Sandy M
Topic Starter
First, I've never used this site or any like it before. I don't know what will happen when I post this. Will I receive an e-mail, or when and where should I check for an answer?
Semi-random windows are being opened, usually starting with www.theonlybookmark.com/in.cgi?12
We often see www.safe-stripdownload, which immediately changes to sys-cleaner.com
Then we see a window: Warning. Your computer is infected. Windows has detected a spyware infection - click OK to install the last updates of Windows security software.
If we don't do anything, a new window pops open every few seconds.
If we close them as fast as they appear, there seems to be about a minute before another window opens up. The same windows seem to open each time, mostly porn sites, a couple of sites selling computer security software…
I'm really hoping someone can tell us what to do to get rid of the problem, and perhaps what settings should be changed or what new software we need to protect from another infestation like this.
Norton says everything is secure.
We downloaded and ran Ad-Aware. Somewhere one of the removal techniques said to turn off the restore point, so we did. (Yes, now we know we shouldn't have done that.)
Then I came across the What the Tech site, downloaded HiJack This, and ran it. Here is the HiJack This log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:42:21 PM, on 3/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\sysockeu.exe
C:\WINDOWS\sysodkcs.exe
C:\WINDOWS\sysoghcx.exe
C:\WINDOWS\sysokuaw.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [1029BB4B-16A9-4E77-AA3D-96930BD68EEC] "C:\WINDOWS\sysockeu.exe"
O4 - HKLM\..\Run: [852EBF20-A95D-4F1F-B9C2-B2CD24350F3E] "C:\WINDOWS\sysodkcs.exe"
O4 - HKLM\..\Run: [756349DC-6D9E-4F2A-9B24-269661F073C3] "C:\WINDOWS\sysoghcx.exe"
O4 - HKLM\..\Run: [2177F056-0AA6-4D6C-A944-13F71F341C29] "C:\WINDOWS\sysokuaw.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: Add To HP Organize… - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin/module.main/favorites\ie_add_to.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1204828967703
O22 - SharedTaskScheduler: dikage - {d4c51fa4-9192-4a9a-8d2a-a0690c92f171} - C:\WINDOWS\system32\lruvqvw.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
–
End of file - 9568 bytes
Here is what Belarc Advisor prints:
System Security Status CIS Benchmark Score
Available only for Windows 2000, XP Pro, and 2003
Virus Protection
Up-to-date
Microsoft Security Updates
Up-to-date
——————————————————————————
Computer Profile Summary
Computer Name: Library (in WORKGROUP)
Profile Date: Monday, March 10, 2008 12:49:02 PM
Advisor Version: 7.2v
Windows Logon: HP_Owner
Click here for Belarc's System Management products, for large and small companies.
Operating System System Model
Windows XP Home Edition Service Pack 2 (build 2600) HP Pavilion 061 PU128AV-ABA a1000y 0n31211CT101GUPPY00
System Serial Number: MXG52703F4 NA530
Enclosure Type: Desktop
Processor a Main Circuit Board b
2.80 gigahertz Intel Celeron
16 kilobyte primary memory cache
256 kilobyte secondary memory cache Board: ASUSTek Computer INC. Guppy 1.03
Bus Clock: 133 megahertz
BIOS: Phoenix Technologies, LTD 3.08 05/09/2005
Drives Memory Modules c,d
60.97 Gigabytes Usable Hard Drive Capacity
37.17 Gigabytes Hard Drive Free Space
TSSTcorp CD-R/RW TS-H292A [CD-ROM drive]
ST340015A [Hard drive] (40.02 GB) – drive 0, s/n 5LAJDMWD, rev 3.15, SMART Status: Healthy
ST380023A [Hard drive] (80.02 GB) – drive 1 248 Megabytes Installed Memory
Slot 'A0' has 256 MB
Slot 'A1' is Empty
Local Drive Volumes
c: (NTFS on drive 0) 31.38 GB 19.49 GB free
d: (NTFS on drive 1) 20.97 GB 12.73 GB free
e: (FAT32 on drive 0) 8.61 GB 4.96 GB free
Network Drives
None detected
Users (mouse over user name for details) Printers
local user accounts last logon
HP_Owner 3/10/2008 11:05:09 AM (admin)
local system accounts
Administrator never (admin)
Guest never
HelpAssistant never
SUPPORT_388945a0 never
SUPPORT_fddfa904 never
Marks a disabled account; Marks a locked account Epson Stylus COLOR 1520 ESC/P 2 on LPT1:
Microsoft Office Document Image Writer Driver on Microsoft Document Imaging Writer Port:
Microsoft Shared Fax Driver on SHRFAX:
Microsoft XPS Document Writer on XPSPort:
PDF reDirect Pro on PDF_REDIRECT_PORT:
Controllers Display
Intel® 82801DB Ultra ATA Storage Controller - 24CB
Primary IDE Channel [Controller]
Secondary IDE Channel [Controller] Intel® 82845G/GL/GE/PE/GV Graphics Controller [Display adapter]
ViewSonic VG150B [Monitor] (14.9"vis, s/n IQ03210204, August 2000)
Bus Adapters Multimedia
Intel® 82801DB/DBM USB 2.0 Enhanced Host Controller - 24CD
Intel® 82801DB/DBM USB Universal Host Controller - 24C2
Intel® 82801DB/DBM USB Universal Host Controller - 24C4
Intel® 82801DB/DBM USB Universal Host Controller - 24C7 Realtek AC'97 Audio
Communications Other Devices
Agere Systems PCI Soft Modem
1394 Net Adapter
Realtek RTL8139/810x Family Fast Ethernet NIC
primary Auto IP Address: 192.168.0.8 / 24
Gateway: 192.168.0.1
Dhcp Server: 192.168.0.1
Physical Address: 00:11:D8:EE:A4:03
Networking Dns Server: 192.168.0.1
VIA OHCI Compliant IEEE 1394 Host Controller
Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
PS/2 Compatible Mouse
USB Root Hub (4x)
Virus Protection [Back to Top]
Norton AntiVirus Version 15.00
Virus Definitions Version 3/10/2008 Rev 2
Last Disk Scan on Thursday, March 06, 2008 4:59:04 AM
Realtime File Scanning On
Missing Microsoft Security Hotfixes [Back to Top]
All required security hotfixes (using the 02/12/2008 Microsoft Security Bulletin Summary) have been installed.
Installed Microsoft Hotfixes [Back to Top]
.NETFramework
1.1
S867460 on 9/15/2007 (details…)
M928366 on 9/15/2007 (details…)
MSXML4SP2
KB936181 on 9/15/2007 (details…)
MSXML6
KB933579 on 3/8/2008 (details…)
Office Professional Edition 2003
KB907417 on 3/8/2008 (details…)
KB923618[SP] on 3/8/2008 (details…)
KB943649 on 3/8/2008 (details…)
KB943973 on 3/8/2008 (details…)
KB943983 on 3/8/2008 (details…)
KB944941 on 3/8/2008 (details…)
KB945185 on 3/8/2008 (details…)
KB946254 on 3/8/2008 (details…)
Office Standard Edition 2003
KB907417 on 3/8/2008 (details…)
KB923618[SP] on 3/8/2008 (details…)
KB943649 on 3/8/2008 (details…)
KB943973 on 3/8/2008 (details…)
KB943983 on 3/8/2008 (details…)
KB944941 on 3/8/2008 (details…)
KB945185 on 3/8/2008 (details…)
Step By Step Interactive Training
SP2
KB923723 on 9/15/2007 (details…)
WGA
SP0
KB892130 on 9/15/2007 (details…)
Windows Media Format 11 SDK
KB929399 (details…)
SP0
KB929399 on 3/8/2008 (details…)
Windows Media Format SDK
SP0
KB891122 on 3/6/2008 (details…)
Windows Media Player 10
KB936782_WMP10 (details…)
SP2
KB936782_WMP10 on 9/15/2007 (details…)
Windows Media Player 11
KB936782_WMP11 (details…)
KB939683 (details…)
SP0
KB939683 on 3/8/2008 (details…)
SP2
KB936782_WMP11 on 3/8/2008 (details…)
Windows Media Player 6.4
KB925398_WMP64 (details…)
SP0
KB925398_WMP64 on 9/15/2007 (details…)
Windows Media Player
SP0
KB911564 on 9/15/2007 (details…)
Windows XP
KB923689 (details…)
KB941569 (details…)
SP-1
KB909520 on 3/6/2008 (details…)
SP0
KB923689 on 9/15/2007 (details…)
KB937143-IE7 on 9/16/2007 (details…)
KB938127-IE7 on 9/16/2007 (details…)
KB939653-IE7 on 10/11/2007 (details…)
KB941569 on 12/22/2007 (details…)
KB942615-IE7 on 12/22/2007 (details…)
KB944533-IE7 on 2/13/2008 (details…)
SP10
MSCOMPPACKV1 on 3/6/2008 (Microsoft Compression Client Pack 1.0 for Windows XP)
SP3
KB867282 on 9/15/2007 (details…)
KB873339 on 9/15/2007 (details…)
KB883667 on 9/15/2007 (details…)
KB885250 on 9/15/2007 (details…)
KB885835 on 9/15/2007 (details…)
KB885836 on 9/15/2007 (details…)
KB886185 on 9/15/2007 (details…)
KB887472 on 9/15/2007 (details…)
KB887742 on 9/15/2007 (details…)
KB888113 on 9/15/2007 (details…)
KB888239 on 9/15/2007 (details…)
KB888302 on 9/15/2007 (details…)
KB890046 on 9/15/2007 (details…)
KB890175 on 9/15/2007 (details…)
KB890859 on 9/15/2007 (details…)
KB891781 on 9/15/2007 (details…)
KB893756 on 9/15/2007 (details…)
KB893803V2 on 9/15/2007 (details…)
KB894391 on 9/15/2007 (details…)
KB896344 on 3/6/2008 (details…)
Windows XP
SP3 (continued)
KB896358 on 9/15/2007 (details…)
KB896423 on 9/15/2007 (details…)
KB896428 on 9/15/2007 (details…)
KB898461 on 9/15/2007 (details…)
KB899587 on 9/15/2007 (details…)
KB899591 on 9/15/2007 (details…)
KB900485 on 9/15/2007 (details…)
KB900725 on 9/15/2007 (details…)
KB901017 on 9/15/2007 (details…)
KB901214 on 9/15/2007 (details…)
KB902400 on 9/15/2007 (details…)
KB904706 on 9/15/2007 (details…)
KB904942 on 9/15/2007 (details…)
KB905414 on 9/15/2007 (details…)
KB905749 on 9/15/2007 (details…)
KB908519 on 9/15/2007 (details…)
KB908531 on 9/15/2007 (details…)
KB910437 on 9/15/2007 (details…)
KB911280 on 9/15/2007 (details…)
KB911562 on 9/15/2007 (details…)
KB911927 on 9/15/2007 (details…)
KB913580 on 9/15/2007 (details…)
KB914388 on 9/15/2007 (details…)
KB914389 on 9/15/2007 (details…)
KB914440 on 9/15/2007 (details…)
KB915865 on 9/15/2007 (details…)
KB916595 on 9/15/2007 (details…)
KB917344 on 9/15/2007 (details…)
KB917953 on 9/15/2007 (details…)
KB918118 on 9/15/2007 (details…)
KB918439 on 9/15/2007 (details…)
KB919007 on 9/15/2007 (details…)
KB920213 on 9/15/2007 (details…)
KB920342 on 3/6/2008 (details…)
KB920670 on 9/15/2007 (details…)
KB920683 on 9/15/2007 (details…)
KB920685 on 9/15/2007 (details…)
KB920872 on 9/15/2007 (details…)
KB921503 on 9/15/2007 (details…)
KB922582 on 9/15/2007 (details…)
KB922819 on 9/15/2007 (details…)
KB923191 on 9/15/2007 (details…)
KB923414 on 9/15/2007 (details…)
KB923980 on 9/15/2007 (details…)
KB924270 on 9/15/2007 (details…)
KB924496 on 9/15/2007 (details…)
KB924667 on 9/15/2007 (details…)
KB925720 on 3/8/2008 (details…)
KB925876 on 3/6/2008 (details…)
KB925902 on 9/15/2007 (details…)
KB926239 on 3/6/2008 (details…)
KB926255 on 9/15/2007 (details…)
KB926436 on 9/15/2007 (details…)
KB927779 on 9/15/2007 (details…)
KB927802 on 9/15/2007 (details…)
KB927891 on 9/15/2007 (details…)
KB928255 on 9/15/2007 (details…)
KB928843 on 9/15/2007 (details…)
KB929123 on 9/15/2007 (details…)
KB930178 on 9/15/2007 (details…)
KB930916 on 9/15/2007 (details…)
KB931261 on 9/15/2007 (details…)
KB931784 on 9/15/2007 (details…)
KB932168 on 9/15/2007 (details…)
KB933360 on 9/15/2007 (details…)
KB933729 on 10/11/2007 (details…)
KB935839 on 9/15/2007 (details…)
KB935840 on 9/15/2007 (details…)
KB936021 on 9/15/2007 (details…)
KB936357 on 9/15/2007 (details…)
KB937143 on 9/15/2007 (details…)
KB938127 on 9/15/2007 (details…)
KB938828 on 9/15/2007 (details…)
KB938829 on 9/15/2007 (details…)
KB941202 on 10/11/2007 (details…)
KB941568 on 12/22/2007 (details…)
KB941644 on 1/9/2008 (details…)
KB942763 on 12/22/2007 (details…)
KB943055 on 2/13/2008 (details…)
KB943460 on 11/15/2007 (details…)
KB943485 on 1/9/2008 (details…)
KB944653 on 12/22/2007 (details…)
KB946026 on 2/13/2008 (details…)
Windows
SP1
IDNMITIGATIONAPIS on 9/15/2007 (Microsoft Internationalized Domain Names Mitigation APIs)
NLSDOWNLEVELMAPPING on 9/15/2007 (Microsoft National Language Support Downlevel APIs)
XML Paper Specification Shared Components Pack 1.0
XPSEPSC (XML Paper Specification Shared Components Pack 1.0)
Click here to see all available Microsoft security hotfixes for this computer.
Marks a security hotfix (using the 02/12/2008 Microsoft Security Bulletin Summary)
Marks a security hotFix that fails verification (a security vulnerability)
Marks a hotfix that verifies correctly
Marks a hotfix that fails verification (note that failing hotfixes need to be reinstalled)
Unmarked hotfixes lack the data to allow verification
Click here for Belarc's System Management products, for large and small companies.
Software Licenses [Back to Top]
Belarc - Advisor d58ce631
Hewlett-Packard - HPD MXG52703F4
Microsoft - Interactive Training 25807-OEM-0000007-00000 (Key: TM66R-2Q86K-HXPBD-CQ9TR-9WTQY)e
Microsoft - Internet Explorer 84876-600-0011903-00106
Microsoft - Office Professional Edition 2003 70145-717-2018476-57918 (Key: VQ23Q-YHHKW-F96FG-2MB9J-RJGJQ)
Microsoft - WebFldrs XP 12345-111-1111111-65154
Microsoft - Windows XP Home Edition 76477-OEM-0011903-00106 (Key: MK48G-CG8VJ-BRVBB-38MQ9-3PMFT)e
Microsoft - Works 76032-OEM-0400003-00000
Microsoft - Works 8.0 76032-OEM-0400003-00000 (Key: TM66R-2Q86K-HXPBD-CQ9TR-9WTQY)e
Nico Mak Computing - WinZip 46465693
Sonic Solutions - Sonic Express Labeler CYC88LHMFVX7VXAQ3
Sonic Solutions - Sonic RecordNow Audio CJLA27TTLNJERPVTG
Sonic Solutions - Sonic RecordNow Copy C4HR6JDCEXA9VS2DN
Sonic Solutions - Sonic RecordNow Data CQ5J3TWF68UN3DYBS
Sonic Solutions - Sonic Update Manager CGKE9LMNT3F6W4PN7
Symantec - AppCore 1
Symantec - Component Framework 1
Symantec - GearDrvs 1
Symantec - Norton AntiVirus 1
Symantec - Norton AntiVirus Help 1
Symantec - Norton Protection Center 1
Symantec - Real Time Storage Protection Component 1
Symantec - SymNet 1
Symantec - Technical Support Web Controls 1
Software Versions (mouse over * for details, click * for location) [Back to Top]
1029BB4B-16A9-4E77-AA3D-96930BD68EEC *
2177F056-0AA6-4D6C-A944-13F71F341C29 *
756349DC-6D9E-4F2A-9B24-269661F073C3 *
852EBF20-A95D-4F1F-B9C2-B2CD24350F3E *
Adobe Acrobat Version 8.0.0.0 *
Adobe Reader Version 8.1.0.2007051100 *
Anona Bay Corp - printertest Version 1.00.0001 *
Apple Computer, Inc. - iTunes Version 4.7.0.42 *
Apple Computer, Inc. - QuickTime QuickTime 6.5.2 *
Belarc, Inc. - Advisor Version 7.2v *
Cinematronics - 3D Pinball Version 5.1.2600.2180 *
CyBerCorp Holdings, Inc. - StreetSmart Pro® Version 4.12 *
DigitalMedia Home Version 1.0.0 *
EarthLink *
EXP Systems LLC - PDF reDirect v2 Version 2.1.0.9 *
Fookes Software - NoteTab Light Version 4.95 *
Go to the Adobe Store *
Google Inc. - Picasa Version 2.7.0 *
Google Updater Version 2.2.824.5515.beta *
GoogleToolbarNotifier Version 2, 0, 301, 1654 *
Hewlett Packard - MSN Launcher Version 1, 0, 0, 1 *
Hewlett-Packard - HP Product Assistant Version 2.0.0.72 *
Hewlett-Packard - HP Service Delivery Platform Version 3,2,0,1491 *
Hewlett-Packard - HP Software Update Client Version 3, 0, 2, 31 *
Hewlett-Packard - HP ToggleClient Version 1, 0, 0, 1 *
Hewlett-Packard - HPSysInfo Version 8.3.0.0 *
Hewlett-Packard - Updates from HP Version 6,3,2, 1 *
Hewlett-Packard Co. - Cloaker, Cloaker, Cloaker! Version 3, 0, 0, 0 *
Hewlett-Packard Co. - hp digital imaging - hp all-in-one series Version 045.004.157.000 *
Hewlett-Packard Company - HPBootOp Version 1, 0, 5, 0 *
Hewlett-Packard Development Company, L.P. - PC Doctor Offline Version 1.0 *
HP PML Version 9, 0, 0, 0 *
HP Version 1.9.9.0 *
HpqPhUnl Application Version 4.5.0.133 *
InterMute, Inc. - CWShredder Version 2.13 *
InterMute, Inc. - SpySubtract Version 2.65 *
IObit - Advanced WindowsCare V2 Personal Version 2.0.0.0 *
Lavasoft - Process Watch Version 1.0.0.0 *
Lavasoft AB - Ad-Aware 2007 Service Version 7, 0, 2, 5 *
Lavasoft AB - Ad-Aware 2007 Version 7.0.0.0 *
Lavasoft AB - Ad-Watch 7 Version 7.0 *
Lavasoft AB - Update Manager Version 1.0.0.0 *
Lavasoft Hosts File Edit Version 1.0.0.3 *
Macromedia, Inc. - Shockwave Flash Version 5.4.98.7 *
Macrovision Corporation - InstallShield ® Version 10.50 *
Microsoft ® .NET Framework Version 1.1.4322.2032 *
Microsoft ® Windows Script Host Version 5.6.0.8820 *
Microsoft Application Error Reporting Version 11.0.8163 *
Microsoft Clip Organizer Version 11.0.8164 *
Microsoft Corporation - Internet Explorer Version 7.00.6000.16608 *
Microsoft Corporation - Messenger Version 4.7.3001 *
Microsoft Corporation - Office Source Engine Version 11.0.5525 *
Microsoft Corporation - Plus! Photo Story 2 LE Version 1.1.0.3463 *
Microsoft Corporation - SelfCert Version 11.0.8164 *
Microsoft Corporation - Windows Installer - Unicode Version 3.1.4000.1823 *
Microsoft Corporation - Windows Movie Maker Version 2.1.4026.0 *
Microsoft Corporation - Windows® NetMeeting® Version 3.01 *
Microsoft Corporation - Zone.com Version 1.2.626.1 * Microsoft Data Access Components Version 3.525.1117.0 *
Microsoft Interactive Training Version 3, 5, 0, 118 *
Microsoft Office 2003 Version 11.0.8202 *
Microsoft Office Document Imaging Version 11.0.8166.2 *
Microsoft Office InfoPath Version 11.0.8161 *
Microsoft Office Outlook Version 11.0.8169 *
Microsoft Office Picture Manager Version 11.0.8161 *
Microsoft Office Save My Settings/Profile Wizard Version 11.0.8161 *
Microsoft® .NET Framework Version 2.0.50727.1433 *
Microsoft® .NET Framework Version 3.0.4506.648 *
Microsoft® Fax Server Version 5.2.1776.0 *
Microsoft® Schedule+ for Windows 95™ Version 7.5 *
Microsoft® Visual Studio .NET Version 7.00.9466 *
Microsoft® Windows® Operating System Version 11.0.5721.5145 *
Microsoft® Works 8 Version 8.04.0702.0 *
MicroVision Development, Inc. - Express Labeler Version 2.0 *
MindVision - Installer VISE 2.8.3 Version 2.8.3 *
Mozilla Corporation - Firefox Version 2.0.0.6 *
NeoPlanet NdaLoader Version 1, 0, 0, 621 *
PC System Recovery Version 2, 2, 0, 1 *
piolch Module Version 1, 0, 0, 1 *
PMAP - Ramco Map Printer Version 1.00.0046 *
PREVIEWCLIENT Application Version 6.3.2 (Build 62R) *
Ramco - Cviewer Version 1.00.0300 *
RAMCO - FileCheck Version 1.00.0004 *
Ramco - INI Utility Version 1.00.0003 *
Ramco - Rinput Version 2.00.0418 *
RAMCO - Wall to Wall G Version 3.00.0288 *
Ramco - Xinput Version 2.00.0452 *
Ramco Roll Cutting Editor Version 1.00.0065 *
RealNetworks, Inc. - RealPlayer (32-bit) Version 0.1.0.4043 *
RealNetworks, Inc. - RealPlayer (32-bit) Version 6.0.12.1662 *
RealNetworks, Inc. - RealPlayer (32-bit) Version 7.0.0.3384 *
Recovery Tools CD LauncherCreator Application Version 6, 0, 52, 5 *
Roxio - DirectCD Version 5.3.1.154 *
Roxio - Easy CD Creator Version 5.3.1.154 *
SafeNet, Inc - SPI Version 7, 4, 0, 0 *
SafeNet, Inc. - Sentinel Keys Version 1, 0, 3, 0 *
Safer Networking Limited - Secure Shredder Version 1.9.0.0 *
Safer Networking Limited - Spybot - Search & Destroy Version 1, 5, 2, 0 *
Safer Networking Limited - SpyBot-S&D Version 1, 5, 2, 0 *
Slyder *
SoftThinks - Application CD Creator Version 6, 0, 52, 15 *
SoftThinks - Application Recovery Program Version 6, 0, 52, 12 *
Sun Microsystems, Inc. - Java™ 2 Platform Standard Edition 5.0 Version 1.5.0.0 *
Sun Microsystems, Inc. - Java™ 2 Platform Standard Edition Version 1.5.0.0 *
Symantec - Norton 360 Version 1.0 *
Symantec Core Component Version 1.9.2.74 *
Symantec Corporation - LiveUpdate Notice Version 1.3 *
Symantec Corporation - LiveUpdate Version 3.4.0.162 *
Symantec Corporation - Norton AntiVirus Version 15.0.0 *
Symantec Corporation - Norton Protection Center Version 2008.1.00 *
Symantec Corporation - Standalone Scanner Components Version 1.2 *
Symantec Security Technologies Version 107.0.3.7 *
Trend Micro Inc. - HijackThis Version 2.00.0002 *
WinZip Version 8.0 (3105) *
Wizards to adjust .NET Framework security, assign trust to assemblies, and fix broken .NET applications. Version 1.0.5000.0 *
Thank you in advance for any help you can give.
Sandy M.
Semi-random windows are being opened, usually starting with www.theonlybookmark.com/in.cgi?12
We often see www.safe-stripdownload, which immediately changes to sys-cleaner.com
Then we see a window: Warning. Your computer is infected. Windows has detected a spyware infection - click OK to install the last updates of Windows security software.
If we don't do anything, a new window pops open every few seconds.
If we close them as fast as they appear, there seems to be about a minute before another window opens up. The same windows seem to open each time, mostly porn sites, a couple of sites selling computer security software…
I'm really hoping someone can tell us what to do to get rid of the problem, and perhaps what settings should be changed or what new software we need to protect from another infestation like this.
Norton says everything is secure.
We downloaded and ran Ad-Aware. Somewhere one of the removal techniques said to turn off the restore point, so we did. (Yes, now we know we shouldn't have done that.)
Then I came across the What the Tech site, downloaded HiJack This, and ran it. Here is the HiJack This log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:42:21 PM, on 3/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\sysockeu.exe
C:\WINDOWS\sysodkcs.exe
C:\WINDOWS\sysoghcx.exe
C:\WINDOWS\sysokuaw.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [1029BB4B-16A9-4E77-AA3D-96930BD68EEC] "C:\WINDOWS\sysockeu.exe"
O4 - HKLM\..\Run: [852EBF20-A95D-4F1F-B9C2-B2CD24350F3E] "C:\WINDOWS\sysodkcs.exe"
O4 - HKLM\..\Run: [756349DC-6D9E-4F2A-9B24-269661F073C3] "C:\WINDOWS\sysoghcx.exe"
O4 - HKLM\..\Run: [2177F056-0AA6-4D6C-A944-13F71F341C29] "C:\WINDOWS\sysokuaw.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: Add To HP Organize… - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin/module.main/favorites\ie_add_to.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1204828967703
O22 - SharedTaskScheduler: dikage - {d4c51fa4-9192-4a9a-8d2a-a0690c92f171} - C:\WINDOWS\system32\lruvqvw.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
–
End of file - 9568 bytes
Here is what Belarc Advisor prints:
System Security Status CIS Benchmark Score
Available only for Windows 2000, XP Pro, and 2003
Virus Protection
Up-to-date
Microsoft Security Updates
Up-to-date
——————————————————————————
Computer Profile Summary
Computer Name: Library (in WORKGROUP)
Profile Date: Monday, March 10, 2008 12:49:02 PM
Advisor Version: 7.2v
Windows Logon: HP_Owner
Click here for Belarc's System Management products, for large and small companies.
Operating System System Model
Windows XP Home Edition Service Pack 2 (build 2600) HP Pavilion 061 PU128AV-ABA a1000y 0n31211CT101GUPPY00
System Serial Number: MXG52703F4 NA530
Enclosure Type: Desktop
Processor a Main Circuit Board b
2.80 gigahertz Intel Celeron
16 kilobyte primary memory cache
256 kilobyte secondary memory cache Board: ASUSTek Computer INC. Guppy 1.03
Bus Clock: 133 megahertz
BIOS: Phoenix Technologies, LTD 3.08 05/09/2005
Drives Memory Modules c,d
60.97 Gigabytes Usable Hard Drive Capacity
37.17 Gigabytes Hard Drive Free Space
TSSTcorp CD-R/RW TS-H292A [CD-ROM drive]
ST340015A [Hard drive] (40.02 GB) – drive 0, s/n 5LAJDMWD, rev 3.15, SMART Status: Healthy
ST380023A [Hard drive] (80.02 GB) – drive 1 248 Megabytes Installed Memory
Slot 'A0' has 256 MB
Slot 'A1' is Empty
Local Drive Volumes
c: (NTFS on drive 0) 31.38 GB 19.49 GB free
d: (NTFS on drive 1) 20.97 GB 12.73 GB free
e: (FAT32 on drive 0) 8.61 GB 4.96 GB free
Network Drives
None detected
Users (mouse over user name for details) Printers
local user accounts last logon
HP_Owner 3/10/2008 11:05:09 AM (admin)
local system accounts
Administrator never (admin)
Guest never
HelpAssistant never
SUPPORT_388945a0 never
SUPPORT_fddfa904 never
Marks a disabled account; Marks a locked account Epson Stylus COLOR 1520 ESC/P 2 on LPT1:
Microsoft Office Document Image Writer Driver on Microsoft Document Imaging Writer Port:
Microsoft Shared Fax Driver on SHRFAX:
Microsoft XPS Document Writer on XPSPort:
PDF reDirect Pro on PDF_REDIRECT_PORT:
Controllers Display
Intel® 82801DB Ultra ATA Storage Controller - 24CB
Primary IDE Channel [Controller]
Secondary IDE Channel [Controller] Intel® 82845G/GL/GE/PE/GV Graphics Controller [Display adapter]
ViewSonic VG150B [Monitor] (14.9"vis, s/n IQ03210204, August 2000)
Bus Adapters Multimedia
Intel® 82801DB/DBM USB 2.0 Enhanced Host Controller - 24CD
Intel® 82801DB/DBM USB Universal Host Controller - 24C2
Intel® 82801DB/DBM USB Universal Host Controller - 24C4
Intel® 82801DB/DBM USB Universal Host Controller - 24C7 Realtek AC'97 Audio
Communications Other Devices
Agere Systems PCI Soft Modem
1394 Net Adapter
Realtek RTL8139/810x Family Fast Ethernet NIC
primary Auto IP Address: 192.168.0.8 / 24
Gateway: 192.168.0.1
Dhcp Server: 192.168.0.1
Physical Address: 00:11:D8:EE:A4:03
Networking Dns Server: 192.168.0.1
VIA OHCI Compliant IEEE 1394 Host Controller
Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
PS/2 Compatible Mouse
USB Root Hub (4x)
Virus Protection [Back to Top]
Norton AntiVirus Version 15.00
Virus Definitions Version 3/10/2008 Rev 2
Last Disk Scan on Thursday, March 06, 2008 4:59:04 AM
Realtime File Scanning On
Missing Microsoft Security Hotfixes [Back to Top]
All required security hotfixes (using the 02/12/2008 Microsoft Security Bulletin Summary) have been installed.
Installed Microsoft Hotfixes [Back to Top]
.NETFramework
1.1
S867460 on 9/15/2007 (details…)
M928366 on 9/15/2007 (details…)
MSXML4SP2
KB936181 on 9/15/2007 (details…)
MSXML6
KB933579 on 3/8/2008 (details…)
Office Professional Edition 2003
KB907417 on 3/8/2008 (details…)
KB923618[SP] on 3/8/2008 (details…)
KB943649 on 3/8/2008 (details…)
KB943973 on 3/8/2008 (details…)
KB943983 on 3/8/2008 (details…)
KB944941 on 3/8/2008 (details…)
KB945185 on 3/8/2008 (details…)
KB946254 on 3/8/2008 (details…)
Office Standard Edition 2003
KB907417 on 3/8/2008 (details…)
KB923618[SP] on 3/8/2008 (details…)
KB943649 on 3/8/2008 (details…)
KB943973 on 3/8/2008 (details…)
KB943983 on 3/8/2008 (details…)
KB944941 on 3/8/2008 (details…)
KB945185 on 3/8/2008 (details…)
Step By Step Interactive Training
SP2
KB923723 on 9/15/2007 (details…)
WGA
SP0
KB892130 on 9/15/2007 (details…)
Windows Media Format 11 SDK
KB929399 (details…)
SP0
KB929399 on 3/8/2008 (details…)
Windows Media Format SDK
SP0
KB891122 on 3/6/2008 (details…)
Windows Media Player 10
KB936782_WMP10 (details…)
SP2
KB936782_WMP10 on 9/15/2007 (details…)
Windows Media Player 11
KB936782_WMP11 (details…)
KB939683 (details…)
SP0
KB939683 on 3/8/2008 (details…)
SP2
KB936782_WMP11 on 3/8/2008 (details…)
Windows Media Player 6.4
KB925398_WMP64 (details…)
SP0
KB925398_WMP64 on 9/15/2007 (details…)
Windows Media Player
SP0
KB911564 on 9/15/2007 (details…)
Windows XP
KB923689 (details…)
KB941569 (details…)
SP-1
KB909520 on 3/6/2008 (details…)
SP0
KB923689 on 9/15/2007 (details…)
KB937143-IE7 on 9/16/2007 (details…)
KB938127-IE7 on 9/16/2007 (details…)
KB939653-IE7 on 10/11/2007 (details…)
KB941569 on 12/22/2007 (details…)
KB942615-IE7 on 12/22/2007 (details…)
KB944533-IE7 on 2/13/2008 (details…)
SP10
MSCOMPPACKV1 on 3/6/2008 (Microsoft Compression Client Pack 1.0 for Windows XP)
SP3
KB867282 on 9/15/2007 (details…)
KB873339 on 9/15/2007 (details…)
KB883667 on 9/15/2007 (details…)
KB885250 on 9/15/2007 (details…)
KB885835 on 9/15/2007 (details…)
KB885836 on 9/15/2007 (details…)
KB886185 on 9/15/2007 (details…)
KB887472 on 9/15/2007 (details…)
KB887742 on 9/15/2007 (details…)
KB888113 on 9/15/2007 (details…)
KB888239 on 9/15/2007 (details…)
KB888302 on 9/15/2007 (details…)
KB890046 on 9/15/2007 (details…)
KB890175 on 9/15/2007 (details…)
KB890859 on 9/15/2007 (details…)
KB891781 on 9/15/2007 (details…)
KB893756 on 9/15/2007 (details…)
KB893803V2 on 9/15/2007 (details…)
KB894391 on 9/15/2007 (details…)
KB896344 on 3/6/2008 (details…)
Windows XP
SP3 (continued)
KB896358 on 9/15/2007 (details…)
KB896423 on 9/15/2007 (details…)
KB896428 on 9/15/2007 (details…)
KB898461 on 9/15/2007 (details…)
KB899587 on 9/15/2007 (details…)
KB899591 on 9/15/2007 (details…)
KB900485 on 9/15/2007 (details…)
KB900725 on 9/15/2007 (details…)
KB901017 on 9/15/2007 (details…)
KB901214 on 9/15/2007 (details…)
KB902400 on 9/15/2007 (details…)
KB904706 on 9/15/2007 (details…)
KB904942 on 9/15/2007 (details…)
KB905414 on 9/15/2007 (details…)
KB905749 on 9/15/2007 (details…)
KB908519 on 9/15/2007 (details…)
KB908531 on 9/15/2007 (details…)
KB910437 on 9/15/2007 (details…)
KB911280 on 9/15/2007 (details…)
KB911562 on 9/15/2007 (details…)
KB911927 on 9/15/2007 (details…)
KB913580 on 9/15/2007 (details…)
KB914388 on 9/15/2007 (details…)
KB914389 on 9/15/2007 (details…)
KB914440 on 9/15/2007 (details…)
KB915865 on 9/15/2007 (details…)
KB916595 on 9/15/2007 (details…)
KB917344 on 9/15/2007 (details…)
KB917953 on 9/15/2007 (details…)
KB918118 on 9/15/2007 (details…)
KB918439 on 9/15/2007 (details…)
KB919007 on 9/15/2007 (details…)
KB920213 on 9/15/2007 (details…)
KB920342 on 3/6/2008 (details…)
KB920670 on 9/15/2007 (details…)
KB920683 on 9/15/2007 (details…)
KB920685 on 9/15/2007 (details…)
KB920872 on 9/15/2007 (details…)
KB921503 on 9/15/2007 (details…)
KB922582 on 9/15/2007 (details…)
KB922819 on 9/15/2007 (details…)
KB923191 on 9/15/2007 (details…)
KB923414 on 9/15/2007 (details…)
KB923980 on 9/15/2007 (details…)
KB924270 on 9/15/2007 (details…)
KB924496 on 9/15/2007 (details…)
KB924667 on 9/15/2007 (details…)
KB925720 on 3/8/2008 (details…)
KB925876 on 3/6/2008 (details…)
KB925902 on 9/15/2007 (details…)
KB926239 on 3/6/2008 (details…)
KB926255 on 9/15/2007 (details…)
KB926436 on 9/15/2007 (details…)
KB927779 on 9/15/2007 (details…)
KB927802 on 9/15/2007 (details…)
KB927891 on 9/15/2007 (details…)
KB928255 on 9/15/2007 (details…)
KB928843 on 9/15/2007 (details…)
KB929123 on 9/15/2007 (details…)
KB930178 on 9/15/2007 (details…)
KB930916 on 9/15/2007 (details…)
KB931261 on 9/15/2007 (details…)
KB931784 on 9/15/2007 (details…)
KB932168 on 9/15/2007 (details…)
KB933360 on 9/15/2007 (details…)
KB933729 on 10/11/2007 (details…)
KB935839 on 9/15/2007 (details…)
KB935840 on 9/15/2007 (details…)
KB936021 on 9/15/2007 (details…)
KB936357 on 9/15/2007 (details…)
KB937143 on 9/15/2007 (details…)
KB938127 on 9/15/2007 (details…)
KB938828 on 9/15/2007 (details…)
KB938829 on 9/15/2007 (details…)
KB941202 on 10/11/2007 (details…)
KB941568 on 12/22/2007 (details…)
KB941644 on 1/9/2008 (details…)
KB942763 on 12/22/2007 (details…)
KB943055 on 2/13/2008 (details…)
KB943460 on 11/15/2007 (details…)
KB943485 on 1/9/2008 (details…)
KB944653 on 12/22/2007 (details…)
KB946026 on 2/13/2008 (details…)
Windows
SP1
IDNMITIGATIONAPIS on 9/15/2007 (Microsoft Internationalized Domain Names Mitigation APIs)
NLSDOWNLEVELMAPPING on 9/15/2007 (Microsoft National Language Support Downlevel APIs)
XML Paper Specification Shared Components Pack 1.0
XPSEPSC (XML Paper Specification Shared Components Pack 1.0)
Click here to see all available Microsoft security hotfixes for this computer.
Marks a security hotfix (using the 02/12/2008 Microsoft Security Bulletin Summary)
Marks a security hotFix that fails verification (a security vulnerability)
Marks a hotfix that verifies correctly
Marks a hotfix that fails verification (note that failing hotfixes need to be reinstalled)
Unmarked hotfixes lack the data to allow verification
Click here for Belarc's System Management products, for large and small companies.
Software Licenses [Back to Top]
Belarc - Advisor d58ce631
Hewlett-Packard - HPD MXG52703F4
Microsoft - Interactive Training 25807-OEM-0000007-00000 (Key: TM66R-2Q86K-HXPBD-CQ9TR-9WTQY)e
Microsoft - Internet Explorer 84876-600-0011903-00106
Microsoft - Office Professional Edition 2003 70145-717-2018476-57918 (Key: VQ23Q-YHHKW-F96FG-2MB9J-RJGJQ)
Microsoft - WebFldrs XP 12345-111-1111111-65154
Microsoft - Windows XP Home Edition 76477-OEM-0011903-00106 (Key: MK48G-CG8VJ-BRVBB-38MQ9-3PMFT)e
Microsoft - Works 76032-OEM-0400003-00000
Microsoft - Works 8.0 76032-OEM-0400003-00000 (Key: TM66R-2Q86K-HXPBD-CQ9TR-9WTQY)e
Nico Mak Computing - WinZip 46465693
Sonic Solutions - Sonic Express Labeler CYC88LHMFVX7VXAQ3
Sonic Solutions - Sonic RecordNow Audio CJLA27TTLNJERPVTG
Sonic Solutions - Sonic RecordNow Copy C4HR6JDCEXA9VS2DN
Sonic Solutions - Sonic RecordNow Data CQ5J3TWF68UN3DYBS
Sonic Solutions - Sonic Update Manager CGKE9LMNT3F6W4PN7
Symantec - AppCore 1
Symantec - Component Framework 1
Symantec - GearDrvs 1
Symantec - Norton AntiVirus 1
Symantec - Norton AntiVirus Help 1
Symantec - Norton Protection Center 1
Symantec - Real Time Storage Protection Component 1
Symantec - SymNet 1
Symantec - Technical Support Web Controls 1
Software Versions (mouse over * for details, click * for location) [Back to Top]
1029BB4B-16A9-4E77-AA3D-96930BD68EEC *
2177F056-0AA6-4D6C-A944-13F71F341C29 *
756349DC-6D9E-4F2A-9B24-269661F073C3 *
852EBF20-A95D-4F1F-B9C2-B2CD24350F3E *
Adobe Acrobat Version 8.0.0.0 *
Adobe Reader Version 8.1.0.2007051100 *
Anona Bay Corp - printertest Version 1.00.0001 *
Apple Computer, Inc. - iTunes Version 4.7.0.42 *
Apple Computer, Inc. - QuickTime QuickTime 6.5.2 *
Belarc, Inc. - Advisor Version 7.2v *
Cinematronics - 3D Pinball Version 5.1.2600.2180 *
CyBerCorp Holdings, Inc. - StreetSmart Pro® Version 4.12 *
DigitalMedia Home Version 1.0.0 *
EarthLink *
EXP Systems LLC - PDF reDirect v2 Version 2.1.0.9 *
Fookes Software - NoteTab Light Version 4.95 *
Go to the Adobe Store *
Google Inc. - Picasa Version 2.7.0 *
Google Updater Version 2.2.824.5515.beta *
GoogleToolbarNotifier Version 2, 0, 301, 1654 *
Hewlett Packard - MSN Launcher Version 1, 0, 0, 1 *
Hewlett-Packard - HP Product Assistant Version 2.0.0.72 *
Hewlett-Packard - HP Service Delivery Platform Version 3,2,0,1491 *
Hewlett-Packard - HP Software Update Client Version 3, 0, 2, 31 *
Hewlett-Packard - HP ToggleClient Version 1, 0, 0, 1 *
Hewlett-Packard - HPSysInfo Version 8.3.0.0 *
Hewlett-Packard - Updates from HP Version 6,3,2, 1 *
Hewlett-Packard Co. - Cloaker, Cloaker, Cloaker! Version 3, 0, 0, 0 *
Hewlett-Packard Co. - hp digital imaging - hp all-in-one series Version 045.004.157.000 *
Hewlett-Packard Company - HPBootOp Version 1, 0, 5, 0 *
Hewlett-Packard Development Company, L.P. - PC Doctor Offline Version 1.0 *
HP PML Version 9, 0, 0, 0 *
HP Version 1.9.9.0 *
HpqPhUnl Application Version 4.5.0.133 *
InterMute, Inc. - CWShredder Version 2.13 *
InterMute, Inc. - SpySubtract Version 2.65 *
IObit - Advanced WindowsCare V2 Personal Version 2.0.0.0 *
Lavasoft - Process Watch Version 1.0.0.0 *
Lavasoft AB - Ad-Aware 2007 Service Version 7, 0, 2, 5 *
Lavasoft AB - Ad-Aware 2007 Version 7.0.0.0 *
Lavasoft AB - Ad-Watch 7 Version 7.0 *
Lavasoft AB - Update Manager Version 1.0.0.0 *
Lavasoft Hosts File Edit Version 1.0.0.3 *
Macromedia, Inc. - Shockwave Flash Version 5.4.98.7 *
Macrovision Corporation - InstallShield ® Version 10.50 *
Microsoft ® .NET Framework Version 1.1.4322.2032 *
Microsoft ® Windows Script Host Version 5.6.0.8820 *
Microsoft Application Error Reporting Version 11.0.8163 *
Microsoft Clip Organizer Version 11.0.8164 *
Microsoft Corporation - Internet Explorer Version 7.00.6000.16608 *
Microsoft Corporation - Messenger Version 4.7.3001 *
Microsoft Corporation - Office Source Engine Version 11.0.5525 *
Microsoft Corporation - Plus! Photo Story 2 LE Version 1.1.0.3463 *
Microsoft Corporation - SelfCert Version 11.0.8164 *
Microsoft Corporation - Windows Installer - Unicode Version 3.1.4000.1823 *
Microsoft Corporation - Windows Movie Maker Version 2.1.4026.0 *
Microsoft Corporation - Windows® NetMeeting® Version 3.01 *
Microsoft Corporation - Zone.com Version 1.2.626.1 * Microsoft Data Access Components Version 3.525.1117.0 *
Microsoft Interactive Training Version 3, 5, 0, 118 *
Microsoft Office 2003 Version 11.0.8202 *
Microsoft Office Document Imaging Version 11.0.8166.2 *
Microsoft Office InfoPath Version 11.0.8161 *
Microsoft Office Outlook Version 11.0.8169 *
Microsoft Office Picture Manager Version 11.0.8161 *
Microsoft Office Save My Settings/Profile Wizard Version 11.0.8161 *
Microsoft® .NET Framework Version 2.0.50727.1433 *
Microsoft® .NET Framework Version 3.0.4506.648 *
Microsoft® Fax Server Version 5.2.1776.0 *
Microsoft® Schedule+ for Windows 95™ Version 7.5 *
Microsoft® Visual Studio .NET Version 7.00.9466 *
Microsoft® Windows® Operating System Version 11.0.5721.5145 *
Microsoft® Works 8 Version 8.04.0702.0 *
MicroVision Development, Inc. - Express Labeler Version 2.0 *
MindVision - Installer VISE 2.8.3 Version 2.8.3 *
Mozilla Corporation - Firefox Version 2.0.0.6 *
NeoPlanet NdaLoader Version 1, 0, 0, 621 *
PC System Recovery Version 2, 2, 0, 1 *
piolch Module Version 1, 0, 0, 1 *
PMAP - Ramco Map Printer Version 1.00.0046 *
PREVIEWCLIENT Application Version 6.3.2 (Build 62R) *
Ramco - Cviewer Version 1.00.0300 *
RAMCO - FileCheck Version 1.00.0004 *
Ramco - INI Utility Version 1.00.0003 *
Ramco - Rinput Version 2.00.0418 *
RAMCO - Wall to Wall G Version 3.00.0288 *
Ramco - Xinput Version 2.00.0452 *
Ramco Roll Cutting Editor Version 1.00.0065 *
RealNetworks, Inc. - RealPlayer (32-bit) Version 0.1.0.4043 *
RealNetworks, Inc. - RealPlayer (32-bit) Version 6.0.12.1662 *
RealNetworks, Inc. - RealPlayer (32-bit) Version 7.0.0.3384 *
Recovery Tools CD LauncherCreator Application Version 6, 0, 52, 5 *
Roxio - DirectCD Version 5.3.1.154 *
Roxio - Easy CD Creator Version 5.3.1.154 *
SafeNet, Inc - SPI Version 7, 4, 0, 0 *
SafeNet, Inc. - Sentinel Keys Version 1, 0, 3, 0 *
Safer Networking Limited - Secure Shredder Version 1.9.0.0 *
Safer Networking Limited - Spybot - Search & Destroy Version 1, 5, 2, 0 *
Safer Networking Limited - SpyBot-S&D Version 1, 5, 2, 0 *
Slyder *
SoftThinks - Application CD Creator Version 6, 0, 52, 15 *
SoftThinks - Application Recovery Program Version 6, 0, 52, 12 *
Sun Microsystems, Inc. - Java™ 2 Platform Standard Edition 5.0 Version 1.5.0.0 *
Sun Microsystems, Inc. - Java™ 2 Platform Standard Edition Version 1.5.0.0 *
Symantec - Norton 360 Version 1.0 *
Symantec Core Component Version 1.9.2.74 *
Symantec Corporation - LiveUpdate Notice Version 1.3 *
Symantec Corporation - LiveUpdate Version 3.4.0.162 *
Symantec Corporation - Norton AntiVirus Version 15.0.0 *
Symantec Corporation - Norton Protection Center Version 2008.1.00 *
Symantec Corporation - Standalone Scanner Components Version 1.2 *
Symantec Security Technologies Version 107.0.3.7 *
Trend Micro Inc. - HijackThis Version 2.00.0002 *
WinZip Version 8.0 (3105) *
Wizards to adjust .NET Framework security, assign trust to assemblies, and fix broken .NET applications. Version 1.0.5000.0 *
Thank you in advance for any help you can give.
Sandy M.
