[Active] Virus preventing scans, updates

jmikebuck · 10th March 2009

Howdy, I've got some kind of virus that is doing all it can to stay alive. Started about 4 months ago with Norton AV going berzerk giving me false warnings faster than I could click out. It will not let me install AV software, or update windows or Java (usually tells me an error code that I cannot find on the host sites). Every now and then I can get one run from stinger or combofix. Usually it causes a bluescreen. Each time I reboot I get either various "could not write to memory" and bluescreen or a note about windows having to recover the registry. A Norton online Tech spent 6 hours remotely running my computer to conclude that I am accurately describing what the virus does - no other help there. Lately, my keyboard is disabled during boot up - so no safe mode and now my internet connection will shut off every now and then after i try to update.
I am running an older dell dimension 4700 with windows XP SP2.

If you guys can help, I will be truly greatful. My files:

DDS (Ver_09-02-01.01) - NTFSx86
Run by Mike at 1:36:03.87 on Tue 03/10/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.600 [GMT -5:00]

AV: CyberDefender Internet Security *On-access scanning enabled* (Updated)
AV: Norton AntiVirus *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\MSN\Toolbar\3.0.0988.2\mstbsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\explorer.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Mike\Desktop\dds.pif
C:\Documents and Settings\Mike\Desktop\dds.pif

============== Pseudo HJT Report ===============

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = hxxp://www.yahoo.com/
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_02\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: Windows Live Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [EasyLinkAdvisor] "c:\program files\linksys easylink advisor\LinksysAgent.exe" /startup
uRun: [CyberDefender Early Detection Center] "c:\program files\cyberdefender\antispyware\cdas11.exe" /minimize
mRun: [VX3000] c:\windows\vVX3000.exe
mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [LifeCam] "c:\program files\microsoft lifecam\LifeExp.exe"
mRun: [IntelMeM] c:\program files\intel\modem event monitor\IntelMEM.exe
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop album starter edition\3.0\apps\apdproxy.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [CyberDefender Early Detection Center] "c:\program files\cyberdefender\antispyware\ISSIntro.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_02\bin\jusched.exe"
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_02\bin\ssv.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
LSP: c:\program files\common files\pc tools\lsp\PCTLsp.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} - hxxp://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1156093080734
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

P2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-2-23 144704]
R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-2-23 213640]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2008-12-23 160792]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-2-23 203280]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2009-2-23 359952]
R2 mstbsvc;MSN Toolbar Setup;c:\program files\msn\toolbar\3.0.0988.2\mstbsvc.exe [2008-12-4 100184]
R2 vpnagent;Cisco AnyConnect VPN Agent;c:\program files\cisco\cisco anyconnect vpn client\vpnagent.exe [2007-4-23 336944]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2009-2-23 79304]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-2-23 35272]
S0 IKFileSec;File Security Driver;c:\windows\system32\drivers\ikfilesec.sys --> c:\windows\system32\drivers\ikfilesec.sys [?]
S1 IKSysFlt;System Filter Driver;c:\windows\system32\drivers\iksysflt.sys --> c:\windows\system32\drivers\iksysflt.sys [?]
S1 IKSysSec;System Security Driver;c:\windows\system32\drivers\iksyssec.sys --> c:\windows\system32\drivers\iksyssec.sys [?]
S2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsauxs.exe --> c:\program files\spyware doctor\pctsAuxs.exe [?]
S2 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctssvc.exe --> c:\program files\spyware doctor\pctsSvc.exe [?]
S3 CDAVFS;CDAVFS;c:\windows\system32\drivers\CDAVFS.sys [2009-3-9 67424]
S3 jswmidin;jswmidin;\??\c:\docume~1\mike\locals~1\temp\jswmidin.sys --> c:\docume~1\mike\locals~1\temp\jswmidin.sys [?]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-2-23 606736]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-2-23 34216]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-2-23 40552]
S3 vpnva;Cisco AnyConnect VPN Virtual Miniport Adapter for Windows;c:\windows\system32\drivers\vpnva.sys [2007-4-23 24176]

=============== Created Last 30 ================

2009-03-10 01:02 28,544 a------- c:\windows\system32\drivers\pavboot.sys
2009-03-10 01:02 <DIR> --d----- c:\program files\Panda Security
2009-03-10 00:48 161,792 a------- c:\windows\SWREG.exe
2009-03-10 00:48 98,816 a------- c:\windows\sed.exe
2009-03-10 00:48 <DIR> --d----- C:\ComboFix
2009-03-10 00:12 <DIR> --d----- c:\docume~1\mike\applic~1\Malwarebytes
2009-03-10 00:12 15,504 a------- c:\windows\system32\drivers\mbam.sys
2009-03-10 00:12 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-10 00:12 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-03-10 00:12 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-03-09 23:53 43 a------- c:\windows\av_affiliate.ini
2009-03-09 23:53 43 a------- c:\windows\as_affiliate.ini
2009-03-09 23:53 67,424 a------- c:\windows\system32\drivers\CDAVFS.sys
2009-03-09 23:53 <DIR> --d----- c:\program files\CyberDefender
2009-03-09 23:34 <DIR> --d----- C:\winfows
2009-03-09 23:34 <DIR> --d----- c:\windows\system36
2009-03-09 23:34 <DIR> --d----- c:\windows\system32\drkvers
2009-03-09 23:34 <DIR> --d----- c:\windows\sys4em30
2009-03-09 23:34 <DIR> --d----- C:\program filgs
2009-03-09 23:34 <DIR> --d----- c:\program files\msn g!minc zone
2009-03-09 23:34 <DIR> --d----- C:\program fil%s
2009-03-09 22:25 <DIR> --d----- C:\windows^system32
2009-03-09 22:25 <DIR> --d----- C:\win$ows
2009-03-09 22:19 <DIR> --d----- c:\windows\sys4em32
2009-02-23 23:34 3,540 a------- c:\windows\system32\Config.MPF
2009-02-23 23:32 34,216 a------- c:\windows\system32\drivers\mferkdk.sys
2009-02-23 23:32 213,640 a------- c:\windows\system32\drivers\mfehidk.sys
2009-02-23 23:32 79,304 a------- c:\windows\system32\drivers\mfeavfk.sys
2009-02-23 23:32 40,552 a------- c:\windows\system32\drivers\mfesmfk.sys
2009-02-23 23:32 35,272 a------- c:\windows\system32\drivers\mfebopk.sys
2009-02-23 23:32 120,136 a------- c:\windows\system32\drivers\Mpfp.sys
2009-02-23 23:31 <DIR> --d----- c:\program files\common files\McAfee
2009-02-23 23:31 <DIR> --d----- c:\program files\McAfee.com
2009-02-23 23:31 <DIR> --d----- c:\program files\McAfee
2009-02-23 23:22 <DIR> --d----- C:\spoolerlogs
2009-02-23 00:00 250 a------- c:\windows\gmer.ini
2009-02-22 22:22 81,569,562 a------- C:\regbck.reg
2009-02-22 21:44 <DIR> --d----- C:\def
2009-02-09 17:15 <DIR> --d----- c:\program files\GEAR Software
2009-02-09 17:15 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-09 10:17 <DIR> --d----- c:\program files\NortonInstaller
2009-02-08 23:06 <DIR> --d----- c:\windows\pss

==================== Find3M ====================

2009-02-08 22:53 98,304 a------- c:\windows\DUMP8397.tmp
2008-12-24 22:12 410,984 a------- c:\windows\system32\deploytk.dll
2008-12-13 10:42 169 a------- C:\UnInstall.dat
2008-11-22 18:07 1,388 -------- c:\docume~1\mike\applic~1\ViewerApp.dat

============= FINISH: 1:36:15.51 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-02-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 12/2/2004 1:11:48 PM
System Uptime: 3/9/2009 11:42:47 PM (2 hours ago)

Motherboard: Dell Inc. | | 0M3918
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2793/800mhz
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2793/800mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 149 GiB total, 117.775 GiB free.
D: is CDROM ()
E: is CDROM (CDFS)

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 3/9/2009 11:48:38 PM - System Checkpoint
RP2: 3/9/2009 11:48:58 PM - ComboFix created restore point
RP3: 3/10/2009 12:12:57 AM - Removed Java(TM) 6 Update 11
RP4: 3/10/2009 12:13:24 AM - Installed Java(TM) 6 Update 12
RP5: 3/10/2009 12:18:17 AM - Installed Java(TM) 6 Update 12
RP6: 3/10/2009 12:18:43 AM - Installed Java(TM) 6 Update 12
RP7: 3/10/2009 12:19:25 AM - Installed Java(TM) 6 Update 12

==== Installed Programs ======================

3D Home Design Suite
Adobe Flash Player 10 ActiveX
Adobe Photoshop 5.5
Adobe Reader 7.0.9
Adobe® Photoshop® Album Starter Edition 3.0
ATI Control Panel
ATI Display Driver
Audit Support Center 1.0
Cisco AnyConnect VPN Client
CyberDefender Early Detection Center
Dell Driver Reset Tool
EarthLink Setup Files
G5a922EN
GameSpy Arcade
GEAR ISO Burn
Google Earth
Google Updater
Highlight Viewer (Windows Live Toolbar)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB952287)
hp deskjet 930c series (Remove only)
HP Photosmart Essential
Imagine TM 6 program
InfoMaker 6.5
Intel(R) 537EP V9x DF PCI Modem
Intel(R) PRO Network Connections Drivers
Intel(R) PROSet for Wired Connections
Intellisync® for Yahoo!
Internet Explorer Default Page
ItsDeductible Express
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 2
Learn2 Player (Uninstall Only)
Linksys EasyLink Advisor 1.5 (1010)
LX Systems Download Manager
Macromedia Flash Player
Macromedia Shockwave Player
Malwarebytes' Anti-Malware
Map Button (Windows Live Toolbar)
McAfee SecurityCenter
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft LifeCam
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Project 2000
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Modem Event Monitor
Modem Helper
Modem On Hold
MS Access 97 SP2
MSN Toolbar Setup
My Little Pony
MyIdentityDefender Toolbar (CyberDefender Corporation)
Nero Suite
On2 VP3 Video for Windows Codec
P_CS
Panda ActiveScan 2.0
Picasa 2
Picture Package
PowerDVD 5.1
Quicken 2005
QuickTime
RealPlayer
Risk+ 2.0 for Microsoft Project
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
SimCity 3000 Unlimited
Smart Menus (Windows Live Toolbar)
Sonic DLA
Sonic RecordNow!
Sonic Update Manager
Sony USB Driver
Star Wars®: Knights of the Old Republic (TM)
TurboTax Deluxe 2004
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955839)
VRQTool
WebFldrs XP
WexTech AnswerWorks
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer 3.1 (KB893803)
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
WinRAR archiver
wInsight 5.0
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

3/9/2009 8:43:06 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: IKFileSec IKSysFlt IKSysSec
3/9/2009 8:43:06 PM, error: Service Control Manager [7000] - The PC Tools Security Service service failed to start due to the following error: The system cannot find the file specified.
3/9/2009 8:43:06 PM, error: Service Control Manager [7000] - The PC Tools Auxiliary Service service failed to start due to the following error: The system cannot find the file specified.
3/9/2009 8:43:06 PM, error: Service Control Manager [7000] - The DHCP Client service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
3/9/2009 8:43:06 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the DHCP Client service to connect.
3/9/2009 8:43:06 PM, error: Service Control Manager [7000] - The Themes service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
3/9/2009 8:43:06 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Themes service to connect.
3/7/2009 3:22:32 PM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
3/7/2009 3:22:26 PM, error: Service Control Manager [7001] - The Windows Firewall/Internet Connection Sharing (ICS) service depends on the Network Connections service which failed to start because of the following error: After starting, the service hung in a start-pending state.
3/7/2009 3:22:26 PM, error: Service Control Manager [7001] - The System Event Notification service depends on the COM+ Event System service which failed to start because of the following error: After starting, the service hung in a start-pending state.
3/7/2009 3:22:26 PM, error: Service Control Manager [7022] - The Windows Image Acquisition (WIA) service hung on starting.
3/7/2009 3:22:22 PM, error: Service Control Manager [7022] - The Network Connections service hung on starting.
3/7/2009 3:22:22 PM, error: Service Control Manager [7022] - The COM+ Event System service hung on starting.
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The Automatic Updates service terminated with the following error: %%2147944122
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The Security Center service terminated with the following error: The endpoint mapper database entry could not be created.
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The IPSEC Services service terminated with the following error: The endpoint mapper database entry could not be created.
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The MSN Toolbar Setup service terminated with the following error: %%2147944122
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The McAfee SiteAdvisor Service service terminated with the following error: %%2147944122
3/7/2009 3:21:59 PM, error: Service Control Manager [7024] - The Background Intelligent Transfer Service service terminated with service-specific error 2147944122 (0x800706BA).
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The Google Software Updater service terminated with the following error: %%2147944122
3/7/2009 3:21:59 PM, error: Service Control Manager [7023] - The Task Scheduler service terminated with the following error: The endpoint mapper database entry could not be created.
3/6/2009 9:14:25 PM, error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: This operation returned because the timeout period expired.
3/6/2009 9:09:37 PM, error: System Error [1003] - Error code 1000000a, parameter1 c0140334, parameter2 00000002, parameter3 00000000, parameter4 80500301.
3/6/2009 9:09:35 PM, error: Service Control Manager [7023] - The Automatic Updates service terminated with the following error: %%2147952506
3/6/2009 9:09:35 PM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: Invalid access to memory location.
3/6/2009 9:09:35 PM, error: Service Control Manager [7023] - The IPSEC Services service terminated with the following error: The requested service provider could not be loaded or initialized.
3/6/2009 9:09:35 PM, error: Service Control Manager [7024] - The Background Intelligent Transfer Service service terminated with service-specific error 2147952506 (0x8007277A).
3/9/2009 9:08:08 PM, error: System Error [1003] - Error code 1000008e, parameter1 c0000005, parameter2 00320001, parameter3 eb116b24, parameter4 00000000.
3/9/2009 9:08:48 PM, error: System Error [1003] - Error code 00000024, parameter1 001902fe, parameter2 f7b2c994, parameter3 f7b2c690, parameter4 805824fe.
3/9/2009 9:25:20 PM, error: Service Control Manager [7000] - The Remote Registry service failed to start due to the following error: The system cannot find the path specified.
3/9/2009 9:25:30 PM, error: System Error [1003] - Error code 000000c2, parameter1 00000007, parameter2 00000cd4, parameter3 f752c826, parameter4 f74cb9f8.
3/9/2009 11:53:20 PM, error: PlugPlayManager [11] - The device Root\LEGACY_GMER\0000 disappeared from the system without first being prepared for removal.

==== End Of File ===========================

**Geri** · 14th March 2009

Hi jmikebuck
Welcome to WindowsBBS

Do you have any idea what these are?

C:\winfows
c:\windows\system36
c:\windows\system32\drkvers
c:\windows\sys4em30
C:\program filgs
c:\program files\msn g!minc zone
C:\program fil%s
C:\windows^system32
C:\win$ows
c:\windows\sys4em32

Geri