Jump to content

I've got the spigot, please help

Gopens25

By Gopens25
in Resolved Malware Removal Logs

 Share

Recommended Posts

Gopens25

Gopens25

Posted
Posted

Hello,

I have a desktop computer that I recently wiped clean and reinstalled 32 bit XP and all the software on the PC. At some point I picked up spigot and am having problems removing it. Here are the DDS and Attach reports:

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 8.0.6001.18702

Run by Acres at 14:51:11 on 2013-02-14

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1010 [GMT -6:00]

.

AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}

.

============== Running Processes ================

.

C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Creative\Shared Files\CTAudSvc.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\Common Files\Nuance\dgnsvc.exe

C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE

C:\Program Files\Ralink\Common\RalinkRegistryWriter.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\CTHELPER.EXE

C:\Program Files\Epson Software\Event Manager\EEventManager.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe

C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIHBA.EXE

C:\Documents and Settings\Acres\Application Data\Dropbox\bin\Dropbox.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\WINDOWS\system32\SearchFilterHost.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\System32\svchost.exe -k NetworkService

C:\WINDOWS\System32\svchost.exe -k LocalService

C:\WINDOWS\System32\svchost.exe -k imgsvc

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uURLSearchHooks: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - <orphaned>

BHO: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - <orphaned>

BHO: ContributeBHO Class: {074C1DC5-9320-4A9A-947D-C042949C6216} - c:\program files\adobe\adobe contribute cs5.1\plugins\ieplugin\contributeieplugin.dll

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

TB: Contribute Toolbar: {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - c:\program files\adobe\adobe contribute cs5.1\plugins\ieplugin\contributeieplugin.dll

TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll

EB: {32683183-48a0-441b-a342-7c2a440a9478} - <orphaned>

uRun: [Advanced SystemCare 6] "c:\program files\iobit\advanced systemcare 6\ASCTray.exe" /AutoStart

uRun: [iSUSPM] c:\documents and settings\all users\application data\flexnet\connect\11\ISUSPM.exe -scheduler

uRun: [EPLTarget\P0000000000000000] c:\windows\system32\spool\drivers\w32x86\3\e_fatihba.exe /ept "epltarget\P0000000000000000" /M "Epson Stylus NX430"

mRun: [AVG_UI] "c:\program files\avg\avg2013\avgui.exe" /TRAYONLY

mRun: [CTHelper] CTHELPER.EXE

mRun: [startCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun

mRun: [DNS7reminder] "c:\program files\nuance\naturallyspeaking11\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\nuance\naturallyspeaking11\Ereg.ini

mRun: [EEventManager] "c:\program files\epson software\event manager\EEventManager.exe"

StartupFolder: c:\docume~1\acres\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\acres\application data\dropbox\bin\Dropbox.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

.

INFO: HKLM has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1359070224421

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1359990073343

DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab

DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab

TCP: NameServer = 192.168.1.1

TCP: Interfaces\{F2370A9E-FCB3-451A-BA81-676E0D1F8D7E} : DHCPNameServer = 192.168.1.1

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll

Notify: AtiExtEvent - Ati2evxx.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\24.0.1312.57\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

Hosts: 127.0.0.1 www.spywareinfo.com

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\acres\application data\mozilla\firefox\profiles\72ght449.default\

FF - prefs.js: browser.search.selectedEngine - Yahoo

FF - prefs.js: browser.startup.homepage - about:home

FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=198484&ilc=12&p=

FF - plugin: c:\program files\google\update\1.3.21.124\npGoogleUpdate3.dll

FF - ExtSQL: 2013-01-26 17:18; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - ExtSQL: 2013-02-09 17:49; {01A8CA0A-4C96-465b-A49B-65C46FAD54F9}; c:\program files\adobe\adobe contribute cs5.1\plugins\firefoxplugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}

FF - ExtSQL: 2013-02-09 17:51; web2pdfextension@web2pdf.adobedotcom; c:\program files\adobe\acrobat 10.0\acrobat\browser\WCFirefoxExtn

.

---- FIREFOX POLICIES ----

FF - user.js: network.http.pipelining.maxrequests - 8

FF - user.js: network.http.request.max-start-delay - 0

FF - user.js: network.http.max-connections - 48

FF - user.js: network.http.max-connections-per-server - 16

FF - user.js: network.http.max-persistent-connections-per-proxy - 16

FF - user.js: network.http.max-persistent-connections-per-server - 8

FF - user.js: browser.turbo.enabled - true

FF - user.js: browser.display.show_image_placeholders - true

FF - user.js: browser.chrome.favicons - false

FF - user.js: browser.urlbar.autocomplete.enabled - true

FF - user.js: browser.cache.memory.capacity - 65536

FF - user.js: content.notify.ontimer - true

FF - user.js: content.interrupt.parsing - true

FF - user.js: content.max.tokenizing.time - 2250000

FF - user.js: content.switch.threshold - 750000

FF - user.js: plugin.expose_full_path - true

FF - user.js: ui.submenuDelay - 0

.

============= SERVICES / DRIVERS ===============

.

R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-10-15 55776]

R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2012-9-21 177376]

R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2012-11-15 94048]

R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2012-9-14 35552]

R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2009-5-5 22168]

R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2012-10-22 179936]

R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2012-9-21 19936]

R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2012-10-2 159712]

R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2012-9-21 164832]

R1 BSMEM;BSMEM;c:\windows\system32\drivers\BSMEM.sys [2013-1-30 17024]

R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\iobit\advanced systemcare 6\ASCService.exe [2013-1-24 465216]

R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2013\avgidsagent.exe [2012-11-15 5814904]

R2 avgwd;AVG WatchDog;c:\program files\avg\avg2013\avgwdsvc.exe [2012-10-22 196664]

R2 DragonSvc;Dragon Service;c:\program files\common files\nuance\dgnsvc.exe [2010-7-23 296808]

R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\common files\epson\epw!3 ssrp\E_S50RP7.EXE [2013-2-12 142432]

R2 EpsonCustomerParticipation;EpsonCustomerParticipation;c:\program files\epson\epsoncustomerparticipation\EPCP.exe [2011-6-9 521600]

R2 RalinkRegistryWriter;Ralink Registry Writer;c:\program files\ralink\common\RalinkRegistryWriter.exe [2013-2-3 75040]

R3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [2010-3-18 99416]

R3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [2010-3-18 555096]

R3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [2010-3-18 566360]

R3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [2013-2-3 966912]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-1-8 161536]

S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [2013-1-24 103040]

S3 BS_Flash;BS_Flash;c:\program files\tseries bios update\award\BS_Flash.sys [2013-1-30 3604]

S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [2010-3-18 99416]

S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2013-1-24 79360]

S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [2010-3-18 555096]

S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [2010-3-18 100952]

S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [2010-3-18 100952]

S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [2010-3-18 566360]

S3 RAPIProtocol;Ralink RAPI Protocol Driver;c:\windows\system32\drivers\RAPIProtocol.sys [2013-2-3 16512]

S3 SwitchBoard;Adobe SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2003-3-31 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== File Associations ===============

.

ShellExec: dreamweaver.exe: Open="c:\program files\adobe\adobe dreamweaver cs5.5\dreamweaver.exe", "%1"

.

=============== Created Last 30 ================

.

2013-02-13 00:43:17 44032 ------w- c:\windows\system32\CTSVCCDA.EXE

2013-02-13 00:43:17 25088 ------w- c:\windows\system32\CTSVCCTL.EXE

2013-02-13 00:42:51 -------- d-----w- c:\program files\common files\Creative

2013-02-13 00:42:50 -------- d--h--w- c:\program files\Creative Installation Information

2013-02-12 20:31:45 -------- d-----w- c:\program files\common files\EPSON

2013-02-12 20:31:21 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys

2013-02-12 20:31:21 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys

2013-02-12 20:31:12 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys

2013-02-12 20:31:12 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

2013-02-11 19:29:15 -------- d-----w- c:\documents and settings\acres\application data\Malwarebytes

2013-02-11 19:29:06 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes

2013-02-11 19:29:05 21104 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-02-11 19:29:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2013-02-11 19:19:02 -------- d-----w- c:\program files\Epson America Inc

2013-02-11 19:18:15 95232 ----a-w- c:\windows\system32\E_FLBHBA.DLL

2013-02-11 19:18:15 81408 ----a-w- c:\windows\system32\E_FD4BHBA.DLL

2013-02-11 19:18:03 -------- d-----w- c:\documents and settings\all users\application data\EPSON

2013-02-11 19:17:43 -------- d-----w- c:\program files\Epson Software

2013-02-11 19:15:44 132560 ----a-w- c:\windows\system32\esdevapp.exe

2013-02-11 19:15:43 12800 ----a-w- c:\windows\system32\escdev.dll

2013-02-11 19:15:42 342016 ----a-w- c:\windows\system32\eswiaud.dll

2013-02-11 19:15:17 -------- d-----w- c:\program files\epson

2013-02-10 00:03:28 -------- d-----w- c:\documents and settings\all users\application data\ALM

2013-02-09 23:56:33 -------- d-----w- c:\documents and settings\acres\Adobe Flash Builder 4.5

2013-02-09 23:44:58 -------- d-----w- c:\program files\My Company Name

2013-02-07 06:50:23 -------- d-----w- c:\documents and settings\all users\application data\regid.1986-12.com.adobe

2013-02-07 06:07:54 -------- d-----w- c:\documents and settings\acres\local settings\application data\Adobe

2013-02-07 05:22:32 346624 ----a-w- c:\windows\system32\Mss32.dll

2013-02-07 05:22:32 1478656 ----a-w- c:\windows\system32\SushiDX.exe

2013-02-07 05:22:03 1445888 ----a-w- c:\windows\system32\Ati Gargoyle.scr

2013-02-06 23:06:10 -------- d-----w- c:\program files\MSXML 4.0

2013-02-06 23:05:35 23360 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe

2013-02-06 22:59:30 -------- d-----w- c:\documents and settings\acres\AppData

2013-02-06 20:48:50 -------- d-----w- c:\documents and settings\acres\application data\FLEXnet

2013-02-06 20:48:49 -------- d-----w- c:\documents and settings\acres\application data\Nuance

2013-02-06 20:32:54 -------- d-----w- c:\program files\common files\IVA

2013-02-06 20:32:36 -------- d-----w- c:\program files\common files\Nuance

2013-02-06 20:29:21 -------- d-----w- c:\program files\Nuance

2013-02-06 20:29:21 -------- d-----w- c:\documents and settings\all users\application data\Nuance

2013-02-06 20:29:06 -------- d-----w- c:\windows\speech

2013-02-06 20:27:31 -------- d-----w- c:\documents and settings\acres\local settings\application data\WinZip

2013-02-06 15:23:31 -------- d-----w- c:\windows\Profiles

2013-02-06 15:23:30 225280 ------w- c:\program files\internet explorer\plugins\NPDocBox.dll

2013-02-06 15:23:30 103312 ------w- c:\program files\internet explorer\plugins\nppdf32.dll

2013-02-06 15:23:28 -------- d-----w- c:\windows\system32\Adobe

2013-02-06 15:23:23 306688 ----a-w- c:\windows\IsUninst.exe

2013-02-06 05:08:35 -------- d-----r- c:\program files\Skype

2013-02-06 05:07:28 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys

2013-02-06 05:07:28 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys

2013-02-06 05:07:14 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys

2013-02-06 05:07:14 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys

2013-02-06 05:07:13 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys

2013-02-06 05:07:13 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys

2013-02-06 05:07:12 16384 ----a-w- c:\windows\system32\ipsink.ax

2013-02-06 05:07:10 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys

2013-02-06 05:07:10 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys

2013-02-06 05:07:04 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys

2013-02-06 05:07:04 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS

2013-02-05 14:22:13 275696 ----a-w- c:\windows\system32\mucltui.dll

2013-02-05 14:22:13 17136 ----a-w- c:\windows\system32\mucltui.dll.mui

2013-02-05 14:21:15 -------- d-----w- c:\documents and settings\acres\local settings\application data\ApplicationHistory

2013-02-05 14:06:49 -------- d-----w- c:\program files\Microsoft

2013-02-05 14:06:28 -------- d-----w- c:\program files\Windows Live SkyDrive

2013-02-05 14:05:45 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll

2013-02-05 14:05:28 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition

2013-02-05 14:05:11 4927864 ----a-w- c:\program files\common files\windows live\.cache\d0185edc1ce03a9\Silverlight.2.0.exe

2013-02-05 14:03:03 74520 ----a-w- c:\program files\common files\windows live\.cache\83a6f93c1ce03a9\DSETUP.dll

2013-02-05 14:03:03 484632 ----a-w- c:\program files\common files\windows live\.cache\83a6f93c1ce03a9\DXSETUP.exe

2013-02-05 14:03:03 1670936 ----a-w- c:\program files\common files\windows live\.cache\83a6f93c1ce03a9\dsetup32.dll

2013-02-05 14:02:42 1013800 ----a-w- c:\program files\common files\windows live\.cache\7776130a1ce03a9\WindowsXP-KB954708-x86-ENU.exe

2013-02-04 15:55:18 -------- d-----w- c:\program files\common files\Windows Live

2013-02-04 15:37:02 -------- d-----w- c:\windows\system32\winrm

2013-02-04 15:36:57 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$

2013-02-04 15:36:35 -------- d-----w- c:\documents and settings\acres\local settings\application data\Identities

2013-02-04 15:36:33 -------- d-----w- c:\documents and settings\acres\application data\Windows Desktop Search

2013-02-04 15:36:04 -------- d-----w- c:\windows\system32\GroupPolicy

2013-02-04 15:36:04 -------- d-----w- c:\program files\Windows Desktop Search

2013-02-04 15:35:19 98304 -c----w- c:\windows\system32\dllcache\nlhtml.dll

2013-02-04 15:35:19 29696 -c----w- c:\windows\system32\dllcache\mimefilt.dll

2013-02-04 15:35:19 192000 -c----w- c:\windows\system32\dllcache\offfilt.dll

2013-02-04 15:34:04 -------- d-----w- c:\windows\system32\URTTEMP

2013-02-04 14:51:05 -------- d-----w- c:\program files\Dropbox

2013-02-04 14:48:21 -------- d-----w- c:\documents and settings\acres\application data\Dropbox

2013-02-04 14:47:48 19240752 ----a-w- C:\Dropbox 1.6.16.exe

2013-02-04 14:45:25 -------- d-----w- c:\program files\Microsoft ActiveSync

2013-02-04 14:44:49 -------- d-----w- c:\windows\ShellNew

2013-02-04 14:44:49 -------- d-----w- c:\program files\common files\ODBC

2013-02-03 17:14:04 -------- d-----w- c:\program files\Windows Media Connect 2

2013-02-03 17:12:23 -------- d-----w- c:\windows\system32\LogFiles

2013-02-03 17:06:03 315510 ----a-w- c:\windows\system32\RAPI.dll

2013-02-03 17:06:03 200704 ----a-w- c:\windows\system32\ssleay32.dll

2013-02-03 17:06:03 16512 ----a-w- c:\windows\system32\drivers\RAPIProtocol.sys

2013-02-03 17:06:03 1093632 ----a-w- c:\windows\system32\libeay32.dll

2013-02-03 17:05:44 21361 ----a-w- c:\windows\system32\drivers\AegisP.sys

2013-02-03 17:05:23 966912 ----a-w- c:\windows\system32\drivers\rt2860.sys

2013-02-03 17:05:23 221184 ----a-w- c:\windows\system32\RaCoInst.dll

2013-02-03 17:05:22 -------- d-----w- c:\documents and settings\all users\application data\Ralink Driver

2013-02-03 17:05:21 -------- d-----w- c:\program files\Ralink

2013-01-31 00:07:49 -------- d-----w- c:\documents and settings\acres\local settings\application data\ATI

2013-01-31 00:01:51 -------- d-----w- c:\program files\common files\ATI Technologies

2013-01-30 19:04:57 69632 ----a-w- c:\windows\system32\vuins32.dll

2013-01-30 19:04:57 46592 ----a-w- c:\windows\system32\drivers\fetnd5bv.sys

2013-01-30 18:55:54 3604 ----a-w- c:\windows\system32\drivers\BS_Flash.sys

2013-01-30 18:55:50 17024 ----a-w- c:\windows\system32\drivers\BSMEM.sys

2013-01-30 18:53:25 -------- d-----w- c:\program files\Tseries BIOS Update

2013-01-30 18:53:22 77824 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ctor.dll

2013-01-30 18:53:22 32768 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\objectps.dll

2013-01-30 18:53:22 225280 ----a-w- c:\program files\common files\installshield\iscript\iscript.dll

2013-01-30 18:53:22 212992 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\ILog.dll

2013-01-30 18:53:22 176128 ----a-w- c:\program files\common files\installshield\engine\6\intel 32\iuser.dll

2013-01-30 18:50:13 319456 ------w- c:\windows\system32\difxapi.dll

2013-01-30 18:50:12 -------- d-----w- c:\program files\VIA

2013-01-26 09:03:54 -------- d-----w- c:\windows\SxsCaPendDel

2013-01-26 04:01:35 45056 ----a-w- c:\windows\system32\aticalrt.dll

2013-01-26 04:01:32 3981312 ----a-w- c:\windows\system32\aticaldd.dll

2013-01-26 04:01:31 159744 ----a-w- c:\windows\system32\SET8A.tmp

2013-01-26 04:01:22 45056 ----a-w- c:\windows\system32\aticalcl.dll

2013-01-26 04:01:19 208896 ----a-w- c:\windows\system32\SET8D.tmp

2013-01-26 04:01:19 184320 ----a-w- c:\windows\system32\SET72.tmp

2013-01-25 03:35:01 0 ----a-w- c:\windows\ativpsrm.bin

2013-01-25 03:29:31 -------- d-sh--w- c:\documents and settings\acres\PrivacIE

2013-01-25 03:29:19 -------- d-----w- c:\documents and settings\acres\application data\IObit Apps

2013-01-25 03:24:57 103040 ----a-w- c:\windows\system32\drivers\AtihdXP3.sys

2013-01-25 03:24:51 -------- d-----w- c:\program files\ATI

2013-01-25 03:24:39 -------- d-----w- c:\program files\ATI Technologies

2013-01-25 03:17:08 -------- d-----w- c:\program files\IObit Apps Toolbar

2013-01-25 03:16:51 -------- d-----w- c:\documents and settings\all users\application data\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}

2013-01-25 03:16:43 -------- d-----w- c:\documents and settings\all users\application data\IObit

2013-01-25 03:16:41 -------- d-----w- c:\documents and settings\acres\application data\IObit

2013-01-25 03:16:34 -------- d-----w- c:\program files\IObit

2013-01-25 02:24:15 -------- d-----w- C:\AMD

2013-01-25 00:17:19 272128 -c----w- c:\windows\system32\dllcache\bthport.sys

2013-01-25 00:13:57 -------- d-sh--w- c:\documents and settings\acres\IETldCache

2013-01-25 00:03:28 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll

2013-01-25 00:02:30 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys

2013-01-25 00:02:06 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll

2013-01-25 00:01:44 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll

2013-01-24 23:59:07 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe

2013-01-24 23:58:05 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys

2013-01-24 23:57:57 -------- d-----w- c:\windows\ie8updates

2013-01-24 23:56:45 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll

2013-01-24 23:56:45 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll

2013-01-24 23:55:52 153088 -c----w- c:\windows\system32\dllcache\triedit.dll

2013-01-24 23:55:38 284160 -c----w- c:\windows\system32\dllcache\pdh.dll

2013-01-24 23:55:37 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll

2013-01-24 23:55:36 110592 -c----w- c:\windows\system32\dllcache\services.exe

2013-01-24 23:55:35 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll

2013-01-24 23:55:35 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe

2013-01-24 23:55:34 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll

2013-01-24 23:55:31 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll

2013-01-24 23:55:05 -------- dc-h--w- c:\windows\ie8

2013-01-24 23:52:29 290560 -c----w- c:\windows\system32\dllcache\atmfd.dll

2013-01-24 23:52:24 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys

2013-01-24 23:52:06 331776 -c----w- c:\windows\system32\dllcache\msadce.dll

2013-01-24 23:51:19 -------- d-----w- c:\windows\system32\Defaults

2013-01-24 23:50:39 10624 -c--a-w- c:\windows\system32\dllcache\gameenum.sys

2013-01-24 23:50:39 10624 ----a-w- c:\windows\system32\drivers\gameenum.sys

2013-01-24 23:50:19 7062 ----a-w- c:\windows\system32\audiopid.vxd

2013-01-24 23:49:58 -------- d-----w- c:\program files\common files\Creative Labs Shared

2013-01-24 23:49:55 105472 -c----w- c:\windows\system32\dllcache\mup.sys

2013-01-24 23:48:58 445016 ----a-w- c:\windows\system32\wrap_oal.dll

2013-01-24 23:48:58 109144 ----a-w- c:\windows\system32\OpenAL32.dll

2013-01-24 23:48:14 -------- d-----w- c:\windows\system32\Data

2013-01-24 23:48:10 522240 -c----w- c:\windows\system32\dllcache\jsdbgui.dll

2013-01-24 23:48:10 -------- d-----w- c:\program files\Creative

2013-01-24 23:47:38 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll

2013-01-24 23:47:38 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll

2013-01-24 23:47:38 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll

2013-01-24 23:47:38 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll

2013-01-24 23:47:37 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll

2013-01-24 23:47:37 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe

2013-01-24 23:47:32 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll

2013-01-24 23:47:32 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll

2013-01-24 23:44:57 6144 -c----w- c:\windows\system32\dllcache\iecompat.dll

2013-01-24 23:44:38 630272 -c----w- c:\windows\system32\dllcache\msfeeds.dll

2013-01-24 23:44:38 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll

2013-01-24 23:44:37 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll

2013-01-24 23:44:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll

2013-01-24 23:44:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll

2013-01-24 23:44:34 2004992 -c----w- c:\windows\system32\dllcache\iertutil.dll

2013-01-24 23:44:31 11111424 -c----w- c:\windows\system32\dllcache\ieframe.dll

2013-01-24 23:41:51 139784 -c----w- c:\windows\system32\dllcache\rdpwd.sys

2013-01-24 23:40:44 536576 -c----w- c:\windows\system32\dllcache\msado15.dll

2013-01-24 23:40:11 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe

2013-01-24 23:37:22 718336 -c----w- c:\windows\system32\dllcache\ntdll.dll

2013-01-24 23:37:21 2193024 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe

2013-01-24 23:37:21 2148864 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe

2013-01-24 23:37:20 2069760 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe

2013-01-24 23:37:20 2027520 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe

2013-01-24 23:36:53 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe

2013-01-24 23:34:03 -------- d-----w- c:\program files\Spybot - Search & Destroy

2013-01-24 23:34:03 -------- d-----w- c:\documents and settings\all users\application data\Spybot - Search & Destroy

2013-01-24 23:32:42 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys

2013-01-24 23:32:22 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll

2013-01-24 23:32:22 3072 ------w- c:\windows\system32\iacenc.dll

2013-01-24 23:31:41 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL

2013-01-24 23:31:41 1071088 ----a-w- c:\windows\system32\MSCOMCTL.OCX

2013-01-24 23:31:41 -------- d-----w- c:\program files\SpywareBlaster

2013-01-24 23:30:17 45568 -c----w- c:\windows\system32\dllcache\wab.exe

2013-01-24 23:30:12 590848 -c----w- c:\windows\system32\dllcache\rpcrt4.dll

2013-01-24 23:30:11 5120 ----a-w- c:\windows\system32\xpsp4res.dll

2013-01-24 17:52:09 -------- d-----w- c:\windows\system32\PreInstall

2013-01-24 17:52:07 -------- d--h--w- c:\windows\$hf_mig$

2013-01-24 17:51:44 -------- d-----w- c:\documents and settings\acres\application data\AVG2013

2013-01-24 17:47:23 -------- d-----w- c:\documents and settings\acres\application data\TuneUp Software

2013-01-24 17:47:08 -------- d--h--w- C:\$AVG

2013-01-24 17:47:08 -------- d-----w- c:\documents and settings\all users\application data\AVG2013

2013-01-24 17:46:48 -------- d-----w- c:\program files\AVG

2013-01-24 17:43:59 5376 -c--a-w- c:\windows\system32\dllcache\mspclock.sys

2013-01-24 17:43:59 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys

2013-01-24 17:43:38 60160 -c--a-w- c:\windows\system32\dllcache\drmk.sys

2013-01-24 17:43:38 60160 ----a-w- c:\windows\system32\drivers\drmk.sys

2013-01-24 17:43:38 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll

2013-01-24 17:43:38 4096 ----a-w- c:\windows\system32\ksuser.dll

2013-01-24 17:43:38 146048 -c--a-w- c:\windows\system32\dllcache\portcls.sys

2013-01-24 17:43:38 146048 ----a-w- c:\windows\system32\drivers\portcls.sys

2013-01-24 17:43:38 129536 ----a-w- c:\windows\system32\ksproxy.ax

2013-01-24 17:42:07 -------- d--h--w- c:\documents and settings\all users\application data\Common Files

2013-01-24 17:42:07 -------- d-----w- c:\documents and settings\all users\application data\MFAData

2013-01-24 17:42:07 -------- d-----w- c:\documents and settings\acres\local settings\application data\MFAData

2013-01-24 17:42:07 -------- d-----w- c:\documents and settings\acres\local settings\application data\Avg2013

2013-01-24 17:41:28 -------- d-----w- c:\windows\system32\SoftwareDistribution

2013-01-24 17:40:54 -------- d-----w- c:\windows\system32\wbem\AutoRecover

2013-01-24 17:35:59 86016 ------w- c:\windows\system32\mdmxsdk.dll

2013-01-24 17:34:33 7874560 -c--a-w- c:\windows\system32\dllcache\ati2mtag.sys

2013-01-24 17:33:55 26144 ----a-w- c:\windows\system32\spupdsvc.exe

2013-01-24 17:33:10 -------- d-----w- c:\windows\EHome

2013-01-24 17:18:25 -------- d-----w- c:\windows\system32\NtmsData

2013-01-24 15:42:14 -------- d-----w- c:\windows\pss

2013-01-24 15:09:06 -------- d-s---w- c:\windows\system32\Microsoft

2013-01-24 15:09:05 -------- d-----w- c:\documents and settings\acres\local settings\application data\Google

2013-01-24 15:02:48 -------- d-----w- C:\Temp

.

==================== Find3M ====================

.

2013-01-26 03:55:44 552448 ----a-w- c:\windows\system32\oleaut32.dll

2013-01-07 01:16:02 2193024 ----a-w- c:\windows\system32\ntoskrnl.exe

2013-01-07 00:36:58 2069760 ----a-w- c:\windows\system32\ntkrnlpa.exe

2013-01-04 01:20:00 1867264 ----a-w- c:\windows\system32\win32k.sys

2013-01-02 06:49:10 148992 ----a-w- c:\windows\system32\mpg2splt.ax

2013-01-02 06:49:10 1292288 ----a-w- c:\windows\system32\quartz.dll

2012-12-26 20:16:29 916480 ----a-w- c:\windows\system32\wininet.dll

2012-12-26 20:16:28 43520 ------w- c:\windows\system32\licmgr10.dll

2012-12-26 20:16:28 1469440 ------w- c:\windows\system32\inetcpl.cpl

2012-12-24 06:40:59 385024 ------w- c:\windows\system32\html.iec

2012-12-16 12:23:59 290560 ----a-w- c:\windows\system32\atmfd.dll

.

============= FINISH: 14:52:17.82 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 1/24/2013 8:56:06 AM

System Uptime: 2/14/2013 2:47:48 PM (0 hours ago)

.

Motherboard: | | K8M800-8237

Processor: AMD Sempron Processor 3400+ | Socket M2 | 1799/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 466 GiB total, 432.279 GiB free.

D: is FIXED (NTFS) - 186 GiB total, 177.803 GiB free.

E: is Removable

G: is CDROM (UDF)

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}

Description: VIA Rhine II Fast Ethernet Adapter

Device ID: PCI\VEN_1106&DEV_3065&SUBSYS_22001565&REV_78\3&267A616A&0&90

Manufacturer: VIA Technologies, Inc.

Name: VIA Rhine II Fast Ethernet Adapter

PNP Device ID: PCI\VEN_1106&DEV_3065&SUBSYS_22001565&REV_78\3&267A616A&0&90

Service: FET5X86V

.

Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}

Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard

Device ID: ACPI\PNP0303\3&267A616A&0

Manufacturer: (Standard keyboards)

Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard

PNP Device ID: ACPI\PNP0303\3&267A616A&0

Service: i8042prt

.

==== System Restore Points ===================

.

RP1: 1/24/2013 8:58:52 AM - System Checkpoint

RP2: 1/24/2013 11:34:12 AM - Installed Windows XP Service Pack 3.

RP3: 1/24/2013 11:46:47 AM - Installed AVG 2013

RP4: 1/24/2013 11:47:00 AM - Installed AVG 2013

RP5: 1/24/2013 11:52:05 AM - Software Distribution Service 3.0

RP6: 1/24/2013 5:41:18 PM - Software Distribution Service 3.0

RP7: 1/24/2013 5:49:25 PM - Installed Creative Audio Console

RP8: 1/24/2013 5:50:11 PM - Installed Creative Software AutoUpdate

RP9: 1/24/2013 5:50:31 PM - Software Distribution Service 3.0

RP10: 1/24/2013 5:56:43 PM - Installed Windows Internet Explorer 8.

RP11: 1/24/2013 5:57:46 PM - Software Distribution Service 3.0

RP12: 1/24/2013 6:32:09 PM - Installed DriverBoost.

RP13: 1/24/2013 8:00:54 PM - Removed DriverBoost.

RP14: 1/24/2013 8:24:57 PM - Software Distribution Service 3.0

RP15: 1/24/2013 9:11:09 PM - Installed Windows XP WgaNotify.

RP16: 1/24/2013 9:15:44 PM - Removed AMD Catalyst Install Manager

RP17: 1/24/2013 9:32:42 PM - Installed ccc-utility

RP18: 1/25/2013 10:07:31 PM - Software Distribution Service 3.0

RP19: 1/26/2013 3:00:14 AM - Software Distribution Service 3.0

RP20: 1/26/2013 5:01:52 PM - Software Distribution Service 3.0

RP21: 1/26/2013 5:14:54 PM - Software Distribution Service 3.0

RP22: 1/30/2013 12:50:12 PM - Installed Platform

RP23: 1/30/2013 12:51:45 PM - Configured Platform

RP24: 1/30/2013 12:56:57 PM - Configured Platform

RP25: 1/30/2013 12:57:51 PM - Software Distribution Service 3.0

RP26: 1/30/2013 1:03:45 PM - Update to an unsigned driver

RP27: 1/30/2013 1:31:13 PM - Configured Platform

RP28: 2/3/2013 11:05:21 AM - Installed Ralink Wireless LAN

RP29: 2/3/2013 11:11:25 AM - Software Distribution Service 3.0

RP30: 2/3/2013 11:18:42 AM - Software Distribution Service 3.0

RP31: 2/3/2013 11:23:08 AM - Software Distribution Service 3.0

RP32: 2/3/2013 11:33:16 AM - Software Distribution Service 3.0

RP33: 2/3/2013 11:49:04 AM - Software Distribution Service 3.0

RP34: 2/4/2013 8:37:52 AM - Software Distribution Service 3.0

RP35: 2/4/2013 8:44:15 AM - Installed Microsoft Office XP Professional with FrontPage

RP36: 2/4/2013 9:33:15 AM - Software Distribution Service 3.0

RP37: 2/5/2013 8:19:25 AM - Software Distribution Service 3.0

RP38: 2/5/2013 7:42:31 PM - Software Distribution Service 3.0

RP39: 2/6/2013 9:21:58 AM - Installed Visual C++ 9.0 Runtime for Dragon NaturallySpeaking.

RP40: 2/6/2013 9:28:10 AM - Installed WinZip 17.0

RP41: 2/6/2013 2:28:59 PM - Installed Dragon NaturallySpeaking 11.

RP42: 2/6/2013 4:55:19 PM - Installed Dragon NaturallySpeaking 11.5 Upgrade.

RP43: 2/6/2013 10:40:28 PM - IObit Uninstaller restore point

RP44: 2/6/2013 10:40:52 PM - IObit Uninstaller restore point

RP45: 2/7/2013 8:52:37 AM - IObit Uninstaller restore point

RP46: 2/8/2013 8:53:03 AM - System Checkpoint

RP47: 2/9/2013 9:27:29 AM - System Checkpoint

RP48: 2/9/2013 7:44:41 PM - Software Distribution Service 3.0

RP49: 2/11/2013 10:15:08 AM - System Checkpoint

RP50: 2/11/2013 1:16:05 PM - Installed Epson Event Manager

RP51: 2/11/2013 1:19:02 PM - Installed Epson Connect

RP52: 2/11/2013 1:53:10 PM - Software Distribution Service 3.0

RP53: 2/12/2013 3:12:17 PM - System Checkpoint

RP54: 2/12/2013 5:01:08 PM - Installed WaveStudio 7

RP55: 2/12/2013 6:42:49 PM - Installed Creative MediaSource 5

RP56: 2/12/2013 6:44:02 PM - Software Distribution Service 3.0

RP57: 2/14/2013 12:46:49 PM - System Checkpoint

.

==== Installed Programs ======================

.

Adobe Acrobat 5.0

Adobe Acrobat X Pro - English, Français, Deutsch

Adobe AIR

Adobe Content Viewer

Adobe Creative Suite 5.5 Master Collection

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Help Manager

Adobe Widget Browser

Advanced SystemCare 6

AMD Catalyst Install Manager

ATI AVIVO Codecs

AVG 2013

Catalyst Control Center - Branding

Catalyst Control Center Core Implementation

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Common

Catalyst Control Center HydraVision Full

Catalyst Control Center Localization All

ccc-core-preinstall

ccc-core-static

ccc-utility

CCC Help Chinese Standard

CCC Help English

CCC Help French

CCC Help German

CCC Help Spanish

Creative Audio Console

Creative MediaSource 5

Creative Software AutoUpdate

Creative WaveStudio 7

Download Navigator

Dragon NaturallySpeaking 11

Dropbox

Epson Connect

Epson Customer Participation

Epson Event Manager

EPSON NX430 Series Printer Uninstall

EPSON Scan

Google Chrome

Google Update Helper

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows Media Player 11 (KB939683)

Hotfix for Windows XP (KB2779562)

Hotfix for Windows XP (KB915800-v4)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB954708)

Hotfix for Windows XP (KB961118)

IObit Apps Toolbar v6.7

Malwarebytes Anti-Malware version 1.70.0.1100

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB2742597)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Base Smart Card Cryptographic Service Provider Package

Microsoft Choice Guard

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Office Live Add-in 1.5

Microsoft Office XP Professional with FrontPage

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFCLOC_x86

Microsoft_VC90_ATL_x86

Microsoft_VC90_CRT_x86

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFCLOC_x86

Mozilla Firefox 18.0.1 (x86 en-US)

Mozilla Maintenance Service

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

PDF Settings CS5

Platform

PxMergeModule

Ralink RT2860 Wireless LAN Card

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft Windows (KB2564958)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB2544521)

Security Update for Windows Internet Explorer 8 (KB2618444)

Security Update for Windows Internet Explorer 8 (KB2744842)

Security Update for Windows Internet Explorer 8 (KB2761465)

Security Update for Windows Internet Explorer 8 (KB2792100)

Security Update for Windows Internet Explorer 8 (KB2797052)

Security Update for Windows Internet Explorer 8 (KB2799329)

Security Update for Windows Internet Explorer 8 (KB982381)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows Media Player 11 (KB954154)

Security Update for Windows Search 4 - KB963093

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479943)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2584146)

Security Update for Windows XP (KB2585542)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB2598479)

Security Update for Windows XP (KB2603381)

Security Update for Windows XP (KB2618451)

Security Update for Windows XP (KB2619339)

Security Update for Windows XP (KB2620712)

Security Update for Windows XP (KB2624667)

Security Update for Windows XP (KB2631813)

Security Update for Windows XP (KB2646524)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB2655992)

Security Update for Windows XP (KB2659262)

Security Update for Windows XP (KB2661637)

Security Update for Windows XP (KB2676562)

Security Update for Windows XP (KB2686509)

Security Update for Windows XP (KB2691442)

Security Update for Windows XP (KB2698365)

Security Update for Windows XP (KB2705219-v2)

Security Update for Windows XP (KB2712808)

Security Update for Windows XP (KB2719985)

Security Update for Windows XP (KB2723135-v2)

Security Update for Windows XP (KB2724197)

Security Update for Windows XP (KB2727528)

Security Update for Windows XP (KB2753842-v2)

Security Update for Windows XP (KB2757638)

Security Update for Windows XP (KB2758857)

Security Update for Windows XP (KB2770660)

Security Update for Windows XP (KB2778344)

Security Update for Windows XP (KB2779030)

Security Update for Windows XP (KB2780091)

Security Update for Windows XP (KB2799494)

Security Update for Windows XP (KB2802968)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982665)

Segoe UI

Skins

Skype™ 6.1

Spybot - Search & Destroy

SpywareBlaster 4.6

Tseries BIOS Update

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Windows Internet Explorer 8 (KB2598845)

Update for Windows Internet Explorer 8 (KB2632503)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2467659)

Update for Windows XP (KB2492386)

Update for Windows XP (KB2661254-v2)

Update for Windows XP (KB2736233)

Update for Windows XP (KB2749655)

Update for Windows XP (KB898461)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB973815)

VIA Platform Device Manager

VIA Rhine-Family Fast-Ethernet Adapter

Visual C++ 9.0 Runtime for Dragon NaturallySpeaking

WebFldrs XP

Windows Genuine Advantage Notifications (KB905474)

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 8

Windows Live Communications Platform

Windows Live Essentials

Windows Live Photo Gallery

Windows Live Sign-in Assistant

Windows Live Sync

Windows Live Upload Tool

Windows Management Framework Core

Windows Media Format 11 runtime

Windows Media Player 11

Windows Search 4.0

Windows XP Service Pack 3

WinZip 17.0

.

==== Event Viewer Messages From Past Week ========

.

2/7/2013 12:23:31 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows Search service to connect.

2/7/2013 12:23:31 AM, error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not

respond to the start or control request in a timely fashion.

2/7/2013 12:23:31 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service WSearch with arguments "" in order to run the server:

{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

2/7/2013 10:49:21 AM, error: Service Control Manager [7006] - The ScRegSetValueExW call failed for FailureActions with the following error: Access is

denied.

2/13/2013 3:57:12 PM, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 681CA204212B has been denied by the

DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

2/13/2013 12:47:38 PM, error: Dhcp [1002] - The IP address lease 192.168.1.4 for the Network Card with network address 681CA204212B has been denied by the

DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

2/12/2013 2:47:41 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume

'HarddiskVolume1'. It has stopped monitoring the volume.

2/11/2013 1:50:07 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde ViaIde

.

==== End Of File ===========================

Please let me know what I should do next.

Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Hello Gopens25 and :welcome:! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Step 1

Please uninstall this application: IObit Apps Toolbar v6.7

Step 2

Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

Step 3

  • Launch Malwarebytes' Anti-Malware
  • Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
  • Go to Scanner tab and select Perform Quick Scan, then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

In your next reply, post the following log files:

  • Junkware Removal Tool log
  • Malwarebytes' Anti-Malware log
  • a new fresh DDS log

Link to post
Share on other sites
  • 2 weeks later...
Maurice Naggar

Maurice Naggar

Posted
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.