Hi,C:\Qoobox\ComboFix-quarantined-files.txt
2010-01-11 23:37:07 . 2010-01-11 23:37:07 1,756 —-a-w- C:\Qoobox\Quarantine\Registry_backups\Service_Inrfraaipruw.reg.dat
2010-01-11 23:31:18 . 2010-01-11 23:31:19 576,296 —-a-w- C:\Qoobox\Quarantine\[4]-Submit_2010-01-11_17.31.04.zip
2010-01-11 22:48:32 . 2010-01-11 22:48:32 2,694 —-a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1.reg.dat
2010-01-11 22:48:21 . 2010-01-11 22:48:21 582 —-a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WRConsumerService.reg.dat
2010-01-11 22:30:06 . 2010-01-11 23:36:57 7,710 —-a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2010-01-11 20:11:31 . 2010-01-11 20:11:31 373 —-a-w- C:\Qoobox\Quarantine\Registry_backups\SSODL-guvetagek-{84a633b8-83df-4ac0-9688-e76736a3a412}.reg.dat
2010-01-11 20:11:29 . 2010-01-11 20:11:29 374 —-a-w- C:\Qoobox\Quarantine\Registry_backups\SharedTaskScheduler-{84a633b8-83df-4ac0-9688-e76736a3a412}.reg.dat
2010-01-11 20:11:23 . 2010-01-11 20:11:23 128 —-a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-fozihaluna.reg.dat
2010-01-11 20:11:23 . 2010-01-11 20:11:23 150 —-a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-homahukoj.reg.dat
2010-01-11 19:53:23 . 2010-01-11 19:53:23 742 —-a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_H8SRTd.sys.reg.dat
2010-01-11 19:03:07 . 2010-01-11 22:02:20 951 —-a-w- C:\Qoobox\Quarantine\Registry_backups\Service_H8SRTd.sys.reg.dat
2010-01-11 18:58:23 . 2010-01-11 23:29:59 408 —-a-w- C:\Qoobox\Quarantine\catchme.log
2010-01-11 11:20:56 . 2010-01-11 11:20:56 6,778 —-a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Pat\Local Settings\Application Data\{5D10EBA4-320C-440D-804F-80604AA8611D}\chrome\content\overlay.xul.vir
2010-01-11 11:20:56 . 2010-01-11 11:20:57 2,024 —-a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Pat\Local Settings\Application Data\{5D10EBA4-320C-440D-804F-80604AA8611D}\chrome\content\_cfg.js.vir
2010-01-08 11:53:29 . 2010-01-08 11:53:29 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\491.exe.vir
2010-01-08 11:53:00 . 2010-01-08 06:53:23 1,334,272 —-a-w- C:\Qoobox\Quarantine\C\Program Files\InternetSecurity2010\IS2010.exe.vir
2010-01-08 11:33:29 . 2010-01-08 11:33:29 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\9961.exe.vir
2010-01-08 11:13:29 . 2010-01-08 11:13:29 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\16827.exe.vir
2010-01-08 10:53:28 . 2010-01-08 10:53:28 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\23281.exe.vir
2010-01-08 10:33:28 . 2010-01-08 10:33:28 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\28145.exe.vir
2010-01-08 10:13:27 . 2010-01-08 10:13:27 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\5705.exe.vir
2010-01-08 09:53:27 . 2010-01-08 09:53:27 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\24464.exe.vir
2010-01-08 09:33:27 . 2010-01-08 09:33:27 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\26962.exe.vir
2010-01-08 09:13:26 . 2010-01-08 09:13:26 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\29358.exe.vir
2010-01-08 08:53:26 . 2010-01-08 08:53:26 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\11478.exe.vir
2010-01-08 08:33:26 . 2010-01-08 08:33:26 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\15724.exe.vir
2010-01-08 08:13:25 . 2010-01-08 08:13:25 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\19169.exe.vir
2010-01-08 07:53:25 . 2010-01-08 07:53:25 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\26500.exe.vir
2010-01-08 07:33:25 . 2010-01-08 07:33:25 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\6334.exe.vir
2010-01-08 07:13:24 . 2010-01-08 07:13:24 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\18467.exe.vir
2010-01-08 06:53:16 . 2010-01-08 06:53:16 16,896 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\helper32.dll.vir
2010-01-08 06:53:04 . 2010-01-08 15:21:39 2,931 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\warning.html.vir
2010-01-08 06:53:03 . 2010-01-08 06:53:00 17,920 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\smss32.exe.vir
2010-01-08 06:53:03 . 2010-01-08 06:53:00 17,920 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\winlogon32.exe.vir
2010-01-07 12:12:04 . 2009-11-28 11:51:22 5,776 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\OLD7.tmp.vir
2010-01-07 00:36:36 . 2010-01-11 16:37:38 117,248 —-a-w- C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Macromedia\SwUpdate\swupdate.dll.vir
2010-01-06 22:47:16 . 2010-01-11 15:51:03 26,135 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\Sysvxd.exe.vir
2010-01-06 21:30:10 . 2009-01-26 21:31:06 414,552 —-a-w- C:\Qoobox\Quarantine\C\Program Files\1\sd123.exe.vir
2010-01-06 21:30:10 . 2009-01-26 21:31:02 1,879,896 —-a-w- C:\Qoobox\Quarantine\C\Program Files\1\Slper.dll.vir
2010-01-06 19:50:01 . 2010-01-11 11:20:57 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\Xsusopiwamik.bin.vir
2010-01-06 19:49:59 . 2010-01-11 11:20:58 120 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\Cyupeheg.dat.vir
2010-01-06 19:46:16 . 2010-01-06 19:46:09 45,228 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\svchost.exe.vir
2010-01-06 19:46:03 . 2010-01-06 19:46:03 0 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\lowsec\local.ds.vir
2010-01-06 19:46:03 . 2010-01-06 19:46:13 6,622 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\lowsec\user.ds.lll.vir
2010-01-06 19:46:03 . 2010-01-06 21:05:33 16,843 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\lowsec\user.ds.vir
2010-01-04 11:34:11 . 2010-01-04 11:34:11 40,960 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\H8SRTbpjxtufybw.dll.vir
2009-12-27 12:36:33 . 2010-01-04 11:34:11 36,864 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\H8SRTqrlybluvpj.dll.vir
2009-12-22 22:58:23 . 2010-01-11 11:16:06 847 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\krl32mainweq.dll.vir
2009-12-22 22:57:22 . 2010-01-04 11:34:10 202 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\srcr.dat.vir
2009-12-22 22:57:18 . 2010-01-11 20:24:18 202 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\H8SRTkipxmqfujf.dat.vir
2009-12-22 22:57:17 . 2009-12-22 22:57:17 23,040 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\H8SRTltbqxfijsw.dll.vir
2009-12-22 22:57:12 . 2009-12-22 22:57:12 39,936 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\H8SRTkypixdoykt.sys.vir
2009-02-25 19:54:33 . 2009-12-16 12:40:43 32 —-a-w- C:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\JUVNCQKJZG\2017.Dat.vir
2008-10-20 11:05:20 . 2008-10-20 11:05:20 608 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\winzvprt5.sys.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:14 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTSBASW.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:04 225,654 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTPM002W.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:10 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTPDXW.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:08 224,128 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4893W.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:08 224,128 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4891W.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:08 224,128 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4890W.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4875W.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4872W.DAT.vir
2004-06-24 23:42:00 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4871W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4870W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4850W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:08 224,128 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4840W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:08 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4832W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4831W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4830W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:08 224,128 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4790W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4780W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:04 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4760W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4670W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:04 224,994 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP4620W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:06 225,654 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP1140W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:10 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0228W.DAT.vir
2004-06-24 23:41:59 . 2003-08-28 08:36:12 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0226W.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:10 228,042 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0222W.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:10 228,042 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0221W.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:14 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017HW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:14 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017GW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:14 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017FW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017EW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017DW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017CW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017BW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP017AW.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0170W.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0105W.DAT.vir
2004-06-24 23:41:58 . 2003-08-28 08:36:12 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0103W.DAT.vir
2004-06-24 23:41:57 . 2003-08-28 08:36:10 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0102W.DAT.vir
2004-06-24 23:41:57 . 2003-08-28 08:36:10 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0101W.DAT.vir
2004-06-24 23:41:57 . 2003-08-28 08:36:10 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0100W.DAT.vir
2004-06-24 23:41:57 . 2003-08-28 08:36:10 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0061W.DAT.vir
2004-06-24 23:41:57 . 2003-08-28 08:36:08 227,316 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CTP0060W.DAT.vir
2004-06-24 23:41:57 . 2003-08-28 08:36:08 227,112 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Data\CT0060W.DAT.vir
2003-03-31 12:00:00 . 2005-03-02 18:09:30 171,008 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\1.dll.vir
2003-03-31 12:00:00 . 2005-03-02 18:09:30 172,032 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\omazexo.dll.vir
2003-03-31 12:00:00 . 2005-03-02 18:09:30 41,472 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\onvchin.dll.vir
1601-01-01 00:03:52 . 1601-01-01 00:03:52 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\gepibura.dll.vir
1601-01-01 00:03:52 . 1601-01-01 00:03:52 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\gukejibu.dll.vir
1601-01-01 00:03:52 . 1601-01-01 00:03:52 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\jurunute.dll.tmp.vir
1601-01-01 00:03:52 . 1601-01-01 00:03:52 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ketoyibo.dll.tmp.vir
1601-01-01 00:03:52 . 1601-01-01 00:03:52 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\lanimaye.dll.tmp.vir
1601-01-01 00:03:52 . 1601-01-01 00:03:52 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\tayanage.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 51,712 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\bonumohe.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 38,400 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\dozilibe.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 38,912 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\gehufidu.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 38,400 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\holiwaga.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 92,160 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\jayoriji.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 61,440 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\jukazudu.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 92,160 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\suhahebu.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 61,440 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\tifakapu.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 38,400 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\vafefudo.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 38,400 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wohubevu.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 91,648 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\zavituwe.dll.vir
1601-01-01 00:03:28 . 1601-01-01 00:03:28 61,440 —-a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\zukepive.dll.vir
I don't see anything related to your SQL server that was removed by ComboFix
obviously the installation was somehow corrupted by the infection removal.
Your machine was heavily infected with a rootkit infection as well as rogue security program and backdoor trojans
do you have the setup disks for the SQL server?
yes I do, it's part of the scale software that i have
There is likely an error log that could possibly give us a reason why the SQL service is failing to start.
It may be located in a path similar to this:
C:\Program Files\Microsoft SQL Server\MSSQL\MSSQL\LOG\ERRORLOG
see if you can locate it and post the error log.
You may consider backing up all your databases and reinstalling the SQL server.
I don't think it would be wise to restore the computer back to it's infected state just to get the SQL server back.
I am willing to try and remove the infections manually if it is impossible for you to recreate the SQL server the way it was.
Give me your thoughts on this.
If you could also post a fresh DDS and attach.txt as well, then we can check those to see if there is anything in the event logs there.
ok here are the error log files.error log1 error log 2 error log 3 error log 4 error log 5
Nothing unusual jumping out at me there either.
Can you run DDS again - post a fresh DDS and Attach.txt
DDS (Ver_09-12-01.01) - NTFSx86
Run by [removed] at 8:12:19.04 on Tue 01/12/2010
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.511.202 [GMT -6:00]
AV: Kaspersky Anti-Virus *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtblfs.exe
C:\Documents and Settings\Pat\Desktop\dds.com
============== Pseudo HJT Report ===============
uStart Page = about:blank
mStart Page = about:blank
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\ievkbd.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\klwtbbho.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\adobe acrobat 6.0\acrobat\AcroIEFavClient.dll
TB: MSN: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\msn apps\msn toolbar\01.02.3000.1001\en-us\msntb.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
mRun: [WinPatrol] c:\progra~1\billps~1\winpat~1\winpatrol.exe
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [BlackBerryAutoUpdate] c:\program files\common files\research in motion\auto update\RIMAutoUpdate.exe /background
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2010\avp.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\servic~1.lnk - c:\program files\microsoft sql server\80\tools\binn\sqlmangr.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2010\klwtbbho.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F}
Trusted Zone: aol.com\free
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://active.macromedia.com/flash2/cabs/swflash.cab
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\pat\applic~1\mozilla\firefox\profiles\jpqroyfl.default\
FF - prefs.js: browser.search.selectedEngine - eBay
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF - component: c:\program files\mozilla firefox\extensions\[removed]\components\KavLinkFilter.dll
FF - plugin: c:\documents and settings\pat\application data\move networks\plugins\npqmp071505000011.dll
FF - plugin: c:\documents and settings\pat\application data\mozilla\firefox\profiles\jpqroyfl.default\extensions\{e2883e8f-472f-4fb0-9522-ac9bf37916a7}\plugins\np_gp.dll
FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npatgpc.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npyaxmpb.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
—- FIREFOX POLICIES —-
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
============= SERVICES / DRIVERS ===============
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-12-23 36880]
R1 kl1;Kl1;c:\windows\system32\drivers\kl1.sys [2009-9-1 128016]
R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2010-1-11 315408]
R2 AVP;Kaspersky Anti-Virus;c:\program files\kaspersky lab\kaspersky anti-virus 2010\avp.exe [2009-10-20 340456]
R2 FSHOOK;FSHOOK;c:\windows\system32\drivers\FSHOOK.SYS [2004-6-21 7040]
R3 HPFXFAX;HPFXFAX;c:\windows\system32\drivers\hpfxfax.sys [2008-10-20 20504]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2009-9-14 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-10-2 19472]
S0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [2004-6-21 77312]
S2 nvtvSND;nVidia WDM TVAudio Crossbar;c:\windows\system32\drivers\nvtvsnd.sys –> c:\windows\system32\drivers\nvtvsnd.sys [?]
S2 WebrootSpySweeperService;Webroot Spy Sweeper Engine;"c:\program files\webroot\spy sweeper\spysweeper.exe" –> c:\program files\webroot\spy sweeper\SpySweeper.exe [?]
S3 dalwdmservice;dal service;c:\windows\system32\drivers\dalwdm.sys –> c:\windows\system32\drivers\dalwdm.sys [?]
S3 iteio;iteio;c:\windows\system32\drivers\Iteio.sys [2004-6-21 3680]
S3 Vsp;Vsp;\??\c:\windows\system32\drivers\vsp.sys –> c:\windows\system32\drivers\Vsp.sys [?]
=============== Created Last 30 ================
2010-01-12 00:04:22 0 d—–w- c:\program files\Kaspersky Lab
2010-01-12 00:04:22 0 d—–w- c:\docume~1\alluse~1\applic~1\Kaspersky Lab
2010-01-11 20:21:50 0 d—–w- c:\windows\system32\wbem\Repository
2010-01-11 19:00:00 0 d-sha-r- C:\cmdcons
2010-01-11 18:58:51 98816 —-a-w- c:\windows\sed.exe
2010-01-11 18:58:51 77312 —-a-w- c:\windows\MBR.exe
2010-01-11 18:58:51 261632 —-a-w- c:\windows\PEV.exe
2010-01-11 18:58:51 161792 —-a-w- c:\windows\SWREG.exe
2010-01-02 20:13:42 0 d—–w- c:\windows\system32\XPSViewer
2010-01-02 20:12:53 89088 -c—-w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-01-02 20:12:53 117760 ——w- c:\windows\system32\prntvpt.dll
2010-01-02 20:12:52 597504 -c—-w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-01-02 20:12:52 575488 -c—-w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-01-02 20:12:52 575488 ——w- c:\windows\system32\xpsshhdr.dll
2010-01-02 20:12:51 1676288 -c—-w- c:\windows\system32\dllcache\xpssvcs.dll
2010-01-02 20:12:51 1676288 ——w- c:\windows\system32\xpssvcs.dll
2010-01-02 20:12:51 0 d—–w- C:\e745aa45b9d8451e60ebc
2009-12-30 14:51:33 0 d—–w- c:\program files\common files\Sonic Shared
2009-12-30 14:51:32 0 d—–w- c:\program files\Roxio
2009-12-30 14:26:06 0 d—–w- c:\docume~1\alluse~1\applic~1\Research In Motion
2009-12-28 18:32:14 0 d—–w- c:\program files\WebEx
2009-12-28 17:58:02 0 d—–w- c:\windows\LastGood(2)
2009-12-24 15:57:08 470528 -c—-w- c:\windows\system32\dllcache\aclayers.dll
2009-12-24 15:45:15 664 —-a-w- c:\windows\system32\d3d9caps.dat
2009-12-24 14:06:27 104 —-a-w- c:\windows\system32\nvapps.xml
2009-12-24 14:06:25 446464 —-a-w- c:\windows\system32\nvuninst.exe
2009-12-24 14:06:25 446464 —-a-w- c:\windows\system32\nvudisp.exe
2009-12-24 14:06:25 18070 —-a-w- c:\windows\system32\nvdisp.nvu
2009-12-23 22:14:15 3387392 —-a-r- c:\windows\system32\nvrsja.dll
2009-12-23 18:28:40 0 d–h–w- c:\windows\PIF
2009-12-23 16:53:26 36880 —-a-w- c:\windows\system32\drivers\klbg.sys
2009-12-23 16:47:53 0 d—–w- c:\program files\TrendMicro
2009-12-23 15:25:52 0 d—–w- C:\NVIDIA
==================== Find3M ====================
2009-12-18 22:41:12 704544 –sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-12-18 22:41:12 3488 –sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-12-18 22:41:12 3128864 –sha-w- c:\windows\system32\drivers\fidbox.dat
2009-12-18 22:41:12 25524 –sha-w- c:\windows\system32\drivers\fidbox.idx
2009-10-29 05:48:04 662016 ——w- c:\windows\system32\wininet.dll
2009-10-21 06:00:55 75776 —-a-w- c:\windows\system32\strmfilt.dll
2009-10-21 06:00:55 25088 —-a-w- c:\windows\system32\httpapi.dll
2009-10-21 02:34:56 219664 —-a-w- c:\windows\system32\klogon.dll
============= FINISH: 8:13:06.48 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_09-12-01.01)
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 6/21/2004 1:07:05 AM
System Uptime: 1/12/2010 6:17:37 AM (2 hours ago)
Motherboard: soyocomputer | | KT600-8237
Processor: AMD Athlon™ XP 2600+ | Socket A | 1916/167mhz
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 112 GiB total, 82.292 GiB free.
D: is CDROM ()
E: is CDROM ()
==== Disabled Device Manager Items =============
Class GUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}
Description: VIA Serial ATA RAID Controller
Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_31491106&REV_80\3&61AAA01&0&78
Manufacturer: VIA Technologies, Inc.
Name: VIA Serial ATA RAID Controller
PNP Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_31491106&REV_80\3&61AAA01&0&78
Service: viasraid
Class GUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
Description: HID Non-User Input Data Filter (KB 911895)
Device ID: HID\VID_045E&PID_00E1&COL01\6&1BCD3302&0&0000
Manufacturer: Microsoft
Name: HID Non-User Input Data Filter (KB 911895)
PNP Device ID: HID\VID_045E&PID_00E1&COL01\6&1BCD3302&0&0000
Service: NuidFltr
==== System Restore Points ===================
RP460: 10/14/2009 5:32:03 PM - System Checkpoint
RP461: 10/16/2009 4:23:23 PM - System Checkpoint
RP462: 10/19/2009 5:49:13 PM - System Checkpoint
RP463: 10/20/2009 6:00:41 PM - System Checkpoint
RP464: 10/27/2009 5:49:45 PM - System Checkpoint
RP465: 10/28/2009 7:38:54 PM - System Checkpoint
RP466: 10/29/2009 8:29:12 PM - System Checkpoint
RP467: 11/2/2009 6:45:51 PM - System Checkpoint
RP468: 11/4/2009 6:28:18 PM - System Checkpoint
RP469: 11/5/2009 6:45:12 PM - System Checkpoint
RP470: 11/6/2009 6:46:50 PM - System Checkpoint
RP471: 11/7/2009 8:22:12 AM - Software Distribution Service 3.0
RP472: 11/7/2009 9:07:52 AM - Software Distribution Service 3.0
RP473: 11/9/2009 5:23:25 PM - System Checkpoint
RP474: 11/10/2009 6:01:11 PM - System Checkpoint
RP475: 11/16/2009 5:37:49 AM - Installed Compatibility Pack for the 2007 Office system
RP476: 11/17/2009 4:55:59 PM - System Checkpoint
RP477: 11/18/2009 5:26:01 PM - System Checkpoint
RP478: 11/19/2009 6:38:02 PM - System Checkpoint
RP479: 11/20/2009 7:26:01 PM - System Checkpoint
RP480: 11/21/2009 7:37:58 PM - System Checkpoint
RP481: 11/22/2009 8:26:01 PM - System Checkpoint
RP482: 11/23/2009 9:24:51 PM - System Checkpoint
RP483: 11/24/2009 10:23:47 PM - System Checkpoint
RP484: 11/27/2009 5:11:09 PM - System Checkpoint
RP485: 11/30/2009 7:06:30 PM - System Checkpoint
RP486: 12/2/2009 4:18:54 PM - System Checkpoint
RP487: 12/3/2009 5:53:52 PM - System Checkpoint
RP488: 12/9/2009 5:21:51 PM - System Checkpoint
RP489: 12/10/2009 5:38:42 PM - System Checkpoint
RP490: 12/13/2009 9:33:31 AM - System Checkpoint
RP491: 12/16/2009 4:46:24 PM - System Checkpoint
RP492: 12/28/2009 11:57:25 AM - System Checkpoint
RP493: 12/28/2009 12:15:20 PM - Restore Operation
RP494: 1/4/2010 5:32:29 AM - Printer Driver Microsoft XPS Document Writer Installed
RP495: 1/4/2010 5:59:53 AM - Software Distribution Service 3.0
RP496: 1/4/2010 6:12:35 AM - Installed HiJackThis
RP497: 1/5/2010 10:23:36 AM - System Checkpoint
RP498: 1/6/2010 7:28:08 AM - Removed Kaspersky Anti-Virus 2010.
RP499: 1/6/2010 8:10:23 AM - Installed Kaspersky Anti-Virus 2010.
RP500: 1/6/2010 9:22:54 AM - Removed Kaspersky Anti-Virus 2010.
RP501: 1/6/2010 9:33:12 AM - Installed Kaspersky Anti-Virus 2010.
RP502: 1/6/2010 9:37:15 AM - Removed Kaspersky Anti-Virus 2010.
RP503: 1/6/2010 1:18:06 PM - Installed Kaspersky Anti-Virus 2010.
RP504: 1/7/2010 4:57:15 PM - System Checkpoint
RP505: 1/11/2010 6:54:58 AM - Automatic Restore Point
RP506: 1/11/2010 2:20:53 PM - Restore Operation
RP507: 1/11/2010 6:03:58 PM - Installed Kaspersky Anti-Virus 2010.
==== Installed Programs ======================
32 Bit HP BiDi Channel Components Installer
3DPipe© Version 1.5
Adobe Acrobat 5.0
Adobe Creative Suite
Adobe Download Manager
Adobe Flash Player 10 Plugin
Adobe SVG Viewer 3.0
Ahead InCD
Ahead InCD EasyWrite Reader
Ahead Nero Express
Ahead NeroVision Express
Apple Mobile Device Support
Apple Software Update
AutoCAD 2004
AutoCAD Express Tools Volumes 1-9
Autodesk Express Viewer
AutoScale 2000
BlackBerry Desktop Software 5.0.1
Bonjour
BootMagic
BroadJump Client Foundation
ccCommon
Cliprex DS DVD Player
Compatibility Pack for the 2007 Office system
Creative Modem Blaster PCI DI5633
Creative System Information
dBpoweramp FLAC Codec
dBpoweramp Music Converter
Digidesign Shared Plug-Ins
DIGOpt
DIGReqEx
DNA
Drivers Install For Linksys Easylink Advisor
Exact Audio Copy 0.99pb3
Eye Candy 3.1 for After Effects
Garmin Communicator Plugin
Garmin POI Loader
Garmin USB Drivers
Google SketchUp 7
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
hp instant support
hp print screen utility
iTunes
Jasc Paint Shop Pro 9
Java™ 6 Update 7
Kaspersky Anti-Virus 2010
Linksys EasyLink Advisor 1.6 (0032)
Macromedia Flash Player 8
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft IntelliPoint 6.2
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Office 2000 SR-1 Professional
Microsoft Picture It! Express 9
Microsoft Picture It! Library 9
Microsoft SQL Server Desktop Engine
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visio Professional 2002 [English]
mkw Audio Compression Toolkit
MobileMe Control Panel
Move Media Player
Mozilla Firefox (3.5.7)
MSN
MSN Encarta Plus Support Files
MSN Messenger 6.2
MSN Toolbar
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 and SOAP Toolkit 3.0
MSXML 6 Service Pack 2 (KB973686)
NVIDIA Drivers
OpenOffice.org Installer 1.0
PACE System Files
PartitionMagic
PowerDVD
PowerQuest BootMagic 8.0
PowerQuest PartitionMagic 8.0
Quicken 2005
QuickTime
RealPlayer
Roxio Media Manager
Roxio UDF Reader
Safari
Screenblast ACID 4.0
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974455)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB976325)
Sound Blaster Live!
SOYO H/W Monitor
The Disc 3.0
Update for Windows XP (KB898461)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VIA Audio Driver Setup Program
VIA Integrated Setup Wizard
VIA Rhine-Family Fast Ethernet Adapter
Visual IP InSight(SBC)
WASAY DPU
WebEx
WebFldrs XP
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WinPatrol
Xvid 1.1.3 final uninstall
==== Event Viewer Messages From Past Week ========
1/8/2010 9:21:49 AM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 f8d1051d, parameter3 f8c8dc00, parameter4 f8c8d8fc.
1/8/2010 6:48:58 AM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 f8d1851d, parameter3 f8bedc00, parameter4 f8bed8fc.
1/7/2010 6:12:05 AM, information: Windows File Protection [64001] - File replacement was attempted on the protected system file aec.sys. This file was restored to the original version to maintain system stability. The file version of the bad file is 1.4.0.0, the version of the system file is 5.1.2601.2078.
1/6/2010 9:18:13 AM, error: Service Control Manager [7034] - The InCD File System Service service terminated unexpectedly. It has done this 1 time(s).
1/12/2010 6:10:50 AM, error: Service Control Manager [7001] - The SQLSERVERAGENT service depends on the MSSQLSERVER service which failed to start because of the following error: After starting, the service hung in a start-pending state.
1/12/2010 5:28:03 AM, error: Service Control Manager [7034] - The MSSQLSERVER service terminated unexpectedly. It has done this 5 time(s).
1/12/2010 5:26:48 AM, error: Service Control Manager [7034] - The MSSQLSERVER service terminated unexpectedly. It has done this 4 time(s).
1/12/2010 5:26:24 AM, error: Service Control Manager [7034] - The MSSQLSERVER service terminated unexpectedly. It has done this 3 time(s).
1/12/2010 5:23:18 AM, error: Service Control Manager [7024] - The MSSQLServerADHelper service terminated with service-specific error 3221225572 (0xC0000064).
1/12/2010 5:23:11 AM, error: Service Control Manager [7034] - The MSSQLSERVER service terminated unexpectedly. It has done this 2 time(s).
1/11/2010 6:47:36 AM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
1/11/2010 6:13:13 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the NVSvc service.
1/11/2010 5:17:47 AM, error: Service Control Manager [7034] - The WMDM PMSP Service service terminated unexpectedly. It has done this 1 time(s).
1/11/2010 5:17:47 AM, error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).
1/11/2010 5:17:46 AM, error: Service Control Manager [7034] - The Roxio Upnp Server 9 service terminated unexpectedly. It has done this 1 time(s).
1/11/2010 5:17:46 AM, error: Service Control Manager [7034] - The Creative Service for CDROM Access service terminated unexpectedly. It has done this 1 time(s).
1/11/2010 5:17:41 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: UdfReadr
1/11/2010 5:17:21 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Roxio Hard Drive Watcher 9 service to connect.
1/11/2010 5:17:21 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Kaspersky Anti-Virus service to connect.
1/11/2010 5:17:21 AM, error: Service Control Manager [7000] - The Webroot Spy Sweeper Engine service failed to start due to the following error: The system cannot find the path specified.
1/11/2010 5:17:21 AM, error: Service Control Manager [7000] - The nVidia WDM TVAudio Crossbar service failed to start due to the following error: The system cannot find the file specified.
1/11/2010 5:17:21 AM, error: Service Control Manager [7000] - The Kaspersky Anti-Virus service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/11/2010 2:27:32 PM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 f8d0a51d, parameter3 f8c71c38, parameter4 f8c71934.
1/11/2010 2:07:29 PM, error: Service Control Manager [7034] - The MSSQLSERVER service terminated unexpectedly. It has done this 1 time(s).
1/11/2010 2:06:58 PM, error: Service Control Manager [7022] - The MSSQLSERVER service hung on starting.
1/11/2010 12:48:43 PM, error: Service Control Manager [7000] - The Digidesign MME Refresh Service service failed to start due to the following error: The system cannot find the file specified.
1/11/2010 10:14:13 AM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 f8d0051d, parameter3 f8bedc00, parameter4 f8bed8fc.
1/11/2010 10:14:12 AM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 f8d0451d, parameter3 f8c85c00, parameter4 f8c858fc.
1/11/2010 10:14:05 AM, error: System Error [1003] - Error code 100000d1, parameter1 f69ae198, parameter2 00000002, parameter3 00000000, parameter4 f69a5d8a.
1/11/2010 10:12:23 AM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 f8cfe51d, parameter3 f8c7dc00, parameter4 f8c7d8fc.
==== End Of File ===========================
There seems to be a number of different causes for some of the errors you are seeing:regrebld.exe from the binn directory and execute it.
regrebld.exe is not there
can you do a search for it on your computer with windows explorer.
Can you give me as many details as possible about this SQL server, what version etc.
just did a search and no results were found. Its SQL 2000 service pack 3
when you go to the services window (windows key + R type services.msc ) what services related to SQL are listed there? and what is their status?
There are two MSSQLServerAdHelper and MSSQLSERVER this is on automatic startup and the ServerAdHelper is on manual.
hi,
change them both to manual start up
reboot a couple of times, then see if it will start manually
