What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

burner is gone..infection?

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
hey guys i'm wondering if perhaps i have some sort of infection.

i originally posted in hardware http://forums.whatthetech.com/index.php?sh…mp;#entry722816

and was referred here. in short, my burner has disappeared and now when ever windows trys to installl the driver it fails to install. i uninstalled a couple of programs that i thought might have caused a conflict but it hasnt made any difference.

i have noticed that a program or two has mysteriously disappeared, not just the icon either because it didnt show up in revo uninstaller either.

i also noticed that my anti virus wasnt updating but now it is. in addition, for whatever reason The Cleaner 2012 (which was a recent give away from give away of the day) keeps crashing unless its run in safe mode (btw it didnt find anything, neither did malware bytes). below is my hijack log.

btw i was trying to upload a screen shot of the failure but evn though it's only about 17kb it still says in the lower left, below where it says Select a file..atttachment space used 2.05MB of 2MB and thats before i even selected anything, so of course when i do make a selection to upload it fails..but what the screen shot basically says is ….Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39).

thank you in advance

windows 7 32bit..2g of ram



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:31:24 PM, on 4/5/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Verizon\McciTrayApp.exe
C:\Users\me\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Verizon\FiOS\ihs\IHANotify.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Corel\Standby\Standby.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\me\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=ZUGO&form=ZGAPHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Standby] "c:\Program Files\Common Files\Corel\Standby\Standby.exe" -START
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Verizon_McciTrayApp] "C:\Program Files\Verizon\McciTrayApp.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\me\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON Stylus Photo RX580 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBPA.EXE /FU "C:\Windows\TEMP\E_SACB.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [DriverMax] "C:\Program Files\Innovative Solutions\DriverMax\devices.exe" -agent
O4 - HKCU\..\Run: [ihanotify] C:\Program Files\Verizon\FiOS\ihs\IHANotify.exe BalloonCount=18 RunNotify=fios BalloonMsg=init
O4 - HKCU\..\Run: [Corel Photo Downloader] "C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\me\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\me\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IHA_MessageCenter - Unknown owner - C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: MotoHelper Service (MotoHelper) - Unknown owner - C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\Program Files\Sandboxie\SbieSvc.exe

–
End of file - 8666 bytes
Post #2
Hi cld,

:welcome:

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

The problem with you being able to upload your screenshot is that the forum software only allows 2mb of space per user. Over time, you have used up your alloted space. If you want to be able to upload in the future, you will need to clean out some of your older uploads. You can do this by clicking on My Controls at the top of a page, which will take you into your control panel. Then on the lower left click on Manage your attachments. All attachments you have uploaded will be listed. If you put a check in the little box on the right of ones you are willing to delete, and then click on Remove Selected at the bottom, you will free up more space.

Enough of that. On to the problem at hand.

Unfortunately, HijackThis just doesn't give enough information, especially with the newer Operating systems and malware. I'd like to see a deeper look.

Please download DDS by sUBs from one of the following links and save it to your desktop.
    • DDS.scr
    • DDS.pif
  • Disable any script blocking protection (How to Disable your Security Programs)
  • Double click DDS icon to run the tool (may take up to 3 minutes to run)
  • When done, DDS.txt will open.
  • After a few moments, attach.txt will open in a second window.
  • Save both reports to your desktop.
—————————————————
  • Post the contents of the DDS.txt report in your next reply
  • Post the Attach.txt report even though it says to attach. Posting it works fine.
Post #3 last edited
thank you!!! the attachment thing was driving me crazy!!! at the bottom of the post will be what i was trying to upload.. DDS (Ver_11-03-05.01) - NTFSx86 Run by [removed] at 16:55:11.94 on Thu 04/07/2011 Internet Explorer: 9.0.8112.16421 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.2047.1127 [GMT -4:00] . AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308} SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Program Files\Sandboxie\SbieSvc.exe C:\Windows\system32\atieclxx.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe C:\Program Files\Common Files\Motive\McciCMService.exe C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe C:\Program Files\Microsoft\BingBar\SeaPort.EXE C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\Common Files\Corel\Standby\Standby.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Verizon\McciTrayApp.exe C:\Users\me\AppData\Local\Google\Update\GoogleUpdate.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Verizon\FiOS\ihs\IHANotify.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\WUDFHost.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\DllHost.exe C:\Users\me\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\me\Desktop\dds.scr C:\Windows\system32\conhost.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.bing.com/?pc=ZUGO&form=ZGAPHP uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files\windows live\companion\companioncore.dll BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "c:\program files\microsoft\bingbar\BingExt.dll" BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "c:\program files\microsoft\bingbar\BingExt.dll" uRun: [Google Update] "c:\users\me\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [EPSON Stylus Photo RX580 Series] c:\windows\system32\spool\drivers\w32x86\3\e_fatibpa.exe /fu "c:\windows\temp\E_SACB.tmp" /EF "HKCU" uRun: [DriverMax] "c:\program files\innovative solutions\drivermax\devices.exe" -agent uRun: [DriverMax_RESTART] uRun: [ihanotify] c:\program files\verizon\fios\ihs\IHANotify.exe BalloonCount=46 RunNotify=fios BalloonMsg=init uRun: [Corel Photo Downloader] "c:\program files\common files\corel\corel photodownloader\Corel Photo Downloader.exe" -startup mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui mRun: [Standby] "c:\program files\common files\corel\standby\Standby.exe" -START mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW mRun: [Verizon_McciTrayApp] "c:\program files\verizon\McciTrayApp.exe" StartupFolder: c:\users\me\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\users\me\appdata\roaming\dvdvideosoftiehelpers\freeyoutubedownload.htm IE: Free YouTube to MP3 Converter - c:\users\me\appdata\roaming\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll . ============= SERVICES / DRIVERS =============== . R0 hotcore3;hc3ServiceName;c:\windows\system32\drivers\hotcore3.sys [2011-3-23 57112] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-3-16 165584] R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-1-26 176128] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-3-16 17744] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-3-16 50768] R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2011-4-2 40384] R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2010-10-13 98304] R2 MotoHelper;MotoHelper Service;c:\program files\motorola\motohelper\MotoHelperService.exe [2010-9-7 202048] R3 amdkmdag;amdkmdag;c:\windows\system32\drivers\atikmdag.sys [2011-1-26 7566848] R3 amdkmdap;amdkmdap;c:\windows\system32\drivers\atikmpag.sys [2011-1-26 238592] R3 RRNetCapMP;RRNetCapMP;c:\windows\system32\drivers\rrnetcap.sys [2011-3-14 31848] R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2011-3-24 126696] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-9-28 315392] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-3-16 340048] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-3-18 136176] S3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2011-4-2 40384] S3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2011-4-2 40384] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] S3 BBSvc;Bing Bar Update Service;c:\program files\microsoft\bingbar\BBSvc.EXE [2011-2-28 183560] S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2011-3-15 39272] S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-9-23 1493352] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2011-3-18 15872] S3 RRNetCap;RRNetCap Service;c:\windows\system32\drivers\rrnetcap.sys [2011-3-14 31848] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-3-18 52224] S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040] . =============== Created Last 30 ================ . 2011-04-06 20:53:25 ——– d—–w- c:\users\me\appdata\roaming\DVDVideoSoft 2011-04-05 23:12:18 6792528 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\{a9655d4d-b2ee-4116-a662-9b32b1d87f12}\mpengine.dll 2011-04-05 05:19:41 ——– d—–w- c:\users\me\appdata\roaming\thecleaner 2011-04-05 05:19:04 ——– d—–w- c:\program files\The Cleaner 2011-04-04 22:35:22 ——– d—–w- c:\program files\common files\Motive 2011-04-04 22:34:10 ——– d—–w- c:\program files\Verizon 2011-04-04 22:19:20 ——– d—–w- c:\users\me\appdata\roaming\TechWizard 2011-04-04 15:50:14 ——– d—–w- c:\program files\Caminova 2011-04-04 15:32:49 ——– d—–w- C:\Temp 2011-04-04 14:44:19 ——– d—–w- c:\users\me\appdata\local\Innovative Solutions 2011-04-04 14:44:19 ——– d—–w- c:\progra~2\Innovative Solutions 2011-04-04 14:43:53 ——– d—–w- c:\program files\Innovative Solutions 2011-04-04 03:43:05 ——– d—–w- c:\users\me\appdata\local\ElevatedDiagnostics 2011-04-03 03:05:01 ——– d—–w- c:\users\me\appdata\local\FLVService 2011-04-03 03:04:57 ——– d—–w- c:\windows\Freecorder 2011-04-03 02:30:56 ——– d—–w- c:\windows\FLV Player 2011-04-02 20:00:09 212480 —-a-w- c:\windows\PCDLIB32.DLL 2011-04-02 19:57:57 ——– d—–w- c:\program files\EPSON Print CD 2011-04-02 19:57:39 696320 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iKernel.dll 2011-04-02 19:57:39 57344 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\ctor.dll 2011-04-02 19:57:39 5632 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\DotNetInstaller.exe 2011-04-02 19:57:39 237568 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iscript.dll 2011-04-02 19:57:39 155648 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iuser.dll 2011-04-02 19:57:38 282756 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\setup.dll 2011-04-02 19:57:38 163972 —-a-w- c:\program files\common files\installshield\professional\runtime\0701\intel32\iGdi.dll 2011-04-02 19:54:20 73728 —-a-w- c:\windows\system32\PICSDK.dll 2011-04-02 19:54:20 495616 —-a-w- c:\windows\system32\PICSDK2.dll 2011-04-02 19:54:19 77824 —-a-w- c:\windows\system32\PICEntry.dll 2011-04-02 19:54:18 45056 —-a-w- c:\windows\system32\EpPicPrt.dll 2011-04-02 19:54:18 45056 —-a-w- c:\windows\system32\EpPicMgr.dll 2011-04-02 19:53:59 69715 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\ctor.dll 2011-04-02 19:53:59 32768 —-a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll 2011-04-02 19:53:59 266240 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\iscript.dll 2011-04-02 19:53:59 192512 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\iuser.dll 2011-04-02 19:53:58 5632 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\DotNetInstaller.exe 2011-04-02 19:53:57 724992 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\iKernel.dll 2011-04-02 19:53:57 311428 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\Setup.dll 2011-04-02 19:53:57 184452 —-a-w- c:\program files\common files\installshield\professional\runtime\09\00\intel32\iGdi.dll 2011-04-02 19:51:12 ——– d—–w- c:\program files\epson 2011-04-02 19:51:11 63488 —-a-w- c:\windows\system32\escwiad.dll 2011-04-02 17:05:28 86528 —-a-w- c:\windows\system32\E_FLBBPA.DLL 2011-04-02 17:05:27 78848 —-a-w- c:\windows\system32\E_FD4BBPA.DLL 2011-04-02 17:05:12 ——– d—–w- c:\progra~2\EPSON 2011-04-02 02:49:17 ——– d—–w- c:\users\me\appdata\roaming\DVDVideoSoftIEHelpers 2011-04-02 02:48:39 ——– d—–w- c:\program files\DVDVideoSoft 2011-04-02 02:48:39 ——– d—–w- c:\program files\common files\DVDVideoSoft 2011-04-02 02:31:46 ——– d—–w- c:\users\me\appdata\local\CrashRpt 2011-04-02 02:29:36 ——– d—–w- c:\program files\RapidSolution 2011-04-02 02:29:35 ——– d—–w- c:\progra~2\RapidSolution 2011-04-02 02:22:49 ——– d—–w- c:\users\me\appdata\local\RapidSolution 2011-03-31 23:35:26 ——– d—–w- c:\users\me\appdata\local\{830630DC-A75F-4EED-9F26-619CE8E266E2} 2011-03-31 11:36:36 56496 —-a-w- c:\windows\system32\wbhelp2.dll 2011-03-31 11:36:36 544768 —-a-w- c:\windows\system32\wbocx.ocx 2011-03-31 11:36:36 258352 —-a-w- c:\windows\system32\unicows.dll 2011-03-31 11:36:35 4608 —-a-w- c:\windows\system32\W95INF32.DLL 2011-03-31 11:36:35 33968 —-a-w- c:\windows\system32\anim.dll 2011-03-31 11:36:35 2272 —-a-w- c:\windows\system32\W95INF16.DLL 2011-03-31 11:36:35 1706800 —-a-w- c:\windows\system32\gdiplus.dll 2011-03-31 11:36:35 ——– d—–w- c:\program files\WinUtilities 2011-03-31 11:34:49 ——– d—–w- c:\users\me\appdata\local\{044182CF-B00B-4968-B1FF-4C4E441918F2} 2011-03-31 03:54:02 ——– d—–w- c:\program files\Lexmark 2011-03-30 22:17:44 ——– d—–w- c:\users\me\appdata\local\{8A788E7C-D501-4B7D-92F1-9F2FEC48075C} 2011-03-29 21:04:34 ——– d—–w- c:\users\me\appdata\local\{52DD8E3C-36C9-4E80-9689-9ECA47A40BBF} 2011-03-28 01:22:10 ——– d—–w- C:\Games 2011-03-27 03:34:00 ——– d—–w- c:\program files\Sandboxie 2011-03-26 21:03:57 ——– d—–w- c:\users\me\appdata\local\{981BCC4E-172A-414B-AD04-174022351BCA} 2011-03-25 21:02:58 ——– d—–w- c:\users\me\appdata\local\{9958B86D-E386-48A3-BCF0-012227E37E87} 2011-03-25 00:00:26 ——– d—–w- c:\program files\common files\Motorola Shared 2011-03-25 00:00:11 ——– d—–w- c:\program files\Motorola 2011-03-25 00:00:11 ——– d—–w- c:\program files\common files\MSSoap 2011-03-24 11:31:51 ——– d—–w- c:\users\me\appdata\local\{259038C2-0D3E-47F3-9731-E9A04E28FE86} 2011-03-24 04:11:06 ——– d—–w- c:\users\me\appdata\roaming\com.irregulargames.maxdamage 2011-03-24 04:08:39 ——– d—–w- c:\users\me\appdata\roaming\Rovio 2011-03-24 04:07:24 ——– d—–w- c:\program files\Rovio 2011-03-24 04:01:06 ——– d—–w- c:\users\me\appdata\local\Intel 2011-03-24 02:22:12 ——– d—–w- c:\users\me\appdata\local\Adobe 2011-03-24 01:58:46 ——– d—–w- C:\PFiles 2011-03-23 23:35:34 ——– d—–w- C:\archive_db 2011-03-23 23:29:55 ——– d—–w- c:\progra~2\launcher 2011-03-23 23:24:32 57112 —-a-w- c:\windows\system32\drivers\hotcore3.sys 2011-03-23 23:16:36 ——– d—–w- c:\program files\Paragon Software 2011-03-23 20:02:30 ——– d—–w- c:\users\me\appdata\local\{9C4B2B74-C84D-40A1-BB95-B1262A1E4421} 2011-03-23 03:55:30 ——– d—–w- c:\program files\SnowFox Software 2011-03-22 22:53:32 ——– d—–w- c:\users\me\appdata\local\DFX 2011-03-22 22:53:32 ——– d—–w- c:\progra~2\DFX 2011-03-22 22:53:23 ——– d—–w- c:\program files\common files\DFX 2011-03-22 22:53:22 ——– d—–w- c:\program files\DFX 2011-03-22 20:34:24 ——– d—–w- c:\users\me\appdata\local\{4AEE244B-5AD4-4942-A5A5-26B1BA6212D4} 2011-03-21 19:58:52 472808 —-a-w- c:\windows\system32\deployJava1.dll 2011-03-21 15:53:20 ——– d—–w- c:\users\me\appdata\local\{99FD16D4-CC8A-4AAD-8BBD-E1FC848428E5} 2011-03-21 00:48:08 1892184 —-a-w- c:\windows\system32\D3DX9_42.dll 2011-03-21 00:46:40 ——– d—–w- c:\windows\system32\xlive 2011-03-21 00:46:38 ——– d—–w- c:\program files\Microsoft Games for Windows - LIVE 2011-03-21 00:42:59 467984 —-a-w- c:\windows\system32\d3dx10_39.dll 2011-03-20 23:35:07 ——– d—–w- c:\program files\Capcom 2011-03-20 15:52:34 ——– d—–w- c:\users\me\appdata\local\{45FF5A11-D2B5-4ECB-AA4C-DFB9C6235554} 2011-03-20 00:37:48 ——– d—–w- c:\progra~2\PopCap Games 2011-03-19 19:09:21 ——– d—–w- c:\users\me\appdata\local\{64ED7953-C973-4965-871F-A1E7A31EFB47} 2011-03-19 19:09:20 ——– d—–w- c:\users\me\appdata\local\{14B8917E-973C-4E5C-B2CF-1ADF30EF2A1F} 2011-03-18 22:39:44 ——– d—–w- c:\windows\system32\SPReview 2011-03-18 22:38:03 ——– d—–w- c:\windows\system32\EventProviders 2011-03-18 22:31:22 1130824 —-a-w- c:\windows\system32\dfshim.dll 2011-03-18 22:31:14 53760 —-a-w- c:\windows\system32\LSCSHostPolicy.dll 2011-03-18 22:31:14 52224 —-a-w- c:\windows\system32\drivers\TsUsbFlt.sys 2011-03-18 22:31:14 3215872 —-a-w- c:\windows\system32\mstscax.dll 2011-03-18 22:31:14 11776 —-a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2011-03-18 22:31:04 1171456 —-a-w- c:\windows\system32\d3d10warp.dll 2011-03-18 22:31:02 954752 —-a-w- c:\windows\system32\mfc40.dll 2011-03-18 22:31:02 954288 —-a-w- c:\windows\system32\mfc40u.dll 2011-03-18 22:31:02 915456 —-a-w- c:\windows\system32\rdpcorets.dll 2011-03-18 22:31:02 80896 —-a-w- c:\windows\system32\RDVGHelper.exe 2011-03-18 22:31:02 120320 —-a-w- c:\windows\system32\tssrvlic.dll 2011-03-18 22:29:59 2616320 —-a-w- c:\windows\explorer.exe 2011-03-18 22:28:59 223232 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-03-18 22:27:59 905216 —-a-w- c:\windows\system32\mmsys.cpl 2011-03-18 22:26:59 74752 —-a-w- c:\windows\system32\drivers\tdx.sys 2011-03-18 22:25:59 40960 —-a-w- c:\windows\system32\odbcconf.dll 2011-03-18 22:24:34 780288 —-a-w- c:\windows\system32\wbem\wbemcore.dll 2011-03-18 22:24:34 606208 —-a-w- c:\windows\system32\wbem\fastprox.dll 2011-03-18 22:24:34 363008 —-a-w- c:\windows\system32\wbemcomn.dll 2011-03-18 22:24:33 351232 —-a-w- c:\windows\system32\wmicmiplugin.dll 2011-03-18 22:24:09 697344 —-a-w- c:\windows\system32\SmiEngine.dll 2011-03-18 22:23:53 189952 —-a-w- c:\windows\system32\wdscore.dll 2011-03-18 22:23:52 209920 —-a-w- c:\windows\system32\PkgMgr.exe 2011-03-18 22:22:29 323072 —-a-w- c:\windows\system32\drvstore.dll 2011-03-18 22:22:25 257024 —-a-w- c:\windows\system32\dpx.dll 2011-03-18 22:17:48 ——– d—–w- c:\users\me\appdata\local\Apple Computer 2011-03-18 22:14:42 ——– d—–w- c:\program files\iPod 2011-03-18 22:14:41 ——– d—–w- c:\program files\iTunes 2011-03-18 22:14:41 ——– d—–w- c:\progra~2\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll 2011-03-18 22:09:11 159744 —-a-w- c:\program files\internet explorer\plugins\npqtplugin.dll 2011-03-18 22:05:49 ——– d—–w- c:\users\me\appdata\local\Apple 2011-03-18 22:04:38 ——– d—–w- c:\program files\Bonjour 2011-03-18 21:45:07 ——– d—–w- c:\users\me\appdata\local\{EF28553B-37E3-4A5C-9B13-61D8C908E253} 2011-03-18 03:24:01 ——– d—–w- c:\program files\PowerISO 2011-03-18 03:15:10 ——– d—–w- c:\program files\MPC HomeCinema 2011-03-17 23:42:21 ——– d—–w- c:\users\me\appdata\local\{18736A99-D2CF-4EC9-BE36-400E0D583779} 2011-03-17 04:12:51 ——– d—–w- c:\progra~2\MSNDynFiles 2011-03-17 03:42:41 ——– d—–w- c:\users\me\appdata\local\Diagnostics 2011-03-17 01:21:34 ——– d—–w- c:\users\me\appdata\local\Corel 2011-03-17 01:19:34 88 –sha-r- c:\progra~2\841CE832BD.sys 2011-03-17 01:19:33 5642 –sha-w- c:\progra~2\KGyGaAvL.sys 2011-03-17 01:14:44 ——– d—–w- c:\windows\RegisteredPackages 2011-03-17 01:14:42 ——– d–h–w- c:\windows\msdownld.tmp 2011-03-17 01:14:10 ——– d—–w- c:\progra~2\InterVideo 2011-03-17 01:13:55 225280 —-a-w- c:\program files\common files\installshield\iscript\IScript.dll 2011-03-17 01:13:54 77824 —-a-w- c:\program files\common files\installshield\engine\6\intel 32\ctor.dll 2011-03-17 01:13:54 32768 —-a-w- c:\program files\common files\installshield\engine\6\intel 32\objectps.dll 2011-03-17 01:13:54 212992 —-a-w- c:\program files\common files\installshield\engine\6\intel 32\ILog.dll 2011-03-17 01:13:54 176128 —-a-w- c:\program files\common files\installshield\engine\6\intel 32\iuser.dll 2011-03-17 01:10:05 ——– d—–w- c:\progra~2\Corel 2011-03-17 01:02:30 ——– d—–w- c:\program files\common files\Protexis 2011-03-17 00:52:46 ——– d—–w- c:\program files\common files\Corel 2011-03-17 00:49:10 ——– d—–w- c:\program files\Windows Media Components 2011-03-17 00:48:07 ——– d—–w- c:\program files\common files\Ulead Systems 2011-03-17 00:46:59 236824 —-a-w- c:\windows\system32\xactengine2_3.dll 2011-03-16 23:49:56 614532 —-a-w- c:\program files\common files\installshield\engine\6\intel 32\IKernel.exe 2011-03-16 21:21:23 6792528 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\backup\mpengine.dll 2011-03-16 20:38:52 ——– d—–w- c:\users\me\appdata\local\{00A2122A-0C91-4155-A5F7-DBD0E2F2F169} 2011-03-16 04:38:34 340048 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2011-03-16 04:38:29 50768 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys 2011-03-16 04:37:10 38848 —-a-w- c:\windows\avastSS.scr 2011-03-16 04:37:04 ——– d—–w- c:\progra~2\Alwil Software 2011-03-16 04:30:27 ——– d—–w- c:\users\me\appdata\local\{C828AA26-BC18-4E02-A88A-497313922CA8} 2011-03-16 04:05:53 ——– d—–w- c:\program files\VS Revo Group 2011-03-16 03:49:15 ——– d—–w- c:\users\me\appdata\local\{4A2CB329-8A72-4568-8F42-4019B13CFD54} 2011-03-16 03:49:00 ——– d—–w- c:\users\me\Tracing 2011-03-16 00:15:18 ——– d—–w- c:\windows\en 2011-03-16 00:11:42 39272 —-a-w- c:\windows\system32\drivers\fssfltr.sys 2011-03-16 00:04:11 ——– d—–w- c:\program files\Microsoft SQL Server Compact Edition 2011-03-15 23:45:33 ——– d—–w- c:\program files\Microsoft 2011-03-15 23:42:07 69464 —-a-w- c:\windows\system32\XAPOFX1_3.dll 2011-03-15 23:42:07 515416 —-a-w- c:\windows\system32\XAudio2_5.dll 2011-03-15 23:42:04 453456 —-a-w- c:\windows\system32\d3dx10_42.dll 2011-03-15 23:38:59 3426072 —-a-w- c:\windows\system32\d3dx9_32.dll 2011-03-15 23:26:31 469256 —-a-w- c:\program files\common files\windows live\.cache\66e7f83d1cbe36807\InstallManager_WLE_WLE.exe 2011-03-15 23:25:51 15712 —-a-w- c:\program files\common files\windows live\.cache\50297d6e1cbe36806\MeshBetaRemover.exe 2011-03-15 23:25:39 525656 —-a-w- c:\program files\common files\windows live\.cache\4946aebe1cbe36805\DXSETUP.exe 2011-03-15 23:25:39 1691480 —-a-w- c:\program files\common files\windows live\.cache\4946aebe1cbe36805\dsetup32.dll 2011-03-15 23:25:38 94040 —-a-w- c:\program files\common files\windows live\.cache\4946aebe1cbe36805\DSETUP.dll 2011-03-15 23:25:29 525656 —-a-w- c:\program files\common files\windows live\.cache\421f54731cbe36804\DXSETUP.exe 2011-03-15 23:25:29 1691480 —-a-w- c:\program files\common files\windows live\.cache\421f54731cbe36804\dsetup32.dll 2011-03-15 23:25:28 94040 —-a-w- c:\program files\common files\windows live\.cache\421f54731cbe36804\DSETUP.dll 2011-03-15 23:24:57 6260088 —-a-w- c:\program files\common files\windows live\.cache\2c7f401f1cbe36803\Silverlight.4.0.exe 2011-03-15 23:22:41 ——– d—–w- c:\users\me\appdata\local\Windows Live 2011-03-15 23:22:40 ——– d—–w- c:\program files\common files\Windows Live 2011-03-15 03:33:19 ——– d—–w- c:\progra~2\vsosdk 2011-03-15 03:00:45 ——– d—–w- c:\program files\CleanUp! 2011-03-15 02:54:48 ——– d—–w- c:\program files\WinAVI MP4 Converter 2011-03-15 02:51:52 ——– d—–w- c:\users\me\appdata\roaming\Malwarebytes 2011-03-15 02:51:42 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-03-15 02:51:41 ——– d—–w- c:\progra~2\Malwarebytes 2011-03-15 02:51:40 20952 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-03-15 02:51:40 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware 2011-03-15 02:36:15 33104 —-a-w- c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll 2011-03-15 02:36:15 32656 —-a-w- c:\windows\system32\msonpmon.dll 2011-03-15 02:31:55 ——– d—–w- c:\windows\PCHEALTH 2011-03-15 02:29:58 ——– d—–w- c:\program files\Microsoft Visual Studio 8 2011-03-15 02:28:56 ——– d—–w- c:\users\me\appdata\local\Microsoft Help 2011-03-15 01:30:52 ——– d—–w- c:\program files\common files\PX Storage Engine 2011-03-15 01:29:14 ——– d—–w- c:\program files\common files\DivX Shared 2011-03-15 01:28:56 ——– d—–w- c:\program files\DivX 2011-03-15 01:28:38 ——– d—–w- c:\progra~2\DivX 2011-03-14 21:52:43 31848 —-a-w- c:\windows\system32\drivers\rrnetcap.sys 2011-03-14 20:37:30 540000 —-a-w- c:\windows\system32\drivers\timntr.sys 2011-03-14 20:37:30 44704 —-a-w- c:\windows\system32\drivers\tifsfilt.sys 2011-03-14 20:23:42 573608 —-a-w- c:\windows\system32\msvcp50.dll 2011-03-14 20:21:17 ——– d—–w- c:\program files\F-Secure 2011-03-14 20:20:50 ——– d-sh–w- c:\windows\Installer 2011-03-14 20:20:16 ——– d—–w- c:\progra~2\fssg 2011-03-14 20:19:16 ——– d—–w- c:\progra~2\f-secure 2011-03-14 20:17:02 ——– d—–w- c:\program files\DVDFab 5 2011-03-14 16:55:49 87608 —-a-w- c:\users\me\appdata\roaming\inst.exe 2011-03-14 16:55:49 47360 —-a-w- c:\windows\system32\drivers\pcouffin.sys 2011-03-14 16:55:49 47360 —-a-w- c:\users\me\appdata\roaming\pcouffin.sys 2011-03-14 16:55:21 65602 —-a-w- c:\windows\system32\cook3260.dll 2011-03-14 16:55:21 217127 —-a-w- c:\windows\system32\drv43260.dll 2011-03-14 16:55:21 208935 —-a-w- c:\windows\system32\drv33260.dll 2011-03-14 16:55:21 176165 —-a-w- c:\windows\system32\drv23260.dll 2011-03-14 16:55:21 102439 —-a-w- c:\windows\system32\sipr3260.dll 2011-03-14 16:55:17 ——– d—–w- c:\program files\VSO 2011-03-14 15:38:54 642048 —-a-w- c:\windows\system32\CPFilters.dll 2011-03-14 15:38:53 534528 —-a-w- c:\windows\system32\EncDec.dll 2011-03-14 15:38:52 850944 —-a-w- c:\windows\system32\sbe.dll 2011-03-14 15:38:52 199680 —-a-w- c:\windows\system32\mpg2splt.ax 2011-03-14 15:38:32 739840 —-a-w- c:\windows\system32\d2d1.dll 2011-03-14 15:38:32 1076736 —-a-w- c:\windows\system32\DWrite.dll 2011-03-14 15:38:31 805376 —-a-w- c:\windows\system32\FntCache.dll 2011-03-14 15:38:26 870912 —-a-w- c:\windows\system32\XpsPrint.dll 2011-03-14 15:38:26 288256 —-a-w- c:\windows\system32\XpsGdiConverter.dll 2011-03-14 15:38:16 2330624 —-a-w- c:\windows\system32\win32k.sys 2011-03-14 15:38:01 542208 —-a-w- c:\windows\system32\kerberos.dll 2011-03-14 15:37:59 70656 —-a-w- c:\windows\system32\fontsub.dll 2011-03-14 15:37:59 34304 —-a-w- c:\windows\system32\atmlib.dll 2011-03-14 15:37:59 294400 —-a-w- c:\windows\system32\atmfd.dll 2011-03-14 15:37:34 219136 —-a-w- c:\windows\system32\d3d10_1core.dll 2011-03-14 15:37:34 161792 —-a-w- c:\windows\system32\d3d10_1.dll 2011-03-14 15:31:03 728448 —-a-w- c:\windows\system32\drivers\dxgkrnl.sys 2011-03-14 15:31:03 219008 —-a-w- c:\windows\system32\drivers\dxgmms1.sys 2011-03-14 15:31:03 107520 —-a-w- c:\windows\system32\cdd.dll 2011-03-14 15:05:37 737072 —-a-w- c:\progra~2\microsoft\ehome\packages\sportsv2\sportstemplatecore-2\Microsoft.MediaCenter.Sports.UI.dll 2011-03-14 10:06:17 ——– d—–w- c:\windows\Panther 2011-03-14 09:42:09 ——– d—–w- C:\Windows.old 2011-03-14 09:11:20 0 —-a-w- c:\windows\ativpsrm.bin 2011-03-14 07:15:56 4277016 —-a-w- c:\progra~2\microsoft\ehome\packages\mceclientux\updateablemarkup\markup.dll 2011-03-14 07:15:46 42776 —-a-w- c:\progra~2\microsoft\ehome\packages\mceclientux\dsm\StartResources.dll 2011-03-14 07:15:32 539968 —-a-w- c:\progra~2\microsoft\ehome\packages\mcespotlight\mcespotlight\SpotlightResources.dll 2011-03-14 07:09:35 222080 ——w- c:\windows\system32\MpSigStub.exe 2011-03-14 03:56:14 ——– d—–w- c:\users\me\appdata\local\Google 2011-03-14 03:55:55 ——– d—–w- c:\users\me\appdata\local\Deployment 2011-03-14 03:55:55 ——– d—–w- c:\users\me\appdata\local\Apps 2011-03-14 03:55:36 ——– d—–w- c:\windows\system32\wbem\Performance 2011-03-14 03:53:52 ——– d—–w- c:\users\me\appdata\roaming\uTorrent 2011-03-13 20:54:15 ——– d—a-w- C:\recoverd 2011-03-13 20:40:37 ——– d—a-w- C:\notes 2011-03-13 18:12:25 ——– d—a-w- C:\Various . ==================== Find3M ==================== . 2011-03-18 22:49:03 152576 —-a-w- c:\windows\system32\msclmd.dll 2011-02-18 20:36:58 4184352 —-a-w- c:\windows\system32\usbaaplrc.dll 2011-01-27 03:00:46 143360 —-a-w- c:\windows\system32\atiapfxx.exe 2011-01-27 03:00:32 596480 —-a-w- c:\windows\system32\aticfx32.dll 2011-01-27 02:59:48 17204736 —-a-w- c:\windows\system32\atioglxx.dll 2011-01-27 02:56:30 462848 —-a-w- c:\windows\system32\ATIDEMGX.dll 2011-01-27 02:55:56 393216 —-a-w- c:\windows\system32\atieclxx.exe 2011-01-27 02:55:26 176128 —-a-w- c:\windows\system32\atiesrxx.exe 2011-01-27 02:54:12 159744 —-a-w- c:\windows\system32\atitmmxx.dll 2011-01-27 02:53:56 356352 —-a-w- c:\windows\system32\atipdlxx.dll 2011-01-27 02:53:44 278528 —-a-w- c:\windows\system32\Oemdspif.dll 2011-01-27 02:53:36 15872 —-a-w- c:\windows\system32\atimuixx.dll 2011-01-27 02:53:28 43520 —-a-w- c:\windows\system32\ati2edxx.dll 2011-01-27 02:49:46 4105728 —-a-w- c:\windows\system32\atidxx32.dll 2011-01-27 02:32:14 1912832 —-a-w- c:\windows\system32\atiumdmv.dll 2011-01-27 02:28:54 4170752 —-a-w- c:\windows\system32\atiumdag.dll 2011-01-27 02:27:52 46080 —-a-w- c:\windows\system32\aticalrt.dll 2011-01-27 02:27:42 44032 —-a-w- c:\windows\system32\aticalcl.dll 2011-01-27 02:25:52 5580800 —-a-w- c:\windows\system32\aticaldd.dll 2011-01-27 02:24:20 3463680 —-a-w- c:\windows\system32\atiumdva.dll 2011-01-27 02:20:46 52736 —-a-w- c:\windows\system32\coinst.dll 2011-01-27 02:14:08 249856 —-a-w- c:\windows\system32\atiadlxx.dll 2011-01-27 02:13:54 12800 —-a-w- c:\windows\system32\atiglpxx.dll 2011-01-27 02:13:44 32768 —-a-w- c:\windows\system32\atigktxx.dll 2011-01-27 02:12:42 30720 —-a-w- c:\windows\system32\atiuxpag.dll 2011-01-27 02:12:26 28672 —-a-w- c:\windows\system32\atiu9pag.dll 2011-01-27 02:12:00 23040 —-a-w- c:\windows\system32\atitmpxx.dll 2011-01-27 02:08:42 52736 —-a-w- c:\windows\system32\atimpc32.dll 2011-01-27 02:08:42 52736 —-a-w- c:\windows\system32\amdpcom32.dll 2011-01-21 18:52:20 249936 —-a-w- c:\windows\system32\prgiso.dll . ============= FINISH: 16:56:30.65 =============== UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft Windows 7 Ultimate Boot Device: \Device\HarddiskVolume1 Install Date: 3/13/2011 11:50:00 PM System Uptime: 4/7/2011 4:48:01 PM (0 hours ago) . Motherboard: ASUSTeK Computer INC. | | P5WD2-E Premium Processor: Intel® Pentium® D CPU 2.66GHz | Socket 775 | 2676/133mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 373 GiB total, 285.502 GiB free. D: is CDROM () F: is Removable . ==== Disabled Device Manager Items ============= . Class GUID: {4d36e965-e325-11ce-bfc1-08002be10318} Description: CD-ROM Drive Device ID: IDE\CDROMTSSTCORP_CDDVDW_SH-S203B________________SB00____\5&722A3FC&0&1.0.0 Manufacturer: (Standard CD-ROM drives) Name: TSSTcorp CDDVDW SH-S203B ATA Device PNP Device ID: IDE\CDROMTSSTCORP_CDDVDW_SH-S203B________________SB00____\5&722A3FC&0&1.0.0 Service: cdrom . Class GUID: Description: Device ID: ROOT\LEGACY_F-SECURE_HIPS\0000 Manufacturer: Name: PNP Device ID: ROOT\LEGACY_F-SECURE_HIPS\0000 Service: . Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Description: Lexmark X422 Device ID: ROOT\IMAGE\0000 Manufacturer: Lexmark Name: Lexmark X422 PNP Device ID: ROOT\IMAGE\0000 Service: usbscan . Class GUID: Description: Serial ATA Controller Device ID: PCI\VEN_11AB&DEV_6141&SUBSYS_614111AB&REV_01\4&1A41C456&0&00E5 Manufacturer: Name: Serial ATA Controller PNP Device ID: PCI\VEN_11AB&DEV_6141&SUBSYS_614111AB&REV_01\4&1A41C456&0&00E5 Service: . Class GUID: Description: Device ID: ROOT\LEGACY_FSVISTA\0000 Manufacturer: Name: PNP Device ID: ROOT\LEGACY_FSVISTA\0000 Service: . Class GUID: {4d36e968-e325-11ce-bfc1-08002be10318} Description: Standard VGA Graphics Adapter Device ID: PCI\VEN_1002&DEV_4752&SUBSYS_80081002&REV_27\4&B244743&0&08F0 Manufacturer: (Standard display types) Name: Standard VGA Graphics Adapter PNP Device ID: PCI\VEN_1002&DEV_4752&SUBSYS_80081002&REV_27\4&B244743&0&08F0 Service: vga . ==== System Restore Points =================== . RP47: 4/1/2011 10:23:15 PM - Windows Update RP48: 4/1/2011 10:29:00 PM - Installed Audials RP49: 4/1/2011 10:37:28 PM - Device Driver Package Install: RapidSolution Software AG Network Service RP50: 4/2/2011 1:05:41 PM - Device Driver Package Install: EPSON Printers RP52: 4/2/2011 3:51:39 PM - Installed EPSON Stylus Photo RX580 Scanner Driver Update RP54: 4/2/2011 3:54:02 PM - Installed EPSON EasyPrintModule RP56: 4/2/2011 3:57:41 PM - Installed EPSON Print CD RP58: 4/2/2011 3:59:47 PM - Installed PhotoImpression RP60: 4/2/2011 4:03:05 PM - Installed Epson CreativeZone RP62: 4/2/2011 6:42:26 PM - Revo Uninstaller's restore point - avast! Pro Antivirus RP64: 4/2/2011 6:44:15 PM - Revo Uninstaller's restore point - avast! Pro Antivirus RP65: 4/2/2011 9:37:42 PM - avast! Pro Antivirus Setup RP66: 4/2/2011 10:51:08 PM - Installed Video d0wnl0ader RP68: 4/3/2011 5:22:31 PM - Revo Uninstaller's restore point - Freecorder Toolbar RP70: 4/3/2011 5:24:52 PM - Revo Uninstaller's restore point - Freecorder 5 RP72: 4/3/2011 5:27:23 PM - Revo Uninstaller's restore point - Max Damage RP73: 4/3/2011 5:27:49 PM - Removed Max Damage RP75: 4/3/2011 5:30:34 PM - Revo Uninstaller's restore point - Video d0wnl0ader RP76: 4/3/2011 5:31:05 PM - Removed Video d0wnl0ader RP78: 4/3/2011 9:48:52 PM - Revo Uninstaller's restore point - SnowFox YouTube Downloader HD 1.2.0.0 RP80: 4/3/2011 11:34:02 PM - Revo Uninstaller's restore point - ConvertXtoDVD 3.3.4.107 RP81: 4/4/2011 11:49:29 AM - Installed Document Express DjVu Plug-in RP82: 4/4/2011 1:10:11 PM - Restore Operation RP83: 4/4/2011 6:19:38 PM - FiOS Installation RP85: 4/5/2011 1:04:11 AM - Revo Uninstaller's restore point - Free Audio CD Burner version 1.4.7 RP86: 4/5/2011 7:11:54 PM - Windows Update RP87: 4/6/2011 4:21:46 PM - Windows Update . ==== Installed Programs ====================== . Adobe AIR Adobe Flash Player 10 ActiveX Adobe Reader X (10.0.1) Angry Birds Apple Application Support Apple Mobile Device Support Apple Software Update ArcSoft PhotoImpression 5 Audials Audials TV avast! Pro Antivirus Bing Bar Bonjour CleanUp! Contents ConvertXtoDVD 4.1.10.348 Corel PaintShop Photo Pro X3 D3DX10 Dead Rising 2 DeviceIO DFX for Windows Media Player DivX Setup Document Express DjVu Plug-in DriverMax 5 DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.8.5 EPSON Print CD EPSON Printer Software EPSON Scan EPSON Stylus Photo RX580 Scanner Driver Update EPSON Stylus Photo RX580 User's Guide FLV Player Free Audio Converter version 2.2.16.324 Free YouTube Download version 2.10.33.324 Free YouTube to MP3 Converter version 3.9.35.324 Google Chrome Google Earth Plug-in Google Update Helper ICA IHA_MessageCenter Intel AppUp(SM) center IPM_PSP_Pro iTunes Java Auto Updater Java™ 6 Update 24 Junk Mail filter update Malwarebytes' Anti-Malware Media Player Classic - Home Cinema v1.2.998.0 Mesh Runtime Messenger Companion Microsoft .NET Framework 4 Client Profile Microsoft Application Error Reporting Microsoft Games for Windows - LIVE Microsoft Games for Windows - LIVE Redistributable Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook Connector Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft XML Parser MLE MotoHelper 2.0.24 Driver 4.7.1 MotoHelper MergeModules Motorola Mobile Drivers Installation 4.7.1 MSN MSVCRT Paragon Backup & Recovery™ 2011 (Advanced) Free PowerISO PSPH10Pro PSPPContent PSPPRO_DCRAW PureHD QuickTime Revo Uninstaller 1.91 Sandboxie 3.54 (32-bit) Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2289158) Security Update for 2007 Microsoft Office System (KB2344875) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Excel 2007 (KB2345035) Security Update for Microsoft Office Groove 2007 (KB2494047) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB982158) Security Update for Microsoft Office PowerPoint Viewer (KB2413381) Security Update for Microsoft Office Publisher 2007 (KB2284697) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Setup Share SnowFox Total Video Converter [removed] The Cleaner 2012 Uninstall 1.0.0.1 Update for 2007 Microsoft Office System (KB967642) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office Access 2007 Help (KB963663) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office Infopath 2007 Help (KB963662) Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Outlook 2007 (KB2412171) Update for Microsoft Office Outlook 2007 Help (KB963677) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Publisher 2007 Help (KB963667) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) Update for Outlook 2007 Junk Email Filter (KB2508979) Verizon Help and Support Tool VIO Vz In Home Agent Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Mail Windows Live Mesh Windows Live Mesh ActiveX Control for Remote Connections Windows Live Messenger Windows Live Messenger Companion Core Windows Live MIME IFilter Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live Remote Client Windows Live Remote Client Resources Windows Live Remote Service Windows Live Remote Service Resources Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Windows Media Encoder 9 Series Windows Media Player Firefox Plugin WinRAR archiver WinUtilities 9.98 Professional Edition . ==== Event Viewer Messages From Past Week ======== . 4/7/2011 4:50:15 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: aswSnx 4/7/2011 4:50:15 PM, Error: Service Control Manager [7022] - The IHA_MessageCenter service hung on starting. 4/7/2011 4:48:14 PM, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware. 4/5/2011 8:01:40 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Internet Explorer 9 for Windows 7. 4/5/2011 7:31:17 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F} 4/5/2011 7:31:17 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF} 4/5/2011 7:30:50 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start. 4/5/2011 7:30:49 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030} 4/5/2011 7:30:49 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 4/5/2011 7:30:44 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 4/5/2011 7:30:38 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC} 4/5/2011 7:30:24 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: aswSnx aswSP aswTdi cdrom discache SCDEmu spldr UimBus Uim_IM Wanarpv6 4/5/2011 5:16:43 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1. 4/5/2011 4:56:17 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 4/5/2011 4:54:41 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start. 4/5/2011 12:24:45 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: aswSnx cdrom 4/4/2011 11:18:19 AM, Error: Service Control Manager [7000] - The cpuz135 service failed to start due to the following error: The system cannot find the file specified. 4/4/2011 1:27:49 PM, Error: Service Control Manager [7043] - The Group Policy Client service did not shut down properly after receiving a preshutdown control. 4/4/2011 1:24:18 PM, Error: Service Control Manager [7023] - The IPsec Policy Agent service terminated with the following error: The authentication service is unknown. 4/4/2011 1:23:53 PM, Error: Service Control Manager [7022] - The avast! Antivirus service hung on starting. 4/3/2011 5:38:58 PM, Error: Service Control Manager [7023] - The Server service terminated with the following error: The service has not been started. 4/3/2011 5:38:55 PM, Error: Service Control Manager [7038] - The WinHttpAutoProxySvc service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 4/3/2011 5:38:55 PM, Error: Service Control Manager [7038] - The WdiServiceHost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 4/3/2011 5:38:55 PM, Error: Service Control Manager [7000] - The WinHTTP Web Proxy Auto-Discovery Service service failed to start due to the following error: The service did not start due to a logon failure. 4/3/2011 5:38:55 PM, Error: Service Control Manager [7000] - The Diagnostic Service Host service failed to start due to the following error: The service did not start due to a logon failure. 4/3/2011 5:37:25 PM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: A system shutdown is in progress. 4/3/2011 5:37:23 PM, Error: Service Control Manager [7038] - The PolicyAgent service was unable to log on as NT Authority\NetworkService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC). 4/3/2011 5:37:23 PM, Error: Service Control Manager [7000] - The IPsec Policy Agent service failed to start due to the following error: The service did not start due to a logon failure. 4/2/2011 10:12:32 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 4/2/2011 10:02:47 PM, Error: Service Control Manager [7034] - The EPSON V3 Service4(01) service terminated unexpectedly. It has done this 1 time(s). 4/2/2011 10:02:13 PM, Error: Service Control Manager [7034] - The avast! Antivirus service terminated unexpectedly. It has done this 3 time(s). 4/2/2011 10:01:37 PM, Error: Service Control Manager [7031] - The avast! Antivirus service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. 4/2/2011 10:01:20 PM, Error: Service Control Manager [7031] - The avast! Antivirus service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. . ==== End Of File ===========================

Attachments:

Post #4
cld,

I don't think that you have a malware problem. However… you are showing alot of items in your error log. The Tech Team is much better prepared to help you with this so I suggest that you continue on in your other thread. Please post a link back to this topic for them so they can see the logs you provided.

Of most concern to me (though I'm not a Tech) is this entry:

4/7/2011 4:48:14 PM, Error: Microsoft-Windows-Kernel-Processor-Power [6] - Some processor performance power management features have been disabled due to a known firmware problem. Check with the computer manufacturer for updated firmware.

It might not mean anything… but you appear to have several services that are failing to start and this could be related.

Unless you have a question for me… I don't think I can be of help.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI