This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Ping.exe conquers my processor 100% [Closed]

25 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Ok, here we go. I have the same problem, as Bulladin… I follow these steps, I run TDSS Killer, found something, and (WHAT A RELIEF) noticed that my processor is normal after reboot!!! :D I can show you my log from TDSS Killer C:WINDOWSsystem32Driverssptd.sys 17:25:35.0437 0140 Suspicious file (NoAccess): C:WINDOWSsystem32Driverssptd.sys. md5: d15da1ba189770d93eea2d7e18f95af9 17:25:35.0437 0140 sptd ( LockedFile.Multi.Generic ) - warning 17:25:35.0437 0140 sptd - detected LockedFile.Multi.Generic (1) 17:25:35.0453 0140 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) and C:WINDOWSsystem32DRIVERSserial.sys 17:25:35.0203 0140 Suspicious file (Forged): C:WINDOWSsystem32DRIVERSserial.sys. Real md5: dd76589bf5c93b770c48ad9ea0d9ebdd, Fake md5: cca207a8896d4c6a0c9ce29a4ae411a7 17:25:35.0203 0140 Serial ( Rootkit.Win32.ZAccess.k ) - infected 17:25:35.0203 0140 Serial - detected Rootkit.Win32.ZAccess.k (0) 17:25:35.0234 0140 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) I think that second was f*****g me… Should I run second application (OTL)? Oh, yes, I didn't mentioned that I have Norton Antivirus 2009 and Malware-Bytes Anti-Malware… Thanks a lot! Hvala puno! ^_^
Hello and Posted Image

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
  • Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
  • Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
  • Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!


I'm glad you were able to get things running a little better than before. Let's do a couple of scans and see if there is anything else that needs to be addressed.

Download and Run DDS by sUBs

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Save both reports to your desktop.
—————————————————

Please Please copy / paste the scan reults.

DDS.txt and Attach.txt


Download and Run GMER

[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that may have been checked. Uncheck the following …
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one - make sure it is UNCHECKED)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and paste it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

Ok, here we go. I have the same problem, as Bulladin… I follow these steps, I run TDSS Killer, found something, and (WHAT A RELIEF) noticed that my processor is normal after reboot!!! :D I can show you my log from TDSS Killer

C:WINDOWSsystem32Driverssptd.sys
17:25:35.0437 0140 Suspicious file (NoAccess): C:WINDOWSsystem32Driverssptd.sys. md5: d15da1ba189770d93eea2d7e18f95af9
17:25:35.0437 0140 sptd ( LockedFile.Multi.Generic ) - warning
17:25:35.0437 0140 sptd - detected LockedFile.Multi.Generic (1)
17:25:35.0453 0140 sr (76bb022c2fb6902fd5bdd4f78fc13a5d)

and

C:WINDOWSsystem32DRIVERSserial.sys
17:25:35.0203 0140 Suspicious file (Forged): C:WINDOWSsystem32DRIVERSserial.sys. Real md5: dd76589bf5c93b770c48ad9ea0d9ebdd, Fake md5: cca207a8896d4c6a0c9ce29a4ae411a7
17:25:35.0203 0140 Serial ( Rootkit.Win32.ZAccess.k ) - infected
17:25:35.0203 0140 Serial - detected Rootkit.Win32.ZAccess.k (0)
17:25:35.0234 0140 Sfloppy (8e6b8c671615d126fdc553d1e2de5562)

I think that second was f*****g me…

Should I run second application (OTL)?

Oh, yes, I didn't mentioned that I have Norton Antivirus 2009 and Malware-Bytes Anti-Malware… Thanks a lot! Hvala puno! ^_^

Hello, Doris! I am back with some results! DDS tool worked, and here the logs:

dds.txt

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by [removed] at 14:37:12 on 2011-11-16
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2813.1845 [GMT 1:00]
.
AV: Norton AntiVirus *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\WINDOWS\system32\dgdersvc.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Documents and Settings\All Users.WINDOWS\Application Data\DatacardService\HWDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\All Users.WINDOWS\Application Data\Telenor Internet\OnlineUpdate\ouc.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telenor Internet\Telenor Internet.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AutorunRemover\AutorunRemover.exe
C:\Program Files\NewSoft\Presto! PVR\Monitor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAir.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Program Files\Telegent Systems\TLG2300\Drivers\tlgirmonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.rs/
uURLSearchHooks: SearchHook Class: {bc86e1ab-eda5-4059-938f-ce307b0c6f0a} - c:\program files\devicevm\browser configuration utility\AddressBarSearch.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\adobe acrobat 7.0\activex\AcroIEHelper.dll
BHO: HistoryTriggerBHO Class: {21a88cb9-84d2-4020-a2d1-b25a21034884} - c:\program files\lg electronics\lg pc suite iv\linkair\LinkAirBrowserHelper.dll
BHO: IE to GetRight Helper: {31ff080d-12a3-439a-a2ef-4ba95a3148e8} - c:\program files\getright\xx2gr.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\IPSBHO.DLL
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: QUICKfind BHO Object: {c08df07a-3e49-4e25-9ab0-d3882835f153} - c:\progra~1\idm\quickf~1\plugins\IEHelp.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 120\axcmd.exe" /automount
uRun: [LG LinkAir] c:\program files\lg electronics\lg pc suite iv\linkair\LinkAir.exe
uRun: [SandboxieControl] "c:\program files\sandboxie\SbieCtrl.exe"
uRun: [IRMonitor] c:\program files\telegent systems\tlg2300\drivers\tlgirmonitor.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Facebook Update] "c:\documents and settings\damir.athlon2\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [BCU] "c:\program files\devicevm\browser configuration utility\BCU.exe"
mRun: [DAEMON Tools-1033] "c:\program files\d-tools\daemon.exe" -lang 1033
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [AutorunRemover.exe] c:\program files\autorunremover\AutorunRemover.exe -Hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ChangeFilterMerit] "c:\program files\newsoft\presto! pvr\ChangeFilterMerit.exe"
mRun: [Presto! PVR Monitor] "c:\program files\newsoft\presto! pvr\Monitor.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: Convert link target to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download with GetRight Pro - c:\program files\getright\GRdownload.htm
IE: E&xport; to Microsoft Excel - c:\progra~1\mi699f~1\office11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: LG Link Air Option - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/209
IE: LG Link Air Save to Mobile Document Folder - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/210
IE: LG Link Air Save to Mobile Memo - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/208
IE: LG Link Air Save to Mobile Photo Album - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/206
IE: LG Link Air Set as Mobile Wallpaper - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/205
IE: Open with GetRight Pro Browser - c:\program files\getright\GRbrowse.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi699f~1\office11\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
TCP: Interfaces\{D081F83B-D259-42B1-AC5E-6D84506B2751} : NameServer = 77.105.0.19,77.105.0.18
Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - c:\program files\common files\binarysense\hlAPP.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
============= SERVICES / DRIVERS ===============
.
R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [2010-8-28 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [2010-8-28 5248]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1000000.07d\SymEFA.sys [2011-10-26 309296]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\nav\1000000.07d\BHDrvx86.sys [2011-10-26 254512]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nav\1000000.07d\ccHPx86.sys [2011-10-26 362544]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20080826.006\IDSxpx86.sys [2011-10-26 274808]
R2 BCUService;Browser Configuration Utility Service;c:\program files\devicevm\browser configuration utility\BCUService.exe [2010-8-28 219360]
R2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2010-5-25 95568]
R2 ES lite Service;ES lite Service for program management.;c:\program files\gigabyte\easysaver\essvr.exe [2010-8-28 68136]
R2 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\common files\binarysense\hldasvc.exe [2009-4-10 818840]
R2 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\all users.windows\application data\datacardservice\HWDeviceService.exe [2011-3-14 271712]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-15 366152]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\ccSvcHst.exe [2011-10-26 115560]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-7-6 1051968]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-5-25 18136]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-11-15 106104]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2011-10-24 235392]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [2011-10-24 73216]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [2009-9-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [2009-9-29 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [2009-9-29 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-15 22216]
R3 NAVENG;NAVENG;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111114.037\naveng.sys [2011-11-15 86136]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111114.037\navex15.sys [2011-11-15 1576312]
R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2011-10-12 131856]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2010-2-25 10064]
S2 .norton2009Reset;Norton 2009 Reset;c:\documents and settings\all users.windows\application data\norton\Norton2009Reset.exe [2011-10-26 280833]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]
S2 Telenor Internet. RunOuc;Telenor Internet. OUC;c:\program files\telenor internet\updatedog\ouc.exe [2011-10-24 246112]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2011-3-6 30312]
S3 AODDriver;AODDriver;c:\program files\gigabyte\et6\i386\AODDriver.sys [2009-2-22 7168]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\atihdxp3.sys –> c:\windows\system32\drivers\AtihdXP3.sys [?]
S3 EraserUtilDrv11113;EraserUtilDrv11113;\??\c:\program files\common files\symantec shared\eengine\eraserutildrv11113.sys –> c:\program files\common files\symantec shared\eengine\EraserUtilDrv11113.sys [?]
S3 etdrv;etdrv;c:\windows\etdrv.sys [2010-8-28 17488]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [2011-10-24 102784]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-1-20 36608]
S3 GPU-Z;GPU-Z;c:\docume~1\damir~1.ath\locals~1\temp\GPU-Z.sys [2011-9-19 23936]
S3 PAC207;Webcam 1200;c:\windows\system32\drivers\PFC027.SYS [2010-8-29 611584]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2011-3-6 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2011-3-6 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2011-3-6 123648]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-3-6 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-3-6 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-3-6 121576]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2011-3-6 98152]
S3 teleTV;TLG2300 USB Hybrid TV Service;c:\windows\system32\drivers\teleTV.sys [2011-10-31 286976]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-11-15 06:02:36 ——– d—–w- c:\documents and settings\damir.athlon2\application data\Malwarebytes
2011-11-15 06:02:29 ——– d—–w- c:\documents and settings\all users.windows\application data\Malwarebytes
2011-11-15 06:02:26 22216 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-11-15 06:02:26 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-11-14 14:04:48 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\NVIDIA Corporation
2011-11-14 11:02:29 ——– d—–w- c:\program files\common files\Steam
2011-11-13 16:56:50 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Identities
2011-11-10 21:37:16 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Temp
2011-11-10 21:36:56 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Facebook
2011-11-05 11:17:06 36734 —-a-w- c:\windows\system32\OggDSuninst.exe
2011-10-31 19:28:58 ——– d—–w- c:\program files\common files\DivX Shared
2011-10-31 19:25:04 ——– d—–w- c:\program files\DivX
2011-10-31 19:23:42 ——– d—–w- c:\documents and settings\all users.windows\application data\DivX
2011-10-31 18:27:00 ——– d—–r- c:\program files\Skype
2011-10-31 16:47:08 57344 —-a-w- c:\windows\system32\teleFilter.dll
2011-10-31 16:47:08 51972 —-a-w- c:\windows\system32\tlg2300_firmware.bin
2011-10-31 16:47:08 286976 —-a-w- c:\windows\system32\drivers\teleTV.sys
2011-10-31 16:47:08 114688 —-a-w- c:\windows\system32\MVPlugin.dll
2011-10-31 16:47:08 ——– d—–w- c:\program files\Telegent Systems
2011-10-31 16:46:55 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Newsoft
2011-10-31 16:46:27 ——– d—–w- c:\program files\common files\NewSoft
2011-10-31 16:46:20 ——– d—–w- c:\program files\NewSoft
2011-10-31 11:22:12 ——– d—–r- C:\Sandbox
2011-10-31 11:03:42 ——– d—–w- c:\program files\Sandboxie
2011-10-30 23:41:03 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight Pro
2011-10-30 23:40:55 ——– d—–w- c:\program files\GetRight
2011-10-30 23:22:20 ——– d—–w- c:\documents and settings\all users.windows\application data\GetRight
2011-10-30 23:17:42 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight
2011-10-28 18:13:12 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\ACD Systems
2011-10-28 18:13:11 ——– d—–w- c:\documents and settings\damir.athlon2\application data\ACD Systems
2011-10-28 18:12:35 ——– d—–w- c:\documents and settings\all users.windows\application data\ACD Systems
2011-10-28 18:12:30 ——– d—–w- c:\program files\common files\ACD Systems
2011-10-28 18:12:30 ——– d—–w- c:\program files\ACD Systems
2011-10-28 14:16:22 ——– d—–w- c:\program files\Rovio
2011-10-28 14:03:27 ——– d-sh–w- c:\documents and settings\damir.athlon2\IECompatCache
2011-10-26 21:48:04 35888 —-a-r- c:\windows\system32\drivers\SymIM.sys
2011-10-26 21:48:01 60808 —-a-w- c:\windows\system32\S32EVNT1.DLL
2011-10-26 21:48:01 124464 —-a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-10-26 21:48:01 ——– d—–w- c:\program files\Symantec
2011-10-26 21:48:01 ——– d—–w- c:\program files\common files\Symantec Shared
2011-10-26 21:01:23 ——– d—–w- c:\windows\ie8updates
2011-10-26 20:16:14 ——– d—–w- c:\program files\Free YouTube Downloader
2011-10-26 14:57:29 ——– d—–w- c:\documents and settings\all users.windows\application data\Symantec
2011-10-25 22:32:41 473600 -c—-w- c:\windows\system32\dllcache\fastprox.dll
2011-10-25 22:32:41 401408 -c—-w- c:\windows\system32\dllcache\rpcss.dll
2011-10-25 22:32:41 284160 -c—-w- c:\windows\system32\dllcache\pdh.dll
2011-10-25 22:32:41 227840 -c—-w- c:\windows\system32\dllcache\wmiprvse.exe
2011-10-25 22:32:41 110592 -c—-w- c:\windows\system32\dllcache\services.exe
2011-10-25 22:32:40 617472 -c—-w- c:\windows\system32\dllcache\advapi32.dll
2011-10-25 22:32:40 453120 -c—-w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-10-25 18:39:07 272128 -c—-w- c:\windows\system32\dllcache\bthport.sys
2011-10-25 18:35:14 953856 -c—-w- c:\windows\system32\dllcache\mfc40u.dll
2011-10-25 18:31:35 456320 -c—-w- c:\windows\system32\dllcache\mrxsmb.sys
2011-10-25 18:31:26 617472 -c—-w- c:\windows\system32\dllcache\comctl32.dll
2011-10-25 18:31:02 471552 -c—-w- c:\windows\system32\dllcache\aclayers.dll
2011-10-25 18:28:06 744448 -c—-w- c:\windows\system32\dllcache\helpsvc.exe
2011-10-25 18:27:24 40960 -c—-w- c:\windows\system32\dllcache\ndproxy.sys
2011-10-25 13:46:02 81920 -c—-w- c:\windows\system32\dllcache\fontsub.dll
2011-10-25 13:46:02 119808 -c—-w- c:\windows\system32\dllcache\t2embed.dll
2011-10-25 13:34:10 153088 -c—-w- c:\windows\system32\dllcache\triedit.dll
2011-10-25 13:23:46 139656 -c—-w- c:\windows\system32\dllcache\rdpwd.sys
2011-10-25 13:23:44 602112 -c—-w- c:\windows\system32\dllcache\msfeeds.dll
2011-10-25 13:23:43 743424 -c—-w- c:\windows\system32\dllcache\iedvtool.dll
2011-10-25 13:23:43 55296 -c—-w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-10-25 13:23:43 247808 -c—-w- c:\windows\system32\dllcache\ieproxy.dll
2011-10-25 13:23:42 2000384 -c—-w- c:\windows\system32\dllcache\iertutil.dll
2011-10-25 13:23:42 12800 -c—-w- c:\windows\system32\dllcache\xpshims.dll
2011-10-25 13:22:15 105472 -c—-w- c:\windows\system32\dllcache\mup.sys
2011-10-25 13:22:07 1172480 -c—-w- c:\windows\system32\dllcache\msxml3.dll
2011-10-25 13:21:54 203136 -c—-w- c:\windows\system32\dllcache\rmcast.sys
2011-10-25 13:20:33 331776 -c—-w- c:\windows\system32\dllcache\msadce.dll
2011-10-25 13:15:14 3558912 -c—-w- c:\windows\system32\dllcache\moviemk.exe
2011-10-25 13:10:00 337408 -c—-w- c:\windows\system32\dllcache\netapi32.dll
2011-10-25 13:06:59 692736 -c—-w- c:\windows\system32\dllcache\inetcomm.dll
2011-10-25 13:04:38 718336 -c—-w- c:\windows\system32\dllcache\ntdll.dll
2011-10-25 13:04:36 2192768 -c—-w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-10-25 13:04:36 2148864 -c—-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-10-25 13:04:36 2069376 -c—-w- c:\windows\system32\dllcache\ntkrnlpa.exe
2011-10-25 13:04:36 2027008 -c—-w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-10-25 13:04:18 218112 -c—-w- c:\windows\system32\dllcache\wordpad.exe
2011-10-25 13:04:15 10496 -c—-w- c:\windows\system32\dllcache\ndistapi.sys
2011-10-25 13:03:49 45568 -c—-w- c:\windows\system32\dllcache\wab.exe
2011-10-25 13:03:09 590848 -c—-w- c:\windows\system32\dllcache\rpcrt4.dll
2011-10-25 13:03:09 5120 —-a-w- c:\windows\system32\xpsp4res.dll
2011-10-25 00:32:27 ——– d—–w- c:\windows\system32\PreInstall
2011-10-25 00:32:25 ——– d–h–w- c:\windows\$hf_mig$
2011-10-24 22:58:16 ——– d—–w- c:\windows\system32\SoftwareDistribution
2011-10-24 16:16:39 ——– d—–w- c:\program files\Telenor Internet
2011-10-24 16:15:54 ——– d—–w- c:\documents and settings\all users.windows\application data\DatacardService
2011-10-24 00:46:18 669184 —-a-w- c:\windows\system32\pbsvc.exe
2011-10-24 00:21:48 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-23 23:03:14 ——– d-sh–w- c:\documents and settings\damir.athlon2\PrivacIE
2011-10-23 23:01:36 ——– d-sh–w- c:\documents and settings\damir.athlon2\IETldCache
2011-10-23 22:57:08 ——– dc-h–w- c:\windows\ie8
2011-10-23 16:45:12 ——– d-sh–w- c:\documents and settings\damir.athlon2\UserData
2011-10-17 22:16:22 ——– d—–w- c:\program files\BinarySense
2011-10-17 21:49:30 ——– d—–w- c:\documents and settings\damir.athlon2\application data\BinarySense
2011-10-17 21:49:21 ——– d—–w- c:\program files\common files\BinarySense
.
==================== Find3M ====================
.
2011-11-15 16:44:02 17488 —-a-w- c:\windows\gdrv.sys
2011-11-15 16:30:26 64512 —-a-w- c:\windows\system32\drivers\serial.sys
2011-10-29 16:31:01 2516 –sha-w- c:\windows\system32\KGyGaAvL.sys
2011-10-26 21:47:55 198192 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symtdi.sys
2011-10-26 21:47:54 89904 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symfw.sys
2011-10-26 21:47:54 43696 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\srtspx.sys
2011-10-26 21:47:54 40496 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symndisv.sys
2011-10-26 21:47:54 37424 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symndis.sys
2011-10-26 21:47:54 34608 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symids.sys
2011-10-26 21:47:54 309296 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\SymEFA.sys
2011-10-26 21:47:54 305712 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\srtsp.sys
2011-10-26 21:47:54 24752 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symredrv.sys
2011-10-26 21:47:54 12976 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symdns.sys
2011-10-26 21:47:53 362544 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\ccHPx86.sys
2011-10-26 21:47:53 254512 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\BHDrvx86.sys
2011-10-08 14:40:35 17488 —-a-w- c:\windows\etdrv.sys
2011-10-08 14:39:33 24944 —-a-w- c:\windows\system32\drivers\GVTDrv.sys
2011-09-26 09:41:20 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41:20 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 09:41:14 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2011-09-09 09:12:13 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-06 13:20:51 1858944 —-a-w- c:\windows\system32\win32k.sys
2011-08-29 20:18:26 189248 —-a-w- c:\windows\system32\PnkBstrB.exe
2011-08-29 20:18:25 75136 —-a-w- c:\windows\system32\PnkBstrA.exe
2011-08-22 23:48:55 916480 —-a-w- c:\windows\system32\wininet.dll
2011-08-22 23:48:54 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-08-22 23:48:54 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-08-22 11:56:39 385024 —-a-w- c:\windows\system32\html.iec
.
============= FINISH: 14:37:25.21 ===============




and attach.txt


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 8/28/2010 11:39:12 AM
System Uptime: 11/15/2011 5:43:30 PM (21 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA785GT-UD3H
Processor: AMD Athlon™ II X3 445 Processor | Socket M2 | 3114/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 146 GiB total, 14.611 GiB free.
D: is FIXED (NTFS) - 319 GiB total, 15.389 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
J: is CDROM ()
K: is CDROM (CDFS)
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Service: RTLE8023xp
.
==== System Restore Points ===================
.
RP433: 8/30/2011 8:27:54 PM - System Checkpoint
RP434: 9/1/2011 4:22:57 AM - System Checkpoint
RP435: 9/2/2011 6:47:53 PM - System Checkpoint
RP436: 9/3/2011 4:09:21 PM - Removed STREET FIGHTER IV.
RP437: 9/4/2011 6:08:57 PM - System Checkpoint
RP438: 9/6/2011 4:15:52 AM - System Checkpoint
RP439: 9/6/2011 4:21:18 AM - Installed DirectX 9.0
RP440: 9/6/2011 4:23:23 AM - Installed DirectX
RP441: 9/6/2011 9:55:01 AM - Installed DirectX 9.0
RP442: 9/7/2011 1:25:29 PM - System Checkpoint
RP443: 9/9/2011 4:26:52 AM - System Checkpoint
RP444: 9/10/2011 4:47:16 AM - System Checkpoint
RP445: 9/12/2011 12:22:40 AM - System Checkpoint
RP446: 9/12/2011 8:22:07 PM - Printer Driver Microsoft Office Document Image Writer Installed
RP447: 9/12/2011 8:23:01 PM - Configured Microsoft Office Enterprise 2007
RP448: 9/14/2011 12:31:55 AM - System Checkpoint
RP449: 9/15/2011 12:42:35 AM - System Checkpoint
RP450: 9/16/2011 1:59:32 PM - System Checkpoint
RP451: 9/18/2011 1:54:34 PM - System Checkpoint
RP452: 9/19/2011 1:46:40 AM - Installed Catalyst Control Center - Branding
RP453: 9/19/2011 1:47:10 AM - Installed ccc-core-static
RP454: 9/19/2011 1:47:32 AM - Installed Catalyst Control Center Graphics Previews Common
RP455: 9/19/2011 1:47:46 AM - Installed CCC Help English
RP456: 9/19/2011 1:47:57 AM - Installed Catalyst Control Center InstallProxy
RP457: 9/19/2011 1:48:13 AM - Installed ccc-utility
RP458: 9/20/2011 10:05:36 PM - System Checkpoint
RP459: 9/20/2011 11:37:07 PM - Installed The Witcher Enhanced Edition
RP460: 9/20/2011 11:50:43 PM - Installed DirectX
RP461: 9/21/2011 7:37:25 AM - Removed ATI Catalyst Install Manager
RP462: 9/21/2011 2:17:45 PM - Removed TuneUp Utilities 2009
RP463: 9/21/2011 2:34:24 PM - Removed ATI Stream SDK v2 Developer
RP464: 9/21/2011 2:37:05 PM - Removed ATI Catalyst Install Manager
RP465: 9/21/2011 3:23:11 PM - Removed TuneUp Utilities
RP466: 9/21/2011 3:23:23 PM - Removed TuneUp Utilities Language Pack (en-GB)
RP467: 9/21/2011 3:23:39 PM - Installed TuneUp Utilities
RP468: 9/22/2011 9:38:31 PM - System Checkpoint
RP469: 9/25/2011 5:26:06 PM - Removed ATI Catalyst Install Manager
RP470: 9/25/2011 5:38:54 PM - Installed DirectX
RP471: 10/2/2011 2:38:02 AM - Removed The Witcher Enhanced Edition
RP472: 10/3/2011 2:55:06 AM - System Checkpoint
RP473: 10/4/2011 3:20:48 AM - System Checkpoint
RP474: 10/5/2011 3:39:33 AM - System Checkpoint
RP475: 10/5/2011 10:40:25 PM - Installed Windows XP Service Pack 3.
RP476: 10/6/2011 11:31:06 PM - System Checkpoint
RP477: 10/7/2011 11:58:30 PM - System Checkpoint
RP478: 10/9/2011 1:41:33 AM - System Checkpoint
RP479: 10/10/2011 2:34:37 AM - System Checkpoint
RP480: 10/11/2011 7:32:58 PM - System Checkpoint
RP481: 10/15/2011 12:07:07 AM - System Checkpoint
RP482: 10/16/2011 12:38:36 AM - System Checkpoint
RP483: 10/16/2011 7:40:35 PM - Removed Assassin's Creed Brotherhood
RP484: 10/17/2011 9:40:02 PM - System Checkpoint
RP485: 10/17/2011 11:49:18 PM - Installed HDDlife Pro 3.1
RP486: 10/18/2011 12:02:49 AM - Removed HDDlife
RP487: 10/18/2011 12:03:13 AM - Removed HDDlife
RP488: 10/18/2011 12:03:49 AM - Removed HDDlife
RP489: 10/18/2011 12:04:10 AM - Removed HDDlife
RP490: 10/18/2011 12:04:25 AM - Removed HDDlife
RP491: 10/18/2011 12:05:17 AM - Removed HDDlife
RP492: 10/18/2011 12:05:51 AM - Removed HDDlife
RP493: 10/18/2011 12:06:45 AM - Removed HDDlife
RP494: 10/18/2011 12:07:20 AM - Removed HDDlife
RP495: 10/18/2011 12:08:28 AM - Removed HDDlife
RP496: 10/18/2011 12:09:32 AM - Removed HDDlife
RP497: 10/18/2011 12:11:12 AM - Removed HDDlife Pro 3.1
RP498: 10/18/2011 12:11:28 AM - Removed HDDlife
RP499: 10/18/2011 12:11:56 AM - Removed HDDlife
RP500: 10/18/2011 12:12:04 AM - Removed HDDlife
RP501: 10/18/2011 12:12:42 AM - Removed HDDlife
RP502: 10/18/2011 12:13:11 AM - Removed HDDlife
RP503: 10/18/2011 12:13:54 AM - Removed HDDlife
RP504: 10/18/2011 12:16:19 AM - Installed HDDlife Pro 3.1
RP505: 10/19/2011 12:27:23 AM - System Checkpoint
RP506: 10/20/2011 1:04:10 AM - System Checkpoint
RP507: 10/22/2011 1:27:59 AM - System Checkpoint
RP508: 10/23/2011 2:08:34 AM - System Checkpoint
RP509: 10/24/2011 12:57:55 AM - Installed Windows Internet Explorer 8.
RP510: 10/24/2011 6:17:14 PM - Installed Windows XP Wdf01007.
RP511: 10/25/2011 2:32:18 AM - Software Distribution Service 3.0
RP512: 10/26/2011 2:37:45 AM - System Checkpoint
RP513: 10/26/2011 11:00:34 PM - Software Distribution Service 3.0
RP514: 10/28/2011 2:49:35 AM - System Checkpoint
RP515: 10/28/2011 4:12:41 PM - Removed Angry Birds
RP516: 10/28/2011 4:16:17 PM - Installed Angry Birds
RP517: 10/28/2011 8:12:06 PM - Installed ACDSee 10 Photo Manager.
RP518: 10/30/2011 1:24:53 AM - System Checkpoint
RP519: 10/31/2011 5:23:47 AM - System Checkpoint
RP520: 10/31/2011 5:46:19 PM - Installed Presto! PVR
RP521: 11/1/2011 7:01:19 PM - System Checkpoint
RP522: 11/2/2011 10:07:44 PM - System Checkpoint
RP523: 11/4/2011 12:57:13 AM - System Checkpoint
RP524: 11/5/2011 3:50:19 AM - System Checkpoint
RP525: 11/6/2011 4:30:38 AM - System Checkpoint
RP526: 11/7/2011 5:31:39 AM - System Checkpoint
RP527: 11/8/2011 6:30:34 AM - System Checkpoint
RP528: 11/9/2011 7:30:34 AM - System Checkpoint
RP529: 11/10/2011 7:59:09 AM - System Checkpoint
RP530: 11/11/2011 8:58:05 AM - System Checkpoint
RP531: 11/12/2011 10:51:35 AM - System Checkpoint
RP532: 11/13/2011 11:32:25 AM - System Checkpoint
RP533: 11/14/2011 12:02:23 PM - Installed Steam
RP534: 11/14/2011 4:56:40 PM - Removed Steam
RP535: 11/15/2011 3:12:04 PM - Restore Operation
RP536: 11/15/2011 3:16:18 PM - Restore Operation
.
==== Installed Programs ======================
.
@BIOS Ver.2.06
2007 Microsoft Office Suite Service Pack 1 (SP1)
A Magnetic Adventure
ACD/Labs Software in C:\Program Files\ACDFREE11\
ACDSee 10 Photo Manager
Adobe Acrobat 7.0 Professional
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Creative Suite 2
Adobe Flash Player 11 ActiveX
Adobe GoLive CS2
Adobe Help Center 1.0
Adobe Illustrator CS2
Adobe InDesign CS2
Adobe Photoshop CS2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
Adobe Version Cue CS2
AMD APP SDK Runtime
AMD Processor Driver
Angry Birds
ArcSoft PhotoImpression 5
ArcSoft VideoImpression 2
ATI Catalyst Install Manager
ATI Parental Control & Encoder
Atomica Deluxe 2.52
Autorun Virus Remover 2.3
BLAZBLUE -CALAMITY TRIGGER-
Browser Configuration Utility
C-Media PCI Audio Device
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cheatbook Database 2010
Command & Conquer Generals
Command and ConquerTM Generals Zero Hour
Corel Graphics - Windows Shell Extension
CorelDRAW Graphics Suite X3
Counter-Strike 1.6
DAEMON Tools
Direct Show Ogg Vorbis Filter (remove only)
Dynomite Deluxe 2.71
Easy CD-DA Extractor 11
Easy Tune 6 B09.0918.1
EasySaver B9.0904.1
EN
Facebook Video Calling 1.0.0.8953
Finale 2006
FontNav
Free YouTube Downloader 3.3.115
GetRight Pro
GOM Player
Hama Black Force Pad
HDDlife
HDDlife Pro 3.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
HP USB Disk Storage Format Tool
Java™ 6 Update 17
K-Lite Codec Pack 5.1.0 (Full)
Kies
Kyodai Mahjongg 2006 v1.21
LG Android Platform Drivers
LG Bluetooth Drivers
LG PC Suite IV
LG USB Modem Drivers
Longman Dictionary of Contemporary English 5th Edition
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Visual Studio Tools for Applications 2.0 - ENU
Microsoft Visual Studio Tools for Applications 2.0 Runtime
Microsoft WSE 3.0 Runtime
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Mummy Maze Deluxe 1.1
Mystery Case Files - 13th Skull Collector's Edition [UPDATED]
Native Instruments Finale GPO
Need for Speed™ Most Wanted
Nero 7 Ultra Edition
Nokia Connectivity Cable Driver
Nokia Lifeblog 2.1
Nokia MTP driver
Nokia N73 highlights
Nokia Nseries Skin for Microsoft Windows Media Player
Nokia PC Suite
Nokia themes for your device
Norton AntiVirus
NVIDIA PhysX
PC Connectivity Solution
PCskola
PowerDVD
Presto! PVR
Pro Evolution Soccer 2011
PunkBuster Services
QUICKfind server v1.1
QuickTime Alternative 3.2.2
Real Alternative 2.0.2
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Rocket Mania 1.01
SAMSUNG Mobile Composite Device Software
Samsung Mobile Modem Device Software
Samsung Mobile phone USB driver Software
Samsung New PC Studio
Samsung New PC Studio USB Driver Installer
SAMSUNG USB Driver for Mobile Phones
Sandboxie 3.60 (32-bit)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
Shank
Skins
Skype™ 5.5
SolSuite 2011 v11.5
Star Wars Empire at War
Star Wars Empire at War Forces of Corruption
Suite Specific
Super Street Fighter IV: Arcade Edition
Telenor Internet
The Sims™ 3
TLG2300 IR 2.2.1
Tom Clancy's H.A.W.X v1.0 Eng
TuneUp Utilities
TuneUp Utilities Language Pack (en-GB)
Ubisoft Game Launcher
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2616676-v2)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Manager
vanBasco's Karaoke Player
VBA
VC80CRTRedist - 8.0.50727.6195
Webcam 1200
WebFldrs XP
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3
WinRAR archiver
Zuma's Revenge!
.
==== Event Viewer Messages From Past Week ========
.
11/15/2011 7:11:43 AM, error: Service Control Manager [7034] - The update_services service terminated unexpectedly. It has done this 1 time(s).
11/15/2011 6:36:27 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FB6D9 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/15/2011 2:56:35 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file ping.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
11/14/2011 7:46:53 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FB6D9 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/14/2011 4:19:08 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F83F8 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/14/2011 3:15:26 PM, error: Service Control Manager [7023] - The Network Location Awareness (NLA) service terminated with the following error: The specified procedure could not be found.
11/14/2011 12:04:37 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FD271 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/10/2011 9:05:07 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FD271 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/10/2011 7:53:27 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FD271 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================



…And about second tool GMER, unfortunately it didn't worked. I run it few times, but allways the same thing - mouse pointer freeze, and then appears vertical stripes in color (1st time was pink, 2nd grey, except 3rd time - black screen!). All three times I was forced to reset PC… Maybe it interferes with graphic driver, don't know…
Thanks in advance! Hvala unapred! :-)
Let me take a look at these logs, in the mean time, since GMER didn't run can you please try this:



Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.

  • Download TDSSKiller and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.


    🖼Click to load external image (Posted Image)

  • If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.


    🖼Click to load external image (Posted Image)

  • If a suspicious file is detected, the default action will be Skip, click on Continue.


    🖼Click to load external image (Posted Image)

  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.


    🖼Click to load external image (Posted Image)

  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Hello, here is log! 17:08:08.0828 5492 TDSS rootkit removing tool [removed] Nov 16 2011 12:18:50 17:08:09.0203 5492 ============================================================ 17:08:09.0203 5492 Current date / time: 2011/11/20 17:08:09.0203 17:08:09.0203 5492 SystemInfo: 17:08:09.0203 5492 17:08:09.0203 5492 OS Version: 5.1.2600 ServicePack: 3.0 17:08:09.0203 5492 Product type: Workstation 17:08:09.0203 5492 ComputerName: ATHLON2 17:08:09.0203 5492 UserName: DAMIR 17:08:09.0203 5492 Windows directory: C:\WINDOWS 17:08:09.0203 5492 System windows directory: C:\WINDOWS 17:08:09.0203 5492 Processor architecture: Intel x86 17:08:09.0203 5492 Number of processors: 3 17:08:09.0203 5492 Page size: 0x1000 17:08:09.0203 5492 Boot type: Normal boot 17:08:09.0203 5492 ============================================================ 17:08:12.0781 5492 Initialize success 17:08:23.0437 2480 ============================================================ 17:08:23.0437 2480 Scan started 17:08:23.0437 2480 Mode: Manual; 17:08:23.0437 2480 ============================================================ 17:08:24.0765 2480 Abiosdsk - ok 17:08:24.0781 2480 abp480n5 - ok 17:08:24.0828 2480 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 17:08:24.0843 2480 ACPI - ok 17:08:24.0875 2480 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 17:08:24.0906 2480 ACPIEC - ok 17:08:24.0921 2480 adpu160m - ok 17:08:24.0953 2480 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 17:08:24.0953 2480 aec - ok 17:08:25.0000 2480 Afc (a7b8a3a79d35215d798a300df49ed23f) C:\WINDOWS\system32\drivers\Afc.sys 17:08:25.0000 2480 Afc - ok 17:08:25.0046 2480 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 17:08:25.0046 2480 AFD - ok 17:08:25.0046 2480 Aha154x - ok 17:08:25.0062 2480 aic78u2 - ok 17:08:25.0062 2480 aic78xx - ok 17:08:25.0078 2480 AliIde - ok 17:08:25.0093 2480 AmdPPM (033448d435e65c4bd72e70521fd05c76) C:\WINDOWS\system32\DRIVERS\AmdPPM.sys 17:08:25.0093 2480 AmdPPM - ok 17:08:25.0109 2480 amsint - ok 17:08:25.0156 2480 androidusb (dd8d9c597af7cd2f6b70a3d6a4a1acea) C:\WINDOWS\system32\Drivers\ssadadb.sys 17:08:25.0187 2480 androidusb - ok 17:08:25.0343 2480 AODDriver (21ca6a013a75fcf6f930d4b08803973a) C:\Program Files\GIGABYTE\ET6\i386\AODDriver.sys 17:08:25.0421 2480 AODDriver - ok 17:08:25.0484 2480 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 17:08:25.0484 2480 Arp1394 - ok 17:08:25.0484 2480 asc - ok 17:08:25.0500 2480 asc3350p - ok 17:08:25.0500 2480 asc3550 - ok 17:08:25.0625 2480 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 17:08:25.0656 2480 AsyncMac - ok 17:08:25.0781 2480 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 17:08:25.0781 2480 atapi - ok 17:08:25.0843 2480 Atdisk - ok 17:08:25.0968 2480 ati2mtag (8e280e25a7a3ca8f5f35946cdf41d434) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys 17:08:26.0000 2480 ati2mtag - ok 17:08:26.0140 2480 AtiHDAudioService - ok 17:08:26.0203 2480 atksgt (f9c24d25d9ff29f894995a64812b4d85) C:\WINDOWS\system32\DRIVERS\atksgt.sys 17:08:26.0203 2480 atksgt - ok 17:08:26.0218 2480 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 17:08:26.0234 2480 Atmarpc - ok 17:08:26.0265 2480 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 17:08:26.0265 2480 audstub - ok 17:08:26.0281 2480 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 17:08:26.0296 2480 Beep - ok 17:08:26.0343 2480 BHDrvx86 (55b34eb2e36552d93915fb71a5f26310) C:\WINDOWS\system32\drivers\NAV\1000000.07D\BHDrvx86.sys 17:08:26.0343 2480 BHDrvx86 - ok 17:08:26.0390 2480 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 17:08:26.0406 2480 cbidf2k - ok 17:08:26.0437 2480 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 17:08:26.0468 2480 CCDECODE - ok 17:08:26.0531 2480 ccHP (c8754a6d7f9ecae6b0f666d44e704942) C:\WINDOWS\system32\drivers\NAV\1000000.07D\ccHPx86.sys 17:08:26.0531 2480 ccHP - ok 17:08:26.0531 2480 cd20xrnt - ok 17:08:26.0546 2480 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 17:08:26.0546 2480 Cdaudio - ok 17:08:26.0578 2480 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 17:08:26.0578 2480 Cdfs - ok 17:08:26.0593 2480 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 17:08:26.0593 2480 Cdrom - ok 17:08:26.0609 2480 Changer - ok 17:08:26.0625 2480 CmdIde - ok 17:08:26.0718 2480 cmuda3 (a0f7d6b070f15ead9f4231b51b246e4c) C:\WINDOWS\system32\drivers\cmudax3.sys 17:08:26.0718 2480 cmuda3 - ok 17:08:26.0734 2480 Cpqarray - ok 17:08:26.0750 2480 d347bus (5776322f93cdb91086111f5ffbfda2a0) C:\WINDOWS\system32\DRIVERS\d347bus.sys 17:08:26.0750 2480 d347bus - ok 17:08:26.0765 2480 d347prt (b49f79ace459763f4e0380071be9cb45) C:\WINDOWS\system32\Drivers\d347prt.sys 17:08:26.0765 2480 d347prt - ok 17:08:26.0765 2480 dac2w2k - ok 17:08:26.0781 2480 dac960nt - ok 17:08:26.0828 2480 dgderdrv (6216fd7fd227de454238a702b218cec7) C:\WINDOWS\system32\drivers\dgderdrv.sys 17:08:26.0828 2480 dgderdrv - ok 17:08:26.0828 2480 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 17:08:26.0828 2480 Disk - ok 17:08:26.0859 2480 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 17:08:26.0890 2480 dmboot - ok 17:08:26.0906 2480 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 17:08:26.0906 2480 dmio - ok 17:08:26.0921 2480 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 17:08:26.0921 2480 dmload - ok 17:08:26.0937 2480 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 17:08:26.0937 2480 DMusic - ok 17:08:26.0953 2480 dpti2o - ok 17:08:26.0984 2480 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 17:08:26.0984 2480 drmkaud - ok 17:08:27.0062 2480 eeCtrl (75e8b69f28c813675b16db357f20720f) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 17:08:27.0062 2480 eeCtrl - ok 17:08:27.0062 2480 EraserUtilDrv11113 - ok 17:08:27.0093 2480 EraserUtilRebootDrv (720b18d76de9e603b626dfcd6f1fca7c) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 17:08:27.0093 2480 EraserUtilRebootDrv - ok 17:08:27.0109 2480 etdrv (3af0ae042afe486b22644cd3fbebf2e2) C:\WINDOWS\etdrv.sys 17:08:27.0406 2480 etdrv - ok 17:08:27.0515 2480 ewusbnet (fb54f67974d13d73be3e2f1df042d295) C:\WINDOWS\system32\DRIVERS\ewusbnet.sys 17:08:27.0515 2480 ewusbnet - ok 17:08:27.0531 2480 ew_hwusbdev (57c171ea22f0a7f068fcb0caedd1e8e7) C:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys 17:08:27.0562 2480 ew_hwusbdev - ok 17:08:27.0593 2480 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 17:08:27.0593 2480 Fastfat - ok 17:08:27.0609 2480 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 17:08:27.0609 2480 Fdc - ok 17:08:27.0640 2480 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 17:08:27.0640 2480 Fips - ok 17:08:27.0640 2480 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 17:08:27.0640 2480 Flpydisk - ok 17:08:27.0671 2480 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 17:08:27.0671 2480 FltMgr - ok 17:08:27.0703 2480 FsUsbExDisk (cbe5f69a5e5b918225f420ba748f3742) C:\WINDOWS\system32\FsUsbExDisk.SYS 17:08:27.0703 2480 FsUsbExDisk - ok 17:08:27.0718 2480 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 17:08:27.0734 2480 Fs_Rec - ok 17:08:27.0734 2480 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 17:08:27.0734 2480 Ftdisk - ok 17:08:27.0750 2480 gdrv (d556cb79967e92b5cc69686d16c1d846) C:\WINDOWS\gdrv.sys 17:08:27.0750 2480 gdrv - ok 17:08:27.0765 2480 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 17:08:27.0765 2480 Gpc - ok 17:08:27.0843 2480 GPU-Z (297b5bd44cfaeda423c048efb2ef27bd) C:\DOCUME~1\DAMIR~1.ATH\LOCALS~1\Temp\GPU-Z.sys 17:08:27.0890 2480 GPU-Z - ok 17:08:27.0968 2480 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 17:08:27.0968 2480 HDAudBus - ok 17:08:27.0984 2480 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 17:08:27.0984 2480 hidusb - ok 17:08:28.0000 2480 hpn - ok 17:08:28.0015 2480 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys 17:08:28.0015 2480 HTTP - ok 17:08:28.0031 2480 huawei_enumerator (f44461e66f1b7dd267957fe9baa63ed0) C:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys 17:08:28.0031 2480 huawei_enumerator - ok 17:08:28.0062 2480 hwdatacard (f547f862b8907f1bcbd9b72a72a6449e) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys 17:08:28.0062 2480 hwdatacard - ok 17:08:28.0078 2480 i2omgmt - ok 17:08:28.0078 2480 i2omp - ok 17:08:28.0125 2480 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 17:08:28.0125 2480 i8042prt - ok 17:08:28.0234 2480 IDSxpx86 (19354d7dc4da05ce6d94e298a3b6db2c) C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20080826.006\IDSxpx86.sys 17:08:28.0234 2480 IDSxpx86 - ok 17:08:28.0265 2480 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 17:08:28.0265 2480 Imapi - ok 17:08:28.0281 2480 ini910u - ok 17:08:28.0296 2480 IntelIde - ok 17:08:28.0343 2480 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 17:08:28.0359 2480 Ip6Fw - ok 17:08:28.0406 2480 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 17:08:28.0406 2480 IpFilterDriver - ok 17:08:28.0421 2480 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 17:08:28.0421 2480 IpInIp - ok 17:08:28.0468 2480 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 17:08:28.0468 2480 IpNat - ok 17:08:28.0468 2480 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 17:08:28.0484 2480 IPSec - ok 17:08:28.0484 2480 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 17:08:28.0500 2480 IRENUM - ok 17:08:28.0515 2480 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 17:08:28.0515 2480 isapnp - ok 17:08:28.0531 2480 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 17:08:28.0531 2480 Kbdclass - ok 17:08:28.0546 2480 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 17:08:28.0546 2480 kbdhid - ok 17:08:28.0593 2480 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 17:08:28.0593 2480 kmixer - ok 17:08:28.0625 2480 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 17:08:28.0625 2480 KSecDD - ok 17:08:28.0640 2480 lbrtfdc - ok 17:08:28.0656 2480 LgBttPort (4dd47b5af0b24871ebb9efc012a7474e) C:\WINDOWS\system32\DRIVERS\lgbtport.sys 17:08:28.0656 2480 LgBttPort - ok 17:08:28.0671 2480 lgbusenum (1d038ca6c529203087a990e5e97887b4) C:\WINDOWS\system32\DRIVERS\lgbtbus.sys 17:08:28.0671 2480 lgbusenum - ok 17:08:28.0703 2480 LGVMODEM (26f1976a330195d62a6224c76968cf0d) C:\WINDOWS\system32\DRIVERS\lgvmodem.sys 17:08:28.0703 2480 LGVMODEM - ok 17:08:28.0750 2480 lirsgt (8ccf9ed46d52af1375875f74a91ffacf) C:\WINDOWS\system32\DRIVERS\lirsgt.sys 17:08:28.0750 2480 lirsgt - ok 17:08:28.0781 2480 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 17:08:28.0781 2480 MBAMProtector - ok 17:08:28.0796 2480 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 17:08:28.0812 2480 mnmdd - ok 17:08:28.0828 2480 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 17:08:28.0828 2480 Modem - ok 17:08:28.0843 2480 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 17:08:28.0843 2480 Mouclass - ok 17:08:28.0875 2480 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 17:08:28.0875 2480 mouhid - ok 17:08:28.0890 2480 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 17:08:28.0890 2480 MountMgr - ok 17:08:28.0906 2480 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys 17:08:28.0937 2480 MPE - ok 17:08:28.0937 2480 mraid35x - ok 17:08:28.0968 2480 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 17:08:28.0968 2480 MRxDAV - ok 17:08:29.0015 2480 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 17:08:29.0015 2480 MRxSmb - ok 17:08:29.0046 2480 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 17:08:29.0046 2480 Msfs - ok 17:08:29.0078 2480 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 17:08:29.0093 2480 MSKSSRV - ok 17:08:29.0109 2480 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 17:08:29.0125 2480 MSPCLOCK - ok 17:08:29.0140 2480 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 17:08:29.0140 2480 MSPQM - ok 17:08:29.0171 2480 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 17:08:29.0171 2480 mssmbios - ok 17:08:29.0187 2480 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 17:08:29.0203 2480 MSTEE - ok 17:08:29.0234 2480 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 17:08:29.0234 2480 Mup - ok 17:08:29.0250 2480 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 17:08:29.0250 2480 NABTSFEC - ok 17:08:29.0375 2480 NAVENG (862f55824ac81295837b0ab63f91071f) C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20111114.037\NAVENG.SYS 17:08:29.0375 2480 NAVENG - ok 17:08:29.0453 2480 NAVEX15 (529d571b551cb9da44237389b936f1ae) C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20111114.037\NAVEX15.SYS 17:08:29.0453 2480 NAVEX15 - ok 17:08:29.0531 2480 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 17:08:29.0531 2480 NDIS - ok 17:08:29.0578 2480 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 17:08:29.0593 2480 NdisIP - ok 17:08:29.0609 2480 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 17:08:29.0609 2480 NdisTapi - ok 17:08:29.0625 2480 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 17:08:29.0625 2480 Ndisuio - ok 17:08:29.0656 2480 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 17:08:29.0656 2480 NdisWan - ok 17:08:29.0687 2480 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 17:08:29.0687 2480 NDProxy - ok 17:08:29.0703 2480 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 17:08:29.0703 2480 NetBIOS - ok 17:08:29.0718 2480 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 17:08:29.0718 2480 NetBT - ok 17:08:29.0750 2480 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 17:08:29.0750 2480 NIC1394 - ok 17:08:29.0796 2480 Nokia USB Generic (5abb6b2461c4eb0afdf1bf7f03963d59) C:\WINDOWS\system32\drivers\nmwcdc.sys 17:08:29.0812 2480 Nokia USB Generic - ok 17:08:29.0859 2480 Nokia USB Modem (353c16d21eec1f11306270040b3713c1) C:\WINDOWS\system32\drivers\nmwcdcm.sys 17:08:29.0875 2480 Nokia USB Modem - ok 17:08:29.0921 2480 Nokia USB Phone Parent (f5b1200c75b160c81e7e48cc0489aa5e) C:\WINDOWS\system32\drivers\nmwcd.sys 17:08:29.0921 2480 Nokia USB Phone Parent - ok 17:08:29.0953 2480 Nokia USB Port (353c16d21eec1f11306270040b3713c1) C:\WINDOWS\system32\drivers\nmwcdcj.sys 17:08:29.0968 2480 Nokia USB Port - ok 17:08:30.0000 2480 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 17:08:30.0000 2480 Npfs - ok 17:08:30.0015 2480 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 17:08:30.0015 2480 Ntfs - ok 17:08:30.0031 2480 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 17:08:30.0031 2480 Null - ok 17:08:30.0062 2480 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 17:08:30.0078 2480 NwlnkFlt - ok 17:08:30.0109 2480 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 17:08:30.0109 2480 NwlnkFwd - ok 17:08:30.0125 2480 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 17:08:30.0125 2480 ohci1394 - ok 17:08:30.0187 2480 PAC207 (509039b85c95e6e85cb7a8e3465fb702) C:\WINDOWS\system32\DRIVERS\PFC027.SYS 17:08:30.0218 2480 PAC207 - ok 17:08:30.0234 2480 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 17:08:30.0234 2480 Parport - ok 17:08:30.0250 2480 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 17:08:30.0250 2480 PartMgr - ok 17:08:30.0281 2480 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 17:08:30.0281 2480 ParVdm - ok 17:08:30.0312 2480 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys 17:08:30.0328 2480 pccsmcfd - ok 17:08:30.0359 2480 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 17:08:30.0359 2480 PCI - ok 17:08:30.0375 2480 PCIDump - ok 17:08:30.0406 2480 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 17:08:30.0406 2480 PCIIde - ok 17:08:30.0453 2480 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 17:08:30.0468 2480 Pcmcia - ok 17:08:30.0468 2480 PDCOMP - ok 17:08:30.0484 2480 PDFRAME - ok 17:08:30.0500 2480 PDRELI - ok 17:08:30.0500 2480 PDRFRAME - ok 17:08:30.0515 2480 perc2 - ok 17:08:30.0515 2480 perc2hib - ok 17:08:30.0609 2480 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 17:08:30.0625 2480 PptpMiniport - ok 17:08:30.0640 2480 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 17:08:30.0640 2480 Processor - ok 17:08:30.0656 2480 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 17:08:30.0656 2480 PSched - ok 17:08:30.0671 2480 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 17:08:30.0671 2480 Ptilink - ok 17:08:30.0703 2480 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 17:08:30.0718 2480 PxHelp20 - ok 17:08:30.0718 2480 ql1080 - ok 17:08:30.0734 2480 Ql10wnt - ok 17:08:30.0734 2480 ql12160 - ok 17:08:30.0750 2480 ql1240 - ok 17:08:30.0750 2480 ql1280 - ok 17:08:30.0765 2480 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 17:08:30.0765 2480 RasAcd - ok 17:08:30.0781 2480 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 17:08:30.0781 2480 Rasl2tp - ok 17:08:30.0796 2480 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 17:08:30.0796 2480 RasPppoe - ok 17:08:30.0812 2480 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 17:08:30.0812 2480 Raspti - ok 17:08:30.0828 2480 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 17:08:30.0828 2480 Rdbss - ok 17:08:30.0828 2480 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 17:08:30.0828 2480 RDPCDD - ok 17:08:30.0843 2480 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 17:08:30.0843 2480 rdpdr - ok 17:08:30.0890 2480 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 17:08:30.0906 2480 RDPWD - ok 17:08:30.0937 2480 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 17:08:30.0937 2480 redbook - ok 17:08:31.0046 2480 RTHDMIAzAudService (3cf6631543c743c29a369287ea67ffe6) C:\WINDOWS\system32\drivers\RtKHDMI.sys 17:08:31.0093 2480 RTHDMIAzAudService - ok 17:08:31.0125 2480 RTLE8023xp (79b4fe884c18dd82d5449f6b6026d092) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 17:08:31.0156 2480 RTLE8023xp - ok 17:08:31.0218 2480 SbieDrv (a069a12344ac0e5c2004b259196139bb) C:\Program Files\Sandboxie\SbieDrv.sys 17:08:31.0218 2480 SbieDrv - ok 17:08:31.0250 2480 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 17:08:31.0281 2480 Secdrv - ok 17:08:31.0296 2480 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 17:08:31.0296 2480 serenum - ok 17:08:31.0312 2480 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 17:08:31.0312 2480 Serial - ok 17:08:31.0390 2480 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 17:08:31.0390 2480 Sfloppy - ok 17:08:31.0390 2480 Simbad - ok 17:08:31.0437 2480 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 17:08:31.0468 2480 SLIP - ok 17:08:31.0468 2480 Sparrow - ok 17:08:31.0500 2480 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 17:08:31.0500 2480 splitter - ok 17:08:31.0546 2480 sptd (d15da1ba189770d93eea2d7e18f95af9) C:\WINDOWS\system32\Drivers\sptd.sys 17:08:31.0546 2480 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: d15da1ba189770d93eea2d7e18f95af9 17:08:31.0546 2480 sptd ( LockedFile.Multi.Generic ) - warning 17:08:31.0546 2480 sptd - detected LockedFile.Multi.Generic (1) 17:08:31.0578 2480 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 17:08:31.0578 2480 sr - ok 17:08:31.0640 2480 SRTSP (2ec8453564e62320b574622e6cc8fdd0) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SRTSP.SYS 17:08:31.0640 2480 SRTSP - ok 17:08:31.0656 2480 SRTSPX (54d3efe2674a1140ae8b7a6bc59c6661) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SRTSPX.SYS 17:08:31.0656 2480 SRTSPX - ok 17:08:31.0703 2480 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 17:08:31.0718 2480 Srv - ok 17:08:31.0750 2480 ssadbus (406776fe3c2b66796bac1a7afb9ac8a1) C:\WINDOWS\system32\DRIVERS\ssadbus.sys 17:08:31.0750 2480 ssadbus - ok 17:08:31.0765 2480 ssadmdfl (b19532d015a5d295e2aa34bb521202cf) C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys 17:08:31.0765 2480 ssadmdfl - ok 17:08:31.0781 2480 ssadmdm (2aebf9108e6f435458b9499c27394da4) C:\WINDOWS\system32\DRIVERS\ssadmdm.sys 17:08:31.0781 2480 ssadmdm - ok 17:08:31.0796 2480 ssadserd (28f893c9b4e98dee5ae3c24db56b1b11) C:\WINDOWS\system32\DRIVERS\ssadserd.sys 17:08:31.0828 2480 ssadserd - ok 17:08:31.0859 2480 ss_bbus (3f0164fbc0bd1adbd02df9759181451a) C:\WINDOWS\system32\DRIVERS\ss_bbus.sys 17:08:31.0890 2480 ss_bbus - ok 17:08:31.0921 2480 ss_bmdfl (b89d62206034e5fe573c80a24dd55675) C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys 17:08:31.0953 2480 ss_bmdfl - ok 17:08:31.0968 2480 ss_bmdm (1ed0fcea586fe2a416ee15196e5631dd) C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys 17:08:31.0984 2480 ss_bmdm - ok 17:08:32.0046 2480 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 17:08:32.0062 2480 streamip - ok 17:08:32.0093 2480 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 17:08:32.0093 2480 swenum - ok 17:08:32.0109 2480 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 17:08:32.0109 2480 swmidi - ok 17:08:32.0109 2480 symc810 - ok 17:08:32.0125 2480 symc8xx - ok 17:08:32.0171 2480 SYMDNS (9e46c40328fa8e0d1b6ab690d90245fb) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMDNS.SYS 17:08:32.0171 2480 SYMDNS - ok 17:08:32.0203 2480 SymEFA (832cc9713c869ce00119321fb7df66d7) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMEFA.SYS 17:08:32.0218 2480 SymEFA - ok 17:08:32.0234 2480 SymEvent (06b95820df51502099a8a15c93e87986) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS 17:08:32.0265 2480 SymEvent - ok 17:08:32.0312 2480 SYMFW (827302b3458e6637d81bae0bf5ace743) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMFW.SYS 17:08:32.0312 2480 SYMFW - ok 17:08:32.0328 2480 SYMIDS (726ccda5c2a0bc0fcbc0af7a8788cd61) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMIDS.SYS 17:08:32.0328 2480 SYMIDS - ok 17:08:32.0359 2480 SymIM (e9abe92091b108aa5650c18c9fc77356) C:\WINDOWS\system32\DRIVERS\SymIM.sys 17:08:32.0359 2480 SymIM - ok 17:08:32.0375 2480 SymIMMP (e9abe92091b108aa5650c18c9fc77356) C:\WINDOWS\system32\DRIVERS\SymIM.sys 17:08:32.0375 2480 SymIMMP - ok 17:08:32.0390 2480 SYMNDIS (5fb13374287ad80b86bb9fc480f2c82d) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMNDIS.SYS 17:08:32.0390 2480 SYMNDIS - ok 17:08:32.0406 2480 SYMREDRV (13c101e4c3b69aee59a9a3dcdcda9ae3) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMREDRV.SYS 17:08:32.0406 2480 SYMREDRV - ok 17:08:32.0421 2480 SYMTDI (c942a67ffc1238d6d96d9c9a44610340) C:\WINDOWS\system32\drivers\NAV\1000000.07D\SYMTDI.SYS 17:08:32.0421 2480 SYMTDI - ok 17:08:32.0421 2480 sym_hi - ok 17:08:32.0437 2480 sym_u3 - ok 17:08:32.0468 2480 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 17:08:32.0468 2480 sysaudio - ok 17:08:32.0515 2480 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 17:08:32.0531 2480 Tcpip - ok 17:08:32.0640 2480 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 17:08:32.0671 2480 TDPIPE - ok 17:08:32.0843 2480 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 17:08:33.0031 2480 TDTCP - ok 17:08:33.0062 2480 teleTV (4edd396615ac0d51e9307b9e33a0279c) C:\WINDOWS\system32\DRIVERS\teleTV.sys 17:08:33.0093 2480 teleTV - ok 17:08:33.0109 2480 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 17:08:33.0109 2480 TermDD - ok 17:08:33.0125 2480 TosIde - ok 17:08:33.0203 2480 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys 17:08:33.0203 2480 TuneUpUtilitiesDrv - ok 17:08:33.0234 2480 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 17:08:33.0250 2480 Udfs - ok 17:08:33.0265 2480 ultra - ok 17:08:33.0296 2480 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 17:08:33.0296 2480 Update - ok 17:08:33.0343 2480 usbbus (8ef48ff1c23b1ce6f96d09a45959eb20) C:\WINDOWS\system32\DRIVERS\lgusbbus.sys 17:08:33.0375 2480 usbbus - ok 17:08:33.0390 2480 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 17:08:33.0390 2480 usbccgp - ok 17:08:33.0406 2480 UsbDiag (a0e24c5c2d0cff04bbd3753a72fae80b) C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys 17:08:33.0421 2480 UsbDiag - ok 17:08:33.0437 2480 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 17:08:33.0437 2480 usbehci - ok 17:08:33.0453 2480 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 17:08:33.0453 2480 usbhub - ok 17:08:33.0468 2480 USBModem (cc09a1132b1f6a8362107cc134e90d0b) C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys 17:08:33.0468 2480 USBModem - ok 17:08:33.0484 2480 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys 17:08:33.0484 2480 usbohci - ok 17:08:33.0515 2480 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 17:08:33.0531 2480 usbscan - ok 17:08:33.0562 2480 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 17:08:33.0562 2480 USBSTOR - ok 17:08:33.0593 2480 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 17:08:33.0593 2480 VgaSave - ok 17:08:33.0593 2480 ViaIde - ok 17:08:33.0625 2480 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 17:08:33.0625 2480 VolSnap - ok 17:08:33.0671 2480 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 17:08:33.0671 2480 Wanarp - ok 17:08:33.0703 2480 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys 17:08:33.0703 2480 Wdf01000 - ok 17:08:33.0718 2480 WDICA - ok 17:08:33.0734 2480 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 17:08:33.0750 2480 wdmaud - ok 17:08:33.0781 2480 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys 17:08:33.0781 2480 WmiAcpi - ok 17:08:33.0828 2480 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 17:08:33.0859 2480 WpdUsb - ok 17:08:33.0937 2480 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 17:08:33.0953 2480 WSTCODEC - ok 17:08:33.0984 2480 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 17:08:34.0000 2480 WudfPf - ok 17:08:34.0015 2480 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 17:08:34.0031 2480 WudfRd - ok 17:08:34.0156 2480 {95808DC4-FA4A-4c74-92FE-5B863F82066B} (8098180b3f6c430a4e60333bc036f936) C:\Program Files\CyberLink\PowerDVD\000.fcl 17:08:34.0156 2480 {95808DC4-FA4A-4c74-92FE-5B863F82066B} - ok 17:08:34.0171 2480 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 17:08:34.0265 2480 \Device\Harddisk0\DR0 - ok 17:08:34.0281 2480 Boot (0x1200) (cd7e96d7fdac4f17826bf0921fa6d9f3) \Device\Harddisk0\DR0\Partition0 17:08:34.0281 2480 \Device\Harddisk0\DR0\Partition0 - ok 17:08:34.0296 2480 Boot (0x1200) (1ac80274d6b81b741fa420cb4733d3b1) \Device\Harddisk0\DR0\Partition1 17:08:34.0296 2480 \Device\Harddisk0\DR0\Partition1 - ok 17:08:34.0296 2480 ============================================================ 17:08:34.0296 2480 Scan finished 17:08:34.0296 2480 ============================================================ 17:08:34.0312 6072 Detected object count: 1 17:08:34.0312 6072 Actual detected object count: 1 17:09:50.0359 6072 sptd ( LockedFile.Multi.Generic ) - skipped by user 17:09:50.0359 6072 sptd ( LockedFile.Multi.Generic ) - User select action: Skip 17:10:09.0031 2836 Deinitialize success
Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]
  • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

  • Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Hello, sorry for unanswering, I'm a busy man… I run ComboFix, it did something! Will send you log tonight, or in the morning! And please, don't close my topic… Thanks, Doris! :-D Hvala!
Ok, this is what's happening now in my PC. ComboFix obviously solved the problem, but I didn't find the log… I just found folder of ComboFix with the icon of My Computer in Local Disk C:\ :blink: . By the way, PC works perfect :thumbup: . Should I run TDSS Killer to check situation for any case?
Let's run Combofix again and see if you can get a log. If there was no log available, it may not have run fully.


Disable your AntiVirus and AntiSpyware applications as they will interfere with our tools and the removal.

Double click ComboFix.exe to run it. It will prompt you that an update is available - please allow it to update.

Follow all prompts. Post the C:\ComboFix.txt when it has completed.

How is the machine behaving now?
Hello, again! :) Ok. Malware Bytes application turned off, Norton AV also. Internet connection is on. I run ComboFix, then appears blue MS DOS screen with autoscan title. Scanning for infected files, it lasts 10 minutes, bla, bla… Completed stage_1…2…3…etc. 50th is the last, then shows "deleting files:" and then PC suddenly restarts. When system is raised, window shows up with Microsoft Windows title and the massage: "The system has recovered from a serious error." That's it… No trace of ComboFix log under C:/… This is my 3rd attempt… But, I must say that a PC is running perfect! ;)
Let's run another DDS log, which should be on your desktop still:


  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Save both reports to your desktop.
—————————————————

Please Please copy / paste the scan reults.

DDS.txt and Attach.txt
Hello! Logs are here!


DDS.txt


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by [removed] at 3:14:49 on 2011-11-28
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2813.1857 [GMT 1:00]
.
AV: Norton AntiVirus *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Documents and Settings\All Users.WINDOWS\Application Data\DatacardService\HWDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\All Users.WINDOWS\Application Data\Telenor Internet\OnlineUpdate\ouc.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telenor Internet\Telenor Internet.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AutorunRemover\AutorunRemover.exe
C:\Program Files\NewSoft\Presto! PVR\Monitor.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAir.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Program Files\Telegent Systems\TLG2300\Drivers\tlgirmonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.rs/
uURLSearchHooks: SearchHook Class: {bc86e1ab-eda5-4059-938f-ce307b0c6f0a} - c:\program files\devicevm\browser configuration utility\AddressBarSearch.dll
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\adobe acrobat 7.0\activex\AcroIEHelper.dll
BHO: HistoryTriggerBHO Class: {21a88cb9-84d2-4020-a2d1-b25a21034884} - c:\program files\lg electronics\lg pc suite iv\linkair\LinkAirBrowserHelper.dll
BHO: IE to GetRight Helper: {31ff080d-12a3-439a-a2ef-4ba95a3148e8} - c:\program files\getright\xx2gr.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\IPSBHO.DLL
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: QUICKfind BHO Object: {c08df07a-3e49-4e25-9ab0-d3882835f153} - c:\progra~1\idm\quickf~1\plugins\IEHelp.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 120\axcmd.exe" /automount
uRun: [LG LinkAir] c:\program files\lg electronics\lg pc suite iv\linkair\LinkAir.exe
uRun: [SandboxieControl] "c:\program files\sandboxie\SbieCtrl.exe"
uRun: [IRMonitor] c:\program files\telegent systems\tlg2300\drivers\tlgirmonitor.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Facebook Update] "c:\documents and settings\damir.athlon2\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
uRun: [KiesHelper] c:\program files\samsung\kies\KiesHelper.exe /s
uRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe
uRun: [KiesPDLR] c:\program files\samsung\kies\external\firmwareupdate\KiesPDLR.exe
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
mRun: [BCU] "c:\program files\devicevm\browser configuration utility\BCU.exe"
mRun: [DAEMON Tools-1033] "c:\program files\d-tools\daemon.exe" -lang 1033
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [AutorunRemover.exe] c:\program files\autorunremover\AutorunRemover.exe -Hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ChangeFilterMerit] "c:\program files\newsoft\presto! pvr\ChangeFilterMerit.exe"
mRun: [Presto! PVR Monitor] "c:\program files\newsoft\presto! pvr\Monitor.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [Monitor] c:\windows\pixart\pac207\Monitor.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: Convert link target to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download with GetRight Pro - c:\program files\getright\GRdownload.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport; to Microsoft Excel - c:\progra~1\mi699f~1\office11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: LG Link Air Option - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/209
IE: LG Link Air Save to Mobile Document Folder - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/210
IE: LG Link Air Save to Mobile Memo - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/208
IE: LG Link Air Save to Mobile Photo Album - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/206
IE: LG Link Air Set as Mobile Wallpaper - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/205
IE: Open with GetRight Pro Browser - c:\program files\getright\GRbrowse.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi699f~1\office11\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
TCP: Interfaces\{D081F83B-D259-42B1-AC5E-6D84506B2751} : NameServer = 77.105.0.19,77.105.0.18
Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - c:\program files\common files\binarysense\hlAPP.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\damir.athlon2\application data\mozilla\firefox\profiles\wlf9unad.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.rs/
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\damir.athlon2\local settings\application data\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll
.
============= SERVICES / DRIVERS ===============
.
R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [2010-8-28 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [2010-8-28 5248]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1000000.07d\SymEFA.sys [2011-10-26 309296]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\nav\1000000.07d\BHDrvx86.sys [2011-10-26 254512]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nav\1000000.07d\ccHPx86.sys [2011-10-26 362544]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-11-14 101616]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20080826.006\IDSxpx86.sys [2011-10-26 274808]
R2 BCUService;Browser Configuration Utility Service;c:\program files\devicevm\browser configuration utility\BCUService.exe [2010-8-28 219360]
R2 ES lite Service;ES lite Service for program management.;c:\program files\gigabyte\easysaver\essvr.exe [2010-8-28 68136]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\fsusbexservice.exe [2011-11-21 233472]
R2 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\common files\binarysense\hldasvc.exe [2009-4-10 818840]
R2 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\all users.windows\application data\datacardservice\HWDeviceService.exe [2011-3-14 271712]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-15 366152]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\ccSvcHst.exe [2011-10-26 115560]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-7-6 1051968]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-11-15 106104]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2011-10-24 235392]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-1-20 36608]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [2011-10-24 73216]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [2009-9-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [2009-9-29 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [2009-9-29 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-15 22216]
R3 NAVENG;NAVENG;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111127.005\naveng.sys [2011-11-28 86136]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111127.005\navex15.sys [2011-11-28 1576312]
R3 PAC207;Webcam 1200;c:\windows\system32\drivers\PFC027.SYS [2010-8-29 611584]
R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2011-10-12 131856]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2010-2-25 10064]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]
S2 Telenor Internet. RunOuc;Telenor Internet. OUC;c:\program files\telenor internet\updatedog\ouc.exe [2011-10-24 246112]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2011-3-6 30312]
S3 AODDriver;AODDriver;c:\program files\gigabyte\et6\i386\AODDriver.sys [2009-2-22 7168]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\atihdxp3.sys –> c:\windows\system32\drivers\AtihdXP3.sys [?]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-5-25 20032]
S3 EraserUtilDrv11113;EraserUtilDrv11113;\??\c:\program files\common files\symantec shared\eengine\eraserutildrv11113.sys –> c:\program files\common files\symantec shared\eengine\EraserUtilDrv11113.sys [?]
S3 etdrv;etdrv;c:\windows\etdrv.sys [2010-8-28 17488]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [2011-10-24 102784]
S3 GPU-Z;GPU-Z;\??\c:\docume~1\damir~1.ath\locals~1\temp\gpu-z.sys –> c:\docume~1\damir~1.ath\locals~1\temp\GPU-Z.sys [?]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2011-3-6 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2011-3-6 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2011-3-6 123648]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-3-6 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-3-6 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-3-6 121576]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2011-3-6 98152]
S3 teleTV;TLG2300 USB Hybrid TV Service;c:\windows\system32\drivers\teleTV.sys [2011-10-31 286976]
.
=============== Created Last 30 ================
.
2011-11-28 00:17:12 ——– d—–w- c:\documents and settings\damir.athlon2\application data\IDM
2011-11-28 00:17:12 ——– d—–w- c:\documents and settings\damir.athlon2\application data\DMCache
2011-11-28 00:17:02 ——– d—–w- c:\program files\Internet Download Manager
2011-11-27 21:00:35 ——– d-s—w- C:\ComboFix
2011-11-24 12:12:41 ——– d-sha-r- C:\cmdcons
2011-11-24 12:09:11 98816 —-a-w- c:\windows\sed.exe
2011-11-24 12:09:11 518144 —-a-w- c:\windows\SWREG.exe
2011-11-24 12:09:11 256000 —-a-w- c:\windows\PEV.exe
2011-11-24 12:09:11 208896 —-a-w- c:\windows\MBR.exe
2011-11-21 18:34:46 233472 —-a-w- c:\windows\system32\fsusbexservice.exe
2011-11-19 23:43:07 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Samsung
2011-11-19 23:28:48 4659712 —-a-w- c:\windows\system32\Redemption.dll
2011-11-18 17:27:50 ——– d—–w- c:\program files\Easy Icon Maker
2011-11-15 06:02:36 ——– d—–w- c:\documents and settings\damir.athlon2\application data\Malwarebytes
2011-11-15 06:02:29 ——– d—–w- c:\documents and settings\all users.windows\application data\Malwarebytes
2011-11-15 06:02:26 22216 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-11-15 06:02:26 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-11-14 14:04:48 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\NVIDIA Corporation
2011-11-14 13:39:02 101616 —-a-w- c:\windows\system32\drivers\idmtdi.sys
2011-11-14 11:02:29 ——– d—–w- c:\program files\common files\Steam
2011-11-13 16:56:50 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Identities
2011-11-10 21:37:16 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Temp
2011-11-10 21:36:56 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Facebook
2011-11-05 11:17:06 36734 —-a-w- c:\windows\system32\OggDSuninst.exe
2011-10-31 19:28:58 ——– d—–w- c:\program files\common files\DivX Shared
2011-10-31 19:25:04 ——– d—–w- c:\program files\DivX
2011-10-31 19:23:42 ——– d—–w- c:\documents and settings\all users.windows\application data\DivX
2011-10-31 18:27:00 ——– d—–r- c:\program files\Skype
2011-10-31 16:47:08 57344 —-a-w- c:\windows\system32\teleFilter.dll
2011-10-31 16:47:08 51972 —-a-w- c:\windows\system32\tlg2300_firmware.bin
2011-10-31 16:47:08 286976 —-a-w- c:\windows\system32\drivers\teleTV.sys
2011-10-31 16:47:08 114688 —-a-w- c:\windows\system32\MVPlugin.dll
2011-10-31 16:47:08 ——– d—–w- c:\program files\Telegent Systems
2011-10-31 16:46:55 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Newsoft
2011-10-31 16:46:27 ——– d—–w- c:\program files\common files\NewSoft
2011-10-31 16:46:20 ——– d—–w- c:\program files\NewSoft
2011-10-31 11:22:12 ——– d—–r- C:\Sandbox
2011-10-31 11:03:42 ——– d—–w- c:\program files\Sandboxie
2011-10-30 23:41:03 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight Pro
2011-10-30 23:40:55 ——– d—–w- c:\program files\GetRight
2011-10-30 23:22:20 ——– d—–w- c:\documents and settings\all users.windows\application data\GetRight
2011-10-30 23:17:42 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight
.
==================== Find3M ====================
.
2011-11-27 21:09:17 17488 —-a-w- c:\windows\gdrv.sys
2011-11-22 01:34:47 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-15 16:30:26 64512 —-a-w- c:\windows\system32\drivers\serial.sys
2011-10-29 16:31:01 2516 –sha-w- c:\windows\system32\KGyGaAvL.sys
2011-10-26 21:48:01 60808 —-a-w- c:\windows\system32\S32EVNT1.DLL
2011-10-26 21:48:01 124464 —-a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-10-24 16:16:48 90368 —-a-w- c:\windows\system32\drivers\ew_jucdcacm.sys
2011-10-24 00:46:18 669184 —-a-w- c:\windows\system32\pbsvc.exe
2011-10-08 14:40:35 17488 —-a-w- c:\windows\etdrv.sys
2011-10-08 14:39:33 24944 —-a-w- c:\windows\system32\drivers\GVTDrv.sys
2011-09-26 09:41:20 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41:20 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 09:41:14 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2011-09-09 09:12:13 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-06 13:20:51 1858944 —-a-w- c:\windows\system32\win32k.sys
.
============= FINISH: 3:15:34.71 ===============






and Attach.txt



.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 8/28/2010 11:39:12 AM
System Uptime: 11/27/2011 10:08:41 PM (5 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA785GT-UD3H
Processor: AMD Athlon™ II X3 445 Processor | Socket M2 | 3114/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 146 GiB total, 13.149 GiB free.
D: is FIXED (NTFS) - 319 GiB total, 15.389 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
J: is CDROM ()
K: is Removable
L: is CDROM (CDFS)
M: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Service: RTLE8023xp
.
Class GUID:
Description:
Device ID: ROOT\LEGACY_BEEP\XX_.NORTON2009RESET_XX
Manufacturer:
Name:
PNP Device ID: ROOT\LEGACY_BEEP\XX_.NORTON2009RESET_XX
Service: .norton2009Reset
.
==== System Restore Points ===================
.
RP433: 8/30/2011 8:27:54 PM - System Checkpoint
RP434: 9/1/2011 4:22:57 AM - System Checkpoint
RP435: 9/2/2011 6:47:53 PM - System Checkpoint
RP436: 9/3/2011 4:09:21 PM - Removed STREET FIGHTER IV.
RP437: 9/4/2011 6:08:57 PM - System Checkpoint
RP438: 9/6/2011 4:15:52 AM - System Checkpoint
RP439: 9/6/2011 4:21:18 AM - Installed DirectX 9.0
RP440: 9/6/2011 4:23:23 AM - Installed DirectX
RP441: 9/6/2011 9:55:01 AM - Installed DirectX 9.0
RP442: 9/7/2011 1:25:29 PM - System Checkpoint
RP443: 9/9/2011 4:26:52 AM - System Checkpoint
RP444: 9/10/2011 4:47:16 AM - System Checkpoint
RP445: 9/12/2011 12:22:40 AM - System Checkpoint
RP446: 9/12/2011 8:22:07 PM - Printer Driver Microsoft Office Document Image Writer Installed
RP447: 9/12/2011 8:23:01 PM - Configured Microsoft Office Enterprise 2007
RP448: 9/14/2011 12:31:55 AM - System Checkpoint
RP449: 9/15/2011 12:42:35 AM - System Checkpoint
RP450: 9/16/2011 1:59:32 PM - System Checkpoint
RP451: 9/18/2011 1:54:34 PM - System Checkpoint
RP452: 9/19/2011 1:46:40 AM - Installed Catalyst Control Center - Branding
RP453: 9/19/2011 1:47:10 AM - Installed ccc-core-static
RP454: 9/19/2011 1:47:32 AM - Installed Catalyst Control Center Graphics Previews Common
RP455: 9/19/2011 1:47:46 AM - Installed CCC Help English
RP456: 9/19/2011 1:47:57 AM - Installed Catalyst Control Center InstallProxy
RP457: 9/19/2011 1:48:13 AM - Installed ccc-utility
RP458: 9/20/2011 10:05:36 PM - System Checkpoint
RP459: 9/20/2011 11:37:07 PM - Installed The Witcher Enhanced Edition
RP460: 9/20/2011 11:50:43 PM - Installed DirectX
RP461: 9/21/2011 7:37:25 AM - Removed ATI Catalyst Install Manager
RP462: 9/21/2011 2:17:45 PM - Removed TuneUp Utilities 2009
RP463: 9/21/2011 2:34:24 PM - Removed ATI Stream SDK v2 Developer
RP464: 9/21/2011 2:37:05 PM - Removed ATI Catalyst Install Manager
RP465: 9/21/2011 3:23:11 PM - Removed TuneUp Utilities
RP466: 9/21/2011 3:23:23 PM - Removed TuneUp Utilities Language Pack (en-GB)
RP467: 9/21/2011 3:23:39 PM - Installed TuneUp Utilities
RP468: 9/22/2011 9:38:31 PM - System Checkpoint
RP469: 9/25/2011 5:26:06 PM - Removed ATI Catalyst Install Manager
RP470: 9/25/2011 5:38:54 PM - Installed DirectX
RP471: 10/2/2011 2:38:02 AM - Removed The Witcher Enhanced Edition
RP472: 10/3/2011 2:55:06 AM - System Checkpoint
RP473: 10/4/2011 3:20:48 AM - System Checkpoint
RP474: 10/5/2011 3:39:33 AM - System Checkpoint
RP475: 10/5/2011 10:40:25 PM - Installed Windows XP Service Pack 3.
RP476: 10/6/2011 11:31:06 PM - System Checkpoint
RP477: 10/7/2011 11:58:30 PM - System Checkpoint
RP478: 10/9/2011 1:41:33 AM - System Checkpoint
RP479: 10/10/2011 2:34:37 AM - System Checkpoint
RP480: 10/11/2011 7:32:58 PM - System Checkpoint
RP481: 10/15/2011 12:07:07 AM - System Checkpoint
RP482: 10/16/2011 12:38:36 AM - System Checkpoint
RP483: 10/16/2011 7:40:35 PM - Removed Assassin's Creed Brotherhood
RP484: 10/17/2011 9:40:02 PM - System Checkpoint
RP485: 10/17/2011 11:49:18 PM - Installed HDDlife Pro 3.1
RP486: 10/18/2011 12:02:49 AM - Removed HDDlife
RP487: 10/18/2011 12:03:13 AM - Removed HDDlife
RP488: 10/18/2011 12:03:49 AM - Removed HDDlife
RP489: 10/18/2011 12:04:10 AM - Removed HDDlife
RP490: 10/18/2011 12:04:25 AM - Removed HDDlife
RP491: 10/18/2011 12:05:17 AM - Removed HDDlife
RP492: 10/18/2011 12:05:51 AM - Removed HDDlife
RP493: 10/18/2011 12:06:45 AM - Removed HDDlife
RP494: 10/18/2011 12:07:20 AM - Removed HDDlife
RP495: 10/18/2011 12:08:28 AM - Removed HDDlife
RP496: 10/18/2011 12:09:32 AM - Removed HDDlife
RP497: 10/18/2011 12:11:12 AM - Removed HDDlife Pro 3.1
RP498: 10/18/2011 12:11:28 AM - Removed HDDlife
RP499: 10/18/2011 12:11:56 AM - Removed HDDlife
RP500: 10/18/2011 12:12:04 AM - Removed HDDlife
RP501: 10/18/2011 12:12:42 AM - Removed HDDlife
RP502: 10/18/2011 12:13:11 AM - Removed HDDlife
RP503: 10/18/2011 12:13:54 AM - Removed HDDlife
RP504: 10/18/2011 12:16:19 AM - Installed HDDlife Pro 3.1
RP505: 10/19/2011 12:27:23 AM - System Checkpoint
RP506: 10/20/2011 1:04:10 AM - System Checkpoint
RP507: 10/22/2011 1:27:59 AM - System Checkpoint
RP508: 10/23/2011 2:08:34 AM - System Checkpoint
RP509: 10/24/2011 12:57:55 AM - Installed Windows Internet Explorer 8.
RP510: 10/24/2011 6:17:14 PM - Installed Windows XP Wdf01007.
RP511: 10/25/2011 2:32:18 AM - Software Distribution Service 3.0
RP512: 10/26/2011 2:37:45 AM - System Checkpoint
RP513: 10/26/2011 11:00:34 PM - Software Distribution Service 3.0
RP514: 10/28/2011 2:49:35 AM - System Checkpoint
RP515: 10/28/2011 4:12:41 PM - Removed Angry Birds
RP516: 10/28/2011 4:16:17 PM - Installed Angry Birds
RP517: 10/28/2011 8:12:06 PM - Installed ACDSee 10 Photo Manager.
RP518: 10/30/2011 1:24:53 AM - System Checkpoint
RP519: 10/31/2011 5:23:47 AM - System Checkpoint
RP520: 10/31/2011 5:46:19 PM - Installed Presto! PVR
RP521: 11/1/2011 7:01:19 PM - System Checkpoint
RP522: 11/2/2011 10:07:44 PM - System Checkpoint
RP523: 11/4/2011 12:57:13 AM - System Checkpoint
RP524: 11/5/2011 3:50:19 AM - System Checkpoint
RP525: 11/6/2011 4:30:38 AM - System Checkpoint
RP526: 11/7/2011 5:31:39 AM - System Checkpoint
RP527: 11/8/2011 6:30:34 AM - System Checkpoint
RP528: 11/9/2011 7:30:34 AM - System Checkpoint
RP529: 11/10/2011 7:59:09 AM - System Checkpoint
RP530: 11/11/2011 8:58:05 AM - System Checkpoint
RP531: 11/12/2011 10:51:35 AM - System Checkpoint
RP532: 11/13/2011 11:32:25 AM - System Checkpoint
RP533: 11/14/2011 12:02:23 PM - Installed Steam
RP534: 11/14/2011 4:56:40 PM - Removed Steam
RP535: 11/15/2011 3:12:04 PM - Restore Operation
RP536: 11/15/2011 3:16:18 PM - Restore Operation
RP537: 11/16/2011 4:15:09 PM - System Checkpoint
RP538: 11/17/2011 4:18:54 PM - System Checkpoint
RP539: 11/18/2011 5:37:39 PM - System Checkpoint
RP540: 11/19/2011 5:55:48 PM - System Checkpoint
RP541: 11/20/2011 12:27:31 AM - Installed Samsung Kies
RP542: 11/21/2011 1:29:17 AM - System Checkpoint
RP543: 11/22/2011 1:30:19 AM - System Checkpoint
RP544: 11/24/2011 1:09:23 PM - ComboFix created restore point
RP545: 11/25/2011 1:30:37 PM - System Checkpoint
RP546: 11/26/2011 7:09:58 PM - System Checkpoint
RP547: 11/27/2011 9:03:23 PM - System Checkpoint
.
==== Installed Programs ======================
.
@BIOS Ver.2.06
2007 Microsoft Office Suite Service Pack 1 (SP1)
A Magnetic Adventure
ACD/Labs Software in C:\Program Files\ACDFREE11\
ACDSee 10 Photo Manager
Adobe Acrobat 7.0 Professional
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Creative Suite 2
Adobe Flash Player 11 ActiveX
Adobe GoLive CS2
Adobe Help Center 1.0
Adobe Illustrator CS2
Adobe InDesign CS2
Adobe Photoshop CS2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
Adobe Version Cue CS2
AMD APP SDK Runtime
AMD Processor Driver
Angry Birds
ArcSoft PhotoImpression 5
ArcSoft VideoImpression 2
ATI Catalyst Install Manager
ATI Parental Control & Encoder
Atomica Deluxe 2.52
Autorun Virus Remover 2.3
BLAZBLUE -CALAMITY TRIGGER-
Browser Configuration Utility
C-Media PCI Audio Device
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cheatbook Database 2010
Command & Conquer Generals
Command and ConquerTM Generals Zero Hour
Corel Graphics - Windows Shell Extension
CorelDRAW Graphics Suite X3
Counter-Strike 1.6
DAEMON Tools
Direct Show Ogg Vorbis Filter (remove only)
Dynomite Deluxe 2.71
Easy CD-DA Extractor 11
Easy Icon Maker
Easy Tune 6 B09.0918.1
EasySaver B9.0904.1
EN
Facebook Video Calling 1.0.0.8953
Finale 2006
FontNav
Free YouTube Downloader 3.3.115
GetRight Pro
GOM Player
Hama Black Force Pad
HDDlife
HDDlife Pro 3.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
HP USB Disk Storage Format Tool
Internet Download Manager
Java™ 6 Update 17
K-Lite Codec Pack 5.1.0 (Full)
Kyodai Mahjongg 2006 v1.21
LG Android Platform Drivers
LG Bluetooth Drivers
LG PC Suite IV
LG USB Modem Drivers
Longman Dictionary of Contemporary English 5th Edition
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Visual Studio Tools for Applications 2.0 - ENU
Microsoft Visual Studio Tools for Applications 2.0 Runtime
Microsoft WSE 3.0 Runtime
Mozilla Firefox 8.0.1 (x86 en-US)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Mummy Maze Deluxe 1.1
Mystery Case Files - 13th Skull Collector's Edition [UPDATED]
Native Instruments Finale GPO
Need for Speed™ Most Wanted
Nero 7 Ultra Edition
Nokia Connectivity Cable Driver
Nokia Lifeblog 2.1
Nokia MTP driver
Nokia N73 highlights
Nokia Nseries Skin for Microsoft Windows Media Player
Nokia PC Suite
Nokia themes for your device
Norton AntiVirus
NVIDIA PhysX
PC Connectivity Solution
PCskola
PowerDVD
Presto! PVR
Pro Evolution Soccer 2011
PunkBuster Services
QUICKfind server v1.1
QuickTime Alternative 3.2.2
Real Alternative 2.0.2
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Rocket Mania 1.01
Samsung Kies
SAMSUNG Mobile Composite Device Software
Samsung Mobile Modem Device Software
Samsung Mobile phone USB driver Software
Samsung New PC Studio
Samsung New PC Studio USB Driver Installer
SAMSUNG USB Driver for Mobile Phones
Sandboxie 3.60 (32-bit)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
Shank
Skins
Skype™ 5.5
SolSuite 2011 v11.5
Star Wars Empire at War
Star Wars Empire at War Forces of Corruption
Suite Specific
Super Street Fighter IV: Arcade Edition
Telenor Internet
The Sims™ 3
TLG2300 IR 2.2.1
Tom Clancy's H.A.W.X v1.0 Eng
TuneUp Utilities
TuneUp Utilities Language Pack (en-GB)
Ubisoft Game Launcher
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2616676-v2)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Manager
vanBasco's Karaoke Player
VBA
VC80CRTRedist - 8.0.50727.6195
Webcam 1200
WebFldrs XP
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3
WinRAR archiver
Zuma's Revenge!
.
==== Event Viewer Messages From Past Week ========
.
11/28/2011 1:43:37 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/28/2011 1:38:17 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/28/2011 1:35:02 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/28/2011 1:32:17 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 9:55:40 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F305E has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 4:59:35 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F305E has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 3:59:45 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FA75C has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 10:12:02 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F9D8C has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 10:10:38 PM, error: System Error [1003] - Error code 00000019, parameter1 00000020, parameter2 87e6fa10, parameter3 87e6fe28, parameter4 1a830041.
11/27/2011 1:45:45 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FA75C has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/26/2011 9:52:17 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F8A85 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/26/2011 6:54:57 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Telenor Internet. OUC service to connect.
11/26/2011 6:54:57 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Norton 2009 Reset service to connect.
11/26/2011 6:54:57 PM, error: Service Control Manager [7000] - The Telenor Internet. OUC service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/26/2011 6:54:57 PM, error: Service Control Manager [7000] - The Norton 2009 Reset service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/26/2011 12:55:41 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F4C03 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/26/2011 12:49:41 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F4C03 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/24/2011 1:08:55 PM, error: Service Control Manager [7034] - The HWDeviceService.exe service terminated unexpectedly. It has done this 1 time(s).
11/22/2011 9:39:42 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F24F1 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/22/2011 8:55:07 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F24F1 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI