What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Intel Proset/wireless and zcfgsvc.exe application error

28 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #31
Hi,Ive done the scans. I am not able to post the combofix report because it is too long,but here are the other 3. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4762 Windows 5.1.2600 Service Pack 2 Internet Explorer 7.0.5730.13 10/7/2010 12:34:51 PM mbam-log-2010-10-07 (12-34-51).txt Scan type: Quick scan Objects scanned: 140955 Time elapsed: 4 minute(s), 54 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) ——————————————————————————– KASPERSKY ONLINE SCANNER 7.0: scan report Thursday, October 7, 2010 Operating system: Microsoft Windows XP Professional Service Pack 2 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Wednesday, October 06, 2010 11:54:00 Records in database: 4280474 ——————————————————————————– Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ E:\ G:\ Scan statistics: Objects scanned: 61483 Threats found: 1 Infected objects found: 1 Suspicious objects found: 0 Scan duration: 01:57:22 File name / Threat / Threats count C:\Documents and Settings\RYAN\My Documents\FrostWire\Incomplete\T-1395704-Neil Diamond - Hot August Night II (Live) - 17 - Holly Holy.wma Infected: Trojan-Downloader.WMA.Wimad.v 1 Selected area has been scanned. µTorrent Adobe Flash Player 10 ActiveX Adobe Reader 7.0.5 Bluetooth Stack for Windows by Toshiba CCleaner CD/DVD Drive Acoustic Silencer DVD-RAM Driver e-tax 2009 FrostWire 4.17.2 High Definition Audio Driver Package - KB888111 Hotfix for Windows XP (KB893357) Hotfix for Windows XP (KB894871) Hotfix for Windows XP (KB895200) Hotfix for Windows XP (KB896256) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB929120) Hotfix for Windows XP (KB935448) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB970653-v3) Hotfix for Windows XP (KB976098-v2) Hotfix for Windows XP (KB979306) Hotfix for Windows XP (KB981793) Intel® PRO Network Connections Drivers InterVideo WinDVD Creator 2 InterVideo WinDVD for TOSHIBA J2SE Runtime Environment 5.0 Update 4 Java Auto Updater Java™ 6 Update 20 Java™ 6 Update 7 LimeWire 4.12.6 Malwarebytes' Anti-Malware mCore mDrWiFi mHelp Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office OneNote 2003 Microsoft Office Standard Edition 2003 Microsoft Works mIWA mLogView mMHouse mPfMgr mPfWiz mProSafe MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) mWlsSafe mXML mZConfig NVIDIA Drivers Office 2003 Trial Assistant Optus Wireless Broadband Protector Suite 5.4 QuickTime Race Driver 3 Realtek High Definition Audio Driver RegistryFix v6.2 SD Secure Module Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Internet Explorer 7 (KB982381) Security Update for Windows Media Encoder (KB954156) Security Update for Windows Media Encoder (KB979332) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB968816) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB978695) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 10 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893066) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB896688) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925454) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937894) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB942615) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944338) Security Update for Windows XP (KB944533) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950759) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953838) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958215) Security Update for Windows XP (KB958470) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960714) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961371-v2) Security Update for Windows XP (KB961373) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB963027) Security Update for Windows XP (KB968537) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969897) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB969947) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971032) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971486) Security Update for Windows XP (KB971557) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB971961) Security Update for Windows XP (KB972260) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973525) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974455) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975561) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB976325) Security Update for Windows XP (KB977165) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978251) Security Update for Windows XP (KB978262) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979559) Security Update for Windows XP (KB979683) Security Update for Windows XP (KB980195) Security Update for Windows XP (KB980218) Security Update for Windows XP (KB980232) Security Update for Windows XP (KB981350) Security Update for Windows XP (KB982381) SimCity 2000® Special Edition Sonic DLA Sonic RecordNow! SUPERAntiSpyware Synaptics Pointing Device Driver Texas Instruments PCIxx21/x515/xx12 drivers. TIPCI TOSHIBA Assist TOSHIBA ConfigFree TOSHIBA Controls TOSHIBA Hotkey Utility TOSHIBA PC Diagnostic Tool TOSHIBA Power Saver TOSHIBA SD Memory Card Format TOSHIBA Speech System Applications TOSHIBA Speech System SR Engine(U.S.) Version1.0 TOSHIBA Speech System TTS Engine(U.S.) Version1.0 TOSHIBA TouchPad ON/Off Utility TOSHIBA Utilities TOSHIBA Virtual Sound TOSHIBA Zooming Utility Ulead Video ToolBox 2.0 Plus Nokia Edition Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB912945) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB942840) Update for Windows XP (KB946627) Update for Windows XP (KB951072-v2) Update for Windows XP (KB955759) Update for Windows XP (KB955839) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) Update for Windows XP (KB976749) Update for Windows XP (KB978207) Update for Windows XP (KB980182) WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Media Encoder 9 Series Windows Media Format Runtime Windows Media Player 10 Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB884018 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885855 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB889673 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB893056
Post #32 last edited
Hi

Please zip up the ComboFix log and attach it.

Next

Press Start > Run and copy/paste the following single-line command into the Run box and click OK:

cmd /c del /f/a/q "C:\Documents and Settings\RYAN\My Documents\FrostWire\Incomplete\T-1395704-Neil Diamond - Hot August Night II (Live) - 17 - Holly Holy.wma"


NEXT


P2P - I see you have P2P software utorrent,Limewire and Frostwire installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
Please see this topic for more information:
Perils of P2P File Sharing.
I would strongly recommend that you uninstall these now. You can do so via Control Panel >> Add or Remove Programs.


NEXT

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.
  • Download the latest version of Java Runtime Environment (JRE) 6 and Save it to your Desktop.
  • Scroll down to where it says Java Runtime Environment (JRE) 6 Update 21 The Java SE Runtime Environment (JRE) allows end-users to run Java applications.
  • Click the Download button to the right.
  • Select the Windows platform from the dropdown menu.
  • Read the License Agreement and then check the box that says: I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement
  • Click Continue The page will refresh.
  • Click on the link to download Windows Offline Installation and Save the file to your Desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start(or My Computer) > Control Panel and double-click on Add or Remove Programs and remove all older versions of Java.
  • Click (highlight) any item with Java Runtime Environment (JRE, J2SE, Java™ SE or Java™ 6) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java version.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6u21-windows-i586-p.exe to install the newest version.
  • After the install is complete, go back to your Control Panel(using Classic View) and click the Java icon. (looks like a coffee cup)
    • On the General tab, under Temporary Internet Files, click the Settings button.
    • Next, click on the Delete Files button.
    • There are two options in the window to clear the cache - Leave BOTH Checked
    • Applications and Applets
    • Trace and Log Files
  • Click OK on Delete Temporary Files Window. Note: This deletes ALL the Downloaded Applications and Applets from the CACHE
  • Click OK to leave the Temporary Files Window.
  • Click OK to leave the Java Control Panel.
  • Delete jre-6u21-windows-i586-p.exe from your desktop.


NEXT

Visit ADOBEand download the latest version of Acrobat Reader (version 9.3)
Having the latest updates ensures there are no security vulnerabilities in your system.


NEXT


Go into Add/Remove programs and try the "repair" on these programs:
Click on Click here for support information.
At the Support Info window, click Repair



Intel® PRO Network Connections Drivers
mZConfig
mDrWiFi

Let me know how the computer is running and if there are any outstanding issues
Post #33
Hi,ive removed the file and the P2P programs and installed Java and Adobe. There was no support link on the Intel Network Drivers.Also not able to find mZConfig or mDrWiFi. Still getting the zcfgsvc.exe application error on start up. Phil
Post #34 last edited
Hi,

Try this.

Go to the Intel website and scan your PC for the latest drivers

http://downloadcenter.intel.com/default.as…r+dnlds_drivers

If nothing changes after updating try this

Navigate to this location

C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe > right click and rename it ZCfgSvc.exe.old (don't delete it)

let me know if the error message continues.

Clear all your temporary files:

Please download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should reboot your machine, if not, manually reboot to ensure a complete clean

Then do a defrag:

Download and run this program Auslogics Disk Defragmenter

Be certain to watch for, and say NO to the installation of the ASK toolbar as Auslogics is installing.


NEXT

Please let me know how the computer is running and if there are any outstanding issues.
Post #35
Hi,when i found the ZCfgSvc file i noticed that it didnt have the exe extension.I added it to the end and no more error. Now everything seems to be good.Ive also updated anti virus program. Thank you for your expert assistance Phil
Post #36
well, isn't that interesting, we would have found that if systemlook would have run can you download that program and see if it will run now? Are there any other programs that you can't download and run? (you did mention this was an issue at one point I believe) is everything else working properly. If you could please post a fresh DDS Log and Attach.txt so i can make sure you are clean, then we can clean up our tools
Post #37 last edited
Hi Was able to install Systemlook. There doesnt seem to be any problems now with installing programs or any other issues. Heres the log SystemLook 04.09.10 by jpshortstuff Log created at 15:25 on 10/10/2010 by RYAN Administrator - Elevation successful ========== filefind ========== Searching for "*rpc.dll" C:\Program Files\Microsoft Office\OFFICE11\OUTLRPC.DLL –a—- 64056 bytes [11:43 14/07/2003] [11:43 14/07/2003] 79B68DCD339C5D26FA65FACD01BFE9AB ========== reg ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs] "Description"="Provides the endpoint mapper and other miscellaneous RPC services." "DisplayName"="Remote Procedure Call (RPC)" "ErrorControl"= 0x0000000001 (1) "Group"="COM Infrastructure" "ImagePath"="%SystemRoot%\system32\svchost -k rpcss" "ObjectName"="NT Authority\NetworkService" "Start"= 0x0000000002 (2) "Type"= 0x0000000010 (16) "FailureActions"=00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 02 00 00 00 60 ea 00 00 (REG_BINARY) "ServiceSidType"= 0x0000000001 (1) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Parameters] "ServiceDll"="%SystemRoot%\System32\rpcss.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security] "Security"=01 00 14 80 a8 00 00 00 b4 00 00 00 14 00 00 00 30 00 00 00 02 00 1c 00 01 00 00 00 02 80 14 00 ff 01 0f 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 78 00 05 00 00 00 00 00 14 00 8d 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 18 00 ff 01 0f 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 00 00 18 00 8d 00 02 00 01 02 00 00 00 00 00 05 20 00 00 00 23 02 00 00 00 00 14 00 9d 00 00 00 01 01 00 00 00 00 00 05 04 00 00 00 00 00 18 00 9d 00 00 00 01 02 00 00 00 00 00 05 20 00 00 00 21 02 00 00 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00 (REG_BINARY) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Enum] "0"="Root\LEGACY_RPCSS\0000" "Count"= 0x0000000001 (1) "NextInstance"= 0x0000000001 (1) -= EOF =- Heres the DDS Log DDS (Ver_09-09-29.01) - NTFSx86 Run by [removed] at 15:37:26.48 on Sun 10/10/2010 Internet Explorer: 7.0.5730.13 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.400 [GMT 11:00] AV: AVG Anti-Virus Free Edition 2011 *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} ============== Running Processes =============== C:\PROGRA~1\AVG\AVG10\avgchsvx.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\WINDOWS\system32\DVDRAMSV.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\Program Files\AVG\AVG10\avgnsx.exe C:\Program Files\AVG\AVG10\avgemcx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\System32\DLA\DLACTRLW.EXE C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe C:\Program Files\Toshiba\Tvs\TvsTray.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\WINDOWS\system32\TDispVol.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\TPSMain.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Protector Suite QL\psqltray.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\AVG\AVG10\avgtray.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\WINDOWS\system32\TPSBattM.exe C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe C:\WINDOWS\system32\RAMASST.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe C:\Program Files\Internet Explorer\iexplore.exe C:\PROGRA~1\AVG\AVG10\avgrsx.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Documents and Settings\RYAN\Desktop\dds.com ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com.au/ uInternet Connection Wizard,ShellNext = hxxp://www.unwired.com.au/ uInternet Settings,ProxyOverride = BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\toscdspd.exe uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe uRun: [FreeRAM XP] "c:\program files\yourware solutions\freeram xp pro\FreeRAM XP Pro.exe" -win uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [AGRSMMSG] AGRSMMSG.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE mRun: [SmoothView] c:\program files\toshiba\toshiba zooming utility\SmoothView.exe mRun: [Tvs] c:\program files\toshiba\tvs\TvsTray.exe mRun: [THotkey] c:\program files\toshiba\toshiba applet\thotkey.exe mRun: [TDispVol] TDispVol.exe mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [IntelWireless] "c:\program files\intel\wireless\bin\ifrmewrk.exe" /tf Intel PROSet/Wireless mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect mRun: [NVRotateSysTray] rundll32.exe c:\windows\system32\nvsysrot.dll,Enable mRun: [PSQLLauncher] "c:\program files\protector suite ql\launcher.exe" /startup mRun: [TPSMain] TPSMain.exe mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\toshiba\bluetooth toshiba stack\TosBtMng.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ramasst.lnk - c:\windows\system32\RAMASST.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.3.1.0.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL Notify: psfus - psqlpwd.dll SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL LSA: Notification Packages = scecli psqlpwd ============= SERVICES / DRIVERS =============== R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680] R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064] R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [2005-12-7 35328] R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 249424] R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384] R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-9-7 298448] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-18 12872] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-11 67656] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2010-9-3 6104144] R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-9-10 265400] R2 FdRedir;FdRedir;c:\program files\common files\protector suite ql\drivers\FdRedir.sys [2006-5-5 13568] R2 FileDisk2;FileDisk Protector Kernel Driver;c:\program files\common files\protector suite ql\drivers\filedisk.sys [2006-5-5 33024] R2 smihlp;SMI helper driver;c:\program files\protector suite ql\smihlp.sys [2006-5-5 3456] R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 123472] R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 30288] R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 26192] R3 NETwLx32; Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit;c:\windows\system32\drivers\NETwLx32.sys [2010-9-28 6607744] S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-2-18 12872] =============== Created Last 30 ================ 2010-10-10 13:29 –d—– c:\windows\system32\scripting 2010-10-10 13:29 –d—– c:\windows\l2schemas 2010-10-10 13:29 –d—– c:\windows\system32\en 2010-10-10 13:29 –d—– c:\windows\system32\bits 2010-10-10 12:16 –d—– c:\docume~1\ryan\applic~1\Auslogics 2010-10-10 12:16 –d—– c:\program files\Auslogics 2010-10-10 12:00 –d—– c:\docume~1\ryan\applic~1\AVG10 2010-10-10 11:58 –d-h— c:\docume~1\alluse~1\applic~1\Common Files 2010-10-10 11:56 –d—– c:\windows\system32\drivers\AVG 2010-10-10 11:56 –d—– c:\docume~1\alluse~1\applic~1\AVG10 2010-10-10 11:56 –d—– c:\program files\AVG 2010-10-10 10:09 –d—– c:\docume~1\alluse~1\applic~1\MFAData 2010-10-10 09:35 –d—– c:\program files\CCleaner 2010-10-09 22:25 –d—– c:\program files\SystemRequirementsLab 2010-10-08 14:14 73,728 a——- c:\windows\system32\javacpl.cpl 2010-10-07 10:22 423,656 a——- c:\windows\system32\deployJava1.dll 2010-10-06 23:59 –d—– C:\AVGTemp 2010-10-06 22:39 459,264 -c—— c:\windows\system32\dllcache\msfeeds.dll 2010-10-06 22:39 268,288 -c—— c:\windows\system32\dllcache\iertutil.dll 2010-10-06 22:39 63,488 -c—— c:\windows\system32\dllcache\icardie.dll 2010-10-06 22:39 52,224 -c—— c:\windows\system32\dllcache\msfeedsbs.dll 2010-10-06 22:39 13,824 -c—— c:\windows\system32\dllcache\ieudinit.exe 2010-10-06 22:39 2,452,872 -c—— c:\windows\system32\dllcache\ieapfltr.dat 2010-10-06 22:39 991,232 -c—— c:\windows\system32\dllcache\ieframe.dll.mui 2010-10-06 22:39 380,928 -c—— c:\windows\system32\dllcache\ieapfltr.dll 2010-10-06 22:39 6,067,200 -c—— c:\windows\system32\dllcache\ieframe.dll 2010-10-06 18:44 23,040 ac—— c:\windows\system32\dllcache\xrxwbtmp.dll 2010-10-06 18:44 27,648 ac—— c:\windows\system32\dllcache\xrxftplt.exe 2010-10-06 18:44 4,608 ac—— c:\windows\system32\dllcache\xrxflnch.exe 2010-10-06 18:43 99,865 ac—— c:\windows\system32\dllcache\xlog.exe 2010-10-06 18:43 28,288 ac—— c:\windows\system32\dllcache\xjis.nls 2010-10-06 18:43 16,970 ac—— c:\windows\system32\dllcache\xem336n5.sys 2010-10-06 18:43 19,455 ac—— c:\windows\system32\dllcache\wvchntxx.sys 2010-10-06 18:43 12,063 ac—— c:\windows\system32\dllcache\wsiintxx.sys 2010-10-06 18:43 154,624 ac—— c:\windows\system32\dllcache\wlluc48.sys 2010-10-06 18:43 156,672 ac—— c:\windows\system32\dllcache\winzm.ime 2010-10-06 18:43 34,890 ac—— c:\windows\system32\dllcache\wlandrv2.sys 2010-10-06 18:43 156,672 ac—— c:\windows\system32\dllcache\winsp.ime 2010-10-06 18:43 156,672 ac—— c:\windows\system32\dllcache\winpy.ime 2010-10-06 18:41 249,402 ac—— c:\windows\system32\dllcache\vinwm.sys 2010-10-06 18:40 26,624 ac—— c:\windows\system32\dllcache\umaxu22.dll 2010-10-06 18:39 315,520 ac—— c:\windows\system32\dllcache\trid3d.dll 2010-10-06 18:38 36,640 ac—— c:\windows\system32\dllcache\t2r4mini.sys 2010-10-06 18:37 48,736 ac—— c:\windows\system32\dllcache\srwlnd5.sys 2010-10-06 18:36 35,913 ac—— c:\windows\system32\dllcache\smcirda.sys 2010-10-06 18:35 252,032 ac—— c:\windows\system32\dllcache\sis300iv.dll 2010-10-06 18:34 495,616 ac—— c:\windows\system32\dllcache\sblfx.dll 2010-10-06 18:33 19,017 ac—— c:\windows\system32\dllcache\rtl8029.sys 2010-10-06 18:32 45,312 ac—— c:\windows\system32\dllcache\ql12160.sys 2010-10-06 18:31 16,384 ac—— c:\windows\system32\dllcache\philcam1.dll 2010-10-06 18:30 31,872 ac—— c:\windows\system32\dllcache\ovce.sys 2010-10-06 18:29 65,278 ac—— c:\windows\system32\dllcache\netflx3.sys 2010-10-06 18:28 12,416 ac—— c:\windows\system32\dllcache\msriffwv.sys 2010-10-06 18:27 65,536 ac—— c:\windows\system32\dllcache\EXCH_mailmsg.dll 2010-10-06 18:26 9,216 ac—— c:\windows\system32\dllcache\kbdnecat.dll 2010-10-06 18:25 100,992 ac—— c:\windows\system32\dllcache\icam5usb.sys 2010-10-06 18:24 57,471 ac—— c:\windows\system32\dllcache\hsf_samp.sys 2010-10-06 18:23 83,968 ac—— c:\windows\system32\dllcache\hpgt21.dll 2010-10-06 18:22 22,090 ac—— c:\windows\system32\dllcache\fem556n5.sys 2010-10-06 18:21 19,996 ac—— c:\windows\system32\dllcache\em556n4.sys 2010-10-06 18:20 90,525 ac—— c:\windows\system32\dllcache\digifep5.sys 2010-10-06 18:19 480,256 ac—— c:\windows\system32\dllcache\cintsetp.exe 2010-10-06 18:18 19,456 ac—— c:\windows\system32\dllcache\ativttxx.sys 2010-10-06 18:17 66,048 ac—— c:\windows\system32\dllcache\s3legacy.dll 2010-10-06 18:17 169,984 ac—— c:\windows\system32\dllcache\iisui.dll 2010-10-06 18:17 19,968 ac—— c:\windows\system32\dllcache\inetsloc.dll 2010-10-06 18:17 7,680 ac—— c:\windows\system32\dllcache\inetmgr.exe 2010-10-06 18:17 14,336 ac—— c:\windows\system32\dllcache\iisreset.exe 2010-10-06 18:17 6,144 ac—— c:\windows\system32\dllcache\ftpsapi2.dll 2010-10-06 18:17 5,632 ac—— c:\windows\system32\dllcache\iisrstap.dll 2010-10-06 18:17 94,720 ac—— c:\windows\system32\dllcache\certmap.ocx 2010-10-06 00:31 –d-h— c:\windows\PIF 2010-10-05 21:41 1,244 a——- C:\CF-Submit.htm 2010-09-29 14:17 –d—– c:\program files\YourWare Solutions 2010-09-29 11:41 4,221,952 a——- c:\windows\system32\drivers\NETw5x32.sys 2010-09-29 11:41 2,756,608 a——- c:\windows\system32\NETw5r32.dll 2010-09-29 11:41 663,552 a——- c:\windows\system32\NETw5c32.dll 2010-09-28 23:36 –d—– c:\program files\RegistryFix 2010-09-28 23:03 –d—– c:\docume~1\ryan\applic~1\IObit 2010-09-28 23:03 –d—– c:\program files\IObit 2010-09-28 20:30 38,224 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2010-09-28 20:30 20,952 a——- c:\windows\system32\drivers\mbam.sys 2010-09-28 12:59 a-dshr– C:\cmdcons 2010-09-28 12:54 256,512 a——- c:\windows\PEV.exe 2010-09-28 12:54 161,792 a——- c:\windows\SWREG.exe 2010-09-28 12:54 98,816 a——- c:\windows\sed.exe 2010-09-28 12:54 77,312 a——- c:\windows\MBR.exe 2010-09-28 12:00 6,607,744 a——- c:\windows\system32\drivers\NETwLx32.sys 2010-09-28 12:00 2,756,608 a——- c:\windows\system32\NETwLr32.dll 2010-09-28 12:00 675,840 a——- c:\windows\system32\NETwLc32.dll 2010-09-28 11:30 –d—– c:\program files\Malwarebytes' Anti-Malware 2010-09-26 22:14 –d—– c:\program files\Trend Micro 2010-09-25 09:52 621,056 a——- c:\windows\system32\drivers\mod7700.sys 2010-09-25 09:52 112,640 a——- c:\windows\system32\drivers\ewusbnet.sys 2010-09-25 09:52 102,656 a——- c:\windows\system32\drivers\ewusbfake.sys 2010-09-25 09:52 102,400 a——- c:\windows\system32\drivers\ewusbmdm.sys 2010-09-25 09:52 24,448 a——- c:\windows\system32\drivers\ewdcsc.sys 2010-09-24 17:04 –d—– c:\program files\Wireless Broadband 2010-09-24 15:56 –d—– c:\windows\system32\appmgmt 2010-09-24 01:46 –d-h— c:\windows\system32\GroupPolicy 2010-09-13 16:27 25,680 a——- c:\windows\system32\drivers\AVGIDSEH.sys ==================== Find3M ==================== 2010-10-10 13:33 86,327 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2010-09-07 03:49 298,448 a——- c:\windows\system32\drivers\avgtdix.sys 2010-09-07 03:48 249,424 a——- c:\windows\system32\drivers\avgldx86.sys 2010-09-07 03:48 26,064 a——- c:\windows\system32\drivers\avgrkx86.sys 2010-08-19 21:42 30,288 a——- c:\windows\system32\drivers\AVGIDSFilter.sys 2010-08-19 21:42 123,472 a——- c:\windows\system32\drivers\AVGIDSDriver.sys 2010-08-19 21:42 26,192 a——- c:\windows\system32\drivers\AVGIDSShim.sys 2009-10-23 14:14 13,854 a——- c:\docume~1\alluse~1\applic~1\daxe.dll 2009-10-23 14:14 13,307 a——- c:\docume~1\alluse~1\applic~1\polelum.pif ============= FINISH: 15:37:45.09 ===============
Post #38
Just some housekeeping to do now,

Please do the following:

You can delete the DDS logs and programs from your desktop.


NEXT

Follow these steps to uninstall Combofix

  • Make sure your security programs are totally disabled.
  • Click START then RUN
  • Now copy/paste Combofix /uninstall into the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.

[external image: Posted Image]


Should you wish to contribute to the ongoing development of ComboFix, donations are being accepted via PayPal.


If there are any logs/tools remaining > right click and delete them.


NEXT


Below I have included a number of recommendations for how to protect your computer against malware infections.

  • It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
    Strong passwords: How to create and use them     Then consider a password keeper, to keep all your passwords safe.

  • Keep Windows updated by regularly checking their website at :
    http://windowsupdate.microsoft.com/
    This will ensure your computer has always the latest security updates available installed on your computer.

  • Make Internet Explorer more secure
    • Click Start > Run
    • Type Inetcpl.cpl & click OK
    • Click on the Security tab
    • Click Reset all zones to default level
    • Make sure the Internet Zone is selected & Click Custom level
    • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
    • Next Click OK, then Apply button and then OK to exit the Internet Properties page.

  • WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
    • Green to go
    • Yellow for caution
    • Red to stop
    WOT has an addon available for both Firefox and IE

  • Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

  • ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.

  • In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:
    Think Prevention.
    PC Safety and Security–What Do I Need?.


**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.


Thank you for your patience, and performing all of the procedures requested.

Please respond one last time so we can consider the thread resolved and close it, thank-you.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI