Help I'm Infected...!

[ryanwake09]

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_19

Run by Home at 20:31:38 on 2012-01-02

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2324 [GMT -5:00]

.

AV: AntiVir Desktop *Enabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}

FW: ZoneAlarm Firewall *Enabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

svchost.exe

svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\WINDOWS\system32\hasplms.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Palm, Inc\novacom\x86\novacomd.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe

svchost.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\ehome\ehtray.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\WINDOWS\stsystra.exe

C:\WINDOWS\vVX3000.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\Program Files\iTunes\iTunesHelper.exe

C:\WINDOWS\system32\UMonit.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

.

============== Pseudo HJT Report ===============

.

BHO: {05c8b065-98a5-4877-9633-dfaccb1a557e} - c:\windows\system32\atkctrs32.dll

BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - c:\program files\adobe\/Adobe Contribute CS4/contributeieplugin.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - c:\program files\adobe\/Adobe Contribute CS4/contributeieplugin.dll

uRun: [AdobeBridge]

uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background

mRun: [ehTray] c:\windows\ehome\ehtray.exe

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min

mRun: [sigmatelSysTrayApp] stsystra.exe

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"

mRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe"

mRun: [Adobe_ID0ENQBO] c:\progra~1\common~1\adobe\adobev~1\server\bin\VERSIO~2.EXE

mRun: [<NO NAME>]

mRun: [sunJavaUpdateSched] "c:\program files\java\jre1.5.0\bin\jusched.exe"

mRun: [VX3000] c:\windows\vVX3000.exe

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

mRun: [uMonit] c:\windows\system32\UMonit.exe

mRunOnce: [Malwarebytes Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpimag~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe

IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL

DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab

DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

TCP: DhcpNameServer = 192.168.1.1 75.75.76.76 75.75.75.75

TCP: Interfaces\{C397ACB4-8BBD-41F2-8478-255857211D7C} : DhcpNameServer = 192.168.1.1 75.75.76.76 75.75.75.75

Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dll

Handler: intu-help-qb2 - {84D77A00-41B5-4b8b-8ADF-86486D72E749} - c:\program files\intuit\quickbooks 2009\HelpAsyncPluggableProtocol.dll

Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\home\application data\mozilla\firefox\profiles\s55tuhum.default\

FF - component: c:\documents and settings\home\application data\mozilla\firefox\profiles\s55tuhum.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\winnt_x86-msvc\components\ipc_fireftp.dll

FF - plugin: c:\documents and settings\home\application data\mozilla\firefox\profiles\s55tuhum.default\extensions\{e2883e8f-472f-4fb0-9522-ac9bf37916a7}\plugins\np_gp.dll

FF - plugin: c:\documents and settings\home\application data\mozilla\firefox\profiles\s55tuhum.default\extensions\2020player@2020technologies.com\plugins\NP2020Player.dll

FF - plugin: c:\documents and settings\home\application data\mozilla\firefox\profiles\s55tuhum.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll

FF - plugin: c:\windows\system32\tvuax\npTVUAx.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

FF - Ext: Adobe DLM (powered by getPlus®): {E2883E8F-472F-4fb0-9522-AC9BF37916A7} - %profile%\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}

FF - Ext: Download Manager Tweak: {F8A55C97-3DB6-4961-A81D-0DE0080E53CB} - %profile%\extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}

FF - Ext: FoxTab: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} - %profile%\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}

FF - Ext: Read It Later: isreaditlater@ideashower.com - %profile%\extensions\isreaditlater@ideashower.com

FF - Ext: 20-20 3D Viewer: 2020Player@2020Technologies.com - %profile%\extensions\2020Player@2020Technologies.com

FF - Ext: TVU Web Player: firefox@tvunetworks.com - %profile%\extensions\firefox@tvunetworks.com

FF - Ext: FireFTP: {a7c6cf7f-112c-4500-a7ea-39801a327e5f} - %profile%\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}

FF - Ext: XUL Cache: {b36e8b92-71dd-45a9-898b-27fa8d2e7276} - %profile%\extensions\{b36e8b92-71dd-45a9-898b-27fa8d2e7276}

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff

FF - Ext: XULRunner: {F2462A94-962E-4385-BEDA-E595FE712F4B} - c:\documents and settings\home\local settings\application data\{F2462A94-962E-4385-BEDA-E595FE712F4B}

.

============= SERVICES / DRIVERS ===============

.

R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-10-5 11608]

R1 vsdatant;vsdatant;c:\windows\system32\vsdatant.sys [2009-10-29 353672]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-10-5 108289]

R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-10-5 185089]

R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-10-5 56816]

R2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]

R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]

R2 NovacomD;Palm Novacom;c:\program files\palm, inc\novacom\x86\novacomd.exe [2010-1-12 33792]

R2 vsmon;TrueVector Internet Monitor;c:\windows\system32\zonelabs\vsmon.exe -service --> c:\windows\system32\zonelabs\vsmon.exe -service [?]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-1-2 40776]

R3 USTOR2K;USB Mass Storage Windows Driver;c:\windows\system32\drivers\ustor2k.sys [2011-5-23 43008]

S2 TermServices;Remote Desktop Services;c:\windows\system32\svchost.exe -k torlfsc [2004-8-10 14336]

S2 WudfSvc32;Windows Driver Foundation - User-mode Driver Framework ;c:\windows\system32\kbdgr132.exe --> c:\windows\system32\kbdgr132.exe [?]

S3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\common files\adobe\adobe version cue cs4\server\bin\VersionCueCS4.exe [2008-8-15 284016]

S3 zsi_fmw;Stiletto Firmware Recovery;c:\windows\system32\drivers\zsi_fmw.sys [2012-1-1 34176]

.

=============== Created Last 30 ================

.

2012-01-03 01:31:17 20464 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-01-03 01:31:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-01-02 03:47:00 222080 ------w- c:\windows\system32\MpSigStub.exe

2012-01-01 15:16:30 34176 ----a-r- c:\windows\system32\drivers\zsi_fmw.sys

.

==================== Find3M ====================

.

.

============= FINISH: 20:32:28.57 ===============

DDS (Ver_2011-08-26.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 10/5/2009 1:03:28 AM

System Uptime: 1/2/2012 8:21:23 PM (0 hours ago)

.

Motherboard: Dell Inc. | | 0FJ030

Processor: Intel® Pentium® D CPU 2.80GHz | Microprocessor | 2793/800mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 233 GiB total, 10.128 GiB free.

D: is CDROM ()

E: is CDROM ()

F: is Removable

G: is Removable

H: is Removable

I: is Removable

J: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}

Description: 1394 Net Adapter

Device ID: V1394\NIC1394\81E7F04DD100

Manufacturer: Microsoft

Name: 1394 Net Adapter

PNP Device ID: V1394\NIC1394\81E7F04DD100

Service: NIC1394

.

==== System Restore Points ===================

.

RP458: 9/2/2011 2:41:12 AM - System Checkpoint

RP459: 9/10/2011 1:14:35 PM - System Checkpoint

RP460: 9/15/2011 11:43:58 AM - System Checkpoint

RP461: 9/19/2011 8:37:41 PM - System Checkpoint

RP462: 9/26/2011 1:12:54 PM - System Checkpoint

RP463: 10/7/2011 9:33:16 AM - System Checkpoint

RP464: 11/4/2011 10:07:36 PM - Removed MobileMe Control Panel

RP465: 11/4/2011 10:08:13 PM - Configured Sirius Device Recovery

RP466: 11/4/2011 10:11:55 PM - Removed Bonjour

RP467: 11/4/2011 10:13:56 PM - Removed Microsoft LifeCam

RP468: 11/5/2011 10:43:57 PM - System Checkpoint

RP469: 11/6/2011 11:28:15 PM - System Checkpoint

RP470: 11/8/2011 2:34:56 AM - System Checkpoint

RP471: 11/9/2011 4:08:07 AM - System Checkpoint

RP472: 11/10/2011 4:38:36 AM - System Checkpoint

RP473: 11/11/2011 4:44:07 AM - System Checkpoint

RP474: 11/23/2011 2:57:13 AM - System Checkpoint

RP475: 11/24/2011 5:40:23 AM - System Checkpoint

RP476: 11/25/2011 6:32:01 AM - System Checkpoint

RP477: 12/25/2011 12:18:56 AM - System Checkpoint

RP478: 1/1/2012 10:05:22 AM - System Checkpoint

RP479: 1/1/2012 10:15:48 AM - Installed Sirius Device Recovery

.

==== Installed Programs ======================

.

1310

1310_Help

1310Tour

1310Trb

7-Zip 4.65

Acoustica MP3 Audio Mixer 2.13

Acrobat.com

Adobe Acrobat 9 Pro - English, Français, Deutsch

Adobe After Effects CS4

Adobe After Effects CS4 Presets

Adobe After Effects CS4 Third Party Content

Adobe AIR

Adobe Anchor Service CS4

Adobe Asset Services CS4

Adobe Bridge CS4

Adobe CMaps CS4

Adobe Color - Photoshop Specific CS4

Adobe Color EU Extra Settings CS4

Adobe Color JA Extra Settings CS4

Adobe Color NA Recommended Settings CS4

Adobe Color Video Profiles AE CS4

Adobe Color Video Profiles CS CS4

Adobe Contribute CS4

Adobe Creative Suite 4 Master Collection

Adobe CS4 American English Speech Analysis Models

Adobe CSI CS4

Adobe Default Language CS4

Adobe Device Central CS4

Adobe Download Manager

Adobe Dreamweaver CS4

Adobe Drive CS4

Adobe Dynamiclink Support

Adobe Encore CS4

Adobe Encore CS4 Codecs

Adobe ExtendScript Toolkit CS4

Adobe Extension Manager CS4

Adobe Fireworks CS4

Adobe Flash CS4

Adobe Flash CS4 Extension - Flash Lite STI en

Adobe Flash CS4 STI-en

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Fonts All

Adobe Illustrator CS4

Adobe InDesign CS4

Adobe InDesign CS4 Application Feature Set Files (Roman)

Adobe InDesign CS4 Common Base Files

Adobe InDesign CS4 Icon Handler

Adobe Linguistics CS4

Adobe Media Encoder CS4

Adobe Media Encoder CS4 Additional Exporter

Adobe Media Encoder CS4 Dolby

Adobe Media Encoder CS4 Exporter

Adobe Media Encoder CS4 Importer

Adobe Media Player

Adobe MotionPicture Color Files CS4

Adobe OnLocation CS4

Adobe Output Module

Adobe PDF Library Files CS4

Adobe Photoshop CS4

Adobe Photoshop CS4 Support

Adobe Premiere Pro CS4

Adobe Premiere Pro CS4 Functional Content

Adobe Premiere Pro CS4 Third Party Content

Adobe Search for Help

Adobe Service Manager Extension

Adobe Setup

Adobe SGM CS4

Adobe SING CS4

Adobe Soundbooth CS4

Adobe Soundbooth CS4 Codecs

Adobe Type Support CS4

Adobe Update Manager CS4

Adobe Version Cue CS4 Server

Adobe WinSoft Linguistics Plugin

Adobe XMP Panels CS4

AdobeColorCommonSetCMYK

AdobeColorCommonSetRGB

AiO_Scan

AiOSoftware

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Avira AntiVir Personal - Free Antivirus

BitLord 1.1

BufferChm

Cisco Connect

Conexant D850 56K V.9x DFVc Modem

Connect

Copy

DeductionPro 2009

Dell Resource CD

Director

DocProc

DocumentViewer

Fax

Garmin POI Loader

Garmin USB Drivers

Genesys USB Mass Storage Device

Google SketchUp 8

H&R Block Business 2009 (Remove Only)

H&R Block Michigan 2009

H&R Block Premium + Efile + State 2009

High Definition Audio Driver Package - KB835221

Hotfix for Windows Media Player 10 (KB903157)

HP Diagnostic Assistant

HP Image Zone 4.2

HP PSC & OfficeJet 4.2

HP Software Update

HPSystemDiagnostics

Image Resizer Powertoy for Windows XP

InstantShare

Intel® PRO Network Connections Drivers

IP Camera

iTunes

J2SE Runtime Environment 5.0

Java Auto Updater

Java 6 Update 19

kuler

Live 8.1.1

Malwarebytes Anti-Malware version 1.60.0.1800

Media Player Codec Pack 3.8.0

Microsoft .NET Framework 1.1

Microsoft .NET Framework 2.0

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

Microsoft Office 2003 Primary Interop Assemblies

Microsoft Office Standard Edition 2003

Microsoft User-Mode Driver Framework Feature Pack 1.7

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual Studio 2005 Tools for Office Runtime

Microsoft WinUsb 1.0

Mozilla Firefox (3.6.23)

MSXML 4.0 SP2 Parser and SDK

MSXML 6.0 Parser

My Sirius Studio

Novacomd

NVIDIA Drivers

Overland

PDF Settings CS4

Pdf995 (installed by H&R Block)

PdfEdit995 (installed by H&R Block)

Performance Maximizer Incrediads.

PhotoGallery

Photoshop Camera Raw

Pixel Bender Toolkit

PrintScreen

ProductContext

QFolder

QuickBooks Premier: Contractor Edition 2009

QuickTime

Readme

Safari

Scan

SigmaTel Audio

Sirius Device Recovery

SkinsHP1

Sonic Encoders

Suite Shared Configuration CS4

SupportSoft Assisted Service

TrayApp

Unload

Update Rollup 2 for Windows XP Media Center Edition 2005

USB Driver

VC 9.0 Runtime

Visual Studio 2005 Tools for Office Second Edition Runtime

VLC media player 1.1.5

WebFldrs XP

WebReg

Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)

Windows Genuine Advantage Validation Tool (KB892130)

Windows Installer Clean Up

Windows Media Format 11 runtime

Windows Media Player 11

Windows PowerShell 1.0

Windows XP Media Center Edition 2005 KB925766

Windows XP Service Pack 3

WinRAR archiver

WinZip 14.5

ZoneAlarm

.

==== Event Viewer Messages From Past Week ========

.

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At93.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At45.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At282.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At234.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At233.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At21.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At189.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At165.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At141.job command failed to start due to the following error: %%2147942402

1/2/2012 8:30:00 PM, error: Schedule [7901] - The At117.job command failed to start due to the following error: %%2147942402

1/2/2012 8:10:16 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

1/2/2012 8:09:32 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).

1/1/2012 9:49:46 AM, error: Service Control Manager [7023] - The Remote Desktop Services service terminated with the following error: The specified module could not be found.

1/1/2012 10:58:57 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

1/1/2012 10:55:45 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: avgio avipbb Fips intelppm ssmdrv

1/1/2012 10:55:16 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At83.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At35.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At262.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At217.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At209.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At179.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At155.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At131.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At11.job command failed to start due to the following error: %%2147942402

1/1/2012 10:30:00 AM, error: Schedule [7901] - The At107.job command failed to start due to the following error: %%2147942402

.

==== End Of File ===========================

[Maurice Naggar]

Save and close any work documents, close any apps that you started.

Download the Microsoft® Windows® Malicious Software Removal Tool from the Microsoft Download Center

http://www.microsoft...&displaylang=en

It is suggested that you rename mrt.exe to some other name, such as Omega.exe, then run it.

After a run of MSRT has finished, you will find the log at C:\WINDOWS\Debug\mrt.log or C:\WINNT\Debug\mrt.log

The file may be opened and viewed with Notepad or similar text editor.

If and only if your system is Windows 7 x64, Vista x64, Windows XP x64 and Windows 2008/2003 x64 computers.

Get Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

http://www.microsoft...&displaylang=en

Additional information Microsoft® Windows® Malicious Software Removal Tool is here http://support.micro...om/?kbid=890830

If no infections were found, you will see in your log

Results Summary:

----------------

No infection found.

Start your MBAM MalwareBytes' Anti-Malware.

Click the Settings Tab and then the General Settings sub-tab. Make sure all option lines have a checkmark.

Then click the Scanner settings sub-tab in second row of tabs. Make sure all option lines have a checkmark.

Next, Click the Update tab. Press the "Check for Updates" button.

If prompted for a Restart, do that.

When done, click the Scanner tab.

Do a FULL Scan.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Copy & Paste the contents of last scan log into reply.

If we do not hear back from you in 3 days, this thread will be closed.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!