Malware and Virus RemovalProblems removing malware/viruses? Get help from our Malware removal experts.
Mission Statement
WindowsBBS is an online community dedicated to easily accessible technical support for those using Microsoft operating systems and other Windows software.
Our goal is to become the leading resource for computer users that require assistance with their day-to-day computer usage, including full support for networking PC's, virus & malware removal, system upgrades and general support questions.
It encounter a problem n when it happens it disables sound card, looks like it changes theme for win n who knows what else... anyway sound card is not working after that. If i reinstall drivers for sound card again it will happen again after sometime. I have nod32 antivirus, trojan remover n both didnt found any viruses...i scanned system with DDS scanner so these r results....
DDS (Ver_09-09-29.01) - NTFSx86
Run by xp at 17:43:43.82 on Sun 10/04/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1250.381.1033.18.511.83 [GMT 2:00]
AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 3/1/2007 12:30:38 PM
System Uptime: 10/4/2009 5:21:33 PM (0 hours ago)
C: is FIXED (NTFS) - 38 GiB total, 12.022 GiB free.
D: is FIXED (NTFS) - 36 GiB total, 30.75 GiB free.
E: is CDROM ()
F: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP24: 7/13/2009 9:40:36 PM - Kontrolna tačka sistema
RP25: 7/14/2009 10:08:38 PM - Kontrolna tačka sistema
RP26: 7/15/2009 10:14:21 PM - Kontrolna tačka sistema
RP27: 7/25/2009 5:39:24 PM - Kontrolna tačka sistema
RP28: 7/29/2009 7:03:01 PM - Kontrolna tačka sistema
RP29: 7/30/2009 7:43:41 PM - Kontrolna tačka sistema
RP30: 7/31/2009 8:17:59 PM - Kontrolna tačka sistema
RP31: 8/3/2009 9:50:20 PM - Kontrolna tačka sistema
RP32: 8/8/2009 6:20:50 PM - Kontrolna tačka sistema
RP33: 8/9/2009 6:25:28 PM - Kontrolna tačka sistema
RP34: 8/10/2009 8:18:14 PM - Kontrolna tačka sistema
RP35: 8/11/2009 9:07:23 PM - Kontrolna tačka sistema
RP36: 8/12/2009 9:36:49 PM - Kontrolna tačka sistema
RP37: 8/19/2009 11:33:05 AM - Kontrolna tačka sistema
RP38: 8/23/2009 8:51:39 PM - Kontrolna tačka sistema
RP39: 8/25/2009 7:09:44 PM - Kontrolna tačka sistema
RP40: 8/26/2009 7:14:01 PM - Kontrolna tačka sistema
RP41: 8/28/2009 8:26:41 PM - Kontrolna tačka sistema
RP42: 8/30/2009 4:37:32 PM - Kontrolna tačka sistema
RP43: 8/31/2009 10:10:14 PM - Kontrolna tačka sistema
RP44: 9/2/2009 2:19:49 PM - Kontrolna tačka sistema
RP45: 9/3/2009 6:52:57 PM - Kontrolna tačka sistema
RP46: 9/5/2009 6:07:46 PM - Kontrolna tačka sistema
RP47: 9/7/2009 9:12:38 PM - Kontrolna tačka sistema
RP48: 9/8/2009 9:42:58 PM - Kontrolna tačka sistema
RP49: 9/9/2009 10:08:28 PM - Kontrolna tačka sistema
RP50: 9/11/2009 7:03:30 PM - Kontrolna tačka sistema
RP51: 9/12/2009 7:57:51 PM - Kontrolna tačka sistema
RP52: 9/13/2009 8:53:37 PM - Kontrolna tačka sistema
RP53: 9/14/2009 8:58:16 PM - Kontrolna tačka sistema
RP54: 9/15/2009 9:17:32 PM - Kontrolna tačka sistema
RP55: 9/16/2009 9:51:30 PM - Kontrolna tačka sistema
RP56: 9/18/2009 12:08:36 AM - Kontrolna tačka sistema
RP57: 9/18/2009 10:37:05 AM - Installed Windows XP WIC.
RP58: 9/18/2009 10:37:21 AM - Installed Windows XP KB954708.
RP59: 9/18/2009 10:37:33 AM - Installed DirectX
RP60: 9/20/2009 11:37:05 AM - Kontrolna tačka sistema
RP61: 9/22/2009 5:44:14 PM - Kontrolna tačka sistema
RP62: 9/24/2009 5:38:19 PM - Kontrolna tačka sistema
RP63: 9/25/2009 6:41:05 PM - Kontrolna tačka sistema
RP64: 9/26/2009 9:23:56 PM - Kontrolna tačka sistema
RP65: 9/29/2009 10:36:58 AM - Kontrolna tačka sistema
RP66: 9/30/2009 4:44:15 PM - Kontrolna tačka sistema
RP67: 10/4/2009 11:05:59 AM - Kontrolna tačka sistema
RP68: 10/4/2009 1:56:02 PM - Installed ESET NOD32 Antivirus
RP69: 10/4/2009 5:23:40 PM - Software Distribution Service 3.0
(*kontrolna tacka sistema=system check point)
==== Installed Programs ======================
18 Wheels of Steel Pedal to the Metal
ACDSee 6.0 Standard
Ad-Aware SE Professional
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Reader 7.0
ATI - Software Uninstall Utility
ATI Display Driver
BSPlayer
Call of Duty(R) 2
Call of Duty(R) 4 - Modern Warfare(TM)
ESET NOD32 Antivirus
Far Cry
ffdshow (remove only)
GameSpy Arcade
Hotfix for Windows XP (KB954708)
Junk Mail filter update
MakeDVD 1.0
Max Payne
Medal of Honor Allied Assault
Microsoft .NET Framework 2.0
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office Live Add-in 1.3
Microsoft Office Outlook Connector
Microsoft Office Professional Edition 2003
Microsoft Search Enhancement Pack
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Mozilla Firefox (3.0.14)
MSN
MSVCRT
My Cinema
Nero 6 Enterprise Edition
NVIDIA Drivers
PCI SoftV92 Modem
PhotoNow! 1.0
PowerCinema
PowerDirector
PowerProducer Express
Realtek AC'97 Audio
Segoe UI
Sniper Elite
Trojan Remover 6.8.1
Update for Windows XP (KB898461)
WebFldrs XP
Winamp
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer
Windows XP srpski interfejs paket - latinica
WinRAR archiver
WinZip
==== Event Viewer Messages From Past Week ========
9/30/2009 11:58:27 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the CyberLink Task Scheduler (CTS) service to connect.
9/30/2009 11:58:27 PM, error: Service Control Manager [7000] - The CyberLink Task Scheduler (CTS) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
9/30/2009 11:58:26 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the NOD32 Kernel Service service to connect.
9/30/2009 11:58:26 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Machine Debug Manager service to connect.
9/30/2009 11:58:26 PM, error: Service Control Manager [7000] - The NOD32 Kernel Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
9/30/2009 11:58:26 PM, error: Service Control Manager [7000] - The Machine Debug Manager service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
9/30/2009 11:35:43 PM, error: Service Control Manager [7023] - The Microsoft Windows service terminated with the following error: Access is denied.
9/30/2009 11:35:43 PM, error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
9/30/2009 11:35:43 PM, error: Service Control Manager [7000] - The Cyberlink RichVideo Service(CRVS) service failed to start due to the following error: The system cannot find the file specified.
10/4/2009 4:44:00 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097}
10/4/2009 4:09:45 PM, error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: An instance of the service is already running.
10/4/2009 3:54:09 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD ehdrv epfwtdir Fips IPSec MRxSmb NetBIOS NetBT Processor RasAcd Rdbss sptd Tcpip
10/4/2009 3:54:09 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
10/4/2009 3:54:09 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/4/2009 3:54:09 PM, error: Service Control Manager [7001] - The fssfltr service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/4/2009 3:54:09 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/4/2009 3:54:09 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
10/4/2009 3:53:26 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
10/4/2009 3:53:15 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
10/4/2009 3:53:02 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
10/4/2009 3:52:41 PM, error: sfsync02 [12] -
10/4/2009 2:09:57 PM, error: Service Control Manager [7023] - The Microsoft Windows service terminated with the following error: The specified module could not be found.
10/4/2009 1:52:41 PM, error: Service Control Manager [7023] - The Microsoft Windows service terminated with the following error: A dynamic link library (DLL) initialization routine failed.
10/4/2009 1:39:19 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.
==== End Of File ===========================
Didn't find the information you thought to find? Check out these Similar Threads
NOTE. If any of the programs listed below refuse to run, try renaming executive file to something else; for instance, rename hijackthis.exe to scanner.exe
***VERY IMPORTANT! Make sure, you update Superantispyware, and Malwarebytes before running the scans.***
* Double-click SUPERAntiSpyware.exe and use the default settings for installation.
* An icon will be created on your desktop. Double-click that icon to launch the program.
* If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
* Close SUPERAntiSpyware.
PHYSICALLY DISCONNECT FROM THE INTERNET
Restart computer in Safe Mode. To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; select Safe Mode; you'll see "Safe Mode" in all four corners of your screen
* Open SUPERAntiSpyware.
* Click Scan your Computer... button.
* Click Scanning Preferences/Control Center... button.
* Under General and Startup tab, make sure, Start SUPERAntiSpyware when Windows starts option is UN-checked.
* Click the Scanning Control tab.
* Under Scanner Options make sure the following are checked (leave all others unchecked): - Close browsers before scanning.
- Terminate memory threats before quarantining.
* Click the Close button to leave the control center screen.
* On the left, make sure you check C:\Fixed Drive.
* On the right, choose Perform Complete Scan.
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
* Make sure everything has a checkmark next to it and click Next.
* A notification will appear that Quarantine and Removal is Complete. Click OK and then click the Finish button to return to the main menu.
* If asked if you want to reboot, click Yes.
* To retrieve the removal information after reboot, launch SUPERAntispyware again. - Click Preferences, then click the Statistics/Logs tab.
- Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
- If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
- Please copy and paste the Scan Log results in your next reply.
* Click Close to exit the program. Post SUPERAntiSpyware log.
RECONNECT TO THE INTERNET
RESTART COMPUTER!
STEP 2. Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your desktop. (Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
STEP 4. Download HijackThis: http://www.trendsecure.com/portal/en...kthis/download
by clicking on Download HijackThis Installer
Install, and run it. Post HijackThis log. NOTE. If you're using Vista, right click on HijackThis, and click Run as Administrator
Do NOT attempt to "fix" anything!
DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
fficial
