Can't get into anything

Hear are the next few things you asked for in your reply let me know if i did them right. Diagnostic Report (1.9.0027.0): —————————————– Windows Validation Data–> Validation Status: Genuine Validation Code: 0 Cached Validation Code: N/A Windows Product Key: Windows Product Key Windows Product ID: 76487-640-0427404-23273 Windows Product ID Type: 1 Windows License Type: Volume Windows OS version: 5.1.2600.2.00010100.3.0.pro ID: {95F9C48A-9449-4E86-AE99-9A4ACD1FA464}(3) Is Admin: Yes TestCab: 0x0 LegitcheckControl ActiveX: Registered, 1.9.40.0 Signed By: Microsoft Product Name: N/A Architecture: N/A Build lab: N/A TTS Error: N/A Validation Diagnostic: 025D1FF3-230-1 Resolution Status: N/A Vista WgaER Data–> ThreatID(s): N/A Version: N/A Windows XP Notifications Data–> Cached Result: 0 File Exists: Yes Version: 1.9.40.0 WgaTray.exe Signed By: Microsoft WgaLogon.dll Signed By: Microsoft OGA Notifications Data–> Cached Result: N/A, hr = 0x80070002 Version: N/A, hr = 0x80070002 OGAExec.exe Signed By: N/A, hr = 0x80070002 OGAAddin.dll Signed By: N/A, hr = 0x80070002 OGA Data–> Office Status: 109 N/A OGA Version: N/A, 0x80070002 Signed By: N/A, hr = 0x80070002 Office Diagnostics: 77F760FE-153-80070002_7E90FEE8-175-80070002_B4D0AA8B-604-645_B4D0AA8B-604-645_B4D0AA8B-604-645_025D1FF3-230-1 Browser Data–> Proxy settings: N/A User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32) Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe Download signed ActiveX controls: Prompt Download unsigned ActiveX controls: Disabled Run ActiveX controls and plug-ins: Allowed Initialize and script ActiveX controls not marked as safe: Disabled Allow scripting of Internet Explorer Webbrowser control: Disabled Active scripting: Allowed Script ActiveX controls marked as safe for scripting: Allowed File Scan Data–> File Mismatch: C:\WINDOWS\system32\winlogon.exe[5.1.2600.5512], Hr = 0x800b0100 File Mismatch: C:\WINDOWS\system32\setupapi.dll[5.1.2600.5508], Hr = 0x800b0100 Other data–> Office Details: {95F9C48A-9449-4E86-AE99-9A4ACD1FA464}1.9.0027.05.1.2600.2.00010100.3.0.prox32*****-*****-*****-*****-KKX9B76487-640-0427404-232731S-1-5-21-343818398-796845957-1177238915HP Pavilion 061PX759AA-ABA a1120nAmerican Megatrends Inc.3.28 20060123000000.000000+000342B314701844E5D04090409Eastern Standard Time(GMT-05:00)02haiterXP-Windows7109 Licensing Data–> N/A Windows Activation Technologies–> N/A HWID Data–> N/A OEM Activation 1.0 Data–> BIOS string matches: yes Marker string from BIOS: 1731D:GENUINE C&C INC|10531:Hewlett-Packard Company Marker string from OEMBIOS.DAT: N/A, hr = 0x80004005 OEM Activation 2.0 Data–> N/A File name: midimap.dll Submission date: 2011-09-30 06:55:34 (UTC) Current status: finished Result: 0/ 42 (0.0%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.09.29.02 2011.09.29 - AntiVir 7.11.15.74 2011.09.29 - Antiy-AVL 2.0.3.7 2011.09.30 - Avast 6.0.1289.0 2011.09.30 - AVG 10.0.0.1190 2011.09.30 - BitDefender 7.2 2011.09.30 - ByteHero 1.0.0.1 2011.09.23 - CAT-QuickHeal 11.00 2011.09.30 - ClamAV 0.97.0.0 2011.09.30 - Commtouch 5.3.2.6 2011.09.30 - Comodo 10285 2011.09.29 - DrWeb 5.0.2.03300 2011.09.30 - Emsisoft 5.1.0.11 2011.09.30 - eSafe 7.0.17.0 2011.09.27 - eTrust-Vet 36.1.8589 2011.09.29 - F-Prot 4.6.2.117 2011.09.29 - Fortinet 4.3.370.0 2011.09.30 - GData 22 2011.09.30 - Ikarus T3.1.1.107.0 2011.09.30 - Jiangmin 13.0.900 2011.09.29 - K7AntiVirus 9.113.5217 2011.09.29 - Kaspersky 9.0.0.837 2011.09.30 - McAfee 5.400.0.1158 2011.09.30 - McAfee-GW-Edition 2010.1D 2011.09.29 - Microsoft 1.7702 2011.09.30 - NOD32 6504 2011.09.30 - Norman 6.07.11 2011.09.29 - nProtect 2011-09-29.01 2011.09.29 - Panda 10.0.3.5 2011.09.29 - PCTools 8.0.0.5 2011.09.30 - Prevx 3.0 2011.09.30 - Rising 23.77.03.02 2011.09.29 - Sophos 4.69.0 2011.09.30 - SUPERAntiSpyware 4.40.0.1006 2011.09.30 - Symantec 20111.2.0.82 2011.09.30 - TheHacker 6.7.0.1.314 2011.09.30 - TrendMicro 9.500.0.1008 2011.09.30 - TrendMicro-HouseCall 9.500.0.1008 2011.09.30 - VBA32 3.12.16.4 2011.09.28 - VIPRE 10619 2011.09.30 - ViRobot 2011.9.30.4696 2011.09.30 - VirusBuster 14.0.240.0 2011.09.29 - Additional information MD5 : 66620ee56b0ffb1b267bd24ecf942a9b SHA1 : 10ec4abdc5c203f60a559160a4d3c133185b836a SHA256: ce55d7b9ab4e08e44c93914c2b5e66d8ceddc4e4503867a8d252bfae05888209 ssdeep: 384:HCiTWkUC75GyF5hdLANzI94UqTw/23LTem2PLj7YvcDMV91yggdEoh2Xjjn29znI:HflnDL 19Ar2PLjNDMLTgqj/uBFHE File size : 42496 bytes First seen: 2009-12-08 08:19:50 Last seen : 2011-09-30 06:55:34 TrID: Win64 Executable Generic (80.9%) Win32 Executable Generic (8.0%) Win32 Dynamic Link Library (generic) (7.1%) Generic Win/DOS Executable (1.8%) DOS Executable Generic (1.8%) sigcheck: publisher….: Microsoft Corporation copyright….: © Microsoft Corporation. All rights reserved. product……: Microsoft_ Windows_ Operating System description..: Microsoft MIDI Mapper original name: midimap.dll internal name: midimap file version.: 5.1.2600.5512 (xpsp.080413-0845) comments…..: n/a signers……: - signing date.: - verified…..: Unsigned PEInfo: PE structure information [[ basic data ]] entrypointaddress: 0x33BD timedatestamp….: 0x4802A0EC (Mon Apr 14 00:10:20 2008) machinetype……: 0x14c (I386) [[ 4 section(s) ]] name, viradd, virsiz, rawdsiz, ntropy, md5 .text, 0x1000, 0x2B85, 0x2C00, 6.53, ffa063cf72a2a263b19f1e3a9f93dbde .data, 0x4000, 0x654, 0x600, 3.08, b6486ea0d615f4d63dc67c5c6cd739eb .rsrc, 0x5000, 0x68FC, 0x6A00, 4.24, 100d6c8af2d4cfd7e0361cc0900ca232 .reloc, 0xC000, 0x42E, 0x600, 4.13, cbd6b6077366201c068fd936f7faf943 [[ 5 import(s) ]] msvcrt.dll: _adjust_fdiv, malloc, _initterm, free, memmove USER32.dll: LoadStringW KERNEL32.dll: SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, CloseHandle, CreateMutexW, DisableThreadLibraryCalls, ReleaseMutex, WaitForSingleObject, LocalAlloc, LocalFree, lstrcpyW, lstrlenW, GetWindowsDirectoryW, GlobalFree, GlobalUnlock, lstrcmpiW, lstrlenA, GlobalHandle, lstrcatW, GlobalLock, GlobalAlloc, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, DeleteCriticalSection, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetCurrentProcess ADVAPI32.dll: RegOpenKeyW, RegQueryValueExW, RegCloseKey WINMM.dll: midiOutReset, mmioRead, mmioSeek, midiStreamOut, midiStreamProperty, midiStreamPause, DefDriverProc, mmioClose, mmioAscend, mmioDescend, mmioOpenW, midiOutMessage, midiOutGetDevCapsW, DriverCallback, midiOutClose, midiOutOpen, midiStreamOpen, midiOutUnprepareHeader, midiOutPrepareHeader, midiStreamClose, midiStreamPosition, midiOutSetVolume, midiOutShortMsg, midiOutLongMsg, midiOutCacheDrumPatches, midiOutCachePatches, midiStreamStop, midiStreamRestart [[ 3 export(s) ]] DriverProc, modMessage, modmCallback ExifTool: file metadata CharacterSet: Unicode CodeSize: 11264 CompanyName: Microsoft Corporation EntryPoint: 0x33bd FileDescription: Microsoft MIDI Mapper FileFlagsMask: 0x003f FileOS: Windows NT 32-bit FileSize: 42 kB FileSubtype: 8 FileType: Win32 DLL FileVersion: 5.1.2600.5512 (xpsp.080413-0845) FileVersionNumber: 5.1.2600.5512 ImageVersion: 5.1 InitializedDataSize: 30720 InternalName: midimap LanguageCode: English (U.S.) LegalCopyright: Microsoft Corporation. All rights reserved. LinkerVersion: 7.1 MIMEType: application/octet-stream MachineType: Intel 386 or later, and compatibles OSVersion: 5.1 ObjectFileType: Dynamic link library OriginalFilename: midimap.dll PEType: PE32 ProductName: Microsoft Windows Operating System ProductVersion: 5.1.2600.5512 ProductVersionNumber: 5.1.2600.5512 Subsystem: Windows command line SubsystemVersion: 4.1 TimeStamp: 2008:04:14 02:10:20+02:00 UninitializedDataSize: 0 VT Community This file has never been reviewed by any VT Community member. Be the first one to comment on it! VirusTotal Team File name: winlogon.exe Submission date: 2011-09-30 07:06:22 (UTC) Current status: finished Result: 1/ 43 (2.3%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.09.29.02 2011.09.29 - AntiVir 7.11.15.74 2011.09.29 - Antiy-AVL 2.0.3.7 2011.09.30 - Avast 6.0.1289.0 2011.09.30 - AVG 10.0.0.1190 2011.09.30 - BitDefender 7.2 2011.09.30 - ByteHero 1.0.0.1 2011.09.23 - CAT-QuickHeal 11.00 2011.09.30 - ClamAV 0.97.0.0 2011.09.30 - Commtouch 5.3.2.6 2011.09.30 - Comodo 10285 2011.09.29 - DrWeb 5.0.2.03300 2011.09.30 - Emsisoft 5.1.0.11 2011.09.30 - eSafe 7.0.17.0 2011.09.27 Win32.Banker eTrust-Vet 36.1.8589 2011.09.29 - F-Prot 4.6.2.117 2011.09.29 - F-Secure 9.0.16440.0 2011.09.30 - Fortinet 4.3.370.0 2011.09.30 - GData 22 2011.09.30 - Ikarus T3.1.1.107.0 2011.09.30 - Jiangmin 13.0.900 2011.09.29 - K7AntiVirus 9.113.5217 2011.09.29 - Kaspersky 9.0.0.837 2011.09.30 - McAfee 5.400.0.1158 2011.09.30 - McAfee-GW-Edition 2010.1D 2011.09.29 - Microsoft 1.7702 2011.09.30 - NOD32 6504 2011.09.30 - Norman 6.07.11 2011.09.29 - nProtect 2011-09-29.01 2011.09.29 - Panda 10.0.3.5 2011.09.29 - PCTools 8.0.0.5 2011.09.30 - Prevx 3.0 2011.09.30 - Rising 23.77.03.02 2011.09.29 - Sophos 4.69.0 2011.09.30 - SUPERAntiSpyware 4.40.0.1006 2011.09.30 - Symantec 20111.2.0.82 2011.09.30 - TheHacker 6.7.0.1.314 2011.09.30 - TrendMicro 9.500.0.1008 2011.09.30 - TrendMicro-HouseCall 9.500.0.1008 2011.09.30 - VBA32 3.12.16.4 2011.09.28 - VIPRE 10619 2011.09.30 - ViRobot 2011.9.30.4696 2011.09.30 - VirusBuster 14.0.240.0 2011.09.29 - Additional information MD5 : a55b8899d2ea2e800061bcfd456e34dc SHA1 : 3ce9bf880803641888efba468feef74ed60d598f SHA256: 5786d04a702ff48ad28fb9e055a6c86509b8c9a01e9b9b6c8b531c6483e79819 ssdeep: 6144:0NZlxEdL5RvGlcHF37newMLao6nMnKHOD13XRnCfOVSePfLtisgZYl6cWDcW:zdz+lcDKa o6nSKHsRqOMgxZglH File size : 547328 bytes First seen: 2009-04-26 13:46:42 Last seen : 2011-09-30 07:06:22 TrID: Win64 Executable Generic (80.9%) Win32 Executable Generic (8.0%) Win32 Dynamic Link Library (generic) (7.1%) Generic Win/DOS Executable (1.8%) DOS Executable Generic (1.8%) sigcheck: publisher….: Microsoft Corporation copyright….: © Microsoft Corporation. All rights reserved. product……: Microsoft_ Windows_ Operating System description..: Windows NT Logon Application original name: WINLOGON.EXE internal name: winlogon file version.: 5.1.2600.5512 (xpsp.080413-2113) comments…..: n/a signers……: - signing date.: - verified…..: Unsigned PEInfo: PE structure information [[ basic data ]] entrypointaddress: 0x3E5E1 timedatestamp….: 0x48027549 (Sun Apr 13 21:04:09 2008) machinetype……: 0x14c (I386) [[ 3 section(s) ]] name, viradd, virsiz, rawdsiz, ntropy, md5 .text, 0x1000, 0x70991, 0x70A00, 6.82, 39d0278af55c2446adf638b9f0236aff .data, 0x72000, 0x4E70, 0x2000, 6.28, 44bd27282514b5e3a27b570106930d8d .rsrc, 0x77000, 0x12A25, 0x12C00, 4.61, b9750b46fe78744882f735b9a997fa1a [[ 20 import(s) ]] ADVAPI32.dll: ConvertStringSecurityDescriptorToSecurityDescriptorA, A_SHAInit, A_SHAUpdate, A_SHAFinal, LsaStorePrivateData, LsaRetrievePrivateData, LsaNtStatusToWinError, CryptGetUserKey, CryptGetKeyParam, CryptEncrypt, CryptSetProvParam, CryptSignHashW, CryptDeriveKey, CryptGetProvParam, RegOpenCurrentUser, RegDeleteKeyW, AddAccessAllowedAceEx, RegSetKeySecurity, I_ScSendTSMessage, MD5Init, MD5Update, MD5Final, SetFileSecurityA, AllocateLocallyUniqueId, LsaOpenPolicy, LsaQueryInformationPolicy, LsaFreeMemory, LsaClose, RegNotifyChangeKeyValue, QueryServiceConfigW, SetKernelObjectSecurity, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegEnumKeyExW, GetCurrentHwProfileW, RegCloseKey, RegQueryValueExW, RegOpenKeyW, FreeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AddAccessAllowedAce, InitializeAcl, GetLengthSid, AllocateAndInitializeSid, RegOpenKeyExW, CreateProcessAsUserW, DuplicateTokenEx, CloseServiceHandle, ControlService, StartServiceW, QueryServiceStatus, OpenServiceW, OpenSCManagerW, EqualSid, GetTokenInformation, RegSetValueExW, RegCreateKeyExW, CryptGenRandom, CryptDestroyHash, CryptVerifySignatureW, CryptSetHashParam, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptDecrypt, ReportEventW, RegisterEventSourceW, CryptImportKey, CryptAcquireContextW, CryptReleaseContext, CryptDestroyKey, RegEnumValueW, RegQueryInfoKeyW, RegDeleteValueW, CredFree, CredDeleteW, CredEnumerateW, CopySid, GetSidLengthRequired, GetSidSubAuthority, GetSidSubAuthorityCount, GetUserNameW, OpenThreadToken, EnumServicesStatusW, ImpersonateLoggedOnUser, RegQueryValueExA, CheckTokenMembership, DeregisterEventSource, LsaGetUserName, RevertToSelf, LookupAccountSidW, IsValidSid, SetTokenInformation, LogonUserW, LookupAccountNameW, OpenProcessToken, SynchronizeWindows31FilesAndWindowsNTRegistry, QueryWindows31FilesMigration, AdjustTokenPrivileges, RegQueryInfoKeyA AUTHZ.dll: AuthzInitializeResourceManager, AuthzAccessCheck, AuthziFreeAuditEventType, AuthziInitializeAuditEvent, AuthziInitializeAuditParams, AuthziInitializeAuditEventType, AuthziLogAuditEvent, AuthzFreeAuditEvent, AuthzFreeResourceManager, AuthzFreeHandle CRYPT32.dll: CryptImportPublicKeyInfo, CryptVerifyMessageSignature, CertCreateCertificateContext, CertSetCertificateContextProperty, CertVerifyCertificateChainPolicy, CryptSignMessage, CertCloseStore, CertComparePublicKeyInfo, CryptExportPublicKeyInfo, CertFindExtension, CryptDecryptMessage, CertGetCertificateContextProperty, CertAddCertificateContextToStore, CertOpenStore, CertVerifySubjectCertificateContext, CertGetIssuerCertificateFromStore, CertDuplicateCertificateContext, CertFreeCertificateContext, CertEnumCertificatesInStore, CryptImportPublicKeyInfoEx GDI32.dll: RemoveFontResourceW, AddFontResourceW KERNEL32.dll: WTSGetActiveConsoleSessionId, GetTimeFormatW, GetUserDefaultLCID, FileTimeToSystemTime, FileTimeToLocalFileTime, GetProcAddress, LoadLibraryW, GetModuleHandleW, SystemTimeToFileTime, GetSystemTime, SetLastError, TerminateProcess, GetCurrentProcess, CreateTimerQueueTimer, CreateThread, lstrcpynW, GetShortPathNameW, GetProfileStringW, FreeLibrary, ReleaseSemaphore, CreateSemaphoreW, GetSystemInfo, GetComputerNameW, GetEnvironmentVariableW, WaitForSingleObjectEx, LoadResource, FindResourceW, SetThreadExecutionState, DeleteTimerQueueTimer, ResetEvent, GetSystemDirectoryW, TransactNamedPipe, SetNamedPipeHandleState, GetTickCount, CreateFileW, GlobalGetAtomNameW, VirtualLock, VirtualQuery, GetDriveTypeW, Beep, ExpandEnvironmentStringsW, OpenMutexW, QueueUserWorkItem, LeaveCriticalSection, EnterCriticalSection, DisconnectNamedPipe, SearchPathW, lstrcatW, LocalReAlloc, TerminateThread, ResumeThread, GetDiskFreeSpaceExW, GlobalMemoryStatusEx, DeleteFileW, WriteProfileStringW, ReadFile, FindVolumeClose, FindNextVolumeW, FindFirstVolumeW, FormatMessageW, SetPriorityClass, MoveFileExW, WaitForMultipleObjectsEx, GetExitCodeProcess, SleepEx, InterlockedExchange, FindClose, FindFirstFileW, GetWindowsDirectoryW, SetTimerQueueTimer, GetComputerNameA, GetVersionExW, VerSetConditionMask, WriteFile, WaitNamedPipeW, WaitForMultipleObjects, ConnectNamedPipe, GetVersionExA, DuplicateHandle, OpenProcess, GetOverlappedResult, lstrcmpW, SetEnvironmentVariableW, UnregisterWait, CreateNamedPipeW, CreateRemoteThread, CreateActCtxW, GetModuleFileNameW, ExitProcess, LoadLibraryExW, SetErrorMode, SetUnhandledExceptionFilter, GetPrivateProfileStringW, LocalSize, VirtualAlloc, VirtualQueryEx, DebugBreak, CreateFileA, InitializeCriticalSection, ProcessIdToSessionId, SetInformationJobObject, AssignProcessToJobObject, TerminateJobObject, PostQueuedCompletionStatus, PulseEvent, GetQueuedCompletionStatus, CreateIoCompletionPort, CreateJobObjectW, ActivateActCtx, DeactivateActCtx, InterlockedCompareExchange, LoadLibraryA, QueryPerformanceCounter, GetSystemTimeAsFileTime, UnhandledExceptionFilter, GetModuleHandleA, GetStartupInfoA, GetCurrentProcessId, SetThreadPriority, GetCurrentThreadId, lstrcmpiW, GetProfileIntW, LoadLibraryExA, lstrcpyW, lstrlenW, Sleep, LocalAlloc, CreateEventW, GetExitCodeThread, SetThreadAffinityMask, GetProcessAffinityMask, CreateWaitableTimerW, CreateMutexW, OpenEventW, RegisterWaitForSingleObject, WaitForSingleObject, CreateProcessW, SetWaitableTimer, ReleaseMutex, SetEvent, UnregisterWaitEx, CloseHandle, lstrlenA, lstrcpyA, MultiByteToWideChar, GetACP, WideCharToMultiByte, HeapAlloc, GetProcessHeap, HeapFree, lstrcpynA, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, lstrcmpiA, GetFileSize, SetFilePointer, GlobalAlloc, GlobalFree, GetLastError, LocalFree, lstrcatA, lstrcmpA, GetLogicalDriveStringsA, GetDriveTypeA, GetVolumeInformationW, GlobalMemoryStatus, CreateMutexA, FindResourceExW, LockResource, SizeofResource, VerifyVersionInfoW, GetSystemDirectoryA, GetCurrentThread, DelayLoadFailureHook, BaseInitAppcompatCacheSupport, OpenProfileUserMapping, CloseProfileUserMapping, BaseCleanupAppcompatCacheSupport, InitializeCriticalSectionAndSpinCount, VirtualProtect, CreateEventA, TlsSetValue, TlsGetValue, DeleteCriticalSection, TlsAlloc, VirtualFree, TlsFree msvcrt.dll: wcslen, _vsnwprintf, wcsncpy, wcsstr, atoi, wcstok, memmove, wcschr, swprintf, swscanf, _local_unwind2, _wcslwr, wcscmp, _snwprintf, malloc, _c_exit, _exit, _XcptFilter, _cexit, exit, _acmdln, __getmainargs, _initterm, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, __3@YAXPAX@Z, __2@YAPAXI@Z, __CxxFrameHandler, _itow, _snprintf, _wtol, _strnicmp, sscanf, wcstombs, sprintf, strchr, strncmp, atof, _ftol, isspace, wcscpy, _controlfp, wcsncmp, _wcsupr, ceil, wcscat, _except_handler3, free, _wcsicmp NDdeApi.dll: -, -, -, - ntdll.dll: RtlSubAuthoritySid, RtlAllocateHeap, NtPowerInformation, NtSetSystemPowerState, NtRaiseHardError, RtlDeleteCriticalSection, NtOpenSymbolicLinkObject, NtReplyPort, NtCompleteConnectPort, NtReplyWaitReceivePort, NtAcceptConnectPort, NtCreatePort, RtlConvertSidToUnicodeString, RtlFreeUnicodeString, NtLockProductActivationKeys, RtlTimeToTimeFields, NtUnmapViewOfSection, NtMapViewOfSection, NtOpenSection, NtQuerySymbolicLinkObject, NtQueryVolumeInformationFile, NtSetSecurityObject, RtlAdjustPrivilege, NtOpenFile, NtFsControlFile, RtlAllocateAndInitializeSid, RtlDestroyEnvironment, RtlFreeHeap, NtQueryInformationToken, NtShutdownSystem, RtlEnterCriticalSection, RtlLeaveCriticalSection, RtlInitializeCriticalSection, RtlCreateEnvironment, RtlQueryEnvironmentVariable_U, RtlSetEnvironmentVariable, RtlInitUnicodeString, NtOpenKey, NtQueryValueKey, RtlInitializeSid, RtlLengthRequiredSid, NtAllocateLocallyUniqueId, RtlGetDaclSecurityDescriptor, RtlCopySid, RtlLengthSid, NtSetInformationThread, NtDuplicateToken, NtDuplicateObject, RtlEqualSid, RtlSetDaclSecurityDescriptor, RtlCreateSecurityDescriptor, NtClose, RtlOpenCurrentUser, RtlAddAce, RtlCreateAcl, RtlNtStatusToDosError, NtSetInformationProcess, NtQuerySystemInformation, NtCreateEvent, NtCreatePagingFile, RtlDosPathNameToNtPathName_U, RtlRegisterWait, NtSetValueKey, NtCreateKey, RtlTimeToSecondsSince1980, NtQuerySystemTime, NtPrivilegeObjectAuditAlarm, NtPrivilegeCheck, NtOpenThreadToken, NtOpenProcessToken, RtlInitString, RtlUnhandledExceptionFilter, NtQueryInformationProcess, DbgBreakPoint, RtlCheckProcessParameters, RtlSetThreadIsCritical, RtlSetProcessIsCritical, RtlGetNtProductType, NtInitiatePowerAction, DbgPrint, NtFilterToken, NtQueryInformationJobObject, NtOpenEvent, RtlGetAce, RtlQueryInformationAcl, NtQuerySecurityObject, RtlCompareUnicodeString, NtOpenDirectoryObject PROFMAP.dll: InitializeProfileMappingApi, RemapAndMoveUserW PSAPI.DLL: EnumProcesses, EnumProcessModules, GetModuleBaseNameW REGAPI.dll: RegDefaultUserConfigQueryW, RegUserConfigQuery RPCRT4.dll: RpcServerRegisterIfEx, RpcServerUseProtseqEpW, RpcImpersonateClient, I_RpcMapWin32Status, RpcServerRegisterIf, RpcGetAuthorizationContextForClient, RpcFreeAuthorizationContext, RpcServerListen, RpcRevertToSelf, NdrServerCall2, UuidCreate Secur32.dll: LsaCallAuthenticationPackage, GetUserNameExW, LsaLookupAuthenticationPackage, LsaRegisterLogonProcess SETUPAPI.dll: SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, SetupDiGetDeviceRegistryPropertyW USER32.dll: SetFocus, EnumWindows, CreateWindowStationW, RegisterLogonProcess, RecordShutdownReason, LoadLocalFonts, UnhookWindowsHook, SetWindowsHookW, GetWindowTextW, CallNextHookEx, DialogBoxParamW, GetWindowPlacement, GetSystemMenu, DeleteMenu, SetWindowPlacement, SetUserObjectInformationW, GetAsyncKeyState, PostThreadMessageW, SetUserObjectSecurity, CreateDesktopW, GetMessageTime, SetTimer, SetLogonNotifyWindow, UnlockWindowStation, ReplyMessage, UnregisterHotKey, RegisterHotKey, OpenInputDesktop, GetUserObjectInformationW, CloseDesktop, RegisterDeviceNotificationW, SetThreadDesktop, CreateWindowExW, GetMessageW, TranslateMessage, RegisterWindowMessageW, RegisterClassW, SetCursor, FindWindowW, MessageBoxW, SendNotifyMessageW, PostQuitMessage, MsgWaitForMultipleObjects, GetWindowRect, GetSystemMetrics, PeekMessageW, DispatchMessageW, KillTimer, SetProcessWindowStation, UpdateWindow, ShowWindow, SetWindowPos, PostMessageW, ExitWindowsEx, EnumDisplayMonitors, SystemParametersInfoW, GetDlgItem, SendMessageW, CreateDialogParamW, DestroyWindow, GetWindowLongW, GetDlgItemTextW, EndDialog, SetWindowLongW, LoadStringW, SetWindowTextW, SetDlgItemTextW, wsprintfW, wsprintfA, LockWindowStation, MBToWCSEx, SetWindowStationUser, UpdatePerUserSystemParameters, DialogBoxIndirectParamW, wvsprintfW, SetLastErrorEx, LoadCursorW, CheckDlgButton, IsDlgButtonChecked, DefWindowProcW, CloseWindowStation, LoadImageW, GetParent, GetKeyState, GetDesktopWindow, SetForegroundWindow, SwitchDesktop, OpenDesktopW USERENV.dll: -, WaitForUserPolicyForegroundProcessing, GetAllUsersProfileDirectoryW, -, -, -, WaitForMachinePolicyForegroundProcessing, -, -, -, UnloadUserProfile, LoadUserProfileW, -, RegisterGPNotification, CreateEnvironmentBlock, DestroyEnvironmentBlock, UnregisterGPNotification, GetUserProfileDirectoryW VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW WINSTA.dll: WinStationRequestSessionsList, WinStationQueryLogonCredentialsW, WinStationIsHelpAssistantSession, WinStationAutoReconnect, _WinStationWaitForConnect, _WinStationNotifyLogoff, WinStationDisconnect, _WinStationCallback, WinStationNameFromLogonIdW, _WinStationFUSCanRemoteUserDisconnect, WinStationEnumerate_IndexedW, WinStationGetMachinePolicy, WinStationQueryInformationW, WinStationFreeMemory, WinStationReset, _WinStationNotifyDisconnectPipe, WinStationConnectW, WinStationSetInformationW, WinStationShutdownSystem, WinStationCheckLoopBack, _WinStationNotifyLogon WINTRUST.dll: CryptCATAdminEnumCatalogFromHash, CryptCATCatalogInfoFromContext, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext, CryptCATAdminReleaseCatalogContext, WTHelperProvDataFromStateData, WinVerifyTrust, WTHelperGetProvSignerFromChain, CryptCATAdminReleaseContext WS2_32.dll: -, -, getaddrinfo ExifTool: file metadata CharacterSet: Unicode CodeSize: 461312 CompanyName: Microsoft Corporation EntryPoint: 0x3e5e1 FileDescription: Windows NT Logon Application FileFlagsMask: 0x003f FileOS: Windows NT 32-bit FileSize: 534 kB FileSubtype: 0 FileType: Win32 EXE FileVersion: 5.1.2600.5512 (xpsp.080413-2113) FileVersionNumber: 5.1.2600.5512 ImageVersion: 21315.20512 InitializedDataSize: 97280 InternalName: winlogon LanguageCode: English (U.S.) LegalCopyright: Microsoft Corporation. All rights reserved. LinkerVersion: 7.1 MIMEType: application/octet-stream MachineType: Intel 386 or later, and compatibles OSVersion: 5.1 ObjectFileType: Executable application OriginalFilename: WINLOGON.EXE PEType: PE32 ProductName: Microsoft Windows Operating System ProductVersion: 5.1.2600.5512 ProductVersionNumber: 5.1.2600.5512 Subsystem: Windows GUI SubsystemVersion: 4.0 TimeStamp: 2008:04:13 23:04:09+02:00 UninitializedDataSize: 0 Symantec reputation:Suspicious.Insight VT Community This file has never been reviewed by any VT Community member. Be the first one to comment on it! VirusTotal Team File name: ctfmon.exe Submission date: 2011-09-30 07:08:42 (UTC) Current status: finished Result: 1/ 43 (2.3%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.09.29.02 2011.09.29 - AntiVir 7.11.15.74 2011.09.29 - Antiy-AVL 2.0.3.7 2011.09.30 - Avast 6.0.1289.0 2011.09.30 - AVG 10.0.0.1190 2011.09.30 - BitDefender 7.2 2011.09.30 - ByteHero 1.0.0.1 2011.09.23 - CAT-QuickHeal 11.00 2011.09.30 - ClamAV 0.97.0.0 2011.09.30 - Commtouch 5.3.2.6 2011.09.30 - Comodo 10285 2011.09.29 - DrWeb 5.0.2.03300 2011.09.30 - Emsisoft 5.1.0.11 2011.09.30 - eSafe 7.0.17.0 2011.09.27 Win32.Banker eTrust-Vet 36.1.8589 2011.09.29 - F-Prot 4.6.2.117 2011.09.29 - F-Secure 9.0.16440.0 2011.09.30 - Fortinet 4.3.370.0 2011.09.30 - GData 22 2011.09.30 - Ikarus T3.1.1.107.0 2011.09.30 - Jiangmin 13.0.900 2011.09.29 - K7AntiVirus 9.113.5217 2011.09.29 - Kaspersky 9.0.0.837 2011.09.30 - McAfee 5.400.0.1158 2011.09.30 - McAfee-GW-Edition 2010.1D 2011.09.29 - Microsoft 1.7702 2011.09.30 - NOD32 6504 2011.09.30 - Norman 6.07.11 2011.09.29 - nProtect 2011-09-29.01 2011.09.29 - Panda 10.0.3.5 2011.09.29 - PCTools 8.0.0.5 2011.09.30 - Prevx 3.0 2011.09.30 - Rising 23.77.03.02 2011.09.29 - Sophos 4.69.0 2011.09.30 - SUPERAntiSpyware 4.40.0.1006 2011.09.30 - Symantec 20111.2.0.82 2011.09.30 - TheHacker 6.7.0.1.314 2011.09.30 - TrendMicro 9.500.0.1008 2011.09.30 - TrendMicro-HouseCall 9.500.0.1008 2011.09.30 - VBA32 3.12.16.4 2011.09.28 - VIPRE 10619 2011.09.30 - ViRobot 2011.9.30.4696 2011.09.30 - VirusBuster 14.0.240.0 2011.09.29 - Additional information MD5 : b5e8782d4af1b3756f38e11e7c157bbe SHA1 : 5a294662d1e3751427aeacedf272743205832062 SHA256: e1e11638ca6670c45287101da8fe5be9dbb258e19e7397493ffcc750e02a09d1 ssdeep: 384:NA1Eo7NY8MPTIaW7/lumxlJslWjdckOVPiWDlgW:N3opITIaWhuoilWOVPfl File size : 25088 bytes First seen: 2009-02-25 15:24:59 Last seen : 2011-09-30 07:08:42 TrID: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) sigcheck: publisher….: Microsoft Corporation copyright….: © Microsoft Corporation. All rights reserved. product……: Microsoft_ Windows_ Operating System description..: CTF Loader original name: CTFMON.EXE internal name: CTFMON file version.: 5.1.2600.5512 (xpsp.080413-2105) comments…..: n/a signers……: - signing date.: - verified…..: Unsigned PEInfo: PE structure information [[ basic data ]] entrypointaddress: 0x2E35 timedatestamp….: 0x48025356 (Sun Apr 13 18:39:18 2008) machinetype……: 0x14c (I386) [[ 3 section(s) ]] name, viradd, virsiz, rawdsiz, ntropy, md5 .text, 0x1000, 0x2AB8, 0x2C00, 6.75, 414ce647d4328e7513d4155b1a2c9499 .data, 0x4000, 0x210, 0x200, 1.07, bd8c5cd346a9f53dc0dbc69260ab2240 .rsrc, 0x5000, 0x2FA7, 0x3000, 4.69, 96bd12e3ac266cf027268ff964c44afc [[ 6 import(s) ]] msvcrt.dll: _controlfp, _except_handler3, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __getmainargs, _acmdln, exit, _cexit, _XcptFilter, _exit, _c_exit ADVAPI32.dll: RegDeleteValueA, RegOpenKeyExA, RegCloseKey, RegSetValueExA, RegCreateKeyA, RegCreateKeyExA KERNEL32.dll: lstrcpynA, lstrlenA, GetSystemDirectoryA, GetSystemWindowsDirectoryA, GetVersionExA, GetACP, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, LocalFree, CloseHandle, ResetEvent, OpenEventA, CreateProcessA, lstrcatA, GetSystemInfo, lstrcmpiA, FreeLibrary, LoadLibraryA, CreateEventA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetModuleHandleA, GetStartupInfoA, LocalAlloc, GetProcAddress USER32.dll: EnumWindows, GetClassNameA, FindWindowA, PostMessageA, SetTimer, KillTimer, MsgWaitForMultipleObjects, PeekMessageA, TranslateMessage, DispatchMessageA, GetMessageA, SetWindowPos, LoadCursorA, RegisterClassExA, DefWindowProcA, PostQuitMessage, CreateWindowExA, GetSystemMetrics MSCTF.dll: TF_InitSystem, TF_GetGlobalCompartment, TF_InvalidAssemblyListCacheIfExist, TF_InvalidAssemblyListCache, TF_PostAllThreadMsg, TF_CreateCicLoadMutex, TF_UninitSystem MSUTB.dll: ClosePopupTipbar, GetPopupTipbar ExifTool: file metadata CharacterSet: Unicode CodeSize: 11264 CompanyName: Microsoft Corporation EntryPoint: 0x2e35 FileDescription: CTF Loader FileFlagsMask: 0x003f FileOS: Windows NT 32-bit FileSize: 24 kB FileSubtype: 0 FileType: Win32 EXE FileVersion: 5.1.2600.5512 (xpsp.080413-2105) FileVersionNumber: 5.1.2600.5512 ImageVersion: 5.1 InitializedDataSize: 13312 InternalName: CTFMON LanguageCode: English (U.S.) LegalCopyright: Microsoft Corporation. All rights reserved. LinkerVersion: 7.1 MIMEType: application/octet-stream MachineType: Intel 386 or later, and compatibles OSVersion: 5.1 ObjectFileType: Dynamic link library OleSelfRegister: OriginalFilename: CTFMON.EXE PEType: PE32 ProductName: Microsoft Windows Operating System ProductVersion: 5.1.2600.5512 ProductVersionNumber: 5.1.2600.5512 Subsystem: Windows GUI SubsystemVersion: 4.0 TimeStamp: 2008:04:13 20:39:18+02:00 UninitializedDataSize: 0 VT Community This file has never been reviewed by any VT Community member. Be the first one to comment on it! VirusTotal Team I think this is all you asked for let me know if i did everything right, i was a little confused lol thanks again so much for helping out.

Hello Nick23

Thank you for the logs and scan data.

let me know if i did everything right

You did just fine

Lets proceed as follows:

• System File Checker
  
  
  • Click on "Start" and then on "Run".
  • Copy and paste the following text into the Run box that opens:
  
  sfc /scannow
  
  
  • Press Enter.
  • Let the system file checker run unhindered.
  • Note: The program may (or it may not) ask you for your Windows XP installation CD - please insert it at the prompt. If it doesn't ask you for the CD this means that it wasn't necessary to replace any files.
  
  
• Please work through the following steps
  
  
  
  • Open Notepad (Click on "Start", then on "Run" and type "notepad" (without quotations) in the Open field, then click on "OK").
  • NOTE: Do not Use Wordpad or any other text editor except Notepad or the script will fail.
  • Copy and Paste the text in the quotebox below into the open Notepad window:
    
    

    File::
    c:\documents and settings\Nick\My Documents\Programs\WSTrayDictMode.exe
    c:\documents and settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk
    
    Registry::
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "8567:TCP"=-
    "8567:UDP"=-
    "8897:TCP"=-
    "8897:UDP"=-
    "12029:TCP"=-
    "12029:UDP"=-

  • Save this as "CFScript.txt" (including the quotation marks), change the "Save as type" to "All Files" and save it to your desktop.
  • Close any open browsers.
  • Disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Refering to the picture below, drag CFScript.txt into ComboFix.exe
    
    [external image: Posted Image]
    
  • When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
  • Once the log is produced, re-engage your resident anti virus.
  
  Please post the ComboFix log in your next reply and let me know how the machine is running now

Hello Nick23

Please let me know exactly how the machine is running at the moment and if you are still having noticeable problems with it.

i do not have the cd

You have a number of files on your machine that ought to be replaced. Would you be able to borrow an installation CD off a friend perhaps?

Lets take a look and see if we can find some suitable replacements:

• Please download SystemLook by JPShortstuff
  
  
  
• Please download SystemLook by JPShortstuff by clicking here or here and save the file (called SystemLook.exe) to your desktop.
• Double click SystemLook.exe to run the program.
• Copy the content of the following codebox into the main textfield:

:filefind
*comres.dl*
*winlogon.ex*
*user32.dl*
*explorer.ex*
*regedit.ex*
*sfcfiles.dl*
*ctfmon.ex*
*hnetcfg.dl*
*midimap.dl*

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
• Note: The log can also be found on your Desktop entitled SystemLook.txt

Please post the SystemLook log in your next reply along with the answers to my questions

I havent had any noticeable problems yet but my computer is running really slow. I can try and borrow a cd off someone but i will probably have to find another way to replace the files if there is such a way.

I downloaded the program you gave me and ran it, hear is the log from it. SystemLook 30.07.11 by jpshortstuff Log created at 18:46 on 02/10/2011 by Nick Administrator - Elevation successful ========== filefind ========== Searching for "*comres.dl*" C:\WINDOWS\system32\comres.dll –a—- 1390080 bytes [09:18 28/04/2008] [09:18 28/04/2008] CB75214525D36F923D3948DA3CD1562D Searching for "*winlogon.ex*" C:\WINDOWS\Prefetch\WINLOGON.EXE-32C57D49.pf –a—- 24716 bytes [22:50 27/09/2011] [20:58 02/10/2011] F9E720E5C19B2F34C6AC185F8882592C C:\WINDOWS\system32\winlogon.exe –a—- 547328 bytes [09:24 28/04/2008] [09:24 28/04/2008] A55B8899D2EA2E800061BCFD456E34DC Searching for "*user32.dl*" C:\WINDOWS\system32\user32.dll –a—- 578560 bytes [18:36 20/03/2008] [18:36 20/03/2008] F92D8964B5286DE225BD2B6BF89764BE Searching for "*explorer.ex*" C:\Documents and Settings\Nick\Local Settings\temp\WER8360.dir00\explorer.exe.hdmp –a—- 0 bytes [08:54 01/10/2011] [08:54 01/10/2011] D41D8CD98F00B204E9800998ECF8427E C:\Documents and Settings\Nick\Local Settings\temp\WER8360.dir00\explorer.exe.mdmp –a—- 0 bytes [08:54 01/10/2011] [08:54 01/10/2011] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER0483.dir00\explorer.exe.hdmp –a—- 0 bytes [07:12 24/09/2011] [20:25 15/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER0483.dir00\explorer.exe.mdmp –a—- 0 bytes [07:12 24/09/2011] [20:25 15/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER09d6.dir00\explorer.exe.hdmp –a—- 0 bytes [07:12 24/09/2011] [23:04 13/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER09d6.dir00\explorer.exe.mdmp –a—- 0 bytes [07:12 24/09/2011] [23:04 13/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER09e9.dir00\explorer.exe.mdmp –a—- 0 bytes [07:12 24/09/2011] [21:28 04/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER0cfc.dir00\explorer.exe.hdmp –a—- 0 bytes [07:12 24/09/2011] [06:10 31/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER0cfc.dir00\explorer.exe.mdmp –a—- 0 bytes [07:12 24/09/2011] [06:10 31/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER1109.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [19:51 01/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER12af.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [04:13 23/01/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER12af.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [04:13 23/01/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER1393.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:59 06/07/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER1b0d.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [04:26 25/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER1fa0.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [04:08 08/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER260c.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [22:01 05/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER2a79.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [17:27 24/12/2009] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER2a79.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [17:27 24/12/2009] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER3108.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [21:48 13/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER31ff.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [03:01 15/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER3231.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [06:40 01/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER3231.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [06:40 01/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER3836.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [17:38 13/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER3dab.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [20:36 24/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER45ff.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [03:56 26/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER45ff.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [03:56 26/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER479b.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [08:24 01/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER479b.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [08:24 01/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER48f5.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [01:41 27/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER4cdd.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [20:33 08/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER4cdd.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [20:33 08/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER4d2a.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [03:45 02/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER4d2a.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [03:45 02/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER5706.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [08:43 13/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER59b0.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [00:56 14/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER5eaa.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [00:28 12/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER61d6.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [17:15 30/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER61d6.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [17:15 30/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER658d.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [23:56 25/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER6bb9.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [06:02 17/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER6c67.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:34 23/12/2009] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER7629.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [04:11 18/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER7629.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [04:11 18/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER76eb.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [03:16 10/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER78f2.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [06:30 06/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER78f2.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [06:30 06/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER7ce1.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [00:27 01/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER7ce1.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [00:27 01/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER8bc5.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [06:13 30/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER9714.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [02:54 04/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WER9714.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:54 04/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERa086.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [08:47 08/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERa086.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [08:47 08/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERa2a5.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [00:04 10/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERb381.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [20:30 01/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERb9c9.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [19:57 02/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERbab6.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [05:45 02/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERbab6.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [05:45 02/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc1ce.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [02:28 19/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc1ce.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:28 19/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc561.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [00:28 24/12/2009] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc561.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [00:28 24/12/2009] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc575.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [19:05 27/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc575.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [19:05 27/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc863.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [19:25 21/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERc863.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [19:25 21/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERd77e.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [07:43 09/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERd77e.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [07:43 09/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERddfc.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [06:08 01/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERddfc.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [06:08 01/06/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERdfa6.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [00:22 21/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERdfa6.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [00:22 21/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERdfb4.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [08:34 23/12/2009] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERe048.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [07:07 18/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERe239.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [02:01 21/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERe239.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:01 21/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERe62b.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [12:07 05/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERe62b.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [12:07 05/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERe81b.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:04 29/03/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERec60.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [08:11 24/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERecb6.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [03:27 11/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERecb6.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [03:27 11/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERedd4.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [04:55 19/04/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERf36c.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [08:50 01/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERfb3d.dir00\explorer.exe.hdmp –a—- 0 bytes [07:13 24/09/2011] [02:34 28/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temp\WERfb3d.dir00\explorer.exe.mdmp –a—- 0 bytes [07:13 24/09/2011] [02:34 28/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\Program Files\Windows7\UltraExplorer\UltraExplorer.exe –a—- 4424192 bytes [14:51 11/08/2009] [08:43 26/12/2007] 614925A5D7718665A951F61B9CBCB619 C:\Program Files\Windows7\Vienna Explorer\Vienna Explorer.exe –a—- 581632 bytes [14:51 11/08/2009] [10:31 18/11/2006] AF0799D0C6F2906E8796F8BCD3DCAB32 C:\WINDOWS\explorer.exe –a—- 1616384 bytes [18:17 18/08/2008] [18:17 18/08/2008] 4A90F51B778FA0157F60D206E8B37D2A C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf –a—- 67930 bytes [19:44 27/09/2011] [22:44 02/10/2011] 647B4860DF2A75876C43DCF45FC5DEF7 C:\WINDOWS\Prefetch\VIENNA EXPLORER.EXE-15DEB98C.pf –a—- 47188 bytes [19:46 27/09/2011] [21:00 02/10/2011] AAF5DEC39FE9FAD333112D89F81984E6 Searching for "*regedit.ex*" C:\WINDOWS\regedit.exe ——- 267264 bytes [22:42 13/04/2008] [22:42 13/04/2008] 18B0915F58A5342AB0F3D01D57261E32 Searching for "*sfcfiles.dl*" C:\WINDOWS\system32\sfcfiles.dll –a—- 1614848 bytes [03:58 26/04/2008] [03:58 26/04/2008] BC298B78B311397B421D4D52B44B49EC Searching for "*ctfmon.ex*" C:\WINDOWS\system32\ctfmon.exe –a—- 25088 bytes [09:22 28/04/2008] [09:22 28/04/2008] B5E8782D4AF1B3756F38E11E7C157BBE Searching for "*hnetcfg.dl*" C:\WINDOWS\system32\hnetcfg.dll –a—- 368640 bytes [09:19 28/04/2008] [09:19 28/04/2008] A913E1FF4C0BDA15FC542430182EB7B6 Searching for "*midimap.dl*" C:\WINDOWS\system32\midimap.dll –a—- 42496 bytes [09:19 28/04/2008] [09:19 28/04/2008] 66620EE56B0FFB1B267BD24ECF942A9B -= EOF =-

Hello Nick23

Thanks for letting me know.

It does not look as though there are siotable file replacements on your system. An installation disk wuold allow us to obtain suitable replacements.

For the time being, lets proceed as follows:

• Temporary File Cleaner
  
  
  
  • Download TFC to your desktop.
  • Close any open windows.
  • Double click the TFC icon to run the program.
  • TFC will close all open programs itself in order to run.
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish.
  • Once complete it should automatically reboot your machine.
  • If your machine does not reboot automatically, manually reboot to ensure a complete clean.
  • Note: After running TFC your machine may take slightly longer to boot the first time. This is normal.
  
  
• MalwareBytes AntiMalware:
  
  
  
  • I can see that you have MBAM installed.
  • Double click on your MalwareBytes AntiMalware icon to launch the program.
  • Click on the "Update" tab and then on "Check for Updates".
  • The program will now install the latest Malware definition files.
  • Once complete, click on the "Scanner" tab, select "Perform Quick Scan"and then click on "Scan".
  • Once the program has scanned your computer, a log file will be created in Notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  
  
  
  • If the scan detects any Malware-related objects, make sure that everything is checked, and click "Remove Selected" <– Very Important.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to restart your computer.
  • The log is automatically saved by MBAM and can be viewed by clicking the "Logs" tab.
  • Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process. If asked to restart your computer, please do so immediately.
  • Come back here to this thread and Paste the log in your next reply.
  
  
• Please update your Java
  
  
  
  • To update your Java, Click on "Start" then on "Control Panel" and then on the Java icon (looks like a coffee cup).
  • In the window that opens, click on the "Update" tab, and then on "Update Now".
  • Your Java should begin to update. Please follow any prompts that you receive.
  
  
• Please run the following scan
  
  
  
  • Note:Internet Explorer is preferred for this scan, although it will run with other browsers.
  • Note for Vista/Windows 7 Users: ESET is compatible but Internet Explorer must be run as Administrator. To do this, right-click on your Internet Explorer icon and select "Run as Administrator".
  • Please disable your real time security programs before performing the scan.
  
  
  
  • Scan your system with Eset Online Scanner
  • Place a check mark in the box YES, I accept the Terms Of Use.
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps).
  • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the [external image: Posted Image] icon on your desktop.
  
  
  
  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option to "Remove Found Threats" is UN checked.
  • Push the "Start" button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the [external image: Posted Image] button.
  • Push [external image: Posted Image]
  
  Please post the MBAM log and ESET log in your next reply, along with a new DDS scan log.

Are you still with me Nick?

Yes, sorry my grandfather fell down and got hurt so i went over to his house and stayed with him for a little while to help him out. Sorry I was not able to write. Than you for holding the post up a little longer i really appreciate it.

My mother has a windows xp home edition dis with the service pack 2, would i be able to get any of the missing files i need off of that.

Hello Nick23

Yes, sorry my grandfather fell down and got hurt so i went over to his house and stayed with him for a little while to help him out

I'm really sorry to hear about that. I am sure I speak for everyone here at WTT when I say we wish your Grandfather a speedy recovery.

My mother has a windows xp home edition dis with the service pack 2, would i be able to get any of the missing files i need off of that

Since you are running XP Professional and the disk is for Home Edition I will have to enquire about that.

Whilst I do so, please work your way through the steps described in my previous post

Thank you and i think i am finished with the things you asked me to do hear are the results that i got from the scans that you had me do. MBAM Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 7919 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 10/11/2011 1:07:22 AM mbam-log-2011-10-11 (01-07-20).txt Scan type: Quick scan Objects scanned: 178940 Time elapsed: 30 minute(s), 57 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) ESET C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\My Documents\Programs\White Smoke Translator\WhiteSmokeDictRegistration.exe a variant of Win32/WhiteSmoke application C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temporary Internet Files\Content.IE5\6S9JDZ3C\index[3].htm HTML/ScrInject.B.Gen virus C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\My Documents\Programs\White Smoke Translator\html\english\dictClientDic\index.html HTML/WhiteSmoke application C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\Local Settings\Temporary Internet Files\Content.IE5\6S9JDZ3C\GNH13[1].htm JS/Exploit.Agent.NBA trojan C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\My Documents\Programs\White Smoke Translator\Buy Whitesmoke Translator.lnk LNK/URL.B trojan C:\HelpAsst_backup\C\DOCUME~1\HelpAssistant\My Documents\Downloads\lavaroulette.exe probably a variant of Win32/Adware.LoudMo.B application DDS 2011/10/11 20:03:56.0156 1192 TDSS rootkit removing tool 2.5.19.0 Sep 6 2011 19:23:56 2011/10/11 20:03:58.0187 1192 ================================================================================ 2011/10/11 20:03:58.0187 1192 SystemInfo: 2011/10/11 20:03:58.0187 1192 2011/10/11 20:03:58.0187 1192 OS Version: 5.1.2600 ServicePack: 3.0 2011/10/11 20:03:58.0187 1192 Product type: Workstation 2011/10/11 20:03:58.0187 1192 ComputerName: XPWINDOWS7 2011/10/11 20:03:58.0187 1192 UserName: Nick 2011/10/11 20:03:58.0187 1192 Windows directory: C:\WINDOWS 2011/10/11 20:03:58.0187 1192 System windows directory: C:\WINDOWS 2011/10/11 20:03:58.0187 1192 Processor architecture: Intel x86 2011/10/11 20:03:58.0187 1192 Number of processors: 1 2011/10/11 20:03:58.0187 1192 Page size: 0x1000 2011/10/11 20:03:58.0187 1192 Boot type: Normal boot 2011/10/11 20:03:58.0187 1192 ================================================================================ 2011/10/11 20:04:05.0437 1192 Initialize success 2011/10/11 20:19:34.0031 1812 ================================================================================ 2011/10/11 20:19:34.0046 1812 Scan started 2011/10/11 20:19:34.0046 1812 Mode: Manual; 2011/10/11 20:19:34.0046 1812 ================================================================================ 2011/10/11 20:19:38.0390 1812 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/10/11 20:19:38.0937 1812 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/10/11 20:19:39.0609 1812 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/10/11 20:19:40.0156 1812 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys 2011/10/11 20:19:41.0187 1812 AgereSoftModem (593aefc67283d409f34cc1245d00a509) C:\WINDOWS\system32\DRIVERS\AGRSM.sys 2011/10/11 20:19:49.0750 1812 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 2011/10/11 20:19:53.0078 1812 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/10/11 20:19:54.0078 1812 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/10/11 20:19:55.0875 1812 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/10/11 20:19:56.0906 1812 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/10/11 20:19:57.0953 1812 AVGIDSDriver (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys 2011/10/11 20:19:58.0734 1812 AVGIDSEH (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys 2011/10/11 20:19:59.0609 1812 AVGIDSFilter (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys 2011/10/11 20:20:00.0234 1812 AVGIDSShim (07eba0c11fa1d73b82ecc3255ddfe34d) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys 2011/10/11 20:20:01.0265 1812 Avgldx86 (f4dbbc8d3c5338693da23c59a50f8abc) C:\WINDOWS\system32\DRIVERS\avgldx86.sys 2011/10/11 20:20:02.0156 1812 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys 2011/10/11 20:20:02.0812 1812 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys 2011/10/11 20:20:03.0343 1812 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS\system32\DRIVERS\avgtdix.sys 2011/10/11 20:20:04.0015 1812 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/10/11 20:20:04.0750 1812 Bridge (f934d1b230f84e1d19dd00ac5a7a83ed) C:\WINDOWS\system32\DRIVERS\bridge.sys 2011/10/11 20:20:04.0953 1812 BridgeMP (f934d1b230f84e1d19dd00ac5a7a83ed) C:\WINDOWS\system32\DRIVERS\bridge.sys 2011/10/11 20:20:05.0875 1812 BVRPMPR5 (a0b1aeb65397adcae5a199bd152c107d) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS 2011/10/11 20:20:08.0000 1812 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/10/11 20:20:09.0015 1812 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/10/11 20:20:09.0453 1812 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/10/11 20:20:10.0015 1812 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/10/11 20:20:12.0828 1812 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/10/11 20:20:13.0593 1812 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/10/11 20:20:14.0453 1812 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/10/11 20:20:14.0968 1812 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/10/11 20:20:15.0421 1812 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/10/11 20:20:16.0203 1812 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/10/11 20:20:16.0687 1812 es1371 (a55dd7d8ced5d2624a9ee2dda7be0319) C:\WINDOWS\system32\drivers\es1371mp.sys 2011/10/11 20:20:17.0890 1812 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/10/11 20:20:19.0218 1812 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 2011/10/11 20:20:19.0828 1812 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/10/11 20:20:20.0625 1812 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 2011/10/11 20:20:21.0687 1812 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 2011/10/11 20:20:22.0234 1812 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/10/11 20:20:22.0578 1812 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/10/11 20:20:23.0203 1812 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys 2011/10/11 20:20:23.0750 1812 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/10/11 20:20:24.0781 1812 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys 2011/10/11 20:20:25.0781 1812 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2011/10/11 20:20:27.0015 1812 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/10/11 20:20:28.0859 1812 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/10/11 20:20:30.0890 1812 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/10/11 20:20:32.0046 1812 ialm (81efe1c5542afb2570758f39ae3b1151) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 2011/10/11 20:20:33.0484 1812 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/10/11 20:20:37.0718 1812 IntcAzAudAddService (d934b46d095285d8e3ee21f739bb4ad0) C:\WINDOWS\system32\drivers\RtkHDAud.sys 2011/10/11 20:20:44.0406 1812 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 2011/10/11 20:20:45.0343 1812 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 2011/10/11 20:20:46.0359 1812 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 2011/10/11 20:20:47.0421 1812 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/10/11 20:20:48.0218 1812 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/10/11 20:20:49.0187 1812 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/10/11 20:20:50.0359 1812 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/10/11 20:20:51.0390 1812 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/10/11 20:20:52.0390 1812 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/10/11 20:20:53.0484 1812 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/10/11 20:20:53.0968 1812 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 2011/10/11 20:20:54.0765 1812 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/10/11 20:20:55.0531 1812 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/10/11 20:20:57.0312 1812 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/10/11 20:20:58.0031 1812 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/10/11 20:20:58.0625 1812 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/10/11 20:20:59.0078 1812 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/10/11 20:20:59.0718 1812 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/10/11 20:21:00.0718 1812 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/10/11 20:21:01.0593 1812 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/10/11 20:21:02.0375 1812 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/10/11 20:21:03.0062 1812 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/10/11 20:21:03.0671 1812 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/10/11 20:21:04.0156 1812 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/10/11 20:21:04.0781 1812 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/10/11 20:21:05.0250 1812 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 2011/10/11 20:21:06.0031 1812 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/10/11 20:21:06.0906 1812 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/10/11 20:21:07.0625 1812 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/10/11 20:21:08.0531 1812 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/10/11 20:21:09.0703 1812 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/10/11 20:21:10.0718 1812 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/10/11 20:21:11.0765 1812 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/10/11 20:21:12.0750 1812 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 2011/10/11 20:21:13.0515 1812 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/10/11 20:21:14.0703 1812 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/10/11 20:21:16.0109 1812 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/10/11 20:21:16.0859 1812 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/10/11 20:21:17.0781 1812 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/10/11 20:21:18.0671 1812 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 2011/10/11 20:21:19.0875 1812 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/10/11 20:21:20.0937 1812 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/10/11 20:21:21.0828 1812 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/10/11 20:21:22.0937 1812 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/10/11 20:21:24.0640 1812 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys 2011/10/11 20:21:25.0671 1812 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/10/11 20:21:32.0046 1812 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/10/11 20:21:33.0062 1812 Ps2 (390c204ced3785609ab24e9c52054a84) C:\WINDOWS\system32\DRIVERS\PS2.sys 2011/10/11 20:21:34.0062 1812 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/10/11 20:21:38.0265 1812 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/10/11 20:21:39.0046 1812 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/10/11 20:21:40.0031 1812 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/10/11 20:21:40.0906 1812 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/10/11 20:21:42.0187 1812 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/10/11 20:21:43.0234 1812 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/10/11 20:21:44.0312 1812 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/10/11 20:21:45.0421 1812 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/10/11 20:21:46.0640 1812 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/10/11 20:21:47.0750 1812 RimSerPort (b177927edfb8fb8da62ee1dfbcefde54) C:\WINDOWS\system32\DRIVERS\RimSerial.sys 2011/10/11 20:21:49.0250 1812 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys 2011/10/11 20:21:50.0343 1812 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 2011/10/11 20:21:51.0328 1812 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/10/11 20:21:52.0484 1812 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys 2011/10/11 20:21:53.0781 1812 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2011/10/11 20:21:56.0078 1812 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/10/11 20:21:57.0453 1812 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys 2011/10/11 20:21:57.0453 1812 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 2011/10/11 20:21:57.0484 1812 sptd - detected LockedFile.Multi.Generic (1) 2011/10/11 20:21:58.0453 1812 sp_rsdrv2 (8831252bcf05fcfb5abd116a22e552d8) C:\WINDOWS\system32\drivers\sp_rsdrv2.sys 2011/10/11 20:21:59.0484 1812 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/10/11 20:22:00.0171 1812 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/10/11 20:22:00.0812 1812 StillCam (a9573045baa16eab9b1085205b82f1ed) C:\WINDOWS\system32\DRIVERS\serscan.sys 2011/10/11 20:22:01.0140 1812 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/10/11 20:22:01.0484 1812 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/10/11 20:22:03.0218 1812 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/10/11 20:22:03.0734 1812 Tcpip (163096f2d0d3fab77cb577bcfbee59ce) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/10/11 20:22:04.0312 1812 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/10/11 20:22:04.0625 1812 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/10/11 20:22:05.0046 1812 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/10/11 20:22:06.0953 1812 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/10/11 20:22:08.0875 1812 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/10/11 20:22:10.0421 1812 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\WINDOWS\system32\Drivers\usbaapl.sys 2011/10/11 20:22:11.0390 1812 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 2011/10/11 20:22:12.0140 1812 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/10/11 20:22:13.0046 1812 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/10/11 20:22:13.0968 1812 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 2011/10/11 20:22:14.0953 1812 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 2011/10/11 20:22:15.0953 1812 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/10/11 20:22:16.0875 1812 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/10/11 20:22:17.0906 1812 VClone (1cdaa48cb2f7744b8d25650e050766a5) C:\WINDOWS\system32\DRIVERS\VClone.sys 2011/10/11 20:22:18.0921 1812 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/10/11 20:22:20.0593 1812 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/10/11 20:22:21.0859 1812 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/10/11 20:22:23.0359 1812 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/10/11 20:22:25.0921 1812 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 2011/10/11 20:22:26.0609 1812 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2011/10/11 20:22:27.0828 1812 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/10/11 20:22:28.0906 1812 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2011/10/11 20:22:32.0187 1812 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 2011/10/11 20:22:52.0109 1812 Boot (0x1200) (17156945071a2f354bd517b7b622be2d) \Device\Harddisk0\DR0\Partition0 2011/10/11 20:22:52.0281 1812 ================================================================================ 2011/10/11 20:22:52.0281 1812 Scan finished 2011/10/11 20:22:52.0281 1812 ================================================================================ 2011/10/11 20:22:52.0671 2852 Detected object count: 1 2011/10/11 20:22:52.0671 2852 Actual detected object count: 1 2011/10/11 20:23:20.0750 2852 LockedFile.Multi.Generic(sptd) - User select action: Skip 2011/10/11 20:24:57.0656 1468 ================================================================================ 2011/10/11 20:24:57.0656 1468 Scan started 2011/10/11 20:24:57.0656 1468 Mode: Manual; 2011/10/11 20:24:57.0656 1468 ================================================================================ 2011/10/11 20:25:00.0765 1468 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/10/11 20:25:01.0500 1468 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/10/11 20:25:02.0484 1468 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/10/11 20:25:03.0281 1468 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys 2011/10/11 20:25:04.0484 1468 AgereSoftModem (593aefc67283d409f34cc1245d00a509) C:\WINDOWS\system32\DRIVERS\AGRSM.sys 2011/10/11 20:25:07.0937 1468 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 2011/10/11 20:25:10.0078 1468 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/10/11 20:25:10.0781 1468 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/10/11 20:25:11.0828 1468 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/10/11 20:25:12.0250 1468 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/10/11 20:25:12.0812 1468 AVGIDSDriver (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys 2011/10/11 20:25:13.0281 1468 AVGIDSEH (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys 2011/10/11 20:25:13.0890 1468 AVGIDSFilter (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys 2011/10/11 20:25:14.0296 1468 AVGIDSShim (07eba0c11fa1d73b82ecc3255ddfe34d) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys 2011/10/11 20:25:14.0937 1468 Avgldx86 (f4dbbc8d3c5338693da23c59a50f8abc) C:\WINDOWS\system32\DRIVERS\avgldx86.sys 2011/10/11 20:25:15.0406 1468 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys 2011/10/11 20:25:16.0000 1468 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys 2011/10/11 20:25:16.0515 1468 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS\system32\DRIVERS\avgtdix.sys 2011/10/11 20:25:17.0343 1468 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/10/11 20:25:18.0031 1468 Bridge (f934d1b230f84e1d19dd00ac5a7a83ed) C:\WINDOWS\system32\DRIVERS\bridge.sys 2011/10/11 20:25:18.0234 1468 BridgeMP (f934d1b230f84e1d19dd00ac5a7a83ed) C:\WINDOWS\system32\DRIVERS\bridge.sys 2011/10/11 20:25:18.0812 1468 BVRPMPR5 (a0b1aeb65397adcae5a199bd152c107d) C:\WINDOWS\system32\drivers\BVRPMPR5.SYS 2011/10/11 20:25:19.0750 1468 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/10/11 20:25:20.0890 1468 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/10/11 20:25:21.0281 1468 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/10/11 20:25:21.0734 1468 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/10/11 20:25:24.0546 1468 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/10/11 20:25:25.0562 1468 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/10/11 20:25:26.0828 1468 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/10/11 20:25:27.0406 1468 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/10/11 20:25:28.0062 1468 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/10/11 20:25:29.0078 1468 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/10/11 20:25:29.0593 1468 es1371 (a55dd7d8ced5d2624a9ee2dda7be0319) C:\WINDOWS\system32\drivers\es1371mp.sys 2011/10/11 20:25:30.0218 1468 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/10/11 20:25:30.0640 1468 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 2011/10/11 20:25:31.0093 1468 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/10/11 20:25:31.0531 1468 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 2011/10/11 20:25:32.0078 1468 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys 2011/10/11 20:25:32.0593 1468 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/10/11 20:25:33.0031 1468 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/10/11 20:25:33.0468 1468 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys 2011/10/11 20:25:33.0781 1468 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/10/11 20:25:34.0234 1468 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys 2011/10/11 20:25:34.0656 1468 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2011/10/11 20:25:35.0109 1468 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/10/11 20:25:35.0843 1468 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/10/11 20:25:36.0984 1468 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/10/11 20:25:38.0015 1468 ialm (81efe1c5542afb2570758f39ae3b1151) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 2011/10/11 20:25:39.0281 1468 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/10/11 20:25:43.0312 1468 IntcAzAudAddService (d934b46d095285d8e3ee21f739bb4ad0) C:\WINDOWS\system32\drivers\RtkHDAud.sys 2011/10/11 20:25:46.0796 1468 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 2011/10/11 20:25:47.0343 1468 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 2011/10/11 20:25:47.0718 1468 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 2011/10/11 20:25:48.0359 1468 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/10/11 20:25:48.0750 1468 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/10/11 20:25:49.0468 1468 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/10/11 20:25:49.0890 1468 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/10/11 20:25:50.0500 1468 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/10/11 20:25:50.0921 1468 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/10/11 20:25:51.0562 1468 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/10/11 20:25:52.0015 1468 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 2011/10/11 20:25:52.0640 1468 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/10/11 20:25:53.0390 1468 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/10/11 20:25:55.0781 1468 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/10/11 20:25:56.0859 1468 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/10/11 20:25:57.0484 1468 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/10/11 20:25:57.0984 1468 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/10/11 20:25:58.0781 1468 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/10/11 20:25:59.0640 1468 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/10/11 20:26:00.0484 1468 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/10/11 20:26:01.0156 1468 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/10/11 20:26:01.0562 1468 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/10/11 20:26:01.0906 1468 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/10/11 20:26:03.0046 1468 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/10/11 20:26:04.0968 1468 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/10/11 20:26:06.0781 1468 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 2011/10/11 20:26:08.0921 1468 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/10/11 20:26:10.0578 1468 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/10/11 20:26:12.0531 1468 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/10/11 20:26:14.0484 1468 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/10/11 20:26:16.0281 1468 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/10/11 20:26:18.0031 1468 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/10/11 20:26:19.0984 1468 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/10/11 20:26:23.0203 1468 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 2011/10/11 20:26:24.0171 1468 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/10/11 20:26:25.0281 1468 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/10/11 20:26:26.0578 1468 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/10/11 20:26:27.0203 1468 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/10/11 20:26:27.0734 1468 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/10/11 20:26:28.0250 1468 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 2011/10/11 20:26:29.0296 1468 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/10/11 20:26:30.0234 1468 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/10/11 20:26:31.0078 1468 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/10/11 20:26:31.0515 1468 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/10/11 20:26:33.0015 1468 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys 2011/10/11 20:26:33.0890 1468 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/10/11 20:26:39.0234 1468 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/10/11 20:26:39.0890 1468 Ps2 (390c204ced3785609ab24e9c52054a84) C:\WINDOWS\system32\DRIVERS\PS2.sys 2011/10/11 20:26:40.0406 1468 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/10/11 20:26:43.0937 1468 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/10/11 20:26:44.0546 1468 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/10/11 20:26:45.0109 1468 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/10/11 20:26:45.0531 1468 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/10/11 20:26:46.0406 1468 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/10/11 20:26:47.0515 1468 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/10/11 20:26:48.0453 1468 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/10/11 20:26:49.0171 1468 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/10/11 20:26:49.0890 1468 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/10/11 20:26:50.0281 1468 RimSerPort (b177927edfb8fb8da62ee1dfbcefde54) C:\WINDOWS\system32\DRIVERS\RimSerial.sys 2011/10/11 20:26:51.0140 1468 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys 2011/10/11 20:26:51.0562 1468 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 2011/10/11 20:26:52.0125 1468 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/10/11 20:26:52.0546 1468 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\drivers\Serial.sys 2011/10/11 20:26:52.0984 1468 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 2011/10/11 20:26:54.0203 1468 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/10/11 20:26:54.0953 1468 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys 2011/10/11 20:26:54.0953 1468 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505 2011/10/11 20:26:55.0140 1468 sptd - detected LockedFile.Multi.Generic (1) 2011/10/11 20:26:56.0000 1468 sp_rsdrv2 (8831252bcf05fcfb5abd116a22e552d8) C:\WINDOWS\system32\drivers\sp_rsdrv2.sys 2011/10/11 20:26:57.0171 1468 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/10/11 20:26:58.0031 1468 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/10/11 20:26:58.0593 1468 StillCam (a9573045baa16eab9b1085205b82f1ed) C:\WINDOWS\system32\DRIVERS\serscan.sys 2011/10/11 20:26:58.0906 1468 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/10/11 20:26:59.0250 1468 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/10/11 20:27:01.0046 1468 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/10/11 20:27:02.0343 1468 Tcpip (163096f2d0d3fab77cb577bcfbee59ce) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/10/11 20:27:03.0390 1468 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/10/11 20:27:04.0062 1468 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/10/11 20:27:04.0531 1468 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/10/11 20:27:05.0484 1468 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/10/11 20:27:06.0937 1468 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/10/11 20:27:08.0031 1468 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\WINDOWS\system32\Drivers\usbaapl.sys 2011/10/11 20:27:09.0703 1468 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 2011/10/11 20:27:11.0609 1468 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/10/11 20:27:13.0765 1468 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/10/11 20:27:15.0781 1468 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 2011/10/11 20:27:17.0890 1468 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 2011/10/11 20:27:19.0625 1468 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/10/11 20:27:21.0468 1468 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/10/11 20:27:23.0468 1468 VClone (1cdaa48cb2f7744b8d25650e050766a5) C:\WINDOWS\system32\DRIVERS\VClone.sys 2011/10/11 20:27:25.0796 1468 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/10/11 20:27:29.0718 1468 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/10/11 20:27:32.0453 1468 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/10/11 20:27:36.0281 1468 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/10/11 20:27:47.0796 1468 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 2011/10/11 20:27:49.0687 1468 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 2011/10/11 20:27:51.0250 1468 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/10/11 20:27:52.0671 1468 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2011/10/11 20:27:54.0359 1468 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 2011/10/11 20:28:03.0531 1468 Boot (0x1200) (17156945071a2f354bd517b7b622be2d) \Device\Harddisk0\DR0\Partition0 2011/10/11 20:28:03.0546 1468 ================================================================================ 2011/10/11 20:28:03.0546 1468 Scan finished 2011/10/11 20:28:03.0546 1468 ================================================================================ 2011/10/11 20:28:03.0765 0172 Detected object count: 1 2011/10/11 20:28:03.0765 0172 Actual detected object count: 1 2011/10/11 20:29:00.0609 0172 LockedFile.Multi.Generic(sptd) - User select action: Skip

Im sorry i dont remember how to do the dds scan or what program i use can you re-tell me how to do that. Sorry