This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Slow PC; Browser leaves stubs; CD drive not seen [Solved]

34 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi JonTom,

Click "Start" Go to My Computer-> Tools-> Folder Options-> View tab:
Choose to "Show hidden files and folders".
Uncheck "Hide extensions for known file types".
Close the window with "OK".
-
I'm glad you got it sorted


Unfortunately, it is NOT sorted. This eve, I discovered that the problem still exists. I wish I KNEW how that check-box becomes checked! I UN-check it & click "Apply" & "OK". Yet, repeatedly, it is changed BACK to be checked. :( And I am the ONLY user on this machine.
=============================================================================

Please un-install the following . . . .

your post: Sep 15 2012, 06:57 PM
I have NOT yet performed any of these operations, as we are not complete, as some of these apps I am not sure if they are still needed.. Upon completion, I will complete these steps.
=============================================================================

The MBRCheck log is incomplete. Please post the remainder of the log . . .

If you review my previous post [Posted Sep 17 2012,, 06:53 PM]:

I ran MBRCheck. My machine hung. Yet, it also had produced the log file needed. I have posted this.

I had posted the file which was produced. There exists NO "remainder" of the log.
Today, I ran MBRCheck yet again. And, yet again, my machine hung. i.e. my machine CRASHED! And yet again, it also produced a partial log which I will post here. MBRCheck will NOT run to completion on this machine. :(
=============================================================================

The OTL log I have produced


MBRCheck "partial" log to follow
OTL log to follow:


###############################################################################


MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x000001fd

Kernel Drivers (total 132):
0x804D7000 \WINDOWS\system32\ntoskrnl.exe
0x806EF000 \WINDOWS\system32\hal.dll
0xF8B36000 \WINDOWS\system32\KDCOM.DLL
0xF8A46000 \WINDOWS\system32\BOOTVID.dll
0xF85E7000 ACPI.sys
0xF8B38000 \WINDOWS\System32\DRIVERS\WMILIB.SYS
0xF85D6000 pci.sys
0xF8636000 isapnp.sys
0xF8BFE000 pciide.sys
0xF88B6000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
0xF8646000 MountMgr.sys
0xF85B7000 ftdisk.sys
0xF88BE000 PartMgr.sys
0xF8656000 VolSnap.sys
0xF859F000 atapi.sys
0xF88C6000 nvidesm.sys
0xF8587000 \WINDOWS\system32\drivers\SCSIPORT.SYS
0xF8666000 disk.sys
0xF8676000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
0xF8567000 fltmgr.sys
0xF8555000 sr.sys
0xF8686000 PxHelp20.sys
0xF853E000 KSecDD.sys
0xF84B1000 Ntfs.sys
0xF8484000 NDIS.sys
0xF8A4A000 nv_agp.sys
0xF846A000 Mup.sys
0xF8736000 \SystemRoot\System32\DRIVERS\amdk7.sys
0xF899E000 \SystemRoot\System32\DRIVERS\usbohci.sys
0xF77DA000 \SystemRoot\System32\DRIVERS\USBPORT.SYS
0xF89A6000 \SystemRoot\System32\DRIVERS\usbehci.sys
0xF77C6000 \SystemRoot\System32\DRIVERS\NVENET.sys
0xF8AC6000 \SystemRoot\system32\drivers\nvax.sys
0xF7703000 \SystemRoot\System32\DRIVERS\winachcf.sys
0xF89AE000 \SystemRoot\System32\Drivers\Modem.SYS
0xF8746000 \SystemRoot\System32\DRIVERS\imapi.sys
0xF8756000 \SystemRoot\System32\DRIVERS\cdrom.sys
0xF8766000 \SystemRoot\System32\DRIVERS\redbook.sys
0xF76E0000 \SystemRoot\System32\DRIVERS\ks.sys
0xF89B6000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
0xF7511000 \SystemRoot\System32\DRIVERS\nv4_mini.sys
0xF74FD000 \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
0xF89BE000 \SystemRoot\System32\DRIVERS\fdc.sys
0xF8776000 \SystemRoot\System32\DRIVERS\serial.sys
0xF8AD2000 \SystemRoot\System32\DRIVERS\serenum.sys
0xF74E9000 \SystemRoot\System32\DRIVERS\parport.sys
0xF8786000 \SystemRoot\System32\DRIVERS\i8042prt.sys
0xF89C6000 \SystemRoot\System32\DRIVERS\kbdclass.sys
0xF8AD6000 \SystemRoot\System32\DRIVERS\gameenum.sys
0xF8C9E000 \SystemRoot\system32\drivers\msmpu401.sys
0xF74C5000 \SystemRoot\system32\drivers\portcls.sys
0xF8796000 \SystemRoot\system32\drivers\drmk.sys
0xF8C9F000 \SystemRoot\System32\DRIVERS\audstub.sys
0xF87A6000 \SystemRoot\System32\DRIVERS\rasl2tp.sys
0xF8ADA000 \SystemRoot\System32\DRIVERS\ndistapi.sys
0xF74AE000 \SystemRoot\System32\DRIVERS\ndiswan.sys
0xF87B6000 \SystemRoot\System32\DRIVERS\raspppoe.sys
0xF87C6000 \SystemRoot\System32\DRIVERS\raspptp.sys
0xF89CE000 \SystemRoot\System32\DRIVERS\TDI.SYS
0xF749D000 \SystemRoot\System32\DRIVERS\psched.sys
0xF87D6000 \SystemRoot\System32\DRIVERS\msgpc.sys
0xF89DE000 \SystemRoot\System32\DRIVERS\ptilink.sys
0xF89E6000 \SystemRoot\System32\DRIVERS\raspti.sys
0xF87F6000 \SystemRoot\System32\DRIVERS\termdd.sys
0xF89EE000 \SystemRoot\System32\DRIVERS\mouclass.sys
0xF8B76000 \SystemRoot\System32\DRIVERS\swenum.sys
0xF7390000 \SystemRoot\System32\DRIVERS\update.sys
0xF8AEA000 \SystemRoot\System32\DRIVERS\mssmbios.sys
0xF8806000 \SystemRoot\System32\DRIVERS\usbhub.sys
0xF8B78000 \SystemRoot\System32\DRIVERS\USBD.SYS
0xF8816000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF7355000 \SystemRoot\system32\drivers\nvapu.sys
0xF728C000 \SystemRoot\system32\drivers\nvmcp.sys
0xF8846000 \SystemRoot\system32\drivers\nvarm.sys
0xF8B16000 \SystemRoot\system32\drivers\MODEMCSA.sys
0xF89F6000 \SystemRoot\System32\DRIVERS\flpydisk.sys
0xF8B9E000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF8CDB000 \SystemRoot\System32\Drivers\Null.SYS
0xF8BA0000 \SystemRoot\System32\Drivers\Beep.SYS
0xF8A06000 \SystemRoot\System32\drivers\vga.sys
0xF8BA2000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF8BA4000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF8A0E000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF8A16000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF7822000 \SystemRoot\System32\DRIVERS\rasacd.sys
0xF6131000 \SystemRoot\System32\DRIVERS\ipsec.sys
0xF60D8000 \SystemRoot\System32\DRIVERS\tcpip.sys
0xF8876000 \SystemRoot\System32\Drivers\aswTdi.SYS
0xF60B0000 \SystemRoot\System32\DRIVERS\netbt.sys
0xF8A1E000 \SystemRoot\System32\Drivers\AswRdr.SYS
0xF7816000 \SystemRoot\System32\drivers\ws2ifsl.sys
0xF608E000 \SystemRoot\System32\drivers\afd.sys
0xF88A6000 \SystemRoot\System32\DRIVERS\netbios.sys
0xF6063000 \SystemRoot\System32\DRIVERS\rdbss.sys
0xF5FF3000 \SystemRoot\System32\DRIVERS\mrxsmb.sys
0xF86C6000 \SystemRoot\System32\Drivers\Fips.SYS
0xF5FCD000 \SystemRoot\System32\DRIVERS\ipnat.sys
0xF8886000 \SystemRoot\System32\DRIVERS\wanarp.sys
0xF8D88000 \SystemRoot\System32\Drivers\BANTExt.sys
0xF2938000 \SystemRoot\System32\Drivers\aswSP.SYS
0xF8966000 \SystemRoot\System32\DRIVERS\USBSTOR.SYS
0xF6170000 \SystemRoot\System32\DRIVERS\hidusb.sys
0xF482D000 \SystemRoot\System32\DRIVERS\HIDCLASS.SYS
0xF897E000 \SystemRoot\System32\DRIVERS\HIDPARSE.SYS
0xF6168000 \SystemRoot\System32\DRIVERS\mouhid.sys
0xF0668000 \SystemRoot\System32\Drivers\aswSnx.SYS
0xEB939000 \SystemRoot\System32\Drivers\ASPI32.SYS
0xF27FD000 \SystemRoot\System32\Drivers\Aavmker4.SYS
0xEB80F000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xF0D10000 \SystemRoot\System32\Drivers\dump_diskdump.sys
0xEB860000 \SystemRoot\System32\Drivers\dump_nvidesm.sys
0xBF800000 \SystemRoot\System32\win32k.sys
0xF0D04000 \SystemRoot\System32\drivers\Dxapi.sys
0xF0AF2000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF8C85000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\nv4_disp.dll
0xBF426000 \SystemRoot\System32\ATMFD.DLL
0xED397000 \SystemRoot\System32\Drivers\aswFsBlk.SYS
0xF6178000 \SystemRoot\System32\DRIVERS\ndisuio.sys
0xEBABB000 \SystemRoot\System32\Drivers\aswMon2.SYS
0xEBA56000 \SystemRoot\system32\drivers\wdmaud.sys
0xF5F15000 \SystemRoot\system32\drivers\sysaudio.sys
0xEBE63000 \??\C:\WINDOWS\system32\MLPTDR_Q.sys
0xF8BA6000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xEBF4B000 \SystemRoot\System32\DRIVERS\srv.sys
0xEBEBB000 \SystemRoot\System32\DRIVERS\mdmxsdk.sys
0xEBDDF000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xF8C98000 \SystemRoot\system32\SetupNT.sys
0xED1EC000 \SystemRoot\System32\Drivers\HTTP.sys
0xEC481000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 36):
0 System Idle Process
4 System
604 C:\WINDOWS\system32\smss.exe
652 csrss.exe
676 C:\WINDOWS\system32\winlogon.exe
720 C:\WINDOWS\system32\services.exe
732 C:\WINDOWS\system32\lsass.exe
884 C:\WINDOWS\system32\svchost.exe
968 svchost.exe
1064 C:\WINDOWS\system32\svchost.exe
1140 svchost.exe
1336 svchost.exe
1420 C:\Program Files\AVAST Software\Avast\AvastSvc.exe
1592 C:\WINDOWS\system32\spoolsv.exe
1176 C:\Program Files\Bonjour\mDNSResponder.exe
1284 C:\WINDOWS\explorer.exe
1764 C:\Program Files\Java\jre7\bin\jqs.exe
1800 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
224 C:\Program Files\CDBurnerXP\NMSAccessU.exe
256 C:\WINDOWS\system32\rundll32.exe
388 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
336 C:\WINDOWS\system32\nvsvc32.exe
1016 C:\WINDOWS\system32\svchost.exe
1024 C:\WINDOWS\system32\MSTMON_S.EXE
1468 C:\Program Files\Ask.com\Updater\Updater.exe
792 C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
1860 C:\Program Files\Common Files\Java\Java Update\jusched.exe
1868 C:\Program Files\AVAST Software\Avast\AvastUI.exe
1884 C:\WINDOWS\system32\ctfmon.exe
2452 C:\Program Files\Washer\washer.exe
2564 C:\Program Files\WordWeb\wweb32.exe
2852 C:\PROGRA~1\Yahoo!\MESSEN~1\Ymsgr_tray.exe
3976 C:\WINDOWS\system32\taskmgr.exe
2068 alg.exe
476 C:\WINDOWS\system32\sndvol32.exe
44860 C:\Documents and Settings\Peter\Desktop\MBRCheck.exe

\\.\C: –> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
\\.\F: –> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 (NTFS)

PhysicalDrive0 Model Number: Maxtor 6Y060L0, Rev: YAR4
PhysicalDrive1 Model Number: WDC WD3200AAJB-00WGA, Rev: 00.0

Size Device Name MBR Status
——————————————–
57 GB \\.\PhysicalDrive0

###############################################################################




OTL logfile created on: 9/18/2012 4:46:44 PM - Run 5
OTL by OldTimer - Version 3.2.61.3 Folder = C:\Documents and Settings\Peter\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

511.49 Mb Total Physical Memory | 237.35 Mb Available Physical Memory | 46.40% Memory free
1.22 Gb Paging File | 1.00 Gb Available in Paging File | 82.14% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 57.26 Gb Total Space | 10.35 Gb Free Space | 18.07% Space Free | Partition Type: NTFS
Drive E: | 967.22 Mb Total Space | 641.75 Mb Free Space | 66.35% Space Free | Partition Type: FAT
Drive F: | 298.09 Gb Total Space | 78.39 Gb Free Space | 26.30% Space Free | Partition Type: NTFS
Drive H: | 30.21 Gb Total Space | 0.96 Gb Free Space | 3.18% Space Free | Partition Type: FAT32
Drive I: | 967.22 Mb Total Space | 825.38 Mb Free Space | 85.33% Space Free | Partition Type: FAT

Computer Name: PH | User Name: Peter | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/09/10 07:49:12 | 000,600,064 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Peter\Desktop\OTL.exe
PRC - [2012/09/02 16:53:43 | 000,161,768 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2012/08/21 05:12:26 | 004,282,728 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012/08/21 05:12:25 | 000,044,808 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012/06/06 21:33:42 | 001,564,872 | —- | M] (Ask) – C:\Program Files\Ask.com\Updater\Updater.exe
PRC - [2010/03/04 23:38:00 | 000,071,096 | —- | M] () – C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2008/11/09 16:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/14 06:42:20 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2005/08/29 16:10:34 | 000,019,968 | —- | M] (Antony Lewis) – C:\Program Files\WordWeb\wweb32.exe
PRC - [2005/06/22 03:38:24 | 000,184,320 | —- | M] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.) – C:\WINDOWS\system32\MSTMON_S.EXE
PRC - [2005/01/28 22:00:01 | 000,180,269 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2003/03/31 08:00:00 | 000,138,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\sndvol32.exe
PRC - [2003/01/13 10:08:56 | 000,818,688 | —- | M] (Webroot Software, Inc.) – C:\Program Files\Washer\washer.exe


========== Modules (No Company Name) ==========

MOD - [2012/09/18 04:09:22 | 001,810,944 | —- | M] () – C:\Program Files\AVAST Software\Avast\defs\12091801\algo.dll
MOD - [2012/05/25 04:25:00 | 000,921,600 | —- | M] () – C:\Program Files\Yahoo!\Messenger\yui.dll
MOD - [2010/03/04 23:38:00 | 000,071,096 | —- | M] () – C:\Program Files\CDBurnerXP\NMSAccessU.exe


========== Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – %SystemRoot%\System32\hidserv.dll – (HidServ)
SRV - File not found [On_Demand | Stopped] – %SystemRoot%\System32\appmgmts.dll – (AppMgmt)
SRV - [2012/09/02 16:53:43 | 000,161,768 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2012/08/21 05:12:25 | 000,044,808 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV - [2012/08/15 06:18:08 | 000,250,056 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2010/03/04 23:38:00 | 000,071,096 | —- | M] () [Auto | Running] – C:\Program Files\CDBurnerXP\NMSAccessU.exe – (NMSAccess)
SRV - [2008/11/09 16:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - [2012/09/11 18:23:39 | 000,040,776 | —- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\mbamswissarmy.sys – (MBAMSwissArmy)
DRV - [2012/08/21 05:13:15 | 000,729,752 | —- | M] (AVAST Software) [File_System | System | Running] – C:\WINDOWS\System32\drivers\aswSnx.sys – (aswSnx)
DRV - [2012/08/21 05:13:15 | 000,355,632 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswSP.sys – (aswSP)
DRV - [2012/08/21 05:13:15 | 000,054,232 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswTdi.sys – (aswTdi)
DRV - [2012/08/21 05:13:14 | 000,097,608 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswmon2.sys – (aswMon2)
DRV - [2012/08/21 05:13:14 | 000,035,928 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswRdr.sys – (AswRdr)
DRV - [2012/08/21 05:13:13 | 000,025,256 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aavmker4.sys – (Aavmker4)
DRV - [2012/08/21 05:13:13 | 000,021,256 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswFsBlk.sys – (aswFsBlk)
DRV - [2009/11/12 14:48:56 | 000,007,168 | —- | M] () [File_System | On_Demand | Stopped] – C:\WINDOWS\System32\drivers\StarOpen.sys – (StarOpen)
DRV - [2008/04/14 01:15:30 | 000,010,624 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\gameenum.sys – (gameenum)
DRV - [2005/04/07 17:18:34 | 000,003,840 | —- | M] () [Kernel | System | Running] – C:\WINDOWS\system32\drivers\BANTExt.sys – (BANTExt)
DRV - [2003/12/23 02:15:42 | 000,005,248 | —- | M] ( ) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\drivers\xmasscsi.sys – (xmasscsi)
DRV - [2003/12/21 17:24:22 | 000,140,800 | —- | M] ( ) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\drivers\xmasbus.sys – (xmasbus)
DRV - [2003/07/22 03:04:46 | 000,018,848 | —- | M] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.) [Kernel | Auto | Running] – C:\WINDOWS\system32\MLPTDR_Q.SYS – (MLPTDR_Q)
DRV - [2002/12/05 00:01:00 | 000,241,664 | R— | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nvapu.sys – (nvnforce)
DRV - [2002/12/05 00:01:00 | 000,013,056 | R— | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nvax.sys – (nvax)
DRV - [2002/11/27 07:52:00 | 000,080,896 | R— | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\NVENET.sys – (NVENET)
DRV - [2002/11/13 03:10:00 | 000,020,224 | R— | M] (NVIDIA Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\nvidesm.sys – (nvidesm)
DRV - [2002/10/18 05:06:28 | 000,842,128 | —- | M] (Conexant) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\winachcf.sys – (Winachcf)
DRV - [2002/09/05 23:24:00 | 000,013,568 | R— | M] (NVIDIA Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\nv_agp.SYS – (nv_agp)
DRV - [2001/08/17 13:28:02 | 000,907,456 | —- | M] (Conexant) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HCF_MSFT.sys – (HCF_MSFT)
DRV - [2001/08/17 10:00:04 | 000,002,944 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\msmpu401.sys – (ms_mpu401)
DRV - [2001/08/13 13:59:36 | 000,011,387 | R— | M] (Agilent Technologies) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\goldrush.sys – (GoldrushUSB)
DRV - [2000/10/25 08:27:24 | 000,003,000 | R— | M] () [Kernel | Auto | Running] – C:\WINDOWS\system32\SetupNT.sys – (SetupNT)
DRV - [1999/09/10 12:06:00 | 000,025,244 | —- | M] (Adaptec) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\ASPI32.SYS – (ASPI32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/def…/search/ie.html
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/def…//www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/?.intl=us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://mail.yahoo.com/?.intl=us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {8A64D544-98BB-C260-590A-335EB1FB0846}
IE - HKCU\..\SearchScopes\{0169E633-8781-F882-9BC7-7B014AE4DE4E}: "URL" = http://www.bing.com/search?q={searchTerms}…eferrer:source}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…amp;Form=IE8SRC
IE - HKCU\..\SearchScopes\{188C1581-6C74-42A6-9A73-5D018DFDA96E}: "URL" = http://websearch.ask.com/redirect?client=i…C8-4C7FD6259F88
IE - HKCU\..\SearchScopes\{6C59297E-BFFE-4E6A-0BF5-4187155432D8}: "URL" = http://www.bing.com/search?q={searchTerms}…eferrer:source}
IE - HKCU\..\SearchScopes\{8A64D544-98BB-C260-590A-335EB1FB0846}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;form=ZGAIDF
IE - HKCU\..\SearchScopes\{8D664689-231B-40C7-8EA3-870A3132D4DE}: "URL" = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT3106518
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.1: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2088: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{9051303c-7e41-4311-a783-d6fe5ef2832d}: C:\Program Files\FVD Suite\addons\Firefox [2011/12/01 08:46:56 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/09/14 21:27:46 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla 1.7.8\Extensions\\Components: C:\Program Files\mozilla.org\Mozilla\Components [2012/06/24 22:18:33 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla 1.7.8\Extensions\\Plugins: C:\Program Files\mozilla.org\Mozilla\Plugins [2012/08/17 05:37:20 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/27 13:01:34 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/08/17 05:37:20 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\Object\facetheme
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla 1.7.8\Extensions\\Components: C:\Program Files\mozilla.org\Mozilla\Components [2012/06/24 22:18:33 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla 1.7.8\Extensions\\Plugins: C:\Program Files\mozilla.org\Mozilla\Plugins [2012/08/17 05:37:20 | 000,000,000 | —D | M]

[2011/11/15 19:23:18 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Extensions
[2012/09/17 07:48:34 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions
[2012/05/20 06:35:50 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012/06/08 21:05:11 | 000,000,000 | —D | M] ("FVD Suite Addon") – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{9051303c-7e41-4311-a783-d6fe5ef2832d}
[2012/09/17 07:48:34 | 000,000,000 | —D | M] (DownloadHelper) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/09/05 14:24:20 | 000,000,000 | —D | M] (VideoFileDownload - Download YouTube Videos) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\[removed]
[2011/11/15 19:23:18 | 000,000,000 | —D | M] (EpicPlay Games) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\[removed]
[2012/07/08 06:23:46 | 000,000,000 | —D | M] (Ask Toolbar) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\[removed]
[2006/11/06 15:02:48 | 000,000,000 | —D | M] ("VideoDownloader") – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\[removed]
[2011/11/13 20:02:17 | 000,145,972 | —- | M] () (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\[removed]
[2012/02/27 13:02:50 | 000,020,591 | —- | M] () (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
[2012/07/31 08:01:36 | 002,227,573 | —- | M] () (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{5FF97DB7-2EF7-4a7f-8E36-5214B5C5C65A}.xpi
[2011/11/13 20:02:29 | 000,031,532 | —- | M] () (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{9ab67d74-ec41-4cb2-b417-df5d93ba1beb}.xpi
[2012/07/21 13:15:15 | 000,702,524 | —- | M] () (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2011/11/13 20:02:41 | 000,879,991 | —- | M] () (No name found) – C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{DCBD1271-D228-4082-9FBC-36D9B7660B03}.xpi
[2012/02/27 13:01:49 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/11/13 20:01:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\distribution\extensions
[2011/11/13 20:01:23 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Program Files\Mozilla Firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012/02/27 13:01:34 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/02/27 13:01:27 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010/01/01 04:00:00 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml.old
[2012/02/27 13:01:27 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage: http://mail.yahoo.com/?.intl=us
CHR - default_search_provider: Yahoo! (Enabled)
CHR - default_search_provider: search_url = http://search.yahoo.com/search?ei={inputEn…p={searchTerms}
CHR - default_search_provider: suggest_url = http://ff.search.yahoo.com/gossip?output=f…d={searchTerms}
CHR - homepage: http://mail.yahoo.com/?.intl=us
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\Application\21.0.1180.89\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\Application\21.0.1180.89\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np32dsw.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U7 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.70.10 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: MetaStream 3 Plugin (Enabled) = C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Fade to White Aero Skin (by Skarv) = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\oekemfmehiakocmomemagciajlikigkl\1.0_0\
CHR - Extension: Gmail = C:\Documents and Settings\Peter\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2004/08/21 23:07:46 | 000,000,848 | R— | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (FVD Suite Toolbar) - {2B171655-A69C-5c18-B693-6CB5DC269D41} - C:\Program Files\FVD Suite\addons\IE\FVDToolbar.dll (www.flashvideodownloader.org/fvd-suite/)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [KONICA MINOLTA magicolor 2400W STD] C:\WINDOWS\System32\MSTMON_S.EXE (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netwaiting.exe ()
O4 - HKCU..\Run: [Washer] C:\Program Files\Washer\washer.exe (Webroot Software, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe ()
O4 - Startup: C:\Documents and Settings\Peter\Start Menu\Programs\Startup\WordWeb.lnk = C:\Program Files\WordWeb\wweb32.exe (Antony Lewis)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O8 - Extra context menu item: &WordWeb;… - C:\WINDOWS\wweb32.dll (Antony Lewis)
O8 - Extra context menu item: &Yahoo;! Search - C:\Program Files\Yahoo!\Common [2012/08/02 20:12:49 | 000,000,000 | —D | M]
O8 - Extra context menu item: Yahoo! &Dictionary; - C:\Program Files\Yahoo!\Common [2012/08/02 20:12:49 | 000,000,000 | —D | M]
O8 - Extra context menu item: Yahoo! &Maps; - C:\Program Files\Yahoo!\Common [2012/08/02 20:12:49 | 000,000,000 | —D | M]
O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll (Apple Computer, Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O15 - HKCU\..Trusted Domains: ([]msn in My Computer)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/get/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} http://support.f-secure.com/ols/fscax.cab (F-Secure Online Scanner)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} http://download.microsoft.com/download/7/E…04/clearadj.cab (CTAdjust Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A67D86CB-7EF9-414A-BC85-AC3EEF166B61}: DhcpNameServer = 192.168.1.1 [removed] [removed]
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Peter\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Peter\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/06/26 15:00:20 | 000,000,032 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012/09/14 21:28:36 | 000,021,256 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012/09/14 21:28:36 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2012/09/14 21:28:35 | 000,355,632 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2012/09/14 21:28:34 | 000,035,928 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2012/09/14 21:28:33 | 000,729,752 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2012/09/14 21:28:33 | 000,054,232 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2012/09/14 21:28:32 | 000,097,608 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswmon2.sys
[2012/09/14 21:28:32 | 000,089,624 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswmon.sys
[2012/09/14 21:28:32 | 000,025,256 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aavmker4.sys
[2012/09/14 21:27:18 | 000,041,224 | —- | C] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2012/09/14 21:27:16 | 000,227,648 | —- | C] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2012/09/14 21:26:36 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2012/09/14 21:26:36 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AVAST Software
[2012/09/13 09:32:42 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2012/09/11 18:19:36 | 000,040,776 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012/09/11 18:19:25 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/09/11 18:19:24 | 000,022,856 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2012/09/11 18:19:23 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/09/11 17:21:47 | 000,000,000 | —D | C] – C:\_OTL
[2012/09/10 22:05:57 | 000,000,000 | —D | C] – C:\Documents and Settings\Peter\My Documents\Firefox-Downloads
[2012/09/10 07:49:09 | 000,600,064 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Peter\Desktop\OTL.exe
[2012/09/09 22:25:35 | 001,629,088 | —- | C] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\uSeRiNiT_rkill_5.exe
[2012/09/09 22:24:59 | 001,629,088 | —- | C] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\WiNlOgOn_rkill_4.exe
[2012/09/09 22:23:46 | 001,629,088 | —- | C] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\rkill_3.scr
[2012/09/09 22:23:21 | 001,629,088 | —- | C] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\rkill_2.com
[2012/09/09 22:22:02 | 001,629,088 | —- | C] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\rkill_1.exe
[2012/09/08 23:05:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Peter\Start Menu\Programs\Window Washer
[2012/09/08 14:03:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Peter\Desktop\tdsskiller
[2012/09/05 17:56:48 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2012/09/05 17:56:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Peter\Start Menu\Programs\HiJackThis
[2012/09/05 17:34:35 | 000,000,000 | —D | C] – C:\Program Files\HijackThis
[2012/09/05 14:29:06 | 000,045,056 | —- | C] (Adaptec) – C:\WINDOWS\System32\WNASPI32.DLL
[2012/09/05 14:29:06 | 000,025,244 | —- | C] (Adaptec) – C:\WINDOWS\System32\drivers\ASPI32.SYS
[2012/09/05 14:29:06 | 000,005,600 | —- | C] (Adaptec) – C:\WINDOWS\System\WINASPI.DLL
[2012/09/05 14:29:06 | 000,004,672 | —- | C] (Adaptec) – C:\WINDOWS\System\WOWPOST.EXE
[2012/09/05 14:27:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Peter\My Documents\FORCEASPI
[2012/09/05 14:22:16 | 000,000,000 | —D | C] – C:\Program Files\smartdl
[2012/09/02 16:57:44 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2012/09/02 16:55:48 | 000,246,760 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/02 16:55:15 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/02 16:55:15 | 000,093,672 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/02 16:55:13 | 000,174,056 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe

========== Files - Modified Within 30 Days ==========

[2012/09/18 16:58:00 | 000,000,234 | —- | M] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2012/09/18 16:46:28 | 000,001,374 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/09/18 16:45:43 | 000,000,316 | -H– | M] () – C:\WINDOWS\tasks\avast! Emergency Update.job
[2012/09/18 16:44:27 | 000,019,116 | —- | M] () – C:\WINDOWS\MSTMON_S.INI
[2012/09/18 16:44:21 | 000,003,725 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2012/09/18 16:43:18 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/09/18 16:17:19 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/18 16:11:20 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1957994488-2000478354-839522115-1004UA.job
[2012/09/17 22:06:04 | 014,567,424 | —- | M] () – C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2012/09/17 22:06:03 | 005,708,800 | —- | M] () – C:\Documents and Settings\All Users\Documents\ESBK.mb
[2012/09/17 17:47:30 | 000,080,384 | —- | M] () – C:\Documents and Settings\Peter\Desktop\MBRCheck.exe
[2012/09/17 09:02:31 | 000,053,760 | —- | M] () – C:\Documents and Settings\Peter\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/17 05:56:17 | 000,001,689 | —- | M] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2012/09/17 05:56:10 | 000,002,625 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2012/09/17 00:04:42 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1957994488-2000478354-839522115-1004Core.job
[2012/09/16 21:56:17 | 000,000,224 | —- | M] () – C:\WINDOWS\TOPO.INI
[2012/09/15 06:04:18 | 000,002,284 | —- | M] () – C:\Documents and Settings\Peter\Desktop\Google Chrome.lnk
[2012/09/15 06:04:18 | 000,002,262 | —- | M] () – C:\Documents and Settings\Peter\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/09/11 18:23:39 | 000,040,776 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012/09/11 18:22:11 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/10 07:49:12 | 000,600,064 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Peter\Desktop\OTL.exe
[2012/09/09 22:25:40 | 001,629,088 | —- | M] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\uSeRiNiT_rkill_5.exe
[2012/09/09 22:25:04 | 001,629,088 | —- | M] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\WiNlOgOn_rkill_4.exe
[2012/09/09 22:23:50 | 001,629,088 | —- | M] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\rkill_3.scr
[2012/09/09 22:23:26 | 001,629,088 | —- | M] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\rkill_2.com
[2012/09/09 22:22:09 | 001,629,088 | —- | M] (Bleeping Computer, LLC) – C:\Documents and Settings\Peter\Desktop\rkill_1.exe
[2012/09/09 08:47:02 | 004,742,953 | —- | M] () – C:\Documents and Settings\Peter\Desktop\ComboFix.exe
[2012/09/09 08:34:08 | 000,000,548 | —- | M] () – C:\Documents and Settings\Peter\Desktop\MP4 Converted.lnk
[2012/09/08 23:05:44 | 000,000,606 | —- | M] () – C:\Documents and Settings\Peter\Desktop\Window Washer.lnk
[2012/09/08 15:33:32 | 000,000,512 | —- | M] () – C:\Documents and Settings\Peter\Desktop\MBR.dat
[2012/09/08 14:00:04 | 002,193,184 | —- | M] () – C:\Documents and Settings\Peter\Desktop\tdsskiller.zip
[2012/09/08 13:52:15 | 000,000,054 | —- | M] () – C:\Documents and Settings\Peter\defogger_reenable
[2012/09/08 13:50:03 | 000,050,477 | —- | M] () – C:\Documents and Settings\Peter\Desktop\Defogger.exe
[2012/09/08 08:47:36 | 004,731,392 | —- | M] (AVAST Software) – C:\Documents and Settings\Peter\Desktop\aswMBR.exe
[2012/09/07 17:04:46 | 000,022,856 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2012/09/05 17:57:32 | 000,002,447 | —- | M] () – C:\Documents and Settings\Peter\Desktop\HiJackThis.lnk
[2012/09/05 16:38:36 | 000,097,762 | —- | M] () – C:\Documents and Settings\Peter\Desktop\tumblr_ljn81n3gbW1qg0vxuo1_500.jpg
[2012/09/05 14:52:53 | 000,000,640 | —- | M] () – C:\Documents and Settings\Peter\Desktop\Burn4Free.lnk
[2012/09/02 16:53:48 | 000,093,672 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2012/09/02 16:53:32 | 000,246,760 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2012/09/02 16:53:32 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2012/09/02 16:53:32 | 000,143,872 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2012/09/02 16:53:31 | 000,174,056 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2012/09/02 16:53:29 | 000,821,736 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\npDeployJava1.dll
[2012/09/02 16:53:29 | 000,746,984 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2012/08/30 02:59:31 | 000,435,688 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/08/30 02:59:31 | 000,068,584 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/08/29 11:55:12 | 083,023,306 | —- | M] () – C:\Documents and Settings\All Users\Application Data\nud0repor.pad
[2012/08/21 05:13:15 | 000,729,752 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2012/08/21 05:13:15 | 000,355,632 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2012/08/21 05:13:15 | 000,054,232 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2012/08/21 05:13:14 | 000,097,608 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswmon2.sys
[2012/08/21 05:13:14 | 000,089,624 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswmon.sys
[2012/08/21 05:13:14 | 000,035,928 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2012/08/21 05:13:13 | 000,025,256 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aavmker4.sys
[2012/08/21 05:13:13 | 000,021,256 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012/08/21 05:12:33 | 000,041,224 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2012/08/21 05:12:23 | 000,227,648 | —- | M] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2012/08/20 09:17:23 | 002,755,398 | —- | M] () – C:\Documents and Settings\Peter\Desktop\Kinsmans.BMP

========== Files Created - No Company Name ==========

[2012/09/17 17:47:14 | 000,080,384 | —- | C] () – C:\Documents and Settings\Peter\Desktop\MBRCheck.exe
[2012/09/14 21:28:36 | 000,001,689 | —- | C] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2012/09/14 21:28:32 | 000,000,316 | -H– | C] () – C:\WINDOWS\tasks\avast! Emergency Update.job
[2012/09/11 18:19:26 | 000,000,784 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/09 12:32:27 | 000,000,548 | —- | C] () – C:\Documents and Settings\Peter\Desktop\MP4 Converted.lnk
[2012/09/09 08:46:43 | 004,742,953 | —- | C] () – C:\Documents and Settings\Peter\Desktop\ComboFix.exe
[2012/09/08 23:05:44 | 000,000,606 | —- | C] () – C:\Documents and Settings\Peter\Desktop\Window Washer.lnk
[2012/09/08 13:59:56 | 002,193,184 | —- | C] () – C:\Documents and Settings\Peter\Desktop\tdsskiller.zip
[2012/09/08 13:52:04 | 000,000,054 | —- | C] () – C:\Documents and Settings\Peter\defogger_reenable
[2012/09/08 13:49:59 | 000,050,477 | —- | C] () – C:\Documents and Settings\Peter\Desktop\Defogger.exe
[2012/09/08 09:06:22 | 000,000,512 | —- | C] () – C:\Documents and Settings\Peter\Desktop\MBR.dat
[2012/09/05 17:56:48 | 000,002,447 | —- | C] () – C:\Documents and Settings\Peter\Desktop\HiJackThis.lnk
[2012/09/05 16:29:27 | 000,097,762 | —- | C] () – C:\Documents and Settings\Peter\Desktop\tumblr_ljn81n3gbW1qg0vxuo1_500.jpg
[2012/08/29 11:32:06 | 083,023,306 | —- | C] () – C:\Documents and Settings\All Users\Application Data\nud0repor.pad
[2012/08/20 09:17:23 | 002,755,398 | —- | C] () – C:\Documents and Settings\Peter\Desktop\Kinsmans.BMP
[2011/11/22 15:07:34 | 000,000,275 | —- | C] () – C:\Documents and Settings\Peter\Local Settings\Application Data\HamsterVideoConverterSettings.cfg
[2010/12/01 22:06:37 | 000,007,168 | —- | C] () – C:\WINDOWS\System32\drivers\StarOpen.sys
[2005/09/20 06:50:23 | 000,001,759 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2004/09/20 09:23:08 | 000,000,000 | —- | C] () – C:\Documents and Settings\Peter\Application Data\dm.ini
[2004/06/27 14:22:27 | 000,053,760 | —- | C] () – C:\Documents and Settings\Peter\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\Peter\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf:SummaryInformation

< End of report >
Hello peteinmaine

Thank you for the logs and extra information.

I am aware that your machine hung Pete, and I am aware of your previous post. As per your quotation, you did in fact tell me that a log was produced

Yet, it also had produced the log file needed

However, you were obviously unaware that this was an incomplete log (which is not your fault). Sometimes incomplete logs are posted due to copy/paste errors which is why I asked if you have the remainder. If you don't, its not a problem at this time.


Lets get rid of the following and see if it helps:


  • Please open OTL


  • Copy and paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL.

    :OTL
    PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\Object\facetheme
    
    :Files
    C:\Program Files\Object
    
    :Commands
    [purity]
    [emptytemp]
    [emptyflash]
    [start explorer]
    [Reboot]

  • Once you have pasted the information into the Custom Scans/Fixes box, click the "Run Fix" button at the top.
  • Allow the program to run unhindered.
  • Your machine will re-start itself. This is normal.
  • A log will be created after your machine reboots. Please post the contents of the log in your next reply.

Is the pop-up still appearing now?
Hi JonTom,

The Pop-Up still exists :(

Here is the OTL "fix" log

###############################################################################


All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}\ not found.
File C:\Program Files\Object\facetheme not found.
========== FILES ==========
File\Folder C:\Program Files\Object not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Kids
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Non-Admin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: Peter
->Temp folder emptied: 26074 bytes
->Temporary Internet Files folder emptied: 49286 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 617008236 bytes
->Google Chrome cache emptied: 236519018 bytes
->Flash cache emptied: 10499 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 452 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 88914 bytes

Total Files Cleaned = 814.00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: Kids

User: LocalService

User: NetworkService

User: Non-Admin

User: Peter
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.61.3 log created on 09192012_051845

Files\Folders moved on Reboot…
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files…

Registry entries deleted on Reboot…
Hello peteinmaine

Sorry to hear you are still getting the popups.

Lets try the following before we go any further:


  • Please download GooredFix by JPShortstuff


    • Please download GooredFix from one of the locations below and save it to your Desktop.

    Download Mirror #1
    Download Mirror #2

    • Ensure all Firefox windows are closed.
    • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista/Win7).
    • When prompted to run the scan, click Yes.
    • GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

  • Please scan the following files


    • Please go to VirusTotal


    • On the page you'll find a "Choose File" button.
    • Click on the Choose File button.
    • In the File Upload window which opens, copy and paste this into the File Name box.


    C:\WINDOWS\System32\Drivers\ftdisk.sys

    C:\WINDOWS\System32\DRIVERS\parport.sys

    C:\WINDOWS\System32\DRIVERS\netbt.sys

    C:\WINDOWS\System32\DRIVERS\srv.sys



    • Next, click the Open button.
    • Then click the "Scan it" button just below.
    • This will scan the file. Please be patient.
    • If you get a message saying File has already been analyzed: click Reanalyze file now.
    • Once scanned, copy and paste the link to the results page in your next reply.

    Please post the Gooredfix log and the links to the virus total result pages in your next reply.
Hi JonTom,

On the page you'll find a "Choose File" button.
Click on the Choose File button.
In the File Upload window which opens, copy and paste this into the File Name box.


C:\WINDOWS\System32\Drivers\ftdisk.sys

C:\WINDOWS\System32\DRIVERS\parport.sys

C:\WINDOWS\System32\DRIVERS\netbt.sys

C:\WINDOWS\System32\DRIVERS\srv.sys


I found this confusing:
> The window that opens for the Chrome browser, is called "Open", rather than "File Upload"
> Since it refers to "a file" rather than several files, I wasn't sure if I should paste the entire group to the File Name box or to paste them individually, one by one. I chose to paste them as a group.
> After pasting the entire group of lines to the File Name box , I only saw one file name in the box:, this line: C:\WINDOWS\System32\Drivers\ftdisk.sys

Please advise; was this correct?


VirusTotal Link:
https://www.virustotal.com/file/ff2c9a23cc1…sis/1348243326/

GooredFix Log to follow:

###############################################################################

GooredFix by jpshortstuff (03.07.10.1)
Log created at 11:55 on 21/09/2012 (Peter)
Firefox version 10.0.2 (en-US)

========== GooredScan ==========


========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [00:01 14/11/2011]

C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\
[removed] [18:24 05/09/2012]
[removed] [23:23 15/11/2011]
[removed] [16:26 13/06/2012]
[removed] [19:02 06/11/2006]
{635abd67-4fe9-1b23-4f01-e679fa7484c1} [10:35 20/05/2012]
{9051303c-7e41-4311-a783-d6fe5ef2832d} [01:05 09/06/2012]
{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [11:48 17/09/2012]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [23:14 14/04/2009]
"{9051303c-7e41-4311-a783-d6fe5ef2832d}"="C:\Program Files\FVD Suite\addons\Firefox" [12:46 01/12/2011]
"[removed]"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [01:27 15/09/2012]

-=E.O.F=-
Hi JonTom,

Re: "Please advise; was this correct?"

Almost.

:rofl: Well, we have a comedian, :clap:


Please scan the files one at a time beginning with the second file in the list

Links to follow:

[For your ease, I am reposting this same link from the scan as before, so you don't have to go get it - i.e. this FIRST one (ftdisk.sys) is NOT a re-scan]]
C:\WINDOWS\System32\Drivers\ftdisk.sys
https://www.virustotal.com/file/ff2c9a23cc1…sis/1348243326/

C:\WINDOWS\System32\DRIVERS\parport.sys
https://www.virustotal.com/file/96d4595d19a…sis/1348347180/

C:\WINDOWS\System32\DRIVERS\netbt.sys
https://www.virustotal.com/file/7932b71f98b…sis/1348347399/

C:\WINDOWS\System32\DRIVERS\srv.sys
https://www.virustotal.com/file/17c643bd4eb…sis/1348347479/
Hello peteinmaine

Those files appear to be clean, which means we are going to have to take a closer look at a one or two things to rule out some different possibilities.

Please work your way through the following steps:


  • RogueKiller


    • Download RogueKiller by clicking here and save it to your desktop.
    • Quit all running programs.
    • Double click on RogueKiller.exe to run it.
    • The RKreport.txt shall be generated next to the executable.
    • If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe
    • Please post the contents of the RKreport.txt in your next Reply.

  • Farbar Recovery Scan Tool


    • Download Farbar Recovery Scan Tool from here and save it to a flash drive.
    • Once you have saved it on the flash drive, plug the flashdrive into the infected PC.


    Enter System Recovery Options.


    • To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.


    To enter System Recovery Options by using Windows installation disc:


    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Choose your language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.


    On the System Recovery Options menu you will get the following options:


    Startup Repair
    System Restore
    Windows Complete PC Restore
    Windows Memory Diagnostic Tool
    Command Prompt



    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst.exe and press Enter
    • Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to the disclaimer.
    • Place a check next to List Drivers MD5 as well as the default check marks that are already there
    • Press Scan button.
    • FRST will let you know when the scan is complete and has written the FRST.txt to file.
    • Please copy and paste the log into your reply.

    Please post the RogueKiller log and the FRST log for me to review.
Hello JonTom,

Please run RogueKiller as directed in the thread and post the log for me to review once it has been produced.
Once we have the RogueKiller log we'll take things from there.

Just for reference of your directions, upon completion of running Rogue Killer, it displayed a message: "Scan finished. Please look at different tabs and delete items with the buttons" That is, no log file automatically appeared. I then realize & pressed the "Report" button, bottom right column. This may assist you with updating directions.

———————————————————————————————

Continual problems [for information]:
Firefox has crashed each time I have first started it on the past three days. Please see attached screen capture of "crash" notice.
Firefox's pop-ups: Each time Firefox displays a message that says that Firefox has blocked a pop-up. Yet, the pop-up has not been blocked.
Firefox: For one day [several times during the day] Firefox displayed a notice telling how to leave the "Full Screen" display [i.e. using the escape key]. Yet, I was not using full screen.

Please see attached screen capture, showing the notice & top portion of my browser.

Chrome: This morning Chrome crashed upon first engagement. Please see attached screen capture of back to back "crash" notices.
Windows OS: Following each of the browsers crash, my machine crashed this morning. Please see attached screen capture of windows "crash" notice.


RKreport.txt to follow:

##########################################################################
#####[/color



RogueKiller V8.0.5 [09/23/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User : Peter [Admin rights]
Mode : Scan – Date : 09/25/2012 17:36:24

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤
[HJ SMENU] HKCU\[…]\Advanced : Start_ShowRecentDocs (0) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ Extern Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Maxtor 6 Y060L0 SCSI Disk Device +++++
— User —
[MBR] 56aaef9f685965c7a628ab6ba1cb9063
[BSP] c8b8d5c25744d167073e1caaa8c0c06c : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 58635 Mo
User = LL1 … OK!
Error reading LL2 MBR!

+++++ PhysicalDrive1: WDC WD32 00AAJB-00WGA SCSI Disk Device +++++
— User —
[MBR] c8a610ec56ed8819aa4c2567f3ded573
[BSP] ba4a81ff74404fdf5886ed053ece3f96 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 305243 Mo
User = LL1 … OK!
Error reading LL2 MBR!

+++++ PhysicalDrive2: Flash Driver SM-USB20 USB Device +++++
— User —
[MBR] 5f942d2e1ee3bf519b87edc66e8cc6ba
[BSP] 3f01b79ccd188feaf3bbca0b4caa3fbd : Windows XP MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 32 | Size: 967 Mo
User = LL1 … OK!
Error reading LL2 MBR!

+++++ PhysicalDrive3: Flash Driver SM-USB20 USB Device +++++
— User —
[MBR] 3b36fa89b76b2d82b604af7e8c7a4b56
[BSP] 8aad45e33b3ebc91c150a5bc4d771588 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 32 | Size: 967 Mo
User = LL1 … OK!
Error reading LL2 MBR!

Finished : << RKreport[1].txt >>
RKreport[1].txt
Hello peteinmaine

Sorry to hear about your continuing problems.

I am discussing your issues with additional helpers at the moment.


Please scan the following file using virus total and post the link to the results page in your next reply.

C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\default.43v\extensions\{5FF97DB7-2EF7-4a7f-8E36-5214B5C5C65A}.xpi
Hello peteinmaine

That file appears to be legit.

Please try uninstalling firefox completely and then reinstall it again.

Once you have done that, open the newly installed browser and let me know if the popups are still present.
Hello JonTom,

Please try uninstalling firefox completely and then reinstall it again.
Once you have done that, open the newly installed browser and let me know if the popups are still present.

Complete. At this time, It appears that the pop-ups no longer appear.

Also, let us review my original post:

1. I have my Task Manager running all the time, so as to be able to remove processes which become bogged down.
2. Frequently, the Google Chrome Browser becomes bogged down. When I close it & view the task manager, there are many stubs which remain for about one minute (+/-), thus preventing me from reopening the browser till the all go away. I usually allow them to diminish on their own & sometimes I kill them all via the task manager
3. When I run Firefox, it will behave the same way, leaving up "Firefox" and "Plugin Container" [viewed on my Task Manager] till I end them both via the Task manager. If I try to restart Firefox with Firefox still showing on my Task manager process list, it will tell me that Firefox is already running. However, I cannot see it or use it till I remove it from my Task manager process list.

These conditions still remain :( The longer I run the browser [both Chrome & FF], the larger these "stubs" become & the longer it takes for them to diminish. In the FF case, they do not diminish on their own; I need to use the "End Process" button from the Task manager.

I am not sure why this condition exists.
Hello peteinmaine

Complete. At this time, It appears that the pop-ups no longer appear.

Excellent :)

Also, let us review my original post

The browsers getting bogged down may be linked with the amount of memory and disk space that you have on your machine. As for your "stubs" issue, I have never heard of that before.

511.49 Mb Total Physical Memory | 367.97 Mb Available Physical Memory | 71.94% Memory free

Drive C: | 57.26 Gb Total Space | 9.40 Gb Free Space | 16.42% Space Free | Partition Type: NTFS

367.97 Mb of available RAM is quite low, and this could very well be the reason why your browsers are bogging down (almost all RAM is now provided in Gigabytes rather than Megabytes, and your machine has less then 1 Gigabyte of total RAM installed). 16.42% free drive space is rapidly approaching borderline for impact on system performance.


Did you defrag your disk and run Startuplite as outlined in post number 24?

http://forums.whatthetech.com/index.php?sh…st&p=798370


Both of those procedures are designed to imporove system performance.

If they do not noticeable improve system speed (and they may not since you are running your real time antivirus, all of your applications and your operating system with less than 1 GB of RAM), the best option would be to install more RAM or upgrade your system.

Please give the above a try and post a new DDS log in your next reply.
Hello JonTom,


The browsers getting bogged down may be linked with the amount of memory and disk space that you have on your machine. As for your "stubs" issue, I have never heard of that before.

I would tend to agree with you about the amount of memory being the cause of this issue. I believe it is also the cause of what I referred to as "stubs", or the browsers not completing their "closing" operation.


http://forums.whatthetech.com/index.php?sh…mp;#entry798370

I have now completed each of these tasks:
1. Please un-install the following: Ask toolbar & Ask Toolbar Updater : Complete
2. Defragment your hard drive - was done prior to setting a restore point
3. StartupLight - has now been instituted. However, there were only a few items on the list to disable. And so, as you had mentioned, not much noticable improvement.
4. Re-enable your drivers - complete
5. Please Uninstall Combofix - complete
7. Removal of Tools: aswMBR, RKill or TDSSKiller - complete.

6. Please perform the following cleanup procedure: OTL "CleanUp!" - I don't believe this has been completed. However, I shall.


DDS Log and attach.txt to follow:

###############################################################################

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.7.2
Run by [removed] at 17:48:34 on 2012-09-29
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.251 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\MSTMON_S.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\WordWeb\wweb32.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\SNDVOL32.EXE
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://mail.yahoo.com/?.intl=us
uSearch Page = about:blank
uDefault_Page_URL =
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Settings,ProxyOverride = *.local
uCustomizeSearch =
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: H - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: FVD Suite Toolbar: {2b171655-a69c-5c18-b693-6cb5dc269d41} - c:\program files\fvd suite\addons\ie\FVDToolbar.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ModemOnHold] c:\program files\netwaiting\netwaiting.exe
uRun: [Google Update] "c:\documents and settings\peter\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messen~1\YahooMessenger.exe" -quiet
uRun: [Washer] c:\program files\washer\washer.exe /1
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [KONICA MINOLTA magicolor 2400W STD] c:\windows\system32\MSTMON_S.EXE STARTUP
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
StartupFolder: c:\docume~1\peter\startm~1\programs\startup\wordweb.lnk - c:\program files\wordweb\wweb32.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodaks~1.lnk - c:\program files\kodak\kodak software updater\7288971\program\Kodak Software Updater.exe
IE: &WordWeb… - c:\windows\wweb32.dll/lookup.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} - hxxp://support.f-secure.com/ols/fscax.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} - hxxp://download.microsoft.com/download/7/E/6/7E6A8567-DFE4-4624-87C3-163549BE2704/clearadj.cab
TCP: DhcpNameServer = 192.168.1.1 [removed] [removed]
TCP: Interfaces\{A67D86CB-7EF9-414A-BC85-AC3EEF166B61} : DhcpNameServer = 192.168.1.1 [removed] [removed]
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\peter\application data\mozilla\firefox\profiles\gxetnfdz.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://yahoo.com/|http://mail.yahoo.com/|http://www.facebook.com/
FF - prefs.js: keyword.URL -
FF - plugin: c:\documents and settings\peter\local settings\application data\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_278.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - plugin: c:\windows\system32\npwmsdrm.dll
.
============= SERVICES / DRIVERS ===============
.
R0 xmasbus;xmasbus;c:\windows\system32\drivers\xmasbus.sys [2004-9-29 140800]
R0 xmasscsi;xmasscsi;c:\windows\system32\drivers\xmasscsi.sys [2004-9-29 5248]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-9-14 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-9-14 355632]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-9-14 21256]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-9-14 44808]
R2 MLPTDR_Q;MLPTDR_Q;c:\windows\system32\MLPTDR_Q.SYS [2003-7-22 18848]
S2 GoldrushUSB;GoldrushUSB;c:\windows\system32\drivers\goldrush.sys [2004-7-6 11387]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-7 250288]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-9-11 40776]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-9-28 113120]
.
=============== Created Last 30 ================
.
2012-09-15 01:28:33 729752 —-a-w- c:\windows\system32\drivers\aswSnx.sys
2012-09-15 01:27:18 41224 —-a-w- c:\windows\avastSS.scr
2012-09-15 01:26:36 ——– d—–w- c:\program files\AVAST Software
2012-09-15 01:26:36 ——– d—–w- c:\documents and settings\all users\application data\AVAST Software
2012-09-13 13:32:42 ——– d—–w- c:\program files\ESET
2012-09-11 22:19:36 40776 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-09-11 22:19:24 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-09-11 22:19:23 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2012-09-11 21:21:47 ——– d—–w- C:\_OTL
2012-09-05 21:56:49 388096 —-a-r- c:\documents and settings\peter\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2012-09-05 21:56:48 ——– d—–w- c:\program files\Trend Micro
2012-09-05 18:29:06 5600 —-a-w- c:\windows\system\WINASPI.DLL
2012-09-05 18:29:06 4672 —-a-w- c:\windows\system\WOWPOST.EXE
2012-09-05 18:29:06 45056 —-a-w- c:\windows\system32\WNASPI32.DLL
2012-09-05 18:29:06 25244 —-a-w- c:\windows\system32\drivers\ASPI32.SYS
2012-09-05 18:22:16 ——– d—–w- c:\program files\smartdl
2012-09-02 20:55:15 93672 —-a-w- c:\windows\system32\WindowsAccessBridge.dll
.
==================== Find3M ====================
.
2012-09-21 15:19:28 696240 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-21 15:19:27 73136 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-02 20:53:32 143872 —-a-w- c:\windows\system32\javacpl.cpl
2012-09-02 20:53:29 821736 —-a-w- c:\windows\system32\npDeployJava1.dll
2012-09-02 20:53:29 746984 —-a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:14:53 916992 —-a-w- c:\windows\system32\wininet.dll
2012-08-28 15:14:53 43520 ——w- c:\windows\system32\licmgr10.dll
2012-08-28 15:14:52 1469440 ——w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07:15 385024 ——w- c:\windows\system32\html.iec
2012-07-06 13:58:51 78336 —-a-w- c:\windows\system32\browser.dll
2012-07-04 14:05:18 139784 —-a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-03 13:40:15 1866112 —-a-w- c:\windows\system32\win32k.sys
.
============= FINISH: 17:51:22.25 ===============







###############################################################################






.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 4/12/2004 5:09:02 PM
System Uptime: 9/29/2012 5:41:30 PM (0 hours ago)
.
Motherboard: | | nVidia-nForce
Processor: AMD Athlon™ XP 2000+ | Socket A | 1664/133mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 57 GiB total, 13.525 GiB free.
D: is CDROM ()
E: is Removable
F: is FIXED (NTFS) - 298 GiB total, 76.007 GiB free.
G: is CDROM ()
I: is Removable
J: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP357: 6/28/2012 9:45:49 AM - System Checkpoint
RP358: 6/29/2012 11:37:22 AM - System Checkpoint
RP359: 7/2/2012 12:54:44 PM - System Checkpoint
RP360: 7/5/2012 12:33:11 PM - System Checkpoint
RP361: 7/7/2012 1:52:50 PM - System Checkpoint
RP362: 7/7/2012 10:24:40 PM - Installed DirectX
RP363: 7/7/2012 10:57:31 PM - Installed DirectX
RP364: 7/8/2012 7:54:25 AM - Removed OpenOffice.org Installer 1.0
RP365: 7/9/2012 9:44:55 AM - System Checkpoint
RP366: 7/11/2012 8:06:26 PM - Software Distribution Service 3.0
RP367: 7/12/2012 8:14:21 PM - Installed DirectX
RP368: 7/15/2012 7:29:10 PM - System Checkpoint
RP369: 7/17/2012 10:27:48 AM - System Checkpoint
RP370: 7/18/2012 8:57:39 PM - System Checkpoint
RP371: 7/20/2012 10:40:08 AM - System Checkpoint
RP372: 7/28/2012 7:01:59 AM - System Checkpoint
RP373: 7/29/2012 10:37:23 AM - System Checkpoint
RP374: 7/30/2012 4:41:10 PM - System Checkpoint
RP375: 8/5/2012 9:30:01 PM - System Checkpoint
RP376: 8/8/2012 12:20:16 PM - System Checkpoint
RP377: 8/9/2012 4:31:28 PM - System Checkpoint
RP378: 8/11/2012 6:13:55 PM - System Checkpoint
RP379: 8/15/2012 6:00:44 AM - System Checkpoint
RP380: 8/15/2012 6:00:47 PM - Software Distribution Service 3.0
RP381: 8/16/2012 10:34:19 PM - Software Distribution Service 3.0
RP382: 8/18/2012 12:40:49 PM - System Checkpoint
RP383: 8/19/2012 1:55:09 PM - System Checkpoint
RP384: 8/21/2012 8:14:52 PM - System Checkpoint
RP385: 8/23/2012 6:02:05 AM - System Checkpoint
RP386: 8/24/2012 4:06:51 PM - System Checkpoint
RP387: 8/26/2012 10:25:34 AM - System Checkpoint
RP388: 8/27/2012 2:14:06 PM - System Checkpoint
RP389: 8/29/2012 10:01:58 AM - System Checkpoint
RP390: 8/29/2012 12:03:36 PM - Restore Operation
RP391: 8/31/2012 10:34:02 AM - System Checkpoint
RP392: 9/1/2012 5:11:25 PM - System Checkpoint
RP393: 9/2/2012 4:49:49 PM - Removed Java™ 7 Update 5
RP394: 9/2/2012 4:51:59 PM - Installed Java 7 Update 7
RP395: 9/5/2012 5:56:46 PM - Installed HiJackThis
RP396: 9/7/2012 9:14:01 AM - System Checkpoint
RP397: 9/8/2012 10:33:08 AM - System Checkpoint
RP398: 9/10/2012 8:42:13 AM - OTL Restore Point - 9/10/2012 8:42:03 AM
RP399: 9/10/2012 11:38:53 AM - OTL Restore Point - 9/10/2012 11:38:41 AM
RP400: 9/10/2012 12:00:30 PM - OTL Restore Point - 9/10/2012 12:00:25 PM
RP401: 9/12/2012 7:09:56 PM - Software Distribution Service 3.0
RP402: 9/14/2012 11:52:08 AM - System Checkpoint
RP403: 9/14/2012 9:26:35 PM - avast! Free Antivirus Setup
RP404: 9/16/2012 9:15:01 AM - System Checkpoint
RP405: 9/18/2012 8:50:37 AM - System Checkpoint
RP406: 9/20/2012 6:03:07 AM - System Checkpoint
RP407: 9/22/2012 6:00:31 PM - Software Distribution Service 3.0
RP408: 9/24/2012 10:10:32 AM - System Checkpoint
RP409: 9/25/2012 1:11:40 PM - After Defrag
RP410: 9/28/2012 8:00:23 PM - Configured Bonjour
RP411: 9/28/2012 8:05:17 PM - Removed Ask Toolbar.
RP412: 9/28/2012 8:05:56 PM - Removed Ask Toolbar.
RP413: 9/28/2012 8:06:44 PM - Removed Ask Toolbar.
RP414: 9/29/2012 5:16:53 PM - Removed Ask Toolbar.
.
==== Installed Programs ======================
.
Active@ Data CD/DVD Burner v 2.0
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Download Manager 1.2 (Remove Only)
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4)
Alcohol 120% (Trial Version)
ArcSoft Camera Suite
Avant Browser (remove only)
avast! Free Antivirus
Belarc Advisor 7.1
Broadxent V.92 PCI DI3631-1
Burn4Free DVD Burning 6.0.0.0
CardRd81
CCScore
CDBurnerXP
CR2
Critical Update for Windows Media Player 11 (KB959772)
doPDF 7.3 printer
Enigma Browser (remove only)
ESET Online Scanner v3
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTOOLS
essvatgt
essvcpt
Express Burn Disc Burning Software
Free Video to MP3 Converter version 5.0.15.706
FrostWire 5.3.7
FVD Suite 2.6.9
Google Chrome
Google Earth
HamsterFreeVideoConverter
HiJackThis
HijackThis 1.99.1
HLPPDOCK
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB981793)
IrfanView (remove only)
iTunes
Java 7 Update 7
Java Auto Updater
Java™ 6 Update 30
JavaFX 2.1.1
kgcbase
Kodak EasyShare software
KONICA MINOLTA magicolor 2400W
KONICA MINOLTA PagePro 1350W
KSU
Macromedia Shockwave Player
Malwarebytes Anti-Malware version 1.65.0.1400
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Age of Empires Gold
Microsoft Age of Empires II
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Small Business Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
MOV Converter 3
Mozilla Firefox 13.0 (x86 en-US)
Mozilla Maintenance Service
MSN Messenger 7.0
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
MSXML4 Parser
NetWaiting
Notifier
NVIDIA Display Driver
NVIDIA Windows 2000/XP nForce Drivers
OfotoXMI
Opera
OTtBP
OTtBPSDK
Pando Media Booster
Pazera Free FLV to AVI Converter 1.4
RealPlayer
Rise of Nations
Search Toolbar
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2647516)
Security Update for Windows Internet Explorer 8 (KB2675157)
Security Update for Windows Internet Explorer 8 (KB2699988)
Security Update for Windows Internet Explorer 8 (KB2722913)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2641653)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2647518)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2660465)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2685939)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2695962)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219)
Security Update for Windows XP (KB2707511)
Security Update for Windows XP (KB2709162)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2718523)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135)
Security Update for Windows XP (KB2731847)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
SFR
SHASTA
SKIN0001
SKINXSDK
SLOW-PCfighter
staticcr
TeamSpeak 2 RC2
TOPO!
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB2598845)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2641690)
Update for Windows XP (KB2718704)
Update for Windows XP (KB2736233)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VideoFileDownload
VLC media player 0.9.8a
VPRINTOL
WebFldrs XP
Window Washer
Windows Backup Utility
Windows Genuine Advantage Notifications (KB905474)
Windows Imaging Component
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Service Pack 3
WinRAR 4.01 (32-bit)
WinZip
WIRELESS
WordWeb
Yahoo! Address AutoComplete
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Messenger
Yahoo! Messenger Explorer Bar
Yahoo! Software Update
.
==== Event Viewer Messages From Past Week ========
.
9/28/2012 8:05:27 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.
9/28/2012 5:34:57 AM, error: Service Control Manager [7022] - The Bonjour Service service hung on starting.
9/28/2012 5:33:28 AM, error: Service Control Manager [7000] - The GoldrushUSB service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
9/28/2012 5:32:31 AM, error: nvidesm [9] - The device, \Device\Scsi\nvidesm1, did not respond within the timeout period.
9/28/2012 2:57:35 PM, error: DCOM [10000] - Unable to start a DCOM Server: {0002DF01-0000-0000-C000-000000000046}. The error: "%3" Happened while starting this command: "C:\Program FilesInternet Explorer\iexplore.exe" -Embedding
9/25/2012 6:05:02 AM, error: System Error [1003] - Error code 0000001a, parameter1 00041284, parameter2 73000001, parameter3 18478950, parameter4 c0503000.
9/25/2012 1:10:41 PM, error: Removable Storage Service [111] - RSM could not load media in drive Drive 0 of library USB Device.
9/25/2012 1:10:41 PM, error: Removable Storage Service [111] - RSM could not load media in drive Drive 0 of library Flash Driver SM-USB20 USB Device.
.
==== End Of File ===========================

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI