Solved IE8 'Internet explorer cannot display the webpage' problem.

[Resolved] IE8 'Internet explorer cannot display the webpage' problem.

As posted here, I am unable to connect to the iternet. However Outlook Express is still able to send/recieve emails.


MBAM Log:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5474

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/9/2011 11:51:16 AM
mbam-log-2011-01-09 (11-51-16).txt

Scan type: Quick scan
Objects scanned: 141048
Time elapsed: 12 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\Software\qni8hj710fdl (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



MBR Check Log:

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000003d

Kernel Drivers (total 147):
0x804D7000 \WINDOWS\system32\ntoskrnl.exe
0x806FF000 \WINDOWS\system32\hal.dll
0xF7D58000 \WINDOWS\system32\KDCOM.DLL
0xF7C68000 \WINDOWS\system32\BOOTVID.dll
0xF7809000 ACPI.sys
0xF7D5A000 \WINDOWS\System32\DRIVERS\WMILIB.SYS
0xF77F8000 pci.sys
0xF7858000 isapnp.sys
0xF7E20000 pciide.sys
0xF7AD8000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
0xF7868000 MountMgr.sys
0xF77D9000 ftdisk.sys
0xF7AE0000 PartMgr.sys
0xF7878000 VolSnap.sys
0xF77C1000 atapi.sys
0xF7888000 disk.sys
0xF7898000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
0xF77A1000 fltmgr.sys
0xF778F000 sr.sys
0xF7AE8000 PxHelp20.sys
0xF776B000 Fastfat.sys
0xF7754000 KSecDD.sys
0xF7727000 NDIS.sys
0xF78A8000 SISAGPX.sys
0xF78B8000 ohci1394.sys
0xF78C8000 \WINDOWS\System32\DRIVERS\1394BUS.SYS
0xF770D000 Mup.sys
0xF7AF0000 avgrkx86.sys
0xF78D8000 AVGIDSEH.Sys
0xF7908000 \SystemRoot\System32\DRIVERS\nic1394.sys
0xF7918000 \SystemRoot\System32\DRIVERS\intelppm.sys
0xF7685000 \SystemRoot\System32\DRIVERS\sisgrp.sys
0xF7671000 \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
0xF7928000 \SystemRoot\System32\DRIVERS\imapi.sys
0xF7938000 \SystemRoot\System32\DRIVERS\cdrom.sys
0xF7948000 \SystemRoot\System32\DRIVERS\redbook.sys
0xF764E000 \SystemRoot\System32\DRIVERS\ks.sys
0xF7D5C000 \SystemRoot\System32\DRIVERS\NTIDrvr.sys
0xF7B08000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0xF75B7000 \SystemRoot\system32\drivers\ALCXWDM.SYS
0xF7593000 \SystemRoot\system32\drivers\portcls.sys
0xF7958000 \SystemRoot\system32\drivers\drmk.sys
0xF7530000 \SystemRoot\system32\drivers\ALCXSENS.SYS
0xF7B10000 \SystemRoot\System32\DRIVERS\usbohci.sys
0xF750C000 \SystemRoot\System32\DRIVERS\USBPORT.SYS
0xF7B18000 \SystemRoot\System32\DRIVERS\usbehci.sys
0xF74F9000 \SystemRoot\System32\DRIVERS\C4C_BSC2.sys
0xF7968000 \SystemRoot\System32\DRIVERS\C4C_SOAR.SYS
0xF7978000 \SystemRoot\System32\DRIVERS\C4C_SAMP.sys
0xF7470000 \SystemRoot\System32\DRIVERS\HSF_CNXT.sys
0xF7449000 \SystemRoot\System32\DRIVERS\C4C_AMOS.SYS
0xF7B20000 \SystemRoot\System32\Drivers\Modem.SYS
0xF7988000 \SystemRoot\System32\DRIVERS\Rtlnic51.sys
0xF7B28000 \SystemRoot\System32\DRIVERS\fdc.sys
0xF7998000 \SystemRoot\System32\DRIVERS\serial.sys
0xF7CE8000 \SystemRoot\System32\DRIVERS\serenum.sys
0xF7395000 \SystemRoot\System32\DRIVERS\parport.sys
0xF79A8000 \SystemRoot\System32\DRIVERS\i8042prt.sys
0xF7B30000 \SystemRoot\System32\DRIVERS\kbdclass.sys
0xF7B38000 \SystemRoot\system32\DRIVERS\avgfwdx.sys
0xF7F64000 \SystemRoot\System32\DRIVERS\audstub.sys
0xF79B8000 \SystemRoot\System32\DRIVERS\rasl2tp.sys
0xF7CF0000 \SystemRoot\System32\DRIVERS\ndistapi.sys
0xF737E000 \SystemRoot\System32\DRIVERS\ndiswan.sys
0xF79C8000 \SystemRoot\System32\DRIVERS\raspppoe.sys
0xF79D8000 \SystemRoot\System32\DRIVERS\raspptp.sys
0xF7B40000 \SystemRoot\System32\DRIVERS\TDI.SYS
0xF736D000 \SystemRoot\System32\DRIVERS\psched.sys
0xF79E8000 \SystemRoot\System32\DRIVERS\msgpc.sys
0xF7B48000 \SystemRoot\System32\DRIVERS\ptilink.sys
0xF7B50000 \SystemRoot\System32\DRIVERS\raspti.sys
0xF79F8000 \SystemRoot\System32\DRIVERS\termdd.sys
0xF7B58000 \SystemRoot\System32\DRIVERS\mouclass.sys
0xF7D5E000 \SystemRoot\System32\DRIVERS\swenum.sys
0xF730F000 \SystemRoot\System32\DRIVERS\update.sys
0xF7D00000 \SystemRoot\System32\DRIVERS\mssmbios.sys
0xF7A08000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF7A28000 \SystemRoot\System32\DRIVERS\usbhub.sys
0xF7D62000 \SystemRoot\System32\DRIVERS\USBD.SYS
0xF7B68000 \SystemRoot\System32\DRIVERS\flpydisk.sys
0xF7A58000 \SystemRoot\system32\DRIVERS\avgmfx86.sys
0xF7D64000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7F89000 \SystemRoot\System32\Drivers\Null.SYS
0xF7D66000 \SystemRoot\System32\Drivers\Beep.SYS
0xF7B78000 \SystemRoot\System32\DRIVERS\HIDPARSE.SYS
0xF7B80000 \SystemRoot\System32\drivers\vga.sys
0xF7D68000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7D6A000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF7B88000


Gmer Log:

GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2011-01-09 13:06:47
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST340015A rev.3.01
Running: wxm9o4g1.exe; Driver: C:\DOCUME~1\THECAU~1\LOCALS~1\Temp\kgwcifoc.sys


---- System - GMER 1.0.15 ----

SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xF4B5B6C0]
SSDT \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys (SASKUTIL.SYS/SUPERAdBlocker.com and SUPERAntiSpyware.com) ZwTerminateProcess [0xF4E83620]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xF4B5B810]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xF4B5B8B0]

---- Kernel code sections - GMER 1.0.15 ----

.text ntoskrnl.exe!ZwYieldExecution + 47A 804E4CD4 8 Bytes CALL 36065DCD
init C:\WINDOWS\system32\drivers\ALCXSENS.SYS entry point in "init" section [0xF758A870]

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager@PendingFileRenameOperations ???K????? ??/iissamples/issamples/ResError.htx??????/iissamples/issamples/DefError.htx???????????J????????????????N??J???????????? ????K???????K?&??/iissamples/issamples/HTXError.htx??????noise.dat? ?MBAMSwissArmy???/iissamples/issamples/ResError.htx????????F??K??????????????e???/iissamples/issamples/DefError.htx???????????K????????e?????????????????????????? N??K??????????s???{369647e0-17b0-11ce-9950-00aa004bbb1f}???????K?K?K?K?K?K?K?K??????F??K???????????????????????K????????e??????????K???????????????l?l?l????????F??K????????????????e???????F??K??????????????e????w?wDe??\\?\Root#GR_AVGFWMP#0002#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{2E57C811-DDB9-42C8-8E9A-9CFF438F5AB4}?\s1??? ?????????????K??????????N?????*????????????????????????????????????}??\\?\Root#GR_AVGFWMP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{58456F87-EF5C-4F79-91E4-0BC7944F775D}?\????? ???????J????????????????????????@??????/??? ???????J????????????????????????A?????????? ???????6???????????6??????????????'????????????????????}??? ?????

---- EOF - GMER 1.0.15 ----


DDS Log:



DDS (Ver_10-12-12.02) - FAT32x86
Run by The Cauchi's at 13:18:04.81 on Sun 01/09/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.495.82 [GMT 11:00]

AV: AVG Internet Security 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *Enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
SVCHOST.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\sistray.EXE
C:\WINDOWS\System32\keyhook.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Documents and Settings\The Cauchi's\Application Data\Dropbox\bin\Dropbox.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\AVG\AVG10\avgfws.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgchsvx.exe
C:\Program Files\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\AVG\AVG10\avgam.exe
F:\dds.scr

============== Pseudo HJT Report ===============

uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:8074
uSearchURL,(Default) = hxxp://au.search.yahoo.com/search?fr=mcafee&p=%s
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: MSNToolBandBHO: {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\msn apps\msn toolbar\01.02.3000.1001\en-au\msntb.dll
BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: ninemsn: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\msn apps\msn toolbar\01.02.3000.1001\en-au\msntb.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [TomTomHOME.exe] "c:\program files\tomtom home 2\HOMERunner.exe "
uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\Wcescomm.exe "
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [SiS Tray] c:\windows\system32\sistray.EXE
mRun: [SiS Windows KeyHook] c:\windows\system32\keyhook.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [CTHelper] CTHELPER.EXE
mRun: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
mRun: [SBDrvDet] c:\program files\creative\sb drive det\SBDrvDet.exe /r
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [Lexmark X5100 Series] "c:\program files\lexmark x5100 series\lxbabmgr.exe "
mRun: [WinPatrol] c:\program files\billp studios\winpatrol\winpatrol.exe -expressboot
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
StartupFolder: c:\docume~1\thecau~1\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\the cauchi's\application data\dropbox\bin\Dropbox.exe
IE: &ieSpell Options - c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: Lookup on Merriam Webster - file://c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\iespell\wikipedia.HTM
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab
DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - hxxp://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1180506225375
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\thecau~1\applic~1\mozilla\firefox\profiles\avl5515m.default\
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4cbcad79&v=6.011.025.001&i=23&tp=ab&iy=&ychte=au&lng=en-US&q=
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files\mcafee\SiteAdvisor
FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg10\Firefox
FF - Ext: AVG Security Toolbar em:version=6.011.025.001 em:displayname=AVG Security Toolbar em:iconURL=chrome://tavgp/skin/logo.ico em:creator=AVG Technologies em:description=AVG Security Toolbar em:homepageURL=http://www.avg.com >: avg@igeared - c:\program files\avg\avg10\toolbar\firefox\avg@igeared
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: Ask Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com

============= SERVICES / DRIVERS ===============

R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 251728]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-9-7 299984]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2009-8-5 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-8-5 67656]
R1 SiSEsc;SISLIB_ESC;c:\windows\system32\sisesc.sys [2003-12-31 28416]
R2 avgfws;AVG Firewall;c:\program files\avg\avg10\avgfws.exe [2010-11-22 3226632]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2010-11-23 6128208]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-8-16 93320]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2010-7-12 30432]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 123472]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 30288]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 26192]
R3 C4C_BSC2;C4C_BSC2;c:\windows\system32\drivers\C4C_BSC2.sys [2003-12-31 84788]
S3 alcan5ln;Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS);c:\windows\system32\drivers\alcan5ln.sys [2004-7-10 36048]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-1-6 517448]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2010-7-12 30432]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-8-5 12872]
S4 0226991259740657mcinstcleanup;McAfee Application Installer Cleanup (0226991259740657);c:\windows\temp\022699~1.exe c:\progra~1\common~1\mcafee\instal~1\cleanup.ini -cleanup -nolog -service --> c:\windows\temp\022699~1.exe c:\progra~1\common~1\mcafee\instal~1\cleanup.ini -cleanup -nolog -service [?]

=============== Created Last 30 ================

2011-01-05 00:33:49 -------- d-----w- c:\docume~1\thecau~1\applic~1\AVG8
2011-01-04 11:41:30 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-01-04 11:41:30 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-24 23:58:49 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-12-24 23:58:47 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-12-24 23:55:17 -------- d-----w- c:\program files\iPod
2010-12-24 23:54:19 -------- d-----w- c:\program files\iTunes
2010-12-24 23:54:19 -------- d-----w- c:\docume~1\alluse~1\applic~1\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-12-24 23:43:14 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-12-24 23:43:14 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-12-24 23:40:16 -------- d-----w- c:\program files\Bonjour
2010-12-15 04:05:41 40960 ------w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 04:03:48 45568 ------w- c:\windows\system32\dllcache\wab.exe

==================== Find3M ====================

2010-11-29 06:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 06:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-18 18:12:44 81920 ------w- c:\windows\system32\isign32.dll
2010-11-06 00:26:58 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25:54 385024 ----a-w- c:\windows\system32\html.iec
2010-10-28 13:13:22 290048 ------w- c:\windows\system32\atmfd.dll
2010-10-26 13:25:00 1853312 ------w- c:\windows\system32\win32k.sys

============= FINISH: 13:20:38.42 ===============



Attatch Log:

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 6/29/2004 6:58:06 PM
System Uptime: 1/7/2011 9:54:39 AM (52 hours ago)

Motherboard: Acer | | E61ML
Processor: Intel(R) Celeron(R) CPU 2.60GHz | Socket 478 | 2600/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (FAT32) - 37 GiB total, 1.922 GiB free.
D: is CDROM ()
E: is CDROM (UDF)
F: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP2206: 12/20/2010 5:00:35 PM - Software Distribution Service 3.0
RP2207: 12/20/2010 10:51:41 PM - Software Distribution Service 3.0
RP2208: 12/21/2010 5:01:05 PM - Software Distribution Service 3.0
RP2209: 12/21/2010 6:03:50 PM - Software Distribution Service 3.0
RP2210: 12/21/2010 10:05:10 PM - Software Distribution Service 3.0
RP2211: 12/21/2010 11:32:29 PM - Software Distribution Service 3.0
RP2212: 12/22/2010 5:00:32 PM - Software Distribution Service 3.0
RP2213: 12/22/2010 11:15:11 PM - Software Distribution Service 3.0
RP2214: 12/23/2010 5:00:49 PM - Software Distribution Service 3.0
RP2215: 12/23/2010 5:51:26 PM - Software Distribution Service 3.0
RP2216: 12/24/2010 5:00:31 PM - Software Distribution Service 3.0
RP2217: 12/25/2010 10:53:47 AM - Installed iTunes
RP2218: 12/25/2010 5:00:51 PM - Software Distribution Service 3.0
RP2219: 12/26/2010 12:08:14 AM - Software Distribution Service 3.0
RP2220: 12/26/2010 5:00:53 PM - Software Distribution Service 3.0
RP2221: 12/27/2010 5:00:32 PM - Software Distribution Service 3.0
RP2222: 12/27/2010 11:26:08 PM - Software Distribution Service 3.0
RP2223: 12/28/2010 5:01:12 PM - Software Distribution Service 3.0
RP2224: 12/29/2010 5:00:36 PM - Software Distribution Service 3.0
RP2225: 12/30/2010 5:00:19 PM - Software Distribution Service 3.0
RP2226: 12/31/2010 5:00:39 PM - Software Distribution Service 3.0
RP2227: 1/1/2011 1:25:05 AM - Software Distribution Service 3.0
RP2228: 1/1/2011 5:00:38 PM - Software Distribution Service 3.0
RP2229: 1/2/2011 5:00:40 PM - Software Distribution Service 3.0
RP2230: 1/2/2011 8:58:16 PM - Software Distribution Service 3.0
RP2231: 1/2/2011 9:25:06 PM - Software Distribution Service 3.0
RP2232: 1/3/2011 5:00:56 PM - Software Distribution Service 3.0
RP2233: 1/3/2011 8:55:12 PM - Software Distribution Service 3.0
RP2234: 1/3/2011 9:30:18 PM - Software Distribution Service 3.0
RP2235: 1/3/2011 10:37:01 PM - Software Distribution Service 3.0
RP2236: 1/4/2011 5:00:25 PM - Software Distribution Service 3.0
RP2237: 1/4/2011 10:39:27 PM - Restore Operation
RP2238: 1/4/2011 10:46:59 PM - Software Distribution Service 3.0
RP2239: 1/4/2011 11:11:07 PM - Restore Operation
RP2240: 1/4/2011 11:32:54 PM - Restore Operation
RP2241: 1/4/2011 11:51:33 PM - Restore Operation
RP2242: 1/5/2011 1:03:37 AM - Software Distribution Service 3.0
RP2243: 1/5/2011 11:32:11 AM - Installed AVG 2011
RP2244: 1/5/2011 5:00:33 PM - Software Distribution Service 3.0
RP2245: 1/5/2011 10:19:13 PM - Software Distribution Service 3.0
RP2246: 1/6/2011 9:00:49 AM - Installed AVG 2011
RP2247: 1/6/2011 9:02:06 AM - Removed AVG 2011
RP2248: 1/6/2011 9:02:46 AM - Removed AVG 2011
RP2249: 1/6/2011 9:08:16 AM - Installed AVG 2011
RP2250: 1/6/2011 9:32:08 AM - Removed AVG 2011
RP2251: 1/6/2011 5:01:19 PM - Software Distribution Service 3.0
RP2252: 1/7/2011 5:00:33 PM - Software Distribution Service 3.0
RP2253: 1/8/2011 5:00:31 PM - Software Distribution Service 3.0

==== Installed Programs ======================

3D Groove Playback Engine
acer
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.1
Alcatel SpeedTouch USB Software
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft VideoImpression 1.6
Ask Toolbar
ATI Display Driver
AVG 2011
Bonjour
COD2 Demo
Compatibility Pack for the 2007 Office system
Critical Update for Windows Media Player 11 (KB959772)
Dropbox
FaxTools
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
ieSpell
iTunes
Java(TM) 6 Update 14
Kaspersky Online Scanner
Lexmark X5100 Series
Macromedia Shockwave Player
Malwarebytes' Anti-Malware
McAfee SiteAdvisor
Microsoft ActiveSync
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Professional with FrontPage
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Windows Journal Viewer
Mozilla Firefox (3.6.8)
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero Suite
ninemsn Toolbar
Nokia Connectivity Cable DKU-2 Drivers
Nokia Connectivity Cable Driver
Nokia PC Connectivity Solution
Nokia PC Suite
NTI CD & DVD-Maker
NTI CD & DVD-Maker 6.5 Gold
NVIDIA Display Driver
OGA Notifier 1.7.0105.35.0
PowerDVD
QuickTime
Realtek AC'97 Audio
RTLSetup
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
SiS 661FX_760_741_M661FX_M760_M741
Sound Blaster Audigy 2 ZS
Spelling Dictionaries Support For Adobe Reader 9
SpywareBlaster 4.2
SUPERAntiSpyware Free Edition
Symantec Technical Support Web Controls
TomTom HOME
Update for Windows Internet Explorer 8 (KB973874)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VC_MergeModuleToMSI
VLC media player 1.0.5
WebFldrs XP
Windows Defender Signatures
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live installer
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinPatrol 2009
WinRAR archiver
WOT for Internet Explorer

==== Event Viewer Messages From Past Week ========

1/8/2011 5:01:28 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/7/2011 5:01:24 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/6/2011 9:29:46 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the AVGIDSAgent service to connect.
1/6/2011 9:29:46 AM, error: Service Control Manager [7000] - The AVGIDSAgent service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/6/2011 9:27:38 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the service.
1/6/2011 5:02:10 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/5/2011 5:03:17 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070005: Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2416400).
1/5/2011 5:01:15 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/5/2011 11:24:46 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the avgwd service.
1/5/2011 10:19:55 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/5/2011 1:04:24 AM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/4/2011 9:47:15 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the avgfws service.
1/4/2011 5:02:23 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070005: Update for Internet Explorer for Windows XP (KB2467659).
1/4/2011 5:01:05 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/4/2011 10:58:57 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/4/2011 10:24:22 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/4/2011 10:19:46 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Avgldx86 Avgmfx86 Fips intelppm SASDIFSV SASKUTIL
1/3/2011 9:31:03 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/3/2011 8:56:23 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/3/2011 7:42:25 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
1/3/2011 5:02:38 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/3/2011 10:37:33 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/2/2011 9:25:48 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/2/2011 8:59:08 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.
1/2/2011 6:28:54 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Dnscache service.
1/2/2011 5:01:33 PM, error: NtServicePack [4373] - Windows XP KB2467659 installation failed.
Access is denied.

==== End Of File ===========================
Log:[/B]



Any help would be much appreciated,


-Shorerider.

 

Here is the complete MBR check log.


MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000003d

Kernel Drivers (total 148):
0x804D7000 \WINDOWS\system32\ntoskrnl.exe
0x806FF000 \WINDOWS\system32\hal.dll
0xF7D58000 \WINDOWS\system32\KDCOM.DLL
0xF7C68000 \WINDOWS\system32\BOOTVID.dll
0xF7809000 ACPI.sys
0xF7D5A000 \WINDOWS\System32\DRIVERS\WMILIB.SYS
0xF77F8000 pci.sys
0xF7858000 isapnp.sys
0xF7E20000 pciide.sys
0xF7AD8000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
0xF7868000 MountMgr.sys
0xF77D9000 ftdisk.sys
0xF7AE0000 PartMgr.sys
0xF7878000 VolSnap.sys
0xF77C1000 atapi.sys
0xF7888000 disk.sys
0xF7898000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
0xF77A1000 fltmgr.sys
0xF778F000 sr.sys
0xF7AE8000 PxHelp20.sys
0xF776B000 Fastfat.sys
0xF7754000 KSecDD.sys
0xF7727000 NDIS.sys
0xF78A8000 SISAGPX.sys
0xF78B8000 ohci1394.sys
0xF78C8000 \WINDOWS\System32\DRIVERS\1394BUS.SYS
0xF770D000 Mup.sys
0xF7AF0000 avgrkx86.sys
0xF78D8000 AVGIDSEH.Sys
0xF7908000 \SystemRoot\System32\DRIVERS\nic1394.sys
0xF7918000 \SystemRoot\System32\DRIVERS\intelppm.sys
0xF7685000 \SystemRoot\System32\DRIVERS\sisgrp.sys
0xF7671000 \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS
0xF7928000 \SystemRoot\System32\DRIVERS\imapi.sys
0xF7938000 \SystemRoot\System32\DRIVERS\cdrom.sys
0xF7948000 \SystemRoot\System32\DRIVERS\redbook.sys
0xF764E000 \SystemRoot\System32\DRIVERS\ks.sys
0xF7D5C000 \SystemRoot\System32\DRIVERS\NTIDrvr.sys
0xF7B08000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0xF75B7000 \SystemRoot\system32\drivers\ALCXWDM.SYS
0xF7593000 \SystemRoot\system32\drivers\portcls.sys
0xF7958000 \SystemRoot\system32\drivers\drmk.sys
0xF7530000 \SystemRoot\system32\drivers\ALCXSENS.SYS
0xF7B10000 \SystemRoot\System32\DRIVERS\usbohci.sys
0xF750C000 \SystemRoot\System32\DRIVERS\USBPORT.SYS
0xF7B18000 \SystemRoot\System32\DRIVERS\usbehci.sys
0xF74F9000 \SystemRoot\System32\DRIVERS\C4C_BSC2.sys
0xF7968000 \SystemRoot\System32\DRIVERS\C4C_SOAR.SYS
0xF7978000 \SystemRoot\System32\DRIVERS\C4C_SAMP.sys
0xF7470000 \SystemRoot\System32\DRIVERS\HSF_CNXT.sys
0xF7449000 \SystemRoot\System32\DRIVERS\C4C_AMOS.SYS
0xF7B20000 \SystemRoot\System32\Drivers\Modem.SYS
0xF7988000 \SystemRoot\System32\DRIVERS\Rtlnic51.sys
0xF7B28000 \SystemRoot\System32\DRIVERS\fdc.sys
0xF7998000 \SystemRoot\System32\DRIVERS\serial.sys
0xF7CE8000 \SystemRoot\System32\DRIVERS\serenum.sys
0xF7395000 \SystemRoot\System32\DRIVERS\parport.sys
0xF79A8000 \SystemRoot\System32\DRIVERS\i8042prt.sys
0xF7B30000 \SystemRoot\System32\DRIVERS\kbdclass.sys
0xF7B38000 \SystemRoot\system32\DRIVERS\avgfwdx.sys
0xF7F64000 \SystemRoot\System32\DRIVERS\audstub.sys
0xF79B8000 \SystemRoot\System32\DRIVERS\rasl2tp.sys
0xF7CF0000 \SystemRoot\System32\DRIVERS\ndistapi.sys
0xF737E000 \SystemRoot\System32\DRIVERS\ndiswan.sys
0xF79C8000 \SystemRoot\System32\DRIVERS\raspppoe.sys
0xF79D8000 \SystemRoot\System32\DRIVERS\raspptp.sys
0xF7B40000 \SystemRoot\System32\DRIVERS\TDI.SYS
0xF736D000 \SystemRoot\System32\DRIVERS\psched.sys
0xF79E8000 \SystemRoot\System32\DRIVERS\msgpc.sys
0xF7B48000 \SystemRoot\System32\DRIVERS\ptilink.sys
0xF7B50000 \SystemRoot\System32\DRIVERS\raspti.sys
0xF79F8000 \SystemRoot\System32\DRIVERS\termdd.sys
0xF7B58000 \SystemRoot\System32\DRIVERS\mouclass.sys
0xF7D5E000 \SystemRoot\System32\DRIVERS\swenum.sys
0xF730F000 \SystemRoot\System32\DRIVERS\update.sys
0xF7D00000 \SystemRoot\System32\DRIVERS\mssmbios.sys
0xF7A08000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF7A28000 \SystemRoot\System32\DRIVERS\usbhub.sys
0xF7D62000 \SystemRoot\System32\DRIVERS\USBD.SYS
0xF7B68000 \SystemRoot\System32\DRIVERS\flpydisk.sys
0xF7A58000 \SystemRoot\system32\DRIVERS\avgmfx86.sys
0xF7D64000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7F89000 \SystemRoot\System32\Drivers\Null.SYS
0xF7D66000 \SystemRoot\System32\Drivers\Beep.SYS
0xF7B78000 \SystemRoot\System32\DRIVERS\HIDPARSE.SYS
0xF7B80000 \SystemRoot\System32\drivers\vga.sys
0xF7D68000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7D6A000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF7B88000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF7B90000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF7D34000 \SystemRoot\System32\DRIVERS\rasacd.sys
0xF5214000 \SystemRoot\System32\DRIVERS\ipsec.sys
0xF51BB000 \SystemRoot\System32\DRIVERS\tcpip.sys
0xF5173000 \SystemRoot\system32\DRIVERS\avgtdix.sys
0xF514D000 \SystemRoot\System32\DRIVERS\ipnat.sys
0xF7A68000 \SystemRoot\System32\DRIVERS\wanarp.sys
0xF7A78000 \SystemRoot\System32\DRIVERS\arp1394.sys
0xF50FD000 \SystemRoot\System32\DRIVERS\netbt.sys
0xF50DB000 \SystemRoot\System32\drivers\afd.sys
0xF7A88000 \SystemRoot\System32\DRIVERS\netbios.sys
0xF7B98000 \SystemRoot\system32\sisesc.sys
0xF7D48000 \SystemRoot\System32\DRIVERS\srvkp.sys
0xF4E79000 \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
0xF7BA0000 \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
0xF4E4E000 \SystemRoot\System32\DRIVERS\rdbss.sys
0xF4DDE000 \SystemRoot\System32\DRIVERS\mrxsmb.sys
0xF7AA8000 \SystemRoot\System32\Drivers\Fips.SYS
0xF4DA2000 \SystemRoot\system32\DRIVERS\avgldx86.sys
0xF7BA8000 \SystemRoot\System32\DRIVERS\usbccgp.sys
0xF764A000 \SystemRoot\System32\DRIVERS\hidusb.sys
0xF7AB8000 \SystemRoot\System32\DRIVERS\HIDCLASS.SYS
0xF7646000 \SystemRoot\System32\DRIVERS\usbscan.sys
0xF7BB0000 \SystemRoot\System32\DRIVERS\usbprint.sys
0xF7642000 \SystemRoot\System32\DRIVERS\mouhid.sys
0xF7439000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xF4D19000 \SystemRoot\System32\Drivers\Udfs.SYS
0xF4D01000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF7D6C000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xF4D8A000 \SystemRoot\System32\drivers\Dxapi.sys
0xF7BB8000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF7E60000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\SiSGRV.dll
0xF4BBD000 \SystemRoot\System32\DRIVERS\ndisuio.sys
0xF487C000 \SystemRoot\System32\DRIVERS\mrxdav.sys
0xF7D82000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xF499D000 \SystemRoot\System32\Drivers\Aspi32.SYS
0xF4B59000 \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys
0xF4747000 \SystemRoot\System32\DRIVERS\C4C_FALL.sys
0xF472B000 \SystemRoot\System32\DRIVERS\C4C_FSKS.sys
0xF46A3000 \SystemRoot\System32\DRIVERS\C4C_K56K.sys
0xF47B0000 \SystemRoot\System32\DRIVERS\mdmxsdk.sys
0xF4583000 \SystemRoot\System32\DRIVERS\srv.sys
0xF470B000 \??\C:\WINDOWS\System32\drivers\PfModNT.sys
0xF4503000 \SystemRoot\System32\DRIVERS\C4C_FAXX.sys
0xF47E4000 \SystemRoot\System32\DRIVERS\C4C_TONE.sys
0xF4461000 \SystemRoot\System32\DRIVERS\C4C_V124.sys
0xF4B69000 \SystemRoot\system32\DRIVERS\AVGIDSFilter.Sys
0xF4321000 \SystemRoot\system32\DRIVERS\AVGIDSDriver.Sys
0xF3E30000 \SystemRoot\System32\Drivers\HTTP.sys
0xF3CB3000 \SystemRoot\system32\drivers\wdmaud.sys
0xF73C9000 \SystemRoot\system32\drivers\sysaudio.sys
0xF4191000 \SystemRoot\System32\DRIVERS\USBSTOR.SYS
0xF36A2000 \??\C:\DOCUME~1\THECAU~1\LOCALS~1\Temp\kgwcifoc.sys
0xF7C20000 \??\C:\DOCUME~1\THECAU~1\LOCALS~1\Temp\mbr.sys
0xF3587000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\System32\ntdll.dll

Processes (total 52):
0 System Idle Process
4 System
648 C:\WINDOWS\System32\SMSS.EXE
896 CSRSS.EXE
924 C:\WINDOWS\System32\WINLOGON.EXE
984 C:\WINDOWS\System32\SERVICES.EXE
996 C:\WINDOWS\System32\LSASS.EXE
1188 C:\WINDOWS\System32\SVCHOST.EXE
1296 SVCHOST.EXE
1416 C:\WINDOWS\System32\SVCHOST.EXE
1504 SVCHOST.EXE
1676 SVCHOST.EXE
1820 C:\WINDOWS\System32\LEXBCES.EXE
1856 C:\WINDOWS\System32\LEXPPS.EXE
1852 C:\WINDOWS\System32\SPOOLSV.EXE
512 SVCHOST.EXE
544 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
640 C:\Program Files\AVG\AVG10\AVGWDSVC.EXE
684 C:\Program Files\Bonjour\mDNSResponder.exe
1404 C:\Program Files\Java\JRE6\BIN\jqs.exe
160 C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
128 C:\WINDOWS\System32\SVCHOST.EXE
2808 alg.exe
1828 C:\WINDOWS\System32\WGATray.exe
3696 C:\WINDOWS\explorer.exe
1892 C:\WINDOWS\System32\sistray.EXE
416 C:\WINDOWS\System32\Keyhook.exe
1172 C:\WINDOWS\SOUNDMAN.EXE
272 C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
236 C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
2912 C:\Program Files\QuickTime\QTTask.exe
3660 C:\Program Files\iTunes\iTunesHelper.exe
3740 C:\Program Files\AVG\AVG10\avgtray.exe
3792 C:\Program Files\TomTom HOME 2\HOMERunner.exe
3876 C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
3908 C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
3172 C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
2160 C:\WINDOWS\System32\ctfmon.exe
2660 C:\Program Files\Microsoft ActiveSync\rapimgr.exe
2036 C:\Documents and Settings\The Cauchi's\Application Data\Dropbox\bin\Dropbox.exe
3744 C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
3816 C:\Program Files\iPod\bin\iPodService.exe
2800 C:\WINDOWS\System32\wuauclt.exe
2080 C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
2700 C:\Program Files\AVG\AVG10\avgemcx.exe
600 C:\Program Files\AVG\AVG10\avgfws.exe
2164 C:\Program Files\AVG\AVG10\avgnsx.exe
3280 C:\Program Files\AVG\AVG10\avgchsvx.exe
2620 C:\Program Files\AVG\AVG10\avgrsx.exe
124 C:\Program Files\AVG\AVG10\avgcsrvx.exe
2100 C:\Program Files\AVG\AVG10\avgam.exe
1144 F:\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (FAT32)

PhysicalDrive0 Model Number: ST340015A, Rev: 3.01

Size Device Name MBR Status
--------------------------------------------
37 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!

 

Broni,

Is it ok to reinstall AVG once finished with ComboFix?


ComboFix Log:
ComboFix 11-01-08.04 - The Cauchi's 01/09/2011 18:26:07.3.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.495.237 [GMT 11:00]
Running from: F:\ComboFix.exe
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\BackUp

.
((((((((((((((((((((((((( Files Created from 2010-12-09 to 2011-01-09 )))))))))))))))))))))))))))))))
.

2011-01-05 00:33 . 2011-01-05 00:33 -------- d-----w- c:\documents and settings\The Cauchi's\Application Data\AVG8
2011-01-04 11:41 . 2011-01-04 11:41 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-29 22:03 . 2010-12-29 22:03 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-12-29 22:03 . 2010-12-29 22:03 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-12-24 23:58 . 2008-04-17 01:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-12-24 23:58 . 2009-05-18 02:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-12-24 23:55 . 2010-12-24 23:55 -------- d-----w- c:\program files\iPod
2010-12-24 23:54 . 2010-12-24 23:54 -------- d-----w- c:\program files\iTunes
2010-12-24 23:54 . 2010-12-24 23:54 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-12-24 23:48 . 2010-12-24 23:48 -------- d-----w- c:\program files\QuickTime
2010-12-24 23:44 . 2010-12-24 23:44 -------- d-----w- c:\program files\Apple Software Update
2010-12-24 23:43 . 2010-12-24 23:44 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer
2010-12-24 23:43 . 2010-09-28 04:44 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-12-24 23:43 . 2010-09-28 04:44 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-12-24 23:40 . 2010-12-24 23:40 -------- d-----w- c:\program files\Bonjour
2010-12-24 23:39 . 2010-12-24 23:39 -------- d-----w- c:\program files\Common Files\Apple
2010-12-15 04:05 . 2010-11-02 15:17 40960 ------w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 04:03 . 2010-10-11 14:59 45568 ------w- c:\windows\system32\dllcache\wab.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-20 07:09 . 2009-07-24 21:04 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 07:08 . 2009-07-24 21:04 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-29 06:38 . 2010-11-29 06:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 06:38 . 2010-11-29 06:38 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-18 18:12 . 2003-12-29 21:21 81920 ------w- c:\windows\system32\isign32.dll
2010-11-06 00:26 . 2004-02-06 07:05 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 1979-12-31 13:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 1979-12-31 13:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2004-08-04 04:59 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 1979-12-31 13:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 1979-12-31 13:00 290048 ------w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 1980-01-01 08:00 1853312 ------w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe "= "c:\program files\TomTom HOME 2\HOMERunner.exe" [2008-01-29 361832]
"SUPERAntiSpyware "= "c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-12-23 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiS Tray "= "c:\windows\System32\sistray.EXE" [2003-08-19 667648]
"SiS Windows KeyHook "= "c:\windows\System32\keyhook.exe" [2003-08-19 241664]
"NvCplDaemon "= "c:\windows\System32\NvCpl.dll" [2003-10-06 5058560]
"nwiz "= "nwiz.exe" [2003-10-06 741376]
"CTHelper "= "CTHELPER.EXE" [2003-06-20 24576]
"AsioReg "= "CTASIO.DLL" [2003-06-20 118784]
"SBDrvDet "= "c:\program files\Creative\SB Drive Det\SBDrvDet.exe" [2002-12-03 45056]
"SoundMan "= "SOUNDMAN.EXE" [2003-08-14 57344]
"Lexmark X5100 Series "= "c:\program files\Lexmark X5100 Series\lxbabmgr.exe" [2003-03-04 86100]
"WinPatrol "= "c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2009-10-10 320832]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-22 35760]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]

c:\documents and settings\The Cauchi's\Start Menu\Programs\Startup\
Dropbox.lnk - c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\Dropbox.exe [2010-2-26 21979992]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-12 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-27 01:43 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-12-13 06:16 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 00:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
2006-06-27 05:21 1449984 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 06:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2005-01-11 16:01 32768 ----a-w- c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe "=
"c:\\WINDOWS\\System32\\LEXPPS.EXE "=
"c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe "=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe "=
"c:\\Program Files\\iTunes\\iTunes.exe "=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [8/5/2009 4:06 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [8/5/2009 4:06 PM 67656]
R1 SiSEsc;SISLIB_ESC;c:\windows\system32\sisesc.sys [12/31/2003 8:51 PM 28416]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [8/16/2009 3:28 PM 93320]
R3 C4C_BSC2;C4C_BSC2;c:\windows\system32\drivers\C4C_BSC2.sys [12/31/2003 8:17 PM 84788]
S3 alcan5ln;Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS);c:\windows\system32\drivers\alcan5ln.sys [7/10/2004 10:30 AM 36048]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [8/5/2009 4:06 PM 12872]
S4 0226991259740657mcinstcleanup;McAfee Application Installer Cleanup (0226991259740657);c:\windows\TEMP\022699~1.EXE c:\progra~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service --> c:\windows\TEMP\022699~1.EXE c:\progra~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service [?]
.
Contents of the 'Scheduled Tasks' folder

2011-01-09 c:\windows\Tasks\User_Feed_Synchronization-{96C01A31-77B7-4EAB-87DF-AC698AC2C098}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 17:31]

2011-01-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 00:50]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:8074
uSearchURL,(Default) = hxxp://au.search.yahoo.com/search?fr=mcafee&p=%s
IE: &ieSpell Options - c:\program files\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
FF - ProfilePath - c:\documents and settings\The Cauchi's\Application Data\Mozilla\Firefox\Profiles\avl5515m.default\
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4cbcad79&v=6.011.025.001&i=23&tp=ab&iy=&ychte=au&lng=en-US&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files\McAfee\SiteAdvisor
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: Ask Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
.
.
------- File Associations -------
.
.
- - - - ORPHANS REMOVED - - - -

Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre1.5.0_10\bin\jusched.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-09 18:34
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101 "

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled "=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@= "c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe "

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker4 "

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "

[HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]
@DACL=(02 0000)
@=" "
"waol.exe "=dword:00000001
"cs.exe "=dword:00000001
"wm.exe "=dword:00000001
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(532)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2316)
c:\windows\system32\WININET.dll
c:\program files\BillP Studios\WinPatrol\PATROLPRO.DLL
c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2011-01-09 18:39:23
ComboFix-quarantined-files.txt 2011-01-09 07:39

Pre-Run: 2,517,991,424 bytes free
Post-Run: 2,481,782,784 bytes free

- - End Of File - - F9D15558067A00BC3EF3279B8A201A01

 

Broni,

After the reboot, I got a notification to say that the Recycle Bin on drive C is corrupt, also asking if I wanted to delete it (or something like that). I selected 'NO' and took no action. I had to make a selection before I coud get the ComboFix log. I hope this was ok to do?


ComboFix Log:


ComboFix 11-01-08.04 - The Cauchi's 01/10/2011 21:34:07.4.1 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.495.215 [GMT 11:00]
Running from: C:\ComboFix.exe
Command switches used :: C:\CFScript.txt
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_0226991259740657mcinstcleanup


((((((((((((((((((((((((( Files Created from 2010-12-10 to 2011-01-10 )))))))))))))))))))))))))))))))
.

2011-01-05 00:33 . 2011-01-05 00:33 -------- d-----w- c:\documents and settings\The Cauchi's\Application Data\AVG8
2011-01-04 11:41 . 2011-01-04 11:41 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-29 22:03 . 2010-12-29 22:03 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-12-29 22:03 . 2010-12-29 22:03 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-12-24 23:58 . 2008-04-17 01:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-12-24 23:58 . 2009-05-18 02:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-12-24 23:55 . 2010-12-24 23:55 -------- d-----w- c:\program files\iPod
2010-12-24 23:54 . 2010-12-24 23:54 -------- d-----w- c:\program files\iTunes
2010-12-24 23:54 . 2010-12-24 23:54 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-12-24 23:48 . 2010-12-24 23:48 -------- d-----w- c:\program files\QuickTime
2010-12-24 23:44 . 2010-12-24 23:44 -------- d-----w- c:\program files\Apple Software Update
2010-12-24 23:43 . 2010-12-24 23:44 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer
2010-12-24 23:43 . 2010-09-28 04:44 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-12-24 23:43 . 2010-09-28 04:44 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-12-24 23:40 . 2010-12-24 23:40 -------- d-----w- c:\program files\Bonjour
2010-12-24 23:39 . 2010-12-24 23:39 -------- d-----w- c:\program files\Common Files\Apple
2010-12-15 04:05 . 2010-11-02 15:17 40960 ------w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-15 04:03 . 2010-10-11 14:59 45568 ------w- c:\windows\system32\dllcache\wab.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-20 07:09 . 2009-07-24 21:04 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 07:08 . 2009-07-24 21:04 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-29 06:38 . 2010-11-29 06:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 06:38 . 2010-11-29 06:38 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-18 18:12 . 2003-12-29 21:21 81920 ------w- c:\windows\system32\isign32.dll
2010-11-06 00:26 . 2004-02-06 07:05 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26 . 1979-12-31 13:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26 . 1979-12-31 13:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2004-08-04 04:59 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 1979-12-31 13:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:13 . 1979-12-31 13:00 290048 ------w- c:\windows\system32\atmfd.dll
2010-10-26 13:25 . 1980-01-01 08:00 1853312 ------w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((( SnapShot@2011-01-09_07.34.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-01-10 10:46 . 2011-01-10 10:46 16384 c:\windows\Temp\Perflib_Perfdata_57c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe "= "c:\program files\TomTom HOME 2\HOMERunner.exe" [2008-01-29 361832]
"SUPERAntiSpyware "= "c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-12-23 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiS Tray "= "c:\windows\System32\sistray.EXE" [2003-08-19 667648]
"SiS Windows KeyHook "= "c:\windows\System32\keyhook.exe" [2003-08-19 241664]
"NvCplDaemon "= "c:\windows\System32\NvCpl.dll" [2003-10-06 5058560]
"nwiz "= "nwiz.exe" [2003-10-06 741376]
"CTHelper "= "CTHELPER.EXE" [2003-06-20 24576]
"AsioReg "= "CTASIO.DLL" [2003-06-20 118784]
"SBDrvDet "= "c:\program files\Creative\SB Drive Det\SBDrvDet.exe" [2002-12-03 45056]
"SoundMan "= "SOUNDMAN.EXE" [2003-08-14 57344]
"Lexmark X5100 Series "= "c:\program files\Lexmark X5100 Series\lxbabmgr.exe" [2003-03-04 86100]
"WinPatrol "= "c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2009-10-10 320832]
"Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-22 35760]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]

c:\documents and settings\The Cauchi's\Start Menu\Programs\Startup\
Dropbox.lnk - c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\Dropbox.exe [2010-2-26 21979992]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-12 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-27 01:43 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-12-13 06:16 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 00:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
2006-06-27 05:21 1449984 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 06:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2005-01-11 16:01 32768 ----a-w- c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe "=
"c:\\WINDOWS\\System32\\LEXPPS.EXE "=
"c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe "=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe "=
"c:\\Program Files\\iTunes\\iTunes.exe "=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [8/5/2009 4:06 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [8/5/2009 4:06 PM 67656]
R1 SiSEsc;SISLIB_ESC;c:\windows\system32\sisesc.sys [12/31/2003 8:51 PM 28416]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [8/16/2009 3:28 PM 93320]
R3 C4C_BSC2;C4C_BSC2;c:\windows\system32\drivers\C4C_BSC2.sys [12/31/2003 8:17 PM 84788]
S3 alcan5ln;Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS);c:\windows\system32\drivers\alcan5ln.sys [7/10/2004 10:30 AM 36048]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [8/5/2009 4:06 PM 12872]
.
Contents of the 'Scheduled Tasks' folder

2011-01-10 c:\windows\Tasks\User_Feed_Synchronization-{96C01A31-77B7-4EAB-87DF-AC698AC2C098}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 17:31]

2011-01-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 00:50]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://au.search.yahoo.com/search?fr=mcafee&p=%s
IE: &ieSpell Options - c:\program files\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
FF - ProfilePath - c:\documents and settings\The Cauchi's\Application Data\Mozilla\Firefox\Profiles\avl5515m.default\
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4cbcad79&v=6.011.025.001&i=23&tp=ab&iy=&ychte=au&lng=en-US&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files\McAfee\SiteAdvisor
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: Ask Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-10 21:47
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101 "

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled "=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@= "c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe "

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker4 "

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "

[HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]
@DACL=(02 0000)
@=" "
"waol.exe "=dword:00000001
"cs.exe "=dword:00000001
"wm.exe "=dword:00000001
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(516)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2368)
c:\windows\system32\WININET.dll
c:\program files\BillP Studios\WinPatrol\PATROLPRO.DLL
c:\documents and settings\The Cauchi's\Application Data\Dropbox\bin\DropboxExt.13.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll
c:\windows\system32\ConnAPI.DLL
c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_eng.nlr
c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\SUPERAntiSpyware\SASSEH.DLL
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\WgaTray.exe
c:\windows\SOUNDMAN.EXE
c:\program files\Lexmark X5100 Series\lxbabmon.exe
c:\program files\Microsoft ActiveSync\Wcescomm.exe
c:\progra~1\MICROS~3\rapimgr.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2011-01-10 21:52:25 - machine was rebooted
ComboFix-quarantined-files.txt 2011-01-10 10:52

Pre-Run: 2,438,266,880 bytes free
Post-Run: 2,363,064,320 bytes free

- - End Of File - - 0593C9C3F503737B86F1633B522C9EB9



-Shorerider.

 

Broni,

I'm back. (on my desktop)

Internet is connecting without any issues and I have reinstalled AVG. However, I have found myself having to log on to this site on every visit, even after checking the 'Remember me' box. It's also happening with my Hotmail account.


Extras.Txt:

OTL Extras logfile created on: 1/11/2011 8:50:07 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

495.00 Mb Total Physical Memory | 168.00 Mb Available Physical Memory | 34.00% Memory free
794.00 Mb Paging File | 231.00 Mb Available in Paging File | 29.00% Paging File free
Paging file location(s): C:\pagefile.sys 336 672 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 1.25 Gb Free Space | 3.37% Space Free | Partition Type: FAT32

Computer Name: OEM-UVENRY0WBI0 | User Name: The Cauchi's | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe" = C:\Program Files\Microsoft ActiveSync\rapimgr.exe:*:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe" = C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:*:Enabled:ActiveSync Application -- (Microsoft Corporation)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostics 2011 -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgam.exe" = C:\Program Files\AVG\AVG10\avgam.exe:*:Enabled:AVG Alert manager -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabledersonal E-mail Scanner -- (AVG Technologies CZ, s.r.o.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04E7A3BB-DB38-481C-A809-35FA60C78EDF}" = AVG 2011
"{0D80391C-0A72-43BB-9BC2-143F63CC111D}" = Nokia PC Connectivity Solution
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 14
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{3AE7A860-41B5-46CC-ABA8-C29EC4C80B79}" = Nokia Connectivity Cable DKU-2 Drivers
"{43DCF766-6838-4F9A-8C91-D92DA586DFA7}" = Microsoft Windows Journal Viewer
"{531317A5-586A-4E36-87C1-CA823447B375}" = Nokia PC Suite
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6882DD11-33B8-4DEA-8305-7E765BF74BD3}" = Nokia Connectivity Cable Driver
"{6D8D64BE-F500-55B6-705D-DFD08AFE0624}" = Acrobat.com
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{900A92BA-19EF-4A34-86CF-7B6C85BDD971}" = VC_MergeModuleToMSI
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage
"{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant
"{97AA0C55-AFAD-4126-B21C-F1318FB6DADA}" = RTLSetup
"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync
"{9E2514D9-DC24-4634-B348-61F3EF0F1628}" = Sound Blaster Audigy 2 ZS
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}" = Windows Live installer
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.1
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B148AB4B-C8FA-474B-B981-F2943C5B5BCD}" = OGA Notifier 1.7.0105.35.0
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}" = NTI CD & DVD-Maker
"{C4868E88-F5B5-4E45-9592-C7062BD97441}" = Symantec Technical Support Web Controls
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = Alcatel SpeedTouch USB Software
"{DEF2E5A3-0317-4822-B930-8B721EB483E4}" = ArcSoft VideoImpression 1.6
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F45298E5-0083-426F-A668-1A2C5F04B8A0}" = FaxTools
"{F4C68898-EBA5-46A9-82B3-2D30426086BF}" = AVG 2011
"{F99520C7-7EE6-472E-8DD8-E60003A9292F}" = WOT for Internet Explorer
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}" = HighMAT Extension to Microsoft Windows XP CD Writing Wizard
"3271E907F27C989F2C244ACB3D32020E3DD3CA6F" = Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
"3DGroove" = 3D Groove Playback Engine
"acer" = acer
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ATI Display Driver" = ATI Display Driver
"AVG" = AVG 2011
"COD2 Demo" = COD2 Demo
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"ieSpell" = ieSpell
"InstallShield_{3AE7A860-41B5-46CC-ABA8-C29EC4C80B79}" = Nokia Connectivity Cable DKU-2 Drivers
"InstallShield_{C438B7C4-B4F8-49C5-A4DF-FF6F1F242778}" = NTI CD & DVD-Maker 6.5 Gold
"Kaspersky Online Scanner" = Kaspersky Online Scanner
"Lexmark X5100 Series" = Lexmark X5100 Series
"Macromedia Shockwave Player" = Macromedia Shockwave Player
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSN Music Assistant" = MSN Music Assistant
"MSN Toolbar" = ninemsn Toolbar
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Display Driver" = NVIDIA Display Driver
"SiS 661FX_760_741_M661FX_M760_M741" = SiS 661FX_760_741_M661FX_M760_M741
"SpywareBlaster_is1" = SpywareBlaster 4.2
"TomTom HOME" = TomTom HOME
"VLC media player" = VLC media player 1.0.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinPatrol" = WinPatrol 2009
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/4/2011 10:01:35 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Application Hang | ID = 1002
Description = Hanging application avgui.exe, version 10.0.0.1161, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 1/4/2011 10:08:48 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Application Hang | ID = 1002
Description = Hanging application WinPatrolEx.exe, version 17.0.2010.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 1/4/2011 10:08:48 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Application Hang | ID = 1002
Description = Hanging application WinPatrolEx.exe, version 17.0.2010.0, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 1/4/2011 10:25:13 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Application Error | ID = 1000
Description = Faulting application , version 0.0.0.0, faulting module unknown, version
0.0.0.0, fault address 0x00000000.

Error - 1/4/2011 8:31:22 PM | Computer Name = OEM-UVENRY0WBI0 | Source = MsiInstaller | ID = 11311
Description = Product: AVG 2011 -- Error 1311. Source file not found(cabinet): C:\Documents
and Settings\All Users\Application Data\MFAData\pack\basex.cab. Verify that the
file exists and that you can access it.

Error - 1/4/2011 8:31:23 PM | Computer Name = OEM-UVENRY0WBI0 | Source = MsiInstaller | ID = 11311
Description = Product: AVG 2011 -- Error 1311. Source file not found(cabinet): C:\Documents
and Settings\All Users\Application Data\MFAData\pack\basex.cab. Verify that the
file exists and that you can access it.

Error - 1/6/2011 6:44:34 AM | Computer Name = OEM-UVENRY0WBI0 | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.

Error - 1/9/2011 1:58:11 AM | Computer Name = OEM-UVENRY0WBI0 | Source = MsiInstaller | ID = 11921
Description = Product: AVG 2011 -- Error 1921. Service 'AVG WatchDog' (avgwd) could
not be stopped. Verify that you have sufficient privileges to stop system services.

Error - 1/9/2011 1:58:46 AM | Computer Name = OEM-UVENRY0WBI0 | Source = MsiInstaller | ID = 11921
Description = Product: AVG 2011 -- Error 1921. Service 'AVG WatchDog' (avgwd) could
not be stopped. Verify that you have sufficient privileges to stop system services.

Error - 1/11/2011 2:03:28 AM | Computer Name = OEM-UVENRY0WBI0 | Source = MsiInstaller | ID = 10005
Description = Product: AVG 2011 -- Error 27035. CA_Error 27035: ReloadAvi: Reloading
of AVG databases failed: 0xC007013D

[ System Events ]
Error - 1/10/2011 2:00:44 AM | Computer Name = OEM-UVENRY0WBI0 | Source = NtServicePack | ID = 921877
Description = Windows XP KB2467659 installation failed. Access is denied.

Error - 1/10/2011 2:01:26 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070005: Update for Internet Explorer for Windows XP (KB2467659).

Error - 1/10/2011 2:01:26 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070005: Cumulative Security Update for Internet Explorer 8 for Windows
XP (KB2416400).

Error - 1/11/2011 2:03:13 AM | Computer Name = OEM-UVENRY0WBI0 | Source = NtServicePack | ID = 921877
Description = Windows XP KB2467659 installation failed. Access is denied.

Error - 1/11/2011 2:03:51 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070005: Update for Internet Explorer for Windows XP (KB2467659).

Error - 1/11/2011 2:03:51 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070005: Cumulative Security Update for Internet Explorer 8 for Windows
XP (KB2416400).

Error - 1/11/2011 4:25:52 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the avgfws service.

Error - 1/11/2011 4:27:03 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the AVGIDSAgent service to
connect.

Error - 1/11/2011 4:27:03 AM | Computer Name = OEM-UVENRY0WBI0 | Source = Service Control Manager | ID = 7000
Description = The AVGIDSAgent service failed to start due to the following error:
%%1053

Error - 1/11/2011 4:37:56 AM | Computer Name = OEM-UVENRY0WBI0 | Source = DCOM | ID = 10010
Description = The server {1F87137D-0E7C-44D5-8C73-4EFFB68962F2} did not register
with DCOM within the required timeout.


< End of report >

 

OTL.Txt:


OTL logfile created on: 1/11/2011 8:50:06 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

495.00 Mb Total Physical Memory | 168.00 Mb Available Physical Memory | 34.00% Memory free
794.00 Mb Paging File | 231.00 Mb Available in Paging File | 29.00% Paging File free
Paging file location(s): C:\pagefile.sys 336 672 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 1.25 Gb Free Space | 3.37% Space Free | Partition Type: FAT32

Computer Name: OEM-UVENRY0WBI0 | User Name: The Cauchi's | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/01/11 20:33:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL.exe
PRC - [2010/12/23 15:48:24 | 002,424,560 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
PRC - [2010/12/05 16:26:40 | 000,654,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe
PRC - [2010/12/05 16:26:12 | 000,650,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe
PRC - [2010/12/01 04:14:46 | 001,084,256 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe
PRC - [2010/11/23 13:34:16 | 000,724,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
PRC - [2010/11/23 13:34:14 | 006,128,208 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2010/11/22 04:48:46 | 003,226,632 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgfws.exe
PRC - [2010/10/22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe
PRC - [2010/10/22 04:57:54 | 002,745,696 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe
PRC - [2010/10/22 04:56:58 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe
PRC - [2010/10/22 04:56:48 | 000,745,824 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgam.exe
PRC - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/02/26 16:10:20 | 021,979,992 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Application Data\Dropbox\bin\Dropbox.exe
PRC - [2009/12/08 14:25:28 | 000,093,320 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
PRC - [2009/10/11 07:07:10 | 000,320,832 | ---- | M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
PRC - [2008/04/14 10:12:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/01/29 22:20:04 | 000,361,832 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\HOMERunner.exe
PRC - [2006/11/13 13:39:52 | 001,289,000 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft ActiveSync\wcescomm.exe
PRC - [2006/11/13 13:39:34 | 000,199,464 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft ActiveSync\rapimgr.exe
PRC - [2003/08/19 14:12:30 | 000,667,648 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\sistray.exe
PRC - [2003/08/19 14:11:38 | 000,241,664 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\Keyhook.exe
PRC - [2003/08/14 23:34:50 | 000,057,344 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
PRC - [2003/03/04 23:04:40 | 000,049,152 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
PRC - [2003/03/04 22:49:22 | 000,086,100 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe


========== Modules (SafeList) ==========

MOD - [2011/01/11 20:33:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL.exe
MOD - [2010/08/24 03:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2007/03/27 04:03:22 | 000,057,344 | ---- | M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\patrolpro.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/11/25 09:49:46 | 000,517,448 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010/11/23 13:34:14 | 006,128,208 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2010/11/22 04:48:46 | 003,226,632 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgfws.exe -- (avgfws)
SRV - [2010/10/22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/12/08 14:25:28 | 000,093,320 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
SRV - [2008/04/14 10:12:36 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\skeys.exe -- (SerialKeys)
SRV - [2007/10/25 15:27:54 | 000,266,240 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- (WLSetupSvc)
SRV - [2006/06/05 13:59:18 | 000,174,080 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- (ServiceLayer)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2010/12/08 04:12:38 | 000,251,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2010/11/12 13:19:38 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2010/09/13 15:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2010/09/07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2010/09/07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2010/08/19 20:42:38 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010/08/19 20:42:36 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2010/08/19 20:42:34 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2010/07/12 04:33:54 | 000,030,432 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avgfwdx.sys -- (Avgfwfd)
DRV - [2010/07/12 04:33:54 | 000,030,432 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avgfwdx.sys -- (Avgfwdx)
DRV - [2010/05/31 17:16:12 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/02/20 11:19:22 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2010/02/20 11:19:22 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2008/04/14 04:46:20 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\61883.sys -- (61883)
DRV - [2008/04/14 04:46:20 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avc.sys -- (Avc)
DRV - [2008/04/14 04:46:10 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\msdv.sys -- (MSDV)
DRV - [2008/04/14 04:45:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2006/05/29 08:26:38 | 000,127,488 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
DRV - [2006/05/29 08:26:36 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcj.sys -- (Nokia USB Port)
DRV - [2006/05/29 08:26:36 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
DRV - [2006/05/29 08:26:36 | 000,008,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdc.sys -- (Nokia USB Generic)
DRV - [2004/06/29 20:17:18 | 000,006,912 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV - [2003/10/06 14:16:00 | 001,550,043 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2003/09/30 21:29:38 | 000,618,496 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2003/08/22 05:44:04 | 000,422,784 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315)
DRV - [2003/08/18 02:42:04 | 000,011,264 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp)
DRV - [2003/08/17 21:21:10 | 000,028,416 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\sisesc.sys -- (SiSEsc)
DRV - [2003/08/14 23:53:12 | 000,462,684 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2003/08/14 07:16:38 | 000,404,736 | ---- | M] (Sensaura Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS -- (ALCXSENS)
DRV - [2003/08/04 20:14:34 | 000,065,152 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnic51.sys -- (RTL8023)
DRV - [2003/07/18 09:58:20 | 000,036,992 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\SISAGPX.sys -- (SISAGP)
DRV - [2003/07/10 20:40:38 | 000,145,232 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2003/07/10 20:38:28 | 000,651,792 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2003/06/27 19:24:54 | 000,159,040 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\haP16v2k.sys -- (hap16v2k)
DRV - [2003/06/27 19:24:42 | 000,860,592 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2003/06/20 14:33:40 | 000,136,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2003/06/20 14:33:24 | 000,006,144 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2003/06/20 14:33:16 | 000,190,208 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2003/06/20 14:33:02 | 000,509,328 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2003/03/27 13:58:56 | 000,287,920 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2003/03/05 18:07:46 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\pfmodnt.sys -- (PfModNT)
DRV - [2002/11/19 19:41:58 | 000,017,005 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (Aspi32)
DRV - [2002/07/08 02:37:20 | 000,591,520 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2002/07/08 02:36:04 | 000,428,578 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\C4C_K56K.sys -- (K56)
DRV - [2002/07/08 02:35:44 | 000,124,703 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\C4C_FSKS.sys -- (Fsks)
DRV - [2002/07/08 02:35:10 | 000,212,494 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\C4C_FAXX.sys -- (SoftFax)
DRV - [2002/07/08 02:34:36 | 000,059,664 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\C4C_TONE.sys -- (Tones)
DRV - [2002/07/08 02:34:20 | 000,303,171 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\C4C_FALL.sys -- (Fallback)
DRV - [2002/07/08 02:32:42 | 000,084,788 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\C4C_BSC2.sys -- (C4C_BSC2)
DRV - [2002/07/08 02:32:28 | 000,062,422 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\C4C_SAMP.sys -- (Rksample)
DRV - [2002/07/08 02:32:16 | 000,542,223 | ---- | M] (Conexant Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\C4C_V124.sys -- (V124)
DRV - [2002/06/06 11:14:36 | 000,036,048 | ---- | M] (THOMSON multimedia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5ln.sys -- (alcan5ln) Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS)
DRV - [2002/06/06 11:14:30 | 000,743,136 | ---- | M] (THOMSON multimedia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2001/12/30 03:12:40 | 000,045,312 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\R8139n51.sys -- (rtl8139)
DRV - [2001/08/17 13:28:10 | 000,542,879 | ---- | M] (Conexant) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_MSFT.sys -- (hsf_msft)
DRV - [2001/08/17 13:28:04 | 000,067,167 | ---- | M] (Conexant) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_BSC2.sys -- (basic2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.0
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.8.0.99999
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1143
FF - prefs.js..extensions.enabledItems: avg@igeared:6.011.025.001
FF - prefs.js..keyword.URL: "http://search.avg.com/route/?d=4cbcad79&v=6.011.025.001&i=23&tp=ab&iy=&ychte=au&lng=en-US&q= "

FF - HKLM\software\mozilla\Firefox\extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2009/08/16 15:27:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2011/01/11 19:16:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\avg@igeared: C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared [2011/01/11 19:22:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/10/10 11:59:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/10/10 11:59:20 | 000,000,000 | ---D | M]

[2009/10/10 12:00:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\The Cauchi's\Application Data\Mozilla\Extensions
[2009/10/10 12:00:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\The Cauchi's\Application Data\Mozilla\Firefox\Profiles\avl5515m.default\extensions
[2010/09/16 09:53:20 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\The Cauchi's\Application Data\Mozilla\Firefox\Profiles\avl5515m.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010/09/11 13:08:00 | 000,000,000 | ---D | M] ( "Ask Toolbar ") -- C:\Documents and Settings\The Cauchi's\Application Data\Mozilla\Firefox\Profiles\avl5515m.default\extensions\toolbar@ask.com
[2009/10/10 11:59:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/01/11 19:16:00 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG10\FIREFOX
[2011/01/11 19:22:02 | 000,000,000 | ---D | M] ( "urn:mozilla:install-manifest" em:id= "avg@igeared" em:name= "AVG Security Toolbar" em:version= "6.011.025.001" em:displayname= "AVG Security Toolbar" em:iconURL="chrome://tavgp/skin/logo.ico" em:creator= "AVG Technologies" em:description= "AVG Security Toolbar" em:homepageURL="http://www.avg.com" >) -- C:\PROGRAM FILES\AVG\AVG10\TOOLBAR\FIREFOX\AVG@IGEARED
[2009/08/16 15:27:28 | 000,000,000 | ---D | M] (McAfee SiteAdvisor) -- C:\PROGRAM FILES\MCAFEE\SITEADVISOR

O1 HOSTS File: ([2011/01/10 21:46:30 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O2 - BHO: (MSNToolBandBHO) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-au\msntb.dll (Microsoft Corporation)
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (ninemsn) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-au\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (ninemsn) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-au\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [AsioReg] C:\WINDOWS\System32\CTASIO.DLL (Creative Technology Ltd)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CTHelper] C:\WINDOWS\System32\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [Lexmark X5100 Series] C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe (Lexmark International, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O4 - HKLM..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\Keyhook.exe (Silicon Integrated Systems Corporation)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe (BillP Studios)
O4 - HKCU..\Run: [H/PC Connection Agent] C:\Program Files\Microsoft ActiveSync\Wcescomm.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\HOMERunner.exe (TomTom)
O4 - Startup: C:\Documents and Settings\The Cauchi's\Start Menu\Programs\Startup\Dropbox.lnk = C:\Documents and Settings\The Cauchi's\Application Data\Dropbox\bin\Dropbox.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &ieSpell Options - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Check &Spelling - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Lookup on Merriam Webster - C:\Program Files\ieSpell\Merriam Webster.HTM ()
O8 - Extra context menu item: Lookup on Wikipedia - C:\Program Files\ieSpell\wikipedia.HTM ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab (Office Genuine Advantage Validation Tool)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab (CKAVWebScan Object)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1180506225375 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll ()
O24 - Desktop WallPaper: C:\Documents and Settings\The Cauchi's\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\The Cauchi's\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/06/04 15:15:44 | 000,000,919 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2006/06/04 15:15:44 | 000,000,843 | ---- | M] () - C:\AUTOEXEC.BAK -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: Ip6FwHlp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Ligos Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll (Ligos Corporation)
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll (Ligos Corporation)
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Ligos Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2011/01/11 20:33:41 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\OTL.exe
[2011/01/11 19:22:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2011/01/11 19:19:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVG 2011
[2011/01/11 19:15:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\AVG
[2011/01/09 18:22:20 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/01/09 18:22:20 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/01/09 18:22:20 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/01/09 18:22:20 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/01/09 16:51:15 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/01/05 11:33:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\The Cauchi's\Application Data\AVG8
[2010/12/30 09:03:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2010/12/25 10:59:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2010/12/25 10:55:17 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010/12/25 10:54:19 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010/12/25 10:54:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/12/25 10:49:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\QuickTime
[2010/12/25 10:48:32 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010/12/25 10:44:54 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010/12/25 10:43:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Apple Computer
[2010/12/25 10:40:16 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010/12/25 10:39:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple

========== Files - Modified Within 30 Days ==========

[2011/01/11 20:56:42 | 000,000,436 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{96C01A31-77B7-4EAB-87DF-AC698AC2C098}.job
[2011/01/11 20:34:28 | 000,000,407 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\[Active] IE8 'Internet explorer cannot display the webpage' problem..url
[2011/01/11 20:33:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL.exe
[2011/01/11 19:59:56 | 000,641,053 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2011/01/11 19:59:54 | 103,940,488 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2011/01/11 19:32:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/01/11 19:32:24 | 519,622,656 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/11 19:20:20 | 000,000,594 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2011/01/11 19:11:26 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/01/09 14:26:54 | 004,151,000 | R--- | M] () -- C:\ComboFix.exe
[2011/01/07 10:03:02 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Local Settings\Application Data\prvlcl.dat
[2011/01/06 09:03:24 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/01/02 00:14:26 | 000,002,483 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\Microsoft Word.lnk
[2011/01/01 21:29:06 | 000,001,670 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\Facebook.url
[2011/01/01 18:15:36 | 000,000,220 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\Google.url
[2011/01/01 17:38:54 | 000,000,257 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\Seabreeze.url
[2010/12/28 17:06:24 | 000,022,464 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/12/26 12:18:22 | 000,000,820 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\WillyWeather.url
[2010/12/25 10:59:26 | 000,001,446 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/12/25 10:49:42 | 000,001,508 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/12/16 18:15:36 | 000,001,168 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Desktop\eBay.url
[2010/12/15 18:10:10 | 000,154,768 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/12/15 17:24:26 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK

========== Files Created - No Company Name ==========

 

OTL.Txt cont......


[2011/01/11 20:34:27 | 000,000,407 | ---- | C] () -- C:\Documents and Settings\The Cauchi's\Desktop\[Active] IE8 'Internet explorer cannot display the webpage' problem..url
[2011/01/11 19:59:55 | 000,641,053 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2011/01/11 19:59:52 | 103,940,488 | ---- | C] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2011/01/11 19:20:18 | 000,000,594 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2011/01/09 18:22:20 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/01/09 18:22:20 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/01/09 18:22:20 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/01/09 18:22:20 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/01/09 18:22:20 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/01/09 14:26:53 | 004,151,000 | R--- | C] () -- C:\ComboFix.exe
[2011/01/05 10:03:21 | 000,001,169 | ---- | C] () -- C:\Documents and Settings\The Cauchi's\ip.txt
[2011/01/04 22:25:38 | 519,622,656 | -HS- | C] () -- C:\hiberfil.sys
[2010/12/28 17:06:22 | 000,022,464 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/12/25 10:59:24 | 000,001,446 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/12/25 10:49:40 | 000,001,508 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/12/25 10:45:01 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/24 08:51:14 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\The Cauchi's\Local Settings\Application Data\prvlcl.dat
[2009/07/03 20:13:11 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\The Cauchi's\Application Data\$_hpcst$.hpc
[2009/07/02 11:28:50 | 000,000,472 | ---- | C] () -- C:\WINDOWS\videoimp.ini
[2009/07/02 11:28:18 | 000,000,021 | ---- | C] () -- C:\WINDOWS\VI_setup.ini
[2009/07/02 11:14:04 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI
[2008/12/31 17:04:42 | 000,691,592 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL
[2008/09/13 08:28:57 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2007/04/17 01:52:54 | 000,004,608 | ---- | C] () -- C:\WINDOWS\System32\Mfts50.dll
[2006/11/11 23:26:26 | 001,295,387 | ---- | C] () -- C:\Documents and Settings\The Cauchi's\Application Data\NMM-MetaData.db
[2006/05/06 20:09:03 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/04/08 18:34:23 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2006/01/25 22:13:03 | 000,001,739 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2005/12/07 12:31:00 | 000,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll
[2005/09/15 12:37:53 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Jcmkr32.INI
[2005/07/04 22:04:15 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\impborl.dll
[2005/05/05 12:43:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ka.ini
[2005/02/28 17:26:56 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2004/12/24 15:30:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NokiaContentCopier.INI
[2004/12/16 17:52:47 | 000,000,449 | ---- | C] () -- C:\WINDOWS\nokiaimageconverter.INI
[2004/08/09 16:40:36 | 000,001,394 | ---- | C] () -- C:\WINDOWS\CDPLAYER.INI
[2004/07/20 16:44:15 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2004/07/11 14:07:24 | 000,000,392 | ---- | C] () -- C:\WINDOWS\WinInit.Ini
[2004/07/10 10:30:09 | 000,005,607 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2004/07/10 10:21:58 | 000,000,103 | ---- | C] () -- C:\WINDOWS\TTM.INI
[2004/07/04 10:31:33 | 000,221,184 | ---- | C] () -- C:\Documents and Settings\The Cauchi's\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/07/01 21:55:27 | 000,000,693 | ---- | C] () -- C:\WINDOWS\LEXSTAT.INI
[2004/07/01 21:54:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBALCNP.DLL
[2004/07/01 21:54:15 | 000,000,188 | ---- | C] () -- C:\WINDOWS\System32\lxbacoin.ini
[2004/06/30 11:37:28 | 000,000,244 | ---- | C] () -- C:\WINDOWS\Tiny_Run.ini
[2004/06/29 20:19:28 | 000,056,320 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2004/06/29 19:26:56 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2003/12/31 21:47:59 | 000,071,749 | ---- | C] () -- C:\WINDOWS\HCExtOutput.dll
[2003/12/31 21:47:59 | 000,000,823 | ---- | C] () -- C:\WINDOWS\TSC.ini
[2003/12/31 21:47:33 | 000,000,170 | ---- | C] () -- C:\WINDOWS\GetServer.ini
[2003/12/31 21:15:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SBWIN.INI
[2003/12/31 21:15:04 | 000,000,231 | ---- | C] () -- C:\WINDOWS\AC3API.INI
[2003/12/31 21:14:35 | 000,043,080 | ---- | C] () -- C:\WINDOWS\System32\e10kxwdm.ini
[2003/12/31 21:14:35 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2003/12/31 21:14:14 | 000,005,515 | ---- | C] () -- C:\WINDOWS\System32\ENSDEF.INI
[2003/12/31 21:14:14 | 000,000,194 | ---- | C] () -- C:\WINDOWS\System32\KILL.INI
[2003/12/31 20:51:44 | 000,028,416 | ---- | C] () -- C:\WINDOWS\System32\sisesc.sys
[2003/12/31 20:51:44 | 000,001,671 | ---- | C] () -- C:\WINDOWS\System32\SiSService.ini
[2003/12/31 20:51:21 | 000,141,330 | ---- | C] () -- C:\WINDOWS\VGAsetup.ini
[2003/12/31 20:51:11 | 000,099,489 | ---- | C] () -- C:\WINDOWS\System32\VGAunistlog.ini
[2003/12/31 20:47:44 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\jesterss.dll
[2003/12/30 08:39:09 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2003/12/30 08:33:25 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK32.dll
[2003/12/30 08:29:51 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2003/12/30 08:29:22 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SIS_LIB.DLL
[2003/12/30 08:23:30 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003/12/30 08:20:03 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2003/12/30 08:16:41 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2003/10/06 14:16:00 | 000,027,136 | ---- | C] () -- C:\WINDOWS\System32\nvcod.dll
[2003/09/30 21:21:24 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll
[2001/12/26 16:12:30 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll
[2001/09/03 23:46:38 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Hmpg12.dll
[2001/07/30 16:33:56 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll
[2001/07/23 22:04:36 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll
[1999/07/23 13:46:48 | 000,000,116 | ---- | C] () -- C:\WINDOWS\AuHCcup1.ini
[1999/07/23 10:53:20 | 000,129,536 | ---- | C] () -- C:\WINDOWS\AuHCcup1.dll
[1998/08/16 05:00:00 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\sysres.dll
[1980/01/01 00:00:00 | 000,000,960 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI

========== LOP Check ==========

[2004/07/01 21:55:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2004/07/23 17:21:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2005/05/30 22:50:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster
[2006/11/11 21:32:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
[2006/11/11 22:26:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite
[2007/07/05 10:42:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2008/01/30 13:12:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TomTom
[2009/08/03 17:59:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/10/28 07:58:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2010/10/18 20:34:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2010/10/19 07:20:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2010/10/19 07:27:48 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2010/12/25 10:54:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/01/11 19:22:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2004/07/09 14:18:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\InterTrust
[2006/10/05 13:16:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\WinPatrol
[2006/11/11 21:35:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\PC Suite
[2006/11/11 21:48:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\Nokia
[2006/11/11 23:30:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\Nokia Multimedia Player
[2006/11/11 23:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\DataLayer
[2007/06/17 15:16:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\ieSpell
[2008/01/30 13:08:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\TomTom
[2009/08/06 17:03:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009/11/01 22:32:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\Dropbox
[2010/10/19 19:33:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\The Cauchi's\Application Data\AVG10
[2011/01/11 20:56:42 | 000,000,436 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{96C01A31-77B7-4EAB-87DF-AC698AC2C098}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2000/02/22 13:21:44 | 000,000,007 | ---- | M] () -- C:\EN.ID
[2000/02/22 13:21:44 | 000,000,007 | ---- | M] () -- C:\XPSP1.ID
[2003/12/30 08:02:12 | 000,000,512 | -HS- | M] () -- C:\BOOTSECT.DOS
[2009/06/15 17:40:36 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2004/10/10 20:09:32 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2011/01/11 19:32:22 | 400,556,032 | -HS- | M] () -- C:\pagefile.sys
[2009/08/14 08:36:42 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2006/06/04 15:15:44 | 000,002,439 | ---- | M] () -- C:\CONFIG.SYS
[2006/06/04 15:15:44 | 000,000,919 | ---- | M] () -- C:\AUTOEXEC.BAT
[2003/12/30 08:23:20 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2003/12/30 08:23:20 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009/08/16 15:26:02 | 005,955,448 | ---- | M] () -- C:\saSetup64.exe
[2006/06/04 15:15:44 | 000,001,834 | ---- | M] () -- C:\CONFIG.BAK
[2005/03/26 01:56:12 | 000,004,465 | ---- | M] () -- C:\data
[2011/01/11 19:32:24 | 519,622,656 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/11 20:33:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\OTL.exe
[2004/06/29 20:06:34 | 000,000,006 | ---- | M] () -- C:\ISACER.ID
[2006/06/04 15:15:44 | 000,000,843 | ---- | M] () -- C:\AUTOEXEC.BAK
[2006/10/05 12:15:40 | 000,007,513 | ---- | M] () -- C:\run.bat
[2007/01/06 20:50:10 | 000,225,280 | ---- | M] () -- C:\PlayerHost.dll
[2004/11/30 10:09:04 | 000,776,896 | ---- | M] () -- C:\EasyShare.dmp
[2007/04/17 01:52:54 | 000,004,608 | ---- | M] () -- C:\Uboot.dat
[2010/04/12 13:45:24 | 000,999,160 | ---- | M] (BillP Studios) -- C:\wpsetup.exe
[2011/01/10 21:52:28 | 000,014,967 | ---- | M] () -- C:\ComboFix.txt
[2009/07/25 07:57:56 | 000,050,688 | ---- | M] (Atribune.org) -- C:\ATF-Cleaner.exe
[2009/07/25 08:04:00 | 003,775,176 | ---- | M] (Malwarebytes Corporation ) -- C:\mbam-setup.exe
[2009/08/07 08:09:46 | 000,812,344 | ---- | M] (Trend Micro Inc.) -- C:\HJTInstall.exe
[2009/08/07 17:59:42 | 003,012,768 | ---- | M] (Javacool Software LLC ) -- C:\spywareblastersetup42.exe
[2009/10/10 11:36:16 | 008,067,224 | ---- | M] (Mozilla) -- C:\Firefox Setup 3.5.3.exe
[2009/11/03 15:50:12 | 001,146,184 | ---- | M] (Microsoft Corporation) -- C:\wlsetup-web.exe
[2009/08/09 14:03:42 | 000,005,772 | ---- | M] () -- C:\sharedaccess.reg
[2009/08/10 07:55:06 | 006,881,824 | ---- | M] () -- C:\SUPERAntiSpyware.exe
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2007/01/16 16:40:56 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2009/10/27 22:29:40 | 000,889,800 | ---- | M] (AVG Technologies) -- C:\avg_free_stb_en_9_37_free.exe
[2009/11/20 17:46:14 | 000,256,724 | ---- | M] () -- C:\dotnetfx_cleanup_tool.zip
[2010/08/12 16:51:24 | 000,000,000 | ---- | M] () -- C:\vlc-1.1.2-win32.exe
[2011/01/09 14:26:54 | 004,151,000 | R--- | M] () -- C:\ComboFix.exe

< %systemroot%\Fonts\*.com >

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2003/12/30 08:23:00 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2002/11/15 23:58:04 | 000,077,824 | ---- | M] (Lexmark International) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\LXBAPP5C.DLL
[2002/05/14 16:50:34 | 000,011,264 | ---- | M] (BVRP Software) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\wfxprint2000.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2005/10/28 21:18:50 | 000,400,780 | ---- | M] (MacSourcery) -- C:\WINDOWS\Install.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2003/12/30 08:15:28 | 000,389,120 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
[2003/12/30 08:15:28 | 000,602,112 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2003/12/30 08:15:28 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/06/15 17:55:30 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2004/10/11 11:57:58 | 000,000,177 | -HS- | M] () -- C:\Documents and Settings\The Cauchi's\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/06/29 18:58:58 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >
[2006/05/16 20:51:52 | 000,027,809 | ---- | M] () -- C:\Program Files\Internet Explorer\winbrume.dat

< %USERPROFILE%\My Documents\*.exe >
[2004/08/04 18:08:56 | 005,245,352 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\The Cauchi's\My Documents\SetupDl.exe
[2002/08/05 10:59:44 | 000,098,296 | ---- | M] (InstallShield Software Corporation) -- C:\Documents and Settings\The Cauchi's\My Documents\setup.exe
[2008/01/30 12:34:26 | 017,255,816 | ---- | M] (TomTom International B.V.) -- C:\Documents and Settings\The Cauchi's\My Documents\TomTomHOME2winlatest.exe
[2010/11/10 18:31:50 | 019,657,194 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\My Documents\vlc-1.1.4-win32.exe
[2004/08/05 14:41:44 | 004,667,057 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\My Documents\etax2004_1.exe
[2004/08/05 14:34:28 | 004,667,057 | ---- | M] () -- C:\Documents and Settings\The Cauchi's\My Documents\Tax Return.exe

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2001/08/18 20:00:00 | 000,000,791 | ---- | M] () -- C:\WINDOWS\addins\fxsext.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2004/10/11 11:57:58 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\The Cauchi's\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2006/11/11 21:37:56 | 000,186,380 | ---- | M] () -- C:\Documents and Settings\All Users\NCCD.log

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >
[2011/01/11 20:50:14 | 000,000,067 | -HS- | M] () -- C:\Documents and Settings\The Cauchi's\Cookies\desktop.ini
[2011/01/11 20:55:54 | 000,147,456 | -HS- | M] () -- C:\Documents and Settings\The Cauchi's\Cookies\index.dat

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >
[2007/06/26 22:10:26 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\inf\unregmp2.exe

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >
[2002/08/20 15:08:38 | 000,069,663 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgsin.exe
[2002/12/17 11:23:28 | 000,015,692 | ---- | M] () -- C:\Program Files\Messenger\license.txt
[2002/12/17 11:23:18 | 000,006,160 | ---- | M] () -- C:\Program Files\Messenger\online.wav
[2002/12/17 11:23:18 | 000,006,156 | ---- | M] () -- C:\Program Files\Messenger\newemail.wav
[2002/12/17 11:23:18 | 000,002,882 | ---- | M] () -- C:\Program Files\Messenger\newalert.wav
[2002/12/17 11:23:24 | 000,004,454 | ---- | M] () -- C:\Program Files\Messenger\type.wav
[2002/12/17 11:23:22 | 000,004,821 | ---- | M] () -- C:\Program Files\Messenger\logowin.gif
[2002/12/17 11:23:22 | 000,007,047 | ---- | M] () -- C:\Program Files\Messenger\lvback.gif
[2002/12/17 11:23:28 | 000,000,807 | ---- | M] () -- C:\Program Files\Messenger\mailtmpl.txt
[2004/07/18 04:41:04 | 000,115,981 | ---- | M] () -- C:\Program Files\Messenger\xpmsgr.chm
[2008/04/14 10:12:28 | 001,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
[2008/04/14 03:30:28 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgslang.dll
[2008/04/14 10:11:52 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\custsat.dll
[2008/05/03 00:01:50 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgsc.dll

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >
[2001/08/24 05:00:00 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system\regsvr32.exe
[2002/11/19 19:41:58 | 000,004,672 | ---- | M] (Adaptec) -- C:\WINDOWS\system\WOWPOST.EXE

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >


< >

< End of report >

 

Broni,

Sorry for the late reply, but I have been quite busy and had little time to spare. IE is not keeping me logged here, but Firefox is ok.

I agree with you on the storage side of things, and after putting it off for far too long, I now have a 1TB external hard drive.

I'm starting to move things to free up some space, and I'll try to post the requested logs asap. My computer is on it's last legs, so as soon as funds allow I'll be upgrading.


-Shorerider.

 

Thanks for your patience Broni,

I'm having trouble updating Java for some reason? I clicked the link, and followed all the prompts, yet when I was done the window/box to check my installation was successful was blank except for a red cross in the top left corner.


OTL Log:


All processes killed
========== OTL ==========
Prefs.js: toolbar@ask.com:3.8.0.99999 removed from extensions.enabledItems
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{C4069E3A-68F1-403E-B40E-20066696354B} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4069E3A-68F1-403E-B40E-20066696354B}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\ "EnableFirewall" |dword:00000001 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\ "EnableFirewall" |dword:00000001 /E : value set successfully!
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: The Cauchi's
->Temp folder emptied: 27676863 bytes
->Temporary Internet Files folder emptied: 4674793 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 30855935 bytes
->Flash cache emptied: 0 bytes

User: Owner

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 472808 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 119256 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 56177102 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 536783232 bytes

Total Files Cleaned = 626.00 mb


[EMPTYFLASH]

User: Default User

User: All Users

User: NetworkService

User: LocalService

User: The Cauchi's
->Flash cache emptied: 0 bytes

User: Owner

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.20.1 log created on 01192011_153644

Files\Folders moved on Reboot...
C:\Documents and Settings\The Cauchi's\Local Settings\Temporary Internet Files\Content.IE5\OSHN0ZZP\97246-active-ie8-internet-explorer-cannot-display-webpage-problem[1].html moved successfully.
C:\Documents and Settings\The Cauchi's\Local Settings\Temporary Internet Files\Content.IE5\NP6OCHLE\testjava[1].htm moved successfully.

Registry entries deleted on Reboot...


Security check:


Results of screen317's Security Check version 0.99.7
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
AVG 2011
ESET Online Scanner v3
```````````````````````````````
Anti-malware/Other Utilities Check:
WinPatrol 2009
Malwarebytes' Anti-Malware
Java(TM) 6 Update 23
Out of date Java installed!
Adobe Flash Player 10.1.53.64
Adobe Reader 9.4.1
Out of date Adobe Reader installed!
Mozilla Firefox (3.6.8)
````````````````````````````````
Process Check:
objlist.exe by Laurent
WinPatrol winpatrol.exe
AVG avgwdsvc.exe
AVG avgtray.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
BillP Studios WinPatrol winpatrol.exe
``````````End of Log````````````


ESET found no threats.


-Shorerider.

 

Broni,

After a bit of uninstalling, reinstalling and removal of older Java and Adobe versions (they weren't working correctly) both seem to be current and up to date. Firefox has also been updated.

The only outstanding issues with my desktop are:

1. I still can't remain logged on to any site I am registered to (ie:Windows BBS, eBay and Facebook to name a few)

2. Windows is still trying to update but it keeps reporting the following:

The Following updates were not installed:
Update for Internet Explorer for Windows XP (KB2467659)
Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2416400)

I have ran the Defrag, and continue to move files to my new HD. It seems I have collated a mass of junk (files & software) over the years. All my "Important" photo&video files only add up to about 10 gig! Could you recommend a safe way to get rid of the unnecessary excess, as I'd hate to delete anything important?


OTL Log:

All processes killed
========== OTL ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56502 bytes

User: All Users

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 575588 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: The Cauchi's
->Temp folder emptied: 1402192 bytes
->Temporary Internet Files folder emptied: 520539 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 700 bytes

User: Owner

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 17791 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 424 bytes

Total Files Cleaned = 2.00 mb


[EMPTYFLASH]


-Shorerider.

 

OK, I'll start a new thread in the appropriate area to resolve the other minor issues.

Thank you for all your help.


-Shorerider.