radiowmpcore.dll

this is the logfile . DDS (Ver_2011-06-12.02) - NTFSx86 Internet Explorer: 9.0.8112.16421 Run by [removed] at 12:08:14 on 2011-06-23 Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.2939.1370 [GMT -5:00] . AV: Norton 360 Premier Edition *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Norton 360 Premier Edition *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton 360 Premier Edition *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe C:\Windows\system32\svchost.exe -k rpcss C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\Explorer.EXE C:\Program Files\Trusteer\Rapport\bin\RapportService.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Toshiba\Power Saver\TPwrMain.exe C:\Program Files\Toshiba\SmoothView\SmoothView.exe C:\Program Files\Toshiba\FlashCards\TCrdMain.exe C:\Program Files\Toshiba\ConfigFree\NDSTray.exe C:\Program Files\Toshiba\TOSHIBA Service Station\TSS.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\taskeng.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe C:\Program Files\Microsoft LifeCam\MSCamS32.exe C:\Program Files\Norton 360 Premier Edition\Engine\5.1.0.29\ccSvcHst.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\Microsoft\BingBar\SeaPort.EXE C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe C:\Windows\system32\TODDSrv.exe C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe C:\Program Files\Norton 360 Premier Edition\Engine\5.1.0.29\ccSvcHst.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\DllHost.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\igfxext.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\sdclt.exe C:\Windows\system32\svchost.exe -k SDRSVC C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSHB&bmod=TSHB uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSHB&bmod=TSHB mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSHB&bmod=TSHB mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSHB&bmod=TSHB uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360 premier edition\engine\5.1.0.29\coIEPlg.dll BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360 premier edition\engine\5.1.0.29\ips\IPSBHO.DLL BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_06\bin\ssv.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files\windows live\companion\companioncore.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "c:\program files\microsoft\bingbar\BingExt.dll" TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "c:\program files\microsoft\bingbar\BingExt.dll" TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360 premier edition\engine\5.1.0.29\coIEPlg.dll TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File uRun: [TOSCDSPD] TOSCDSPD.EXE uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE mRun: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe mRun: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [NDSTray.exe] NDSTray.exe mRun: [cfFncEnabler.exe] cfFncEnabler.exe mRun: [ToshibaServiceStation] "c:\program files\toshiba\toshiba service station\TSS.exe" /hide mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript mRun: [LifeCam] "c:\program files\microsoft lifecam\LifeExp.exe" mRun: [Skytel] Skytel.exe mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_06\bin\ssv.dll IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{0913D5A8-EAAD-4D04-821E-DF2C6404AAB0} : DhcpNameServer = 10.5.1.9 TCP: Interfaces\{959441E8-1261-4FF8-85B1-980EF4EFF205} : DhcpNameServer = 192.168.1.1 Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll Notify: igfxcui - igfxdev.dll AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\users\princess\appdata\roaming\mozilla\firefox\profiles\lc33dek1.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p= FF - prefs.js: browser.search.selectedEngine - Secure Search FF - prefs.js: browser.startup.homepage - hxxp://www.google.com FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p= FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.1.0.32\coffplgn\components\coFFPlgn.dll FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.1.0.32\ipsffplgn\components\IPSFFPl.dll FF - component: c:\users\princess\appdata\roaming\mozilla\firefox\profiles\lc33dek1.default\extensions\{69d1a568-ffdf-4ef5-8919-7003582e0ee8}\components\RadioWMPCoreGecko19.dll FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll FF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dll FF - plugin: c:\program files\microsoft\office live\npOLW.dll FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll FF - plugin: c:\users\princess\appdata\roaming\move networks\plugins\npqmp071701000002.dll . ============= SERVICES / DRIVERS =============== . R0 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2011-4-28 53816] R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\n360\0501000.01d\SymDS.sys [2011-5-27 340088] R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0501000.01d\SymEFA.sys [2011-5-27 744568] R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.1.0.29\definitions\bashdefs\20110616.003\BHDrvx86.sys [2011-6-16 810616] R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.1.0.29\definitions\ipsdefs\20110623.001\IDSvix86.sys [2011-6-23 367736] R1 RapportCerberus_26762;RapportCerberus_26762;c:\programdata\trusteer\rapport\store\exts\rapportcerberus\26762\RapportCerberus_26762.sys [2011-6-13 57144] R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2011-4-28 66360] R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2011-4-28 158904] R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\n360\0501000.01d\Ironx86.sys [2011-5-27 136312] R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\n360\0501000.01d\symtdiv.sys [2011-5-27 331384] R2 ConfigFree Service;ConfigFree Service;c:\program files\toshiba\configfree\CFSvcs.exe [2008-4-17 40960] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2009-10-25 366640] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\sitead~1\mcsacore.exe [2011-5-13 88176] R2 N360;Norton 360;c:\program files\norton 360 premier edition\engine\5.1.0.29\ccSvcHst.exe [2011-5-27 130008] R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2011-4-28 870200] R2 TMachInfo;TMachInfo;c:\program files\toshiba\toshiba service station\TMachInfo.exe [2008-9-30 46392] R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\toshiba\smartlogservice\TosIPCSrv.exe [2007-12-3 126976] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-5-28 105592] R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2008-9-30 7168] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2009-10-25 22712] R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\rtl8187B.sys [2009-6-30 290304] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-6-27 135664] S3 BBSvc;Bing Bar Update Service;c:\program files\microsoft\bingbar\BBSvc.EXE [2011-2-28 183560] S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2011-4-7 39272] S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-9-23 1493352] S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-9-30 30192] S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-6-27 135664] S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [2010-12-2 25600] S3 SVRPEDRV;SVRPEDRV;c:\windows\system32\sysprep\PEDRV.SYS [2008-9-30 9216] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040] . =============== Created Last 30 ================ . 2011-06-23 15:42:51 ——– d—–w- c:\users\princess\appdata\local\{856EC22D-1B13-4653-B713-FE082DDE7FED} 2011-06-23 00:24:29 2106216 —-a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll 2011-06-23 00:24:29 1998168 —-a-w- c:\program files\mozilla firefox\d3dx9_43.dll 2011-06-23 00:01:00 ——– d—–w- c:\users\princess\appdata\local\{EA164B18-3C74-4443-9431-0570406D36EA} 2011-06-22 03:58:02 ——– d—–w- c:\users\princess\appdata\local\{372A4085-53AE-4ED6-82E0-66BD84E788EC} 2011-06-21 07:45:54 ——– d—–w- c:\users\princess\appdata\local\{05CC1BAC-6B4D-479C-961A-FD564C79824D} 2011-06-20 16:29:52 ——– d—–w- c:\users\princess\appdata\local\{E8337C4B-F62F-4ADC-8D86-BF6CADA53F0D} 2011-06-20 01:04:17 ——– d—–w- c:\users\princess\appdata\local\{21EDCA9A-EF36-4222-8CB5-406E11E25A28} 2011-06-19 16:21:33 ——– d—–w- c:\users\princess\appdata\local\{F8C8CD6C-BB06-4983-9304-EBA0AE02B0A1} 2011-06-18 22:07:03 ——– d—–w- c:\users\princess\appdata\local\{CD8A5CA6-A508-4A68-B6D4-3A8E24643E17} 2011-06-18 01:51:42 2382848 —-a-w- c:\windows\system32\mshtml.tlb 2011-06-18 01:51:41 141104 —-a-w- c:\program files\internet explorer\sqmapi.dll 2011-06-18 01:51:38 1797632 —-a-w- c:\windows\system32\jscript9.dll 2011-06-18 01:44:07 ——– d—–w- c:\users\princess\appdata\local\{3421A1FB-424F-4859-9164-59D75894F8BB} 2011-06-16 19:08:36 75264 —-a-w- c:\windows\system32\drivers\dfsc.sys 2011-06-16 19:08:33 273408 —-a-w- c:\windows\system32\drivers\afd.sys 2011-06-16 19:08:31 146432 —-a-w- c:\windows\system32\drivers\srv2.sys 2011-06-16 19:08:30 102400 —-a-w- c:\windows\system32\drivers\srvnet.sys 2011-06-16 19:08:27 563712 —-a-w- c:\windows\system32\oleaut32.dll 2011-06-16 19:07:16 739328 —-a-w- c:\windows\system32\inetcomm.dll 2011-06-16 19:07:11 79872 —-a-w- c:\windows\system32\drivers\mrxsmb20.sys 2011-06-16 19:07:11 214016 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-06-16 19:07:11 106496 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-06-16 19:07:07 2409784 —-a-w- c:\program files\windows mail\OESpamFilter.dat 2011-06-16 18:35:28 ——– d—–w- c:\users\princess\appdata\local\{B9670240-235C-4CE5-92D0-1C6FB3EBCCF9} 2011-06-15 16:47:22 ——– d—–w- c:\users\princess\appdata\local\{1A490765-A912-4E7B-83D0-FEDAD80B85FE} 2011-06-14 21:02:16 ——– d—–w- c:\users\princess\appdata\local\{B8F88C59-02F3-4B7E-B817-080DCFE88DE1} 2011-06-13 15:10:07 ——– d—–w- c:\users\princess\appdata\local\{BCBBC5C3-F6B0-4992-BACF-AA9BEC0010BF} 2011-06-11 17:28:59 ——– d—–w- c:\users\princess\appdata\local\{B823A48E-B929-49A2-9BF1-4F12DAAEFE44} 2011-06-09 04:17:06 ——– d—–w- c:\users\princess\appdata\local\{9C1C9142-6794-44F5-9C64-05ABD8A8E11F} 2011-06-08 06:21:50 ——– d—–w- c:\users\princess\appdata\local\{1429C575-3D3B-4B36-BC73-29AF22F68B69} 2011-06-07 16:38:52 ——– d—–w- c:\users\princess\appdata\local\{AEF19F58-E744-417F-A5A3-473872EB525C} 2011-06-07 04:11:24 ——– d—–w- c:\users\princess\appdata\local\{3D18204D-08E8-4938-AC12-D2553F0B246A} 2011-06-05 12:46:16 ——– d—–w- c:\users\princess\appdata\local\{29C6B9F5-4B6D-479B-9DC0-1C17A707676E} 2011-06-04 20:31:39 ——– d—–w- C:\NBRT 2011-06-04 20:30:11 ——– d—–w- c:\users\princess\appdata\local\{3B19EBA8-F866-43C8-B5F5-9D22B3F4FD97} 2011-06-04 16:38:33 ——– d—–w- c:\program files\Norton Bootable Recovery Tool Wizard 2011-06-04 15:34:42 ——– dc-h–w- c:\programdata\~0 2011-06-04 15:34:31 ——– d—–w- c:\users\princess\appdata\local\PackageAware 2011-06-03 17:38:46 ——– d—–w- c:\users\princess\appdata\local\{66D79AD9-E8CC-4103-B9FA-F28F86880178} 2011-06-03 04:05:47 ——– d—–w- c:\users\princess\appdata\local\{C0CF5EFE-8D47-458F-ACA6-13DEC33EDA2C} 2011-06-02 15:50:02 ——– d—–w- c:\users\princess\appdata\local\{3B5FB770-6365-47CD-9BFF-6A875F607228} 2011-06-02 03:49:27 ——– d—–w- c:\users\princess\appdata\local\{24AD8FA2-B314-4DF3-8F40-819107273BBA} 2011-06-01 15:48:52 ——– d—–w- c:\users\princess\appdata\local\{214ED6D7-2EC1-44D1-A2F5-A77F55EEF226} 2011-05-31 18:39:56 ——– d—–w- c:\users\princess\appdata\local\{C1239621-A980-40CA-B819-9F626A26945D} 2011-05-30 16:26:31 ——– d—–w- c:\users\princess\appdata\local\{3386A972-C31E-408B-93FE-D3CC7CAF8E92} 2011-05-30 00:34:09 ——– d—–w- c:\users\princess\appdata\local\{68351059-6AB4-41EB-961A-450D572415C4} 2011-05-29 03:25:53 ——– d—–w- c:\users\princess\appdata\local\{0810A3AC-BCA0-4EAC-B90C-B2B0ECAD07E8} 2011-05-28 14:59:31 ——– d—–w- c:\users\princess\appdata\local\{AC18C792-AA65-4464-A0B9-FD04308BCDA4} 2011-05-28 10:14:38 ——– d—–w- c:\users\princess\appdata\local\{FE12633E-200E-44D4-BEE7-1E812A36BF7C} 2011-05-27 20:15:22 ——– d—–w- c:\users\princess\appdata\local\{4C3BA2D3-34C9-4C3E-8119-29CBA6389610} 2011-05-27 06:16:01 126584 —-a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2011-05-27 06:16:01 ——– d—–w- c:\program files\Symantec 2011-05-27 06:15:28 744568 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\SymEFA.sys 2011-05-27 06:15:28 516216 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\srtsp.sys 2011-05-27 06:15:28 50168 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\srtspx.sys 2011-05-27 06:15:28 340088 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\SymDS.sys 2011-05-27 06:15:28 331384 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\symtdiv.sys 2011-05-27 06:15:28 296568 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\symnets.sys 2011-05-27 06:15:28 136312 —-a-r- c:\windows\system32\drivers\n360\0501000.01d\Ironx86.sys 2011-05-27 06:15:08 ——– d—–w- c:\windows\system32\drivers\n360\0501000.01D 2011-05-27 06:15:08 ——– d—–w- c:\windows\system32\drivers\N360 2011-05-27 06:15:05 ——– d—–w- c:\program files\Norton 360 Premier Edition 2011-05-27 06:14:58 ——– d—–w- c:\program files\NortonInstaller 2011-05-25 14:10:13 ——– d—–w- c:\users\princess\appdata\local\{846FDF68-F40D-4C6A-8BC1-F014D64155FC} 2011-05-25 07:46:42 ——– d—–w- c:\users\princess\appdata\local\NPE 2011-05-25 07:36:43 ——– d—–w- c:\programdata\{C3243856-7746-4A05-8837-51A28C1CDD82} 2011-05-25 07:35:55 ——– d—–w- c:\users\princess\appdata\local\Downloaded Installations 2011-05-25 07:34:02 26600 —-a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2011-05-24 21:23:05 ——– d—–w- c:\users\princess\appdata\local\{53919BFA-6297-4084-AAB0-01A40ABCC33E} . ==================== Find3M ==================== . 2011-05-29 14:11:30 39984 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-05-29 14:11:20 22712 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-05-13 19:48:23 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-04-28 19:34:50 53816 —-a-w- c:\windows\system32\drivers\RapportKELL.sys . ============= FINISH: 12:09:35.37 =============== this is the attachfile . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-06-12.02) . Microsoft® Windows Vista™ Home Basic Boot Device: \Device\HarddiskVolume2 Install Date: 6/30/2009 4:20:01 PM System Uptime: 6/23/2011 10:40:45 AM (2 hours ago) . Motherboard: TOSHIBA | | Portable PC Processor: Intel® Celeron® CPU 900 @ 2.20GHz | CPU | 2194/800mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 224 GiB total, 147.248 GiB free. D: is CDROM (CDFS) . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP465: 5/25/2011 2:36:11 AM - Installed GEAR driver installer for x86 and x64. RP466: 5/25/2011 2:55:45 PM - Scheduled Checkpoint RP467: 5/27/2011 7:11:51 PM - Scheduled Checkpoint RP468: 5/28/2011 5:42:01 PM - Scheduled Checkpoint RP469: 5/29/2011 9:14:22 PM - Scheduled Checkpoint RP470: 5/31/2011 2:49:09 PM - Scheduled Checkpoint RP471: 6/1/2011 4:06:39 PM - Scheduled Checkpoint RP472: 6/3/2011 8:47:52 PM - Scheduled Checkpoint RP473: 6/4/2011 10:59:50 AM - Norton_Power_Eraser_20110604105950795 RP474: 6/4/2011 11:27:25 AM - Norton_Power_Eraser_20110604112725375 RP475: 6/4/2011 5:16:16 PM - Norton 360 Registry Clean RP476: 6/4/2011 9:43:42 PM - Restore Operation RP477: 6/9/2011 2:24:08 AM - Scheduled Checkpoint RP478: 6/17/2011 8:44:59 PM - Windows Update RP479: 6/18/2011 5:07:52 PM - Windows Update . ==== Installed Programs ====================== . Update for Microsoft Office 2007 (KB2508958) AAC Decoder Acrobat.com Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9 Amazon Kindle For PC v1.1 Amazon Links Apple Application Support Apple Mobile Device Support Apple Software Update ArcSoft Print Creations ArcSoft Print Creations - Album Page ArcSoft Print Creations - Funhouse ArcSoft Print Creations - Greeting Card ArcSoft Print Creations - Photo Book ArcSoft Print Creations - Photo Calendar ArcSoft Print Creations - Scrapbook ArcSoft Print Creations - Slimline Card AutoUpdate Bing Bar Bonjour CCScore CD/DVD Drive Acoustic Silencer Compatibility Pack for the 2007 Office system D3DX10 Digital Concepts Image Manager DivX Codec DivX Converter DivX Player DivX Plus DirectShow Filters DivX Plus Web Player DivX Version Checker DVD MovieFactory for TOSHIBA ESSBrwr ESSCDBK ESScore ESSgui ESSini ESSPCD ESSPDock ESSTOOLS essvatgt ffdshow [rev 2527] [2008-12-19] FileRestorePlus™ 3.0.1.811 GEAR driver installer for x86 and x64 Google Desktop Google Toolbar for Internet Explorer Google Update Helper H.264 Decoder Haali Media Splitter Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Intel® Graphics Media Accelerator Driver Intel® Matrix Storage Manager Itsy Bitsy Fairies Screensaver iTunes Java™ 6 Update 6 Junk Mail filter update Kodak EasyShare software Malwarebytes' Anti-Malware version 1.51.0.1200 McAfee SiteAdvisor Mesh Runtime Messenger Companion Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft Application Error Reporting Microsoft Corporation Microsoft LifeCam Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Excel MUI (English) 2007 Microsoft Office Home and Student 2007 Microsoft Office Live Add-in 1.3 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Suite Activation Assistant Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Works Microsoft XML Parser MKV Splitter Move Media Player Mozilla Firefox 5.0 (x86 en-US) MSVCRT MSXML 4.0 SP2 (KB941833) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) netbrdg Norton 360 Premier Edition OfotoXMI OGA Notifier 2.0.0048.0 Picasa 2 QuickBooks Financial Center QuickTime Rapport Realtek 8169 8168 8101E 8102E Ethernet Driver Realtek High Definition Audio Driver REALTEK RTL8187B Wireless LAN Driver Realtek USB 2.0 Card Reader Realtek WiFi Protected Setup Library Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB2509488) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft Office 2007 System (KB2541012) Security Update for Microsoft Office Excel 2007 (KB2541007) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB2535818) Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) Security Update for Windows Media Encoder (KB2447961) Security Update for Windows Media Encoder (KB954156) Security Update for Windows Media Encoder (KB979332) Segoe UI SFR SHASTA skin0001 SKINXSDK Skype Toolbars Skype™ 4.2 staticcr Synaptics Pointing Device Driver TOSHIBA Assist TOSHIBA ConfigFree TOSHIBA Desktop Links TOSHIBA Disc Creator TOSHIBA DVD PLAYER TOSHIBA Extended Tiles for Windows Mobility Center TOSHIBA Hardware Setup TOSHIBA Recovery Disc Creator Toshiba Registration TOSHIBA Service Station TOSHIBA Speech System Applications TOSHIBA Speech System SR Engine(U.S.) Version1.0 TOSHIBA Speech System TTS Engine(U.S.) Version1.0 TOSHIBA Supervisor Password TOSHIBA Value Added Package Uninstall Dual Mode Camera (ST606) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office 2007 System (KB2539530) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) VC80CRTRedist - 8.0.50727.4053 VLC media player 1.0.1 VPRINTOL WildTangent Games Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Mail Windows Live Mesh Windows Live Mesh ActiveX Control for Remote Connections Windows Live Messenger Windows Live Messenger Companion Core Windows Live MIME IFilter Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live Remote Client Windows Live Remote Client Resources Windows Live Remote Service Windows Live Remote Service Resources Windows Live SOXE Windows Live SOXE Definitions Windows Live Sync Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Windows Media Encoder 9 Series Windows Media Player Firefox Plugin WIRELESS . ==== Event Viewer Messages From Past Week ======== . 6/20/2011 2:36:37 AM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.1.105 for the Network Card with network address 0024D2B20E5B has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). 6/18/2011 5:07:35 PM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.1.9 for the Network Card with network address 0024D2B20E5B has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 6/17/2011 8:59:20 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 6/17/2011 8:59:20 PM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 6/17/2011 8:51:16 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} . ==== End Of File ===========================