System Check Virus....HELP! [Solved]

Hi Jeff,
Thanks for responding so quickly! You guys are the best!!

I sent the logs below last night but then something happened this am. My husband has this fixation about turning off the computers at night so at 2am, I blearily turned his computer off so he wouldn't complain to me about it this am. I had forgotten about your instructions to not reboot the computer after running rkill. So this am, I tried running rkill again and this time I noticed that it kept saying "access denied." (It may have said that yesterday when I ran rkill but I didn't notice it then.) Just thought you would need this added information.


Here are the logs you requested: (I didn't zip them because you didn't say anything about that…..hope that's okay)…..

Two DDS Logs

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 4/11/2009 6:50:05 AM
System Uptime: 1/28/2012 11:21:42 PM (0 hours ago)
.
Motherboard: Dell Inc. | | 0RY007
Processor: Intel Pentium III Xeon processor | Socket 775 | 2527/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 466 GiB total, 440.143 GiB free.
D: is CDROM ()
E: is Removable
F: is Removable
G: is Removable
H: is Removable
I: is CDROM (CDFS)
J: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP577: 10/31/2011 6:43:44 PM - Software Distribution Service 3.0
RP578: 11/2/2011 6:37:46 AM - Software Distribution Service 3.0
RP579: 11/3/2011 5:10:24 PM - Software Distribution Service 3.0
RP580: 11/10/2011 6:36:57 AM - Software Distribution Service 3.0
RP581: 11/11/2011 3:00:14 AM - Software Distribution Service 3.0
RP582: 11/11/2011 6:45:58 AM - Software Distribution Service 3.0
RP583: 11/11/2011 3:54:11 PM - Software Distribution Service 3.0
RP584: 11/12/2011 5:02:27 PM - System Checkpoint
RP585: 11/13/2011 1:38:27 AM - Software Distribution Service 3.0
RP586: 11/14/2011 2:20:21 AM - System Checkpoint
RP587: 11/15/2011 5:54:49 AM - Software Distribution Service 3.0
RP588: 11/16/2011 6:09:44 AM - Software Distribution Service 3.0
RP589: 11/17/2011 5:37:32 PM - Software Distribution Service 3.0
RP590: 11/18/2011 6:21:09 PM - System Checkpoint
RP591: 11/19/2011 9:25:45 AM - Software Distribution Service 3.0
RP592: 11/20/2011 10:09:25 AM - System Checkpoint
RP593: 11/21/2011 5:09:42 AM - Software Distribution Service 3.0
RP594: 11/23/2011 5:36:54 AM - Software Distribution Service 3.0
RP595: 11/24/2011 7:07:12 AM - Software Distribution Service 3.0
RP596: 11/26/2011 4:46:11 AM - Software Distribution Service 3.0
RP597: 11/27/2011 7:28:04 AM - Software Distribution Service 3.0
RP598: 11/28/2011 7:18:25 PM - Software Distribution Service 3.0
RP599: 11/30/2011 5:40:22 AM - Software Distribution Service 3.0
RP600: 12/1/2011 6:03:15 AM - Software Distribution Service 3.0
RP601: 12/2/2011 6:33:18 AM - Software Distribution Service 3.0
RP602: 12/3/2011 5:37:48 PM - Software Distribution Service 3.0
RP603: 12/4/2011 6:44:39 PM - System Checkpoint
RP604: 12/5/2011 6:07:21 AM - Software Distribution Service 3.0
RP605: 12/6/2011 9:01:43 PM - Software Distribution Service 3.0
RP606: 12/8/2011 6:13:55 AM - Software Distribution Service 3.0
RP607: 12/9/2011 5:30:41 PM - Software Distribution Service 3.0
RP608: 12/10/2011 5:49:53 PM - Software Distribution Service 3.0
RP609: 12/11/2011 7:46:33 PM - System Checkpoint
RP610: 12/12/2011 6:45:01 PM - Software Distribution Service 3.0
RP611: 12/13/2011 8:38:55 PM - Software Distribution Service 3.0
RP612: 12/14/2011 7:42:01 AM - Software Distribution Service 3.0
RP613: 12/15/2011 5:26:49 AM - Software Distribution Service 3.0
RP614: 12/16/2011 6:54:26 AM - System Checkpoint
RP615: 12/16/2011 4:33:24 PM - Software Distribution Service 3.0
RP616: 12/17/2011 4:34:10 PM - System Checkpoint
RP617: 12/18/2011 7:01:26 AM - Software Distribution Service 3.0
RP618: 12/19/2011 8:40:47 PM - Software Distribution Service 3.0
RP619: 12/20/2011 9:17:57 PM - System Checkpoint
RP620: 12/20/2011 9:37:48 PM - Software Distribution Service 3.0
RP621: 12/22/2011 5:12:26 AM - Software Distribution Service 3.0
RP622: 12/24/2011 5:26:31 AM - Software Distribution Service 3.0
RP623: 12/25/2011 2:25:29 AM - Software Distribution Service 3.0
RP624: 12/25/2011 5:08:15 PM - Software Distribution Service 3.0
RP625: 12/26/2011 6:01:16 PM - System Checkpoint
RP626: 12/27/2011 5:10:25 AM - Software Distribution Service 3.0
RP627: 12/28/2011 7:00:34 AM - Software Distribution Service 3.0
RP628: 12/29/2011 2:36:54 PM - Software Distribution Service 3.0
RP629: 12/31/2011 7:15:47 AM - Software Distribution Service 3.0
RP630: 1/1/2012 7:34:33 AM - Software Distribution Service 3.0
RP631: 1/1/2012 7:37:28 PM - Software Distribution Service 3.0
RP632: 1/2/2012 8:54:54 PM - System Checkpoint
RP633: 1/3/2012 6:57:31 AM - Software Distribution Service 3.0
RP634: 1/4/2012 8:53:13 PM - Software Distribution Service 3.0
RP635: 1/6/2012 6:08:07 AM - Software Distribution Service 3.0
RP636: 1/7/2012 7:04:58 AM - System Checkpoint
RP637: 1/7/2012 7:24:14 AM - Software Distribution Service 3.0
RP638: 1/8/2012 7:44:55 AM - Software Distribution Service 3.0
RP639: 1/9/2012 9:24:48 AM - System Checkpoint
RP640: 1/9/2012 7:33:33 PM - Software Distribution Service 3.0
RP641: 1/11/2012 7:02:21 AM - Software Distribution Service 3.0
RP642: 1/11/2012 8:25:40 PM - Software Distribution Service 3.0
RP643: 1/12/2012 6:50:30 AM - Software Distribution Service 3.0
RP644: 1/12/2012 4:49:57 PM - Software Distribution Service 3.0
RP645: 1/13/2012 5:01:13 PM - Software Distribution Service 3.0
RP646: 1/14/2012 4:56:29 PM - Software Distribution Service 3.0
RP647: 1/15/2012 1:43:53 AM - Software Distribution Service 3.0
RP648: 1/16/2012 2:16:41 AM - System Checkpoint
RP649: 1/16/2012 6:18:41 AM - Software Distribution Service 3.0
RP650: 1/18/2012 6:20:23 AM - Software Distribution Service 3.0
RP651: 1/19/2012 6:28:04 AM - Software Distribution Service 3.0
RP652: 1/21/2012 6:42:27 AM - System Checkpoint
RP653: 1/21/2012 2:09:21 PM - Installed ZyXEL PLA-4xx Series Configuration Utility
RP654: 1/21/2012 11:57:16 PM - Software Distribution Service 3.0
RP655: 1/23/2012 6:33:51 AM - Software Distribution Service 3.0
RP656: 1/24/2012 6:56:27 AM - Software Distribution Service 3.0
RP657: 1/25/2012 7:12:41 AM - System Checkpoint
RP658: 1/25/2012 4:15:41 PM - Installed VC90_CRT_x86.
RP659: 1/25/2012 4:15:50 PM - Installed VC_CRT_x86
RP660: 1/25/2012 4:15:55 PM - Installed Intel® Network Connections.
RP661: 1/25/2012 6:09:56 PM - Software Distribution Service 3.0
RP662: 1/26/2012 6:17:05 PM - System Checkpoint
RP663: 1/27/2012 7:09:28 AM - Software Distribution Service 3.0
RP664: 1/28/2012 9:18:08 AM - System Checkpoint
RP665: 1/28/2012 11:14:22 AM - Configured Linksys WUSB100 RangePlus Wireless USB Adapter
RP666: 1/28/2012 11:20:26 AM - Software Distribution Service 3.0
RP667: 1/28/2012 11:41:18 PM - Installed HiJackThis
.
==== Installed Programs ======================
.
Acrobat.com
Adobe AIR
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Reader 9.5.0
AOL Toolbar
AOL Uninstaller (Choose which Products to Remove)
Apple Software Update
Ask Toolbar
AVS Audio Converter version 5.1
AVS Update Manager 1.0
AVS4YOU Software Navigator 1.3
Browser Address Error Redirector
Clickfree
Compatibility Pack for the 2007 Office system
Coupon Printer for Windows
Dell Driver Reset Tool
Dell Support Center (Support Software)
Download Updater (AOL LLC)
Dragon NaturallySpeaking 11
Driver Detective
Facemoods Toolbar
FoxTab Video Converter
GoToAssist 8.0.0.514
Grab & Burn, Version 4.0.1 ( Build 2005-09-21, Win32, CSS )
GRTSoft Data Recovery 2.5
High Definition Audio Driver Package - KB835221
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB946554)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Intel® Graphics Media Accelerator Driver
Intel® Network Connections [removed]
iSkysoft iMedia Converter(Build [removed])
Java Auto Updater
Java™ 6 Update 24
Java™ 6 Update 7
LekuSoft Blu ray Ripper 5.50
Logitech Harmony Remote Software
Malwarebytes' Anti-Malware version 1.51.1.1800
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft VC9 runtime libraries
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works
Mozilla Firefox (3.6.25)
MSN
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB954459)
Norton PC Checkup
OGA Notifier 2.0.0048.0
Photo Stamp Remover 3.1
PowerDVD
QuickTime
Realtek Drivers Update Utility 3.0
Realtek High Definition Audio Driver
Roxio Creator Audio
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler 3
Roxio Update Manager
Samsung CLP-300 Series
SAMSUNG USB Driver for Mobile Phones
SearchAssist
Security Advisor
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft Windows (KB2564958)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2530548)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
ShopAtHome.com Toolbar
Spykee
Spyware Doctor with AntiVirus 8.0
System Requirements Lab for Intel
Uninstall AOL Emergency Connect Utility 1.0
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB2641690)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Verizon Servicepoint 1.5.24
Viewpoint Media Player
Visual C++ 9.0 Runtime for Dragon NaturallySpeaking
Vz In Home Agent
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinPcap 4.1.1
Wise Disk Cleaner Professional v5.2
WizMouse v1.6.0.1
Your Uninstaller! 7
ZyXEL PLA-4xx Series Configuration Utility
.
==== Event Viewer Messages From Past Week ========
.
1/28/2012 3:12:30 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
1/28/2012 3:11:11 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
1/28/2012 3:09:25 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/28/2012 2:45:06 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm MpFilter
1/28/2012 11:52:53 AM, error: Service Control Manager [7000] - The PCASp50 NDIS Protocol Driver service failed to start due to the following error: The system cannot find the file specified.
1/25/2012 7:53:11 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.477.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/25/2012 7:04:02 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.477.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/22/2012 1:16:36 AM, error: Service Control Manager [7034] - The SupportSoft Sprocket Service (dellsupportcenter) service terminated unexpectedly. It has done this 1 time(s).
1/22/2012 1:16:36 AM, error: Service Control Manager [7034] - The SacNetAgentService_C57C4F854F53 service terminated unexpectedly. It has done this 1 time(s).
1/22/2012 1:16:36 AM, error: Service Control Manager [7034] - The Norton PC Checkup Application Launcher service terminated unexpectedly. It has done this 1 time(s).
1/22/2012 1:16:36 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
1/22/2012 1:16:36 AM, error: Service Control Manager [7034] - The Dragon Service service terminated unexpectedly. It has done this 1 time(s).
1/22/2012 1:16:36 AM, error: Service Control Manager [7034] - The AOL Connectivity Service service terminated unexpectedly. It has done this 1 time(s).
1/22/2012 1:16:36 AM, error: Service Control Manager [7031] - The Microsoft Antimalware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.
1/22/2012 1:16:36 AM, error: Service Control Manager [7031] - The Common Client Job Manager Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
1/21/2012 7:48:39 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 7:17:03 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 7:04:51 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 6:37:31 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 2:12:08 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 2:01:59 PM, error: Service Control Manager [7000] - The SSPORT service failed to start due to the following error: The system cannot find the file specified.
1/21/2012 2:01:59 PM, error: Service Control Manager [7000] - The DgiVecp service failed to start due to the following error: The system cannot find the device specified.
1/21/2012 12:50:23 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 12:21:40 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 11:15:59 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/21/2012 1:33:17 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.119.129.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8001.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
.
==== End Of File ===========================

DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_24
Run by [removed] at 23:57:21 on 2012-01-28
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3061.2216 [GMT -5:00]
.
AV: Spyware Doctor with AntiVirus *Enabled/Updated* {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Nuance\dgnsvc.exe
C:\WINDOWS\system32\IProsetMonitor.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\SymcPCCULaunchSvc.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe
C:\Program Files\PC Tools Security\pctsAuxs.exe
C:\Program Files\PC Tools Security\pctsSvc.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe
C:\Program Files\Common Files\AOL\1270162804\ee\AOLSoftware.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\SelectRebates\SelectRebates.exe
C:\Program Files\PC Tools Security\pctsGui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WizMouse\WizMouse.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\PC Tools Security\Update.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://start.facemoods.com/?a=ironto
uSearch Page = hxxp://www.google.com/hws/sb/dell-usuk/en/side.html?channel=us
uDefault_Page_URL = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us&ibd;=6081010
uSearch Bar = hxxp://www.google.com/hws/sb/dell-usuk/en/side.html?channel=us
mSearchAssistant = hxxp://start.facemoods.com/?a=ironto&s;={searchTerms}&f;=4
uURLSearchHooks: AOL Toolbar Search Class: {f0e98552-8e47-4c6c-9b3a-11ab0549f94d} - c:\program files\aol toolbar\aoltb.dll
uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dll
uURLSearchHooks: H - No File
mURLSearchHooks: AOL Toolbar Search Class: {f0e98552-8e47-4c6c-9b3a-11ab0549f94d} - c:\program files\aol toolbar\aoltb.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AOL Toolbar Loader: {3ef64538-8b54-4573-b48f-4d34b0238ab2} - c:\program files\aol toolbar\aoltb.dll
BHO: CescrtHlpr Object: {64182481-4f71-486b-a045-b233bd0da8fc} - c:\program files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
BHO: Avery Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: ShopAtHomeIEHelper Class: {e8daaa30-6caa-4b58-9603-8e54238219e2} - c:\program files\selectrebates\toolbar\ShopAtHomeToolbar.dll
TB: ShopAtHome.com Toolbar: {98279c38-de4b-4bcf-93c9-8ec26069d6f4} - c:\program files\selectrebates\toolbar\ShopAtHomeToolbar.dll
TB: Avery Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: AOL Toolbar: {ba00b7b1-0351-477a-b948-23e3ee5a73d4} - c:\program files\aol toolbar\aoltb.dll
TB: facemoods Toolbar: {db4e9724-f518-4dfd-9c7c-78b52103cab9} - c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [ClickfreeMonitor] c:\documents and settings\all users\application data\clickfree\cfagent.exe
uRun: [SacReminderHDDV2N] c:\documents and settings\all users\application data\clickfree\c2nplus\reminder\SacReminder.exe
uRun: [ISUSPM] c:\documents and settings\all users\application data\flexnet\connect\11\ISUSPM.exe -scheduler
uRun: [WizMouse] "c:\program files\wizmouse\WizMouse.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe"
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [Samsung PanelMgr] c:\windows\samsung\panelmgr\ssmmgr.exe /autorun
mRun: [Verizon_McciTrayApp] "c:\program files\verizon\McciTrayApp.exe"
mRun: [VerizonServicepoint.exe] "c:\program files\verizon\vsp\VerizonServicepoint.exe" /AUTORUN
mRun: [HostManager] c:\program files\common files\aol\1270162804\ee\AOLSoftware.exe
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [DNS7reminder] "c:\program files\nuance\naturallyspeaking11\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\nuance\naturallyspeaking11\Ereg.ini
mRun: [Nuance.ctfmngr] c:\program files\nuance\naturallyspeaking11\program\ctfmngr.exe /restore
mRun: [SelectRebates] c:\program files\selectrebates\SelectRebates.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [facemoods] "c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [CaMnoMQJDh.exe] c:\documents and settings\all users\application data\CaMnoMQJDh.exe
mRun: [ISTray] "c:\program files\pc tools security\pctsGui.exe" /hideGUI
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
uExplorerRun: [JavaSoft] c:\documents and settings\drew krajeski\application data\78E330.exe
mPolicies-system: EnableLinkedConnections = 1 (0x1)
mPolicies-system: DisableTaskMgr = 1 (0x1)
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: c:\program files\common files\pc tools\lsp\PCTLsp.dll
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon%20FiOS%20Installer.cab
DPF: {32505657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab
DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} - hxxps://www.hpwindows7upgrade.arvato.com/north_america/EndCustomer/HPProdDetect.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} - hxxp://download.microsoft.com/download/7/E/6/7E6A8567-DFE4-4624-87C3-163549BE2704/clearadj.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{E4D8A072-3585-4EEB-ACE6-BE1418B200FE} : DhcpNameServer = 192.168.1.1
Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\drew krajeski\application data\mozilla\firefox\profiles\8dbdtts9.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://start.facemoods.com/?a=ironto
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src;=kw&tb;=AD2&o;=102164&locale;=en_US&apn;_uid=C4D37028-E007-4CE5-848B-80B996874141&apn;_ptnrs=JH&apn;_sauid=7E3CD4B4-93D5-4D70-B3B4-C3E609CA080F&apn;_dtid=YYYYYYSBUS&q;=
FF - component: c:\documents and settings\drew krajeski\application data\mozilla\firefox\profiles\8dbdtts9.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components\XPATLCOM.dll
FF - component: c:\documents and settings\drew krajeski\application data\mozilla\firefox\profiles\8dbdtts9.default\extensions\{7affbfae-c4e2-4915-8c0f-00fa3ec610a1}\components\MailUtil.dll
FF - component: c:\documents and settings\drew krajeski\application data\mozilla\firefox\profiles\8dbdtts9.default\extensions\[removed]\components\FFHst.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\logitech\harmony remote driver\NprtHarmonyPlugin.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NPcol400.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdnupdater2.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Facemoods: [removed] - %profile%\extensions\[removed]
FF - Ext: Avery Toolbar: [removed] - %profile%\extensions\[removed]
FF - Ext: ShopAtHome.com Intelligent Shopping Toolbar: [removed] - %profile%\extensions\[removed]
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: AOL Toolbar: {7affbfae-c4e2-4915-8c0f-00fa3ec610a1} - %profile%\extensions\{7affbfae-c4e2-4915-8c0f-00fa3ec610a1}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: [removed] - c:\program files\java\jre6\lib\deploy\jqs\ff
.
—- FIREFOX POLICIES —-
FF - user.js: yahoo.homepage.dontask - true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.ytff.general.dontshowhpoffer, true
============= SERVICES / DRIVERS ===============
.
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2012-1-28 239168]
R0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [2012-1-28 338880]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-3-25 165648]
R2 DragonSvc;Dragon Service;c:\program files\common files\nuance\dgnsvc.exe [2010-7-23 296808]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [2012-1-25 132768]
R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\norton pc checkup\engine\2.0.12.27\SymcPCCULaunchSvc.exe [2011-8-9 135608]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704]
R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\norton pc checkup\engine\2.0.12.27\ccSvcHst.exe [2011-8-9 126392]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\pc tools security\pctsAuxs.exe [2012-1-28 366840]
R2 sdCoreService;PC Tools Security Service;c:\program files\pc tools security\pctsSvc.exe [2012-1-28 1150936]
R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [2012-1-28 1034240]
S2 SacNetAgentService_C57C4F854F53;SacNetAgentService_C57C4F854F53;c:\documents and settings\all users\application data\clickfree\c2nplus\reminder\SacNetAgent.exe [2011-3-19 163664]
S2 SSPORT;SSPORT;\??\c:\windows\system32\drivers\ssport.sys –> c:\windows\system32\drivers\SSPORT.sys [?]
S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2011-6-2 11336]
S3 rt2870;Linksys 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys –> c:\windows\system32\drivers\rt2870.sys [?]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-12-31 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-12-31 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-12-31 121576]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [2011-7-24 12984]
.
=============== Created Last 30 ================
.
2012-01-29 04:41:21 388096 —-a-r- c:\documents and settings\drew krajeski\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2012-01-29 04:41:20 ——– d—–w- c:\program files\Trend Micro
2012-01-29 00:08:59 360448 —-a-w- c:\documents and settings\all users\application data\321.exe
2012-01-28 20:12:38 656320 —ha-w- c:\windows\system32\drivers\pctEFA.sys
2012-01-28 20:12:38 338880 —ha-w- c:\windows\system32\drivers\pctDS.sys
2012-01-28 20:12:38 251560 —ha-w- c:\windows\system32\drivers\pctgntdi.sys
2012-01-28 20:12:36 239168 —ha-w- c:\windows\system32\drivers\PCTCore.sys
2012-01-28 20:12:36 160448 —ha-w- c:\windows\system32\drivers\PCTAppEvent.sys
2012-01-28 20:12:32 70536 —ha-w- c:\windows\system32\drivers\pctplsg.sys
2012-01-28 20:12:29 ——– d–h–w- c:\program files\PC Tools Security
2012-01-28 20:12:29 ——– d–h–w- c:\program files\common files\PC Tools
2012-01-28 20:12:29 ——– d–h–w- c:\documents and settings\drew krajeski\application data\PC Tools
2012-01-28 20:09:59 ——– d—–w- c:\documents and settings\all users\application data\PC Tools
2012-01-28 19:47:34 525902 —-a-w- c:\windows\system32\PerfStringBackup.TMP
2012-01-28 19:03:33 345344 —-a-w- c:\documents and settings\all users\application data\789.exe
2012-01-28 18:30:41 345344 —-a-w- c:\documents and settings\all users\application data\456.exe
2012-01-28 18:27:58 435968 —-a-w- c:\documents and settings\all users\application data\123.exe
2012-01-28 16:20:27 6557240 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4a7a189c-5e7c-42f8-8e64-18f85fbbc465}\mpengine.dll
2012-01-28 16:03:22 1034240 —ha-r- c:\windows\system32\drivers\AE1200xp.sys
2012-01-25 21:16:06 132768 —ha-w- c:\windows\system32\IPROSetMonitor.exe
2012-01-25 21:14:24 28272 —ha-w- c:\windows\system32\NicCo2.dll
2012-01-25 21:11:20 ——– d–h–w- c:\program files\SystemRequirementsLab
2012-01-25 17:10:40 221184 —ha-w- c:\windows\system32\RaCoInst.dll
2012-01-21 19:09:22 ——– d–h–w- c:\program files\ZyXEL Communications Corporation
2012-01-21 19:07:06 ——– d–h–w- c:\program files\WinPcap
2012-01-09 12:10:58 ——– d–h–w- c:\program files\Rocket Division Software
2012-01-06 11:31:59 ——– d–h–w- c:\documents and settings\drew krajeski\application data\facemoods.com
2012-01-06 11:31:07 ——– d–h–w- c:\program files\FoxTabVideoConverter
2012-01-06 11:31:06 ——– d–h–w- c:\program files\facemoods.com
2012-01-03 13:22:02 103864 —ha-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
2012-01-03 13:22:02 103864 —ha-w- c:\program files\internet explorer\plugins\nppdf32.dll
2011-12-31 20:32:27 96488 —ha-w- c:\windows\system32\drivers\ssadbus.sys
2011-12-31 20:32:27 12776 —ha-w- c:\windows\system32\drivers\ssadmdfl.sys
2011-12-31 20:32:27 121576 —ha-w- c:\windows\system32\drivers\ssadmdm.sys
2011-12-31 20:32:27 10344 —ha-w- c:\windows\system32\drivers\ssadcmnt.sys
2011-12-31 20:32:27 10344 —ha-w- c:\windows\system32\drivers\ssadcm.sys
2011-12-31 20:32:27 10216 —ha-w- c:\windows\system32\drivers\ssadwhnt.sys
2011-12-31 20:32:27 10216 —ha-w- c:\windows\system32\drivers\ssadwh.sys
2011-12-31 20:32:10 ——– d—–w- c:\documents and settings\all users\application data\Samsung
.
==================== Find3M ====================
.
2012-01-04 09:26:22 236576 —h–w- c:\windows\system32\MpSigStub.exe
2011-11-25 21:57:19 293376 —ha-w- c:\windows\system32\winsrv.dll
2011-11-24 12:10:06 414368 —ha-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25:32 1859584 —ha-w- c:\windows\system32\win32k.sys
2011-11-18 22:31:14 169472 —ha-w- c:\windows\system32\Ncs2Setp.dll
2011-11-18 22:17:04 683640 —ha-w- c:\windows\system32\ncs2dmix.dll
2011-11-18 22:17:04 557176 —ha-w- c:\windows\system32\accesor.dll
2011-11-18 22:07:10 160376 —ha-w- c:\windows\system32\ncs2instutility.dll
2011-11-18 22:04:14 2241656 —ha-w- c:\windows\system32\ncscolib.dll
2011-11-18 12:35:08 60416 —ha-w- c:\windows\system32\packager.exe
2011-11-16 14:21:44 354816 —ha-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21:44 152064 —ha-w- c:\windows\system32\schannel.dll
2011-11-09 21:27:18 30368 —ha-w- c:\windows\system32\drivers\iqvw32.sys
2011-11-04 19:20:51 916992 —ha-w- c:\windows\system32\wininet.dll
2011-11-04 19:20:51 43520 —ha-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20:51 1469440 —ha-w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23:59 385024 —ha-w- c:\windows\system32\html.iec
2011-11-03 15:28:36 386048 —ha-w- c:\windows\system32\qdvd.dll
2011-11-03 15:28:36 1292288 —ha-w- c:\windows\system32\quartz.dll
2011-11-01 16:07:10 1288704 —ha-w- c:\windows\system32\ole32.dll
.
============= FINISH: 23:58:08.40 ===============

aswMBR version 0.9.9.1532 Copyright© 2011 AVAST Software
Run date: 2012-01-29 00:04:27
—————————–
00:04:27.796 OS Version: Windows 5.1.2600 Service Pack 3
00:04:27.796 Number of processors: 2 586 0x1706
00:04:27.796 ComputerName: D3H5MKH1 UserName:
00:04:28.859 Initialize success
00:11:03.000 AVAST engine defs: 12012801
00:12:29.765 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
00:12:29.765 Disk 0 Vendor: Hitachi_HDP725050GLA360 GM4OA5BA Size: 476940MB BusType: 3
00:12:29.796 Disk 0 MBR read successfully
00:12:29.796 Disk 0 MBR scan
00:12:29.843 Disk 0 Windows XP default MBR code
00:12:29.843 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 54 MB offset 63
00:12:29.875 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 476874 MB offset 112455
00:12:29.906 Disk 0 scanning sectors +976752000
00:12:30.000 Disk 0 scanning C:\WINDOWS\system32\drivers
00:12:45.156 Service scanning
00:12:45.515 Service MpKsl375cae09 c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4A7A189C-5E7C-42F8-8E64-18F85FBBC465}\MpKsl375cae09.sys **LOCKED** 32
00:12:46.093 Modules scanning
00:12:51.093 Disk 0 trace - called modules:
00:12:51.125 ntkrnlpa.exe CLASSPNP.SYS disk.sys PCTCore.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
00:12:51.140 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8ac3cab8]
00:12:51.156 3 CLASSPNP.SYS[ba0e8fd7] -> nt!IofCallDriver -> [0x8ac6fbd8]
00:12:51.156 5 PCTCore.sys[b9de6099] -> nt!IofCallDriver -> \Device\0000006a[0x8ac87aa8]
00:12:51.171 7 ACPI.sys[b9f5f620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8ac44940]
00:12:52.015 AVAST engine scan C:\WINDOWS
00:13:05.906 AVAST engine scan C:\WINDOWS\system32
00:15:49.812 AVAST engine scan C:\WINDOWS\system32\drivers
00:16:18.906 AVAST engine scan C:\Documents and Settings\Drew Krajeski
00:17:38.703 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Drew Krajeski\Desktop\MBR.dat"
00:17:38.734 The log file has been saved successfully to "C:\Documents and Settings\Drew Krajeski\Desktop\aswMBR.txt"


MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x000003fc

Kernel Drivers (total 119):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E5000 \WINDOWS\system32\hal.dll
0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
0xB9F79000 ACPI.sys
0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xB9F68000 pci.sys
0xBA0A8000 isapnp.sys
0xBA670000 pciide.sys
0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xBA0B8000 MountMgr.sys
0xB9F49000 ftdisk.sys
0xBA5AC000 dmload.sys
0xB9F23000 dmio.sys
0xBA330000 PartMgr.sys
0xBA0C8000 VolSnap.sys
0xB9F0B000 atapi.sys
0xB9E44000 iaStor.sys
0xBA0D8000 disk.sys
0xBA0E8000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB9E24000 fltmgr.sys
0xB9E12000 sr.sys
0xBA0F8000 PxHelp20.sys
0xB9DFB000 KSecDD.sys
0xB9D6E000 Ntfs.sys
0xB9D41000 NDIS.sys
0xBA108000 ohci1394.sys
0xBA118000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xB9D27000 Mup.sys
0xBA248000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xB97E2000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xB8FB1000 \SystemRoot\system32\DRIVERS\igxpmp32.sys
0xB8F9D000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xB8F5D000 \SystemRoot\system32\DRIVERS\e1e5132.sys
0xBA400000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xB8F39000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xBA408000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xB8F11000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xBA410000 \SystemRoot\system32\DRIVERS\fdc.sys
0xB95C0000 \SystemRoot\system32\DRIVERS\imapi.sys
0xB95B0000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xB95A0000 \SystemRoot\system32\DRIVERS\redbook.sys
0xB8EEE000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA7EA000 \SystemRoot\system32\DRIVERS\audstub.sys
0xB9590000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xBA56C000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB8ED7000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xB9580000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xB9570000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xBA418000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xB8EC6000 \SystemRoot\system32\DRIVERS\psched.sys
0xB9560000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xBA420000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xBA428000 \SystemRoot\system32\DRIVERS\raspti.sys
0xBA430000 \SystemRoot\system32\DRIVERS\wanatw4.sys
0xB8E96000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xB9550000 \SystemRoot\system32\DRIVERS\termdd.sys
0xBA438000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xBA440000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xBA5CE000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB8E10000 \SystemRoot\system32\DRIVERS\update.sys
0xBA588000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xB9530000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xBA178000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xBA5D2000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xA8367000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xA8343000 \SystemRoot\system32\drivers\portcls.sys
0xBA188000 \SystemRoot\system32\drivers\drmk.sys
0xB8E8E000 \SystemRoot\System32\Drivers\i2omgmt.SYS
0xB8E8A000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xBA198000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xBA450000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xA732C000 \SystemRoot\system32\DRIVERS\MpFilter.sys
0xBA468000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xBA612000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xBA71E000 \SystemRoot\System32\Drivers\Null.SYS
0xBA614000 \SystemRoot\System32\Drivers\Beep.SYS
0xBA478000 \SystemRoot\System32\drivers\vga.sys
0xBA616000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xBA618000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xBA480000 \SystemRoot\System32\Drivers\Msfs.SYS
0xBA488000 \SystemRoot\System32\Drivers\Npfs.SYS
0xB8DF8000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xA72F9000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xA72A0000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xA7278000 \SystemRoot\system32\DRIVERS\netbt.sys
0xA7256000 \SystemRoot\System32\drivers\afd.sys
0xBA1B8000 \SystemRoot\system32\DRIVERS\netbios.sys
0xA722B000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xA71BB000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xBA1D8000 \SystemRoot\System32\Drivers\Fips.SYS
0xA7195000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xBA1E8000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xBA1F8000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xBA490000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xA7070000 \SystemRoot\system32\DRIVERS\AE1200xp.sys
0xA8327000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xA8323000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xBA238000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xA7058000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xBA630000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xA7357000 \SystemRoot\System32\drivers\Dxapi.sys
0xBA4A8000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xBA7B9000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF024000 \SystemRoot\System32\igxpgd32.dll
0xBF012000 \SystemRoot\System32\igxprd32.dll
0xBF04E000 \SystemRoot\System32\igxpdv32.DLL
0xBF1F2000 \SystemRoot\System32\igxpdx32.DLL
0xBF48D000 \SystemRoot\System32\ATMFD.DLL
0xA6F34000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA6C6B000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xA6F98000 \SystemRoot\system32\drivers\npf.sys
0xA6B23000 \SystemRoot\system32\DRIVERS\srv.sys
0xA69F6000 \SystemRoot\system32\drivers\wdmaud.sys
0xA6BAB000 \SystemRoot\system32\drivers\sysaudio.sys
0xA5D8B000 \SystemRoot\System32\Drivers\HTTP.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 50):
0 System Idle Process
4 System
664 C:\WINDOWS\system32\smss.exe
892 csrss.exe
920 C:\WINDOWS\system32\winlogon.exe
964 C:\WINDOWS\system32\services.exe
976 C:\WINDOWS\system32\lsass.exe
1136 C:\WINDOWS\system32\svchost.exe
1184 svchost.exe
1224 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
1260 C:\WINDOWS\system32\svchost.exe
1380 svchost.exe
1420 svchost.exe
1772 C:\WINDOWS\system32\spoolsv.exe
1876 svchost.exe
1948 C:\Program Files\Common Files\aol\acs\AOLacsd.exe
2000 C:\Program Files\Common Files\Nuance\dgnsvc.exe
156 C:\WINDOWS\system32\IPROSetMonitor.exe
152 C:\Program Files\Java\jre6\bin\jqs.exe
208 C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\SymcPCCULaunchSvc.exe
276 C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe
612 C:\Documents and Settings\All Users\Application Data\Clickfree\C2NPlus\Reminder\SacNetAgent.exe
812 C:\Program Files\Dell Support Center\bin\sprtsvc.exe
1912 C:\WINDOWS\system32\wuauclt.exe
1708 C:\WINDOWS\explorer.exe
492 C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe
1560 C:\WINDOWS\system32\igfxtray.exe
1568 C:\WINDOWS\system32\hkcmd.exe
884 C:\WINDOWS\system32\igfxpers.exe
1632 C:\WINDOWS\RTHDCPL.EXE
1836 C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
2056 C:\Program Files\Dell Support Center\bin\sprtcmd.exe
2076 C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
2084 C:\Program Files\Common Files\aol\1270162804\ee\aolsoftware.exe
2100 C:\Program Files\Microsoft Security Client\msseces.exe
2112 C:\Program Files\Common Files\Java\Java Update\jusched.exe
2140 C:\WINDOWS\system32\igfxsrvc.exe
2412 C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
2552 C:\WINDOWS\system32\ctfmon.exe
2560 C:\Documents and Settings\All Users\Application Data\Clickfree\cfagent.exe
2580 C:\Documents and Settings\All Users\Application Data\Clickfree\C2NPlus\Reminder\SacReminder.exe
2604 C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe
2620 C:\Program Files\WizMouse\WizMouse.exe
3176 alg.exe
3264 C:\WINDOWS\system32\wscntfy.exe
3976 C:\WINDOWS\system32\svchost.exe
3988 C:\WINDOWS\system32\svchost.exe
3024 C:\Program Files\Mozilla Firefox\firefox.exe
632 C:\Program Files\Mozilla Firefox\plugin-container.exe
2952 C:\Documents and Settings\Drew Krajeski\My Documents\Downloads\MBRCheck.exe

\\.\C: –> \\.\PhysicalDrive0 at offset 0x00000000`036e8e00 (NTFS)

PhysicalDrive0 Model Number: HitachiHDP725050GLA360, Rev: GM4OA5BA

Size Device Name MBR Status
——————————————–
465 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!

Thank you so much! I look forward to your reply!

Good morning, Jeff.

Here's the Combo fix log you requested:

ComboFix 12-01-29.01 - Drew Krajeski 01/29/2012 10:43:49.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3061.2384 [GMT -5:00]
Running from: c:\documents and settings\[removed]\My Documents\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\~0fLCJtm84D3t3n
c:\documents and settings\All Users\Application Data\~0fLCJtm84D3t3nr
c:\documents and settings\All Users\Application Data\~hmGO7ZEfp4Mn8T
c:\documents and settings\All Users\Application Data\~hmGO7ZEfp4Mn8Tr
c:\documents and settings\All Users\Application Data\~HQN2j2lgxLOy29
c:\documents and settings\All Users\Application Data\~HQN2j2lgxLOy29r
c:\documents and settings\All Users\Application Data\0fLCJtm84D3t3n
c:\documents and settings\All Users\Application Data\0fLCJtm84D3t3n.exe
c:\documents and settings\All Users\Application Data\123.exe
c:\documents and settings\All Users\Application Data\321.exe
c:\documents and settings\All Users\Application Data\456.exe
c:\documents and settings\All Users\Application Data\789.exe
c:\documents and settings\All Users\Application Data\hmGO7ZEfp4Mn8T
c:\documents and settings\All Users\Application Data\HQN2j2lgxLOy29
c:\documents and settings\All Users\Application Data\PAwhgCLyHSr.exe
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\All Users\Application Data\TEMP\0FF263E8.TMP
c:\documents and settings\Drew Krajeski\Desktop\System Check.lnk
c:\documents and settings\Drew Krajeski\Start Menu\Programs\System Check
c:\documents and settings\Drew Krajeski\Start Menu\Programs\System Check\System Check.lnk
c:\documents and settings\Drew Krajeski\Start Menu\Programs\System Check\Uninstall System Check.lnk
c:\documents and settings\Kelly Krajeski\Error.log
c:\documents and settings\Kelly Krajeski\WINDOWS
c:\documents and settings\Robin Krajeski\Application Data\facemoods.com
c:\documents and settings\Robin Krajeski\Desktop\System Check.lnk
c:\documents and settings\Robin Krajeski\Start Menu\Programs\System Check
c:\documents and settings\Robin Krajeski\Start Menu\Programs\System Check\System Check.lnk
c:\documents and settings\Robin Krajeski\Start Menu\Programs\System Check\Uninstall System Check.lnk
C:\install.exe
c:\windows\EventSystem.log
c:\windows\system32\service
c:\windows\system32\service\09072010_TIS17_SfFniAU.log
c:\windows\system32\service\11022010_TIS17_SfFniAU.log
c:\windows\system32\service\11102009_TIS17_SfFniAU.log
c:\windows\system32\service\18032010_TIS17_SfFniAU.log
c:\windows\system32\service\20102010_TIS17_SfFniAU.log
c:\windows\system32\service\21092009_TIS17_SfFniAU.log
c:\windows\system32\service\23072010_TIS17_SfFniAU.log
c:\windows\system32\service\25122009_TIS17_SfFniAU.log
c:\windows\system32\service\26052010_TIS17_SfFniAU.log
c:\windows\system32\service\28012010_TIS17_SfFniAU.log
c:\windows\system32\service\30122009_TIS17_SfFniAU.log
.
.
((((((((((((((((((((((((( Files Created from 2011-12-28 to 2012-01-29 )))))))))))))))))))))))))))))))
.
.
2012-01-29 12:58 . 2012-01-29 12:58 56200 —ha-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{953B5AE4-9FC0-436E-9FC2-530A7C8C6216}\offreg.dll
2012-01-29 06:22 . 2012-01-06 04:19 6557240 —ha-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{953B5AE4-9FC0-436E-9FC2-530A7C8C6216}\mpengine.dll
2012-01-29 04:41 . 2012-01-29 04:41 388096 —ha-r- c:\documents and settings\Drew Krajeski\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-01-29 04:41 . 2012-01-29 04:41 ——– d–h–w- c:\program files\Trend Micro
2012-01-28 20:09 . 2012-01-29 05:20 ——– d–h–w- c:\documents and settings\All Users\Application Data\PC Tools
2012-01-28 19:47 . 2012-01-29 13:02 525902 —ha-w- c:\windows\system32\PerfStringBackup.TMP
2012-01-28 16:03 . 2011-03-30 06:22 1034240 —ha-r- c:\windows\system32\drivers\AE1200xp.sys
2012-01-25 21:16 . 2011-11-09 22:38 132768 —ha-w- c:\windows\system32\IPROSetMonitor.exe
2012-01-25 21:14 . 2007-08-07 05:28 28272 —ha-w- c:\windows\system32\NicCo2.dll
2012-01-25 21:11 . 2012-01-25 21:11 ——– d–h–w- c:\program files\SystemRequirementsLab
2012-01-25 21:11 . 2012-01-25 21:11 ——– d–h–w- c:\documents and settings\Drew Krajeski\Application Data\SystemRequirementsLab
2012-01-25 17:10 . 2008-12-05 20:32 221184 —ha-w- c:\windows\system32\RaCoInst.dll
2012-01-21 19:09 . 2012-01-21 19:09 ——– d–h–w- c:\program files\ZyXEL Communications Corporation
2012-01-21 19:07 . 2012-01-21 19:07 ——– d–h–w- c:\program files\WinPcap
2012-01-09 12:10 . 2012-01-09 12:10 ——– d–h–w- c:\program files\Rocket Division Software
2012-01-06 11:31 . 2012-01-06 11:31 ——– d–h–w- c:\program files\FoxTabVideoConverter
2012-01-03 13:22 . 2012-01-03 13:22 103864 —ha-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2012-01-03 13:22 . 2012-01-03 13:22 103864 —ha-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2011-12-31 20:32 . 2010-05-25 07:59 96488 —ha-w- c:\windows\system32\drivers\ssadbus.sys
2011-12-31 20:32 . 2010-05-25 07:59 12776 —ha-w- c:\windows\system32\drivers\ssadmdfl.sys
2011-12-31 20:32 . 2010-05-25 07:59 121576 —ha-w- c:\windows\system32\drivers\ssadmdm.sys
2011-12-31 20:32 . 2010-05-25 07:59 10344 —ha-w- c:\windows\system32\drivers\ssadcmnt.sys
2011-12-31 20:32 . 2010-05-25 07:59 10344 —ha-w- c:\windows\system32\drivers\ssadcm.sys
2011-12-31 20:32 . 2010-05-25 07:59 10216 —ha-w- c:\windows\system32\drivers\ssadwhnt.sys
2011-12-31 20:32 . 2010-05-25 07:59 10216 —ha-w- c:\windows\system32\drivers\ssadwh.sys
2011-12-31 20:32 . 2011-12-31 20:32 ——– d–h–w- c:\documents and settings\All Users\Application Data\Samsung
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-06 04:19 . 2010-11-15 10:34 6557240 —ha-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-01-04 09:26 . 2010-11-13 21:29 236576 —h–w- c:\windows\system32\MpSigStub.exe
2011-11-25 21:57 . 2004-08-11 21:00 293376 —ha-w- c:\windows\system32\winsrv.dll
2011-11-24 12:10 . 2011-11-24 12:10 414368 —ha-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25 . 2004-08-11 21:00 1859584 —ha-w- c:\windows\system32\win32k.sys
2011-11-18 22:31 . 2011-11-18 22:31 169472 —ha-w- c:\windows\system32\Ncs2Setp.dll
2011-11-18 22:17 . 2011-11-18 22:17 683640 —ha-w- c:\windows\system32\ncs2dmix.dll
2011-11-18 22:17 . 2011-11-18 22:17 557176 —ha-w- c:\windows\system32\accesor.dll
2011-11-18 22:07 . 2011-11-18 22:07 160376 —ha-w- c:\windows\system32\ncs2instutility.dll
2011-11-18 22:04 . 2011-11-18 22:04 2241656 —ha-w- c:\windows\system32\ncscolib.dll
2011-11-18 12:35 . 2004-08-11 21:00 60416 —ha-w- c:\windows\system32\packager.exe
2011-11-16 14:21 . 2004-08-11 21:00 354816 —ha-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21 . 2004-08-11 21:00 152064 —ha-w- c:\windows\system32\schannel.dll
2011-11-09 21:27 . 2011-11-09 21:27 30368 —ha-w- c:\windows\system32\drivers\iqvw32.sys
2011-11-04 19:20 . 2004-08-11 21:00 916992 —ha-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2004-08-11 21:00 43520 —ha-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2004-08-11 21:00 1469440 —ha-w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2004-08-11 21:00 385024 —ha-w- c:\windows\system32\html.iec
2011-11-03 15:28 . 2004-08-11 21:00 386048 —ha-w- c:\windows\system32\qdvd.dll
2011-11-03 15:28 . 2004-08-11 21:00 1292288 —ha-w- c:\windows\system32\quartz.dll
2011-11-01 16:07 . 2004-08-11 21:00 1288704 —ha-w- c:\windows\system32\ole32.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"ClickfreeMonitor"="c:\documents and settings\All Users\Application Data\clickfree\cfagent.exe" [2011-01-20 333648]
"SacReminderHDDV2N"="c:\documents and settings\all users\application data\Clickfree\C2NPlus\reminder\SacReminder.exe" [2011-01-20 870224]
"ISUSPM"="c:\documents and settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe" [2010-07-23 222496]
"WizMouse"="c:\program files\WizMouse\WizMouse.exe" [2011-04-29 115504]
"AOL Fast Start"="c:\progra~1\AOLDES~1.6\AOL.EXE" [2011-01-13 42320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-07-16 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-07-16 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-07-16 138008]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-16 16132608]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"PDVDDXSrv"="c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2008-02-26 128296]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\ssmmgr.exe" [2007-05-29 520192]
"HostManager"="c:\program files\Common Files\AOL\1270162804\ee\AOLSoftware.exe" [2010-03-08 41800]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"DNS7reminder"="c:\program files\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" [2007-04-16 259624]
"Nuance.ctfmngr"="c:\program files\Nuance\NaturallySpeaking11\Program\ctfmngr.exe" [2011-07-22 39856]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-04 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-10-10 13:35 10536 —ha-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD DX\\PowerDVD.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD DX\\PDVDDXSrv.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\3.0\\aoltpsd3.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AOL 9.1\\waol.exe"=
"c:\\Program Files\\Common Files\\aol\\System Information\\sinf.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\aol\\1270162804\\ee\\aolsoftware.exe"=
"c:\\documents and settings\\all users\\application data\\Clickfree\\C2NPlus\\Reminder\\SacNetAgent.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"53271:UDP"= 53271:UDP:SacNetAgentCommunicationPort1
"53272:TCP"= 53272:TCP:SacNetAgentCommunicationPort2
"139:TCP"= 139:TCP:@xpsp2res.dll,-22004
"445:TCP"= 445:TCP:@xpsp2res.dll,-22005
"137:UDP"= 137:UDP:@xpsp2res.dll,-22001
"138:UDP"= 138:UDP:@xpsp2res.dll,-22002
.
R2 DragonSvc;Dragon Service;c:\program files\Common Files\Nuance\dgnsvc.exe [7/23/2010 12:19 PM 296808]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [1/25/2012 4:16 PM 132768]
R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\Norton PC Checkup\Engine\2.0.12.27\SymcPCCULaunchSvc.exe [8/9/2011 6:15 AM 135608]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [10/20/2009 1:19 PM 50704]
R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe [8/9/2011 6:15 AM 126392]
R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [1/28/2012 11:03 AM 1034240]
S2 SacNetAgentService_C57C4F854F53;SacNetAgentService_C57C4F854F53;c:\documents and settings\All Users\Application Data\Clickfree\C2NPlus\Reminder\SacNetAgent.exe [3/19/2011 1:09 PM 163664]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys –> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [6/2/2011 10:08 AM 11336]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [12/31/2011 3:32 PM 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [12/31/2011 3:32 PM 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [12/31/2011 3:32 PM 121576]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [7/24/2011 3:14 PM 12984]
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-29 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 19:39]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://start.facemoods.com/?a=ironto
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} - hxxps://www.hpwindows7upgrade.arvato.com/north_america/EndCustomer/HPProdDetect.cab
FF - ProfilePath - c:\documents and settings\Drew Krajeski\Application Data\Mozilla\Firefox\Profiles\8dbdtts9.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.foxnews.com/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: AOL Toolbar: {7affbfae-c4e2-4915-8c0f-00fa3ec610a1} - %profile%\extensions\{7affbfae-c4e2-4915-8c0f-00fa3ec610a1}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: [removed] - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - user.js: yahoo.homepage.dontask - true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.ytff.general.dontshowhpoffer, true
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{98279C38-DE4B-4BCF-93C9-8EC26069D6F4} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-Verizon_McciTrayApp - c:\program files\Verizon\McciTrayApp.exe
HKLM-Run-VerizonServicepoint.exe - c:\program files\Verizon\VSP\VerizonServicepoint.exe
HKLM-Run-CaMnoMQJDh.exe - c:\documents and settings\All Users\Application Data\CaMnoMQJDh.exe
HKLM-Run-PAwhgCLyHSr.exe - c:\documents and settings\All Users\Application Data\PAwhgCLyHSr.exe
AddRemove-AOL Emergency Connect Utility 1.0 - c:\program files\Common Files\AOL\ECU\uninst.exe
AddRemove-Clickfree - c:\documents and settings\All Users\Application Data\CFTEMP\OGCleaner.exe
AddRemove-RadialpointClientGateway_is1 - c:\program files\Verizon\VSP\unins000.exe
AddRemove-ViewpointMediaPlayer - c:\program files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\documents and settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\bm_installer.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-29 10:46
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PCCUJobMgr]
"ImagePath"="\"c:\program files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files\Norton PC Checkup\Engine\2.0.12.27\diMaster.dll\" /prefetch:1"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(916)
c:\program files\Citrix\GoToAssist\514\G2AWinLogon.dll
c:\windows\system32\igfxdev.dll
.
Completion time: 2012-01-29 10:48:33
ComboFix-quarantined-files.txt 2012-01-29 15:48
.
Pre-Run: 472,520,695,808 bytes free
Post-Run: 472,660,000,768 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 75D8DD4EEE43676FD9150A1E875D8B3A

Thank you!!!

Good Morning, Jeff,

Here is the log you requested:

ComboFix 12-01-30.02 - Drew Krajeski 01/30/2012 10:25:16.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3061.2441 [GMT -5:00]
Running from: c:\documents and settings\[removed]\My Documents\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\Drew Krajeski\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\drew krajeski\application data\78E330.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-12-28 to 2012-01-30 )))))))))))))))))))))))))))))))
.
.
2012-01-29 23:36 . 2012-01-06 04:19 6557240 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{890A00FB-F1C4-4F30-8044-9931673A1899}\mpengine.dll
2012-01-29 04:41 . 2012-01-29 04:41 388096 —-a-r- c:\documents and settings\Drew Krajeski\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-01-29 04:41 . 2012-01-29 04:41 ——– d—–w- c:\program files\Trend Micro
2012-01-28 20:09 . 2012-01-29 05:20 ——– d—–w- c:\documents and settings\All Users\Application Data\PC Tools
2012-01-28 16:03 . 2011-03-30 06:22 1034240 —-a-r- c:\windows\system32\drivers\AE1200xp.sys
2012-01-25 21:16 . 2011-11-09 22:38 132768 —-a-w- c:\windows\system32\IPROSetMonitor.exe
2012-01-25 21:14 . 2007-08-07 05:28 28272 —-a-w- c:\windows\system32\NicCo2.dll
2012-01-25 21:11 . 2012-01-25 21:11 ——– d—–w- c:\program files\SystemRequirementsLab
2012-01-25 21:11 . 2012-01-25 21:11 ——– d—–w- c:\documents and settings\Drew Krajeski\Application Data\SystemRequirementsLab
2012-01-25 17:10 . 2008-12-05 20:32 221184 —-a-w- c:\windows\system32\RaCoInst.dll
2012-01-21 19:09 . 2012-01-21 19:09 ——– d—–w- c:\program files\ZyXEL Communications Corporation
2012-01-21 19:07 . 2012-01-21 19:07 ——– d—–w- c:\program files\WinPcap
2012-01-09 12:10 . 2012-01-09 12:10 ——– d—–w- c:\program files\Rocket Division Software
2012-01-06 11:31 . 2012-01-06 11:31 ——– d—–w- c:\program files\FoxTabVideoConverter
2012-01-03 13:22 . 2012-01-03 13:22 103864 —-a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2012-01-03 13:22 . 2012-01-03 13:22 103864 —-a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2011-12-31 20:32 . 2010-05-25 07:59 96488 —-a-w- c:\windows\system32\drivers\ssadbus.sys
2011-12-31 20:32 . 2010-05-25 07:59 12776 —-a-w- c:\windows\system32\drivers\ssadmdfl.sys
2011-12-31 20:32 . 2010-05-25 07:59 121576 —-a-w- c:\windows\system32\drivers\ssadmdm.sys
2011-12-31 20:32 . 2010-05-25 07:59 10344 —-a-w- c:\windows\system32\drivers\ssadcmnt.sys
2011-12-31 20:32 . 2010-05-25 07:59 10344 —-a-w- c:\windows\system32\drivers\ssadcm.sys
2011-12-31 20:32 . 2010-05-25 07:59 10216 —-a-w- c:\windows\system32\drivers\ssadwhnt.sys
2011-12-31 20:32 . 2010-05-25 07:59 10216 —-a-w- c:\windows\system32\drivers\ssadwh.sys
2011-12-31 20:32 . 2011-12-31 20:32 ——– d—–w- c:\documents and settings\All Users\Application Data\Samsung
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-06 04:19 . 2010-11-15 10:34 6557240 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-01-04 09:26 . 2010-11-13 21:29 236576 ——w- c:\windows\system32\MpSigStub.exe
2011-11-25 21:57 . 2004-08-11 21:00 293376 —-a-w- c:\windows\system32\winsrv.dll
2011-11-24 12:10 . 2011-11-24 12:10 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25 . 2004-08-11 21:00 1859584 —-a-w- c:\windows\system32\win32k.sys
2011-11-18 22:31 . 2011-11-18 22:31 169472 —-a-w- c:\windows\system32\Ncs2Setp.dll
2011-11-18 22:17 . 2011-11-18 22:17 683640 —-a-w- c:\windows\system32\ncs2dmix.dll
2011-11-18 22:17 . 2011-11-18 22:17 557176 —-a-w- c:\windows\system32\accesor.dll
2011-11-18 22:07 . 2011-11-18 22:07 160376 —-a-w- c:\windows\system32\ncs2instutility.dll
2011-11-18 22:04 . 2011-11-18 22:04 2241656 —-a-w- c:\windows\system32\ncscolib.dll
2011-11-18 12:35 . 2004-08-11 21:00 60416 —-a-w- c:\windows\system32\packager.exe
2011-11-16 14:21 . 2004-08-11 21:00 354816 —-a-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21 . 2004-08-11 21:00 152064 —-a-w- c:\windows\system32\schannel.dll
2011-11-09 21:27 . 2011-11-09 21:27 30368 —-a-w- c:\windows\system32\drivers\iqvw32.sys
2011-11-04 19:20 . 2004-08-11 21:00 916992 —-a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2004-08-11 21:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2004-08-11 21:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2004-08-11 21:00 385024 —-a-w- c:\windows\system32\html.iec
2011-11-03 15:28 . 2004-08-11 21:00 386048 —-a-w- c:\windows\system32\qdvd.dll
2011-11-03 15:28 . 2004-08-11 21:00 1292288 —-a-w- c:\windows\system32\quartz.dll
2011-11-01 16:07 . 2004-08-11 21:00 1288704 —-a-w- c:\windows\system32\ole32.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-29_15.46.56 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-30 15:16 . 2012-01-30 15:16 16384 c:\windows\Temp\Perflib_Perfdata_b4.dat
+ 2004-08-11 21:00 . 2012-01-30 15:20 72706 c:\windows\system32\perfc009.dat
+ 2004-08-11 21:00 . 2012-01-30 15:20 443884 c:\windows\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"ClickfreeMonitor"="c:\documents and settings\All Users\Application Data\clickfree\cfagent.exe" [2011-01-20 333648]
"SacReminderHDDV2N"="c:\documents and settings\all users\application data\Clickfree\C2NPlus\reminder\SacReminder.exe" [2011-01-20 870224]
"ISUSPM"="c:\documents and settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe" [2010-07-23 222496]
"WizMouse"="c:\program files\WizMouse\WizMouse.exe" [2011-04-29 115504]
"AOL Fast Start"="c:\program files\AOL Desktop 9.6\AOL.EXE" [2011-01-13 42320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-07-16 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-07-16 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-07-16 138008]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-16 16132608]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"PDVDDXSrv"="c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2008-02-26 128296]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\ssmmgr.exe" [2007-05-29 520192]
"HostManager"="c:\program files\Common Files\AOL\1270162804\ee\AOLSoftware.exe" [2010-03-08 41800]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"DNS7reminder"="c:\program files\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" [2007-04-16 259624]
"Nuance.ctfmngr"="c:\program files\Nuance\NaturallySpeaking11\Program\ctfmngr.exe" [2011-07-22 39856]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-04 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-10-10 13:35 10536 —-a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD DX\\PowerDVD.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD DX\\PDVDDXSrv.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\3.0\\aoltpsd3.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AOL 9.1\\waol.exe"=
"c:\\Program Files\\Common Files\\aol\\System Information\\sinf.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\aol\\1270162804\\ee\\aolsoftware.exe"=
"c:\\documents and settings\\all users\\application data\\Clickfree\\C2NPlus\\Reminder\\SacNetAgent.exe"=
.
R2 DragonSvc;Dragon Service;c:\program files\Common Files\Nuance\dgnsvc.exe [7/23/2010 12:19 PM 296808]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [1/25/2012 4:16 PM 132768]
R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\Norton PC Checkup\Engine\2.0.12.27\SymcPCCULaunchSvc.exe [8/9/2011 6:15 AM 135608]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [10/20/2009 1:19 PM 50704]
R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe [8/9/2011 6:15 AM 126392]
R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [1/28/2012 11:03 AM 1034240]
S2 SacNetAgentService_C57C4F854F53;SacNetAgentService_C57C4F854F53;c:\documents and settings\All Users\Application Data\Clickfree\C2NPlus\Reminder\SacNetAgent.exe [3/19/2011 1:09 PM 163664]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys –> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [6/2/2011 10:08 AM 11336]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [12/31/2011 3:32 PM 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [12/31/2011 3:32 PM 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [12/31/2011 3:32 PM 121576]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [7/24/2011 3:14 PM 12984]
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-30 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 19:39]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://start.facemoods.com/?a=ironto
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} - hxxps://www.hpwindows7upgrade.arvato.com/north_america/EndCustomer/HPProdDetect.cab
FF - ProfilePath - c:\documents and settings\Drew Krajeski\Application Data\Mozilla\Firefox\Profiles\8dbdtts9.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: [removed] - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - user.js: yahoo.homepage.dontask - true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.ytff.general.dontshowhpoffer, true
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-30 10:29
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PCCUJobMgr]
"ImagePath"="\"c:\program files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files\Norton PC Checkup\Engine\2.0.12.27\diMaster.dll\" /prefetch:1"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(916)
c:\program files\Citrix\GoToAssist\514\G2AWinLogon.dll
.
Completion time: 2012-01-30 10:30:21
ComboFix-quarantined-files.txt 2012-01-30 15:30
ComboFix2.txt 2012-01-29 15:48
.
Pre-Run: 472,688,635,904 bytes free
Post-Run: 472,789,274,624 bytes free
.
- - End Of File - - 2603AC388E2F9B7C6AD15189563E62BB

Everything seems to be back to normal; the computer is working great! Thanks! Any suggestions about the best anti-virus anti-malware anti-everything programs??

Hi Jeff,
Here is the CFScript.txt you requested:

ComboFix 12-02-01.01 - Drew Krajeski 02/01/2012 15:46:21.3.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3061.2490 [GMT -5:00]
Running from: c:\documents and settings\[removed]\My Documents\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\Drew Krajeski\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
FILE ::
"c:\documents and settings\Drew Krajeski\My Documents\cnet_fences_public_exe.exe"
"c:\documents and settings\Drew Krajeski\My Documents\cnet_realtek-drivers-update-utility_exe.exe"
"c:\documents and settings\Drew Krajeski\My Documents\FedEx_Invoice.zip"
"c:\documents and settings\Drew Krajeski\My Documents\FedEx_Invoice\FedEx_Invoice.exe"
"c:\documents and settings\Drew Krajeski\My Documents\VideoConverterSetup.exe"
"c:\program files\FoxTabVideoConverter\Uninstall\Uninstall.exe"
"c:\program files\FoxTabVideoConverter\VideoConverter.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Drew Krajeski\My Documents\cnet_fences_public_exe.exe
c:\documents and settings\Drew Krajeski\My Documents\cnet_realtek-drivers-update-utility_exe.exe
c:\documents and settings\Drew Krajeski\My Documents\FedEx_Invoice.zip
c:\documents and settings\Drew Krajeski\My Documents\FedEx_Invoice\FedEx_Invoice.exe
c:\documents and settings\Drew Krajeski\My Documents\VideoConverterSetup.exe
c:\program files\FoxTabVideoConverter\Uninstall\Uninstall.exe
c:\program files\FoxTabVideoConverter\VideoConverter.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-01-01 to 2012-02-01 )))))))))))))))))))))))))))))))
.
.
2012-02-01 20:40 . 2012-02-01 20:40 29904 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{14EE4E64-1A9B-4F46-864B-6BDDE1362AB1}\MpKsldff50f5a.sys
2012-02-01 16:55 . 2012-02-01 16:55 56200 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{14EE4E64-1A9B-4F46-864B-6BDDE1362AB1}\offreg.dll
2012-02-01 16:40 . 2012-01-06 04:19 6557240 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{14EE4E64-1A9B-4F46-864B-6BDDE1362AB1}\mpengine.dll
2012-01-30 23:03 . 2012-01-30 23:03 ——– d—–w- c:\program files\ESET
2012-01-30 22:50 . 2011-12-10 20:24 20464 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-01-29 04:41 . 2012-01-29 04:41 388096 —-a-r- c:\documents and settings\Drew Krajeski\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-01-29 04:41 . 2012-01-29 04:41 ——– d—–w- c:\program files\Trend Micro
2012-01-28 20:09 . 2012-01-29 05:20 ——– d—–w- c:\documents and settings\All Users\Application Data\PC Tools
2012-01-28 16:03 . 2011-03-30 06:22 1034240 —-a-r- c:\windows\system32\drivers\AE1200xp.sys
2012-01-25 21:16 . 2011-11-09 22:38 132768 —-a-w- c:\windows\system32\IPROSetMonitor.exe
2012-01-25 21:14 . 2007-08-07 05:28 28272 —-a-w- c:\windows\system32\NicCo2.dll
2012-01-25 21:11 . 2012-01-25 21:11 ——– d—–w- c:\program files\SystemRequirementsLab
2012-01-25 21:11 . 2012-01-25 21:11 ——– d—–w- c:\documents and settings\Drew Krajeski\Application Data\SystemRequirementsLab
2012-01-25 17:10 . 2008-12-05 20:32 221184 —-a-w- c:\windows\system32\RaCoInst.dll
2012-01-21 19:09 . 2012-01-21 19:09 ——– d—–w- c:\program files\ZyXEL Communications Corporation
2012-01-21 19:07 . 2012-01-21 19:07 ——– d—–w- c:\program files\WinPcap
2012-01-09 12:10 . 2012-01-09 12:10 ——– d—–w- c:\program files\Rocket Division Software
2012-01-06 11:31 . 2012-02-01 20:49 ——– d—–w- c:\program files\FoxTabVideoConverter
2012-01-03 13:22 . 2012-01-03 13:22 103864 —-a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2012-01-03 13:22 . 2012-01-03 13:22 103864 —-a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-31 12:44 . 2010-11-13 21:29 237072 ——w- c:\windows\system32\MpSigStub.exe
2012-01-06 04:19 . 2010-11-15 10:34 6557240 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-11-25 21:57 . 2004-08-11 21:00 293376 —-a-w- c:\windows\system32\winsrv.dll
2011-11-24 12:10 . 2011-11-24 12:10 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-23 13:25 . 2004-08-11 21:00 1859584 —-a-w- c:\windows\system32\win32k.sys
2011-11-18 22:31 . 2011-11-18 22:31 169472 —-a-w- c:\windows\system32\Ncs2Setp.dll
2011-11-18 22:17 . 2011-11-18 22:17 683640 —-a-w- c:\windows\system32\ncs2dmix.dll
2011-11-18 22:17 . 2011-11-18 22:17 557176 —-a-w- c:\windows\system32\accesor.dll
2011-11-18 22:07 . 2011-11-18 22:07 160376 —-a-w- c:\windows\system32\ncs2instutility.dll
2011-11-18 22:04 . 2011-11-18 22:04 2241656 —-a-w- c:\windows\system32\ncscolib.dll
2011-11-18 12:35 . 2004-08-11 21:00 60416 —-a-w- c:\windows\system32\packager.exe
2011-11-16 14:21 . 2004-08-11 21:00 354816 —-a-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21 . 2004-08-11 21:00 152064 —-a-w- c:\windows\system32\schannel.dll
2011-11-09 21:27 . 2011-11-09 21:27 30368 —-a-w- c:\windows\system32\drivers\iqvw32.sys
2011-11-04 19:20 . 2004-08-11 21:00 916992 —-a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2004-08-11 21:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2004-08-11 21:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2004-08-11 21:00 385024 —-a-w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-29_15.46.56 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-02-01 16:29 . 2012-02-01 16:29 16384 c:\windows\Temp\Perflib_Perfdata_100.dat
+ 2004-08-11 21:00 . 2012-02-01 20:36 72706 c:\windows\system32\perfc009.dat
+ 2004-08-11 21:00 . 2012-02-01 20:36 443884 c:\windows\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"ClickfreeMonitor"="c:\documents and settings\All Users\Application Data\clickfree\cfagent.exe" [2011-01-20 333648]
"SacReminderHDDV2N"="c:\documents and settings\all users\application data\Clickfree\C2NPlus\reminder\SacReminder.exe" [2011-01-20 870224]
"ISUSPM"="c:\documents and settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe" [2010-07-23 222496]
"WizMouse"="c:\program files\WizMouse\WizMouse.exe" [2011-04-29 115504]
"AOL Fast Start"="c:\program files\AOL Desktop 9.6\AOL.EXE" [2011-01-13 42320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-07-16 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-07-16 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-07-16 138008]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-16 16132608]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"PDVDDXSrv"="c:\program files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2008-02-26 128296]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\ssmmgr.exe" [2007-05-29 520192]
"HostManager"="c:\program files\Common Files\AOL\1270162804\ee\AOLSoftware.exe" [2010-03-08 41800]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"DNS7reminder"="c:\program files\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" [2007-04-16 259624]
"Nuance.ctfmngr"="c:\program files\Nuance\NaturallySpeaking11\Program\ctfmngr.exe" [2011-07-22 39856]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-04 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-10-10 13:35 10536 —-a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD DX\\PowerDVD.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD DX\\PDVDDXSrv.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\3.0\\aoltpsd3.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AOL 9.1\\waol.exe"=
"c:\\Program Files\\Common Files\\aol\\System Information\\sinf.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\aol\\1270162804\\ee\\aolsoftware.exe"=
"c:\\documents and settings\\all users\\application data\\Clickfree\\C2NPlus\\Reminder\\SacNetAgent.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"53271:UDP"= 53271:UDP:SacNetAgentCommunicationPort1
"53272:TCP"= 53272:TCP:SacNetAgentCommunicationPort2
"139:TCP"= 139:TCP:@xpsp2res.dll,-22004
"445:TCP"= 445:TCP:@xpsp2res.dll,-22005
"137:UDP"= 137:UDP:@xpsp2res.dll,-22001
"138:UDP"= 138:UDP:@xpsp2res.dll,-22002
.
R1 MpKsldff50f5a;MpKsldff50f5a;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{14EE4E64-1A9B-4F46-864B-6BDDE1362AB1}\MpKsldff50f5a.sys [2/1/2012 3:40 PM 29904]
R2 DragonSvc;Dragon Service;c:\program files\Common Files\Nuance\dgnsvc.exe [7/23/2010 12:19 PM 296808]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [1/25/2012 4:16 PM 132768]
R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\Norton PC Checkup\Engine\2.0.12.27\SymcPCCULaunchSvc.exe [8/9/2011 6:15 AM 135608]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [10/20/2009 1:19 PM 50704]
R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe [8/9/2011 6:15 AM 126392]
R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [1/28/2012 11:03 AM 1034240]
S2 SacNetAgentService_C57C4F854F53;SacNetAgentService_C57C4F854F53;c:\documents and settings\All Users\Application Data\Clickfree\C2NPlus\Reminder\SacNetAgent.exe [3/19/2011 1:09 PM 163664]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys –> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [6/2/2011 10:08 AM 11336]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [12/31/2011 3:32 PM 96488]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [12/31/2011 3:32 PM 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [12/31/2011 3:32 PM 121576]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [7/24/2011 3:14 PM 12984]
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - MPKSLDFF50F5A
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-01 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 19:39]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://start.facemoods.com/?a=ironto
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} - hxxps://www.hpwindows7upgrade.arvato.com/north_america/EndCustomer/HPProdDetect.cab
FF - ProfilePath - c:\documents and settings\Drew Krajeski\Application Data\Mozilla\Firefox\Profiles\8dbdtts9.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.foxnews.com/|www.google.com
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: [removed] - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - user.js: yahoo.homepage.dontask - true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.ytff.general.dontshowhpoffer, true
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-FoxTab Video Converter - c:\program files\FoxTabVideoConverter\Uninstall\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-01 15:50
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PCCUJobMgr]
"ImagePath"="\"c:\program files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files\Norton PC Checkup\Engine\2.0.12.27\diMaster.dll\" /prefetch:1"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(916)
c:\program files\Citrix\GoToAssist\514\G2AWinLogon.dll
.
Completion time: 2012-02-01 15:51:20
ComboFix-quarantined-files.txt 2012-02-01 20:51
ComboFix2.txt 2012-01-30 15:30
ComboFix3.txt 2012-01-29 15:48
.
Pre-Run: 472,486,236,160 bytes free
Post-Run: 472,594,075,648 bytes free
.
- - End Of File - - 8E762024ABA33A26D15E7D4DBDACE722

Thank you!!

Hi once again Jeff, Here are the two logs you requested. I presume I did it correctly. I also did not see any of the toolbars or Viewpoint Media Player. I hate those darn toolbars so I uninstalled them earlier. (My husband always ends up with all kinds of toolbars on his machine and it drives me nuts!) I also love Foxit Reader. (I have it on my computer.) I downloaded Foxit on this computer and made it the default pdf reader. Then I looked for any files in Adobe. Didn't see any. So I took a chance and uninstalled Adobe 9.5.0. Seems fine. Also followed your instructions for JavaRa. Then ran DDS as instructed and here are the two logs: . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.2.1 Run by [removed] at 11:47:07 on 2012-02-02 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3061.2383 [GMT -5:00] . AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095} AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost.exe -k DcomLaunch svchost.exe c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Common Files\Nuance\dgnsvc.exe C:\WINDOWS\system32\IProsetMonitor.exe C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\SymcPCCULaunchSvc.exe C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe c:\documents and settings\all users\application data\Clickfree\C2NPlus\Reminder\SacNetAgent.exe C:\Program Files\Dell Support Center\bin\sprtsvc.exe C:\Program Files\Norton PC Checkup\Engine\2.0.12.27\ccSvcHst.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\system32\igfxsrvc.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe C:\Program Files\Common Files\AOL\1270162804\ee\AOLSoftware.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Documents and Settings\All Users\Application Data\clickfree\cfagent.exe C:\documents and settings\all users\application data\Clickfree\C2NPlus\reminder\SacReminder.exe C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe C:\Program Files\WizMouse\WizMouse.exe C:\Program Files\AOL Desktop 9.6\waol.exe C:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\AOL Desktop 9.6\shellmon.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Java\jre6\bin\jqs.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://start.facemoods.com/?a=ironto uURLSearchHooks: H - No File BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.0 runtime\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter uRun: [ClickfreeMonitor] c:\documents and settings\all users\application data\clickfree\cfagent.exe uRun: [SacReminderHDDV2N] c:\documents and settings\all users\application data\clickfree\c2nplus\reminder\SacReminder.exe uRun: [ISUSPM] c:\documents and settings\all users\application data\flexnet\connect\11\ISUSPM.exe -scheduler uRun: [WizMouse] "c:\program files\wizmouse\WizMouse.exe" uRun: [AOL Fast Start] "c:\program files\aol desktop 9.6\AOL.EXE" -b uRun: [InstallIQUpdater] "c:\program files\w3i\installiqupdater\InstallIQUpdater.exe" /silent /autorun mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe" mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe" mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [Samsung PanelMgr] c:\windows\samsung\panelmgr\ssmmgr.exe /autorun mRun: [HostManager] c:\program files\common files\aol\1270162804\ee\AOLSoftware.exe mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey mRun: [DNS7reminder] "c:\program files\nuance\naturallyspeaking11\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\nuance\naturallyspeaking11\Ereg.ini mRun: [Nuance.ctfmngr] c:\program files\nuance\naturallyspeaking11\program\ctfmngr.exe /restore mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t mPolicies-system: EnableLinkedConnections = 1 (0x1) IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon%20FiOS%20Installer.cab DPF: {32505657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/A/9/0A9F8B32-9F8C-4D74-A130-E4CAB36EB01F/wmvadvd.cab DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} - hxxps://www.hpwindows7upgrade.arvato.com/north_america/EndCustomer/HPProdDetect.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} - hxxp://download.microsoft.com/download/7/E/6/7E6A8567-DFE4-4624-87C3-163549BE2704/clearadj.cab TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{E4D8A072-3585-4EEB-ACE6-BE1418B200FE} : DhcpNameServer = 192.168.1.1 Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll Notify: igfxcui - igfxdev.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\drew krajeski\application data\mozilla\firefox\profiles\8dbdtts9.default\ FF - prefs.js: browser.search.selectedEngine - Yahoo FF - prefs.js: browser.startup.homepage - hxxp://www.foxnews.com/|www.google.com FF - plugin: c:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\logitech\harmony remote driver\NprtHarmonyPlugin.dll FF - plugin: c:\program files\mozilla firefox\plugins\NPcol400.dll FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdnupdater2.dll FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension FF - Ext: Java Quick Starter: [removed] - c:\program files\java\jre6\lib\deploy\jqs\ff . —- FIREFOX POLICIES —- FF - user.js: yahoo.ytff.general.dontshowhpoffer - true ============= SERVICES / DRIVERS =============== . R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-3-25 165648] R2 DragonSvc;Dragon Service;c:\program files\common files\nuance\dgnsvc.exe [2010-7-23 296808] R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [2012-1-25 132768] R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\norton pc checkup\engine\2.0.12.27\SymcPCCULaunchSvc.exe [2011-8-9 135608] R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704] R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\norton pc checkup\engine\2.0.12.27\ccSvcHst.exe [2011-8-9 126392] R2 SacNetAgentService_C57C4F854F53;SacNetAgentService_C57C4F854F53;c:\documents and settings\all users\application data\clickfree\c2nplus\reminder\SacNetAgent.exe [2011-3-19 163664] R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [2012-1-28 1034240] S2 SSPORT;SSPORT;\??\c:\windows\system32\drivers\ssport.sys –> c:\windows\system32\drivers\SSPORT.sys [?] S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2011-6-2 11336] S3 rt2870;Linksys 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys –> c:\windows\system32\drivers\rt2870.sys [?] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-12-31 96488] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-12-31 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-12-31 121576] S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [2011-7-24 12984] . =============== Created Last 30 ================ . 2012-02-02 16:45:01 ——– d—–w- c:\program files\Oracle 2012-02-02 16:44:51 637848 —-a-w- c:\windows\system32\npdeployJava1.dll 2012-02-02 16:25:03 ——– d—–w- c:\program files\Foxit Software 2012-02-02 11:45:04 ——– d—–w- c:\program files\GIMP-2.0 2012-02-02 11:44:16 ——– d-sh–w- c:\windows\system32\AI_RecycleBin 2012-02-02 11:44:15 ——– d—–w- c:\program files\W3i 2012-02-02 11:44:15 ——– d—–w- c:\documents and settings\all users\application data\W3i 2012-02-01 21:32:00 6557240 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f7eb2557-0c6b-4f3a-a8fc-df952ee710a4}\mpengine.dll 2012-01-30 23:03:07 ——– d—–w- c:\program files\ESET 2012-01-30 22:50:08 20464 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-01-29 15:43:10 ——– d-sha-r- C:\cmdcons 2012-01-29 15:42:14 98816 —-a-w- c:\windows\sed.exe 2012-01-29 15:42:14 518144 —-a-w- c:\windows\SWREG.exe 2012-01-29 15:42:14 256000 —-a-w- c:\windows\PEV.exe 2012-01-29 15:42:14 208896 —-a-w- c:\windows\MBR.exe 2012-01-29 04:41:21 388096 —-a-r- c:\documents and settings\drew krajeski\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe 2012-01-29 04:41:20 ——– d—–w- c:\program files\Trend Micro 2012-01-28 20:09:59 ——– d—–w- c:\documents and settings\all users\application data\PC Tools 2012-01-28 16:03:22 1034240 —-a-r- c:\windows\system32\drivers\AE1200xp.sys 2012-01-25 21:16:06 132768 —-a-w- c:\windows\system32\IPROSetMonitor.exe 2012-01-25 21:14:24 28272 —-a-w- c:\windows\system32\NicCo2.dll 2012-01-25 21:11:20 ——– d—–w- c:\program files\SystemRequirementsLab 2012-01-25 17:10:40 221184 —-a-w- c:\windows\system32\RaCoInst.dll 2012-01-21 19:09:22 ——– d—–w- c:\program files\ZyXEL Communications Corporation 2012-01-21 19:07:06 ——– d—–w- c:\program files\WinPcap 2012-01-09 12:10:58 ——– d—–w- c:\program files\Rocket Division Software 2012-01-06 11:31:07 ——– d—–w- c:\program files\FoxTabVideoConverter . ==================== Find3M ==================== . 2012-01-31 12:44:05 237072 ——w- c:\windows\system32\MpSigStub.exe 2011-11-25 21:57:19 293376 —-a-w- c:\windows\system32\winsrv.dll 2011-11-24 12:10:06 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-11-23 13:25:32 1859584 —-a-w- c:\windows\system32\win32k.sys 2011-11-18 22:31:14 169472 —-a-w- c:\windows\system32\Ncs2Setp.dll 2011-11-18 22:17:04 683640 —-a-w- c:\windows\system32\ncs2dmix.dll 2011-11-18 22:17:04 557176 —-a-w- c:\windows\system32\accesor.dll 2011-11-18 22:07:10 160376 —-a-w- c:\windows\system32\ncs2instutility.dll 2011-11-18 22:04:14 2241656 —-a-w- c:\windows\system32\ncscolib.dll 2011-11-18 12:35:08 60416 —-a-w- c:\windows\system32\packager.exe 2011-11-16 14:21:44 354816 —-a-w- c:\windows\system32\winhttp.dll 2011-11-16 14:21:44 152064 —-a-w- c:\windows\system32\schannel.dll 2011-11-09 21:27:18 30368 —-a-w- c:\windows\system32\drivers\iqvw32.sys 2011-11-09 00:56:48 141312 —-a-w- c:\windows\system32\javacpl.cpl 2011-11-09 00:56:06 567184 —-a-w- c:\windows\system32\deployJava1.dll 2011-11-04 19:20:51 916992 —-a-w- c:\windows\system32\wininet.dll 2011-11-04 19:20:51 43520 —-a-w- c:\windows\system32\licmgr10.dll 2011-11-04 19:20:51 1469440 —-a-w- c:\windows\system32\inetcpl.cpl . ============= FINISH: 11:47:27.96 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume2 Install Date: 4/11/2009 6:50:05 AM System Uptime: 2/2/2012 11:09:18 AM (0 hours ago) . Motherboard: Dell Inc. | | 0RY007 Processor: Intel Pentium III Xeon processor | Socket 775 | 2527/266mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 466 GiB total, 439.766 GiB free. D: is CDROM () E: is Removable F: is Removable G: is Removable H: is Removable I: is CDROM (CDFS) J: is Removable . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP579: 11/3/2011 5:10:24 PM - Software Distribution Service 3.0 RP580: 11/10/2011 6:36:57 AM - Software Distribution Service 3.0 RP581: 11/11/2011 3:00:14 AM - Software Distribution Service 3.0 RP582: 11/11/2011 6:45:58 AM - Software Distribution Service 3.0 RP583: 11/11/2011 3:54:11 PM - Software Distribution Service 3.0 RP584: 11/12/2011 5:02:27 PM - System Checkpoint RP585: 11/13/2011 1:38:27 AM - Software Distribution Service 3.0 RP586: 11/14/2011 2:20:21 AM - System Checkpoint RP587: 11/15/2011 5:54:49 AM - Software Distribution Service 3.0 RP588: 11/16/2011 6:09:44 AM - Software Distribution Service 3.0 RP589: 11/17/2011 5:37:32 PM - Software Distribution Service 3.0 RP590: 11/18/2011 6:21:09 PM - System Checkpoint RP591: 11/19/2011 9:25:45 AM - Software Distribution Service 3.0 RP592: 11/20/2011 10:09:25 AM - System Checkpoint RP593: 11/21/2011 5:09:42 AM - Software Distribution Service 3.0 RP594: 11/23/2011 5:36:54 AM - Software Distribution Service 3.0 RP595: 11/24/2011 7:07:12 AM - Software Distribution Service 3.0 RP596: 11/26/2011 4:46:11 AM - Software Distribution Service 3.0 RP597: 11/27/2011 7:28:04 AM - Software Distribution Service 3.0 RP598: 11/28/2011 7:18:25 PM - Software Distribution Service 3.0 RP599: 11/30/2011 5:40:22 AM - Software Distribution Service 3.0 RP600: 12/1/2011 6:03:15 AM - Software Distribution Service 3.0 RP601: 12/2/2011 6:33:18 AM - Software Distribution Service 3.0 RP602: 12/3/2011 5:37:48 PM - Software Distribution Service 3.0 RP603: 12/4/2011 6:44:39 PM - System Checkpoint RP604: 12/5/2011 6:07:21 AM - Software Distribution Service 3.0 RP605: 12/6/2011 9:01:43 PM - Software Distribution Service 3.0 RP606: 12/8/2011 6:13:55 AM - Software Distribution Service 3.0 RP607: 12/9/2011 5:30:41 PM - Software Distribution Service 3.0 RP608: 12/10/2011 5:49:53 PM - Software Distribution Service 3.0 RP609: 12/11/2011 7:46:33 PM - System Checkpoint RP610: 12/12/2011 6:45:01 PM - Software Distribution Service 3.0 RP611: 12/13/2011 8:38:55 PM - Software Distribution Service 3.0 RP612: 12/14/2011 7:42:01 AM - Software Distribution Service 3.0 RP613: 12/15/2011 5:26:49 AM - Software Distribution Service 3.0 RP614: 12/16/2011 6:54:26 AM - System Checkpoint RP615: 12/16/2011 4:33:24 PM - Software Distribution Service 3.0 RP616: 12/17/2011 4:34:10 PM - System Checkpoint RP617: 12/18/2011 7:01:26 AM - Software Distribution Service 3.0 RP618: 12/19/2011 8:40:47 PM - Software Distribution Service 3.0 RP619: 12/20/2011 9:17:57 PM - System Checkpoint RP620: 12/20/2011 9:37:48 PM - Software Distribution Service 3.0 RP621: 12/22/2011 5:12:26 AM - Software Distribution Service 3.0 RP622: 12/24/2011 5:26:31 AM - Software Distribution Service 3.0 RP623: 12/25/2011 2:25:29 AM - Software Distribution Service 3.0 RP624: 12/25/2011 5:08:15 PM - Software Distribution Service 3.0 RP625: 12/26/2011 6:01:16 PM - System Checkpoint RP626: 12/27/2011 5:10:25 AM - Software Distribution Service 3.0 RP627: 12/28/2011 7:00:34 AM - Software Distribution Service 3.0 RP628: 12/29/2011 2:36:54 PM - Software Distribution Service 3.0 RP629: 12/31/2011 7:15:47 AM - Software Distribution Service 3.0 RP630: 1/1/2012 7:34:33 AM - Software Distribution Service 3.0 RP631: 1/1/2012 7:37:28 PM - Software Distribution Service 3.0 RP632: 1/2/2012 8:54:54 PM - System Checkpoint RP633: 1/3/2012 6:57:31 AM - Software Distribution Service 3.0 RP634: 1/4/2012 8:53:13 PM - Software Distribution Service 3.0 RP635: 1/6/2012 6:08:07 AM - Software Distribution Service 3.0 RP636: 1/7/2012 7:04:58 AM - System Checkpoint RP637: 1/7/2012 7:24:14 AM - Software Distribution Service 3.0 RP638: 1/8/2012 7:44:55 AM - Software Distribution Service 3.0 RP639: 1/9/2012 9:24:48 AM - System Checkpoint RP640: 1/9/2012 7:33:33 PM - Software Distribution Service 3.0 RP641: 1/11/2012 7:02:21 AM - Software Distribution Service 3.0 RP642: 1/11/2012 8:25:40 PM - Software Distribution Service 3.0 RP643: 1/12/2012 6:50:30 AM - Software Distribution Service 3.0 RP644: 1/12/2012 4:49:57 PM - Software Distribution Service 3.0 RP645: 1/13/2012 5:01:13 PM - Software Distribution Service 3.0 RP646: 1/14/2012 4:56:29 PM - Software Distribution Service 3.0 RP647: 1/15/2012 1:43:53 AM - Software Distribution Service 3.0 RP648: 1/16/2012 2:16:41 AM - System Checkpoint RP649: 1/16/2012 6:18:41 AM - Software Distribution Service 3.0 RP650: 1/18/2012 6:20:23 AM - Software Distribution Service 3.0 RP651: 1/19/2012 6:28:04 AM - Software Distribution Service 3.0 RP652: 1/21/2012 6:42:27 AM - System Checkpoint RP653: 1/21/2012 2:09:21 PM - Installed ZyXEL PLA-4xx Series Configuration Utility RP654: 1/21/2012 11:57:16 PM - Software Distribution Service 3.0 RP655: 1/23/2012 6:33:51 AM - Software Distribution Service 3.0 RP656: 1/24/2012 6:56:27 AM - Software Distribution Service 3.0 RP657: 1/25/2012 7:12:41 AM - System Checkpoint RP658: 1/25/2012 4:15:41 PM - Installed VC90_CRT_x86. RP659: 1/25/2012 4:15:50 PM - Installed VC_CRT_x86 RP660: 1/25/2012 4:15:55 PM - Installed Intel® Network Connections. RP661: 1/25/2012 6:09:56 PM - Software Distribution Service 3.0 RP662: 1/26/2012 6:17:05 PM - System Checkpoint RP663: 1/27/2012 7:09:28 AM - Software Distribution Service 3.0 RP664: 1/28/2012 9:18:08 AM - System Checkpoint RP665: 1/28/2012 11:14:22 AM - Configured Linksys WUSB100 RangePlus Wireless USB Adapter RP666: 1/28/2012 11:20:26 AM - Software Distribution Service 3.0 RP667: 1/28/2012 11:41:18 PM - Installed HiJackThis RP668: 1/29/2012 12:18:08 AM - Removed Ask Toolbar. RP669: 1/29/2012 6:36:09 PM - Software Distribution Service 3.0 RP670: 1/30/2012 7:58:54 PM - System Checkpoint RP671: 1/31/2012 6:29:54 AM - Software Distribution Service 3.0 RP672: 2/1/2012 11:40:06 AM - Software Distribution Service 3.0 RP673: 2/2/2012 11:28:20 AM - Removed Adobe Reader 9.5.0. RP674: 2/2/2012 11:44:36 AM - Installed Java™ 7 Update 2 RP675: 2/2/2012 11:44:59 AM - Installed JavaFX 2.0.2 . ==== Installed Programs ====================== . Acrobat.com Adobe AIR Adobe Flash Player 10 Plugin Adobe Flash Player 11 ActiveX AOL Uninstaller (Choose which Products to Remove) Apple Software Update AVS Audio Converter version 5.1 AVS Update Manager 1.0 AVS4YOU Software Navigator 1.3 Browser Address Error Redirector Compatibility Pack for the 2007 Office system Coupon Printer for Windows Dell Driver Reset Tool Dell Support Center (Support Software) Download Updater (AOL LLC) Dragon NaturallySpeaking 11 Driver Detective ESET Online Scanner v3 Foxit Reader 5.1 GIMP GoToAssist 8.0.0.514 Grab & Burn, Version 4.0.1 ( Build 2005-09-21, Win32, CSS ) GRTSoft Data Recovery 2.5 High Definition Audio Driver Package - KB835221 HiJackThis Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows XP (KB2158563) Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB2570791) Hotfix for Windows XP (KB2633952) Hotfix for Windows XP (KB946554) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB970653-v3) Hotfix for Windows XP (KB976098-v2) Hotfix for Windows XP (KB979306) Hotfix for Windows XP (KB981793) InstallIQ Updater Intel® Graphics Media Accelerator Driver Intel® Network Connections [removed] iSkysoft iMedia Converter(Build [removed]) Java Auto Updater Java™ 6 Update 24 Java™ 6 Update 7 Java™ 7 Update 2 JavaFX 2.0.2 LekuSoft Blu ray Ripper 5.50 Logitech Harmony Remote Software Malwarebytes Anti-Malware version 1.60.1.1000 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2656353) Microsoft .NET Framework 1.1 Security Update (KB979906) Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Antimalware Microsoft Application Error Reporting Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Security Client Microsoft Security Essentials Microsoft Silverlight Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft VC9 runtime libraries Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Works Mozilla Firefox (3.6.25) MSN MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) MSXML 6 Service Pack 2 (KB954459) Norton PC Checkup OGA Notifier 2.0.0048.0 Photo Stamp Remover 3.1 PowerDVD QuickTime Realtek Drivers Update Utility 3.0 Realtek High Definition Audio Driver Roxio Creator Audio Roxio Creator Copy Roxio Creator Data Roxio Creator DE Roxio Creator Tools Roxio Express Labeler 3 Roxio Update Manager Samsung CLP-300 Series SAMSUNG USB Driver for Mobile Phones SearchAssist Security Advisor Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft Windows (KB2564958) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Internet Explorer 8 (KB2360131) Security Update for Windows Internet Explorer 8 (KB2416400) Security Update for Windows Internet Explorer 8 (KB2482017) Security Update for Windows Internet Explorer 8 (KB2497640) Security Update for Windows Internet Explorer 8 (KB2510531) Security Update for Windows Internet Explorer 8 (KB2530548) Security Update for Windows Internet Explorer 8 (KB2544521) Security Update for Windows Internet Explorer 8 (KB2559049) Security Update for Windows Internet Explorer 8 (KB2586448) Security Update for Windows Internet Explorer 8 (KB2618444) Security Update for Windows Internet Explorer 8 (KB971961) Security Update for Windows Internet Explorer 8 (KB981332) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB968816) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows Media Player (KB979402) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2121546) Security Update for Windows XP (KB2160329) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2259922) Security Update for Windows XP (KB2279986) Security Update for Windows XP (KB2286198) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2296199) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2412687) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2436673) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476490) Security Update for Windows XP (KB2476687) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479628) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2481109) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485376) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2491683) Security Update for Windows XP (KB2503658) Security Update for Windows XP (KB2503665) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2506223) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2507938) Security Update for Windows XP (KB2508272) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2511455) Security Update for Windows XP (KB2524375) Security Update for Windows XP (KB2535512) Security Update for Windows XP (KB2536276-v2) Security Update for Windows XP (KB2536276) Security Update for Windows XP (KB2544893-v2) Security Update for Windows XP (KB2544893) Security Update for Windows XP (KB2555917) Security Update for Windows XP (KB2562937) Security Update for Windows XP (KB2566454) Security Update for Windows XP (KB2567053) Security Update for Windows XP (KB2567680) Security Update for Windows XP (KB2570222) Security Update for Windows XP (KB2570947) Security Update for Windows XP (KB2584146) Security Update for Windows XP (KB2585542) Security Update for Windows XP (KB2592799) Security Update for Windows XP (KB2598479) Security Update for Windows XP (KB2603381) Security Update for Windows XP (KB2618451) Security Update for Windows XP (KB2619339) Security Update for Windows XP (KB2620712) Security Update for Windows XP (KB2624667) Security Update for Windows XP (KB2631813) Security Update for Windows XP (KB2633171) Security Update for Windows XP (KB2639417) Security Update for Windows XP (KB2646524) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB938464-v2) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950759) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958215) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960714) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961371) Security Update for Windows XP (KB961373) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB963027) Security Update for Windows XP (KB968537) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB969897) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB969947) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971486) Security Update for Windows XP (KB971557) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973525) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975561) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977165) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978251) Security Update for Windows XP (KB978262) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979559) Security Update for Windows XP (KB979683) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980195) Security Update for Windows XP (KB980218) Security Update for Windows XP (KB980232) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981852) Security Update for Windows XP (KB981957) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982214) Security Update for Windows XP (KB982665) Security Update for Windows XP (KB982802) Spykee System Requirements Lab for Intel Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows Internet Explorer 8 (KB976662) Update for Windows XP (KB2141007) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB2541763) Update for Windows XP (KB2607712) Update for Windows XP (KB2616676) Update for Windows XP (KB2641690) Update for Windows XP (KB951978) Update for Windows XP (KB955759) Update for Windows XP (KB955839) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB971029) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) Visual C++ 9.0 Runtime for Dragon NaturallySpeaking Vz In Home Agent WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Internet Explorer 8 Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 3 WinPcap 4.1.1 Wise Disk Cleaner Professional v5.2 WizMouse v1.6.0.1 Your Uninstaller! 7 ZyXEL PLA-4xx Series Configuration Utility . ==== Event Viewer Messages From Past Week ======== . 2/1/2012 5:23:41 PM, error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.2.102 with the system having network hardware address 70:73:CB:1A:A1:07. Network operations on this system may be disrupted as a result. 2/1/2012 3:34:03 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the SharedAccess service. 2/1/2012 3:33:33 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the ShellHWDetection service. 2/1/2012 3:33:03 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Schedule service. 2/1/2012 3:32:33 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the WZCSVC service. 2/1/2012 11:29:17 AM, error: Dhcp [1002] - The IP address lease 192.168.2.109 for the Network Card with network address C0C1C06C1487 has been denied by the DHCP server 192.168.2.1 (The DHCP Server sent a DHCPNACK message). 1/31/2012 6:19:33 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume. 1/31/2012 6:19:26 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor 1/28/2012 3:12:30 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046} 1/28/2012 3:11:11 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 1/28/2012 3:09:25 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 1/28/2012 2:45:06 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm MpFilter 1/28/2012 11:53:59 PM, error: Service Control Manager [7034] - The SacNetAgentService_C57C4F854F53 service terminated unexpectedly. It has done this 1 time(s). 1/28/2012 11:52:53 AM, error: Service Control Manager [7000] - The PCASp50 NDIS Protocol Driver service failed to start due to the following error: The system cannot find the file specified. 1/27/2012 6:57:58 AM, error: Service Control Manager [7000] - The SSPORT service failed to start due to the following error: The system cannot find the file specified. 1/27/2012 6:57:58 AM, error: Service Control Manager [7000] - The DgiVecp service failed to start due to the following error: The system cannot find the device specified. . ==== End Of File ===========================