Still got something on laptop

gdsimms · August 21, 2012

You guys have helped me a few times in the last week with this laptop and it has helped greatly. But I have noticed that there are still a few problems. The computer now will not restart or shutdown and also I did a windows update and needed 68 updates only 40 or so updated and the rest failed. As for the restart, I can't do it from the alt+ctrl+del screen either. It won't even log off. Thanks in advance for the help.

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_33

Run by A93B at 10:13:41 on 2012-08-21

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2002.779 [GMT -4:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

FW: PC Tools Firewall Plus *Enabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

C:\WINDOWS\system32\CmgShieldSvc.exe

C:\WINDOWS\system32\EMSService.exe

svchost.exe

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\WINDOWS\system32\svchost.exe -k netsvcs

svchost.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\WINDOWS\system32\agrsmsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

C:\Program Files\Juniper Networks\Common Files\dsNcService.exe

C:\WINDOWS\system32\svchost.exe -k hpdevmgmt

C:\WINDOWS\system32\svchost.exe -k HPService

C:\WINDOWS\system32\inetsrv\inetinfo.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\WINDOWS\system32\o2flash.exe

C:\Program Files\PC Tools Firewall Plus\FWService.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\Documents and Settings\All Users\Application Data\Rpcnet\Bin\rpcld.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\mqsvc.exe

C:\WINDOWS\SYSTEM32\WISPTIS.EXE

C:\WINDOWS\system32\mqtgsvc.exe

C:\WINDOWS\System32\tabbtnu.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\TCServer.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\TabTip.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\VM331_STI.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe

C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe

C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe

C:\Program Files\Fujitsu\fjdvrupd\fjdvrupd.exe

C:\WINDOWS\System32\CMGShieldUI.exe

C:\WINDOWS\system32\EmsServiceHelper.exe

C:\Program Files\Fujitsu\Utils\FjDspMon.exe

C:\Program Files\Fujitsu\Utils\fjevents.exe

C:\Program Files\Fujitsu\Utils\FjMenu.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\igfxext.exe

C:\Program Files\Fujitsu\Utils\FjLidMon.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\Citrix\ICA Client\concentr.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe

C:\Program Files\Citrix\ICA Client\wfcrun32.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\BOINC\boincmgr.exe

C:\Program Files\BOINC\boinctray.exe

C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\BOINC\boinc.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\iTunes\iTunes.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe

C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe

C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://search.bearshare.com

uInternet Settings,ProxyOverride = *.local

BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll

EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll

uRun: [EasyLinkAdvisor] "c:\program files\linksys easylink advisor\LinksysAgent.exe" /startup

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [<NO NAME>]

mRun: [TabletWizard] c:\windows\help\SplshWrp.exe

mRun: [TabletTip] "c:\program files\common files\microsoft shared\ink\tabtip.exe" /resume

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [331BigDog] c:\windows\VM331_STI.EXE

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [soundMan] SOUNDMAN.EXE

mRun: [AlcWzrd] ALCWZRD.EXE

mRun: [LoadFUJ02E3] c:\program files\fujitsu\fuj02e3\FUJ02E3.exe

mRun: [FjStrtAp] c:\program files\fujitsu\utils\FjStrtAp.exe

mRun: [indicatorUtility] c:\program files\fujitsu\fujitsu hotkey utility\IndicatorUty.exe

mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"

mRun: [sSUtility] c:\program files\fujitsu\ssutility\FJSSDMN.exe

mRun: [FJUPDNV_Chitose] c:\program files\fujitsu\fjdvrupd\fjdvrupd.exe

mRun: [CmgShieldUI] c:\windows\system32\CMGShieldUI.exe

mRun: [EmsService] EmsServiceHelper.exe

mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [ConnectionCenter] "c:\program files\citrix\ica client\concentr.exe" /startup

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [MsmqIntCert] regsvr32 /s mqrt.dll

mRun: [00PCTFW] "c:\program files\pc tools firewall plus\FirewallGUI.exe" -s

mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [boincmgr] "c:\program files\boinc\boincmgr.exe" /a /s

mRun: [boinctray] "c:\program files\boinc\boinctray.exe"

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe

IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office12\EXCEL.EXE/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office12\REFIEBAR.DLL

IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll

DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} - hxxps://lowes.2020.net/planner/Core/Player/2020PlayerAX_Win32.cab

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1345551028786

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1345551009208

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab

TCP: DhcpNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{2EFF1657-DC8B-499A-8837-A448F1BA3633} : DhcpNameServer = 75.75.75.75 75.75.76.76

Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - c:\program files\citrix\ica client\IcaMimeFilter.dll

Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL

Notify: igfxcui - igfxdev.dll

Notify: loginkey - c:\program files\common files\microsoft shared\ink\loginkey.dll

Notify: TabBtnWL - TabBtnWL.dll

Notify: tpgwlnotify - tpgwlnot.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\a93b\application data\mozilla\firefox\profiles\pv8enezb.default\

FF - prefs.js: browser.search.selectedEngine - Search Results

FF - prefs.js: browser.startup.homepage - www.google.com

FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=20&systemid=2&sr=0&q=

FF - prefs.js: network.proxy.type - 0

FF - plugin: c:\documents and settings\a93b\application data\mozilla\firefox\profiles\pv8enezb.default\extensions\2020player_web@2020technologies.com\plugins\NP_2020Player_WEB.dll

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\google\update\1.3.21.115\npGoogleUpdate3.dll

FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll

FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npicaN.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_271.dll

FF - plugin: c:\windows\system32\npdeployJava1.dll

FF - plugin: c:\windows\system32\npptools.dll

.

============= SERVICES / DRIVERS ===============

.

R0 CmgShieldCEF;CmgShieldCEF;c:\windows\system32\drivers\CMGShCEF.sys [2008-4-29 195128]

R0 CMGShieldReg;CMGShieldReg;c:\windows\system32\drivers\CmgShREG.sys [2008-4-29 89656]

R0 FBIOSDRV;FBIOSDRV;c:\windows\system32\drivers\FBIOSDRV.SYS [2008-7-24 8960]

R0 FJGSDisk;G-Sensor Application Filter Driver;c:\windows\system32\drivers\FJGSDisk.sys [2008-7-24 7168]

R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2012-3-20 171064]

R0 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [2008-7-24 36640]

R0 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [2008-7-24 35456]

R1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\drivers\ctxusbm.sys [2011-4-25 65584]

R1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [2012-8-8 251560]

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]

R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]

R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-11 116608]

R2 CMGShield;CMGShield;c:\windows\system32\CmgShieldSvc.exe [2008-4-29 1103152]

R2 EMS;EMS;c:\windows\system32\EmsService.exe [2008-4-29 644400]

R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\system32\drivers\PCTAppEvent.sys [2012-8-8 160576]

R2 PCToolsFirewallPlus;PC Tools Firewall Plus;c:\program files\pc tools firewall plus\FWService.exe [2012-8-8 286000]

R2 rpcld;Remote Procedure Call (RPC) LD;c:\documents and settings\all users\application data\rpcnet\bin\rpcld.exe --> c:\documents and settings\all users\application data\rpcnet\bin\rpcld.exe [?]

R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [2008-7-24 475136]

R3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y5132.sys [2008-7-24 244368]

R3 Fjbtndrv;Fujitsu Button Driver;c:\windows\system32\drivers\FjBtnDrv.sys [2008-7-24 18944]

R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\drivers\fuj02e3.sys [2008-7-24 4864]

R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2008-7-24 41216]

R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [2008-7-24 116224]

R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver;c:\windows\system32\drivers\pctNdis-PacketFilter.sys [2012-8-8 89472]

R3 pctNdisMP;PC Tools Driver;c:\windows\system32\drivers\pctNdis.sys [2012-8-8 57536]

R3 pctplfw;pctplfw;c:\windows\system32\drivers\pctplfw.sys [2012-8-8 125248]

R3 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\drivers\wacompen.sys [2008-7-24 14208]

S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-8-20 116648]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-12 250056]

S3 ADVNTDRV;ADVNTDRV;c:\windows\system32\drivers\ADVNTDRV.SYS [1999-11-18 3872]

S3 CmgShieldNP;CmgShieldNP;c:\windows\system32\CmgShieldNP.dll [2008-4-29 156976]

S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2011-6-2 11336]

S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-8-20 116648]

S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-5-3 113120]

S3 pctNdis;PC Tools Firewall Intermediate Filter Service;c:\windows\system32\drivers\pctNdis.sys [2012-8-8 57536]

S3 vm331avs;VC0331 USB2.0 Digital Camera;c:\windows\system32\drivers\vm331avs.sys [2008-7-24 972544]

S3 vsdatant;vsdatant;\??\c:\windows\system32\vsdatant.sys --> c:\windows\system32\vsdatant.sys [?]

S3 vvftav323;vvftav323;c:\windows\system32\drivers\vvftav323.sys [2007-3-19 475136]

.

=============== Created Last 30 ================

.

2012-08-21 13:46:12 -------- d-----w- C:\ce13e9c11a4c40dd02fff26e488226

2012-08-21 13:23:30 -------- d-----w- C:\65567c9e3f3bf903b69b81fab48a

2012-08-21 13:16:39 -------- d-----w- c:\documents and settings\a93b\local settings\application data\PCHealth

2012-08-21 12:46:54 -------- d-----w- C:\c6b9be09872981f47029ac577fa957

2012-08-21 12:10:55 15384 ----a-w- c:\windows\system32\wuapi.dll.mui

2012-08-20 11:55:10 6891424 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cf793c21-0607-4bc2-9df0-6971b14f91ac}\mpengine.dll

2012-08-19 06:11:15 6891424 ------w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll

2012-08-15 12:11:48 334008 ----a-r- c:\documents and settings\a93b\application data\microsoft\installer\{3885be54-851b-4662-89f9-eb9f0dccb14e}\BOINCMGRLink_B65C4A4D2B2A46CCA2D918164C6297B8.exe

2012-08-15 12:11:48 334008 ----a-r- c:\documents and settings\a93b\application data\microsoft\installer\{3885be54-851b-4662-89f9-eb9f0dccb14e}\ARPPRODUCTICON.exe

2012-08-15 11:53:43 129536 ----a-w- c:\windows\system32\igfxtray.exe

2012-08-15 11:53:42 121344 ----a-w- c:\windows\system32\gfxSrvc.dll

2012-08-15 11:53:41 4096 ----a-w- c:\windows\system32\IGFXDEVLib.dll

2012-08-15 11:53:41 3140608 ----a-w- c:\windows\system32\GfxUI.exe

2012-08-15 11:53:40 86528 ----a-w- c:\windows\system32\igfxresn.lrc

2012-08-15 11:53:40 81920 ----a-w- c:\windows\system32\igfxCoIn_v5402.dll

2012-08-15 11:52:47 -------- d-----w- C:\Intel

2012-08-15 11:48:25 -------- d-----w- c:\program files\SystemRequirementsLab

2012-08-14 21:33:16 -------- d-----w- c:\program files\common files\Blizzard Entertainment

2012-08-14 21:33:16 -------- d-----w- c:\documents and settings\all users\application data\Blizzard Entertainment

2012-08-14 21:11:10 -------- d-----w- c:\documents and settings\all users\application data\Battle.net

2012-08-08 17:33:20 -------- d-----w- c:\program files\CCleaner

2012-08-08 17:29:42 237072 ------w- c:\windows\system32\MpSigStub.exe

2012-08-08 17:26:48 -------- d-----w- c:\program files\Microsoft Security Client

2012-08-08 17:17:43 -------- d-----w- c:\documents and settings\a93b\application data\PCToolsFirewallPlus

2012-08-08 17:17:29 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys

2012-08-08 17:17:29 160576 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys

2012-08-08 17:17:27 251560 ----a-w- c:\windows\system32\drivers\pctgntdi.sys

2012-08-08 17:16:44 89472 ----a-w- c:\windows\system32\drivers\pctNdis-PacketFilter.sys

2012-08-08 17:16:44 57536 ----a-w- c:\windows\system32\drivers\pctNdis.sys

2012-08-08 17:16:44 32808 ----a-w- c:\windows\system32\drivers\pctNdis-DNS.sys

2012-08-08 17:16:44 -------- d-----w- c:\program files\common files\PC Tools

2012-08-08 17:16:38 125248 ----a-w- c:\windows\system32\drivers\pctplfw.sys

2012-08-08 17:16:35 -------- d-----w- c:\program files\PC Tools Firewall Plus

2012-08-08 14:58:00 -------- d-sha-r- C:\cmdcons

2012-08-08 12:42:34 -------- d-----w- c:\windows\Performance

2012-08-08 12:41:50 -------- d-----w- c:\documents and settings\a93b\local settings\application data\Microsoft Corporation

2012-08-08 12:38:53 -------- d-----w- c:\program files\Microsoft Windows 7 Upgrade Advisor

2012-08-08 12:06:18 -------- d-----w- c:\windows\IIS Temporary Compressed Files

2012-08-08 12:02:34 9216 ----a-w- c:\windows\system32\dllcache\wamps51.dll

2012-08-08 12:01:25 -------- d-----w- c:\windows\system32\msmq

2012-08-08 12:01:24 -------- d-----w- C:\Inetpub

2012-08-08 11:42:08 -------- d-----w- c:\program files\Spybot - Search & Destroy

2012-08-08 11:42:08 -------- d-----w- c:\documents and settings\all users\application data\Spybot - Search & Destroy

2012-08-08 11:39:28 -------- d-----w- c:\documents and settings\a93b\application data\SUPERAntiSpyware.com

2012-08-08 11:38:53 -------- d-----w- c:\program files\SUPERAntiSpyware

2012-08-08 11:38:53 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com

2012-08-04 17:34:48 -------- d-----w- c:\documents and settings\a93b\.explorer.local

2012-08-04 17:34:48 -------- d-----w- c:\documents and settings\a93b\.explorer.cache

2012-08-03 11:40:25 73728 ----a-w- c:\windows\system32\javacpl.cpl

2012-08-03 11:40:25 476976 ----a-w- c:\windows\system32\npdeployJava1.dll

2012-07-31 00:52:46 -------- d-----w- c:\program files\AVAST Software

2012-07-31 00:52:46 -------- d-----w- c:\documents and settings\all users\application data\AVAST Software

2012-07-27 20:51:30 184248 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll

2012-07-27 20:51:30 184248 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll

.

==================== Find3M ====================

.

2012-08-15 01:50:21 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-08-15 01:50:21 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-08-03 11:40:02 472880 ----a-w- c:\windows\system32\deployJava1.dll

2012-07-03 17:46:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-06-04 21:35:26 222448 ----a-w- c:\windows\system32\muweb.dll

2012-06-02 19:19:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui

2012-06-02 19:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl

2012-06-02 19:19:38 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui

2012-06-02 19:19:30 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui

.

============= FINISH: 10:21:14.84 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume2

Install Date: 11/19/2009 12:42:26 PM

System Uptime: 8/21/2012 10:02:55 AM (0 hours ago)

.

Motherboard: FUJITSU | | FJNB1F7

Processor: Intel Pentium III Xeon processor | Onboard | 2238/266mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 60 GiB total, 3.394 GiB free.

D: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}

Description: VC0331 USB2.0 Digital Camera

Device ID: USB\VID_0AC8&PID_1101&MI_00\6&1D0E1D0E&0&0000

Manufacturer: Vimicro

Name: USB Video Device #2

PNP Device ID: USB\VID_0AC8&PID_1101&MI_00\6&1D0E1D0E&0&0000

Service: vm331avs

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: Officejet Pro 8500 A909g

Device ID: ROOT\MULTIFUNCTION\0000

Manufacturer: HP

Name: Officejet Pro 8500 A909g

PNP Device ID: ROOT\MULTIFUNCTION\0000

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet 4000 Series

Device ID: ROOT\MULTIFUNCTION\0001

Manufacturer: Hewlett-Packard

Name: HP LaserJet 4000 Series

PNP Device ID: ROOT\MULTIFUNCTION\0001

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet 4100 Series

Device ID: ROOT\MULTIFUNCTION\0002

Manufacturer: Hewlett-Packard

Name: HP LaserJet 4100 Series

PNP Device ID: ROOT\MULTIFUNCTION\0002

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet Professional P1606dn

Device ID: ROOT\MULTIFUNCTION\0003

Manufacturer: Hewlett-Packard

Name: HP LaserJet Professional P1606dn

PNP Device ID: ROOT\MULTIFUNCTION\0003

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet P3010 Series

Device ID: ROOT\MULTIFUNCTION\0004

Manufacturer: Hewlett-Packard

Name: HP LaserJet P3010 Series

PNP Device ID: ROOT\MULTIFUNCTION\0004

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: hp LaserJet 2420

Device ID: ROOT\MULTIFUNCTION\0005

Manufacturer: Hewlett-Packard

Name: hp LaserJet 2420

PNP Device ID: ROOT\MULTIFUNCTION\0005

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: hp LaserJet 2420

Device ID: ROOT\MULTIFUNCTION\0006

Manufacturer: Hewlett-Packard

Name: hp LaserJet 2420

PNP Device ID: ROOT\MULTIFUNCTION\0006

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP Color LaserJet CP2025dn

Device ID: ROOT\MULTIFUNCTION\0007

Manufacturer: Hewlett-Packard

Name: HP Color LaserJet CP2025dn

PNP Device ID: ROOT\MULTIFUNCTION\0007

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: hp LaserJet 4200

Device ID: ROOT\MULTIFUNCTION\0008

Manufacturer: Hewlett-Packard

Name: hp LaserJet 4200

PNP Device ID: ROOT\MULTIFUNCTION\0008

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP Color LaserJet 2600n

Device ID: ROOT\MULTIFUNCTION\0009

Manufacturer: Hewlett-Packard

Name: HP Color LaserJet 2600n

PNP Device ID: ROOT\MULTIFUNCTION\0009

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet M1536dnf MFP

Device ID: ROOT\MULTIFUNCTION\0010

Manufacturer: Hewlett-Packard

Name: HP LaserJet M1536dnf MFP

PNP Device ID: ROOT\MULTIFUNCTION\0010

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP Color LaserJet CP1518ni

Device ID: ROOT\MULTIFUNCTION\0011

Manufacturer: Hewlett-Packard

Name: HP Color LaserJet CP1518ni

PNP Device ID: ROOT\MULTIFUNCTION\0011

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet P3010 Series

Device ID: ROOT\MULTIFUNCTION\0012

Manufacturer: Hewlett-Packard

Name: HP LaserJet P3010 Series

PNP Device ID: ROOT\MULTIFUNCTION\0012

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: HP LaserJet P3005

Device ID: ROOT\MULTIFUNCTION\0013

Manufacturer: Hewlett-Packard

Name: HP LaserJet P3005

PNP Device ID: ROOT\MULTIFUNCTION\0013

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: hp LaserJet 2430

Device ID: ROOT\MULTIFUNCTION\0014

Manufacturer: Hewlett-Packard

Name: hp LaserJet 2430

PNP Device ID: ROOT\MULTIFUNCTION\0014

Service:

.

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}

Description: hp LaserJet 4250

Device ID: ROOT\MULTIFUNCTION\0015

Manufacturer: Hewlett-Packard

Name: hp LaserJet 4250

PNP Device ID: ROOT\MULTIFUNCTION\0015

Service:

.

==== System Restore Points ===================

.

RP1: 8/8/2012 12:31:10 PM - System Checkpoint

RP2: 8/8/2012 12:50:40 PM - Should be virus free

RP3: 8/8/2012 1:10:34 PM - avast! Free Antivirus Setup

RP4: 8/8/2012 1:12:27 PM - Removed Symantec Endpoint Protection.

RP5: 8/8/2012 1:29:41 PM - Software Distribution Service 3.0

RP6: 8/9/2012 1:50:23 PM - Software Distribution Service 3.0

RP7: 8/10/2012 1:50:50 PM - Software Distribution Service 3.0

RP8: 8/11/2012 1:50:39 PM - Software Distribution Service 3.0

RP9: 8/12/2012 1:32:28 AM - Software Distribution Service 3.0

RP10: 8/13/2012 1:44:01 AM - System Checkpoint

RP11: 8/13/2012 1:50:49 PM - Software Distribution Service 3.0

RP12: 8/14/2012 1:50:59 PM - Software Distribution Service 3.0

RP13: 8/15/2012 8:10:35 AM - Removed BOINC.

RP14: 8/15/2012 8:11:43 AM - Installed BOINC.

RP15: 8/16/2012 8:11:51 AM - System Checkpoint

RP16: 8/17/2012 8:17:51 AM - Software Distribution Service 3.0

RP17: 8/18/2012 9:19:13 AM - System Checkpoint

RP18: 8/19/2012 2:11:09 AM - Software Distribution Service 3.0

RP19: 8/20/2012 3:16:43 AM - System Checkpoint

RP20: 8/20/2012 7:55:05 AM - Software Distribution Service 3.0

RP21: 8/21/2012 8:21:09 AM - Software Distribution Service 3.0

RP22: 8/21/2012 9:22:24 AM - Software Distribution Service 3.0

RP23: 8/21/2012 9:46:23 AM - Installed %1 %2.

RP24: 8/21/2012 10:15:09 AM - Software Distribution Service 3.0

.

==== Installed Programs ======================

.

µTorrent

32 Bit HP CIO Components Installer

6500_E709_eDocs

6500_E709_Help

6500_E709n

Acrobat.com

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.4)

Adobe Shockwave Player 11.5

Agere Systems HDA Modem

Apple Application Support

Apple Mobile Device Support

Apple Software Update

BOINC

Bonjour

bpd_scan

BPDSoftware

BPDSoftware_Ini

BufferChm

Canon iP90

CCleaner

Citrix online plug-in - web

Citrix online plug-in (DV)

Citrix online plug-in (HDX)

Citrix online plug-in (USB)

Citrix online plug-in (Web)

CMG Windows Shield

CrystalReportVS2003Setup

CutePDF Writer 2.8

Destinations

DeviceDiscovery

Diablo III

DNE Update

DocMgr

DocProc

Drivers Install For Linksys Easylink Advisor

EncryptionByCredant

Fax

File Type Assistant

Free File Viewer 2011

FrostWire 5.2.11

Fujitsu Button Utilities

Fujitsu Driver Update

Fujitsu Hotkey Utility

Fujitsu System Extension Utility

Google Earth

Google Update Helper

GPBaseService2

Hewlett-Packard ACLM.NET v1.1.0.0

High Definition Audio Driver Package - KB888111

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows Media Player 11 (KB939683)

Hotfix for Windows XP (KB2158563)

Hotfix for Windows XP (KB2443685)

Hotfix for Windows XP (KB2570791)

Hotfix for Windows XP (KB2633952)

Hotfix for Windows XP (KB915800-v4)

Hotfix for Windows XP (KB951126)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB970653-v3)

Hotfix for Windows XP (KB979306)

HP Customer Participation Program 14.0

HP Document Manager 2.0

HP Imaging Device Functions 14.0

HP Officejet 6500 E709 Series

HP Product Detection

HP Smart Web Printing 4.60

HP Solution Center 14.0

HP Update

HPDiagnosticAlert

HPProductAssistant

Intel® Graphics Media Accelerator Driver

Intel® Network Connections Drivers

iTunes

Java Auto Updater

Java 6 Update 33

Juniper Networks Network Connect 6.0.0

Juniper Networks Network Connect 6.5.0

Juniper Networks Setup Client

Juniper Networks Setup Client Activex Control

Linksys EasyLink Advisor 1.6 (0044)

LiveUpdate 3.3 (Symantec Corporation)

LiveUSB Creator (remove only)

Malwarebytes Anti-Malware version 1.62.0.1300

MarketResearch

Microsoft .NET Framework 1.0 Hotfix (KB2572066)

Microsoft .NET Framework 1.0 Hotfix (KB2604042)

Microsoft .NET Framework 1.0 Hotfix (KB2656378)

Microsoft .NET Framework 1.0 Hotfix (KB953295)

Microsoft .NET Framework 1.0 Hotfix (KB979904)

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB2572067)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Application Error Reporting

Microsoft Base Smart Card Cryptographic Service Provider Package

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (English) 2007

Microsoft Office Access Setup Metadata MUI (English) 2007

Microsoft Office Excel MUI (English) 2007

Microsoft Office File Validation Add-In

Microsoft Office InfoPath MUI (English) 2007

Microsoft Office Outlook MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office Professional Plus 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Word MUI (English) 2007

Microsoft Report Viewer Redistributable 2005

Microsoft Security Client

Microsoft Security Essentials

Microsoft Silverlight

Microsoft Software Update for Web Folders (English) 12

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft XML Parser

MobileMe Control Panel

Mozilla Firefox 14.0.1 (x86 en-US)

Mozilla Maintenance Service

MSXML 4.0 SP2 (KB936181)

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 6.0 Parser (KB933579)

Network

O2Micro Flash Memory Card Windows Driver

OCR Software by I.R.I.S. 14.0

PC Tools Firewall Plus 7.0

Pocket Tanks v1.3

PowerDVD

Premium Quote

ProductContext

QuickTime

Realtek High Definition Audio Driver

Roxio Central Audio

Roxio Central Copy

Roxio Central Core

Roxio Central Data

Roxio Central Tools

Roxio Creator LJ

Scan

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition

Security Update for Microsoft Windows (KB2564958)

Security Update for Windows Internet Explorer 8 (KB2360131)

Security Update for Windows Internet Explorer 8 (KB2416400)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB2544521)

Security Update for Windows Internet Explorer 8 (KB2586448)

Security Update for Windows Internet Explorer 8 (KB971961)

Security Update for Windows Internet Explorer 8 (KB981332)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB968816)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows Media Player 10 (KB936782)

Security Update for Windows Media Player 11 (KB954154)

Security Update for Windows Search 4 - KB963093

Security Update for Windows XP (KB2079403)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2121546)

Security Update for Windows XP (KB2124261)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2259922)

Security Update for Windows XP (KB2279986)

Security Update for Windows XP (KB2286198)

Security Update for Windows XP (KB2290570)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2296199)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2412687)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2436673)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479943)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2491683)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2507618)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508272)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2562937)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2567053)

Security Update for Windows XP (KB2567680)

Security Update for Windows XP (KB2570222)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2584146)

Security Update for Windows XP (KB2585542)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB2598479)

Security Update for Windows XP (KB2603381)

Security Update for Windows XP (KB2618451)

Security Update for Windows XP (KB2619339)

Security Update for Windows XP (KB2620712)

Security Update for Windows XP (KB2624667)

Security Update for Windows XP (KB2631813)

Security Update for Windows XP (KB2646524)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB2659262)

Security Update for Windows XP (KB2660649)

Security Update for Windows XP (KB2676562)

Security Update for Windows XP (KB2686509)

Security Update for Windows XP (KB2695962)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923689)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB938464)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951066)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951698)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB953155)

Security Update for Windows XP (KB954211)

Security Update for Windows XP (KB954459)

Security Update for Windows XP (KB954600)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956391)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956841)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB957095)

Security Update for Windows XP (KB957097)

Security Update for Windows XP (KB958215)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958687)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960714)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961371-v2)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB969947)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB970483)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971486)

Security Update for Windows XP (KB971557)

Security Update for Windows XP (KB971633)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB971961)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973354)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973525)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974455)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977165-v2)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978251)

Security Update for Windows XP (KB978262)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB980436)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981349)

Security Update for Windows XP (KB981852)

Security Update for Windows XP (KB981957)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982214)

Security Update for Windows XP (KB982665)

Shock Sensor Utility

SmartQuote

SmartWebPrinting

SNG Prerequisites

SolutionCenter

Status

SUPERAntiSpyware

Synaptics Pointing Device Driver

System Requirements Lab for Intel

Tablet PC Tutorials for Microsoft Windows XP SP2

Toolbox

Topaz e-Signatures SigPlus 3.95

TrayApp

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft Windows (KB971513)

Update for Outlook 2007 Junk Email Filter (KB2596560)

Update for Windows Internet Explorer 8 (KB976662)

Update for Windows Internet Explorer 8 (KB980182)

Update for Windows Internet Explorer 8 (KB980302)

Update for Windows XP (KB2141007)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2467659)

Update for Windows XP (KB2541763)

Update for Windows XP (KB2641690)

Update for Windows XP (KB898461)

Update for Windows XP (KB942763)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB955839)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

Update for Windows XP (KB976749)

Update for Windows XP (KB980182)

USB2.0 Digital Camera

WebFldrs XP

WebReg

Windows 7 Upgrade Advisor

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 8

Windows Live ID Sign-in Assistant

Windows Media Format 11 runtime

Windows Media Player 10 Hotfix [see KB887626 for more information]

Windows Media Player 11

Windows PowerShell 1.0

Windows Search 4.0

Windows XP Service Pack 3

WinZip

WorkSiteProUpdate

Yahoo! Detect

.

==== Event Viewer Messages From Past Week ========

.

8/21/2012 9:39:18 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x800706be: Security Update for Microsoft .NET Framework 3.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2656407).

8/21/2012 9:22:47 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.131.2371.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8601.0 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

8/21/2012 9:22:47 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.131.2371.0 Update Source: Microsoft Update Server Update Stage: Download Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8601.0 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

8/21/2012 8:36:48 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2656370).

8/21/2012 8:25:28 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2656353).

8/17/2012 9:45:13 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service MDM with arguments "" in order to run the server: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

8/17/2012 7:10:31 AM, error: Service Control Manager [7034] - The Remote Procedure Call (RPC) LD service terminated unexpectedly. It has done this 1 time(s).

8/16/2012 8:16:58 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.131.2038.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8601.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

8/16/2012 8:16:56 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.131.2038.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8601.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

.

==== End Of File ===========================

Edited August 21, 2012 by Maurice Naggar
Logs In-line

Maurice Naggar · August 21, 2012

Hello gdsimms.

Is "this system" the same one or different from the one in your other thread http://forums.malwarebytes.org/index.php?showtopic=113997 ????

gdsimms · August 21, 2012

different. that one is my wives laptop. this is mine

Maurice Naggar · August 21, 2012

OR, is "this" the same system as this ---> http://forums.malwarebytes.org/index.php?showtopic=114263

gdsimms · August 21, 2012

yup. that one

Maurice Naggar · August 21, 2012

Download >> Farbar's Service Scanner utility << and Save to your Desktop.

If using Windows 7 or Vista, Right-Click on fss.exe and select Run As Admisnitrator.

If using XP, double-click to start.

Answer Yes to ok when prompted.

If your firewall then puts out a prompt, again, allow it to run.

Once FSS is on-screen, be sure the following items are checkmarked:

Internet Services
Windows Firewall
System Restore
Security Center/Action Center
Windows Update
Windows Defender

Click on "Scan".

It will create a log (FSS.txt) in the same directory the tool is run.

Copy & Paste contents of FSS.txt into your reply.

gdsimms · August 21, 2012

Its also the same one from this http://forums.malwarebytes.org/index.php?showtopic=113848&st=0&p=582231entry582231

Maurice Naggar · August 21, 2012

Please do NOT attach logs, going forward. Always Copy & Paste into main body of reply box.

Get & do the FSS utility. and have patience 'till I get back to you.

gdsimms · August 21, 2012

Great. Thanks so much and here is the results

Farbar Service Scanner Version: 06-08-2012

Ran by A93B (administrator) on 21-08-2012 at 11:06:35

Running from "C:\Documents and Settings\A93B\My Documents\Downloads"

Microsoft Windows XP Professional Service Pack 3 (X86)

Boot Mode: Normal

****************************************************************

Internet Services:

============

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Yahoo IP is accessible.

Yahoo.com is accessible.

Windows Firewall:

=============

Firewall Disabled Policy:

==================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall"=DWORD:0

System Restore:

============

System Restore Disabled Policy:

========================

Security Center:

============

Windows Update:

============

Windows Autoupdate Disabled Policy:

============================

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]

"NoAutoUpdate"=DWORD:1

File Check:

========

C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit

C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit

C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit

C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit

C:\WINDOWS\system32\netman.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\srsvc.dll => MD5 is legit

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit

C:\WINDOWS\system32\wscsvc.dll => MD5 is legit

C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit

C:\WINDOWS\system32\wuauserv.dll => MD5 is legit

C:\WINDOWS\system32\qmgr.dll => MD5 is legit

C:\WINDOWS\system32\es.dll => MD5 is legit

C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit

C:\WINDOWS\system32\svchost.exe => MD5 is legit

C:\WINDOWS\system32\rpcss.dll => MD5 is legit

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:

=======

DNE(10) Gpc(6) IPSec(4) NetBT(5) pctgntdi(13) pctNdisMP(12) PSched(7) Tcpip(3)

0x0B000000040000000100000002000000030000000D000000050000000600000007000000090000000A0000000C000000

IpSec Tag value is correct.

**** End of log ****

Maurice Naggar · August 21, 2012

Step 1

1. Go >> Here << and download ERUNT

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts

(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start ERUNT

(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup

(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked

6. Press OK

7. Press YES to create the folder.

Step 2

Set Windows to show all files and all folders.

On your Desktop, double click My Computer, from the menu options, select tools, then Folder Options, and then select VIEW Tab and look at all of settings listed.

"CHECK" (turn on) Display the contents of system folders.

Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.

Next, un-check Hide extensions for known file types.

Next un-check Hide protected operating system files.

Step 3

Close all open browsers at this point. Disable your antivirus program for the time being

Start Internet Explorer (fresh) by pressing Start (Vista Orb) >> Internet Explorer >> Right-Click and select Run As Administrator.

and go here and run an online scan with BitDefender

Click the Start Scanner now. Next a popup window will appear {make sure your browser is not blocking popups}.

Click the box to agree to the Terms and conditions, and click Start here.

You should see a message to load BitDefenders ActiveX control. Right-click the yellow bar and select Install.

Press the INSTALL button when prompted again.

When the ActiveX Control has loaded, click on "Start scan" and grab a coffee or favorite drink and take a long break.

When BitDefender completes the scan, select the "Detected Problems" tab. Click on "Click here to export scan". Save the file as an HTML to your Desktop.

Then click on the saved file and allow it to open with your browser. Go to Edit > Select All then copy the log and paste it back here.

Now, re-enable your antivirus program.

Step 4

Let's have you use NOTEPAD & do some research in the Windows Update log (using Notepad)

usually at C:\Windows\Windowsupdate.log or C:\WINNT\Windowsupdate.log

Copy and Paste here the last 70 lines out of that log, for review.

Go to near end of the log for latest entries and look for error notations.

You can use CTRL+END keyboard keys to get to the end of the file. Then get the last 70 lines & copy & paste here, in reply

See Microsoft KnowledgeBase article

KB 902093 How to read the Windowsupdate.log file

http://support.microsoft.com/kb/902093

Edited August 21, 2012 by Maurice Naggar

Maurice Naggar · August 21, 2012

Hold on a minute :excl:

Your logs showed some peer-to-peer filesharing apps: µTorrent The use of P-2-P programs since such filesharing/downloading from unknown sources is one of the leading causes of transmission of malware.

Risks of File-Sharing Technology.

P2P file sharing: Know the risks

You must uninstall µTorrent & any other such peer-to-peer app before we continue :excl:

AND confirm having removed them.

gdsimms · August 21, 2012

uTorrent isn't on my programs list anymore. How can I remove it? Also I don't have internet explorer on my computer for the step 3 above

Maurice Naggar · August 21, 2012

Odd, because DDS shows uTorrent as an installed program !

To get to Internet Explorer, you should have a link from the Start menu.

(sorry I'd forgotten this is XP )

You can also start Internet Explrer by using Start >> RUN >> and typing in IEXPLORE.EXE

While I have your attention: You seem to have changed antivirus programs twice since you first posted with the older threads.

You used to have Symantec Endpoint Protection

then AVAST

and now MS Security Essentials

1) Do not make changes / adds/ tweaks to this system whilst I am helping you. Ask me first before changing or adding anything.

2) Changing antivirus apps is not advised during malware diagnosis.

3) Lots of antiirus apps do not do a full removal, but leave bits and pieces behind.

4) Did you buy PC Tools FW Plus ? yes/no

Does it have an antivirus component ?

Complete the Steps I outlined before, post the logs, and reply to my questions.

There is much much more to follow.

gdsimms · August 21, 2012

here is another dds that I just ran. If utorrent is still on there then I will need help removing it.

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_33

Run by A93B at 17:27:48 on 2012-08-21

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2002.839 [GMT -4:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

FW: PC Tools Firewall Plus *Enabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

C:\WINDOWS\system32\CmgShieldSvc.exe

C:\WINDOWS\system32\EMSService.exe

svchost.exe

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\WINDOWS\system32\svchost.exe -k netsvcs

svchost.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\WINDOWS\system32\agrsmsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Juniper Networks\Common Files\dsNcService.exe

C:\WINDOWS\system32\svchost.exe -k hpdevmgmt

C:\WINDOWS\system32\svchost.exe -k HPService

C:\WINDOWS\system32\inetsrv\inetinfo.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\WINDOWS\system32\o2flash.exe

C:\Program Files\PC Tools Firewall Plus\FWService.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\Documents and Settings\All Users\Application Data\Rpcnet\Bin\rpcld.exe

C:\WINDOWS\System32\snmp.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\SYSTEM32\WISPTIS.EXE

C:\WINDOWS\system32\mqsvc.exe

C:\WINDOWS\System32\tabbtnu.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\mqtgsvc.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\TCServer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\TabTip.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\VM331_STI.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe

C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe

C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe

C:\Program Files\Fujitsu\fjdvrupd\fjdvrupd.exe

C:\WINDOWS\System32\CMGShieldUI.exe

C:\Program Files\Fujitsu\Utils\FjDspMon.exe

C:\WINDOWS\system32\EmsServiceHelper.exe

C:\Program Files\Fujitsu\Utils\fjevents.exe

C:\Program Files\Fujitsu\Utils\FjMenu.exe

C:\WINDOWS\system32\igfxext.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\Program Files\Fujitsu\Utils\FjLidMon.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\Citrix\ICA Client\concentr.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe

C:\Program Files\Citrix\ICA Client\wfcrun32.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\BOINC\boincmgr.exe

C:\Program Files\BOINC\boinctray.exe

C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\BOINC\boinc.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\iTunes\iTunes.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe

C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe

C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://search.bearshare.com

uInternet Settings,ProxyOverride = *.local

BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll