Jump to content

malwarebytes doesn't run and the all programs part of start menu missing

Asakura
 Share

Recommended Posts

Asakura

Asakura

Posted
Posted

Hello

The "All programs" part of start menu is missing

I have windows XP SP3, Kaspersky Internet Security 2012 and (now) Malwarebytes anti-malware

After installing Malwarebytes it didn't load, all it says is "Run-time error '2147024769 (8007007f)': Automation error"

 

here is the DDS.txt log:

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.5512  BrowserJavaVersion: 10.25.2
Run by AsakuraIST at 21:48:51 on 2013-06-30
Microsoft Windows XP Professional  5.1.2600.3.1252.34.3082.18.2046.907 [GMT -3:00]
.
AV: Kaspersky Internet Security *Enabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *Enabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\Google\Update\1.3.21.145\GoogleCrashHandler.exe
C:\Archivos de programa\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\msdtc.exe
C:\WINDOWS\System32\alg.exe
C:\Archivos de programa\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Archivos de programa\Winamp\winampa.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Documents and Settings\All Users\Datos de programa\Ad-Aware Browsing Protection\adawarebp.exe
C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Archivos de programa\Steam\Steam.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\AsakuraIST\Mis documentos\down\unhide.exe
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\Mozilla Firefox\plugin-container.exe
C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Archivos de programa\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Archivos de programa\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
.
============== Pseudo HJT Report ===============
.


BHO: IEVkbdBHO Class: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\ievkbd.dll
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\archivos de programa\java\jre7\bin\ssv.dll
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\archivos de programa\java\jre7\bin\jp2ssv.dll
BHO: FilterBHO Class: {E33CF602-D945-461A-83F0-819F76A199F8} - c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\klwtbbho.dll
uRun: [DAEMON Tools Lite] "c:\archivos de programa\daemon tools lite\DTLite.exe" -autorun
uRun: [Xvid] c:\archivos de programa\xvid\CheckUpdate.exe
uRun: [steam] "c:\archivos de programa\steam\Steam.exe" -silent
uRun: [MSMSGS] "c:\archivos de programa\messenger\msmsgs.exe" /background
mRun: [iMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [NUSB3MON] "c:\archivos de programa\nec electronics\usb 3.0 host controller driver\application\nusb3mon.exe"
mRun: [startCCC] "c:\archivos de programa\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [Adobe ARM] "c:\archivos de programa\archivos comunes\adobe\arm\1.0\AdobeARM.exe"
mRun: [WinampAgent] "c:\archivos de programa\winamp\winampa.exe"
mRun: [Ad-Aware Browsing Protection] "c:\documents and settings\all users\datos de programa\ad-aware browsing protection\adawarebp.exe"
mRun: [search Protection] c:\documents and settings\all users\datos de programa\search protection\SearchProtection.exe
mRun: [sunJavaUpdateSched] "c:\archivos de programa\archivos comunes\java\java update\jusched.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [AVP] "c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\avp.exe"
mRunOnce: [Malwarebytes Anti-Malware] c:\archivos de programa\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: &Download All using 4shared Desktop - c:\archivos de programa\4shared desktop\Desktop.32/D_ALL_LINK
IE: &Download using 4shared Desktop - c:\archivos de programa\4shared desktop\Desktop.32/D_ONE_LINK
IE: Agregar a Anti-Banner - c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\ie_banner_deny.htm
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\ievkbd.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\klwtbbho.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\archivos de programa\messenger\msmsgs.exe
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{8C72AD58-CD5F-4506-9558-2D317A8FA521} : DHCPNameServer = 192.168.1.1
Notify: AtiExtEvent - Ati2evxx.dll
Notify: klogon - c:\windows\system32\klogon.dll
Notify: WBSrv - c:\archivos de programa\stardock\object desktop\windowblinds\wbsrv.dll
Notify: WgaLogon - <no file>
AppInit_DLLs= wbsys.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\archivos de programa\google\chrome\application\27.0.1453.116\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
Hosts: 127.0.0.1     mpa.one.microsoft.com
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\
FF - plugin: c:\archivos de programa\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\archivos de programa\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\archivos de programa\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_224.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - ExtSQL: 2013-05-08 20:32; {1280606b-2510-4fe0-97ef-9b5a22eafe30}; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
FF - ExtSQL: 2013-05-08 20:44; {bee6eb20-01e0-ebd1-da83-080329fb9a3a}; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a}
FF - ExtSQL: 2013-05-08 20:44; savesession@noasobi.net; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\savesession@noasobi.net.xpi
FF - ExtSQL: 2013-05-09 12:32; {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF - ExtSQL: 2013-05-11 23:40; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - ExtSQL: 2013-06-03 21:34; a0710e@wips.com; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\a0710e@wips.com
FF - ExtSQL: 2013-06-04 22:39; {DDC359D1-844A-42a7-9AA1-88A850A938A8}; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF - ExtSQL: 2013-06-06 14:13; notreal.ccoptions@environmentalchemistry.com; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\notreal.ccoptions@environmentalchemistry.com.xpi
FF - ExtSQL: 2013-06-06 14:14; smarterwiki@wikiatic.com; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\smarterwiki@wikiatic.com.xpi
FF - ExtSQL: 2013-06-13 00:14; Noia4Options@ArisT2; c:\documents and settings\asakuraist\datos de programa\mozilla\firefox\profiles\9z977l3b.default\extensions\Noia4Options@ArisT2.xpi
.
============= SERVICES / DRIVERS ===============
.
R0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-5-31 13560]
R0 kl1;kl1;c:\windows\system32\drivers\kl1.sys [2011-3-4 133208]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2013-6-30 242240]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]
R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2013-6-30 565552]
R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [2013-6-1 188176]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [2013-6-1 94480]
R2 AVP;Servicio Kaspersky Anti-Virus;c:\archivos de programa\kaspersky lab\kaspersky internet security 2012\avp.exe [2011-4-24 202296]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2011-3-10 34608]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2013-6-30 40776]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys [2010-1-22 59904]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys [2010-1-22 139648]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [2013-4-12 104720]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\drivers\VBoxNetFlt.sys [2013-4-12 115984]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2013-5-8 1691480]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19472]
S3 PciCon;PciCon;\??\f:\pcicon.sys --> f:\PciCon.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2013-07-01 00:37:43    40776    ----a-w-    c:\windows\system32\drivers\mbamswissarmy.sys
2013-07-01 00:37:41    --------    d-----w-    c:\documents and settings\asakuraist\datos de programa\Malwarebytes
2013-07-01 00:37:05    --------    d-----w-    c:\documents and settings\all users\datos de programa\Malwarebytes
2013-07-01 00:37:01    22856    ----a-w-    c:\windows\system32\drivers\mbam.sys
2013-07-01 00:37:00    --------    d-----w-    c:\archivos de programa\Malwarebytes' Anti-Malware
2013-07-01 00:33:20    97859    ----a-w-    c:\windows\system32\drivers\klick.dat
2013-07-01 00:33:20    115369    ----a-w-    c:\windows\system32\drivers\klin.dat
2013-07-01 00:29:22    --------    d-----w-    c:\archivos de programa\Kaspersky Lab
2013-07-01 00:29:21    --------    d-----w-    c:\documents and settings\all users\datos de programa\Kaspersky Lab
2013-07-01 00:16:10    242240    ----a-w-    c:\windows\system32\drivers\dtsoftbus01.sys
2013-07-01 00:01:59    9728    -c--a-w-    c:\windows\system32\dllcache\rwnh.dll
2013-07-01 00:00:59    57856    -c--a-w-    c:\windows\system32\dllcache\esuimgd.dll
2013-06-30 23:59:45    221184    ----a-w-    c:\windows\system32\wmpns.dll
2013-06-30 23:57:46    16384    -c--a-w-    c:\windows\system32\dllcache\isignup.exe
2013-06-30 23:57:46    16384    ----a-w-    c:\archivos de programa\internet explorer\connection wizard\isignup.exe
2013-06-30 23:39:44    13312    -c--a-w-    c:\windows\system32\dllcache\irclass.dll
2013-06-30 23:39:44    13312    ----a-w-    c:\windows\system32\irclass.dll
2013-06-30 23:39:43    24661    -c--a-w-    c:\windows\system32\dllcache\spxcoins.dll
2013-06-30 23:39:43    24661    ----a-w-    c:\windows\system32\spxcoins.dll
2013-06-30 23:39:14    16825    ----a-r-    c:\windows\SETD9.tmp
2013-06-30 23:39:11    1088840    ----a-r-    c:\windows\SETCD.tmp
2013-06-30 23:39:09    1246421    ----a-r-    c:\windows\SETCA.tmp
2013-06-30 23:20:57    --------    d-----w-    c:\windows\setup.pss
2013-06-30 23:15:58    --------    d-----w-    c:\windows\system32\appmgmt
2013-06-29 23:28:30    144896    ----a-w-    c:\windows\system32\javacpl.cpl
2013-06-29 23:28:24    94632    ----a-w-    c:\windows\system32\WindowsAccessBridge.dll
2013-06-28 22:24:57    --------    d-----w-    c:\documents and settings\all users\datos de programa\SystemRequirementsLab
2013-06-28 22:24:57    --------    d-----w-    c:\archivos de programa\SystemRequirementsLab
2013-06-19 21:01:37    --------    d-----w-    c:\windows\USB Vibration
2013-06-19 21:01:27    57344    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\ctor.dll
2013-06-19 21:01:27    5632    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\DotNetInstaller.exe
2013-06-19 21:01:27    237568    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\iscript.dll
2013-06-19 21:01:27    151552    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\iuser.dll
2013-06-19 21:01:26    634880    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\iKernel.dll
2013-06-19 21:01:26    270468    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\Setup.dll
2013-06-19 21:01:26    159876    ----a-w-    c:\archivos de programa\archivos comunes\installshield\professional\runtime\0700\intel32\IGdi.dll
2013-06-19 21:01:24    --------    d-----w-    c:\archivos de programa\USB Vibration
2013-06-08 23:31:16    --------    d-----w-    c:\windows\system32\tempdir
2013-06-08 23:31:15    4369408    ----a-w-    c:\windows\system32\pdftk.exe
2013-06-08 23:31:15    235008    ----a-w-    c:\windows\system32\office.exe
2013-06-08 23:31:15    1503232    ----a-w-    c:\windows\system32\ptj.exe
2013-06-08 23:31:15    1103360    ----a-w-    c:\windows\system32\cidfont.dll
2013-06-08 23:31:14    --------    d-----w-    c:\archivos de programa\office Convert Pdf to Jpg Jpeg Tiff Free
2013-06-02 22:49:02    165232    ----a-w-    c:\documents and settings\asakuraist\datos de programa\microsoft\virtual pc\VPCKeyboard.dll
2013-06-02 21:08:02    --------    d-----w-    c:\archivos de programa\Microsoft Virtual PC
2013-06-01 19:37:10    --------    d-----w-    c:\documents and settings\asakuraist\.VirtualBox
2013-06-01 19:35:15    188176    ----a-w-    c:\windows\system32\drivers\VBoxDrv.sys
2013-06-01 19:35:06    94480    ----a-w-    c:\windows\system32\drivers\VBoxUSBMon.sys
2013-06-01 02:26:56    444952    ----a-w-    c:\windows\system32\wrap_oal.dll
2013-06-01 02:26:56    --------    d-----w-    c:\archivos de programa\OpenAL
2013-06-01 02:26:55    109080    ----a-w-    c:\windows\system32\OpenAL32.dll
.
==================== Find3M  ====================
.
2013-06-29 23:27:53    867240    ----a-w-    c:\windows\system32\npDeployJava1.dll
2013-06-29 23:27:53    789416    ----a-w-    c:\windows\system32\deployJava1.dll
2013-06-12 08:02:16    692104    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2013-06-12 08:02:15    71048    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-12 08:02:13    9089416    ----a-w-    c:\windows\system32\FlashPlayerInstaller.exe
2013-05-31 16:43:20    240048    ----a-w-    c:\windows\system32\SymVPN.dll
2013-05-31 14:52:36    44424    ----a-w-    c:\windows\system32\sbbd.exe
2013-05-31 14:52:36    13560    ----a-w-    c:\windows\system32\drivers\gfibto.sys
2013-05-10 23:42:26    755708    ----a-w-    c:\windows\RON 2010 ENGLISH DL Uninstaller.exe
2013-05-09 18:58:09    466008    ----a-w-    c:\windows\system32\drivers\sptd.sys
2013-05-08 23:06:03    0    ----a-w-    c:\windows\ativpsrm.bin
2013-04-29 18:00:00    112640    ----a-w-    c:\windows\system32\ff_vfw.dll
2013-04-12 15:33:02    104720    ----a-w-    c:\windows\system32\drivers\VBoxNetAdp.sys
2013-04-12 15:32:06    115984    ----a-w-    c:\windows\system32\drivers\VBoxNetFlt.sys
2013-04-12 15:32:04    174864    ----a-w-    c:\windows\system32\VBoxNetFltNobj.dll
.
============= FINISH: 21:50:08,43 ===============
 

and here is the Attach.txt log:

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 30/06/2013 21:02:31
System Uptime: 30/06/2013 21:13:24 (0 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. |  | G41MT-ES2L
Processor: Procesador Intel Pentium III Xeon | Socket 775 | 2699/200mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 932 GiB total, 779,567 GiB free.
D: is FIXED (NTFS) - 466 GiB total, 401,447 GiB free.
E: is FIXED (NTFS) - 149 GiB total, 44,401 GiB free.
F: is CDROM (CDFS)
G: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Controladora de bus SM
Device ID: PCI\VEN_8086&DEV_27DA&SUBSYS_50011458&REV_01\3&13C0B0C5&0&FB
Manufacturer:
Name: Controladora de bus SM
PNP Device ID: PCI\VEN_8086&DEV_27DA&SUBSYS_50011458&REV_01\3&13C0B0C5&0&FB
Service:
.
Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft ADPCM Audio CODEC
Device ID: ROOT\MEDIA\0000
Manufacturer: Unknown
Name: Microsoft ADPCM Audio CODEC
PNP Device ID: ROOT\MEDIA\0000
Service:
.
==== System Restore Points ===================
.
RP1: 30/06/2013 21:18:00 - Punto de control del sistema
RP2: 30/06/2013 21:29:13 - Instalado Kaspersky Internet Security 2012.
.
==== Installed Programs ======================
.
1034
4shared Desktop
7-Zip 9.20
Actualización de seguridad para Windows XP (KB923789)
Ad-Aware Browsing Protection
Adobe Flash Player 11 Plugin
AFA-PES PES6 Apertura 2010
Aplicación para detectar Winamp
ATI - Utilidad de desinstalación de software
ATI AVIVO Codecs
ATI Catalyst Control Center
ATI Display Driver
ATI Problem Report Wizard
µTorrent
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center HydraVision Full
Catalyst Control Center Localization All
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
DAEMON Tools Lite
Football Manager 2013
Google Chrome
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Java 7 Update 25
Java Auto Updater
JDownloader 0.9
K-Lite Mega Codec Pack 9.9.0
Kaspersky Internet Security 2012
Malwarebytes Anti-Malware versión 1.75.0.1300
Microsoft .NET Compact Framework 1.0 SP3
Microsoft .NET Compact Framework 2.0 SP2
Microsoft .NET Compact Framework 3.5
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile ESN Language Pack
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended ESN Language Pack
Microsoft AppLocale
Microsoft Virtual PC 2007
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Windows Application Compatibility Database
Mozilla Firefox 21.0 (x86 es-AR)
Mozilla Maintenance Service
MSXML 6.0 Parser (KB927977)
NEC Electronics USB 3.0 Host Controller Driver
office Convert Pdf to Jpg Jpeg Tiff Free 6.5
OpenAL
Oracle VM VirtualBox 4.2.12
Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN
Paquete de idioma de Microsoft .NET Framework 4 Extended ESN
Pro Evolution Soccer 6
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek HDMI Audio Driver for ATI
Realtek High Definition Audio Driver
Rulers Of Nations
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Skins
Steam
STEINS;GATE
System Requirements Lab CYRI
Twin USB Vibration Gamepad
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
USB Game Controller
WebFldrs XP
Winamp
WindowBlinds
Windows Media Format Runtime
WinDS PRO 2013.6.0
WinDS PRO Apps 1.4
Xvid 1.2.2 final uninstall
Xvid Video Codec
.
==== Event Viewer Messages From Past Week ========
.
30/06/2013 21:13:55, ERROR: sptd [4]  - El controlador detectó un error interno en la estructura de datos de .
30/06/2013 21:02:59, ERROR: Setup [60055]  - El programa de instalación de Windows encontró errores no graves durante la instalación. Para obtener más información, compruebe el archivo setuperr.log que se encuentra en su carpeta Windows.
29/06/2013 20:26:41, ERROR: Service Control Manager [7034]  - El servicio Java Quick Starter se terminó de manera inesperada. Esto ha sucedido 1 veces.
.
==== End Of File ===========================
 

and my install is of a Spanish regionalization Windows XP SP3

Link to post
Share on other sites
Psychotic

Psychotic

Posted
Posted

Hi there,
my name is Marius and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully.

  • First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
  • My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

 
 
 
Please download Gmer from here by clicking on the "Download EXE" Button.
  • Double click on the randomly named GMER.exe. If asked to allow gmer.sys driver to load, please consent.
  • If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following ...
    • Sections
    • IAT/EAT
    • Show All ( should be unchecked by default )

    [*]Leave everything else as it is. [*]Close all other running programs as well as your Browser. [*]Click the Scan button & wait for it to finish. [*]Once done click on the Save.. button, and in the File name area, type in "ark.txt" or it will save as a .log file which cannot be uploaded to your post. [*]Save it where you can easily find it, such as your desktop. [*]Please post the content of the ark.txt here.


**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.