Deleted Member
The Kaspersky database update is taking a really long time.
Spyware / Malware / Virus Removal
Backdoor or......?
23 min read
CatByte
you using FF or IE
It goes a little quicker with IE
Deleted Member
Alright here's(FINALLY) the Kaspersky log:
——————————————————————————–
KASPERSKY ONLINE SCANNER 7.0: scan report
Friday, September 24, 2010
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Thursday, September 23, 2010 21:40:37
Records in database: 4237279
——————————————————————————–
Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes
Scan area - My Computer:
C:\
D:\
Scan statistics:
Objects scanned: 35921
Threats found: 5
Infected objects found: 19
Suspicious objects found: 0
Scan duration: 03:55:16
File name / Threat / Threats count
C:\Documents and Settings\PATRICIA\Local Settings\Application Data\Downloaded Installations\{91A3E893-3836-437A-81FD-BAAFFBD0814F}\MediaSPace.msi Infected: Trojan-Downloader.Win32.Agent.dwvj 1
C:\Qoobox\Quarantine\C\WINDOWS\system32\accdccbceecafcc.dll.vir Infected: Worm.Win32.AutoRun.atlr 1
C:\Qoobox\Quarantine\C\WINDOWS\system32\_accdccbceecafcc_.dll.zip Infected: Worm.Win32.AutoRun.atlr 1
C:\Qoobox\Quarantine\[4]-Submit_2010-09-23_18.35.30.zip Infected: Trojan.Win32.Agent.fepc 12
C:\Qoobox\Quarantine\[4]-Submit_2010-09-23_18.35.30.zip Infected: Trojan.Win32.Agent.evot 2
C:\System Volume Information\_restore{52D6B306-2207-46B4-B022-2AB098290528}\RP907\A0393612.dll Infected: Worm.Win32.AutoRun.atlr 1
C:\WINDOWS\system32\76ddf3bf8b45417b0a1f9f29e2b73add.exe Infected: not-a-virus:AdWare.Win32.BHO.fav 1
Selected area has been scanned.
CatByte
Please do the following:
Please open this link HERE in a new window.
In the box marked Link to topic where this file was requested: please paste in the following text
Click the Browse button and navigate to C:\Qoobox\Quarantine
There should be a zip file there called [4]-Submit_****-**-**_**.**.**.zip ( the * denotes Date and Time stamp - yours will be close to this: 09/23/2010 18:36:28)
Select this file and click Open
In the Largest box please put
Finally click SendFile
Please return here and let me know when that file has been uploaded.
NEXT
Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:
Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')
Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')
Save this file to your desktop, Save this as "CFScript"
Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …
[external image: Posted Image]
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Please open this link HERE in a new window.
In the box marked Link to topic where this file was requested: please paste in the following text
http://forums.whatthetech.com/index.php?showtopic=114687&view=findpost&p=684720
Click the Browse button and navigate to C:\Qoobox\Quarantine
There should be a zip file there called [4]-Submit_****-**-**_**.**.**.zip ( the * denotes Date and Time stamp - yours will be close to this: 09/23/2010 18:36:28)
Select this file and click Open
In the Largest box please put
File Requested By CatByte Failed Collect::
Finally click SendFile
Please return here and let me know when that file has been uploaded.
NEXT
- Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
- They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:
Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')
File::
C:\Documents and Settings\PATRICIA\Local Settings\Application Data\Downloaded Installations\{91A3E893-3836-437A-81FD-BAAFFBD0814F}\MediaSPace.msi
C:\WINDOWS\system32\76ddf3bf8b45417b0a1f9f29e2b73add.exe
Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')
Save this file to your desktop, Save this as "CFScript"
Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …
[external image: Posted Image]
- Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
- ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
- When finished, it shall produce a log for you.
- Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Deleted Member
On BleepingComputer, first it said that the file was successful uploaded but that it was performing site maintenance and will be back up shortly. Now it says:
> Malware Submission
Improper usage.
Here is the latest ComboFix log:
ComboFix 10-09-23.01 - PATRICIA 09/24/2010 8:24.3.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.630.255 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\PATRICIA\Desktop\CFscript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
FILE ::
"c:\documents and settings\PATRICIA\Local Settings\Application Data\Downloaded Installations\{91A3E893-3836-437A-81FD-BAAFFBD0814F}\MediaSPace.msi"
"c:\windows\system32\76ddf3bf8b45417b0a1f9f29e2b73add.exe"
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\PATRICIA\Local Settings\Application Data\Downloaded Installations\{91A3E893-3836-437A-81FD-BAAFFBD0814F}\MediaSPace.msi
c:\windows\system32\76ddf3bf8b45417b0a1f9f29e2b73add.exe
.
((((((((((((((((((((((((( Files Created from 2010-08-24 to 2010-09-24 )))))))))))))))))))))))))))))))
.
2010-09-23 23:48 . 2010-09-23 23:48 503808 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-4b5bd972-n\msvcp71.dll
2010-09-23 23:48 . 2010-09-23 23:48 499712 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-4b5bd972-n\jmc.dll
2010-09-23 23:48 . 2010-09-23 23:48 348160 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-4b5bd972-n\msvcr71.dll
2010-09-23 23:48 . 2010-09-23 23:48 ——– d—–w- c:\windows\Sun
2010-09-23 23:48 . 2010-09-23 23:48 61440 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-571ee220-n\decora-sse.dll
2010-09-23 23:48 . 2010-09-23 23:48 12800 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-571ee220-n\decora-d3d.dll
2010-09-23 23:48 . 2010-09-23 23:48 ——– d—–w- c:\program files\Common Files\Java
2010-09-23 23:47 . 2010-09-23 23:47 411368 —-a-w- c:\windows\system32\deployJava1.dll
2010-09-23 23:46 . 2010-09-23 23:46 ——– d—–w- c:\program files\Java
2010-09-23 23:07 . 2010-09-23 23:07 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Malwarebytes
2010-09-23 23:07 . 2010-04-29 19:39 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-09-23 23:07 . 2010-09-23 23:07 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-09-23 23:07 . 2010-04-29 19:39 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-09-22 05:28 . 2010-09-22 05:28 ——– d—–w- C:\Downloads
2010-09-22 05:28 . 2010-09-22 06:00 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Internet Download Accelerator
2010-09-22 05:28 . 2007-10-15 16:06 1412608 —-a-w- c:\documents and settings\PATRICIA\Application Data\Internet Download Accelerator\temp\skin.dll
2010-09-22 04:31 . 2010-09-22 04:47 ——– d—–w- c:\program files\FeyAccelerator
2010-09-22 02:32 . 2010-09-22 02:32 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Avira
2010-09-22 02:23 . 2010-09-22 03:19 ——– d—–w- c:\windows\system32\NtmsData
2010-09-22 02:08 . 2010-03-01 14:05 124784 —-a-w- c:\windows\system32\drivers\avipbb.sys
2010-09-22 02:08 . 2010-02-16 18:24 60936 —-a-w- c:\windows\system32\drivers\avgntflt.sys
2010-09-22 02:08 . 2009-05-11 16:49 45416 —-a-w- c:\windows\system32\drivers\avgntdd.sys
2010-09-22 02:08 . 2009-05-11 16:49 22360 —-a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-09-22 02:08 . 2010-09-22 02:08 ——– d—–w- c:\program files\Avira
2010-09-22 02:08 . 2010-09-22 02:08 ——– d—–w- c:\documents and settings\All Users\Application Data\Avira
2010-09-21 15:32 . 2010-09-21 21:27 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-09-21 15:32 . 2010-09-21 20:39 ——– d—–w- c:\program files\Spybot - Search & Destroy
2010-09-20 16:27 . 2010-09-20 16:27 12552 —-a-w- c:\windows\system32\drivers\hddirect.sys
2010-09-20 15:42 . 2010-09-22 03:37 ——– d—–w- c:\program files\WormBlaster Software ™
2010-09-20 15:28 . 2010-09-20 15:29 ——– d—–w- c:\program files\Zone Labs
2010-09-20 15:27 . 2010-09-20 15:29 ——– d—–w- c:\windows\Internet Logs
2010-09-20 12:44 . 2010-09-20 12:44 ——– d—–w- c:\documents and settings\PATRICIA\IECompatCache
2010-09-20 12:37 . 2010-09-20 12:37 ——– d—–w- c:\program files\Platinum Guard
2010-09-20 12:23 . 2010-09-20 16:16 ——– d—–w- c:\program files\Internet Cell Boost
2010-09-17 12:42 . 2010-09-17 12:42 ——– d—–w- c:\documents and settings\All Users\Application Data\McAfee
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-24 12:31 . 2009-11-13 06:19 ——– d—–w- c:\program files\WeFi
2010-09-23 23:27 . 2009-11-29 17:56 ——– d—–w- c:\program files\CS
2010-09-23 14:12 . 2009-10-01 05:57 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Azureus
2010-09-23 14:08 . 2009-10-01 05:24 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\vlc
2010-09-20 16:16 . 2009-12-17 07:10 ——– d—–w- c:\program files\WinAce
2010-09-20 15:31 . 2009-02-27 14:18 ——– d—–w- c:\documents and settings\All Users\Application Data\PC Tools
2010-09-20 14:45 . 2010-01-04 06:14 ——– d—–w- c:\program files\Spyware Doctor
2010-08-22 23:05 . 2009-12-17 08:54 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\dvdcss
2010-08-19 11:19 . 2010-08-18 22:07 ——– d—–w- c:\program files\FDN
2010-08-17 13:17 . 2004-08-04 01:07 58880 —-a-w- c:\windows\system32\spoolsv.exe
2010-08-13 01:09 . 2010-08-13 01:08 ——– d—–w- c:\program files\SpeedLord
2010-08-13 00:57 . 2010-08-13 00:57 ——– d—–w- c:\program files\Internet Cyclone
2010-08-12 23:10 . 2010-08-12 23:10 ——– d—–w- c:\program files\'Full Speed' Internet Booster + Performance Tests
2010-08-12 06:26 . 2010-08-12 06:26 310208 —-a-w- c:\documents and settings\PATRICIA\Application Data\Azureus\plugins\mlab\ShaperProbeC.exe
2010-08-12 06:25 . 2009-10-01 05:53 ——– d—–w- c:\program files\Vuze
2010-08-11 02:06 . 2009-02-27 14:18 ——– d—–w- c:\documents and settings\All Users\Application Data\TEMP
2010-08-11 00:47 . 2010-08-11 00:40 ——– d—–w- c:\documents and settings\All Users\Application Data\SpeedBit
2010-08-10 00:08 . 2007-04-01 01:19 276 ——w- c:\windows\system32\tcp2.reg
2010-08-08 01:01 . 2010-08-08 01:01 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Amazon
2010-07-27 06:30 . 2010-07-27 06:30 8462336 —-a-w- c:\windows\system32\SET27E.tmp
2010-07-22 15:49 . 2004-08-04 01:07 590848 —-a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 05:57 . 2009-04-16 09:36 5120 —-a-w- c:\windows\system32\xpsp4res.dll
2010-06-30 12:31 . 2009-03-06 13:05 149504 —-a-w- c:\windows\system32\schannel.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-09-23_15.34.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-09-23 23:47 . 2010-09-23 23:47 16384 c:\windows\temp\Perflib_Perfdata_878.dat
+ 2010-09-23 23:47 . 2010-09-23 23:47 153376 c:\windows\system32\javaws.exe
+ 2010-09-23 23:47 . 2010-09-23 23:47 145184 c:\windows\system32\javaw.exe
+ 2010-09-23 23:47 . 2010-09-23 23:47 145184 c:\windows\system32\java.exe
+ 2010-09-23 23:48 . 2010-09-23 23:48 180224 c:\windows\Installer\c5816.msi
+ 2010-09-23 23:46 . 2010-09-23 23:46 576000 c:\windows\Installer\c5811.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-07 68856]
"wefi"="c:\program files\WeFi\\WeFi.exe" [2010-07-25 1645912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCMSMMSG"="BCMSMMSG.exe" [2003-08-29 122880]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
c:\documents and settings\PATRICIA\Start Menu\Programs\Startup\
Zapu Acceleration Engine.lnk - c:\program files\Zapu\Zapu Accelerator\wincm.exe [2010-8-12 155648]
Zapu Accelerator.lnk - c:\program files\Zapu\Zapu Accelerator\wDivi.exe [2010-8-12 147456]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HDDirect.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Zapu\\Zapu Accelerator\\wDivi.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [1/4/2010 2:14 AM 207792]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [9/21/2010 10:08 PM 135336]
R3 WefiEngSvc;WeFi Engine Service;c:\program files\WeFi\WefiEngSvc.exe [7/25/2010 11:14 AM 120152]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [4/24/2010 9:28 AM 135664]
S3 HDDirect;Hard Disk Direct Control;c:\windows\system32\drivers\hddirect.sys [9/20/2010 12:27 PM 12552]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [1/4/2010 2:14 AM 359624]
— Other Services/Drivers In Memory —
*NewlyCreated* - JAVAQUICKSTARTERSERVICE
*Deregistered* - ndiszapu
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder
2010-09-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-24 13:28]
2010-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-24 13:28]
2010-09-24 c:\windows\Tasks\User_Feed_Synchronization-{D131CE83-A104-4C0B-9254-802AEDCF91E4}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 08:31]
2010-09-23 c:\windows\Tasks\WefiStartup.job
- c:\program files\WeFi\WefiStartup.exe [2010-07-25 15:14]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download ALL with IDA
IE: Download remotely with IDA
IE: Download with IDA
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\PATRICIA\Application Data\Mozilla\Firefox\Profiles\sj4a0y5k.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google Powered Search
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
—- FIREFOX POLICIES —-
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-24 08:31
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
[HKEY_USERS\S-1-5-21-583907252-789336058-1343024091-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D118EAF7-BAC8-5170-8BB3-F01CEF5B156F}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
Completion time: 2010-09-24 08:35:40
ComboFix-quarantined-files.txt 2010-09-24 12:35
ComboFix2.txt 2010-09-23 22:55
ComboFix3.txt 2010-09-23 15:41
Pre-Run: 6,263,664,640 bytes free
Post-Run: 6,367,956,992 bytes free
- - End Of File - - EAB0832741955BF40E417A28632415B3
> Malware Submission
Improper usage.
Here is the latest ComboFix log:
ComboFix 10-09-23.01 - PATRICIA 09/24/2010 8:24.3.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.630.255 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\PATRICIA\Desktop\CFscript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
FILE ::
"c:\documents and settings\PATRICIA\Local Settings\Application Data\Downloaded Installations\{91A3E893-3836-437A-81FD-BAAFFBD0814F}\MediaSPace.msi"
"c:\windows\system32\76ddf3bf8b45417b0a1f9f29e2b73add.exe"
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\PATRICIA\Local Settings\Application Data\Downloaded Installations\{91A3E893-3836-437A-81FD-BAAFFBD0814F}\MediaSPace.msi
c:\windows\system32\76ddf3bf8b45417b0a1f9f29e2b73add.exe
.
((((((((((((((((((((((((( Files Created from 2010-08-24 to 2010-09-24 )))))))))))))))))))))))))))))))
.
2010-09-23 23:48 . 2010-09-23 23:48 503808 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-4b5bd972-n\msvcp71.dll
2010-09-23 23:48 . 2010-09-23 23:48 499712 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-4b5bd972-n\jmc.dll
2010-09-23 23:48 . 2010-09-23 23:48 348160 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-4b5bd972-n\msvcr71.dll
2010-09-23 23:48 . 2010-09-23 23:48 ——– d—–w- c:\windows\Sun
2010-09-23 23:48 . 2010-09-23 23:48 61440 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-571ee220-n\decora-sse.dll
2010-09-23 23:48 . 2010-09-23 23:48 12800 —-a-w- c:\documents and settings\PATRICIA\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-571ee220-n\decora-d3d.dll
2010-09-23 23:48 . 2010-09-23 23:48 ——– d—–w- c:\program files\Common Files\Java
2010-09-23 23:47 . 2010-09-23 23:47 411368 —-a-w- c:\windows\system32\deployJava1.dll
2010-09-23 23:46 . 2010-09-23 23:46 ——– d—–w- c:\program files\Java
2010-09-23 23:07 . 2010-09-23 23:07 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Malwarebytes
2010-09-23 23:07 . 2010-04-29 19:39 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-09-23 23:07 . 2010-09-23 23:07 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-09-23 23:07 . 2010-04-29 19:39 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-09-22 05:28 . 2010-09-22 05:28 ——– d—–w- C:\Downloads
2010-09-22 05:28 . 2010-09-22 06:00 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Internet Download Accelerator
2010-09-22 05:28 . 2007-10-15 16:06 1412608 —-a-w- c:\documents and settings\PATRICIA\Application Data\Internet Download Accelerator\temp\skin.dll
2010-09-22 04:31 . 2010-09-22 04:47 ——– d—–w- c:\program files\FeyAccelerator
2010-09-22 02:32 . 2010-09-22 02:32 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Avira
2010-09-22 02:23 . 2010-09-22 03:19 ——– d—–w- c:\windows\system32\NtmsData
2010-09-22 02:08 . 2010-03-01 14:05 124784 —-a-w- c:\windows\system32\drivers\avipbb.sys
2010-09-22 02:08 . 2010-02-16 18:24 60936 —-a-w- c:\windows\system32\drivers\avgntflt.sys
2010-09-22 02:08 . 2009-05-11 16:49 45416 —-a-w- c:\windows\system32\drivers\avgntdd.sys
2010-09-22 02:08 . 2009-05-11 16:49 22360 —-a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-09-22 02:08 . 2010-09-22 02:08 ——– d—–w- c:\program files\Avira
2010-09-22 02:08 . 2010-09-22 02:08 ——– d—–w- c:\documents and settings\All Users\Application Data\Avira
2010-09-21 15:32 . 2010-09-21 21:27 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-09-21 15:32 . 2010-09-21 20:39 ——– d—–w- c:\program files\Spybot - Search & Destroy
2010-09-20 16:27 . 2010-09-20 16:27 12552 —-a-w- c:\windows\system32\drivers\hddirect.sys
2010-09-20 15:42 . 2010-09-22 03:37 ——– d—–w- c:\program files\WormBlaster Software ™
2010-09-20 15:28 . 2010-09-20 15:29 ——– d—–w- c:\program files\Zone Labs
2010-09-20 15:27 . 2010-09-20 15:29 ——– d—–w- c:\windows\Internet Logs
2010-09-20 12:44 . 2010-09-20 12:44 ——– d—–w- c:\documents and settings\PATRICIA\IECompatCache
2010-09-20 12:37 . 2010-09-20 12:37 ——– d—–w- c:\program files\Platinum Guard
2010-09-20 12:23 . 2010-09-20 16:16 ——– d—–w- c:\program files\Internet Cell Boost
2010-09-17 12:42 . 2010-09-17 12:42 ——– d—–w- c:\documents and settings\All Users\Application Data\McAfee
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-24 12:31 . 2009-11-13 06:19 ——– d—–w- c:\program files\WeFi
2010-09-23 23:27 . 2009-11-29 17:56 ——– d—–w- c:\program files\CS
2010-09-23 14:12 . 2009-10-01 05:57 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Azureus
2010-09-23 14:08 . 2009-10-01 05:24 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\vlc
2010-09-20 16:16 . 2009-12-17 07:10 ——– d—–w- c:\program files\WinAce
2010-09-20 15:31 . 2009-02-27 14:18 ——– d—–w- c:\documents and settings\All Users\Application Data\PC Tools
2010-09-20 14:45 . 2010-01-04 06:14 ——– d—–w- c:\program files\Spyware Doctor
2010-08-22 23:05 . 2009-12-17 08:54 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\dvdcss
2010-08-19 11:19 . 2010-08-18 22:07 ——– d—–w- c:\program files\FDN
2010-08-17 13:17 . 2004-08-04 01:07 58880 —-a-w- c:\windows\system32\spoolsv.exe
2010-08-13 01:09 . 2010-08-13 01:08 ——– d—–w- c:\program files\SpeedLord
2010-08-13 00:57 . 2010-08-13 00:57 ——– d—–w- c:\program files\Internet Cyclone
2010-08-12 23:10 . 2010-08-12 23:10 ——– d—–w- c:\program files\'Full Speed' Internet Booster + Performance Tests
2010-08-12 06:26 . 2010-08-12 06:26 310208 —-a-w- c:\documents and settings\PATRICIA\Application Data\Azureus\plugins\mlab\ShaperProbeC.exe
2010-08-12 06:25 . 2009-10-01 05:53 ——– d—–w- c:\program files\Vuze
2010-08-11 02:06 . 2009-02-27 14:18 ——– d—–w- c:\documents and settings\All Users\Application Data\TEMP
2010-08-11 00:47 . 2010-08-11 00:40 ——– d—–w- c:\documents and settings\All Users\Application Data\SpeedBit
2010-08-10 00:08 . 2007-04-01 01:19 276 ——w- c:\windows\system32\tcp2.reg
2010-08-08 01:01 . 2010-08-08 01:01 ——– d—–w- c:\documents and settings\PATRICIA\Application Data\Amazon
2010-07-27 06:30 . 2010-07-27 06:30 8462336 —-a-w- c:\windows\system32\SET27E.tmp
2010-07-22 15:49 . 2004-08-04 01:07 590848 —-a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 05:57 . 2009-04-16 09:36 5120 —-a-w- c:\windows\system32\xpsp4res.dll
2010-06-30 12:31 . 2009-03-06 13:05 149504 —-a-w- c:\windows\system32\schannel.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-09-23_15.34.40 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-09-23 23:47 . 2010-09-23 23:47 16384 c:\windows\temp\Perflib_Perfdata_878.dat
+ 2010-09-23 23:47 . 2010-09-23 23:47 153376 c:\windows\system32\javaws.exe
+ 2010-09-23 23:47 . 2010-09-23 23:47 145184 c:\windows\system32\javaw.exe
+ 2010-09-23 23:47 . 2010-09-23 23:47 145184 c:\windows\system32\java.exe
+ 2010-09-23 23:48 . 2010-09-23 23:48 180224 c:\windows\Installer\c5816.msi
+ 2010-09-23 23:46 . 2010-09-23 23:46 576000 c:\windows\Installer\c5811.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-07 68856]
"wefi"="c:\program files\WeFi\\WeFi.exe" [2010-07-25 1645912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCMSMMSG"="BCMSMMSG.exe" [2003-08-29 122880]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
c:\documents and settings\PATRICIA\Start Menu\Programs\Startup\
Zapu Acceleration Engine.lnk - c:\program files\Zapu\Zapu Accelerator\wincm.exe [2010-8-12 155648]
Zapu Accelerator.lnk - c:\program files\Zapu\Zapu Accelerator\wDivi.exe [2010-8-12 147456]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HDDirect.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Zapu\\Zapu Accelerator\\wDivi.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [1/4/2010 2:14 AM 207792]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [9/21/2010 10:08 PM 135336]
R3 WefiEngSvc;WeFi Engine Service;c:\program files\WeFi\WefiEngSvc.exe [7/25/2010 11:14 AM 120152]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [4/24/2010 9:28 AM 135664]
S3 HDDirect;Hard Disk Direct Control;c:\windows\system32\drivers\hddirect.sys [9/20/2010 12:27 PM 12552]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [1/4/2010 2:14 AM 359624]
— Other Services/Drivers In Memory —
*NewlyCreated* - JAVAQUICKSTARTERSERVICE
*Deregistered* - ndiszapu
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder
2010-09-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-24 13:28]
2010-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-24 13:28]
2010-09-24 c:\windows\Tasks\User_Feed_Synchronization-{D131CE83-A104-4C0B-9254-802AEDCF91E4}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 08:31]
2010-09-23 c:\windows\Tasks\WefiStartup.job
- c:\program files\WeFi\WefiStartup.exe [2010-07-25 15:14]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download ALL with IDA
IE: Download remotely with IDA
IE: Download with IDA
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\PATRICIA\Application Data\Mozilla\Firefox\Profiles\sj4a0y5k.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google Powered Search
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
—- FIREFOX POLICIES —-
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-24 08:31
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
[HKEY_USERS\S-1-5-21-583907252-789336058-1343024091-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D118EAF7-BAC8-5170-8BB3-F01CEF5B156F}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
Completion time: 2010-09-24 08:35:40
ComboFix-quarantined-files.txt 2010-09-24 12:35
ComboFix2.txt 2010-09-23 22:55
ComboFix3.txt 2010-09-23 15:41
Pre-Run: 6,263,664,640 bytes free
Post-Run: 6,367,956,992 bytes free
- - End Of File - - EAB0832741955BF40E417A28632415B3
CatByte
Hi,
It didn't upload if you could try it again.
Please post a fresh DDS log and Attach.txt and advise how your computer is running and if there are any outstanding issues.
Deleted Member
Again, BleepingComputer said something similar:
Your file was successfully submitted. Please let the user helping you know that you have submitted the file.Query failed : MySQL server has gone away
We apologize for the temporary outage. The administrators are performing maintenance on the site and will be finished soon.
Please try again shortly.
You can try refreshing the page in a couple of minutes by clicking here.
Will attempt to post a fresh DDS.
Deleted Member
DDS (Ver_10-03-17.01) - NTFSx86
Run by [removed] at 17:48:06.94 on Fri 09/24/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.630.140 [GMT -4:00]
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\WeFi\WeFi.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Zapu\Zapu Accelerator\wDivi.exe
C:\Program Files\WeFi\WefiEngSvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\PATRICIA\My Documents\Downloads\dds.com
C:\WINDOWS\system32\wscntfy.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://yahoo.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.5.5126.1836\swg.dll
BHO: MSN Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.1203.0\msneshellx.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: MSN Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.1203.0\msneshellx.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [wefi] c:\program files\wefi\\WeFi.exe
mRun: [BCMSMMSG] BCMSMMSG.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\docume~1\patricia\startm~1\programs\startup\zapuac~2.lnk - c:\program files\zapu\zapu accelerator\wincm.exe
StartupFolder: c:\docume~1\patricia\startm~1\programs\startup\zapuac~1.lnk - c:\program files\zapu\zapu accelerator\wDivi.exe
mPolicies-explorer: NoRecentDocsNetHood = 0 (0x0)
IE: Download ALL with IDA
IE: Download remotely with IDA
IE: Download with IDA
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Notify: igfxcui - igfxdev.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\patricia\applic~1\mozilla\firefox\profiles\sj4a0y5k.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google Powered Search
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
—- FIREFOX POLICIES —-
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–p1ai", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbayh7gpa", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\mozilla firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr
ef", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
============= SERVICES / DRIVERS ===============
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2010-1-4 207792]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-9-21 11608]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-9-21 135336]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-9-21 267432]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-9-21 60936]
R3 WefiEngSvc;WeFi Engine Service;c:\program files\wefi\WefiEngSvc.exe [2010-7-25 120152]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-4-24 135664]
S3 HDDirect;Hard Disk Direct Control;c:\windows\system32\drivers\hddirect.sys [2010-9-20 12552]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2010-1-4 359624]
S3 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2010-1-4 1141712]
=============== Created Last 30 ================
2010-09-23 23:47:49 73728 —-a-w- c:\windows\system32\javacpl.cpl
2010-09-23 23:47:49 411368 —-a-w- c:\windows\system32\deployJava1.dll
2010-09-23 23:07:24 0 d—–w- c:\docume~1\patricia\applic~1\Malwarebytes
2010-09-23 23:07:11 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-09-23 23:07:10 0 d—–w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-09-23 23:07:08 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-09-23 15:16:33 0 d-sha-r- C:\cmdcons
2010-09-23 15:12:24 98816 —-a-w- c:\windows\sed.exe
2010-09-23 15:12:24 77312 —-a-w- c:\windows\MBR.exe
2010-09-23 15:12:24 256512 —-a-w- c:\windows\PEV.exe
2010-09-23 15:12:24 161792 —-a-w- c:\windows\SWREG.exe
2010-09-22 05:28:48 0 d—–w- C:\Downloads
2010-09-22 05:28:17 0 d—–w- c:\docume~1\patricia\applic~1\Internet Download Accelerator
2010-09-22 04:31:05 0 d—–w- c:\program files\FeyAccelerator
2010-09-22 02:32:51 0 d—–w- c:\docume~1\patricia\applic~1\Avira
2010-09-22 02:23:44 0 d—–w- c:\windows\system32\NtmsData
2010-09-22 02:08:43 60936 —-a-w- c:\windows\system32\drivers\avgntflt.sys
2010-09-22 02:08:17 0 d—–w- c:\program files\Avira
2010-09-22 02:08:17 0 d—–w- c:\docume~1\alluse~1\applic~1\Avira
2010-09-21 15:32:41 0 d—–w- c:\program files\Spybot - Search & Destroy
2010-09-21 15:32:41 0 d—–w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-09-20 16:27:11 12552 —-a-w- c:\windows\system32\drivers\hddirect.sys
2010-09-20 15:43:08 0 d—–w- C:\Autorun.inf
2010-09-20 15:42:47 0 d—–w- c:\program files\WormBlaster Software ™
2010-09-20 15:28:19 0 d—–w- c:\program files\Zone Labs
2010-09-20 15:27:32 0 d—–w- c:\windows\Internet Logs
2010-09-20 12:44:49 0 d—–w- c:\documents and settings\patricia\IECompatCache
2010-09-20 12:37:03 0 d—–w- c:\program files\Platinum Guard
2010-09-20 12:23:03 0 d—–w- c:\program files\Internet Cell Boost
==================== Find3M ====================
2010-08-17 13:17:06 58880 —-a-w- c:\windows\system32\spoolsv.exe
2010-07-27 06:30:35 8462336 —-a-w- c:\windows\system32\SET27E.tmp
2010-07-22 15:49:15 590848 —-a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 05:57:20 5120 —-a-w- c:\windows\system32\xpsp4res.dll
2010-06-30 12:31:35 149504 —-a-w- c:\windows\system32\schannel.dll
2009-03-07 14:46:50 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009030720090308\index.dat
============= FINISH: 17:49:50.02 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-03-17.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 7/23/2008 9:00:46 AM
System Uptime: 9/24/2010 4:02:24 PM (1 hours ago)
Motherboard: Dell Computer Corporation | | 0X0024
Processor: Intel® Pentium® M processor 1200MHz | U1 | 992/mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 56 GiB total, 5.89 GiB free.
D: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP903: 9/20/2010 8:46:26 AM - System Checkpoint
RP904: 9/21/2010 12:00:50 AM - Software Distribution Service 3.0
RP905: 9/22/2010 12:00:42 AM - Software Distribution Service 3.0
RP906: 9/22/2010 12:54:26 AM - Software Distribution Service 3.0
RP907: 9/23/2010 12:01:07 AM - Software Distribution Service 3.0
RP908: 9/23/2010 7:46:35 PM - Installed Java™ 6 Update 20
RP909: 9/24/2010 12:02:20 AM - Software Distribution Service 3.0
==== Installed Programs ======================
'Full Speed' Internet Booster + Performance Tests
7-Zip 4.65
Adobe Flash Player 10 ActiveX
Avira AntiVir Personal - Free Antivirus
BCM V.92 56K Modem
Google Toolbar for Internet Explorer
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB981793)
Intel® Extreme Graphics 2 Driver
Internet Cyclone 2.02
Java Auto Updater
Java™ 6 Update 20
Malwarebytes' Anti-Malware
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox (3.6.10)
MSN Toolbar
Platinum Guard
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
SpeedLord
Spyware Doctor 7.0
Update for Windows Internet Explorer 8 (KB968220)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VC 9.0 Runtime
VDMSound 2.0.4
VLC media player 1.0.3
Vuze
WebFldrs XP
WeFi [removed]
WinAce Archiver
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows XP Service Pack 3
Zapu Accelerator
==== Event Viewer Messages From Past Week ========
9/23/2010 7:34:57 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde
9/23/2010 6:43:38 PM, error: PlugPlayManager [11] - The device Root\LEGACY_A542C00B0EF815089707379334AF5B6E\0000 disappeared from the system without first being prepared for removal.
9/23/2010 4:36:12 AM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 009096A9A2EC. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
9/23/2010 3:08:35 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
9/22/2010 3:58:32 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the WeFi Engine Service service to connect.
9/21/2010 9:54:01 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. .
9/21/2010 9:54:01 PM, error: SideBySide [59] - Generate Activation Context failed for C:\DOCUME~1\PATRICIA\LOCALS~1\Temp\RarSFX0\redist.dll. Reference error message: The operation completed successfully. .
9/21/2010 9:54:01 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system.
9/21/2010 9:46:40 AM, error: Service Control Manager [7000] - The WeFi Engine Service service failed to start due to the following error: The system cannot find the file specified.
9/21/2010 4:34:16 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.CRT. Reference error message: The referenced assembly is not installed on your system. .
9/21/2010 4:34:16 PM, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Vuze\plugins\azitunes\jacob-1.14.3-x86.dll. Reference error message: The operation completed successfully. .
9/21/2010 4:34:16 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.CRT could not be found and Last Error was The referenced assembly is not installed on your system.
9/21/2010 12:02:00 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework, Version 2.0 (KB928365).
9/21/2010 10:33:53 AM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service WefiEngSvc with arguments "-Service" in order to run the server: {F4F730A7-8BAD-4368-A446-C20B58270834}
9/21/2010 10:06:57 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\setup.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
9/21/2010 10:06:57 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\msdtc.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 2001.12.4414.700.
9/21/2010 10:06:23 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file setup.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
9/21/2010 10:06:23 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file msdtc.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 2001.12.4414.700.
9/20/2010 9:49:47 AM, error: Service Control Manager [7034] - The WeFi Engine Service service terminated unexpectedly. It has done this 1 time(s).
9/19/2010 11:56:56 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the WefiEngSvc service.
9/19/2010 11:56:56 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the service.
9/19/2010 11:56:56 AM, error: Service Control Manager [7000] - The WeFi Engine Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
9/19/2010 11:56:56 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service WefiEngSvc with arguments "-Service" in order to run the server: {F4F730A7-8BAD-4368-A446-C20B58270834}
9/17/2010 9:51:56 PM, error: Service Control Manager [7034] - The getPlus® Helper 3004 service terminated unexpectedly. It has done this 1 time(s).
==== End Of File ===========================
Deleted Member
The only other outstanding issues are, first-
Under the INSTALLED PROGRAMS listed above, please let me know which ones to get rid of that may either be unnecessary or hampering my progress.
Second, I keep getting a window every now and then telling me a script has stopped and do I wish to continue or stop the script. Please tell me the easiest way on how to eliminate this.
And last and least, my computer takes longer now to load on startup for some reason and the black Windows XP screen with the increments stays on for a longer time. Should I be concerned about this? And when it gets to the desktop it says "Profile not found" in a box with an exclamation, to which I click on OK. Seemingly harmless or is it?
CatByte
[external image: Posted Image] Your Java is out of date.
Java™ 6 Update 20 can be updated from the Java control panel Start > Control Panel (Classic View) > Java (looks like a coffee cup) > Update Tab > Update Now.
An update should begin; > follow the prompts.
Clear Java cache
Go into the Control Panel and double-click the Java Icon. (looks like a coffee cup) If you do not see the icon, look to your left and click 'Switch to Classic View'.
NEXT
Please advise how the computer is running and if there are any outstanding issues.
Java™ 6 Update 20 can be updated from the Java control panel Start > Control Panel (Classic View) > Java (looks like a coffee cup) > Update Tab > Update Now.
An update should begin; > follow the prompts.
Clear Java cache
Go into the Control Panel and double-click the Java Icon. (looks like a coffee cup) If you do not see the icon, look to your left and click 'Switch to Classic View'.
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH Checked
- Applications and Applets
Trace and Log Files
- Applications and Applets
- Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE. - Click OK to leave the Temporary Files Window
- Click OK to leave the Java Control Panel.
NEXT
Please advise how the computer is running and if there are any outstanding issues.
Deleted Member
Just want to say thank you for all you have done. 
I am also unable to open PDFs. I tried opening THIS only to have this appear:
C:\DOCUME~1\PATRICIA\LOCALS~1\Temp\11_1_6.pdf could not be opened, because the associated helper application does not exist. Change the association in your preferences.
Is there an easy way of fixing this?
I am also unable to open PDFs. I tried opening THIS only to have this appear:
C:\DOCUME~1\PATRICIA\LOCALS~1\Temp\11_1_6.pdf could not be opened, because the associated helper application does not exist. Change the association in your preferences.
Is there an easy way of fixing this?
CatByte
right click on the pdf file you want to open > choose "open with" > click the browse button to locate the reader of your choice (what are you using? I don't see a pdf reader in your Add/Remove programs)
Once you locate the pdf reader > select the box that says "always use to open this type of program" > OK
If you need another pdf reader > download adobe reader or foxit reader
http://get.adobe.com/reader/
http://download.cnet.com/Foxit-Reader/3000…&tag=button
Once you locate the pdf reader > select the box that says "always use to open this type of program" > OK
If you need another pdf reader > download adobe reader or foxit reader
http://get.adobe.com/reader/
http://download.cnet.com/Foxit-Reader/3000…&tag=button
Deleted Member
Thanks again.
Three final things-
*My downloading speed seems to be erratic and waver a lot between higher KB/sec and way lower KB/sec. For instance, my last download went from 160+KB/sec all the way down to 9 KB/sec. Is there a reason for this? And is there any way of rectifying this?
*This is a minor tweak and ultimately showcases my utter computer technical ineptitude. In my downloads folder, all of the provisional files, texts, uninstall, etc. exploded out of the 7-Zip folder during one of my downloads and I can't find a way to get them back in. So now I have all of these silly files that I don't want there. Is there a quick fix for this minute problem?
*And last but certainly not least(I don't know if you are allowed to do this as it is a little out of the depth of field), do you know of any free word processing programs in the realm of writing novels and screenplays? I don't even have Microsoft Word and I plan on starting to write again. Many thanks if you can recommend some good ones.
Three final things-
*My downloading speed seems to be erratic and waver a lot between higher KB/sec and way lower KB/sec. For instance, my last download went from 160+KB/sec all the way down to 9 KB/sec. Is there a reason for this? And is there any way of rectifying this?
*This is a minor tweak and ultimately showcases my utter computer technical ineptitude. In my downloads folder, all of the provisional files, texts, uninstall, etc. exploded out of the 7-Zip folder during one of my downloads and I can't find a way to get them back in. So now I have all of these silly files that I don't want there. Is there a quick fix for this minute problem?
*And last but certainly not least(I don't know if you are allowed to do this as it is a little out of the depth of field), do you know of any free word processing programs in the realm of writing novels and screenplays? I don't even have Microsoft Word and I plan on starting to write again. Many thanks if you can recommend some good ones.
Deleted Member
Whoops. Double post.
Deleted Member
Yikes. Make that triple. 
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI