This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Trojan Horse BackDoor.Generic 12 AAVT

19 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Actually > do it again just to make sure… rename that second one to raspppoe.sys.old2 press F5 again see a new one create…then run the command
OK as long as you have a raspppoe.sys file created in the drivers folder, we'll move on just post the DDS and Attach.txt logs. You can delete the raspppoe.sys.old and raspppoe.sys.old2 files
Hi Here are the DDS log and Attach log Mozilla will not start, warning box says because plc4dll was not found, may need to re-install application Will check on other things later Have a good night, will check back tomorrow. Thank You Ian DDS (Ver_09-06-26.01) - NTFSx86 Run by [removed] at 22:34:26.15 on Sun 02/14/2010 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.895.160 [GMT -6:00] AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\AVG\AVG9\avgemc.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\BigFix\bigfix.exe C:\WINDOWS\system32\msfeedssync.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\AVG\AVG9\avgui.exe C:\WINDOWS\system32\wscntfy.exe C:\Documents and Settings\Owner\Desktop\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&SubCH=nofound&Br=EM&Loc=ENG_US&Sys=DTP&M=W3644 uInternet Settings,ProxyOverride = uURLSearchHooks: Yahoo! ¤u¨ã¦C: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No File BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\windows\system32\BAE.dll BHO: EpsonToolBandKicker Class: {e99421fb-68dd-40f0-b4ac-b7027cae2f1a} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File TB: Yahoo! ¤u¨ã¦C: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll TB: EPSON Web-To-Page: {ee5d279f-081b-4404-994d-c6b60aaeba6d} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File uRun: [Power2GoExpress] NA uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\bigfix.lnk - c:\program files\bigfix\bigfix.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_01\bin\ssv.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dll Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll Notify: avgrsstarter - avgrsstx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Eudora's Shell Extension: {edb0e980-90bd-11d4-8599-0008c7d3b6f8} - c:\program files\qualcomm\eudora\EuShlExt.dll SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\owner\applic~1\mozilla\firefox\profiles\5eo35kw1.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p= FF - prefs.js: browser.search.selectedEngine - Yahoo! Search FF - prefs.js: browser.startup.homepage - hxxp://www.winfieldcourier.com/ FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p= FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll FF - plugin: c:\documents and settings\owner\application data\mozilla\firefox\profiles\5eo35kw1.default\extensions\[removed]\platform\winnt_x86-msvc\plugins\npmnqmp071101000055.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ ============= SERVICES / DRIVERS =============== R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-7-3 64288] R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2009-5-31 130936] R1 ATMhelpr;ATMhelpr;c:\windows\system32\drivers\ATMHELPR.SYS [2008-2-3 4064] R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-4-16 333192] R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2008-3-23 28424] R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-4-16 360584] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-1-5 9968] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-1-5 74480] R2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2009-11-6 906520] R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2009-11-6 285392] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-9-24 1181328] S3 el575nd5;3Com Megahertz 10/100 LAN CardBus PC Card Driver;c:\windows\system32\drivers\el575ND5.sys [2006-6-30 69692] S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-1-5 7408] S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2009-1-17 348752] S3 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2009-1-17 1095560] =============== Created Last 30 ================ 2010-02-13 18:32 220,536 a——- c:\windows\sigcheck.exe 2010-02-11 22:36 –d—– c:\windows\maxdriver 2010-02-09 23:32 a-dshr– C:\cmdcons 2010-02-09 23:01 261,632 a——- c:\windows\PEV.exe 2010-02-09 23:01 161,792 a——- c:\windows\SWREG.exe 2010-02-09 23:01 98,816 a——- c:\windows\sed.exe 2010-02-09 23:01 77,312 a——- c:\windows\MBR.exe 2010-02-06 20:49 417,136 a——- c:\windows\handle.exe 2010-02-03 23:51 –d—– c:\documents and settings\owner\DoctorWeb 2010-02-02 23:44 –d—– c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com 2010-02-02 23:44 –d—– c:\program files\SUPERAntiSpyware 2010-02-02 23:44 –d—– c:\docume~1\owner\applic~1\SUPERAntiSpyware.com 2010-02-02 23:43 –d—– c:\program files\common files\Wise Installation Wizard 2010-01-30 18:41 38,224 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2010-01-30 18:41 19,160 a——- c:\windows\system32\drivers\mbam.sys 2010-01-28 21:38 –d—– c:\docume~1\owner\applic~1\Malwarebytes 2010-01-28 21:38 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes 2010-01-28 21:38 –d—– c:\program files\Malwarebytes' Anti-Malware 2010-01-24 22:19 –d—– c:\program files\Trend Micro 2010-01-21 08:30 –d—– c:\windows\system32\wbem\Repository ==================== Find3M ==================== 2010-02-10 22:14 890 ac—— c:\docume~1\owner\applic~1\wklnhst.dat 2009-12-31 10:50 353,792 a——- c:\windows\system32\drivers\srv.sys 2009-12-16 12:43 343,040 a——- c:\windows\system32\mspaint.exe 2009-12-14 01:08 33,280 a——- c:\windows\system32\csrsrv.dll 2009-11-27 11:11 1,291,776 a——- c:\windows\system32\quartz.dll 2009-11-27 11:11 17,920 a——- c:\windows\system32\msyuv.dll 2009-11-27 10:07 28,672 a——- c:\windows\system32\msvidc32.dll 2009-11-27 10:07 8,704 a——- c:\windows\system32\tsbyuv.dll 2009-11-27 10:07 84,992 a——- c:\windows\system32\avifil32.dll 2009-11-27 10:07 48,128 a——- c:\windows\system32\iyuv_32.dll 2009-11-27 10:07 11,264 a——- c:\windows\system32\msrle32.dll 2009-11-21 09:51 471,552 a——- c:\windows\apppatch\aclayers.dll 2007-11-09 22:36 32,768 ac-sh— c:\windows\system32\config\systemprofile\local settings\application data\microsoft\feeds cache\index.dat 2009-02-15 20:13 32,768 ac-sh— c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009021520090216\index.dat ============= FINISH: 22:35:06.50 =============== UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-06-26.01) Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume1 Install Date: 1/20/2008 5:10:18 PM System Uptime: 2/13/2010 5:30:56 PM (29 hours ago) Motherboard: Gateway | | MCP61SM2MA Processor: AMD Sempron™ Processor LE-1200 | Socket AM2 | 2109/201mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 144 GiB total, 121.783 GiB free. D: is FIXED (FAT32) - 5 GiB total, 2.579 GiB free. E: is CDROM () ==== Disabled Device Manager Items ============= ==== System Restore Points =================== RP383: 11/17/2009 7:25:34 PM - System Checkpoint RP384: 11/18/2009 7:26:53 PM - System Checkpoint RP385: 11/20/2009 9:32:33 AM - Avg8 Update RP386: 11/20/2009 9:33:55 AM - Avg8 Update RP387: 11/20/2009 6:09:45 PM - Spyware Doctor: Cleaning Threats RP388: 11/23/2009 8:01:59 AM - System Checkpoint RP389: 11/24/2009 8:23:17 PM - System Checkpoint RP390: 11/25/2009 8:20:03 AM - Software Distribution Service 3.0 RP391: 11/26/2009 10:44:42 AM - System Checkpoint RP392: 11/27/2009 5:22:29 PM - System Checkpoint RP393: 11/28/2009 6:00:52 PM - System Checkpoint RP394: 12/1/2009 8:40:11 AM - System Checkpoint RP395: 12/2/2009 9:28:31 AM - System Checkpoint RP396: 12/4/2009 7:40:33 AM - System Checkpoint RP397: 12/5/2009 2:35:56 PM - System Checkpoint RP398: 12/6/2009 5:34:50 PM - System Checkpoint RP399: 12/7/2009 5:47:03 PM - System Checkpoint RP400: 12/8/2009 8:17:12 PM - System Checkpoint RP401: 12/9/2009 9:49:57 AM - Spyware Doctor: Cleaning Threats RP402: 12/10/2009 7:22:59 AM - Software Distribution Service 3.0 RP403: 12/11/2009 12:06:57 PM - System Checkpoint RP404: 12/11/2009 6:07:35 PM - Spyware Doctor: Cleaning Threats RP405: 12/12/2009 8:39:13 AM - Avg8 Update RP406: 12/12/2009 8:40:47 AM - Avg8 Update RP407: 12/14/2009 12:32:25 PM - System Checkpoint RP408: 12/15/2009 6:54:00 PM - System Checkpoint RP409: 12/16/2009 6:58:24 PM - System Checkpoint RP410: 12/18/2009 10:08:44 AM - Avg8 Update RP411: 12/19/2009 12:39:02 PM - System Checkpoint RP412: 12/20/2009 7:05:48 PM - System Checkpoint RP413: 12/21/2009 7:09:30 PM - System Checkpoint RP414: 12/22/2009 8:58:51 AM - Avg8 Update RP415: 12/23/2009 11:33:34 AM - System Checkpoint RP416: 12/23/2009 12:12:55 PM - Spyware Doctor: Cleaning Threats RP417: 12/24/2009 6:14:02 PM - System Checkpoint RP418: 12/25/2009 6:41:28 PM - System Checkpoint RP419: 12/26/2009 6:58:17 PM - System Checkpoint RP420: 12/28/2009 1:36:38 PM - System Checkpoint RP421: 12/29/2009 7:09:10 PM - System Checkpoint RP422: 12/30/2009 7:34:46 PM - System Checkpoint RP423: 12/31/2009 9:56:12 AM - Avg8 Update RP424: 1/1/2010 10:06:36 AM - Software Distribution Service 3.0 RP425: 1/1/2010 7:13:32 PM - Spyware Doctor: Cleaning Threats RP426: 1/2/2010 7:38:00 PM - System Checkpoint RP427: 1/4/2010 10:32:14 AM - System Checkpoint RP428: 1/5/2010 8:05:21 PM - System Checkpoint RP429: 1/7/2010 9:43:16 AM - System Checkpoint RP430: 1/8/2010 11:00:58 AM - System Checkpoint RP431: 1/9/2010 11:30:31 AM - System Checkpoint RP432: 1/11/2010 9:03:33 AM - System Checkpoint RP433: 1/13/2010 7:06:02 PM - Spyware Doctor: Cleaning Threats RP434: 1/14/2010 10:26:05 AM - Software Distribution Service 3.0 RP435: 1/14/2010 2:43:01 PM - Restore Operation RP436: 1/14/2010 3:06:37 PM - Restore Operation RP437: 1/14/2010 3:07:39 PM - Restore Operation RP438: 1/14/2010 3:13:30 PM - Software Distribution Service 3.0 RP439: 1/14/2010 8:49:22 PM - Spyware Doctor: Cleaning Threats RP440: 1/15/2010 6:13:16 PM - Spyware Doctor: Cleaning Threats RP441: 1/16/2010 6:23:56 PM - System Checkpoint RP442: 1/17/2010 8:10:36 PM - System Checkpoint RP443: 1/18/2010 8:26:21 AM - Avg8 Update RP444: 1/18/2010 8:34:18 AM - Spyware Doctor: Cleaning Threats RP445: 1/20/2010 12:54:27 PM - Spyware Doctor: Cleaning Threats RP446: 1/20/2010 1:56:12 PM - Restore Operation RP447: 1/20/2010 2:16:53 PM - Avg8 Update RP448: 1/20/2010 4:21:43 PM - Restore Operation RP449: 1/20/2010 4:41:51 PM - Avg8 Update RP450: 1/21/2010 8:23:10 AM - Restore Operation RP451: 1/21/2010 8:24:28 AM - Restore Operation RP452: 1/21/2010 8:39:50 AM - Avg8 Update RP453: 1/21/2010 9:38:29 AM - Software Distribution Service 3.0 RP454: 1/22/2010 10:41:58 PM - System Checkpoint RP455: 1/22/2010 11:34:00 PM - Restore Operation RP456: 1/23/2010 11:37:14 PM - System Checkpoint RP457: 1/26/2010 9:21:21 PM - System Checkpoint RP458: 1/27/2010 10:04:56 PM - System Checkpoint RP459: 1/28/2010 10:43:13 PM - System Checkpoint RP460: 1/29/2010 11:44:32 PM - System Checkpoint RP461: 1/30/2010 6:12:55 PM - Automatic Restore Point RP462: 1/30/2010 6:55:21 PM - Avg8 Update RP463: 1/31/2010 7:06:20 PM - System Checkpoint RP464: 2/2/2010 10:20:45 PM - System Checkpoint RP465: 2/2/2010 11:44:32 PM - Installed SUPERAntiSpyware Free Edition RP466: 2/4/2010 10:54:31 PM - System Checkpoint RP467: 2/5/2010 11:49:25 PM - System Checkpoint RP468: 2/7/2010 12:00:52 AM - System Checkpoint RP469: 2/8/2010 9:36:48 PM - System Checkpoint RP470: 2/9/2010 9:45:31 PM - System Checkpoint RP471: 2/10/2010 10:02:41 PM - System Checkpoint RP472: 2/10/2010 10:17:17 PM - OTL Restore Point RP473: 2/12/2010 10:28:25 PM - System Checkpoint RP474: 2/13/2010 3:00:14 AM - Software Distribution Service 3.0 RP475: 2/14/2010 3:35:17 AM - System Checkpoint ==== Installed Programs ====================== Acrobat.com Activation Assistant for the 2007 Microsoft Office suites Ad-Aware Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe PhotoDeluxe 2.0 Adobe Reader 9.1.3 Adobe Type Manager 4.0 Adobe® Photoshop® Album Starter Edition 3.2 AVG Free 9.0 BigFix Browser Address Error Redirector Compatibility Pack for the 2007 Office system Critical Update for Windows Media Player 11 (KB959772) DVD Suite eMachines Connect eMachines Games EPSON NX100 Series Printer Uninstall EPSON Scan EPSON Web-To-Page ERUNT 1.1j Eudora Google Desktop Google Toolbar for Internet Explorer High Definition Audio Driver Package - KB888111 HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB970653-v3) Hotfix for Windows XP (KB976098-v2) HP Deskjet 3740 HP Software Update IrfanView (remove only) Java™ SE Runtime Environment 6 Update 1 Logitech Legacy USB Camera Driver Package Logitech Webcam Software Logitech Webcam Software Driver Package Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB953297) Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Excel MUI (English) 2007 Microsoft Office Home and Student 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Works Microsoft WSE 2.0 SP3 Runtime Mozilla Firefox (3.0.5) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB941833) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 6 Service Pack 2 (KB954459) NVIDIA Drivers Power2Go 5.0 PowerDVD RahmanImager Realtek High Definition Audio Driver Recovery Software Suite eMachines Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB973704) Security Update for Microsoft Office Excel 2007 (KB973593) Security Update for Microsoft Office PowerPoint 2007 (KB957789) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB969613) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB969604) Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB961260) Security Update for Windows Internet Explorer 7 (KB963027) Security Update for Windows Internet Explorer 7 (KB969897) Security Update for Windows Internet Explorer 7 (KB972260) Security Update for Windows Internet Explorer 8 (KB971961) Security Update for Windows Internet Explorer 8 (KB972260) Security Update for Windows Internet Explorer 8 (KB974455) Security Update for Windows Internet Explorer 8 (KB976325) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB968816) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB938464-v2) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961371) Security Update for Windows XP (KB961373) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB968537) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB969947) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971486) Security Update for Windows XP (KB971557) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB971961) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973525) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978251) Security Update for Windows XP (KB978262) Security Update for Windows XP (KB978706) Soft Data Fax Modem with SmartCP Spare Backup Spybot - Search & Destroy Spybot - Search & Destroy 1.5.2.20 Spyware Doctor 6.0 SpywareBlaster 4.1 SUPERAntiSpyware Free Edition Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Office InfoPath 2007 (KB976416) Update for Windows Internet Explorer 8 (KB973874) Update for Windows Internet Explorer 8 (KB976749) Update for Windows XP (KB951978) Update for Windows XP (KB953356) Update for Windows XP (KB955759) Update for Windows XP (KB955839) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) Visual C++ 2008 x86 Runtime - (v9.0.30729) Visual C++ 2008 x86 Runtime - v9.0.30729.01 WebFldrs XP Windows 7 Upgrade Advisor Windows Backup Utility Windows Driver Package - NVIDIA (NVENETFD) Net (11/27/2006 65.4.8) Windows Driver Package - NVIDIA (nvnetbus) NVIDIA Network Bus Enumerator (11/27/2006 65.4.8) Windows Genuine Advantage Validation Tool (KB892130) Windows Internet Explorer 7 Windows Internet Explorer 8 Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 3 Yahoo! Browser Services Yahoo! Install Manager Yahoo! Internet Mail Yahoo! Messenger Yahoo! ¤u¨ã¦C ==== Event Viewer Messages From Past Week ======== 2/9/2010 11:30:00 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000010' while processing the file 'AA7B457F.sys' on the volume 'C2CAD972#40 .. D34CC121074'. It has stopped monitoring the volume. 2/9/2010 11:01:10 PM, error: Service Control Manager [7034] - The Process Monitor service terminated unexpectedly. It has done this 1 time(s). 2/13/2010 4:44:53 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'raspppoe.sys' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 2/13/2010 4:21:15 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\raspppoe.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512. 2/13/2010 3:19:10 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file raspppoe.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512. 2/11/2010 10:28:54 PM, error: Service Control Manager [7000] - The Print Port Scanner Driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. ==== End Of File ===========================
Hi,

Look at the information under the title "clean Install" in the following article
http://support.mozilla.com/en-US/kb/Basic+…Clean_reinstall

that should assist with the Mozilla issue:

NEXT

Visit ADOBEand download the latest version of Acrobat Reader (version 9.3)
Having the latest updates ensures there are no security vulnerabilities in your system.


NEXT


[external image: Posted Image]
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.
  • Download the latest version of Java Runtime Environment (JRE) 18 and save it to your desktop.
  • Scroll down to where it says JDK 6 Update 18 (JDK or JRE)
  • Click the Download JRE button to the right
  • Select the Windows platform from the dropdown menu.
  • Read the License Agreement and then check the box that says: "I agree to the Java SE Runtime Environment 6u18 with JavaFX 1 License Agreement". Click on Continue.The page will refresh.
  • Click on the link to download Windows Offline Installation and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel, double-click on Add or Remove Programs and remove all older versions of Java.
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6u18-windows-i586-p.exe to install the newest version.
  • After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
    • On the General tab, under Temporary Internet Files, click the Settings button.
    • Next, click on the Delete Files button
    • There are two options in the window to clear the cache - Leave BOTH CheckedApplications and Applets
      Trace and Log Files
  • Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
  • Click OK to leave the Temporary Files Window
  • Click OK to leave the Java Control Panel.


NEXT

let me know if there are any other issues and if you are able to resolve the Mozilla issue.

If all is OK, then we can do the final clean up of tools and you should be good to go.
Hi Yes I am still working on the cleanup of this computer. During the week I don't get much time to work on it. Will let you know how it goes soon. Thank You Ian
Hi A question I have opened Eudora and in both the in box and the out box deleted all posts with attachments, however when I ran Kasperkey again it showed the same problems as before. How do I get rid of the infected attachments? Thanks for the help.
It may not actually be an email with an attachment…it's just those are the likely suspects. It's impossible to know which email unless there is anything really important…delete them all. Has the Mozilla issue resolved itself? How is the computer running? Are there any outstanding issues?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI