Can't install windows 7 SP1, malware suspected

Pabstblueribbon · September 7, 2011

Hey guys, reformatted + reinstalled Windows 7 a few days ago after it was pretty obvious that my laptop was infected. Ordered CD's from the manufacturer and reinstalled from the CD drive...twice. Not sure where or how the malware is getting in, but I'm suspecting it's there. Most Windows 7 updates will install fine, except for SP1. Anyways here's all of the stuff

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 9.0.8112.16421

Run by Sonny Chiba at 15:18:34 on 2011-09-07

Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3767.2317 [GMT -7:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}

SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k RPCSS

c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\WLANExt.exe

C:\Windows\system32\conhost.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Launch Manager\dsiwmis.exe

C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe

C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe

C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe

C:\Program Files\Acer\Acer Updater\UpdaterService.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe

C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe

C:\Windows\System32\igfxpers.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

C:\Program Files (x86)\Launch Manager\LManager.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe

C:\Program Files (x86)\Launch Manager\LMworker.exe

c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\SysWow64\Macromed\Flash\FlashUtil10e.exe

C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe

C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Windows\system32\wuauclt.exe

C:\Users\Sonny Chiba\Desktop\u88rurby.exe

C:\Windows\system32\svchost.exe -k defragsvc

C:\Windows\system32\taskhost.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\SysWOW64\cscript.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&m=aspire_5745g&r=27360811e006l04d3z1i5t6661k83q

uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&m=aspire_5745g&r=27360811e006l04d3z1i5t6661k83q

mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&m=aspire_5745g&r=27360811e006l04d3z1i5t6661k83q

mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&m=aspire_5745g&r=27360811e006l04d3z1i5t6661k83q

mWinlogon: Userinit=userinit.exe

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Partner BHO Class: {83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} - C:\ProgramData\Partner\Partner.dll

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

mRun: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

mRun: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

mRun: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

mRun: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k

mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

mRun: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"

mRun: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{D2F40D8E-BF03-4D0F-9E0C-D1DED1CE8149} : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{EFFD396A-2DD3-4895-83C8-D64721CB4D18} : DhcpNameServer = 202.96.209.5 202.96.209.133

BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO-X64: AcroIEHelperStub - No File

BHO-X64: Partner BHO Class: {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll

BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO-X64: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

BHO-X64: URLRedirectionBHO - No File

BHO-X64: Google Dictionary Compression sdch: {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

BHO-X64: Google Dictionary Compression sdch - No File

TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

mRun-x64: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

mRun-x64: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

mRun-x64: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

mRun-x64: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

mRun-x64: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED

mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun-x64: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k

mRun-x64: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

mRun-x64: [MDS_Menu] "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso" UpdateWithCreateOnce "Software\CyberLink\MediaShow Espresso\5.6"

mRun-x64: [ArcadeMovieService] "C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe"

.

============= SERVICES / DRIVERS ===============

.

R0 SmartDefragDriver;SmartDefragDriver;C:\Windows\system32\Drivers\SmartDefragDriver.sys --> C:\Windows\system32\Drivers\SmartDefragDriver.sys [?]

R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys --> C:\Windows\system32\DRIVERS\MpFilter.sys [?]

R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\system32\DRIVERS\mwlPSDFilter.sys --> C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [?]

R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\system32\DRIVERS\mwlPSDNServ.sys --> C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [?]

R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys --> C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [?]

R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]

R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-4-24 325200]

R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2011-8-30 820768]

R2 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-1-8 23584]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-4-24 13336]

R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-3-8 250368]

R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-11-5 144640]

R2 ODDPwrSvc;Acer ODD Power Service;C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [2010-4-24 171040]

R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?]

R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-8-30 2314240]

R2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-4-24 243232]

R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]

R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\system32\DRIVERS\L1C62x64.sys --> C:\Windows\system32\DRIVERS\L1C62x64.sys [?]

R3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys --> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]

R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-4-27 288272]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 AmUStor;AM USB Stroage Driver;C:\Windows\system32\drivers\AmUStor.SYS --> C:\Windows\system32\drivers\AmUStor.SYS [?]

S3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys --> C:\Windows\system32\DRIVERS\MpNWMon.sys [?]

S3 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-4-16 305520]

S3 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-11-5 50432]

S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]

S3 Partner Service;Partner Service;C:\ProgramData\Partner\Partner.exe [2010-4-24 332272]

S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-2 126352]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]

.

=============== Created Last 30 ================

.

2011-09-07 20:02:55 8862544 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C6346DD6-9B5D-4276-85AE-D09C43BFC816}\mpengine.dll

2011-09-05 21:23:42 -------- d-----w- C:\18c699218d2594e772

2011-09-05 07:08:52 -------- d-----w- C:\Windows\CheckSur

2011-09-03 21:26:13 -------- d-----w- C:\Program Files (x86)\Steam

2011-09-03 21:25:36 -------- d-----w- C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2011-09-03 20:58:48 -------- d-----w- C:\Users\Sonny Chiba\AppData\Roaming\inkscape

2011-09-03 20:43:42 -------- d-----w- C:\Program Files (x86)\Inkscape

2011-09-01 14:40:47 197120 ----a-w- C:\Windows\System32\d3d10_1.dll

2011-09-01 14:40:47 161792 ----a-w- C:\Windows\SysWow64\d3d10_1.dll

2011-09-01 10:51:38 8862544 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2011-09-01 02:38:43 -------- d-----w- C:\extensions

2011-09-01 02:38:42 -------- d-----w- C:\Program Files (x86)\Conduit

2011-09-01 02:38:41 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\Conduit

2011-09-01 02:38:41 -------- d-----w- C:\Program Files (x86)\ConduitEngine

2011-09-01 02:38:40 -------- d-----w- C:\Program Files (x86)\BitTorrentBar

2011-09-01 02:38:22 -------- d-----w- C:\Program Files (x86)\BitTorrent

2011-09-01 02:37:57 -------- d-----w- C:\Users\Sonny Chiba\AppData\Roaming\BitTorrent

2011-09-01 00:31:57 442880 ----a-w- C:\Windows\SysWow64\XpsPrint.dll

2011-09-01 00:31:56 662528 ----a-w- C:\Windows\System32\XpsPrint.dll

2011-09-01 00:09:51 2870272 ----a-w- C:\Windows\explorer.exe

2011-09-01 00:09:50 2614784 ----a-w- C:\Windows\SysWow64\explorer.exe

2011-09-01 00:09:35 476160 ----a-w- C:\Windows\System32\XpsGdiConverter.dll

2011-09-01 00:09:35 288256 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll

2011-09-01 00:09:21 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe

2011-09-01 00:09:21 31232 ----a-w- C:\Windows\System32\prevhost.exe

2011-08-31 23:30:56 367104 ----a-w- C:\Windows\System32\wcncsvc.dll

2011-08-31 23:30:55 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll

2011-08-31 23:07:32 9728 ----a-w- C:\Windows\SysWow64\sscore.dll

2011-08-31 23:07:32 236032 ----a-w- C:\Windows\System32\srvsvc.dll

2011-08-31 22:46:33 52224 ----a-w- C:\Windows\System32\drivers\usbehci.sys

2011-08-31 22:46:33 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys

2011-08-31 22:46:33 324608 ----a-w- C:\Windows\System32\drivers\usbport.sys

2011-08-31 22:46:32 98816 ----a-w- C:\Windows\System32\drivers\usbccgp.sys

2011-08-31 22:46:32 7936 ----a-w- C:\Windows\System32\drivers\usbd.sys

2011-08-31 22:46:32 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys

2011-08-31 22:46:32 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys

2011-08-31 22:45:24 2566144 ----a-w- C:\Windows\System32\esent.dll

2011-08-31 22:45:24 1657216 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2011-08-31 22:45:23 1686016 ----a-w- C:\Windows\SysWow64\esent.dll

2011-08-31 22:45:23 166272 ----a-w- C:\Windows\System32\drivers\nvstor.sys

2011-08-31 22:45:23 148352 ----a-w- C:\Windows\System32\drivers\nvraid.sys

2011-08-31 22:45:23 107904 ----a-w- C:\Windows\System32\drivers\amdsata.sys

2011-08-31 22:45:22 187264 ----a-w- C:\Windows\System32\drivers\storport.sys

2011-08-31 22:45:18 27008 ----a-w- C:\Windows\System32\drivers\amdxata.sys

2011-08-31 22:45:17 96768 ----a-w- C:\Windows\System32\fsutil.exe

2011-08-31 22:45:17 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe

2011-08-31 22:45:17 410496 ----a-w- C:\Windows\System32\drivers\iaStorV.sys

2011-08-31 17:44:12 142336 ----a-w- C:\Windows\System32\poqexec.exe

2011-08-31 17:43:44 249856 ----a-w- C:\Windows\System32\SearchProtocolHost.exe

2011-08-31 17:43:44 164352 ----a-w- C:\Windows\SysWow64\SearchProtocolHost.exe

2011-08-31 17:32:50 2085376 ----a-w- C:\Windows\System32\ole32.dll

2011-08-31 17:30:58 1896832 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2011-08-31 17:22:39 27992 ----a-w- C:\Windows\System32\SmartDefragBootTime.exe

2011-08-31 17:22:39 17720 ----a-w- C:\Windows\System32\drivers\SmartDefragDriver.sys

2011-08-31 17:22:39 -------- d-----w- C:\Users\Sonny Chiba\AppData\Roaming\IObit

2011-08-31 17:22:33 -------- d-----w- C:\Program Files (x86)\IObit

2011-08-31 17:20:48 -------- d-----w- C:\Users\Sonny Chiba\AppData\Roaming\Malwarebytes

2011-08-31 17:18:51 41272 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys

2011-08-31 17:18:49 -------- d-----w- C:\ProgramData\Malwarebytes

2011-08-31 17:18:45 25912 ----a-w- C:\Windows\System32\drivers\mbam.sys

2011-08-31 17:18:45 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2011-08-31 17:12:25 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services

2011-08-31 17:11:52 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\Microsoft Help

2011-08-31 16:58:47 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\Diagnostics

2011-08-31 05:35:39 270720 ------w- C:\Windows\System32\MpSigStub.exe

2011-08-31 05:34:12 601424 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3E3C1242-EB48-41A8-9C03-D5B8F35394D1}\gapaengine.dll

2011-08-31 05:27:06 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client

2011-08-31 05:26:51 -------- d-----w- C:\Program Files\Microsoft Security Client

2011-08-31 05:26:37 374664 ----a-w- C:\Windows\System32\drivers\netio.sys

2011-08-31 05:08:24 220672 ----a-w- C:\Windows\System32\wintrust.dll

2011-08-31 05:08:24 172032 ----a-w- C:\Windows\SysWow64\wintrust.dll

2011-08-31 05:08:23 139264 ----a-w- C:\Windows\System32\cabview.dll

2011-08-31 05:08:23 132608 ----a-w- C:\Windows\SysWow64\cabview.dll

2011-08-31 05:04:51 14336 ----a-w- C:\Windows\System32\drivers\sffp_sd.sys

2011-08-30 22:44:54 3072 ---ha-w- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll

2011-08-30 21:01:08 -------- d-----w- C:\Windows\SysWow64\Wat

2011-08-30 21:01:08 -------- d-----w- C:\Windows\System32\Wat

2011-08-30 20:49:46 982912 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2011-08-30 20:44:20 223448 ----a-w- C:\Windows\System32\drivers\fvevol.sys

2011-08-30 20:41:47 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll

2011-08-30 20:41:47 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

2011-08-30 20:41:47 153160 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

2011-08-30 20:41:41 1446912 ----a-w- C:\Windows\System32\lsasrv.dll

2011-08-30 20:40:55 243712 ----a-w- C:\Windows\System32\drivers\ks.sys

2011-08-30 20:40:55 184832 ----a-w- C:\Windows\System32\drivers\usbvideo.sys

2011-08-30 20:40:02 902656 ----a-w- C:\Windows\System32\d2d1.dll

2011-08-30 20:40:02 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll

2011-08-30 20:40:02 1540608 ----a-w- C:\Windows\System32\DWrite.dll

2011-08-30 20:40:02 1135104 ----a-w- C:\Windows\System32\FntCache.dll

2011-08-30 20:40:02 1074176 ----a-w- C:\Windows\SysWow64\DWrite.dll

2011-08-30 20:10:11 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

2011-08-30 20:10:11 2048 ----a-w- C:\Windows\System32\tzres.dll

2011-08-30 19:57:33 -------- d-----w- C:\Program Files (x86)\MSXML 4.0

2011-08-30 19:57:01 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll

2011-08-30 19:57:01 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll

2011-08-30 19:57:01 48960 ----a-w- C:\Windows\System32\netfxperf.dll

2011-08-30 19:57:01 444752 ----a-w- C:\Windows\System32\mscoree.dll

2011-08-30 19:57:01 320352 ----a-w- C:\Windows\System32\PresentationHost.exe

2011-08-30 19:57:01 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll

2011-08-30 19:57:01 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe

2011-08-30 19:57:01 1942856 ----a-w- C:\Windows\System32\dfshim.dll

2011-08-30 19:57:01 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll

2011-08-30 19:57:01 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll

2011-08-30 19:50:41 552960 ----a-w- C:\Windows\System32\msdri.dll

2011-08-30 19:50:41 288256 ----a-w- C:\Windows\System32\MSNP.ax

2011-08-30 19:50:41 204288 ----a-w- C:\Windows\SysWow64\MSNP.ax

2011-08-30 19:13:10 82432 ----a-w- C:\Windows\SysWow64\msxml4r.dll

2011-08-30 19:13:10 44544 ----a-w- C:\Windows\SysWow64\msxml4a.dll

2011-08-30 19:12:15 225280 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll

2011-08-30 19:12:15 176128 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

2011-08-30 19:12:14 77824 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

2011-08-30 19:12:14 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

2011-08-30 19:12:13 610436 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

2011-08-30 19:09:01 -------- d-----w- C:\Program Files (x86)\Haali

2011-08-30 19:06:46 -------- d-----w- C:\Program Files (x86)\Common Files\postureAgent

2011-08-30 19:06:34 56344 ----a-w- C:\Windows\System32\drivers\HECIx64.sys

2011-08-30 19:05:52 -------- d-----w- C:\Program Files (x86)\Acer Crystal Eye webcam

2011-08-30 17:36:56 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\Adobe

2011-08-30 06:54:21 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2011-08-30 06:52:06 140066664 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\wlcC784.tmp

2011-08-30 06:51:59 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live

2011-08-30 06:50:13 -------- d-----w- C:\Program Files\Synaptics

2011-08-30 05:37:50 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\Cyberlink

2011-08-30 05:37:32 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\Google

2011-08-30 05:36:32 -------- d-----w- C:\Program Files (x86)\Acer Arcade Deluxe

2011-08-30 05:30:28 -------- d-----w- C:\Program Files (x86)\Launch Manager

2011-08-30 05:30:18 -------- d-----w- C:\Users\Sonny Chiba\AppData\Roaming\Intel Corporation

2011-08-30 05:30:12 -------- d---a-w- C:\book

2011-08-30 05:30:09 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\EgisTec IPS

2011-08-30 05:29:37 -------- d-----w- C:\Users\Sonny Chiba\AppData\Local\VirtualStore

2011-08-30 05:28:43 -------- d-----w- C:\Program Files (x86)\OEM

2011-08-30 05:28:38 -------- d-----w- C:\ProgramData\OEM_E471269A730D

2011-08-30 05:21:58 3 ----a-w- C:\Windows\System32\PLD_Framework.cmd

2011-08-30 05:19:20 658536 ----a-w- C:\Windows\System32\nvuninst.exe

2011-08-30 05:18:56 -------- d-----w- C:\Program Files\NVIDIA Corporation

.

==================== Find3M ====================

.

2011-08-30 20:49:46 4068864 ----a-w- C:\Windows\System32\mf.dll

2011-07-16 05:26:54 362496 ----a-w- C:\Windows\System32\wow64win.dll

2011-07-16 05:26:53 243200 ----a-w- C:\Windows\System32\wow64.dll

2011-07-16 05:26:53 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

2011-07-16 05:26:18 214528 ----a-w- C:\Windows\System32\winsrv.dll

2011-07-16 05:24:09 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

2011-07-16 05:21:32 422400 ----a-w- C:\Windows\System32\KernelBase.dll

2011-07-16 05:17:46 338432 ----a-w- C:\Windows\System32\conhost.exe

2011-07-16 04:36:09 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

2011-07-16 04:32:14 44032 ----a-w- C:\Windows\apppatch\acwow64.dll

2011-07-16 04:31:50 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

2011-07-16 04:30:29 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

2011-07-16 04:30:27 272384 ----a-w- C:\Windows\SysWow64\KernelBase.dll

2011-07-16 02:26:12 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

2011-07-16 02:26:11 2048 ----a-w- C:\Windows\SysWow64\user.exe

2011-07-16 02:21:47 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2011-07-16 02:21:47 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2011-07-16 02:21:47 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2011-07-16 02:21:47 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2011-07-09 02:44:55 287744 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys

2011-06-23 05:29:39 5507968 ----a-w- C:\Windows\System32\ntoskrnl.exe

2011-06-23 04:38:05 3957120 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

2011-06-23 04:38:04 3902336 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

2011-06-15 09:58:31 212992 ----a-w- C:\Windows\System32\odbctrac.dll

2011-06-15 09:58:31 163840 ----a-w- C:\Windows\System32\odbccp32.dll

2011-06-15 09:58:31 106496 ----a-w- C:\Windows\System32\odbccu32.dll

2011-06-15 09:58:31 106496 ----a-w- C:\Windows\System32\odbccr32.dll

2011-06-15 09:04:46 86016 ----a-w- C:\Windows\SysWow64\odbccu32.dll

2011-06-15 09:04:46 81920 ----a-w- C:\Windows\SysWow64\odbccr32.dll

2011-06-15 09:04:46 319488 ----a-w- C:\Windows\SysWow64\odbcjt32.dll

2011-06-15 09:04:46 163840 ----a-w- C:\Windows\SysWow64\odbctrac.dll

2011-06-15 09:04:46 122880 ----a-w- C:\Windows\SysWow64\odbccp32.dll

2011-06-11 02:56:44 3134464 ----a-w- C:\Windows\System32\win32k.sys

.

============= FINISH: 15:18:53.75 ===============

Attach, ark.zip

screen317 · September 8, 2011

Hi and welcome to Malwarebytes.

What symptoms of infection are you currently experiencing?

Pabstblueribbon · September 9, 2011

Hi, thanks

I can't install SP1 for Windows 7, it fails to install everytime. There are also two other updates, KB2492386 and KB2506014, that will install fine but after a few reboots I'll get a blue screen with a window that says something like "Windows failed to start, checking for errors". That takes anywhere from 5 minutes to 30 minutes, but it will display something like "Windows fixed the problem, go ahead and restart". So I'll restart, and KB2492386 & KB2506014 are uninstalled.

Other than that, sometimes the computer is sluggish

screen317 · September 13, 2011

Hi,

Sounds like your hard drive may be beginning to fail.

Click Start --> Run, enter cmd.exe, and press Enter

In the black box that appears, enter this command exactly as shown:

chkdsk>"%userprofile%\desktop\chkdsk.txt"

Press Enter.

When it finishes, open chkdsk.txt on your Desktop and post its contents here.

-screen317

Pabstblueribbon · September 13, 2011

The type of the file system is NTFS.

Volume label is Acer.

WARNING! F parameter not specified.

Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...

0 percent complete. (0 of 217600 file records processed)

1 percent complete. (21760 of 217600 file records processed)

1 percent complete. (38535 of 217600 file records processed)

2 percent complete. (43520 of 217600 file records processed)

2 percent complete. (53505 of 217600 file records processed)

3 percent complete. (65280 of 217600 file records processed)

4 percent complete. (87040 of 217600 file records processed)

4 percent complete. (108060 of 217600 file records processed)

5 percent complete. (108800 of 217600 file records processed)

6 percent complete. (130560 of 217600 file records processed)

6 percent complete. (149761 of 217600 file records processed)

7 percent complete. (152320 of 217600 file records processed)

7 percent complete. (173825 of 217600 file records processed)

8 percent complete. (174080 of 217600 file records processed)

8 percent complete. (186113 of 217600 file records processed)

9 percent complete. (195840 of 217600 file records processed)

217600 file records processed.

File verification completed.

543 large file records processed.

0 bad file records processed.

0 EA records processed.

44 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...

11 percent complete. (4731 of 272358 index entries processed)

12 percent complete. (9658 of 272358 index entries processed)

13 percent complete. (14585 of 272358 index entries processed)

14 percent complete. (19511 of 272358 index entries processed)

15 percent complete. (24438 of 272358 index entries processed)

16 percent complete. (29364 of 272358 index entries processed)

17 percent complete. (34291 of 272358 index entries processed)

18 percent complete. (39218 of 272358 index entries processed)

19 percent complete. (44144 of 272358 index entries processed)

20 percent complete. (49071 of 272358 index entries processed)

21 percent complete. (53997 of 272358 index entries processed)

22 percent complete. (58924 of 272358 index entries processed)

23 percent complete. (63851 of 272358 index entries processed)

24 percent complete. (68777 of 272358 index entries processed)

25 percent complete. (73704 of 272358 index entries processed)

26 percent complete. (78630 of 272358 index entries processed)

27 percent complete. (83557 of 272358 index entries processed)

28 percent complete. (88483 of 272358 index entries processed)

29 percent complete. (93410 of 272358 index entries processed)

30 percent complete. (98337 of 272358 index entries processed)

31 percent complete. (103263 of 272358 index entries processed)

32 percent complete. (108190 of 272358 index entries processed)

33 percent complete. (113116 of 272358 index entries processed)

34 percent complete. (118043 of 272358 index entries processed)

35 percent complete. (122970 of 272358 index entries processed)

36 percent complete. (127896 of 272358 index entries processed)

37 percent complete. (132823 of 272358 index entries processed)

38 percent complete. (137749 of 272358 index entries processed)

39 percent complete. (142676 of 272358 index entries processed)

40 percent complete. (147603 of 272358 index entries processed)

41 percent complete. (152529 of 272358 index entries processed)

42 percent complete. (157456 of 272358 index entries processed)

43 percent complete. (162382 of 272358 index entries processed)

44 percent complete. (167309 of 272358 index entries processed)

45 percent complete. (172236 of 272358 index entries processed)

46 percent complete. (177162 of 272358 index entries processed)

47 percent complete. (182089 of 272358 index entries processed)

48 percent complete. (187015 of 272358 index entries processed)

49 percent complete. (191942 of 272358 index entries processed)

50 percent complete. (196869 of 272358 index entries processed)

51 percent complete. (201795 of 272358 index entries processed)

52 percent complete. (206722 of 272358 index entries processed)

53 percent complete. (211648 of 272358 index entries processed)

54 percent complete. (216575 of 272358 index entries processed)

54 percent complete. (217692 of 272358 index entries processed)

54 percent complete. (217869 of 272358 index entries processed)

54 percent complete. (218205 of 272358 index entries processed)

54 percent complete. (218323 of 272358 index entries processed)

54 percent complete. (218418 of 272358 index entries processed)

54 percent complete. (218474 of 272358 index entries processed)

54 percent complete. (218931 of 272358 index entries processed)

54 percent complete. (218994 of 272358 index entries processed)

54 percent complete. (219087 of 272358 index entries processed)

54 percent complete. (219169 of 272358 index entries processed)

54 percent complete. (219254 of 272358 index entries processed)

54 percent complete. (219360 of 272358 index entries processed)

54 percent complete. (219528 of 272358 index entries processed)

54 percent complete. (219545 of 272358 index entries processed)

54 percent complete. (219581 of 272358 index entries processed)

54 percent complete. (219621 of 272358 index entries processed)

54 percent complete. (219943 of 272358 index entries processed)

55 percent complete. (221501 of 272358 index entries processed)

55 percent complete. (222165 of 272358 index entries processed)

55 percent complete. (222265 of 272358 index entries processed)

55 percent complete. (223057 of 272358 index entries processed)

55 percent complete. (223107 of 272358 index entries processed)

55 percent complete. (223253 of 272358 index entries processed)

55 percent complete. (223476 of 272358 index entries processed)

55 percent complete. (223629 of 272358 index entries processed)

55 percent complete. (223730 of 272358 index entries processed)

55 percent complete. (224389 of 272358 index entries processed)

55 percent complete. (224596 of 272358 index entries processed)

55 percent complete. (224826 of 272358 index entries processed)

55 percent complete. (224999 of 272358 index entries processed)

55 percent complete. (225042 of 272358 index entries processed)

56 percent complete. (226428 of 272358 index entries processed)

56 percent complete. (227681 of 272358 index entries processed)

56 percent complete. (229000 of 272358 index entries processed)

56 percent complete. (229762 of 272358 index entries processed)

56 percent complete. (230069 of 272358 index entries processed)

56 percent complete. (230355 of 272358 index entries processed)

56 percent complete. (230577 of 272358 index entries processed)

56 percent complete. (230655 of 272358 index entries processed)

56 percent complete. (230715 of 272358 index entries processed)

56 percent complete. (230811 of 272358 index entries processed)

56 percent complete. (231157 of 272358 index entries processed)

56 percent complete. (231254 of 272358 index entries processed)

56 percent complete. (231258 of 272358 index entries processed)

57 percent complete. (231355 of 272358 index entries processed)

57 percent complete. (231968 of 272358 index entries processed)

57 percent complete. (233483 of 272358 index entries processed)

57 percent complete. (235037 of 272358 index entries processed)

57 percent complete. (235595 of 272358 index entries processed)

57 percent complete. (235742 of 272358 index entries processed)

57 percent complete. (235945 of 272358 index entries processed)

57 percent complete. (236030 of 272358 index entries processed)

57 percent complete. (236280 of 272358 index entries processed)

58 percent complete. (236281 of 272358 index entries processed)

58 percent complete. (236781 of 272358 index entries processed)

58 percent complete. (237084 of 272358 index entries processed)

58 percent complete. (237351 of 272358 index entries processed)

58 percent complete. (237393 of 272358 index entries processed)

58 percent complete. (237602 of 272358 index entries processed)

58 percent complete. (237734 of 272358 index entries processed)

58 percent complete. (237913 of 272358 index entries processed)

58 percent complete. (238186 of 272358 index entries processed)

58 percent complete. (238397 of 272358 index entries processed)

58 percent complete. (238680 of 272358 index entries processed)

58 percent complete. (239031 of 272358 index entries processed)

58 percent complete. (239427 of 272358 index entries processed)

58 percent complete. (239760 of 272358 index entries processed)

58 percent complete. (240120 of 272358 index entries processed)

58 percent complete. (240544 of 272358 index entries processed)

59 percent complete. (241208 of 272358 index entries processed)

59 percent complete. (242414 of 272358 index entries processed)

59 percent complete. (242600 of 272358 index entries processed)

59 percent complete. (242723 of 272358 index entries processed)

59 percent complete. (243033 of 272358 index entries processed)

59 percent complete. (243361 of 272358 index entries processed)

59 percent complete. (243413 of 272358 index entries processed)

59 percent complete. (243461 of 272358 index entries processed)

59 percent complete. (243493 of 272358 index entries processed)

59 percent complete. (243549 of 272358 index entries processed)

59 percent complete. (243626 of 272358 index entries processed)

59 percent complete. (243724 of 272358 index entries processed)

59 percent complete. (243948 of 272358 index entries processed)

59 percent complete. (244474 of 272358 index entries processed)

272358 index entries processed.

Index verification completed.

0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...

66 percent complete. (10007 of 217600 file SDs/SIDs processed)

67 percent complete. (24787 of 217600 file SDs/SIDs processed)

68 percent complete. (39567 of 217600 file SDs/SIDs processed)

69 percent complete. (54346 of 217600 file SDs/SIDs processed)

70 percent complete. (69126 of 217600 file SDs/SIDs processed)

71 percent complete. (83906 of 217600 file SDs/SIDs processed)

72 percent complete. (98686 of 217600 file SDs/SIDs processed)

73 percent complete. (113465 of 217600 file SDs/SIDs processed)

74 percent complete. (128245 of 217600 file SDs/SIDs processed)

75 percent complete. (143025 of 217600 file SDs/SIDs processed)

76 percent complete. (157805 of 217600 file SDs/SIDs processed)

77 percent complete. (172585 of 217600 file SDs/SIDs processed)

78 percent complete. (187364 of 217600 file SDs/SIDs processed)

79 percent complete. (202144 of 217600 file SDs/SIDs processed)

80 percent complete. (216924 of 217600 file SDs/SIDs processed)

217600 file SDs/SIDs processed.

Security descriptor verification completed.

27380 data files processed.

CHKDSK is verifying Usn Journal...

99 percent complete. (0 of 35546368 USN bytes processed)

100 percent complete. (35545088 of 35546368 USN bytes processed)

35546368 USN bytes processed.

Usn Journal verification completed.

Windows has checked the file system and found no problems.

474650623 KB total disk space.

64131360 KB in 157879 files.

96080 KB in 27381 indexes.

0 KB in bad sectors.

334747 KB in use by the system.

65536 KB occupied by the log file.

410088436 KB available on disk.

4096 bytes in each allocation unit.

118662655 total allocation units on disk.

102522109 allocation units available on disk.

screen317 · September 16, 2011

Download Service Pack 1 from here:

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=5842

Reboot into Safe Mode and try installing it from there. If it still fails, give the exact error message.

screen317 · October 10, 2011

Are you still with us? This topic will be closed in a few days if we do not hear back from you.

screen317 · October 14, 2011

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Can't install windows 7 SP1, malware suspected

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information