Worm/rootkit i think. help

[Bloodluster]

I've followed to stickied instructions so far:

DDS (Ver_10-03-17.01) - NTFSX64

Run by Beryl at 14:55:00.95 on Fri 09/10/2010

Internet Explorer: 8.0.6001.18943 BrowserJavaVersion: 1.6.0_17

Microsoft

Attach.zip

[screen317]

Hi,

What evidence of malware do you see and what symptoms of infection are you currently experiencing?

• Download the file TDSSKiller.zip and extract it into a folder on the infected PC.
  
• Execute the file TDSSKiller.exe by double-clicking on it.
  
• Wait for the scan and disinfection process to be over.
  
• When its work is over, the utility prompts for a reboot to complete the disinfection.
  

By default, the utility outputs runtime log into the system disk root directory (the disk where the operating system is installed, C:\ as a rule).

The log is like UtilityName.Version_Date_Time_log.txt.

for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt.

Please post that log here.

[Bloodluster]

Thanks for the reply!

About a week ago I accidentally clicked on an ad and got swamped with all sorts of stuff, Norton 360 popped up with: Trojan Horse, Trojan.Gen, Trojan.FakeAV!gen35, Packed.Coravint!gen2, SecurityToolFraud. Ever since my system has been slower, lower fps in all my games and slowdowns every once in a while. Norton pops up every once in a while with varying things. I downloaded IObit security 360 and it seemed to clear out a trojan.dropper that norton didn't find but I think there's still something going on. Yesterday many of my desktop shortcuts didn't work, I couldn't access the control panel, and I had to hold the power button for 5 seconds to shutdown. After reboot things were ok.

2010/09/10 19:22:36.0839 TDSS rootkit removing tool 2.4.2.1 Sep 7 2010 14:43:44

2010/09/10 19:22:36.0839 ================================================================================

2010/09/10 19:22:36.0839 SystemInfo:

2010/09/10 19:22:36.0839

2010/09/10 19:22:36.0839 OS Version: 6.0.6002 ServicePack: 2.0

2010/09/10 19:22:36.0839 Product type: Workstation

2010/09/10 19:22:36.0840 ComputerName: BERYL-PC

2010/09/10 19:22:36.0840 UserName: Beryl

2010/09/10 19:22:36.0840 Windows directory: C:\Windows

2010/09/10 19:22:36.0840 System windows directory: C:\Windows

2010/09/10 19:22:36.0840 Running under WOW64

2010/09/10 19:22:36.0840 Processor architecture: Intel x64

2010/09/10 19:22:36.0840 Number of processors: 4

2010/09/10 19:22:36.0840 Page size: 0x1000

2010/09/10 19:22:36.0840 Boot type: Normal boot

2010/09/10 19:22:36.0840 ================================================================================

2010/09/10 19:22:36.0840 Utility is running under WOW64

2010/09/10 19:22:37.0201 Initialize success

2010/09/10 19:22:48.0341 ================================================================================

2010/09/10 19:22:48.0341 Scan started

2010/09/10 19:22:48.0341 Mode: Manual;

2010/09/10 19:22:48.0341 ================================================================================

2010/09/10 19:22:49.0039 61883 (78e902fb660bd5003fe726b9bef300b6) C:\Windows\system32\DRIVERS\61883.sys

2010/09/10 19:22:49.0129 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys

2010/09/10 19:22:49.0241 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys

2010/09/10 19:22:49.0312 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys

2010/09/10 19:22:49.0369 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys

2010/09/10 19:22:49.0413 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys

2010/09/10 19:22:49.0497 AFD (12415ccfd3e7cec55b5184e67b039fe4) C:\Windows\system32\drivers\afd.sys

2010/09/10 19:22:49.0625 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys

2010/09/10 19:22:49.0707 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys

2010/09/10 19:22:49.0760 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys

2010/09/10 19:22:49.0812 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys

2010/09/10 19:22:49.0856 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys

2010/09/10 19:22:49.0955 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys

2010/09/10 19:22:50.0006 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys

2010/09/10 19:22:50.0073 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys

2010/09/10 19:22:50.0111 atapi (1898fae8e07d97f2f6c2d5326c633fac) C:\Windows\system32\drivers\atapi.sys

2010/09/10 19:22:50.0164 Avc (295fa2878ff499c0edfa0ebcc8c6ec66) C:\Windows\system32\DRIVERS\avc.sys

2010/09/10 19:22:50.0270 BHDrvx64 (4d7f8401eae7eaa4ef702fa6f4153269) C:\Windows\System32\Drivers\N360x64\0308000.029\BHDrvx64.sys

2010/09/10 19:22:50.0345 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys

2010/09/10 19:22:50.0418 bowser (8b2b19031d0aeade6e1b933df1acba7e) C:\Windows\system32\DRIVERS\bowser.sys

2010/09/10 19:22:50.0474 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys

2010/09/10 19:22:50.0521 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys

2010/09/10 19:22:50.0589 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys

2010/09/10 19:22:50.0640 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys

2010/09/10 19:22:50.0694 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys

2010/09/10 19:22:50.0743 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys

2010/09/10 19:22:50.0776 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys

2010/09/10 19:22:50.0851 CAXHWBS2 (6c2dd66a3db32450d661ba89b18b1941) C:\Windows\system32\DRIVERS\CAXHWBS2.sys

2010/09/10 19:22:50.0990 ccHP (1b79efc84b924a6932bb9d2a549de5c9) C:\Windows\System32\Drivers\N360x64\0308000.029\ccHPx64.sys

2010/09/10 19:22:51.0053 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys

2010/09/10 19:22:51.0122 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys

2010/09/10 19:22:51.0202 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys

2010/09/10 19:22:51.0266 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys

2010/09/10 19:22:51.0361 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys

2010/09/10 19:22:51.0424 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys

2010/09/10 19:22:51.0537 cpuz132 (c9c25778efe890baa4087e32937016a0) C:\Windows\system32\drivers\cpuz132_x64.sys

2010/09/10 19:22:51.0632 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys

2010/09/10 19:22:51.0724 DfsC (36cd31121f228e7e79bae60aa45764c6) C:\Windows\system32\Drivers\dfsc.sys

2010/09/10 19:22:51.0820 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys

2010/09/10 19:22:51.0921 Dot4 (74c02b1717740c3b8039539e23e4b53f) C:\Windows\system32\DRIVERS\Dot4.sys

2010/09/10 19:22:51.0993 Dot4Print (08321d1860235bf42cf2854234337aea) C:\Windows\system32\DRIVERS\Dot4Prt.sys

2010/09/10 19:22:52.0044 dot4usb (4adccf0124f2b6911d3786a5d0e779e5) C:\Windows\system32\DRIVERS\dot4usb.sys

2010/09/10 19:22:52.0133 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys

2010/09/10 19:22:52.0340 DXGKrnl (1d96e28ebcd96ad1b44a3fd02ca6433d) C:\Windows\System32\drivers\dxgkrnl.sys

2010/09/10 19:22:52.0436 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys

2010/09/10 19:22:52.0489 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys

2010/09/10 19:22:52.0600 eeCtrl (066108ae4c35835081598827a1a7d08d) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

2010/09/10 19:22:52.0737 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys

2010/09/10 19:22:52.0815 ENTECH64 (12c061d9f9621be916d58191872ec281) C:\Windows\system32\DRIVERS\ENTECH64.sys

2010/09/10 19:22:52.0958 EraserUtilRebootDrv (12866876e3851f1e5d462b2a83e25578) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

2010/09/10 19:22:53.0069 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys

2010/09/10 19:22:53.0200 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys

2010/09/10 19:22:53.0314 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys

2010/09/10 19:22:53.0403 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys

2010/09/10 19:22:53.0445 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys

2010/09/10 19:22:53.0492 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys

2010/09/10 19:22:53.0579 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys

2010/09/10 19:22:53.0715 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys

2010/09/10 19:22:53.0840 fssfltr (0e330639b19feb8de20b685576d9bf9d) C:\Windows\system32\DRIVERS\fssfltr.sys

2010/09/10 19:22:53.0912 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys

2010/09/10 19:22:53.0958 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys

2010/09/10 19:22:54.0030 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

2010/09/10 19:22:54.0250 HCW85BDA (98405343d7dcd330fe1b08c8f4c3900c) C:\Windows\system32\drivers\HCW85BDA.sys

2010/09/10 19:22:54.0408 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys

2010/09/10 19:22:54.0460 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys

2010/09/10 19:22:54.0516 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys

2010/09/10 19:22:54.0583 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys

2010/09/10 19:22:54.0691 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys

2010/09/10 19:22:54.0772 HSF_DP (3a9291d4047935f776db8af831ab9ba6) C:\Windows\system32\DRIVERS\CAX_DP.sys

2010/09/10 19:22:54.0866 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys

2010/09/10 19:22:54.0964 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys

2010/09/10 19:22:55.0025 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys

2010/09/10 19:22:55.0080 iaStor (8eacf469269fb1509561961a3188f670) C:\Windows\system32\DRIVERS\iaStor.sys

2010/09/10 19:22:55.0163 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys

2010/09/10 19:22:55.0338 IDSVia64 (c3292140bf458b46cf8abbfd7e177bbe) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20100909.001\IDSvia64.sys

2010/09/10 19:22:55.0476 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys

2010/09/10 19:22:55.0656 IntcAzAudAddService (bfbabcb231628a4551dbb10d0ea25d62) C:\Windows\system32\drivers\RTKVHD64.sys

2010/09/10 19:22:55.0793 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\DRIVERS\intelide.sys

2010/09/10 19:22:55.0830 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys

2010/09/10 19:22:55.0906 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys

2010/09/10 19:22:56.0010 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys

2010/09/10 19:22:56.0060 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys

2010/09/10 19:22:56.0159 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys

2010/09/10 19:22:56.0238 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys

2010/09/10 19:22:56.0305 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys

2010/09/10 19:22:56.0389 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys

2010/09/10 19:22:56.0449 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys

2010/09/10 19:22:56.0510 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys

2010/09/10 19:22:56.0543 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys

2010/09/10 19:22:56.0594 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys

2010/09/10 19:22:56.0679 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys

2010/09/10 19:22:56.0749 LGBusEnum (db164eb571fd118d277d939510b0f562) C:\Windows\system32\drivers\LGBusEnum.sys

2010/09/10 19:22:56.0816 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys

2010/09/10 19:22:57.0032 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys

2010/09/10 19:22:57.0202 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys

2010/09/10 19:22:57.0492 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys

2010/09/10 19:22:57.0541 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys

2010/09/10 19:22:57.0586 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys

2010/09/10 19:22:57.0694 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys

2010/09/10 19:22:57.0782 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys

2010/09/10 19:22:57.0875 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys

2010/09/10 19:22:57.0915 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys

2010/09/10 19:22:57.0946 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys

2010/09/10 19:22:57.0992 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys

2010/09/10 19:22:58.0018 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys

2010/09/10 19:22:58.0072 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys

2010/09/10 19:22:58.0127 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys

2010/09/10 19:22:58.0170 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys

2010/09/10 19:22:58.0232 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys

2010/09/10 19:22:58.0299 mrxsmb (d58d129e26705e83a4deba7177eb7972) C:\Windows\system32\DRIVERS\mrxsmb.sys

2010/09/10 19:22:58.0358 mrxsmb10 (d5be5c14e0f1dc489f5bb2a67983f630) C:\Windows\system32\DRIVERS\mrxsmb10.sys

2010/09/10 19:22:58.0402 mrxsmb20 (09a2990c3b293c212816c9bc0d7c200e) C:\Windows\system32\DRIVERS\mrxsmb20.sys

2010/09/10 19:22:58.0490 msahci (1ac860612b85d8e85ee257d372e39f4d) C:\Windows\system32\drivers\msahci.sys

2010/09/10 19:22:58.0539 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys

2010/09/10 19:22:58.0638 MSDV (df674ba7da5a4753d839a905b66d2fd9) C:\Windows\system32\DRIVERS\msdv.sys

2010/09/10 19:22:58.0694 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys

2010/09/10 19:22:58.0735 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys

2010/09/10 19:22:58.0799 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys

2010/09/10 19:22:58.0860 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys

2010/09/10 19:22:58.0905 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys

2010/09/10 19:22:58.0967 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys

2010/09/10 19:22:59.0052 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys

2010/09/10 19:22:59.0150 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys

2010/09/10 19:22:59.0211 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys

2010/09/10 19:22:59.0282 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys

2010/09/10 19:22:59.0477 NAVENG (a507b7d1c5f957a1aab98794eb377654) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100910.023\ENG64.SYS

2010/09/10 19:22:59.0552 NAVEX15 (0d7d6c0fd46f12780c3bab6af891ede3) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100910.023\EX64.SYS

2010/09/10 19:22:59.0690 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys

2010/09/10 19:22:59.0765 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys

2010/09/10 19:22:59.0794 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys

2010/09/10 19:22:59.0855 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys

2010/09/10 19:22:59.0934 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys

2010/09/10 19:22:59.0984 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys

2010/09/10 19:23:00.0032 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys

2010/09/10 19:23:00.0134 netr7364 (b69d6bb680c85243af0263b3e01d5e77) C:\Windows\system32\DRIVERS\netr7364.sys

2010/09/10 19:23:00.0225 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys

2010/09/10 19:23:00.0289 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys

2010/09/10 19:23:00.0346 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys

2010/09/10 19:23:00.0423 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys

2010/09/10 19:23:00.0485 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys

2010/09/10 19:23:00.0770 nvlddmkm (e28f0f5f4b9c5d61f41e5e01b01c0530) C:\Windows\system32\DRIVERS\nvlddmkm.sys

2010/09/10 19:23:01.0252 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys

2010/09/10 19:23:01.0310 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys

2010/09/10 19:23:01.0378 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys

2010/09/10 19:23:01.0487 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys

2010/09/10 19:23:01.0597 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys

2010/09/10 19:23:01.0653 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys

2010/09/10 19:23:01.0735 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys

2010/09/10 19:23:01.0807 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys

2010/09/10 19:23:01.0854 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys

2010/09/10 19:23:01.0916 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys

2010/09/10 19:23:02.0009 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys

2010/09/10 19:23:02.0058 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys

2010/09/10 19:23:02.0128 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys

2010/09/10 19:23:02.0222 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys

2010/09/10 19:23:02.0302 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys

2010/09/10 19:23:02.0357 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys

2010/09/10 19:23:02.0399 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys

2010/09/10 19:23:02.0457 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys

2010/09/10 19:23:02.0553 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys

2010/09/10 19:23:02.0606 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys

2010/09/10 19:23:02.0664 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys

2010/09/10 19:23:02.0702 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys

2010/09/10 19:23:02.0851 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys

2010/09/10 19:23:02.0932 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys

2010/09/10 19:23:03.0035 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys

2010/09/10 19:23:03.0163 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys

2010/09/10 19:23:03.0269 RTL8169 (170a66dfaaa22358e08d6f4b38c8f3df) C:\Windows\system32\DRIVERS\Rtlh64.sys

2010/09/10 19:23:03.0366 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys

2010/09/10 19:23:03.0453 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

2010/09/10 19:23:03.0509 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys

2010/09/10 19:23:03.0553 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys

2010/09/10 19:23:03.0623 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys

2010/09/10 19:23:03.0695 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys

2010/09/10 19:23:03.0731 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys

2010/09/10 19:23:03.0767 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys

2010/09/10 19:23:03.0812 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys

2010/09/10 19:23:03.0882 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys

2010/09/10 19:23:03.0944 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys

2010/09/10 19:23:04.0006 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys

2010/09/10 19:23:04.0162 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys

2010/09/10 19:23:04.0261 sptd (9ab59cf736981ed1f83c6ab5faa8ba5c) C:\Windows\System32\Drivers\sptd.sys

2010/09/10 19:23:04.0493 SRTSP (9e399476e5d5e0d3c8822c857a7e9a9a) C:\Windows\System32\Drivers\N360x64\0308000.029\SRTSP64.SYS

2010/09/10 19:23:04.0844 SRTSPX (3d7717b582f0365e75071556936e5a6b) C:\Windows\system32\drivers\N360x64\0308000.029\SRTSPX64.SYS

2010/09/10 19:23:04.0978 srv (cb5bd298e62aed1b4af3cc44811a30a5) C:\Windows\system32\DRIVERS\srv.sys

2010/09/10 19:23:05.0098 srv2 (26cd9130775c59439b77ece2f6df9c4c) C:\Windows\system32\DRIVERS\srv2.sys

2010/09/10 19:23:05.0180 srvnet (caea15e0e52fb15a2c8b505643228057) C:\Windows\system32\DRIVERS\srvnet.sys

2010/09/10 19:23:05.0263 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys

2010/09/10 19:23:05.0308 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys

2010/09/10 19:23:05.0403 SymEFA (4f87bb5389a93778ebc363b28271a65b) C:\Windows\system32\drivers\N360x64\0308000.029\SYMEFA64.SYS

2010/09/10 19:23:05.0515 SymEvent (7e4d281982e19abd06728c7ee9ac40a8) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2010/09/10 19:23:05.0593 SYMFW (6320bf296b62d324890866a13a296fc0) C:\Windows\System32\Drivers\N360x64\0308000.029\SYMFW.SYS

2010/09/10 19:23:05.0685 SymIM (212bbf5a964513980d5de9397381534f) C:\Windows\system32\DRIVERS\SymIMv.sys

2010/09/10 19:23:05.0750 SYMNDISV (21dcc664a1e0af7bf4c8aded8c9ff9d5) C:\Windows\System32\Drivers\N360x64\0308000.029\SYMNDISV.SYS

2010/09/10 19:23:05.0787 SYMTDI (56a1cb71b8bb7ba9c41d2c9706df43cd) C:\Windows\System32\Drivers\N360x64\0308000.029\SYMTDI.SYS

2010/09/10 19:23:05.0877 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys

2010/09/10 19:23:05.0916 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys

2010/09/10 19:23:06.0018 Tcpip (973658a2ea9c06b2976884b9046dfc6c) C:\Windows\system32\drivers\tcpip.sys

2010/09/10 19:23:06.0143 Tcpip6 (973658a2ea9c06b2976884b9046dfc6c) C:\Windows\system32\DRIVERS\tcpip.sys

2010/09/10 19:23:06.0188 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys

2010/09/10 19:23:06.0275 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys

2010/09/10 19:23:06.0309 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys

2010/09/10 19:23:06.0357 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys

2010/09/10 19:23:06.0462 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys

2010/09/10 19:23:06.0524 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys

2010/09/10 19:23:06.0583 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys

2010/09/10 19:23:06.0624 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys

2010/09/10 19:23:06.0703 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys

2010/09/10 19:23:06.0774 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys

2010/09/10 19:23:06.0874 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys

2010/09/10 19:23:06.0963 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys

2010/09/10 19:23:07.0011 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys

2010/09/10 19:23:07.0057 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys

2010/09/10 19:23:07.0104 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys

2010/09/10 19:23:07.0161 USBAAPL64 (9e58997a211c8c9ac9e6cffa53614a73) C:\Windows\system32\Drivers\usbaapl64.sys

2010/09/10 19:23:07.0233 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys

2010/09/10 19:23:07.0375 usbcir (8c39d53e1a343f4c47ee8f3c052126d8) C:\Windows\system32\DRIVERS\usbcir.sys

2010/09/10 19:23:07.0461 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys

2010/09/10 19:23:07.0792 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys

2010/09/10 19:23:07.0885 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys

2010/09/10 19:23:07.0974 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys

2010/09/10 19:23:08.0051 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS

2010/09/10 19:23:08.0126 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys

2010/09/10 19:23:08.0173 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys

2010/09/10 19:23:08.0222 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys

2010/09/10 19:23:08.0265 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys

2010/09/10 19:23:08.0323 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys

2010/09/10 19:23:08.0405 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys

2010/09/10 19:23:08.0484 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys

2010/09/10 19:23:08.0581 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys

2010/09/10 19:23:08.0646 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys

2010/09/10 19:23:08.0712 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys

2010/09/10 19:23:08.0762 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys

2010/09/10 19:23:08.0796 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys

2010/09/10 19:23:08.0853 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys

2010/09/10 19:23:08.0947 winachsf (a53cde6beea165fe9b430476eede3c54) C:\Windows\system32\DRIVERS\CAX_CNXT.sys

2010/09/10 19:23:09.0072 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\drivers\wmiacpi.sys

2010/09/10 19:23:09.0155 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys

2010/09/10 19:23:09.0218 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys

2010/09/10 19:23:09.0299 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys

2010/09/10 19:23:09.0349 XAudio (f22e443518bc599d12888daf292a56d8) C:\Windows\system32\DRIVERS\xaudio64.sys

2010/09/10 19:23:09.0419 ================================================================================

2010/09/10 19:23:09.0419 Scan finished

2010/09/10 19:23:09.0419 ================================================================================

[screen317]

Hi,

Next, please run a free online scan with the ESET Online Scanner

Note: You will need to use Internet Explorer for this scan.

1. Tick the box next to YES, I accept the Terms of Use.
   
2. Click Start
   
3. When asked, allow the ActiveX control to install
   
4. Click Start
   
5. Make sure that the options Remove found threats and the option Scan unwanted applications is checked
   
6. Click Scan
   Wait for the scan to finish
   
7. Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
   
8. Copy and paste that log as a reply to this topic
   

Next, download my Security Check from here or here.

• Save it to your Desktop.
  
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.
  

Let me know how things are running now and what issues remain.

-screen317

[Bloodluster]

The ESET scan came up clean. The last few sessions seem to be working fine. I don't know why it says out of date service pack, I just did Windows Update and there's only a optional graphics driver that I don't want.

ESETSmartInstaller@High as CAB hook log:

OnlineScanner64.ocx - registred OK

OnlineScanner.ocx - registred OK

Results of screen317's Security Check version 0.99.5

Windows Vista (UAC is enabled)

Out of date service pack!!

Internet Explorer 8

``````````````````````````````

Antivirus/Firewall Check:

ESET Online Scanner v3

Norton 360

WMI entry may not exist for antivirus; attempting automatic update.

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

CCleaner

Java 6 Update 17

Java SE Runtime Environment 6 Update 1

Java 6 Update 3

Out of date Java installed!

Adobe Flash Player 10.1.82.76

Adobe Reader 9.3.3

Mozilla Firefox (3.6.9)

````````````````````````````````

Process Check:

objlist.exe by Laurent

Norton ccSvcHst.exe

````````````````````````````````

DNS Vulnerability Check:

GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````

[Bloodluster]

So I started up counterstrike:source and then my cpu usage went through the roof, I quit the game and in Processes Ststem NT Kernel & System is using 25% cpu all the time. Is is malware or something else?

[Bloodluster]

So I think it's spread to the other pc on the network. Should I not connect other computers to the network while the infected machines are running? My other computer did the same thing as this one with the no shortcuts working and I had to hold the power button down for 5 seconds to shut it down.

I did an IObit Security 360 scan on it and it found "Trojan.Generic F:\WINDOWS\system32\Drivers\Streamip.sys" and quarantined it, then I deleted it. I'll probably have to start a new thread for the 2nd machine or can you help with that one too?

[screen317]

Hi,

My apologies for the delay.

I recommend that you don't use IObit Security 360; read this for why:

http://forums.malwarebytes.org/index.php?showtopic=29681

Its detection was a false positive.

Please describe, in detail, what symptoms of infection you are currently experiencing.

[Bloodluster]

Whenever I leave my computer on, after a while I can't do anything on it. Whenever I click a .exe on my desktop it shows where the program is located and "The specified procedure could not be found." Like today, I left my pc on while I went to class, came home and had to hold the power button for 5 seconds to shut down. When I click on the windows button then to press the little arrow that opens the shut down, sleep etc menu nothing happens. I can't open up anything, no browsers, no directories. My pc upstairs has the same thing. No virus scans seem to be detecting anything.

Will whatever I have jump onto a flash drive? Should I not connect new computers to the network?

[Bloodluster]

Oh yeah, and on the first restart the norton 360 doesn't show up in the notification area, spybot-sd and iobit security 360 still show up though.

I won't uninstall iobit 360 until I find something else that will run alongside the other two, any recommendations?

[Bloodluster]

I started up my computer, logged in, and spybot-sd pops up with this:

Spebot - Search & Destroy has detected an important registry entry that has been changed.

Category: Browser Helper Object

Change: Value deleted

Entry: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}

If I click on info it says there isn't any, and I can't press Deny change, only Allow, so I did.

[screen317]

Hi,

My apologies for the delay..

Navigate to Start --> Control Panel --> Add or Remove Programs, and uninstall the following programs (if present):

Java

[Bloodluster]

Ok, here's the link: http://www.pcpitstop.com/betapit/sec.asp?conid=23885490

I had to uninstall Java 6 update 3 in safe mode, otherwise it would say "Error 1719 The windows installer service could not be accessed."

[Bloodluster]

So I left my pc on overnight and it did the same thing again with the hardly anything working.

If I open a directory, the screen goes black and a message show up "Logon process has failed to create the security options dialog. Failure - Security Options."

Different errors occur for different .exe's, some say "File system error: 65535", Word says "Microsoft word 12.0 There is not enough memory or disk space to run Word.", trying to run cmd.exe "The application failed to initialize properly. (0xc0000142)".

Others don't even show up with anything, like task manager, control panel, shutdown options, quicktime player and a few others.

After I restarted, the next time I restarted upon shutdown an error message came up "Access violation at address 719E4A25. Read of address 719E4A25."

[screen317]

Hi,

Click Start and type in cmd.exe; right-click cmd.exe and click Run as Admin...

In the black box that appears, enter this command exactly as shown:

chkdsk /r

Press Enter. When prompted, type Y and press Enter. Upon restart, a disk check will commence. Allow it to finish and note any messages it gives.

-screen317

[Bloodluster]

From the event viewer:

Checking file system on C:

The type of the file system is NTFS.

Volume label is HP.

A disk check has been scheduled.

Windows will now check the disk.

298816 file records processed. 1239 large file records processed. 0 bad file records processed. 0 EA records processed. 44 reparse records processed. 398830 index entries processed. 0 unindexed files processed. 298816 security descriptors processed. Cleaning up 926 unused index entries from index $SII of file 0x9.

Cleaning up 926 unused index entries from index $SDH of file 0x9.

Cleaning up 926 unused security descriptors.

50008 data files processed. CHKDSK is verifying Usn Journal...

34456880 USN bytes processed. Usn Journal verification completed.

CHKDSK is verifying file data (stage 4 of 5)...

298800 files processed. File data verification completed.

CHKDSK is verifying free space (stage 5 of 5)...

36106512 free clusters processed. Free space verification is complete.

Windows has checked the file system and found no problems.

722234173 KB total disk space.

577235176 KB in 246492 files.

144644 KB in 50009 indexes.

0 KB in bad sectors.

428301 KB in use by the system.

65536 KB occupied by the log file.

144426052 KB available on disk.

4096 bytes in each allocation unit.

180558543 total allocation units on disk.

36106513 allocation units available on disk.

Internal Info:

40 8f 04 00 40 86 04 00 67 f9 07 00 00 00 00 00 @...@...g.......

2f 07 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 /...,...........

30 c7 b4 77 00 00 00 00 50 23 fa ff 00 00 00 00 0..w....P#......

Windows has finished checking your disk.

Please wait while your computer restarts.

[screen317]

Do you have your Windows Vista CD?

[Bloodluster]

No, this is an oem HP machine and it didn't come with a disk. I can get a Windows 7 full install disk from my school for free, but I've never done a fresh OS install and I don't want to lose all my data.

[screen317]

Hi,

You can do an upgrade installation (instead of a format and installation) of Windows 7 which would preserve all of your data. At this point that seems like the best avenue, as that would most likely repair whatever corruption is causing these issues. Let me know if you would like to do that and I can provide help if need be.

-screen317

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!