.guitaretab.com/d/dio/5371.html owned by Paul failed to print on printer Canon MX700 series Printer. Data type: NT EMF 1.008. Size of the spool file in bytes: 2293760. Number of bytes printed: 312360. Total number of pages in the document: 6. Number of pages printed: 0. Client machine: \\PAUL-PC. Win32 error code returned by the print processor: 13 (0xd).
1/12/2010 3:18:28 PM, error: Print [6161] - The document http://www.guitaretab.com/d/dio/5371.html owned by Paul failed to print on printer Canon MX700 series Printer. Data type: NT EMF 1.008. Size of the spool file in bytes: 2686976. Number of bytes printed: 695116. Total number of pages in the document: 4. Number of pages printed: 0. Client machine: \\PAUL-PC. Win32 error code returned by the print processor: 13 (0xd).
1/11/2010 4:56:48 PM, error: Service Control Manager [7034] - The FileZilla Server service terminated unexpectedly. It has done this 1 time(s).
1/10/2010 9:41:03 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD BHDrvx86 ccHP eeCtrl Fips i8042prt IDSxpx86 intelppm IPSec MRxSmb NetBIOS NetBT pavboot RasAcd Rdbss SRTSP SRTSPX SYMTDI Tcpip
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The MySQL service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The Mercury service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The FileZilla Server service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 9:41:03 PM, error: Service Control Manager [7001] - The Apache2.2 service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
1/10/2010 8:36:19 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/10/2010 8:23:35 PM, error: Service Control Manager [7031] - The Lavasoft Ad-Aware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
1/10/2010 8:18:48 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/10/2010 6:36:21 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows Defender service to connect.
1/10/2010 6:36:21 PM, error: Service Control Manager [7000] - The Windows Defender service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/10/2010 5:59:30 PM, error: Service Control Manager [7034] - The fastnetsrv Service service terminated unexpectedly. It has done this 1 time(s).
1/10/2010 5:38:42 PM, error: Service Control Manager [7022] - The BtwSrv service hung on starting.
1/10/2010 5:37:52 PM, error: System Error [1003] - Error code 1000007f, parameter1 00000008, parameter2 80042000, parameter3 00000000, parameter4 00000000.
1/10/2010 5:37:36 PM, error: Service Control Manager [7023] - The Ias service terminated with the following error: The system cannot find the file specified.
1/10/2010 5:35:59 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 0200CAFEBABE has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
1/10/2010 5:06:18 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file atapi.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
1/10/2010 5:00:25 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\drivers\atapi.sys could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
1/10/2010 11:05:34 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
1/10/2010 11:05:34 AM, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/10/2010 11:05:13 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Norton AntiVirus service to connect.
1/10/2010 11:05:13 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Google Update Service (gupdate1ca47b5aa865164) service to connect.
1/10/2010 11:05:13 AM, error: Service Control Manager [7000] - The Norton AntiVirus service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/10/2010 11:05:13 AM, error: Service Control Manager [7000] - The Google Update Service (gupdate1ca47b5aa865164) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/10/2010 10:44:08 AM, error: Service Control Manager [7024] - The Apache2.2 service terminated with service-specific error 1 (0x1).

==== End Of File ===========================
Post #58
My wallpaper didnt survive the second attack wave. I'm unable to change it. i tried locking up my computer ^_^ it hasn't been doing this well for along time. is there anyway to restore my wallpaper?
Post #59
what was your wallpaper?

as long as the file wasn't infected and deleted it should be there still

try rebooting a couple of times

[external image: Posted Image] Your Java is out of date.
Java™ 6 Update 16 can be updated from the Java control panel Start > Control Panel (Classic View) > Java (looks like a coffee cup) > Update Tab > Update Now.
An update should begin; > follow the prompts.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI