Ping.exe conquers my processor 100% [Closed]
25 min read
My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
- Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
- Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
- Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
- Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
- Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
- Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
- Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
- Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!
I'm glad you were able to get things running a little better than before. Let's do a couple of scans and see if there is anything else that needs to be addressed.
Download and Run DDS by sUBs
Please download DDS and save it to your desktop.
- Disable any script blocking protection
- Double click dds.scr to run the tool.
- When done, DDS.txt will open.
- Save both reports to your desktop.
Please Please copy / paste the scan reults.
DDS.txt and Attach.txt
Download and Run GMER
[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
- Extract the contents of the zipped file to desktop.
- Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
- If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
[external image: Posted Image]
Click the image to enlarge it
- In the right panel, you will see several boxes that may have been checked. Uncheck the following …
- IAT/EAT
- Drives/Partition other than Systemdrive (typically C:\)
- Show All (don't miss this one - make sure it is UNCHECKED)
- Then click the Scan button & wait for it to finish.
- Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
- Save it where you can easily find it, such as your desktop, and paste it in your reply.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Ok, here we go. I have the same problem, as Bulladin… I follow these steps, I run TDSS Killer, found something, and (WHAT A RELIEF) noticed that my processor is normal after reboot!!!
I can show you my log from TDSS Killer
C:WINDOWSsystem32Driverssptd.sys
17:25:35.0437 0140 Suspicious file (NoAccess): C:WINDOWSsystem32Driverssptd.sys. md5: d15da1ba189770d93eea2d7e18f95af9
17:25:35.0437 0140 sptd ( LockedFile.Multi.Generic ) - warning
17:25:35.0437 0140 sptd - detected LockedFile.Multi.Generic (1)
17:25:35.0453 0140 sr (76bb022c2fb6902fd5bdd4f78fc13a5d)
and
C:WINDOWSsystem32DRIVERSserial.sys
17:25:35.0203 0140 Suspicious file (Forged): C:WINDOWSsystem32DRIVERSserial.sys. Real md5: dd76589bf5c93b770c48ad9ea0d9ebdd, Fake md5: cca207a8896d4c6a0c9ce29a4ae411a7
17:25:35.0203 0140 Serial ( Rootkit.Win32.ZAccess.k ) - infected
17:25:35.0203 0140 Serial - detected Rootkit.Win32.ZAccess.k (0)
17:25:35.0234 0140 Sfloppy (8e6b8c671615d126fdc553d1e2de5562)
I think that second was f*****g me…
Should I run second application (OTL)?
Oh, yes, I didn't mentioned that I have Norton Antivirus 2009 and Malware-Bytes Anti-Malware… Thanks a lot! Hvala puno!
dds.txt
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by [removed] at 14:37:12 on 2011-11-16
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2813.1845 [GMT 1:00]
.
AV: Norton AntiVirus *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\WINDOWS\system32\dgdersvc.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Documents and Settings\All Users.WINDOWS\Application Data\DatacardService\HWDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\All Users.WINDOWS\Application Data\Telenor Internet\OnlineUpdate\ouc.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telenor Internet\Telenor Internet.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AutorunRemover\AutorunRemover.exe
C:\Program Files\NewSoft\Presto! PVR\Monitor.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAir.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Program Files\Telegent Systems\TLG2300\Drivers\tlgirmonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.rs/
uURLSearchHooks: SearchHook Class: {bc86e1ab-eda5-4059-938f-ce307b0c6f0a} - c:\program files\devicevm\browser configuration utility\AddressBarSearch.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\adobe acrobat 7.0\activex\AcroIEHelper.dll
BHO: HistoryTriggerBHO Class: {21a88cb9-84d2-4020-a2d1-b25a21034884} - c:\program files\lg electronics\lg pc suite iv\linkair\LinkAirBrowserHelper.dll
BHO: IE to GetRight Helper: {31ff080d-12a3-439a-a2ef-4ba95a3148e8} - c:\program files\getright\xx2gr.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\IPSBHO.DLL
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: QUICKfind BHO Object: {c08df07a-3e49-4e25-9ab0-d3882835f153} - c:\progra~1\idm\quickf~1\plugins\IEHelp.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 120\axcmd.exe" /automount
uRun: [LG LinkAir] c:\program files\lg electronics\lg pc suite iv\linkair\LinkAir.exe
uRun: [SandboxieControl] "c:\program files\sandboxie\SbieCtrl.exe"
uRun: [IRMonitor] c:\program files\telegent systems\tlg2300\drivers\tlgirmonitor.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Facebook Update] "c:\documents and settings\damir.athlon2\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [BCU] "c:\program files\devicevm\browser configuration utility\BCU.exe"
mRun: [DAEMON Tools-1033] "c:\program files\d-tools\daemon.exe" -lang 1033
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [AutorunRemover.exe] c:\program files\autorunremover\AutorunRemover.exe -Hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ChangeFilterMerit] "c:\program files\newsoft\presto! pvr\ChangeFilterMerit.exe"
mRun: [Presto! PVR Monitor] "c:\program files\newsoft\presto! pvr\Monitor.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: Convert link target to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download with GetRight Pro - c:\program files\getright\GRdownload.htm
IE: E&xport; to Microsoft Excel - c:\progra~1\mi699f~1\office11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: LG Link Air Option - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/209
IE: LG Link Air Save to Mobile Document Folder - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/210
IE: LG Link Air Save to Mobile Memo - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/208
IE: LG Link Air Save to Mobile Photo Album - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/206
IE: LG Link Air Set as Mobile Wallpaper - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/205
IE: Open with GetRight Pro Browser - c:\program files\getright\GRbrowse.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi699f~1\office11\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
TCP: Interfaces\{D081F83B-D259-42B1-AC5E-6D84506B2751} : NameServer = 77.105.0.19,77.105.0.18
Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - c:\program files\common files\binarysense\hlAPP.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
============= SERVICES / DRIVERS ===============
.
R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [2010-8-28 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [2010-8-28 5248]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1000000.07d\SymEFA.sys [2011-10-26 309296]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\nav\1000000.07d\BHDrvx86.sys [2011-10-26 254512]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nav\1000000.07d\ccHPx86.sys [2011-10-26 362544]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20080826.006\IDSxpx86.sys [2011-10-26 274808]
R2 BCUService;Browser Configuration Utility Service;c:\program files\devicevm\browser configuration utility\BCUService.exe [2010-8-28 219360]
R2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2010-5-25 95568]
R2 ES lite Service;ES lite Service for program management.;c:\program files\gigabyte\easysaver\essvr.exe [2010-8-28 68136]
R2 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\common files\binarysense\hldasvc.exe [2009-4-10 818840]
R2 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\all users.windows\application data\datacardservice\HWDeviceService.exe [2011-3-14 271712]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-15 366152]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\ccSvcHst.exe [2011-10-26 115560]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-7-6 1051968]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-5-25 18136]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-11-15 106104]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2011-10-24 235392]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [2011-10-24 73216]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [2009-9-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [2009-9-29 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [2009-9-29 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-15 22216]
R3 NAVENG;NAVENG;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111114.037\naveng.sys [2011-11-15 86136]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111114.037\navex15.sys [2011-11-15 1576312]
R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2011-10-12 131856]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2010-2-25 10064]
S2 .norton2009Reset;Norton 2009 Reset;c:\documents and settings\all users.windows\application data\norton\Norton2009Reset.exe [2011-10-26 280833]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]
S2 Telenor Internet. RunOuc;Telenor Internet. OUC;c:\program files\telenor internet\updatedog\ouc.exe [2011-10-24 246112]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2011-3-6 30312]
S3 AODDriver;AODDriver;c:\program files\gigabyte\et6\i386\AODDriver.sys [2009-2-22 7168]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\atihdxp3.sys –> c:\windows\system32\drivers\AtihdXP3.sys [?]
S3 EraserUtilDrv11113;EraserUtilDrv11113;\??\c:\program files\common files\symantec shared\eengine\eraserutildrv11113.sys –> c:\program files\common files\symantec shared\eengine\EraserUtilDrv11113.sys [?]
S3 etdrv;etdrv;c:\windows\etdrv.sys [2010-8-28 17488]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [2011-10-24 102784]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-1-20 36608]
S3 GPU-Z;GPU-Z;c:\docume~1\damir~1.ath\locals~1\temp\GPU-Z.sys [2011-9-19 23936]
S3 PAC207;Webcam 1200;c:\windows\system32\drivers\PFC027.SYS [2010-8-29 611584]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2011-3-6 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2011-3-6 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2011-3-6 123648]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-3-6 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-3-6 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-3-6 121576]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2011-3-6 98152]
S3 teleTV;TLG2300 USB Hybrid TV Service;c:\windows\system32\drivers\teleTV.sys [2011-10-31 286976]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-11-15 06:02:36 ——– d—–w- c:\documents and settings\damir.athlon2\application data\Malwarebytes
2011-11-15 06:02:29 ——– d—–w- c:\documents and settings\all users.windows\application data\Malwarebytes
2011-11-15 06:02:26 22216 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-11-15 06:02:26 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-11-14 14:04:48 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\NVIDIA Corporation
2011-11-14 11:02:29 ——– d—–w- c:\program files\common files\Steam
2011-11-13 16:56:50 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Identities
2011-11-10 21:37:16 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Temp
2011-11-10 21:36:56 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Facebook
2011-11-05 11:17:06 36734 —-a-w- c:\windows\system32\OggDSuninst.exe
2011-10-31 19:28:58 ——– d—–w- c:\program files\common files\DivX Shared
2011-10-31 19:25:04 ——– d—–w- c:\program files\DivX
2011-10-31 19:23:42 ——– d—–w- c:\documents and settings\all users.windows\application data\DivX
2011-10-31 18:27:00 ——– d—–r- c:\program files\Skype
2011-10-31 16:47:08 57344 —-a-w- c:\windows\system32\teleFilter.dll
2011-10-31 16:47:08 51972 —-a-w- c:\windows\system32\tlg2300_firmware.bin
2011-10-31 16:47:08 286976 —-a-w- c:\windows\system32\drivers\teleTV.sys
2011-10-31 16:47:08 114688 —-a-w- c:\windows\system32\MVPlugin.dll
2011-10-31 16:47:08 ——– d—–w- c:\program files\Telegent Systems
2011-10-31 16:46:55 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Newsoft
2011-10-31 16:46:27 ——– d—–w- c:\program files\common files\NewSoft
2011-10-31 16:46:20 ——– d—–w- c:\program files\NewSoft
2011-10-31 11:22:12 ——– d—–r- C:\Sandbox
2011-10-31 11:03:42 ——– d—–w- c:\program files\Sandboxie
2011-10-30 23:41:03 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight Pro
2011-10-30 23:40:55 ——– d—–w- c:\program files\GetRight
2011-10-30 23:22:20 ——– d—–w- c:\documents and settings\all users.windows\application data\GetRight
2011-10-30 23:17:42 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight
2011-10-28 18:13:12 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\ACD Systems
2011-10-28 18:13:11 ——– d—–w- c:\documents and settings\damir.athlon2\application data\ACD Systems
2011-10-28 18:12:35 ——– d—–w- c:\documents and settings\all users.windows\application data\ACD Systems
2011-10-28 18:12:30 ——– d—–w- c:\program files\common files\ACD Systems
2011-10-28 18:12:30 ——– d—–w- c:\program files\ACD Systems
2011-10-28 14:16:22 ——– d—–w- c:\program files\Rovio
2011-10-28 14:03:27 ——– d-sh–w- c:\documents and settings\damir.athlon2\IECompatCache
2011-10-26 21:48:04 35888 —-a-r- c:\windows\system32\drivers\SymIM.sys
2011-10-26 21:48:01 60808 —-a-w- c:\windows\system32\S32EVNT1.DLL
2011-10-26 21:48:01 124464 —-a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-10-26 21:48:01 ——– d—–w- c:\program files\Symantec
2011-10-26 21:48:01 ——– d—–w- c:\program files\common files\Symantec Shared
2011-10-26 21:01:23 ——– d—–w- c:\windows\ie8updates
2011-10-26 20:16:14 ——– d—–w- c:\program files\Free YouTube Downloader
2011-10-26 14:57:29 ——– d—–w- c:\documents and settings\all users.windows\application data\Symantec
2011-10-25 22:32:41 473600 -c—-w- c:\windows\system32\dllcache\fastprox.dll
2011-10-25 22:32:41 401408 -c—-w- c:\windows\system32\dllcache\rpcss.dll
2011-10-25 22:32:41 284160 -c—-w- c:\windows\system32\dllcache\pdh.dll
2011-10-25 22:32:41 227840 -c—-w- c:\windows\system32\dllcache\wmiprvse.exe
2011-10-25 22:32:41 110592 -c—-w- c:\windows\system32\dllcache\services.exe
2011-10-25 22:32:40 617472 -c—-w- c:\windows\system32\dllcache\advapi32.dll
2011-10-25 22:32:40 453120 -c—-w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-10-25 18:39:07 272128 -c—-w- c:\windows\system32\dllcache\bthport.sys
2011-10-25 18:35:14 953856 -c—-w- c:\windows\system32\dllcache\mfc40u.dll
2011-10-25 18:31:35 456320 -c—-w- c:\windows\system32\dllcache\mrxsmb.sys
2011-10-25 18:31:26 617472 -c—-w- c:\windows\system32\dllcache\comctl32.dll
2011-10-25 18:31:02 471552 -c—-w- c:\windows\system32\dllcache\aclayers.dll
2011-10-25 18:28:06 744448 -c—-w- c:\windows\system32\dllcache\helpsvc.exe
2011-10-25 18:27:24 40960 -c—-w- c:\windows\system32\dllcache\ndproxy.sys
2011-10-25 13:46:02 81920 -c—-w- c:\windows\system32\dllcache\fontsub.dll
2011-10-25 13:46:02 119808 -c—-w- c:\windows\system32\dllcache\t2embed.dll
2011-10-25 13:34:10 153088 -c—-w- c:\windows\system32\dllcache\triedit.dll
2011-10-25 13:23:46 139656 -c—-w- c:\windows\system32\dllcache\rdpwd.sys
2011-10-25 13:23:44 602112 -c—-w- c:\windows\system32\dllcache\msfeeds.dll
2011-10-25 13:23:43 743424 -c—-w- c:\windows\system32\dllcache\iedvtool.dll
2011-10-25 13:23:43 55296 -c—-w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-10-25 13:23:43 247808 -c—-w- c:\windows\system32\dllcache\ieproxy.dll
2011-10-25 13:23:42 2000384 -c—-w- c:\windows\system32\dllcache\iertutil.dll
2011-10-25 13:23:42 12800 -c—-w- c:\windows\system32\dllcache\xpshims.dll
2011-10-25 13:22:15 105472 -c—-w- c:\windows\system32\dllcache\mup.sys
2011-10-25 13:22:07 1172480 -c—-w- c:\windows\system32\dllcache\msxml3.dll
2011-10-25 13:21:54 203136 -c—-w- c:\windows\system32\dllcache\rmcast.sys
2011-10-25 13:20:33 331776 -c—-w- c:\windows\system32\dllcache\msadce.dll
2011-10-25 13:15:14 3558912 -c—-w- c:\windows\system32\dllcache\moviemk.exe
2011-10-25 13:10:00 337408 -c—-w- c:\windows\system32\dllcache\netapi32.dll
2011-10-25 13:06:59 692736 -c—-w- c:\windows\system32\dllcache\inetcomm.dll
2011-10-25 13:04:38 718336 -c—-w- c:\windows\system32\dllcache\ntdll.dll
2011-10-25 13:04:36 2192768 -c—-w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-10-25 13:04:36 2148864 -c—-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-10-25 13:04:36 2069376 -c—-w- c:\windows\system32\dllcache\ntkrnlpa.exe
2011-10-25 13:04:36 2027008 -c—-w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-10-25 13:04:18 218112 -c—-w- c:\windows\system32\dllcache\wordpad.exe
2011-10-25 13:04:15 10496 -c—-w- c:\windows\system32\dllcache\ndistapi.sys
2011-10-25 13:03:49 45568 -c—-w- c:\windows\system32\dllcache\wab.exe
2011-10-25 13:03:09 590848 -c—-w- c:\windows\system32\dllcache\rpcrt4.dll
2011-10-25 13:03:09 5120 —-a-w- c:\windows\system32\xpsp4res.dll
2011-10-25 00:32:27 ——– d—–w- c:\windows\system32\PreInstall
2011-10-25 00:32:25 ——– d–h–w- c:\windows\$hf_mig$
2011-10-24 22:58:16 ——– d—–w- c:\windows\system32\SoftwareDistribution
2011-10-24 16:16:39 ——– d—–w- c:\program files\Telenor Internet
2011-10-24 16:15:54 ——– d—–w- c:\documents and settings\all users.windows\application data\DatacardService
2011-10-24 00:46:18 669184 —-a-w- c:\windows\system32\pbsvc.exe
2011-10-24 00:21:48 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-23 23:03:14 ——– d-sh–w- c:\documents and settings\damir.athlon2\PrivacIE
2011-10-23 23:01:36 ——– d-sh–w- c:\documents and settings\damir.athlon2\IETldCache
2011-10-23 22:57:08 ——– dc-h–w- c:\windows\ie8
2011-10-23 16:45:12 ——– d-sh–w- c:\documents and settings\damir.athlon2\UserData
2011-10-17 22:16:22 ——– d—–w- c:\program files\BinarySense
2011-10-17 21:49:30 ——– d—–w- c:\documents and settings\damir.athlon2\application data\BinarySense
2011-10-17 21:49:21 ——– d—–w- c:\program files\common files\BinarySense
.
==================== Find3M ====================
.
2011-11-15 16:44:02 17488 —-a-w- c:\windows\gdrv.sys
2011-11-15 16:30:26 64512 —-a-w- c:\windows\system32\drivers\serial.sys
2011-10-29 16:31:01 2516 –sha-w- c:\windows\system32\KGyGaAvL.sys
2011-10-26 21:47:55 198192 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symtdi.sys
2011-10-26 21:47:54 89904 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symfw.sys
2011-10-26 21:47:54 43696 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\srtspx.sys
2011-10-26 21:47:54 40496 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symndisv.sys
2011-10-26 21:47:54 37424 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symndis.sys
2011-10-26 21:47:54 34608 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symids.sys
2011-10-26 21:47:54 309296 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\SymEFA.sys
2011-10-26 21:47:54 305712 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\srtsp.sys
2011-10-26 21:47:54 24752 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symredrv.sys
2011-10-26 21:47:54 12976 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\symdns.sys
2011-10-26 21:47:53 362544 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\ccHPx86.sys
2011-10-26 21:47:53 254512 —-a-w- c:\windows\system32\drivers\nav\1000000.07d\BHDrvx86.sys
2011-10-08 14:40:35 17488 —-a-w- c:\windows\etdrv.sys
2011-10-08 14:39:33 24944 —-a-w- c:\windows\system32\drivers\GVTDrv.sys
2011-09-26 09:41:20 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41:20 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 09:41:14 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2011-09-09 09:12:13 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-06 13:20:51 1858944 —-a-w- c:\windows\system32\win32k.sys
2011-08-29 20:18:26 189248 —-a-w- c:\windows\system32\PnkBstrB.exe
2011-08-29 20:18:25 75136 —-a-w- c:\windows\system32\PnkBstrA.exe
2011-08-22 23:48:55 916480 —-a-w- c:\windows\system32\wininet.dll
2011-08-22 23:48:54 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-08-22 23:48:54 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-08-22 11:56:39 385024 —-a-w- c:\windows\system32\html.iec
.
============= FINISH: 14:37:25.21 ===============
and attach.txt
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 8/28/2010 11:39:12 AM
System Uptime: 11/15/2011 5:43:30 PM (21 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA785GT-UD3H
Processor: AMD Athlon™ II X3 445 Processor | Socket M2 | 3114/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 146 GiB total, 14.611 GiB free.
D: is FIXED (NTFS) - 319 GiB total, 15.389 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
J: is CDROM ()
K: is CDROM (CDFS)
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Service: RTLE8023xp
.
==== System Restore Points ===================
.
RP433: 8/30/2011 8:27:54 PM - System Checkpoint
RP434: 9/1/2011 4:22:57 AM - System Checkpoint
RP435: 9/2/2011 6:47:53 PM - System Checkpoint
RP436: 9/3/2011 4:09:21 PM - Removed STREET FIGHTER IV.
RP437: 9/4/2011 6:08:57 PM - System Checkpoint
RP438: 9/6/2011 4:15:52 AM - System Checkpoint
RP439: 9/6/2011 4:21:18 AM - Installed DirectX 9.0
RP440: 9/6/2011 4:23:23 AM - Installed DirectX
RP441: 9/6/2011 9:55:01 AM - Installed DirectX 9.0
RP442: 9/7/2011 1:25:29 PM - System Checkpoint
RP443: 9/9/2011 4:26:52 AM - System Checkpoint
RP444: 9/10/2011 4:47:16 AM - System Checkpoint
RP445: 9/12/2011 12:22:40 AM - System Checkpoint
RP446: 9/12/2011 8:22:07 PM - Printer Driver Microsoft Office Document Image Writer Installed
RP447: 9/12/2011 8:23:01 PM - Configured Microsoft Office Enterprise 2007
RP448: 9/14/2011 12:31:55 AM - System Checkpoint
RP449: 9/15/2011 12:42:35 AM - System Checkpoint
RP450: 9/16/2011 1:59:32 PM - System Checkpoint
RP451: 9/18/2011 1:54:34 PM - System Checkpoint
RP452: 9/19/2011 1:46:40 AM - Installed Catalyst Control Center - Branding
RP453: 9/19/2011 1:47:10 AM - Installed ccc-core-static
RP454: 9/19/2011 1:47:32 AM - Installed Catalyst Control Center Graphics Previews Common
RP455: 9/19/2011 1:47:46 AM - Installed CCC Help English
RP456: 9/19/2011 1:47:57 AM - Installed Catalyst Control Center InstallProxy
RP457: 9/19/2011 1:48:13 AM - Installed ccc-utility
RP458: 9/20/2011 10:05:36 PM - System Checkpoint
RP459: 9/20/2011 11:37:07 PM - Installed The Witcher Enhanced Edition
RP460: 9/20/2011 11:50:43 PM - Installed DirectX
RP461: 9/21/2011 7:37:25 AM - Removed ATI Catalyst Install Manager
RP462: 9/21/2011 2:17:45 PM - Removed TuneUp Utilities 2009
RP463: 9/21/2011 2:34:24 PM - Removed ATI Stream SDK v2 Developer
RP464: 9/21/2011 2:37:05 PM - Removed ATI Catalyst Install Manager
RP465: 9/21/2011 3:23:11 PM - Removed TuneUp Utilities
RP466: 9/21/2011 3:23:23 PM - Removed TuneUp Utilities Language Pack (en-GB)
RP467: 9/21/2011 3:23:39 PM - Installed TuneUp Utilities
RP468: 9/22/2011 9:38:31 PM - System Checkpoint
RP469: 9/25/2011 5:26:06 PM - Removed ATI Catalyst Install Manager
RP470: 9/25/2011 5:38:54 PM - Installed DirectX
RP471: 10/2/2011 2:38:02 AM - Removed The Witcher Enhanced Edition
RP472: 10/3/2011 2:55:06 AM - System Checkpoint
RP473: 10/4/2011 3:20:48 AM - System Checkpoint
RP474: 10/5/2011 3:39:33 AM - System Checkpoint
RP475: 10/5/2011 10:40:25 PM - Installed Windows XP Service Pack 3.
RP476: 10/6/2011 11:31:06 PM - System Checkpoint
RP477: 10/7/2011 11:58:30 PM - System Checkpoint
RP478: 10/9/2011 1:41:33 AM - System Checkpoint
RP479: 10/10/2011 2:34:37 AM - System Checkpoint
RP480: 10/11/2011 7:32:58 PM - System Checkpoint
RP481: 10/15/2011 12:07:07 AM - System Checkpoint
RP482: 10/16/2011 12:38:36 AM - System Checkpoint
RP483: 10/16/2011 7:40:35 PM - Removed Assassin's Creed Brotherhood
RP484: 10/17/2011 9:40:02 PM - System Checkpoint
RP485: 10/17/2011 11:49:18 PM - Installed HDDlife Pro 3.1
RP486: 10/18/2011 12:02:49 AM - Removed HDDlife
RP487: 10/18/2011 12:03:13 AM - Removed HDDlife
RP488: 10/18/2011 12:03:49 AM - Removed HDDlife
RP489: 10/18/2011 12:04:10 AM - Removed HDDlife
RP490: 10/18/2011 12:04:25 AM - Removed HDDlife
RP491: 10/18/2011 12:05:17 AM - Removed HDDlife
RP492: 10/18/2011 12:05:51 AM - Removed HDDlife
RP493: 10/18/2011 12:06:45 AM - Removed HDDlife
RP494: 10/18/2011 12:07:20 AM - Removed HDDlife
RP495: 10/18/2011 12:08:28 AM - Removed HDDlife
RP496: 10/18/2011 12:09:32 AM - Removed HDDlife
RP497: 10/18/2011 12:11:12 AM - Removed HDDlife Pro 3.1
RP498: 10/18/2011 12:11:28 AM - Removed HDDlife
RP499: 10/18/2011 12:11:56 AM - Removed HDDlife
RP500: 10/18/2011 12:12:04 AM - Removed HDDlife
RP501: 10/18/2011 12:12:42 AM - Removed HDDlife
RP502: 10/18/2011 12:13:11 AM - Removed HDDlife
RP503: 10/18/2011 12:13:54 AM - Removed HDDlife
RP504: 10/18/2011 12:16:19 AM - Installed HDDlife Pro 3.1
RP505: 10/19/2011 12:27:23 AM - System Checkpoint
RP506: 10/20/2011 1:04:10 AM - System Checkpoint
RP507: 10/22/2011 1:27:59 AM - System Checkpoint
RP508: 10/23/2011 2:08:34 AM - System Checkpoint
RP509: 10/24/2011 12:57:55 AM - Installed Windows Internet Explorer 8.
RP510: 10/24/2011 6:17:14 PM - Installed Windows XP Wdf01007.
RP511: 10/25/2011 2:32:18 AM - Software Distribution Service 3.0
RP512: 10/26/2011 2:37:45 AM - System Checkpoint
RP513: 10/26/2011 11:00:34 PM - Software Distribution Service 3.0
RP514: 10/28/2011 2:49:35 AM - System Checkpoint
RP515: 10/28/2011 4:12:41 PM - Removed Angry Birds
RP516: 10/28/2011 4:16:17 PM - Installed Angry Birds
RP517: 10/28/2011 8:12:06 PM - Installed ACDSee 10 Photo Manager.
RP518: 10/30/2011 1:24:53 AM - System Checkpoint
RP519: 10/31/2011 5:23:47 AM - System Checkpoint
RP520: 10/31/2011 5:46:19 PM - Installed Presto! PVR
RP521: 11/1/2011 7:01:19 PM - System Checkpoint
RP522: 11/2/2011 10:07:44 PM - System Checkpoint
RP523: 11/4/2011 12:57:13 AM - System Checkpoint
RP524: 11/5/2011 3:50:19 AM - System Checkpoint
RP525: 11/6/2011 4:30:38 AM - System Checkpoint
RP526: 11/7/2011 5:31:39 AM - System Checkpoint
RP527: 11/8/2011 6:30:34 AM - System Checkpoint
RP528: 11/9/2011 7:30:34 AM - System Checkpoint
RP529: 11/10/2011 7:59:09 AM - System Checkpoint
RP530: 11/11/2011 8:58:05 AM - System Checkpoint
RP531: 11/12/2011 10:51:35 AM - System Checkpoint
RP532: 11/13/2011 11:32:25 AM - System Checkpoint
RP533: 11/14/2011 12:02:23 PM - Installed Steam
RP534: 11/14/2011 4:56:40 PM - Removed Steam
RP535: 11/15/2011 3:12:04 PM - Restore Operation
RP536: 11/15/2011 3:16:18 PM - Restore Operation
.
==== Installed Programs ======================
.
@BIOS Ver.2.06
2007 Microsoft Office Suite Service Pack 1 (SP1)
A Magnetic Adventure
ACD/Labs Software in C:\Program Files\ACDFREE11\
ACDSee 10 Photo Manager
Adobe Acrobat 7.0 Professional
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Creative Suite 2
Adobe Flash Player 11 ActiveX
Adobe GoLive CS2
Adobe Help Center 1.0
Adobe Illustrator CS2
Adobe InDesign CS2
Adobe Photoshop CS2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
Adobe Version Cue CS2
AMD APP SDK Runtime
AMD Processor Driver
Angry Birds
ArcSoft PhotoImpression 5
ArcSoft VideoImpression 2
ATI Catalyst Install Manager
ATI Parental Control & Encoder
Atomica Deluxe 2.52
Autorun Virus Remover 2.3
BLAZBLUE -CALAMITY TRIGGER-
Browser Configuration Utility
C-Media PCI Audio Device
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cheatbook Database 2010
Command & Conquer Generals
Command and ConquerTM Generals Zero Hour
Corel Graphics - Windows Shell Extension
CorelDRAW Graphics Suite X3
Counter-Strike 1.6
DAEMON Tools
Direct Show Ogg Vorbis Filter (remove only)
Dynomite Deluxe 2.71
Easy CD-DA Extractor 11
Easy Tune 6 B09.0918.1
EasySaver B9.0904.1
EN
Facebook Video Calling 1.0.0.8953
Finale 2006
FontNav
Free YouTube Downloader 3.3.115
GetRight Pro
GOM Player
Hama Black Force Pad
HDDlife
HDDlife Pro 3.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
HP USB Disk Storage Format Tool
Java™ 6 Update 17
K-Lite Codec Pack 5.1.0 (Full)
Kies
Kyodai Mahjongg 2006 v1.21
LG Android Platform Drivers
LG Bluetooth Drivers
LG PC Suite IV
LG USB Modem Drivers
Longman Dictionary of Contemporary English 5th Edition
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Visual Studio Tools for Applications 2.0 - ENU
Microsoft Visual Studio Tools for Applications 2.0 Runtime
Microsoft WSE 3.0 Runtime
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Mummy Maze Deluxe 1.1
Mystery Case Files - 13th Skull Collector's Edition [UPDATED]
Native Instruments Finale GPO
Need for Speed™ Most Wanted
Nero 7 Ultra Edition
Nokia Connectivity Cable Driver
Nokia Lifeblog 2.1
Nokia MTP driver
Nokia N73 highlights
Nokia Nseries Skin for Microsoft Windows Media Player
Nokia PC Suite
Nokia themes for your device
Norton AntiVirus
NVIDIA PhysX
PC Connectivity Solution
PCskola
PowerDVD
Presto! PVR
Pro Evolution Soccer 2011
PunkBuster Services
QUICKfind server v1.1
QuickTime Alternative 3.2.2
Real Alternative 2.0.2
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Rocket Mania 1.01
SAMSUNG Mobile Composite Device Software
Samsung Mobile Modem Device Software
Samsung Mobile phone USB driver Software
Samsung New PC Studio
Samsung New PC Studio USB Driver Installer
SAMSUNG USB Driver for Mobile Phones
Sandboxie 3.60 (32-bit)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
Shank
Skins
Skype™ 5.5
SolSuite 2011 v11.5
Star Wars Empire at War
Star Wars Empire at War Forces of Corruption
Suite Specific
Super Street Fighter IV: Arcade Edition
Telenor Internet
The Sims™ 3
TLG2300 IR 2.2.1
Tom Clancy's H.A.W.X v1.0 Eng
TuneUp Utilities
TuneUp Utilities Language Pack (en-GB)
Ubisoft Game Launcher
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2616676-v2)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Manager
vanBasco's Karaoke Player
VBA
VC80CRTRedist - 8.0.50727.6195
Webcam 1200
WebFldrs XP
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3
WinRAR archiver
Zuma's Revenge!
.
==== Event Viewer Messages From Past Week ========
.
11/15/2011 7:11:43 AM, error: Service Control Manager [7034] - The update_services service terminated unexpectedly. It has done this 1 time(s).
11/15/2011 6:36:27 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FB6D9 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/15/2011 2:56:35 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file ping.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
11/14/2011 7:46:53 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FB6D9 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/14/2011 4:19:08 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F83F8 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/14/2011 3:15:26 PM, error: Service Control Manager [7023] - The Network Location Awareness (NLA) service terminated with the following error: The specified procedure could not be found.
11/14/2011 12:04:37 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FD271 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/10/2011 9:05:07 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FD271 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/10/2011 7:53:27 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FD271 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================
…And about second tool GMER, unfortunately it didn't worked. I run it few times, but allways the same thing - mouse pointer freeze, and then appears vertical stripes in color (1st time was pink, 2nd grey, except 3rd time - black screen!). All three times I was forced to reset PC… Maybe it interferes with graphic driver, don't know…
Thanks in advance! Hvala unapred! :-)
Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
- Download TDSSKiller and save it to your Desktop.
- Extract its contents to your desktop.
- Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
Click to load external image (Posted Image)
- If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.
Click to load external image (Posted Image)
- If a suspicious file is detected, the default action will be Skip, click on Continue.
Click to load external image (Posted Image)
- It may ask you to reboot the computer to complete the process. Click on Reboot Now.
Click to load external image (Posted Image)
- If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
- If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Download ComboFix from one of the following locations:
Link 1
Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
- Double click on ComboFix.exe & follow the prompts.
- Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
[external image: Posted Image]
- Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
[external image: Posted Image]
- Click on Yes, to continue scanning for malware.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Disable your AntiVirus and AntiSpyware applications as they will interfere with our tools and the removal.
Double click ComboFix.exe to run it. It will prompt you that an update is available - please allow it to update.
Follow all prompts. Post the C:\ComboFix.txt when it has completed.
How is the machine behaving now?
- Disable any script blocking protection
- Double click dds.scr to run the tool.
- When done, DDS.txt will open.
- Save both reports to your desktop.
Please Please copy / paste the scan reults.
DDS.txt and Attach.txt
DDS.txt
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by [removed] at 3:14:49 on 2011-11-28
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2813.1857 [GMT 1:00]
.
AV: Norton AntiVirus *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Program Files\Common Files\BinarySense\hldasvc.exe
C:\Documents and Settings\All Users.WINDOWS\Application Data\DatacardService\HWDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\All Users.WINDOWS\Application Data\Telenor Internet\OnlineUpdate\ouc.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Norton AntiVirus\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telenor Internet\Telenor Internet.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AutorunRemover\AutorunRemover.exe
C:\Program Files\NewSoft\Presto! PVR\Monitor.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\LG Electronics\LG PC Suite IV\LinkAir\LinkAir.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Program Files\Telegent Systems\TLG2300\Drivers\tlgirmonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.rs/
uURLSearchHooks: SearchHook Class: {bc86e1ab-eda5-4059-938f-ce307b0c6f0a} - c:\program files\devicevm\browser configuration utility\AddressBarSearch.dll
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\adobe acrobat 7.0\activex\AcroIEHelper.dll
BHO: HistoryTriggerBHO Class: {21a88cb9-84d2-4020-a2d1-b25a21034884} - c:\program files\lg electronics\lg pc suite iv\linkair\LinkAirBrowserHelper.dll
BHO: IE to GetRight Helper: {31ff080d-12a3-439a-a2ef-4ba95a3148e8} - c:\program files\getright\xx2gr.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\IPSBHO.DLL
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: QUICKfind BHO Object: {c08df07a-3e49-4e25-9ab0-d3882835f153} - c:\progra~1\idm\quickf~1\plugins\IEHelp.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 120\axcmd.exe" /automount
uRun: [LG LinkAir] c:\program files\lg electronics\lg pc suite iv\linkair\LinkAir.exe
uRun: [SandboxieControl] "c:\program files\sandboxie\SbieCtrl.exe"
uRun: [IRMonitor] c:\program files\telegent systems\tlg2300\drivers\tlgirmonitor.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Facebook Update] "c:\documents and settings\damir.athlon2\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
uRun: [KiesHelper] c:\program files\samsung\kies\KiesHelper.exe /s
uRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe
uRun: [KiesPDLR] c:\program files\samsung\kies\external\firmwareupdate\KiesPDLR.exe
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
mRun: [BCU] "c:\program files\devicevm\browser configuration utility\BCU.exe"
mRun: [DAEMON Tools-1033] "c:\program files\d-tools\daemon.exe" -lang 1033
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [AutorunRemover.exe] c:\program files\autorunremover\AutorunRemover.exe -Hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ChangeFilterMerit] "c:\program files\newsoft\presto! pvr\ChangeFilterMerit.exe"
mRun: [Presto! PVR Monitor] "c:\program files\newsoft\presto! pvr\Monitor.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [Monitor] c:\windows\pixart\pac207\Monitor.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: c:\docume~1\alluse~1.win\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: Convert link target to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - c:\program files\adobe\adobe acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download with GetRight Pro - c:\program files\getright\GRdownload.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport; to Microsoft Excel - c:\progra~1\mi699f~1\office11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: LG Link Air Option - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/209
IE: LG Link Air Save to Mobile Document Folder - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/210
IE: LG Link Air Save to Mobile Memo - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/208
IE: LG Link Air Save to Mobile Photo Album - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/206
IE: LG Link Air Set as Mobile Wallpaper - c:\program files\lg electronics\lg pc suite iv\linkair\IEContextMenu.dll/205
IE: Open with GetRight Pro Browser - c:\program files\getright\GRbrowse.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi699f~1\office11\REFIEBAR.DLL
LSP: mswsock.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
TCP: Interfaces\{D081F83B-D259-42B1-AC5E-6D84506B2751} : NameServer = 77.105.0.19,77.105.0.18
Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - c:\program files\common files\binarysense\hlAPP.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\damir.athlon2\application data\mozilla\firefox\profiles\wlf9unad.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.rs/
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\damir.athlon2\local settings\application data\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll
.
============= SERVICES / DRIVERS ===============
.
R0 d347bus;d347bus;c:\windows\system32\drivers\d347bus.sys [2010-8-28 155136]
R0 d347prt;d347prt;c:\windows\system32\drivers\d347prt.sys [2010-8-28 5248]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nav\1000000.07d\SymEFA.sys [2011-10-26 309296]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\nav\1000000.07d\BHDrvx86.sys [2011-10-26 254512]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nav\1000000.07d\ccHPx86.sys [2011-10-26 362544]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-11-14 101616]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20080826.006\IDSxpx86.sys [2011-10-26 274808]
R2 BCUService;Browser Configuration Utility Service;c:\program files\devicevm\browser configuration utility\BCUService.exe [2010-8-28 219360]
R2 ES lite Service;ES lite Service for program management.;c:\program files\gigabyte\easysaver\essvr.exe [2010-8-28 68136]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\fsusbexservice.exe [2011-11-21 233472]
R2 HDDlife HDD Access service;HDDlife HDD Access service;c:\program files\common files\binarysense\hldasvc.exe [2009-4-10 818840]
R2 HWDeviceService.exe;HWDeviceService.exe;c:\documents and settings\all users.windows\application data\datacardservice\HWDeviceService.exe [2011-3-14 271712]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-15 366152]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\norton antivirus\norton antivirus\engine\16.0.0.125\ccSvcHst.exe [2011-10-26 115560]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-7-6 1051968]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-11-15 106104]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2011-10-24 235392]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-1-20 36608]
R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\drivers\ew_jubusenum.sys [2011-10-24 73216]
R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [2009-9-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [2009-9-29 10496]
R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [2009-9-29 12928]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-15 22216]
R3 NAVENG;NAVENG;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111127.005\naveng.sys [2011-11-28 86136]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users.windows\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20111127.005\navex15.sys [2011-11-28 1576312]
R3 PAC207;Webcam 1200;c:\windows\system32\drivers\PFC027.SYS [2010-8-29 611584]
R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2011-10-12 131856]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2010-2-25 10064]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2007-5-28 275968]
S2 Telenor Internet. RunOuc;Telenor Internet. OUC;c:\program files\telenor internet\updatedog\ouc.exe [2011-10-24 246112]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2011-3-6 30312]
S3 AODDriver;AODDriver;c:\program files\gigabyte\et6\i386\AODDriver.sys [2009-2-22 7168]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\atihdxp3.sys –> c:\windows\system32\drivers\AtihdXP3.sys [?]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-5-25 20032]
S3 EraserUtilDrv11113;EraserUtilDrv11113;\??\c:\program files\common files\symantec shared\eengine\eraserutildrv11113.sys –> c:\program files\common files\symantec shared\eengine\EraserUtilDrv11113.sys [?]
S3 etdrv;etdrv;c:\windows\etdrv.sys [2010-8-28 17488]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\drivers\ew_hwusbdev.sys [2011-10-24 102784]
S3 GPU-Z;GPU-Z;\??\c:\docume~1\damir~1.ath\locals~1\temp\gpu-z.sys –> c:\docume~1\damir~1.ath\locals~1\temp\GPU-Z.sys [?]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2011-3-6 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2011-3-6 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2011-3-6 123648]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-3-6 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-3-6 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-3-6 121576]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2011-3-6 98152]
S3 teleTV;TLG2300 USB Hybrid TV Service;c:\windows\system32\drivers\teleTV.sys [2011-10-31 286976]
.
=============== Created Last 30 ================
.
2011-11-28 00:17:12 ——– d—–w- c:\documents and settings\damir.athlon2\application data\IDM
2011-11-28 00:17:12 ——– d—–w- c:\documents and settings\damir.athlon2\application data\DMCache
2011-11-28 00:17:02 ——– d—–w- c:\program files\Internet Download Manager
2011-11-27 21:00:35 ——– d-s—w- C:\ComboFix
2011-11-24 12:12:41 ——– d-sha-r- C:\cmdcons
2011-11-24 12:09:11 98816 —-a-w- c:\windows\sed.exe
2011-11-24 12:09:11 518144 —-a-w- c:\windows\SWREG.exe
2011-11-24 12:09:11 256000 —-a-w- c:\windows\PEV.exe
2011-11-24 12:09:11 208896 —-a-w- c:\windows\MBR.exe
2011-11-21 18:34:46 233472 —-a-w- c:\windows\system32\fsusbexservice.exe
2011-11-19 23:43:07 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Samsung
2011-11-19 23:28:48 4659712 —-a-w- c:\windows\system32\Redemption.dll
2011-11-18 17:27:50 ——– d—–w- c:\program files\Easy Icon Maker
2011-11-15 06:02:36 ——– d—–w- c:\documents and settings\damir.athlon2\application data\Malwarebytes
2011-11-15 06:02:29 ——– d—–w- c:\documents and settings\all users.windows\application data\Malwarebytes
2011-11-15 06:02:26 22216 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-11-15 06:02:26 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-11-14 14:04:48 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\NVIDIA Corporation
2011-11-14 13:39:02 101616 —-a-w- c:\windows\system32\drivers\idmtdi.sys
2011-11-14 11:02:29 ——– d—–w- c:\program files\common files\Steam
2011-11-13 16:56:50 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Identities
2011-11-10 21:37:16 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Temp
2011-11-10 21:36:56 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Facebook
2011-11-05 11:17:06 36734 —-a-w- c:\windows\system32\OggDSuninst.exe
2011-10-31 19:28:58 ——– d—–w- c:\program files\common files\DivX Shared
2011-10-31 19:25:04 ——– d—–w- c:\program files\DivX
2011-10-31 19:23:42 ——– d—–w- c:\documents and settings\all users.windows\application data\DivX
2011-10-31 18:27:00 ——– d—–r- c:\program files\Skype
2011-10-31 16:47:08 57344 —-a-w- c:\windows\system32\teleFilter.dll
2011-10-31 16:47:08 51972 —-a-w- c:\windows\system32\tlg2300_firmware.bin
2011-10-31 16:47:08 286976 —-a-w- c:\windows\system32\drivers\teleTV.sys
2011-10-31 16:47:08 114688 —-a-w- c:\windows\system32\MVPlugin.dll
2011-10-31 16:47:08 ——– d—–w- c:\program files\Telegent Systems
2011-10-31 16:46:55 ——– d—–w- c:\documents and settings\damir.athlon2\local settings\application data\Newsoft
2011-10-31 16:46:27 ——– d—–w- c:\program files\common files\NewSoft
2011-10-31 16:46:20 ——– d—–w- c:\program files\NewSoft
2011-10-31 11:22:12 ——– d—–r- C:\Sandbox
2011-10-31 11:03:42 ——– d—–w- c:\program files\Sandboxie
2011-10-30 23:41:03 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight Pro
2011-10-30 23:40:55 ——– d—–w- c:\program files\GetRight
2011-10-30 23:22:20 ——– d—–w- c:\documents and settings\all users.windows\application data\GetRight
2011-10-30 23:17:42 ——– d—–w- c:\documents and settings\damir.athlon2\application data\GetRight
.
==================== Find3M ====================
.
2011-11-27 21:09:17 17488 —-a-w- c:\windows\gdrv.sys
2011-11-22 01:34:47 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-15 16:30:26 64512 —-a-w- c:\windows\system32\drivers\serial.sys
2011-10-29 16:31:01 2516 –sha-w- c:\windows\system32\KGyGaAvL.sys
2011-10-26 21:48:01 60808 —-a-w- c:\windows\system32\S32EVNT1.DLL
2011-10-26 21:48:01 124464 —-a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-10-24 16:16:48 90368 —-a-w- c:\windows\system32\drivers\ew_jucdcacm.sys
2011-10-24 00:46:18 669184 —-a-w- c:\windows\system32\pbsvc.exe
2011-10-08 14:40:35 17488 —-a-w- c:\windows\etdrv.sys
2011-10-08 14:39:33 24944 —-a-w- c:\windows\system32\drivers\GVTDrv.sys
2011-09-26 09:41:20 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41:20 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 09:41:14 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2011-09-09 09:12:13 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-06 13:20:51 1858944 —-a-w- c:\windows\system32\win32k.sys
.
============= FINISH: 3:15:34.71 ===============
and Attach.txt
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 8/28/2010 11:39:12 AM
System Uptime: 11/27/2011 10:08:41 PM (5 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA785GT-UD3H
Processor: AMD Athlon™ II X3 445 Processor | Socket M2 | 3114/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 146 GiB total, 13.149 GiB free.
D: is FIXED (NTFS) - 319 GiB total, 15.389 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
J: is CDROM ()
K: is Removable
L: is CDROM (CDFS)
M: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek PCIe GBE Family Controller
Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek PCIe GBE Family Controller
PNP Device ID: PCI\VEN_10EC&DEV;_8168&SUBSYS;_E0001458&REV;_02\4&36A73F9A&0&0050
Service: RTLE8023xp
.
Class GUID:
Description:
Device ID: ROOT\LEGACY_BEEP\XX_.NORTON2009RESET_XX
Manufacturer:
Name:
PNP Device ID: ROOT\LEGACY_BEEP\XX_.NORTON2009RESET_XX
Service: .norton2009Reset
.
==== System Restore Points ===================
.
RP433: 8/30/2011 8:27:54 PM - System Checkpoint
RP434: 9/1/2011 4:22:57 AM - System Checkpoint
RP435: 9/2/2011 6:47:53 PM - System Checkpoint
RP436: 9/3/2011 4:09:21 PM - Removed STREET FIGHTER IV.
RP437: 9/4/2011 6:08:57 PM - System Checkpoint
RP438: 9/6/2011 4:15:52 AM - System Checkpoint
RP439: 9/6/2011 4:21:18 AM - Installed DirectX 9.0
RP440: 9/6/2011 4:23:23 AM - Installed DirectX
RP441: 9/6/2011 9:55:01 AM - Installed DirectX 9.0
RP442: 9/7/2011 1:25:29 PM - System Checkpoint
RP443: 9/9/2011 4:26:52 AM - System Checkpoint
RP444: 9/10/2011 4:47:16 AM - System Checkpoint
RP445: 9/12/2011 12:22:40 AM - System Checkpoint
RP446: 9/12/2011 8:22:07 PM - Printer Driver Microsoft Office Document Image Writer Installed
RP447: 9/12/2011 8:23:01 PM - Configured Microsoft Office Enterprise 2007
RP448: 9/14/2011 12:31:55 AM - System Checkpoint
RP449: 9/15/2011 12:42:35 AM - System Checkpoint
RP450: 9/16/2011 1:59:32 PM - System Checkpoint
RP451: 9/18/2011 1:54:34 PM - System Checkpoint
RP452: 9/19/2011 1:46:40 AM - Installed Catalyst Control Center - Branding
RP453: 9/19/2011 1:47:10 AM - Installed ccc-core-static
RP454: 9/19/2011 1:47:32 AM - Installed Catalyst Control Center Graphics Previews Common
RP455: 9/19/2011 1:47:46 AM - Installed CCC Help English
RP456: 9/19/2011 1:47:57 AM - Installed Catalyst Control Center InstallProxy
RP457: 9/19/2011 1:48:13 AM - Installed ccc-utility
RP458: 9/20/2011 10:05:36 PM - System Checkpoint
RP459: 9/20/2011 11:37:07 PM - Installed The Witcher Enhanced Edition
RP460: 9/20/2011 11:50:43 PM - Installed DirectX
RP461: 9/21/2011 7:37:25 AM - Removed ATI Catalyst Install Manager
RP462: 9/21/2011 2:17:45 PM - Removed TuneUp Utilities 2009
RP463: 9/21/2011 2:34:24 PM - Removed ATI Stream SDK v2 Developer
RP464: 9/21/2011 2:37:05 PM - Removed ATI Catalyst Install Manager
RP465: 9/21/2011 3:23:11 PM - Removed TuneUp Utilities
RP466: 9/21/2011 3:23:23 PM - Removed TuneUp Utilities Language Pack (en-GB)
RP467: 9/21/2011 3:23:39 PM - Installed TuneUp Utilities
RP468: 9/22/2011 9:38:31 PM - System Checkpoint
RP469: 9/25/2011 5:26:06 PM - Removed ATI Catalyst Install Manager
RP470: 9/25/2011 5:38:54 PM - Installed DirectX
RP471: 10/2/2011 2:38:02 AM - Removed The Witcher Enhanced Edition
RP472: 10/3/2011 2:55:06 AM - System Checkpoint
RP473: 10/4/2011 3:20:48 AM - System Checkpoint
RP474: 10/5/2011 3:39:33 AM - System Checkpoint
RP475: 10/5/2011 10:40:25 PM - Installed Windows XP Service Pack 3.
RP476: 10/6/2011 11:31:06 PM - System Checkpoint
RP477: 10/7/2011 11:58:30 PM - System Checkpoint
RP478: 10/9/2011 1:41:33 AM - System Checkpoint
RP479: 10/10/2011 2:34:37 AM - System Checkpoint
RP480: 10/11/2011 7:32:58 PM - System Checkpoint
RP481: 10/15/2011 12:07:07 AM - System Checkpoint
RP482: 10/16/2011 12:38:36 AM - System Checkpoint
RP483: 10/16/2011 7:40:35 PM - Removed Assassin's Creed Brotherhood
RP484: 10/17/2011 9:40:02 PM - System Checkpoint
RP485: 10/17/2011 11:49:18 PM - Installed HDDlife Pro 3.1
RP486: 10/18/2011 12:02:49 AM - Removed HDDlife
RP487: 10/18/2011 12:03:13 AM - Removed HDDlife
RP488: 10/18/2011 12:03:49 AM - Removed HDDlife
RP489: 10/18/2011 12:04:10 AM - Removed HDDlife
RP490: 10/18/2011 12:04:25 AM - Removed HDDlife
RP491: 10/18/2011 12:05:17 AM - Removed HDDlife
RP492: 10/18/2011 12:05:51 AM - Removed HDDlife
RP493: 10/18/2011 12:06:45 AM - Removed HDDlife
RP494: 10/18/2011 12:07:20 AM - Removed HDDlife
RP495: 10/18/2011 12:08:28 AM - Removed HDDlife
RP496: 10/18/2011 12:09:32 AM - Removed HDDlife
RP497: 10/18/2011 12:11:12 AM - Removed HDDlife Pro 3.1
RP498: 10/18/2011 12:11:28 AM - Removed HDDlife
RP499: 10/18/2011 12:11:56 AM - Removed HDDlife
RP500: 10/18/2011 12:12:04 AM - Removed HDDlife
RP501: 10/18/2011 12:12:42 AM - Removed HDDlife
RP502: 10/18/2011 12:13:11 AM - Removed HDDlife
RP503: 10/18/2011 12:13:54 AM - Removed HDDlife
RP504: 10/18/2011 12:16:19 AM - Installed HDDlife Pro 3.1
RP505: 10/19/2011 12:27:23 AM - System Checkpoint
RP506: 10/20/2011 1:04:10 AM - System Checkpoint
RP507: 10/22/2011 1:27:59 AM - System Checkpoint
RP508: 10/23/2011 2:08:34 AM - System Checkpoint
RP509: 10/24/2011 12:57:55 AM - Installed Windows Internet Explorer 8.
RP510: 10/24/2011 6:17:14 PM - Installed Windows XP Wdf01007.
RP511: 10/25/2011 2:32:18 AM - Software Distribution Service 3.0
RP512: 10/26/2011 2:37:45 AM - System Checkpoint
RP513: 10/26/2011 11:00:34 PM - Software Distribution Service 3.0
RP514: 10/28/2011 2:49:35 AM - System Checkpoint
RP515: 10/28/2011 4:12:41 PM - Removed Angry Birds
RP516: 10/28/2011 4:16:17 PM - Installed Angry Birds
RP517: 10/28/2011 8:12:06 PM - Installed ACDSee 10 Photo Manager.
RP518: 10/30/2011 1:24:53 AM - System Checkpoint
RP519: 10/31/2011 5:23:47 AM - System Checkpoint
RP520: 10/31/2011 5:46:19 PM - Installed Presto! PVR
RP521: 11/1/2011 7:01:19 PM - System Checkpoint
RP522: 11/2/2011 10:07:44 PM - System Checkpoint
RP523: 11/4/2011 12:57:13 AM - System Checkpoint
RP524: 11/5/2011 3:50:19 AM - System Checkpoint
RP525: 11/6/2011 4:30:38 AM - System Checkpoint
RP526: 11/7/2011 5:31:39 AM - System Checkpoint
RP527: 11/8/2011 6:30:34 AM - System Checkpoint
RP528: 11/9/2011 7:30:34 AM - System Checkpoint
RP529: 11/10/2011 7:59:09 AM - System Checkpoint
RP530: 11/11/2011 8:58:05 AM - System Checkpoint
RP531: 11/12/2011 10:51:35 AM - System Checkpoint
RP532: 11/13/2011 11:32:25 AM - System Checkpoint
RP533: 11/14/2011 12:02:23 PM - Installed Steam
RP534: 11/14/2011 4:56:40 PM - Removed Steam
RP535: 11/15/2011 3:12:04 PM - Restore Operation
RP536: 11/15/2011 3:16:18 PM - Restore Operation
RP537: 11/16/2011 4:15:09 PM - System Checkpoint
RP538: 11/17/2011 4:18:54 PM - System Checkpoint
RP539: 11/18/2011 5:37:39 PM - System Checkpoint
RP540: 11/19/2011 5:55:48 PM - System Checkpoint
RP541: 11/20/2011 12:27:31 AM - Installed Samsung Kies
RP542: 11/21/2011 1:29:17 AM - System Checkpoint
RP543: 11/22/2011 1:30:19 AM - System Checkpoint
RP544: 11/24/2011 1:09:23 PM - ComboFix created restore point
RP545: 11/25/2011 1:30:37 PM - System Checkpoint
RP546: 11/26/2011 7:09:58 PM - System Checkpoint
RP547: 11/27/2011 9:03:23 PM - System Checkpoint
.
==== Installed Programs ======================
.
@BIOS Ver.2.06
2007 Microsoft Office Suite Service Pack 1 (SP1)
A Magnetic Adventure
ACD/Labs Software in C:\Program Files\ACDFREE11\
ACDSee 10 Photo Manager
Adobe Acrobat 7.0 Professional
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Creative Suite 2
Adobe Flash Player 11 ActiveX
Adobe GoLive CS2
Adobe Help Center 1.0
Adobe Illustrator CS2
Adobe InDesign CS2
Adobe Photoshop CS2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
Adobe Version Cue CS2
AMD APP SDK Runtime
AMD Processor Driver
Angry Birds
ArcSoft PhotoImpression 5
ArcSoft VideoImpression 2
ATI Catalyst Install Manager
ATI Parental Control & Encoder
Atomica Deluxe 2.52
Autorun Virus Remover 2.3
BLAZBLUE -CALAMITY TRIGGER-
Browser Configuration Utility
C-Media PCI Audio Device
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cheatbook Database 2010
Command & Conquer Generals
Command and ConquerTM Generals Zero Hour
Corel Graphics - Windows Shell Extension
CorelDRAW Graphics Suite X3
Counter-Strike 1.6
DAEMON Tools
Direct Show Ogg Vorbis Filter (remove only)
Dynomite Deluxe 2.71
Easy CD-DA Extractor 11
Easy Icon Maker
Easy Tune 6 B09.0918.1
EasySaver B9.0904.1
EN
Facebook Video Calling 1.0.0.8953
Finale 2006
FontNav
Free YouTube Downloader 3.3.115
GetRight Pro
GOM Player
Hama Black Force Pad
HDDlife
HDDlife Pro 3.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946040)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946308)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB946344)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947540)
Hotfix for Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
HP USB Disk Storage Format Tool
Internet Download Manager
Java™ 6 Update 17
K-Lite Codec Pack 5.1.0 (Full)
Kyodai Mahjongg 2006 v1.21
LG Android Platform Drivers
LG Bluetooth Drivers
LG PC Suite IV
LG USB Modem Drivers
Longman Dictionary of Contemporary English 5th Edition
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Visual Studio Tools for Applications 2.0 - ENU
Microsoft Visual Studio Tools for Applications 2.0 Runtime
Microsoft WSE 3.0 Runtime
Mozilla Firefox 8.0.1 (x86 en-US)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Mummy Maze Deluxe 1.1
Mystery Case Files - 13th Skull Collector's Edition [UPDATED]
Native Instruments Finale GPO
Need for Speed™ Most Wanted
Nero 7 Ultra Edition
Nokia Connectivity Cable Driver
Nokia Lifeblog 2.1
Nokia MTP driver
Nokia N73 highlights
Nokia Nseries Skin for Microsoft Windows Media Player
Nokia PC Suite
Nokia themes for your device
Norton AntiVirus
NVIDIA PhysX
PC Connectivity Solution
PCskola
PowerDVD
Presto! PVR
Pro Evolution Soccer 2011
PunkBuster Services
QUICKfind server v1.1
QuickTime Alternative 3.2.2
Real Alternative 2.0.2
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Rocket Mania 1.01
Samsung Kies
SAMSUNG Mobile Composite Device Software
Samsung Mobile Modem Device Software
Samsung Mobile phone USB driver Software
Samsung New PC Studio
Samsung New PC Studio USB Driver Installer
SAMSUNG USB Driver for Mobile Phones
Sandboxie 3.60 (32-bit)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
Shank
Skins
Skype™ 5.5
SolSuite 2011 v11.5
Star Wars Empire at War
Star Wars Empire at War Forces of Corruption
Suite Specific
Super Street Fighter IV: Arcade Edition
Telenor Internet
The Sims™ 3
TLG2300 IR 2.2.1
Tom Clancy's H.A.W.X v1.0 Eng
TuneUp Utilities
TuneUp Utilities Language Pack (en-GB)
Ubisoft Game Launcher
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2616676-v2)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Manager
vanBasco's Karaoke Player
VBA
VC80CRTRedist - 8.0.50727.6195
Webcam 1200
WebFldrs XP
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3
WinRAR archiver
Zuma's Revenge!
.
==== Event Viewer Messages From Past Week ========
.
11/28/2011 1:43:37 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/28/2011 1:38:17 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/28/2011 1:35:02 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/28/2011 1:32:17 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F5329 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 9:55:40 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F305E has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 4:59:35 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F305E has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 3:59:45 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FA75C has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 10:12:02 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F9D8C has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/27/2011 10:10:38 PM, error: System Error [1003] - Error code 00000019, parameter1 00000020, parameter2 87e6fa10, parameter3 87e6fe28, parameter4 1a830041.
11/27/2011 1:45:45 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101FA75C has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/26/2011 9:52:17 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F8A85 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/26/2011 6:54:57 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Telenor Internet. OUC service to connect.
11/26/2011 6:54:57 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Norton 2009 Reset service to connect.
11/26/2011 6:54:57 PM, error: Service Control Manager [7000] - The Telenor Internet. OUC service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/26/2011 6:54:57 PM, error: Service Control Manager [7000] - The Norton 2009 Reset service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/26/2011 12:55:41 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F4C03 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/26/2011 12:49:41 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F4C03 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/24/2011 1:08:55 PM, error: Service Control Manager [7034] - The HWDeviceService.exe service terminated unexpectedly. It has done this 1 time(s).
11/22/2011 9:39:42 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F24F1 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
11/22/2011 8:55:07 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 001E101F24F1 has been denied by the DHCP server [removed] (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI