ctfmon.exe

avon4u · May 4, 2011

Virus Alert

Application can't be started!

ctfmon.exe

The file is damaged

I try to open & scan Malwarebytes, but it won't open!

Help!

Every time I try window security alert, I get a Antivirus Protection Trial & asking to pay. I don't have the funds to pay!

avon4u · May 4, 2011

This is the log I got when when I ran Malwarebytes.+

-

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6485

Windows 5.1.2600 Service Pack 3 (Safe Mode)

Internet Explorer 8.0.6001.18702

5/3/2011 11:48:21 PM

mbam-log-2011-05-03 (23-48-21).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|)

Objects scanned: 232205

Time elapsed: 27 minute(s), 57 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 2

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 3

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pwcpihcj (Trojan.FakeAlertRP.Gen) -> Value: pwcpihcj -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> Quarantined and deleted successfully.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\documents and settings\charlotte\local settings\Temp\yihrxsnqq\xdysxtxxsik.exe (Trojan.FakeAlertRP.Gen) -> Quarantined and deleted successfully.

c:\documents and settings\charlotte\local settings\Temp\jar_cache5292311164582566603.tmp (Trojan.FakeAlertRP.Gen) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\null0.17119650553036403.exe (Trojan.FakeAlertRP.Gen) -> Quarantined and deleted successfully.

Also, I did a search results after Malwarebytes & found 3 items.

CTFMON.EXE - 0E17969B.pf

ctfmon

How do I remove these items from my computer!

Any help will be very appreciate!

screen317 · May 4, 2011

Hi and welcome to Malwarebytes.

ctfmon is a legitimate file; the malware is just trying to scare you. Don't pay for it!

Please update MBAM, run a Quick Scan, and post its log.

Next, download DDS by sUBs and save it to your Desktop.

Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

avon4u · May 4, 2011

Malwarebytes' Anti-Malware 1.50.1.1100 1st. Scanned

www.malwarebytes.org

Database version: 6507

Windows 5.1.2600 Service Pack 3 (Safe Mode)

Internet Explorer 8.0.6001.18702

5/4/2011 2:31:58 PM

mbam-log-2011-05-04 (14-31-58).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|)

Objects scanned: 233250

Time elapsed: 36 minute(s), 10 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

Database version: 6507 2nd scaned

Windows 5.1.2600 Service Pack 3 (Safe Mode)

Internet Explorer 8.0.6001.18702

5/4/2011 3:02:26 PM

mbam-log-2011-05-04 (15-02-26).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|)

Objects scanned: 233380

Time elapsed: 30 minute(s), 17 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

.

DDS (Ver_11-03-05.01) - NTFSx86 NETWORK

Run by Charlotte at 15:04:23.93 on Wed 05/04/2011

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1015.289 [GMT -7:00]

.

AV: AntiVir Desktop *Enabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}

AV: avast! Antivirus *Enabled/Outdated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

FW: Lavasoft Personal Firewall *Disabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\system32\svchost.exe -k netsvcs

svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

c:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Documents and Settings\Charlotte\Desktop\dds.scr

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2077543

uWindow Title = Windows Internet Explorer provided by MSN & Bing

uInternet Settings,ProxyOverride = <local>

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll

BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [spybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

uRun: [AROReminder] c:\program files\advanced registry optimizer\aro.exe -rem

uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background

mRun: [ehTray] c:\windows\ehome\ehtray.exe

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [Alcmtr] ALCMTR.EXE

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"

mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot

mRun: [WinPatrol] c:\program files\billp studios\winpatrol\winpatrol.exe -expressboot

mRun: [share-to-Web Namespace Daemon] c:\program files\hp\hp share-to-web\hpgs2wnd.exe

mRun: [<NO NAME>]

mRun: [lavasoftFeedBack] "c:\program files\lavasoft\personal firewall\feedback.exe" /dump:os_startup

mRun: [lavasoftMonitor] c:\progra~1\lavasoft\person~1\op_mon.exe /tray /noservice

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui

mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpimag~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\wirele~1.lnk - c:\program files\frys\fr-300usb reva\wirelesscm.exe

mPolicies-system: EnableLUA = 0 (0x0)

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL

Notify: igfxcui - igfxdev.dll

AppInit_DLLs: c:\progra~1\lavasoft\person~1\wl_hook.dll

SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

LSA: Authentication Packages = msv1_0 nwprovau

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\docume~1\charlo~1\applic~1\mozilla\firefox\profiles\gp0p4dt7.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2187784&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxps://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1296974667&rver=6.1.6206.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1

FF - prefs.js: keyword.URL - hxxp://www.rumo.com/?toolid=60195&p=

FF - prefs.js: network.proxy.type - 0

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\FFExternalAlert.dll

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}\components\RadioWMPCore.dll

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\{8734f68b-e9e9-403c-be81-284326b16987}\components\Engine.dll

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\{9e06d377-8c36-46df-9e57-0f6f3f5ee23e}\components\RadioWMPCore.dll

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\{9e06d377-8c36-46df-9e57-0f6f3f5ee23e}\components\RadioWMPCoreGecko19.dll

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\engine@conduit.com\components\RadioWMPCore.dll

FF - component: c:\documents and settings\charlotte\application data\mozilla\firefox\profiles\gp0p4dt7.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll

FF - plugin: c:\documents and settings\charlotte\local settings\application data\unity\webplayer\loader\npUnity3D32.dll

FF - plugin: c:\documents and settings\charlotte\local settings\application data\yahoo!\browserplus\2.9.8\plugins\npybrowserplus_2.9.8.dll

FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\google\google updater\2.4.1851.5542\npCIDetect14.dll

FF - plugin: c:\program files\google\update\1.3.21.53\npGoogleUpdate3.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

FF - Ext: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - %profile%\extensions\{038cb5c7-48ea-4af9-94e0-a1646542e62b}

FF - Ext: Pink Ribbon Toolbar: {8734f68b-e9e9-403c-be81-284326b16987} - %profile%\extensions\{8734f68b-e9e9-403c-be81-284326b16987}

FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com

FF - Ext: EasyHits4U Community Toolbar: {9e06d377-8c36-46df-9e57-0f6f3f5ee23e} - %profile%\extensions\{9e06d377-8c36-46df-9e57-0f6f3f5ee23e}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff

.

---- FIREFOX POLICIES ----

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

============= SERVICES / DRIVERS ===============

.

R3 afw;Lavasoft firewall driver;c:\windows\system32\drivers\afw.sys [2010-5-6 206400]

R3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\drivers\RTL8192su.sys [2011-2-25 588032]

S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-5-3 441176]

S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-5-3 307288]

S1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2011-5-4 11608]

S1 MpKsl98b71f87;MpKsl98b71f87;\??\c:\windows\system32\mpenginestore\mpksl98b71f87.sys --> c:\windows\system32\mpenginestore\MpKsl98b71f87.sys [?]

S1 SandBox;SandBox;c:\windows\system32\drivers\SandBox.sys [2010-5-6 449184]

S1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2008-12-22 12872]

S1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2008-12-22 67656]

S2 acssrv;Lavasoft Client Security Service;c:\progra~1\lavasoft\person~1\acs.exe [2010-5-6 1171456]

S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2011-5-4 136360]

S2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2011-5-4 269480]

S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-5-3 19544]

S2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-5-3 42184]

S2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2011-5-4 61960]

S2 gupdate1c991553c784072;Google Update Service (gupdate1c991553c784072);c:\program files\google\update\GoogleUpdate.exe [2009-2-17 133104]

S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-1-10 993848]

S2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-1-10 399416]

S2 WLNdis50;Wireless Lan NDIS Protocol I/O Control;c:\windows\system32\drivers\WLNdis50.sys [2011-2-25 20480]

S3 AVFSFilter;AVFSFilter;c:\windows\system32\drivers\avfsfilter.sys --> c:\windows\system32\drivers\avfsfilter.sys [?]

S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]

S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2008-12-22 12872]

S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2009-2-17 133104]

.

=============== Created Last 30 ================

.

2011-05-04 19:08:11 -------- d-----w- c:\docume~1\charlo~1\applic~1\Avira

2011-05-04 19:04:36 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2011-05-04 19:04:35 -------- d-----w- c:\program files\Avira

2011-05-04 19:04:35 -------- d-----w- c:\docume~1\alluse~1\applic~1\Avira

2011-05-04 05:14:51 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2011-05-04 05:14:33 40112 ----a-w- c:\windows\avastSS.scr

2011-05-04 05:14:07 -------- d-----w- c:\program files\AVAST Software

2011-05-04 05:14:07 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVAST Software

2011-04-14 10:39:02 103864 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll

2011-04-10 20:38:18 -------- d-----w- c:\docume~1\charlo~1\applic~1\vmntemplate

2011-04-10 20:38:02 -------- d-----w- c:\docume~1\charlo~1\applic~1\jobstoolbar

2011-04-10 20:37:50 -------- d-----w- c:\program files\jobstoolbar

.

==================== Find3M ====================

.

2011-03-07 05:33:50 692736 ----a-w- c:\windows\system32\inetcomm.dll

2011-03-04 06:37:06 420864 ----a-w- c:\windows\system32\vbscript.dll

2011-03-03 13:21:11 1857920 ----a-w- c:\windows\system32\win32k.sys

2011-02-22 23:06:29 916480 ----a-w- c:\windows\system32\wininet.dll

2011-02-22 23:06:29 43520 ------w- c:\windows\system32\licmgr10.dll

2011-02-22 23:06:29 1469440 ------w- c:\windows\system32\inetcpl.cpl

2011-02-22 11:41:59 385024 ------w- c:\windows\system32\html.iec

2011-02-17 12:32:12 5120 ----a-w- c:\windows\system32\xpsp4res.dll

2011-02-15 12:56:39 290432 ----a-w- c:\windows\system32\atmfd.dll

2011-02-08 13:33:55 978944 ----a-w- c:\windows\system32\mfc42.dll

2011-02-08 13:33:55 974848 ----a-w- c:\windows\system32\mfc42u.dll

.

============= FINISH: 15:05:01.31 ===============

DDS 2nd Scanned:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_11-03-05.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 12/5/2008 3:59:29 PM

System Uptime: 5/4/2011 12:19:47 PM (3 hours ago)

.

Motherboard: ASUSTeK Computer INC. | | P5GC-MX

Processor: Intel Pentium II processor | LGA 775 | 1799/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 186 GiB total, 156.147 GiB free.

D: is CDROM ()

E: is Removable

F: is Removable

G: is Removable

H: is Removable

.

==== Disabled Device Manager Items =============

.

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description: PCI Simple Communications Controller

Device ID: PCI\VEN_11C1&DEV_0620&SUBSYS_062011C1&REV_00\4&CF81C54&0&00F0

Manufacturer:

Name: PCI Simple Communications Controller

PNP Device ID: PCI\VEN_11C1&DEV_0620&SUBSYS_062011C1&REV_00\4&CF81C54&0&00F0

Service:

.

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}

Description:

Device ID: ACPI\ATK0110\1010110

Manufacturer:

Name:

PNP Device ID: ACPI\ATK0110\1010110

Service:

.

==== System Restore Points ===================

.

RP826: 1/29/2011 3:00:16 PM - Software Distribution Service 3.0

RP827: 1/30/2011 3:00:27 PM - Software Distribution Service 3.0

RP828: 1/31/2011 3:00:25 PM - Software Distribution Service 3.0

RP829: 1/31/2011 6:54:26 PM - Software Distribution Service 3.0

RP830: 2/1/2011 3:00:16 PM - Software Distribution Service 3.0

RP831: 2/2/2011 3:00:28 PM - Software Distribution Service 3.0

RP832: 2/3/2011 3:00:37 PM - Software Distribution Service 3.0

RP833: 2/3/2011 11:39:54 PM - Installed SPYWAREfighter

RP834: 2/4/2011 3:00:18 PM - Software Distribution Service 3.0

RP835: 2/5/2011 3:00:32 PM - Software Distribution Service 3.0

RP836: 2/6/2011 3:00:34 PM - Software Distribution Service 3.0

RP837: 2/7/2011 3:00:29 PM - Software Distribution Service 3.0

RP838: 2/8/2011 3:00:18 PM - Software Distribution Service 3.0

RP839: 2/9/2011 3:01:14 PM - Software Distribution Service 3.0

RP840: 2/10/2011 12:53:56 AM - Software Distribution Service 3.0

RP841: 2/10/2011 3:00:33 PM - Software Distribution Service 3.0

RP842: 2/11/2011 12:55:08 AM - Software Distribution Service 3.0

RP843: 2/11/2011 3:00:18 PM - Software Distribution Service 3.0

RP844: 2/12/2011 3:00:23 PM - Software Distribution Service 3.0

RP845: 2/13/2011 3:00:26 PM - Software Distribution Service 3.0

RP846: 2/14/2011 3:00:26 PM - Software Distribution Service 3.0

RP847: 2/15/2011 1:43:57 AM - Software Distribution Service 3.0

RP848: 2/15/2011 3:00:21 PM - Software Distribution Service 3.0

RP849: 2/16/2011 3:00:17 PM - Software Distribution Service 3.0

RP850: 2/17/2011 3:01:44 PM - Software Distribution Service 3.0

RP851: 2/18/2011 10:59:41 AM - Installed Fry's Wireless N USB Adapter FR-300USB

RP852: 2/18/2011 3:00:16 PM - Software Distribution Service 3.0

RP853: 2/19/2011 3:00:17 PM - Software Distribution Service 3.0

RP854: 2/20/2011 11:07:09 AM - Software Distribution Service 3.0

RP855: 2/20/2011 3:00:18 PM - Software Distribution Service 3.0

RP856: 2/21/2011 3:00:19 PM - Software Distribution Service 3.0

RP857: 2/22/2011 3:00:20 PM - Software Distribution Service 3.0

RP858: 2/23/2011 3:00:22 PM - Software Distribution Service 3.0

RP859: 2/24/2011 3:01:55 PM - Software Distribution Service 3.0

RP860: 2/25/2011 11:05:10 AM - Software Distribution Service 3.0

RP861: 2/25/2011 11:55:45 AM - Removed Fry's Wireless N USB Adapter FR-300USB

RP862: 2/25/2011 11:57:31 AM - Installed Fry's Wireless N USB Adapter FR-300USB

RP863: 2/25/2011 11:57:53 AM - Unsigned driver install

RP864: 2/25/2011 12:44:49 PM - Removed Fry's Wireless N USB Adapter FR-300USB

RP865: 2/25/2011 12:51:22 PM - Installed Fry's Wireless N USB Adapter FR-300USB

RP866: 2/25/2011 12:51:34 PM - Unsigned driver install

RP867: 2/25/2011 3:00:15 PM - Software Distribution Service 3.0

RP868: 2/26/2011 3:00:21 PM - Software Distribution Service 3.0

RP869: 2/27/2011 3:00:25 PM - Software Distribution Service 3.0

RP870: 2/28/2011 3:00:19 PM - Software Distribution Service 3.0

RP871: 3/1/2011 3:00:25 PM - Software Distribution Service 3.0

RP872: 3/3/2011 3:00:28 PM - Software Distribution Service 3.0

RP873: 3/4/2011 3:00:23 PM - Software Distribution Service 3.0

RP874: 3/5/2011 3:00:36 PM - Software Distribution Service 3.0

RP875: 3/6/2011 3:01:19 PM - Software Distribution Service 3.0

RP876: 3/7/2011 3:00:23 PM - Software Distribution Service 3.0

RP877: 3/8/2011 3:00:50 PM - Software Distribution Service 3.0

RP878: 3/9/2011 1:51:42 AM - Software Distribution Service 3.0

RP879: 3/9/2011 3:00:25 PM - Software Distribution Service 3.0

RP880: 3/10/2011 3:00:19 PM - Software Distribution Service 3.0

RP881: 3/11/2011 3:00:20 PM - Software Distribution Service 3.0

RP882: 3/12/2011 3:00:24 PM - Software Distribution Service 3.0

RP883: 3/13/2011 3:00:20 PM - Software Distribution Service 3.0

RP884: 3/14/2011 3:00:21 PM - Software Distribution Service 3.0

RP885: 3/15/2011 3:00:18 PM - Software Distribution Service 3.0

RP886: 3/16/2011 3:00:21 PM - Software Distribution Service 3.0

RP887: 3/17/2011 10:43:59 AM - Software Distribution Service 3.0

RP888: 3/17/2011 3:00:28 PM - Software Distribution Service 3.0

RP889: 3/18/2011 3:00:22 PM - Software Distribution Service 3.0

RP890: 3/19/2011 3:00:25 PM - Software Distribution Service 3.0

RP891: 3/20/2011 10:59:03 AM - Installed Windows Internet Explorer 8.

RP892: 3/20/2011 11:00:02 AM - Software Distribution Service 3.0

RP893: 3/20/2011 3:00:19 PM - Software Distribution Service 3.0

RP894: 3/21/2011 3:00:20 PM - Software Distribution Service 3.0

RP895: 3/22/2011 3:00:19 PM - Software Distribution Service 3.0

RP896: 3/23/2011 3:00:22 PM - Software Distribution Service 3.0

RP897: 3/24/2011 10:35:06 AM - Removed TurboTax 2008 wcaiper

RP898: 3/24/2011 10:35:20 AM - Removed AnswerWorks 5.0 English Runtime

RP899: 3/24/2011 10:35:33 AM - Removed TurboTax 2008 WinPerUserEducation

RP900: 3/24/2011 10:35:51 AM - Removed TurboTax 2008 WinPerProgramHelp

RP901: 3/24/2011 10:36:25 AM - Removed TurboTax 2008 WinPerTaxSupport

RP902: 3/24/2011 10:36:49 AM - Removed TurboTax 2008 WinPerFedFormset

RP903: 3/24/2011 10:37:37 AM - Removed TurboTax 2008 WinPerReleaseEngine

RP904: 3/24/2011 10:39:03 AM - Removed TurboTax 2008 wrapper

RP905: 3/24/2011 3:00:21 PM - Software Distribution Service 3.0

RP906: 3/25/2011 3:00:22 PM - Software Distribution Service 3.0

RP907: 3/26/2011 3:00:20 PM - Software Distribution Service 3.0

RP908: 3/27/2011 3:00:22 PM - Software Distribution Service 3.0

RP909: 3/28/2011 3:00:21 PM - Software Distribution Service 3.0

RP910: 3/29/2011 3:00:25 PM - Software Distribution Service 3.0

RP911: 3/30/2011 3:00:26 PM - Software Distribution Service 3.0

RP912: 3/31/2011 2:12:13 AM - Software Distribution Service 3.0

RP913: 3/31/2011 3:00:28 PM - Software Distribution Service 3.0

RP914: 4/1/2011 3:00:20 PM - Software Distribution Service 3.0

RP915: 4/2/2011 3:00:21 PM - Software Distribution Service 3.0

RP916: 4/3/2011 3:00:28 PM - Software Distribution Service 3.0

RP917: 4/4/2011 3:00:20 PM - Software Distribution Service 3.0

RP918: 4/5/2011 2:15:24 PM - Removed SPYWAREfighter

RP919: 4/5/2011 3:00:25 PM - Software Distribution Service 3.0

RP920: 4/6/2011 3:00:23 PM - Software Distribution Service 3.0

RP921: 4/7/2011 3:00:21 PM - Software Distribution Service 3.0

RP922: 4/8/2011 3:00:19 PM - Software Distribution Service 3.0

RP923: 4/9/2011 3:00:37 PM - Software Distribution Service 3.0

RP924: 4/10/2011 3:00:20 PM - Software Distribution Service 3.0

RP925: 4/11/2011 3:12:37 PM - Software Distribution Service 3.0

RP926: 4/11/2011 5:39:49 PM - Software Distribution Service 3.0

RP927: 4/12/2011 3:00:19 PM - Software Distribution Service 3.0

RP928: 4/14/2011 11:03:34 AM - System Checkpoint

RP929: 4/14/2011 3:00:55 PM - Software Distribution Service 3.0

RP930: 4/15/2011 3:00:17 PM - Software Distribution Service 3.0

RP931: 4/16/2011 3:00:17 PM - Software Distribution Service 3.0

RP932: 4/17/2011 3:00:32 PM - Software Distribution Service 3.0

RP933: 4/18/2011 3:00:18 PM - Software Distribution Service 3.0

RP934: 4/19/2011 3:00:20 PM - Software Distribution Service 3.0

RP935: 4/19/2011 5:50:52 PM - Software Distribution Service 3.0

RP936: 4/20/2011 3:00:19 PM - Software Distribution Service 3.0

RP937: 4/21/2011 1:38:49 AM - Software Distribution Service 3.0

RP938: 4/21/2011 3:00:18 PM - Software Distribution Service 3.0

RP939: 4/22/2011 3:00:18 PM - Software Distribution Service 3.0

RP940: 4/23/2011 3:00:20 PM - Software Distribution Service 3.0

RP941: 4/24/2011 3:00:29 PM - Software Distribution Service 3.0

RP942: 4/25/2011 3:00:20 PM - Software Distribution Service 3.0

RP943: 4/26/2011 3:00:20 PM - Software Distribution Service 3.0

RP944: 4/27/2011 3:00:19 PM - Software Distribution Service 3.0

RP945: 4/28/2011 3:00:19 PM - Software Distribution Service 3.0

RP946: 4/29/2011 3:00:20 PM - Software Distribution Service 3.0

RP947: 4/30/2011 3:00:17 PM - Software Distribution Service 3.0

RP948: 5/1/2011 3:01:21 PM - Software Distribution Service 3.0

RP949: 5/2/2011 1:10:00 AM - Software Distribution Service 3.0

RP950: 5/2/2011 3:00:20 PM - Software Distribution Service 3.0

RP951: 5/3/2011 3:00:21 PM - Software Distribution Service 3.0

RP952: 5/3/2011 10:14:07 PM - avast! Free Antivirus Setup

RP953: 5/3/2011 10:42:52 PM - Software Distribution Service 3.0

.

==== Installed Programs ======================

.

20Dollars2Surf 1.1

Acrobat.com

Ad-Aware

Ad-Aware Email Scanner for Outlook

Adobe AIR

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Reader 9.4.4

Adobe Reader Extended Language Support Font Pack

Advanced Registry Optimizer

Apple Application Support

Apple Mobile Device Support

Apple Software Update

avast! Free Antivirus

Avira AntiVir Personal - Free Antivirus

Bonjour

BufferChm

Compatibility Pack for the 2007 Office system

Coupon Printer for Windows

CP_AtenaShokunin1Config

CP_CalendarTemplates1

CP_Package_Basic1

CP_Panorama1Config

CueTour

CustomerResearchQFolder

Destinations

DeviceFunctionQFolder

DeviceManagementQFolder

eSupportQFolder

FOX News Live

Fry's Wireless N USB Adapter FR-300USB

FullDPAppQFolder

Google Earth Plug-in

Google Update Helper

Google Updater

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows XP (KB2158563)

Hotfix for Windows XP (KB2443685)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB970653-v3)

Hotfix for Windows XP (KB976098-v2)

Hotfix for Windows XP (KB979306)

Hotfix for Windows XP (KB981793)

HP Deskjet 5400 series

HP Extended Capabilities 5.0

HP Image Zone 5.0

HP Image Zone Express

HP Imaging Device Functions 5.0

HP Memories Disc

HP Photo and Imaging 1.0 - Scanjet 3500c Series

HP Photo and Imaging 2.0 - Scanners

HP Solution Center & Imaging Support Tools 5.0

HP Update

HPDeskjet5400Series

InstantShareDevices

Intel® Graphics Media Accelerator Driver

iPhone Configuration Utility

iTunes

Java 6 Update 17

Jobs Toolbar

Lavasoft Personal Firewall

LightScribe 1.4.84.1

Malwarebytes' Anti-Malware

Microsoft .NET Framework 1.0 Hotfix (KB953295)

Microsoft .NET Framework 1.0 Hotfix (KB979904)

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft National Language Support Downlevel APIs

Microsoft Office Professional Edition 2003

Microsoft Silverlight

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

mIRC

Money Manager Ex 0.9.4.1

Mozilla Firefox (3.6.7)

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

NVIDIA Drivers

PhotoGallery

QuickTime

RandMap

RealPlayer

Realtek High Definition Audio Driver

Secunia PSI (2.0.0.3001)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

Security Update for Windows Internet Explorer 7 (KB938127-v2)

Security Update for Windows Internet Explorer 7 (KB956390)

Security Update for Windows Internet Explorer 7 (KB958215)

Security Update for Windows Internet Explorer 7 (KB960714)

Security Update for Windows Internet Explorer 7 (KB961260)

Security Update for Windows Internet Explorer 7 (KB963027)

Security Update for Windows Internet Explorer 7 (KB969897)

Security Update for Windows Internet Explorer 8 (KB2482017)

Security Update for Windows Internet Explorer 8 (KB2497640)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB971961)

Security Update for Windows Internet Explorer 8 (KB981332)

Security Update for Windows Internet Explorer 8 (KB982381)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB968816)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows Media Player 10 (KB936782)

Security Update for Windows XP (KB2079403)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2121546)

Security Update for Windows XP (KB2160329)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2259922)

Security Update for Windows XP (KB2279986)

Security Update for Windows XP (KB2286198)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2296199)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2412687)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2436673)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476687)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479628)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485376)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2503658)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2506223)

Security Update for Windows XP (KB2507618)

Security Update for Windows XP (KB2508272)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2511455)

Security Update for Windows XP (KB2524375)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923689)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB938464)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951066)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951698)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB954211)

Security Update for Windows XP (KB954459)

Security Update for Windows XP (KB954600)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956390)

Security Update for Windows XP (KB956391)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956841)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB957095)

Security Update for Windows XP (KB957097)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958687)

Security Update for Windows XP (KB958690)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960715)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961371)

Security Update for Windows XP (KB961373)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB968537)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB969898)

Security Update for Windows XP (KB969947)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971486)

Security Update for Windows XP (KB971557)

Security Update for Windows XP (KB971633)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973346)

Security Update for Windows XP (KB973354)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973525)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977165)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978251)

Security Update for Windows XP (KB978262)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979559)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980218)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB980436)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981852)

Security Update for Windows XP (KB981957)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982214)

Security Update for Windows XP (KB982665)

Security Update for Windows XP (KB982802)

ShareIns

Shopping InContext

SiteHound for FireFox 2.0.0

SkinsHP1

SolutionCenter

Sonic_PrimoSDK

Spybot - Search & Destroy

Status

SUPERAntiSpyware Free Edition

TrayApp

Unity Web Player

Unload

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Windows Internet Explorer 8 (KB2447568)

Update for Windows Internet Explorer 8 (KB976662)

Update for Windows XP (KB2141007)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2467659)

Update for Windows XP (KB951072-v2)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB955839)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

Visual C++ 2008 x86 Runtime - (v9.0.30729)

Visual C++ 2008 x86 Runtime - v9.0.30729.01

WebFldrs XP

WebReg

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 7

Windows Internet Explorer 8

Windows Media Player Firefox Plugin

Windows Rights Management Client Backwards Compatibility SP2

Windows Rights Management Client with Service Pack 2

Windows XP Media Center Edition 2005 KB973768

Windows XP Service Pack 3

WinPatrol 2008

Yahoo! BrowserPlus 2.9.8

.

==== Event Viewer Messages From Past Week ========

.

5/4/2011 11:56:10 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 aswSnx aswSP aswTdi Fips intelppm SandBox SASDIFSV SASKUTIL

5/4/2011 11:19:11 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

5/4/2011 1:18:00 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

5/4/2011 1:07:40 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}

5/4/2011 1:07:30 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments "" in order to run the server: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

5/3/2011 11:17:52 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Aavmker4 aswSnx aswSP aswTdi avgio avipbb Fips intelppm SandBox SASDIFSV SASKUTIL ssmdrv

5/3/2011 11:16:37 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

5/3/2011 10:42:58 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80242000: Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2467174).

5/3/2011 10:42:58 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80242000: Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB2467175).

5/3/2011 10:42:58 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80242000: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2416447).

5/2/2011 10:41:15 AM, error: Service Control Manager [7000] - The SASDIFSV service failed to start due to the following error: Cannot create a file when that file already exists.

4/30/2011 12:47:19 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the iPod Service service to connect.

4/30/2011 12:47:19 AM, error: Service Control Manager [7000] - The iPod Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

4/30/2011 12:47:17 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service iPod Service with arguments "" in order to run the server: {063D34A4-BF84-4B8D-B699-E8CA06504DDE}

4/27/2011 3:02:14 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2416447).

.

==== End Of File ===========================

Hi and welcome to Malwarebytes.
ctfmon is a legitimate file; the malware is just trying to scare you. Don't pay for it!
Please update MBAM, run a Quick Scan, and post its log.
Next, download DDS by sUBs and save it to your Desktop.
Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply.

avon4u · May 5, 2011

Also, I try to update Avira Antivirus, but it won't let me update. I even went to uninstall & re-install still won't let me updates. Right now, I'm safe mode because Firefox has running way to slooooooow.

Windows 5.1.2600 Service Pack 3 (Safe Mode)

Internet Explorer 8.0.6001.18702

5/5/2011 1:50:51 PM

mbam-log-2011-05-05 (13-50-51).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|)

Objects scanned: 233010

Time elapsed: 41 minute(s), 34 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

Any help will be very appreciate!

screen317 · May 7, 2011

First of all, it has not been three days. Second, when you bump your reply, you get pushed to the bottom of my reply list. Please refrain from doing so to avoid additional delays.

Please visit this webpage for instructions for running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new DDS log so we may continue cleaning the system.

-screen317

avon4u · May 7, 2011

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_11-03-05.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 12/5/2008 3:59:29 PM

System Uptime: 5/6/2011 5:42:23 PM (1 hours ago)

.

Motherboard: ASUSTeK Computer INC. | | P5GC-MX

Processor: Intel Pentium II processor | LGA 775 | 1800/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 186 GiB total, 156.067 GiB free.