Jump to content

HJT Log - Please review and give some help

staceystamps
 Share

Recommended Posts

staceystamps

staceystamps

Posted
Posted

Have had a nasty infection for about a week. Have followed the directions in the sticky here and had a lot of success thanks to Malwarebytes. However, I am still having some issues and the computer is not 100% yet, hoping to avoid a wipe/re-load if possible.

Current Symptoms

-Cannot set background wallpaper on the desktop - I can change color but will not display the picture except briefly when shutting down

-On start-up getting a few errors of programs that cannot load including:

*cli.exe - application error (failed to initialize properly 0xc000007b)

*lxdjamon.exe (" ")

-Does not automatically connect to my router via wireless connection

-Avant browser will no longer work, when I open it up it immediately gives me the "encountered serious error and needs to close" message

Anyway, here are my HJT logs and Malwarebytes logs:

Malwarebytes' Anti-Malware 1.34

Database version: 1794

Windows 5.1.2600 Service Pack 3

2/24/2009 8:12:36 PM

mbam-log-2009-02-24 (20-12-36).txt

Scan type: Quick Scan

Objects scanned: 81984

Time elapsed: 4 minute(s), 6 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 2

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

*****************************************

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 8:07:50 PM, on 2/24/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdjserv.exe

C:\WINDOWS\system32\lxdjcoms.exe

C:\Program Files\MioNet\MioNetManager.exe

C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

C:\WINDOWS\System32\snmp.exe

C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

C:\Program Files\MioNet\jvm\bin\MioNet.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\stsystra.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe

C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe

C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://*.thepiratebay.org

O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1...toUploader5.cab

O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Advanced) - http://mydish.olivegarden.com/admin/smsx.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Background Intelligent Transfer Service (BITS) - Unknown owner - C:\WINDOWS\

O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: lxdjCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdjserv.exe

O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe

O23 - Service: MioNet - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - C:\Program Files\WinClamAVShield\sp_clamsrv.exe

O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe

O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--

End of file - 9562 bytes

Link to post
Share on other sites
Tigger93

Tigger93

Posted
Posted

Hi. <_<

Download Lop S&D from here

  • Double-click Lop S&D.exe
  • Choose the language, then choose Option 1 (Search)
  • Wait till the scan completes
  • Post the log which is created: (%SystemDrive%\lopR.txt)

Also, please update and run Malwarebytes again (just a quick scan) and post the log. I will review these logs when they come in.

Link to post
Share on other sites
staceystamps

staceystamps

Posted
  • Author
Posted

Thanks here are the requested Logs:

Malwarebytes' Anti-Malware 1.34

Database version: 1801

Windows 5.1.2600 Service Pack 3

2/24/2009 11:32:40 PM

mbam-log-2009-02-24 (23-32-40).txt

Scan type: Quick Scan

Objects scanned: 82617

Time elapsed: 3 minute(s), 47 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 2

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

**************************************

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : Genuine Intel® CPU T2300 @ 1.66GHz )

BIOS : Phoenix ROM BIOS PLUS Version 1.10 A05

USER : Michael ( Administrator )

BOOT : Normal boot

C:\ (Local Disk) - NTFS - Total:65 Go (Free:13 Go)

D:\ (Local Disk) - NTFS - Total:21 Go (Free:5 Go)

E:\ (CD or DVD)

F:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

G:\ (CD or DVD)

H:\ (CD or DVD)

I:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

J:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

K:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

L:\ (USB) - FAT - Total:62 Mo (Free:0 Go)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )

Option : [1] ( Tue 02/24/2009|23:24 )

--------------------\\ Listing folders in APPLIC~1

[02/20/2009|12:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Apple Computer

[06/23/2006|01:30] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> ATI

[06/23/2006|01:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Google

[08/16/2005|04:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Identities

[06/23/2006|01:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Intel

[02/21/2009|10:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Malwarebytes

[02/20/2009|12:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Microsoft

[02/20/2009|12:41] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Mozilla

[02/20/2009|09:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Spyware Terminator

[06/23/2006|01:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Sun

[06/23/2006|01:38] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Symantec

[01/20/2009|03:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {3276BE95_AF08_429F_A64F_CA64CB79BCF6}

[04/13/2008|09:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe

[06/27/2006|07:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL

[02/17/2008|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple

[02/24/2008|10:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer

[09/22/2008|08:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AVS4YOU

[06/23/2006|01:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Creative Labs

[02/14/2008|12:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Dell

[06/20/2008|04:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> DVD Shrink

[02/26/2007|08:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Elaborate Bytes

[04/02/2007|05:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google

[05/29/2008|12:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> GRETECH

[06/23/2006|01:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> InstallShield

[06/23/2006|01:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Intel

[08/29/2007|10:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Logishrd

[12/16/2006|02:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Logitech

[02/23/2008|09:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> LxThumbs

[02/21/2009|03:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Malwarebytes

[06/23/2006|01:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> McAfee

[02/26/2007|10:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> McAfee.com

[02/05/2007|02:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> McAfee.com Personal Firewall

[12/23/2007|04:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft

[02/12/2009|03:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft Help

[06/15/2008|08:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Nero

[07/21/2006|05:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> QuickTime

[06/18/2008|05:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Real

[07/14/2008|09:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> RetroExp

[02/26/2007|08:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SlySoft

[02/22/2009|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Spybot - Search & Destroy

[02/23/2009|08:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Spyware Terminator

[02/14/2008|12:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SupportSoft

[06/27/2006|07:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Symantec

[12/30/2008|01:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TechSmith

[06/27/2006|06:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage

[03/04/2008|04:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> WinZip

[06/23/2006|01:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> ATI

[06/23/2006|01:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Google

[08/16/2005|04:50] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Identities

[06/23/2006|01:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Intel

[08/16/2005|04:30] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft

[06/23/2006|01:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Sun

[06/23/2006|01:38] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Symantec

[12/11/2007|02:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Adobe

[12/11/2007|02:25] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> AdobeUM

[12/09/2007|08:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> ATI

[12/11/2007|02:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Avant Profiles

[12/09/2007|08:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Identities

[12/11/2007|02:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Macromedia

[06/27/2006|07:17] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> McAfee.com Personal Firewall

[12/16/2007|09:48] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft

[12/16/2007|09:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Spyware Terminator

[12/16/2007|05:05] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Sun

[02/24/2008|09:42] C:\DOCUME~1\Michael\APPLIC~1\<DIR> AccurateRip

[07/09/2008|09:46] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Adobe

[08/14/2008|07:50] C:\DOCUME~1\Michael\APPLIC~1\<DIR> AdobeUM

[04/06/2008|08:22] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Apple Computer

[06/23/2006|01:30] C:\DOCUME~1\Michael\APPLIC~1\<DIR> ATI

[01/02/2009|05:25] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Avant Profiles

[09/22/2008|08:39] C:\DOCUME~1\Michael\APPLIC~1\<DIR> AVS4YOU

[10/03/2007|10:39] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Azureus

[09/04/2006|10:28] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Corel Photo Album

[12/25/2006|11:35] C:\DOCUME~1\Michael\APPLIC~1\<DIR> CyberLink

[01/07/2008|03:24] C:\DOCUME~1\Michael\APPLIC~1\<DIR> dBpoweramp

[07/23/2008|12:27] C:\DOCUME~1\Michael\APPLIC~1\<DIR> DeepBurner

[09/01/2008|12:09] C:\DOCUME~1\Michael\APPLIC~1\<DIR> DVD Flick

[11/08/2008|01:06] C:\DOCUME~1\Michael\APPLIC~1\<DIR> dvdcss

[09/18/2006|09:03] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Google

[05/29/2008|12:42] C:\DOCUME~1\Michael\APPLIC~1\<DIR> GRETECH

[02/10/2009|08:26] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Help

[07/11/2008|09:54] C:\DOCUME~1\Michael\APPLIC~1\<DIR> ICAClient

[08/16/2005|04:50] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Identities

[08/05/2008|12:53] C:\DOCUME~1\Michael\APPLIC~1\<DIR> InstallShield

[06/23/2006|01:21] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Intel

[08/28/2008|08:44] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Jabra

[12/16/2007|07:04] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Leadertech

[12/04/2008|08:56] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Lexmark Productivity Studio

[11/24/2006|12:54] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Logitech

[06/27/2006|06:39] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Macromedia

[02/21/2009|03:33] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Malwarebytes

[06/27/2006|06:18] C:\DOCUME~1\Michael\APPLIC~1\<DIR> McAfee.com Personal Firewall

[06/19/2008|11:39] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Media Player Classic

[12/30/2008|07:49] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Microsoft

[02/18/2009|05:32] C:\DOCUME~1\Michael\APPLIC~1\<DIR> MioNet

[08/28/2008|08:38] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Move Networks

[09/26/2008|02:07] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Mozilla

[06/15/2008|08:16] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Nero

[12/10/2008|09:38] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Orca Profiles

[10/13/2008|11:01] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Real

[07/02/2006|01:29] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Red Chair Software

[02/26/2007|08:41] C:\DOCUME~1\Michael\APPLIC~1\<DIR> SlySoft

[12/16/2007|07:04] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Sonic

[02/23/2009|07:11] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Spyware Terminator

[06/23/2006|01:18] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Sun

[06/23/2006|01:38] C:\DOCUME~1\Michael\APPLIC~1\<DIR> Symantec

[08/11/2007|12:31] C:\DOCUME~1\Michael\APPLIC~1\<DIR> U3

[07/03/2007|04:57] C:\DOCUME~1\Michael\APPLIC~1\<DIR> vlc

[02/18/2008|09:32] C:\DOCUME~1\Michael\APPLIC~1\<DIR> WinRAR

[04/16/2007|08:19] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Intel

[08/16/2005|04:30] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft

[01/17/2009|11:39] C:\DOCUME~1\terry\APPLIC~1\<DIR> Adobe

[01/17/2009|11:49] C:\DOCUME~1\terry\APPLIC~1\<DIR> Apple Computer

[06/23/2006|01:30] C:\DOCUME~1\terry\APPLIC~1\<DIR> ATI

[06/23/2006|01:45] C:\DOCUME~1\terry\APPLIC~1\<DIR> Google

[08/16/2005|04:50] C:\DOCUME~1\terry\APPLIC~1\<DIR> Identities

[06/23/2006|01:21] C:\DOCUME~1\terry\APPLIC~1\<DIR> Intel

[01/17/2009|11:50] C:\DOCUME~1\terry\APPLIC~1\<DIR> Microsoft

[01/18/2009|01:22] C:\DOCUME~1\terry\APPLIC~1\<DIR> Spyware Terminator

[06/23/2006|01:18] C:\DOCUME~1\terry\APPLIC~1\<DIR> Sun

[06/23/2006|01:38] C:\DOCUME~1\terry\APPLIC~1\<DIR> Symantec

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[02/16/2009 05:09 AM][--a------] C:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job

[02/24/2009 11:49 AM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[02/24/2009 08:15 PM][--ah-----] C:\WINDOWS\tasks\SA.DAT

[08/10/2004 05:00 AM][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing Folders in C:\Program Files

[04/13/2008|07:08] C:\Program Files\<DIR> Adobe

[08/23/2008|03:38] C:\Program Files\<DIR> Apple Software Update

[07/23/2008|11:11] C:\Program Files\<DIR> Astonsoft

[07/15/2006|12:38] C:\Program Files\<DIR> ATI Technologies

[09/08/2007|09:02] C:\Program Files\<DIR> Audacity

[02/22/2009|09:04] C:\Program Files\<DIR> Avant Browser

[06/20/2008|03:13] C:\Program Files\<DIR> Avi2Dvd

[06/18/2008|04:51] C:\Program Files\<DIR> AviSynth 2.5

[02/21/2009|08:11] C:\Program Files\<DIR> AVS4YOU

[10/03/2007|10:38] C:\Program Files\<DIR> Azureus

[06/23/2006|01:45] C:\Program Files\<DIR> BAE

[10/28/2008|09:44] C:\Program Files\<DIR> BitLord

[01/20/2009|03:51] C:\Program Files\<DIR> Bonjour

[06/23/2006|01:25] C:\Program Files\<DIR> Broadcom

[01/20/2009|08:10] C:\Program Files\<DIR> CABviaActiveSync

[11/25/2007|11:26] C:\Program Files\<DIR> CCleaner

[07/09/2008|01:24] C:\Program Files\<DIR> Citrix

[09/22/2008|08:43] C:\Program Files\<DIR> Common Files

[08/16/2005|04:38] C:\Program Files\<DIR> ComPlus Applications

[06/23/2006|01:23] C:\Program Files\<DIR> CONEXANT

[06/23/2006|01:42] C:\Program Files\<DIR> Corel Corporation

[04/03/2007|01:14] C:\Program Files\<DIR> Creative

[06/23/2006|01:30] C:\Program Files\<DIR> CyberLink

[07/10/2008|09:34] C:\Program Files\<DIR> Dell

[02/14/2008|12:37] C:\Program Files\<DIR> Dell Support Center

[09/04/2006|10:05] C:\Program Files\<DIR> Diji Album

[07/03/2007|11:54] C:\Program Files\<DIR> DVD Decrypter

[06/15/2008|06:27] C:\Program Files\<DIR> DVD Shrink

[09/18/2007|07:53] C:\Program Files\<DIR> Elaborate Bytes

[08/18/2008|10:31] C:\Program Files\<DIR> EvenFit

[09/16/2008|02:20] C:\Program Files\<DIR> Free FLV Converter

[09/16/2008|02:19] C:\Program Files\<DIR> Gabest

[04/02/2007|05:57] C:\Program Files\<DIR> GemMaster

[04/02/2007|06:04] C:\Program Files\<DIR> Google

[05/29/2008|12:40] C:\Program Files\<DIR> GRETECH

[07/02/2006|01:29] C:\Program Files\<DIR> Illustrate

[01/17/2008|11:47] C:\Program Files\<DIR> ImTOO

[11/08/2008|04:00] C:\Program Files\<DIR> Infinite Mind LC

[02/21/2009|08:12] C:\Program Files\<DIR> InstallShield Installation Information

[07/23/2008|12:35] C:\Program Files\<DIR> Instant CD & DVD Burner

[06/23/2006|01:21] C:\Program Files\<DIR> Intel

[06/23/2006|01:21] C:\Program Files\<DIR> Intel, Inc

[02/12/2009|03:01] C:\Program Files\<DIR> Internet Explorer

[01/20/2009|03:50] C:\Program Files\<DIR> iPod

[01/20/2009|03:50] C:\Program Files\<DIR> iTunes

[12/23/2008|04:57] C:\Program Files\<DIR> Java

[04/12/2007|06:56] C:\Program Files\<DIR> Kazaa

[06/18/2008|05:49] C:\Program Files\<DIR> K-Lite Codec Pack

[11/09/2008|11:13] C:\Program Files\<DIR> Lexmark 1400 Series

[11/09/2008|11:14] C:\Program Files\<DIR> Lexmark Toolbar

[08/20/2008|10:12] C:\Program Files\<DIR> LG Electronics

[01/28/2009|07:33] C:\Program Files\<DIR> LimeWire

[08/05/2008|12:54] C:\Program Files\<DIR> Logitech

[02/17/2008|09:37] C:\Program Files\<DIR> LSoft Technologies

[02/07/2009|09:40] C:\Program Files\<DIR> Lx_cats

[11/08/2008|02:27] C:\Program Files\<DIR> MagicDisc

[11/08/2008|03:10] C:\Program Files\<DIR> MagicISO

[02/21/2009|03:33] C:\Program Files\<DIR> Malwarebytes' Anti-Malware

[06/23/2006|01:45] C:\Program Files\<DIR> McAfee

[08/24/2008|02:39] C:\Program Files\<DIR> MediaMonkey

[09/15/2008|01:54] C:\Program Files\<DIR> Messenger

[02/18/2009|05:22] C:\Program Files\<DIR> Microsoft ActiveSync

[05/09/2007|10:32] C:\Program Files\<DIR> Microsoft CAPICOM 2.1.0.2

[08/16/2005|04:43] C:\Program Files\<DIR> microsoft frontpage

[08/27/2007|03:24] C:\Program Files\<DIR> Microsoft Office

[06/23/2006|01:32] C:\Program Files\<DIR> Microsoft Plus! Digital Media Edition

[06/23/2006|01:33] C:\Program Files\<DIR> Microsoft Plus! Photo Story 2 LE

[04/15/2007|10:10] C:\Program Files\<DIR> Microsoft Visual Studio

[08/27/2007|03:25] C:\Program Files\<DIR> Microsoft Visual Studio 8

[04/15/2007|10:10] C:\Program Files\<DIR> Microsoft Works

[04/15/2007|10:08] C:\Program Files\<DIR> Microsoft.NET

[02/24/2009|08:23] C:\Program Files\<DIR> MioNet

[05/24/2008|03:05] C:\Program Files\<DIR> MioNetApplet

[06/23/2006|01:26] C:\Program Files\<DIR> Modem Helper

[02/19/2009|12:24] C:\Program Files\<DIR> Morpheus

[12/02/2007|02:11] C:\Program Files\<DIR> MorpheusBar

[02/21/2009|08:12] C:\Program Files\<DIR> Motorola

[09/15/2008|01:45] C:\Program Files\<DIR> Movie Maker

[06/18/2008|04:56] C:\Program Files\<DIR> Movies To DVD

[02/22/2009|09:53] C:\Program Files\<DIR> Mozilla Firefox

[08/27/2007|03:30] C:\Program Files\<DIR> MSBuild

[08/16/2005|04:37] C:\Program Files\<DIR> MSN

[08/16/2005|04:37] C:\Program Files\<DIR> MSN Gaming Zone

[11/17/2006|09:09] C:\Program Files\<DIR> MSXML 4.0

[04/02/2007|05:59] C:\Program Files\<DIR> MUSICMATCH

[06/15/2008|08:13] C:\Program Files\<DIR> Nero

[06/15/2008|08:18] C:\Program Files\<DIR> NeroInstall.bak

[09/15/2008|01:40] C:\Program Files\<DIR> NetMeeting

[08/16/2005|04:38] C:\Program Files\<DIR> Online Services

[02/21/2009|08:15] C:\Program Files\<DIR> Orb Networks

[01/20/2009|12:23] C:\Program Files\<DIR> Orca Browser

[09/15/2008|01:40] C:\Program Files\<DIR> Outlook Express

[01/20/2009|03:48] C:\Program Files\<DIR> QuickTime

[07/02/2006|01:29] C:\Program Files\<DIR> Red Chair Software

[11/19/2006|03:55] C:\Program Files\<DIR> ReflexiveArcade

[12/09/2007|03:21] C:\Program Files\<DIR> Retrospect

[08/16/2005|08:58] C:\Program Files\<DIR> RGB

[01/20/2009|03:41] C:\Program Files\<DIR> Safari

[06/27/2008|09:05] C:\Program Files\<DIR> ScreenPrint32 v3

[06/23/2006|01:45] C:\Program Files\<DIR> SearchAssist

[09/30/2007|05:24] C:\Program Files\<DIR> Shyam Pillai

[06/23/2006|01:22] C:\Program Files\<DIR> Sigmatel

[09/18/2007|07:53] C:\Program Files\<DIR> SlySoft

[06/23/2006|01:35] C:\Program Files\<DIR> Sonic

[02/21/2009|10:36] C:\Program Files\<DIR> Spybot - Search & Destroy

[02/24/2009|06:55] C:\Program Files\<DIR> Spyware Terminator

[06/23/2006|01:25] C:\Program Files\<DIR> Synaptics

[08/26/2007|06:14] C:\Program Files\<DIR> SystemRequirementsLab

[12/30/2008|01:12] C:\Program Files\<DIR> TechSmith

[03/04/2008|04:04] C:\Program Files\<DIR> The Extractor

[02/17/2008|09:51] C:\Program Files\<DIR> The Rosetta Stone

[02/20/2009|05:11] C:\Program Files\<DIR> Trend Micro

[10/13/2007|09:57] C:\Program Files\<DIR> TVersity

[10/13/2007|09:59] C:\Program Files\<DIR> TVersity Codec Pack

[08/16/2005|04:50] C:\Program Files\<DIR> Uninstall Information

[07/03/2007|04:55] C:\Program Files\<DIR> VideoLAN

[09/16/2008|02:18] C:\Program Files\<DIR> Videos To DVD

[04/02/2007|06:03] C:\Program Files\<DIR> Vongo

[02/24/2009|08:15] C:\Program Files\<DIR> WinClamAVShield

[08/14/2007|12:12] C:\Program Files\<DIR> Windows Media Connect 2

[08/14/2007|12:12] C:\Program Files\<DIR> Windows Media Player

[12/30/2008|07:47] C:\Program Files\<DIR> Windows Mobile Device Handbook

[09/15/2008|01:40] C:\Program Files\<DIR> Windows NT

[08/16/2005|04:37] C:\Program Files\<DIR> Windows Plus

[08/16/2005|04:40] C:\Program Files\<DIR> WindowsUpdate

[09/16/2008|02:19] C:\Program Files\<DIR> WinMPG VideoConvert

[08/16/2005|04:43] C:\Program Files\<DIR> xerox

[07/10/2008|09:39] C:\Program Files\<DIR> Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Common Files

[06/27/2006|08:04] C:\Program Files\Common Files\<DIR> Adobe

[06/27/2006|07:23] C:\Program Files\Common Files\<DIR> AOL

[01/20/2009|03:47] C:\Program Files\Common Files\<DIR> Apple

[02/21/2009|08:11] C:\Program Files\Common Files\<DIR> AVSMedia

[12/16/2006|12:22] C:\Program Files\Common Files\<DIR> Canon

[06/23/2006|01:27] C:\Program Files\Common Files\<DIR> Creative Labs Shared

[07/02/2006|10:31] C:\Program Files\Common Files\<DIR> Designer

[02/20/2009|12:54] C:\Program Files\Common Files\<DIR> DVDVideoSoft

[06/23/2006|01:35] C:\Program Files\Common Files\<DIR> InstallShield

[06/23/2006|01:18] C:\Program Files\Common Files\<DIR> Java

[08/29/2007|10:22] C:\Program Files\Common Files\<DIR> LogiShrd

[08/29/2007|10:21] C:\Program Files\Common Files\<DIR> Logitech

[12/30/2008|07:48] C:\Program Files\Common Files\<DIR> Microsoft Shared

[08/16/2005|04:40] C:\Program Files\Common Files\<DIR> MSSoap

[06/15/2008|08:44] C:\Program Files\Common Files\<DIR> Nero

[06/23/2006|01:35] C:\Program Files\Common Files\<DIR> Nullsoft

[08/16/2005|04:33] C:\Program Files\Common Files\<DIR> ODBC

[05/29/2008|12:50] C:\Program Files\Common Files\<DIR> Real

[08/05/2008|12:55] C:\Program Files\Common Files\<DIR> Remote Control Software Common

[11/08/2007|07:20] C:\Program Files\Common Files\<DIR> Remote Control USB Driver

[02/20/2009|01:03] C:\Program Files\Common Files\<DIR> Services

[06/23/2006|01:35] C:\Program Files\Common Files\<DIR> Sonic Shared

[08/16/2005|04:33] C:\Program Files\Common Files\<DIR> SpeechEngines

[10/12/2006|09:13] C:\Program Files\Common Files\<DIR> SWF Studio

[08/11/2008|04:22] C:\Program Files\Common Files\<DIR> Symantec Shared

[09/15/2008|01:40] C:\Program Files\Common Files\<DIR> System

[06/23/2006|01:33] C:\Program Files\Common Files\<DIR> TiVo Shared

[12/30/2008|01:11] C:\Program Files\Common Files\<DIR> Wise Installation Wizard

--------------------\\ Process

( 63 Processes )

iexplore.exe ~ [PID:144]

--------------------\\ Searching with S_Lop

No Lop folder found !

--------------------\\ Searching for Lop Files - Folders

No Lop folder found !

--------------------\\ Searching within the Registry

..... OK !

--------------------\\ Checking the Hosts file

Hosts file CLEAN

--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-02-24 23:26:11

Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:

ZwOpenFile

scanning hidden processes ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden files: 0

--------------------\\ Searching for other infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Michael\Application Data\Azureus\torrents\(Nero)_-_Keygen_-_Nero_7_Serial.3567322.TPB.torrent

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\(Nero) - Keygen - Nero 7 Serial.rar

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero 7 Mp3Pro Plugin Serial (by Yinxu Wang).zip

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\nero 7 Plugin Pack 2.0.4 + key.rar

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero 7 Reloaded Plugin Pack 2.0.4

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero 7 Reloaded Plugin Pack 2.0.4.rar

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero 7 Serial.txt

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero MP3 & MP3 Pro plugin for NERO.rar

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero 7 Reloaded Plugin Pack 2.0.4\Nero 7 PlugIn Pack v1.0.0.1.exe

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\(Nero) - Keygen - Nero 7 Serial\Nero 7 Reloaded Plugin Pack 2.0.4\TS.nfo

C:\DOCUME~1\Michael\My Documents\Azureus Downloads\Office 2007 Enterprise Edition\Office 2007 KeyGen.exe

C:\DOCUME~1\Michael\My Documents\My Music\iTunes\iTunes Music\Kanye West\Late Registration\08 Crack Music (Feat. The Game).mp3

C:\DOCUME~1\Michael\My Documents\My Music\iTunes\iTunes Music\Lil Wayne\Blood Sport\04-DJ-AGE CRACKHOUSE SCRATCH.mp3

C:\DOCUME~1\Michael\My Documents\My Music\iTunes\iTunes Music\www.HipHopGenerals.com\HipHopGenerals Presents_ Eminem - Before\02.Eminem - Crack A Bottle ft.50 cent Dr.Dre.mp3

C:\DOCUME~1\Michael\My Documents\My Music\iTunes\iTunes Music\www.HipHopGenerals.com\HipHopGenerals Presents_ Eminem - Before\Crack A Bottle Ft. Dr. Dre 50 Cen 1.mp3

C:\DOCUME~1\ALLUSE~1\Documents\My Videos\Movies\(Nero)_-_Keygen_-_Nero_7_Serial.3567322.TPB.torrent

[F:211][D:17]-> C:\DOCUME~1\Michael\LOCALS~1\Temp

[F:3][D:0]-> C:\DOCUME~1\Michael\Cookies

[F:68][D:4]-> C:\DOCUME~1\Michael\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - Tue 02/24/2009|23:27 - Option : [1]

--------------------\\ Scan completed at 23:27:36

Link to post
Share on other sites
staceystamps

staceystamps

Posted
  • Author
Posted

I appreciate the help anyway.

As a shared computer for our house in college it had quite a bit of garbage on it so I understand your position on not offering more help

Let me ask you this though, do you think I should invest more time trying to repair it in its current state or would you suggest I go straight for a wipe/reload?

Ironically my hesitation for wipe/reload is that I have a legitimate copy of Office 2007 installed (they sold them for 20 bucks in college) which I believe can only be used once - funny that one of my roommates must have not even wanted to pay the 20 bucks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.