I've been surfing the web and randomly, some thing like "56nazi" randomly randomly types in with out me touching a thing. Later on, I was on youtube, and something keeps on pausing the video, and I'm not touching anything.
Later that evening, I was surfing too, and it randomly types "Starz", "Iownu" and when I typed "stop" to see what would happen, it erased it and typed "no u rtard, i control u and ur pc". This is real, and I have no idea why this is happening, right now that computer is unhooked from the internet, and the power supply is turned off and UNPLUGGED. I'm not going to let this spyware/trojan mess with my computer, I do have a firewall (2, one from my AV and one of my router) and I've done multiple virus scans and rootkit scans, all it finds is some tracking cookies.
Here's some specs of my computer (Once you see them, you'll know why I'm upset)
-Intel Core 2 Quad
-Radeon HD4890
-4gb ram
-500gb HD
-A very rare Intel motherboard (Unsure of model #)
-AVG Internet Security w/rootkit and firewall
Any help? I'd be very happy if this was removed
EDIT: Oh and, windows xp SP3
Use a clean computer to change all of your passwords for every online account that you have. (use different passwords)
then run these programs on the infected PC
Please download DDS from either of these links
LINK 1 LINK 2
and save it to your desktop.
Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
————————————————— Please include the contents of the following in your next reply:
DDS.txt Attach.txt.
NEXT
Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.
Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO, then use the following settings for a more complete scan.
In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Thanks Catbyte.
Before I was going to do what you told me too, I ran a Anti-Spyware scanner, It found a trojan AVG, Avast, Clamwin, Malwarebytes, and Spybot hasn't detected, "Trojan.Agent/Gen-usrMgr" Sounds suspicious, like it's related to my problem, as it's related to the trojan horse "backorfice"
I would actually prefer it if you didn't run fixes on your own now that we are working together as it makes my job harder
please just run the scans that I ask for and I'll get your computer clean for you.
DDS (Ver_10-03-17.01) - NTFSx86
Run by [removed] at 18:43:40.32 on Wed 06/16/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2635 [GMT -4:00]
AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\svchost.exe -k HPService
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WiFiConnector\NintendoWFCReg.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
E:\dds.com
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [Start WingMan Profiler] c:\program files\logitech\gaming software\LWEMon.exe /noui
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [USB2Check] RUNDLL32.EXE "c:\windows\system32\PCLECoInst.dll",CheckUSBController
mRun: [USBToolTip] "c:\program files\pinnacle\shared files\\programs\usbtip\USBTip.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\runreg~1.lnk - c:\program files\wificonnector\NintendoWFCReg.exe
uPolicies-explorer: NoThumbnailCache = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.10.115.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1249616609730
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: {6B99770C-1B8E-4140-B9B9-BFC95CB50B9F} = 192.168.1.1,4.2.2.2
TCP: {9A83C8FD-0C73-4F14-A2DF-59ADB2E744B4} = 192.168.1.1,4.2.2.2
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: avgrsstarter - avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
Hosts: 127.0.0.1 www.spywareinfo.com
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\dad\applic~1\mozilla\firefox\profiles\zgdo0z97.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBook.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpClipBookDB.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpNeoLogger.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSaturn.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSeymour.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartSelect.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSmartWebPrinting.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpSWPOperation.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPLogging.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTC.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXPMTL.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\components\hpXREStub.dll
FF - plugin: c:\documents and settings\all users\application data\id software\quakelive\npquakezero.dll
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\documents and settings\dad\application data\mozilla\firefox\profiles\zgdo0z97.default\extensions\{1bc9ba34-1eed-42ca-a505-6d2f1a935bbb}\plugins\npietab2.dll
FF - plugin: c:\documents and settings\dad\application data\mozilla\firefox\profiles\zgdo0z97.default\extensions\[removed]\platform\winnt_x86-msvc\plugins\npBFHUpdater.dll
FF - plugin: c:\documents and settings\dad\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.1636.7222\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\hp\digital imaging\smart web printing\mozillaaddon3\plugins\nphpclipbook.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\opera\program\plugins\nppl3260.dll
FF - plugin: c:\program files\opera\program\plugins\nprjplug.dll
FF - plugin: c:\program files\opera\program\plugins\nprpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
—- FIREFOX POLICIES —-
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr
ef", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
============= SERVICES / DRIVERS ===============
R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSxx.sys [2010-3-15 25096]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2010-3-15 52872]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-3-15 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-3-15 29584]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-3-15 242896]
R1 SASDIFSV;SASDIFSV;c:\docume~1\dad\locals~1\temp\sas_selfextract\SASDIFSV.SYS [2010-6-15 9968]
R1 SASKUTIL;SASKUTIL;c:\docume~1\dad\locals~1\temp\sas_selfextract\SASKUTIL.sys [2010-6-15 74480]
R2 avg9emc;AVG E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-3-15 916760]
R2 avg9wd;AVG WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-3-15 308064]
R2 avgfws9;AVG Firewall;c:\program files\avg\avg9\avgfws9.exe [2010-5-31 2331544]
R2 AVGIDSAgent;AVG9IDSAgent;c:\program files\avg\avg9\identity protection\agent\bin\AVGIDSAgent.exe [2010-3-15 5888008]
R2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\nero\nero8\incd\NBHRegInCDSrv.exe [2008-6-10 53032]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2010-3-15 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSDriver.sys [2010-3-15 122376]
R3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSFilter.sys [2010-3-15 30216]
R3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSShim.sys [2010-3-15 26120]
S2 gupdate1ca16f5307ba0cc;Google Update Service (gupdate1ca16f5307ba0cc);c:\program files\google\update\GoogleUpdate.exe [2009-8-6 133104]
S3 ATMFBUS;A600 USB Composite Device Driver;c:\windows\system32\drivers\ATMFBUS.sys [2009-8-12 38528]
S3 ATMFCVsp;A600 Cricket CM Port;c:\windows\system32\drivers\ATMFCVsp.sys [2009-8-12 54656]
S3 ATMFMdm;A600 Cricket EVDO Modem;c:\windows\system32\drivers\ATMFMdm.sys [2009-8-12 54528]
S3 ATMFNET;A600 Cricket EVDO Network Adapter;c:\windows\system32\drivers\ATMFNET.sys [2009-8-12 103424]
S3 ATMFNVsp;A600 Cricket NMEA Port Serial Port;c:\windows\system32\drivers\ATMFNVsp.sys [2009-8-12 54656]
S3 ATMFVsp;A600 Cricket Diagnostics Port;c:\windows\system32\drivers\ATMFVsp.sys [2009-8-12 54656]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2010-3-15 30104]
S3 PinnacleMarvinAVS;Pinnacle AVStream Service for MovieBox Deluxe, 500-USB and 700-USB;c:\windows\system32\drivers\MarvinAVS.sys [2010-1-6 434176]
S3 SASENUM;SASENUM;\??\c:\docume~1\dad\locals~1\temp\sas_selfextract\sasenum.sys –> c:\docume~1\dad\locals~1\temp\sas_selfextract\SASENUM.SYS [?]
=============== Created Last 30 ================
2010-06-16 19:01:45 0 d—–w- c:\docume~1\dad\applic~1\SUPERAntiSpyware.com
2010-06-16 19:01:45 0 d—–w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-06-16 18:02:52 0 d—–w- c:\docume~1\dad\applic~1\Malwarebytes
2010-06-16 18:01:52 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-16 18:01:51 0 d—–w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-06-16 18:01:50 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-06-16 18:01:50 0 d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-06-16 15:54:04 0 d—–w- c:\docume~1\alluse~1\applic~1\Alwil Software
2010-06-16 01:26:40 0 d—–w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-06-16 00:52:19 0 d—–w- c:\program files\Trend Micro
2010-06-14 02:55:38 32938 —-a-w- c:\documents and settings\dad\.recently-used.xbel
2010-06-08 23:27:01 743424 ——w- c:\windows\system32\dllcache\iedvtool.dll
2010-06-08 17:32:14 0 d—–w- c:\program files\The Sir. Community
2010-06-06 19:39:13 0 d—–w- c:\docume~1\dad\applic~1\id Software
2010-06-06 19:39:05 0 d—–w- c:\docume~1\alluse~1\applic~1\id Software
2010-06-05 21:10:07 0 d—–w- c:\docume~1\dad\applic~1\Blender Foundation
2010-06-05 21:10:04 0 d—–w- c:\program files\Blender Foundation
2010-05-28 13:02:20 0 d—–w- c:\program files\common files\DirectX
2010-05-20 19:23:31 0 d—–w- c:\program files\DivX
2010-05-20 19:22:58 0 d—–w- c:\docume~1\alluse~1\applic~1\DivX
==================== Find3M ====================
2010-06-13 22:20:34 215128 —-a-w- c:\windows\system32\PnkBstrB.exe
2010-06-13 19:33:55 138384 —-a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-06-06 19:39:07 2373712 —-a-w- c:\windows\system32\pbsvc.exe
2010-05-31 16:52:12 242896 —-a-w- c:\windows\system32\drivers\avgtdix.sys
2010-05-07 22:11:44 138056 —-a-w- c:\docume~1\dad\applic~1\PnkBstrK.sys
2010-05-07 22:11:25 75064 —-a-w- c:\windows\system32\PnkBstrA.exe
2010-05-07 22:11:25 2427248 —-a-w- c:\windows\system32\pbsvc_heroes.exe
2010-05-05 13:30:57 173056 ——w- c:\windows\system32\dllcache\ie4uinit.exe
2010-05-02 05:22:50 1851264 —-a-w- c:\windows\system32\win32k.sys
2010-05-02 05:22:50 1851264 ——w- c:\windows\system32\dllcache\win32k.sys
2010-04-20 05:30:08 285696 —-a-w- c:\windows\system32\atmfd.dll
2010-04-20 05:30:08 285696 ——w- c:\windows\system32\dllcache\atmfd.dll
2010-04-16 11:43:30 41984 ——w- c:\windows\system32\dllcache\iecompat.dll
2010-04-15 20:13:00 411368 —-a-w- c:\windows\system32\deployJava1.dll
2010-04-06 08:52:46 2462720 —-a-w- c:\windows\system32\dllcache\WMVCore.dll
2010-03-26 07:58:12 499712 —-a-w- c:\windows\system32\msvcp71.dll
2010-03-26 07:58:12 348160 —-a-w- c:\windows\system32\msvcr71.dll
2010-03-26 07:56:34 203776 —-a-w- c:\windows\system32\clrviddc.dll
2002-07-26 21:02:06 153088 —-a-w- c:\program files\UNWISE.EXE
============= FINISH: 18:44:14.68 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-03-17.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 8/6/2009 6:06:35 AM
System Uptime: 6/16/2010 6:26:03 PM (0 hours ago)
Motherboard: Intel Corporation | | D975XBX2
Processor: Intel® Core™2 Quad CPU Q6700 @ 2.66GHz | J3E1 | 2666/266mhz
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 699 GiB total, 303.043 GiB free.
D: is CDROM ()
E: is Removable
==== Disabled Device Manager Items =============
Class GUID:
Description:
Device ID: ACPI\AWY0001\4&3036D68D&0
Manufacturer:
Name:
PNP Device ID: ACPI\AWY0001\4&3036D68D&0
Service:
Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
Description: Photosmart C7200 series
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Photosmart C7200 series
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:
==== System Restore Points ===================
RP320: 3/19/2010 12:17:54 PM - System Checkpoint
RP321: 3/20/2010 5:25:06 PM - Installed Microsoft Visual C++ 2005 Redistributable
RP322: 3/21/2010 10:15:41 PM - System Checkpoint
RP323: 3/23/2010 7:56:20 AM - System Checkpoint
RP324: 3/23/2010 6:50:22 PM - Removed Opera 10.00.
RP325: 3/24/2010 9:31:20 PM - System Checkpoint
RP326: 3/25/2010 10:22:30 PM - System Checkpoint
RP327: 3/26/2010 12:35:25 AM - Software Distribution Service 3.0
RP328: 3/26/2010 12:52:00 AM - Installed Java™ 6 Update 18
RP329: 3/26/2010 2:47:13 AM - Configured ImageMixer 3 SE Ver.3
RP330: 3/26/2010 3:38:19 AM - Removed ATI Catalyst Control Center
RP331: 3/27/2010 11:37:35 AM - System Checkpoint
RP332: 3/27/2010 8:02:00 PM - Installed Crysis®.
RP333: 3/27/2010 8:11:30 PM - Installed DirectX
RP334: 3/27/2010 8:25:48 PM - Removed GameSpy Comrade.
RP335: 3/29/2010 8:00:44 PM - Avg Update
RP336: 3/29/2010 8:01:02 PM - Avg Update
RP337: 3/31/2010 11:11:20 AM - System Checkpoint
RP338: 3/31/2010 4:02:06 PM - Software Distribution Service 3.0
RP339: 4/1/2010 9:09:25 AM - Avg Update
RP340: 4/2/2010 1:06:08 PM - Removed GameSpy Comrade.
RP341: 4/3/2010 6:45:31 PM - System Checkpoint
RP342: 4/4/2010 12:07:29 PM - Avg Update
RP343: 4/5/2010 12:28:33 PM - System Checkpoint
RP344: 4/6/2010 2:53:54 PM - System Checkpoint
RP345: 4/7/2010 3:41:45 PM - System Checkpoint
RP346: 4/8/2010 4:19:33 PM - System Checkpoint
RP347: 4/8/2010 8:37:29 PM - Installed DiRT2 Demo
RP348: 4/10/2010 6:33:13 PM - System Checkpoint
RP349: 4/11/2010 8:11:45 PM - System Checkpoint
RP350: 4/13/2010 7:59:59 AM - System Checkpoint
RP351: 4/14/2010 1:10:01 PM - Software Distribution Service 3.0
RP352: 4/15/2010 2:50:04 PM - Installed Windows Installer Clean Up
RP353: 4/15/2010 3:30:52 PM - Revo Uninstaller's restore point - Java™ 6 Update 18
RP354: 4/15/2010 3:34:16 PM - Revo Uninstaller's restore point - Java™ 6 Update 18
RP355: 4/15/2010 3:54:09 PM - Revo Uninstaller's restore point - Java™ 6 Update 18
RP356: 4/15/2010 4:12:57 PM - Installed Java™ 6 Update 20
RP357: 4/16/2010 9:03:57 PM - System Checkpoint
RP358: 4/17/2010 11:11:48 PM - System Checkpoint
RP359: 4/19/2010 9:40:22 AM - System Checkpoint
RP360: 4/20/2010 8:36:22 AM - Avg Update
RP361: 4/20/2010 8:36:44 AM - Avg Update
RP362: 4/22/2010 6:14:52 PM - System Checkpoint
RP363: 4/23/2010 11:24:22 PM - System Checkpoint
RP364: 4/26/2010 2:11:33 PM - System Checkpoint
RP365: 4/27/2010 2:55:21 PM - System Checkpoint
RP366: 4/27/2010 6:10:27 PM - Installed Verizon Media Manager.
RP367: 4/30/2010 7:28:55 AM - System Checkpoint
RP368: 4/30/2010 8:32:45 AM - Avg Update
RP369: 5/1/2010 5:53:18 PM - System Checkpoint
RP370: 5/3/2010 8:43:28 AM - System Checkpoint
RP371: 5/4/2010 11:12:32 AM - System Checkpoint
RP372: 5/5/2010 9:39:13 AM - Avg Update
RP373: 5/6/2010 10:15:10 AM - System Checkpoint
RP374: 5/7/2010 10:44:17 AM - System Checkpoint
RP375: 5/11/2010 10:10:16 AM - System Checkpoint
RP376: 5/12/2010 3:47:43 PM - System Checkpoint
RP377: 5/12/2010 5:19:48 PM - Software Distribution Service 3.0
RP378: 5/14/2010 8:12:13 AM - System Checkpoint
RP379: 5/15/2010 4:34:20 PM - System Checkpoint
RP380: 5/17/2010 7:52:16 AM - System Checkpoint
RP381: 5/19/2010 1:11:50 PM - System Checkpoint
RP382: 5/19/2010 9:48:57 PM - Installed Call of Duty® 4 - Modern Warfare™ Demo
RP383: 5/21/2010 7:51:00 AM - System Checkpoint
RP384: 5/23/2010 1:52:02 PM - System Checkpoint
RP385: 5/24/2010 2:12:40 PM - System Checkpoint
RP386: 5/25/2010 10:35:49 PM - System Checkpoint
RP387: 5/27/2010 8:36:37 AM - System Checkpoint
RP388: 5/28/2010 9:37:22 AM - System Checkpoint
RP389: 5/29/2010 11:52:44 AM - Software Distribution Service 3.0
RP390: 5/31/2010 12:52:16 PM - Avg Update
RP391: 6/1/2010 8:33:21 PM - System Checkpoint
RP392: 6/2/2010 10:33:35 PM - System Checkpoint
RP393: 6/4/2010 8:05:03 AM - System Checkpoint
RP394: 6/4/2010 6:27:30 PM - Installed BF2 Editor
RP395: 6/6/2010 9:18:22 AM - System Checkpoint
RP396: 6/6/2010 3:39:03 PM - Installed Quake Live Mozilla Plugin
RP397: 6/8/2010 7:27:18 PM - Software Distribution Service 3.0
RP398: 6/10/2010 9:42:02 AM - System Checkpoint
RP399: 6/11/2010 12:12:26 PM - System Checkpoint
RP400: 6/13/2010 11:47:03 AM - System Checkpoint
RP401: 6/14/2010 11:33:39 AM - Installed Battlefield 1942 Multiplayer Demo
RP402: 6/15/2010 9:16:40 PM - System Checkpoint
RP403: 6/15/2010 10:09:02 PM - Removed Battlefield 1942 Multiplayer Demo
RP404: 6/15/2010 10:09:18 PM - Removed BF2 Editor
RP405: 6/15/2010 10:12:11 PM - Removed EA Download Manager UI
RP406: 6/15/2010 10:14:31 PM - Removed Verizon Media Manager.
RP407: 6/16/2010 11:54:04 AM - avast! Free Antivirus Setup
RP408: 6/16/2010 1:41:41 PM - avast! Free Antivirus Setup
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 2 (SP2)
32 Bit HP CIO Components Installer
Acrobat.com
Activision®
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.1.3
Adobe Reader 9.3.1
Adobe Shockwave Player 11.5
Agatha Christie - Dead Man's Folly (remove only)
AIO_Scan
AIX-V2_mappack_ITHH
Allied Intent Xtended 2.0
Amazing Adventures the Caribbean Secret (remove only)
ATI Catalyst Install Manager
Audacity 1.2.6
AVG 9.0
Battlefield 2™
Battlefield 2142 Deluxe Edition
Battlefield Heroes
Big City Adventure Vancouver (remove only)
Boris Graffiti
BufferChm
C7200
C7200_Help
Call of Duty® 4 - Modern Warfare™ Demo
Cards_Calendar_OrderGift_DoMorePlugout
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center HydraVision Full
Catalyst Control Center InstallProxy
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help English
Copy
Cricket Broadband
Cricket EVDO Modem
Crysis®
CustomerResearchQFolder
Data Lifeguard Tools
Dell Printer Software Uninstall
Destination Component
DeviceDiscovery
DeviceManagementQFolder
Diskeeper 2007 Pro Premier
DocProc
DocProcQFolder
Dream Chronicles - The Chosen Child (remove only)
EA Download Manager
eSupportQFolder
Evil Under the Sun
Farm Frenzy 3 - Ice Age (remove only)
Fax
Fraps
Futuremark SystemInfo
GIMP 2.6.8
Google Earth
Google SketchUp 7.1
Google Update Helper
Google Updater
GPBaseService
Harry Potter and the Half-Blood Prince™
Hawaiian Explorer Lost Island 1.0.0.9
Hawaiian Explorer Pearl Harbor 1.0.0.30
Hidden in Time - Mirror Mirror (remove only)
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Customer Participation Program 10.0
HP Imaging Device Functions 10.0
HP Photosmart All-In-One Driver Software 10.0 Rel .2
HP Photosmart Essential 2.5
HP Smart Web Printing
HP Solution Center 10.0
HP Update
HPPhotoSmartDiscLabel_PaperLabel
HPPhotoSmartDiscLabel_PrintOnDisc
HPPhotoSmartDiscLabelContent1
hpphotosmartdisclabelplugin
HPPhotoSmartPhotobookWebPack1
HPProductAssistant
HPSSupply
ImageMixer 3 SE Ver.3
Intel® Network Connections [removed]
Java Auto Updater
Java™ 6 Update 20
LightScribe System Software 1.14.17.1
Logitech Audio Echo Cancellation Component
Logitech Gaming Software 5.08
Logitech QuickCam
Logitech Video Enumerator
Logitech® Camera Driver
Luxor 2
Malwarebytes' Anti-Malware
MarketResearch
Matrix-ks
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft IntelliPoint 7.0
Microsoft Office Converter Pack
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mirror Mysteries (remove only)
Mozilla Firefox (3.6.3)
Mozilla Thunderbird (3.0.3)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Murder on the Orient Express
MVision
Mystery Case Files Return to Ravenhearst (remove only)
Mystery P.I. - The London Caper (remove only)
N.A.W 6..0 MAP Pack 1
N.A.W 6..0 MAP Pack 2
N.A.W 6..0 MAP Pack 3
N.A.W 6..0 MAP Pack 4
Nancy Drew: Secret of the Scarlet Hand
Nations at War
Need for Speed Underground 2 Demo
Need for Speed™ Carbon
Need for Speed™ SHIFT
Need for Speed™ Undercover
Nero 8 Essentials
neroxml
NetDeviceManager
Nintendo Wi-Fi USB Connector Registration Tool
Nora Roberts Vision in White (remove only)
NVIDIA PhysX
OCR Software by I.R.I.S. 10.0
OpenAL
Opera 10.51
PanoStandAlone
Pinnacle Instant DVD Recorder
Pinnacle Studio 12
Pinnacle Studio 12 Ultimate Plugins
Pinnacle Systems USB-2 Device Drivers
Pinnacle Video Driver
proDAD Vitascene 1.0
Project Reality 0917 Full - Part 1 of 2
Project Reality 0917 Full - Part 2 of 2
PS_AIO_02_ProductContext
PS_AIO_02_Software
PS_AIO_02_Software_Min
PSSWCORE
PunkBuster Services
Quake Live Mozilla Plugin
RealPlayer
RealUpgrade 1.0
RegistryFix v8.0
Return of Arcade Anniversary Edition
Sally's Salon
Sandbox
Scan
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Search 4 - KB963093
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Shop for HP Supplies
SolutionCenter
Spelling Dictionaries Support For Adobe Reader 9
Status
SureThing Express Labeler
System Requirements Lab
The Lord of the Rings FREE Trial
Three Cards to Midnight (remove only)
TI Connect 1.6
TNG 2.0 Installer Part 1
TNG 2.0 Installer Part 2
Tom Clancy's H.A.W.X
Toolbox
Transformers™ - Revenge of the Fallen™
Transformers™ - The Game
TrayApp
Treasure Seekers Visions of Gold (remove only)
Unity Web Player
UnloadSupport
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Windows (KB971513)
Update for Windows Internet Explorer 8 (KB972636)
Update for Windows Internet Explorer 8 (KB973874)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB978506)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows Internet Explorer 8 (KB980302)
Update for Windows Internet Explorer 8 (KB982632)
Update for Windows XP (KB898461)
Update for Windows XP (KB943729)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VCRedistSetup
VideoToolkit01
WebFldrs XP
WebReg
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer Clean Up
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows PowerShell™ 1.0
Windows PowerShell™ 1.0 MUI pack
Windows Search 4.0
Windows XP Service Pack 3
==== Event Viewer Messages From Past Week ========
6/9/2010 7:01:45 AM, error: ipnathlp [30013] - The DHCP allocator has disabled itself on IP address 172.16.0.1, since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, please change the scope to include the IP address, or change the IP address to fall within the scope.
6/9/2010 7:01:45 AM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56}
6/9/2010 7:01:42 AM, error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.
6/16/2010 3:01:50 PM, error: Service Control Manager [7000] - The SASENUM service failed to start due to the following error: The system cannot find the file specified.
6/12/2010 10:10:51 AM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer XENA2 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6B99770C-1B8E-4140-B9B. The master browser is stopping or an election is being forced.
==== End Of File ===========================
GMER just crashes when I try to save the log.
EDIT: Oh and, windows xp SP3
let me see what's the outcome.![[external image: Posted Image]](http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_screen2-1.gif){kind=link}