1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active Anti-virus software not updating

Discussion in 'Malware and Virus Removal Archive' started by AtTheBorderGuy, 2009/01/08.

  1. 2009/01/08
    AtTheBorderGuy

    AtTheBorderGuy Inactive Thread Starter

    Joined:
    2009/01/08
    Messages:
    1
    Likes Received:
    0
    [Active] Anti-virus software not updating

    Hi there,

    I appear to be repeating quite a common problem at the moment, so apologies if there's already an obvious answer in another thread, but I can't seem to find it!

    I have a virus which doesn't seem to allow my AVG software to download updates. In addition to this, I can't access the AVG website, or any other anti-virus one for that matter. Google searches are also providing false links.

    I'm lucky enough to have another computer in the house, so have downloaded the AVG updates onto a USB drive and managed to move them across, but the system scan doesn't seem to be coming up with anything. I tried installing Avira also, but I was unable to manually update this at all.

    Had been recommended Spybot and Malwarebytes, but my computer seems reluctant to install these.

    Any help with this would be much appreciated!!! :confused:


    RSIT LOG FILE:


    Logfile of random's system information tool 1.05 (written by random/random)
    Run by Paul at 2009-01-08 19:31:02
    Microsoft Windows XP Home Edition Service Pack 3
    System drive C: has 1 GB (1%) free of 150 GB
    Total RAM: 1022 MB (63% free)

    HijackThis download failed

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
    AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-01-06 455960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
    DriveLetterAccess - C:\WINDOWS\system32\dla\tfswshx.dll [2004-12-06 118842]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "SoundMAXPnP "=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2004-10-14 1404928]
    "SunJavaUpdateSched "=C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe [2005-03-04 36975]
    "PCMService "=C:\Program Files\Dell\Media Experience\PCMService.exe [2004-04-11 290816]
    "IntelMeM "=C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe [2003-09-03 221184]
    "DVDLauncher "=C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [2004-10-12 57344]
    "RealTray "=C:\Program Files\Real\RealPlayer\RealPlay.exe [2005-03-23 26112]
    "UpdateManager "=C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [2004-01-07 110592]
    "dla "=C:\WINDOWS\system32\dla\tfswctrl.exe [2004-12-06 127035]
    "NeroFilterCheck "=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
    "AppleSyncNotifier "=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-07-10 116040]
    "QuickTime Task "=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
    "iTunesHelper "=C:\Program Files\iTunes\iTunesHelper.exe [2008-07-10 289064]
    "O2 "=C:\Program Files\O2\bin\sprtcmd.exe [2008-03-28 198184]
    "igfxtray "=C:\WINDOWS\system32\igfxtray.exe [2005-09-20 94208]
    "igfxhkcmd "=C:\WINDOWS\system32\hkcmd.exe [2005-09-20 77824]
    "igfxpers "=C:\WINDOWS\system32\igfxpers.exe [2005-09-20 114688]
    "AVG8_TRAY "=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-01-06 1261336]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "DellSupport "=C:\Program Files\Dell Support\DSAgnt.exe [2004-07-19 306688]
    "CTSyncU.exe "=C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe [2006-06-12 700416]
    "ctfmon.exe "=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
    "gadcom "=C:\Documents and Settings\Paul\Application Data\gadcom\gadcom.exe 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139 []

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    AOL 9.0 Tray Icon.lnk - C:\Program Files\AOL 9.0\aoltray.exe
    Belkin Wireless G Desktop Card Client Utility.lnk - C:\Program Files\Belkin\F5D7000v7032\Belkinwcui.exe
    NkvMon.exe.lnk - C:\Program Files\Nikon\NkView6\NkvMon.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLS "= "avgrsstx.dll "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername "=0
    "legalnoticecaption "=
    "legalnoticetext "=
    "shutdownwithoutlogon "=1
    "undockwithoutlogon "=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun "=145

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\Program Files\iTunes\iTunes.exe "= "C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes "
    "C:\Program Files\Kontiki\KService.exe "= "C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service "
    "C:\Program Files\AVG\AVG8\avgupd.exe "= "C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe "

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8e609dca-7bcb-11da-a6dc-00038a000015}]
    shell\AutoRun\command - E:\setupSNK.exe


    ======List of files/folders created in the last 3 months======

    2009-01-08 19:31:02 ----D---- C:\rsit
    2009-01-08 19:31:02 ----D---- C:\Program Files\trend micro
    2009-01-06 20:16:45 ----A---- C:\WINDOWS\system32\avgrsstx.dll
    2009-01-06 12:26:34 ----D---- C:\WINDOWS\Minidump
    2008-12-18 19:12:24 ----D---- C:\b1e505de78f79006c2d0
    2008-12-18 19:09:56 ----SHD---- C:\Config.Msi
    2008-12-18 19:08:10 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    2008-12-18 18:29:25 ----D---- C:\Documents and Settings\Paul\Application Data\Mozilla
    2008-12-18 18:28:54 ----D---- C:\Program Files\Mozilla Firefox
    2008-12-18 17:55:36 ----D---- C:\Temp
    2008-12-18 15:34:18 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
    2008-12-18 15:34:18 ----A---- C:\WINDOWS\system32\mucltui.dll
    2008-12-12 10:37:43 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
    2008-12-12 10:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
    2008-12-12 10:35:23 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
    2008-12-12 10:35:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
    2008-11-20 18:07:34 ----D---- C:\Program Files\Common Files\ODBC
    2008-11-12 22:56:01 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2008-11-12 22:55:54 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2008-11-12 22:55:45 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2008-10-23 23:04:41 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2008-10-20 10:14:17 ----D---- C:\Documents and Settings\All Users\Application Data\Kontiki
    2008-10-20 10:13:54 ----D---- C:\Documents and Settings\All Users\Application Data\Channel4
    2008-10-18 12:01:37 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
    2008-10-16 14:07:48 ----A---- C:\WINDOWS\system32\muweb.dll
    2008-10-15 12:33:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2008-10-15 12:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
    2008-10-15 12:32:49 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
    2008-10-15 12:31:35 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2008-10-15 12:31:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2008-10-14 10:53:27 ----D---- C:\Documents and Settings\Paul\Application Data\Viewpoint
    2008-10-12 17:24:37 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
    2008-10-12 17:24:18 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
    2008-10-12 17:23:58 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
    2008-10-12 17:23:46 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
    2008-10-11 18:40:53 ----N---- C:\WINDOWS\system32\spmsg.dll
    2008-10-11 18:40:52 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
    2008-10-11 18:40:31 ----D---- C:\Program Files\Windows Media Connect 2
    2008-10-11 18:40:11 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
    2008-10-11 18:38:46 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
    2008-10-11 18:38:09 ----D---- C:\WINDOWS\system32\LogFiles
    2008-10-11 18:38:02 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$

    ======List of files/folders modified in the last 3 months======

    2009-01-08 19:31:02 ----RD---- C:\Program Files
    2009-01-08 19:21:25 ----D---- C:\WINDOWS\Temp
    2009-01-08 19:21:13 ----A---- C:\WINDOWS\ModemLog_Intel(R) 537EP V9x DF PCI Modem.txt
    2009-01-08 19:08:25 ----A---- C:\WINDOWS\ntbtlog.txt
    2009-01-08 19:05:01 ----A---- C:\WINDOWS\SchedLgU.Txt
    2009-01-08 14:06:25 ----D---- C:\WINDOWS\Prefetch
    2009-01-07 10:04:14 ----D---- C:\WINDOWS\system32\FxsTmp
    2009-01-06 21:03:47 ----SHD---- C:\RECYCLER
    2009-01-06 20:16:55 ----D---- C:\Documents and Settings
    2009-01-06 20:16:45 ----D---- C:\WINDOWS\system32
    2009-01-06 20:16:39 ----D---- C:\WINDOWS\system32\drivers
    2009-01-06 20:16:28 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
    2009-01-06 20:16:27 ----SHD---- C:\WINDOWS\Installer
    2009-01-06 20:15:47 ----D---- C:\WINDOWS
    2009-01-06 20:05:12 ----D---- C:\Program Files\WinRAR
    2009-01-06 18:52:39 ----D---- C:\WINDOWS\system32\CatRoot2
    2009-01-06 16:08:33 ----D---- C:\WINDOWS\network diagnostic
    2009-01-06 15:31:28 ----A---- C:\WINDOWS\NeroDigital.ini
    2008-12-22 17:19:53 ----HD---- C:\$AVG8.VAULT$
    2008-12-19 00:09:26 ----A---- C:\WINDOWS\win.ini
    2008-12-18 19:17:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2008-12-18 19:17:05 ----D---- C:\WINDOWS\WinSxS
    2008-12-18 19:15:24 ----D---- C:\Program Files\Internet Explorer
    2008-12-18 19:10:09 ----D---- C:\Program Files\Common Files\Microsoft Shared
    2008-12-18 15:40:01 ----HD---- C:\WINDOWS\inf
    2008-12-18 15:28:41 ----D---- C:\WINDOWS\SoftwareDistribution
    2008-12-18 15:28:40 ----SD---- C:\WINDOWS\Downloaded Program Files
    2008-12-17 22:39:38 ----RSHD---- C:\WINDOWS\system32\dllcache
    2008-12-17 22:39:03 ----HD---- C:\WINDOWS\$hf_mig$
    2008-12-13 06:40:02 ----A---- C:\WINDOWS\system32\mshtml.dll
    2008-12-12 10:37:46 ----A---- C:\WINDOWS\imsins.BAK
    2008-12-09 23:24:37 ----A---- C:\WINDOWS\system32\MRT.exe
    2008-12-04 17:21:14 ----D---- C:\WINDOWS\Help
    2008-12-01 14:03:35 ----D---- C:\dell
    2008-12-01 12:21:42 ----SD---- C:\Documents and Settings\Paul\Application Data\Microsoft
    2008-11-20 18:07:34 ----D---- C:\Program Files\Common Files
    2008-10-23 12:36:14 ----A---- C:\WINDOWS\system32\gdi32.dll
    2008-10-23 10:06:59 ----N---- C:\WINDOWS\system32\tzchange.exe
    2008-10-20 21:17:23 ----D---- C:\WINDOWS\system32\Macromed
    2008-10-20 11:01:38 ----RSD---- C:\WINDOWS\assembly
    2008-10-20 11:01:38 ----D---- C:\WINDOWS\Microsoft.NET
    2008-10-16 20:38:40 ----A---- C:\WINDOWS\system32\wininet.dll
    2008-10-16 20:38:39 ----A---- C:\WINDOWS\system32\webcheck.dll
    2008-10-16 20:38:39 ----A---- C:\WINDOWS\system32\urlmon.dll
    2008-10-16 20:38:39 ----A---- C:\WINDOWS\system32\url.dll
    2008-10-16 20:38:39 ----A---- C:\WINDOWS\system32\pngfilt.dll
    2008-10-16 20:38:39 ----A---- C:\WINDOWS\system32\occache.dll
    2008-10-16 20:38:39 ----A---- C:\WINDOWS\system32\mstime.dll
    2008-10-16 20:38:38 ----A---- C:\WINDOWS\system32\msrating.dll
    2008-10-16 20:38:38 ----A---- C:\WINDOWS\system32\mshtmled.dll
    2008-10-16 20:38:37 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
    2008-10-16 20:38:37 ----A---- C:\WINDOWS\system32\msfeeds.dll
    2008-10-16 20:38:37 ----A---- C:\WINDOWS\system32\jsproxy.dll
    2008-10-16 20:38:37 ----A---- C:\WINDOWS\system32\iertutil.dll
    2008-10-16 20:38:37 ----A---- C:\WINDOWS\system32\iernonce.dll
    2008-10-16 20:38:37 ----A---- C:\WINDOWS\system32\ieframe.dll
    2008-10-16 20:38:35 ----A---- C:\WINDOWS\system32\iedkcs32.dll
    2008-10-16 20:38:35 ----A---- C:\WINDOWS\system32\ieapfltr.dll
    2008-10-16 20:38:35 ----A---- C:\WINDOWS\system32\ieaksie.dll
    2008-10-16 20:38:35 ----A---- C:\WINDOWS\system32\ieakeng.dll
    2008-10-16 20:38:35 ----A---- C:\WINDOWS\system32\icardie.dll
    2008-10-16 20:38:35 ----A---- C:\WINDOWS\system32\extmgr.dll
    2008-10-16 20:38:34 ----A---- C:\WINDOWS\system32\dxtrans.dll
    2008-10-16 20:38:34 ----A---- C:\WINDOWS\system32\dxtmsft.dll
    2008-10-16 20:38:34 ----A---- C:\WINDOWS\system32\advpack.dll
    2008-10-16 14:13:40 ----A---- C:\WINDOWS\system32\wuweb.dll
    2008-10-16 14:13:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
    2008-10-16 14:12:22 ----A---- C:\WINDOWS\system32\wucltui.dll
    2008-10-16 14:12:20 ----A---- C:\WINDOWS\system32\wuapi.dll
    2008-10-16 14:09:44 ----A---- C:\WINDOWS\system32\wups2.dll
    2008-10-16 14:09:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
    2008-10-16 14:09:44 ----A---- C:\WINDOWS\system32\cdm.dll
    2008-10-16 14:09:40 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
    2008-10-16 14:08:58 ----A---- C:\WINDOWS\system32\wups.dll
    2008-10-16 14:07:44 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
    2008-10-16 14:07:14 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
    2008-10-16 13:11:09 ----A---- C:\WINDOWS\system32\ieudinit.exe
    2008-10-16 13:11:09 ----A---- C:\WINDOWS\system32\ie4uinit.exe
    2008-10-15 16:34:24 ----A---- C:\WINDOWS\system32\netapi32.dll
    2008-10-15 07:04:53 ----A---- C:\WINDOWS\system32\ieakui.dll
    2008-10-12 17:23:51 ----D---- C:\WINDOWS\system32\CatRoot
    2008-10-11 18:42:42 ----D---- C:\Program Files\Windows Media Player

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-01-06 97928]
    R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-01-06 26824]
    R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
    R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2004-07-14 5627]
    R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2004-07-14 23545]
    R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2008-09-25 21035]
    R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2005-03-23 8552]
    R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2004-11-23 40480]
    R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2004-12-06 25883]
    R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2004-12-06 34843]
    R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2004-12-06 4123]
    R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2004-12-06 2239]
    R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2004-12-06 86586]
    R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2004-12-06 15227]
    R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2004-12-06 6363]
    R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2004-12-06 98714]
    R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2004-12-06 100603]
    R3 Belkin700F;Belkin Wireless G Desktop Card Service v7; C:\WINDOWS\system32\DRIVERS\BLKWGDv7.sys [2006-10-18 303616]
    R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-02-10 154112]
    R3 GEARAspiWDM;GEAR CDRom Filter; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2008-01-29 16168]
    R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
    R3 IntelC51;IntelC51; C:\WINDOWS\system32\DRIVERS\IntelC51.sys [2004-03-06 1233525]
    R3 IntelC52;IntelC52; C:\WINDOWS\system32\DRIVERS\IntelC52.sys [2004-03-06 647929]
    R3 IntelC53;IntelC53; C:\WINDOWS\system32\DRIVERS\IntelC53.sys [2004-06-16 61157]
    R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    R3 mohfilt;mohfilt; C:\WINDOWS\system32\DRIVERS\mohfilt.sys [2004-03-06 37048]
    R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
    R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
    R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2004-10-29 260096]
    R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
    S3 bvrp_pci;bvrp_pci; C:\WINDOWS\system32\drivers\bvrp_pci.sys []
    S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
    S3 SDDMI2;SDDMI2; \??\C:\WINDOWS\system32\DDMI2.sys []
    S3 SjyPkt;SjyPkt; \??\C:\WINDOWS\System32\Drivers\SjyPkt.sys []
    S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-07-10 32000]
    S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
    S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
    S4 agp440;Intel AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
    S4 agpCPQ;Compaq AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
    S4 alim1541;ALI AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
    S4 amdagp;AMD AGP Bus Filter Driver; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
    S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
    S4 sisagp;SIS AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
    S4 viaagp;VIA AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-10 116040]
    R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-01-06 231704]
    R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
    R2 sprtsvc_O2;SupportSoft Sprocket Service (O2); C:\Program Files\O2\bin\sprtsvc.exe [2007-06-07 202280]
    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
    R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-07-10 532264]
    S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
    S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
    S3 NetSvc;Intel NCS NetService; C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe [2003-12-17 143360]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
    S3 SupportSoft RemoteAssist;SupportSoft RemoteAssist; C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe [2007-07-27 382320]
    S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]

    -----------------EOF-----------------




    RSIT INFO FILE:




    info.txt logfile of random's system information tool 1.05 2009-01-08 19:31:07

    ======Uninstall list======

    -->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
    -->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /I {09DA4F91-2A09-4232-AB8C-6BC740096DE3} REMOVE=UpdateMgrFeature
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
    -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
    -->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98181885-5B28-4280-9B56-452FF877D5B9}\setup.exe" -l0x9
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98181885-5B28-4280-9B56-452FF877D5B9}\setup.exe" -l0x9 /remove
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9BB081B-C020-4D02-A763-D32204D2563D}\setup.exe" -l0x9
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A9BB081B-C020-4D02-A763-D32204D2563D}\setup.exe" -l0x9 /remove
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C029DB0E-C59F-417A-90F8-88FD5B2C4AE7}\setup.exe" -l0x9
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 7.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
    AOL UK (Choose which version to remove)-->C:\Program Files\Common Files\aolshare\Aolunins_uk.exe
    Apple Mobile Device Support-->MsiExec.exe /I{35B91753-5789-4517-9CF1-2CCE3A8CF4F1}
    Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
    ArcSoft Panorama Maker 3.0-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1CABB679-3958-44AA-BFFF-4E68A2684255}\Setup.exe" -l0x9 -uninst
    AudibleManager-->C:\Program Files\Audible\Bin\Upgrade.exe /Uninstall
    AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
    Belkin Wireless G Desktop Card Software-->C:\Program Files\InstallShield Installation Information\{E8ADC69C-4F11-483B-A3C9-B42E6A451CD2}\SETUP.EXE -v "ISSCRIPTCMDLINE=\ "-d -zREMOVE\" " -l0x0009 -removeonly
    Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
    BT Openworld Dell Signup-->MsiExec.exe /X{2CB511DF-AD50-4087-8934-8ACE54DE4FC1}
    Dell Driver Reset Tool-->MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
    Dell Media Experience-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
    Dell Support 5.0.0 (630)-->rundll32 C:\PROGRA~1\DELLSU~1\AUInst.dll,ExUninstall
    Hotfix for Windows Media Format 11 SDK (KB929399)--> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe "
    Hotfix for Windows Media Player 11 (KB939683)--> "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe "
    Hotfix for Windows XP (KB952287)--> "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe "
    Intel(R) 537EP V9x DF PCI Modem-->rundll32 IntelCci.dll,iSMUninstallation "Intel(R) 537EP V9x DF PCI Modem "
    Intel(R) Extreme Graphics 2 Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2572
    Intel(R) PRO Network Adapters and Drivers-->Prounstl.exe
    Intel(R) PROSet for Wired Connections-->MsiExec.exe /I{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7}
    Internet Explorer Default Page-->MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
    iPod for Windows User Guide-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{B9987754-9A14-4B61-ABB3-73A79503238D} /l1033
    iPod System Software Updater 2.1-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{B02B8E30-EB28-49B0-A60F-696268BAE033} /l1033
    iTunes-->MsiExec.exe /I{EF6C4600-306D-4F6A-A119-C2A877D25B4A}
    J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
    Jasc Paint Shop Photo Album-->MsiExec.exe /I{CC000127-5E5D-4A1C-90CB-EEAAAC1E3AC0}
    Jasc Paint Shop Pro 8 Dell Edition-->MsiExec.exe /I{81A34902-9D0B-4920-A25C-4CDC5D14B328}
    Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
    Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
    Microsoft .NET Framework 1.1 Hotfix (KB928366)--> "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp "
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
    Microsoft Compression Client Pack 1.0 for Windows XP--> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe "
    Microsoft Internationalized Domain Names Mitigation APIs--> "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe "
    Microsoft National Language Support Downlevel APIs--> "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe "
    Microsoft Office Standard Edition 2003-->MsiExec.exe /I{91120409-6000-11D3-8CFE-0150048383C9}
    Microsoft User-Mode Driver Framework Feature Pack 1.0--> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe "
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Works 7.0-->MsiExec.exe /I{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}
    Modem Event Monitor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9
    Modem Helper-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel
    Modem On Hold-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
    Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSN Messenger 7.0-->MsiExec.exe /I{ABEB838C-A1A7-4C5D-B7E1-8B4314600777}
    MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
    Nero Suite-->C:\Program Files\Common Files\Ahead\Uninstall\Setupx.exe /uninstall ExtraUninstallID=" "
    Nikon View 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAB84E83-C8DF-4752-9DFC-2E2A48EE5E9F}\setup.exe" UNINSTALL
    O2 Broadband Assistant-->MsiExec.exe /X{4507868A-A9CD-4ECC-BD54-0EAB6EE81D42}
    PowerDVD 5.3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
    QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
    RealPlayer Basic-->C:\Program Files\Common Files\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for Step By Step Interactive Training (KB923723)--> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe "
    Security Update for Windows Internet Explorer 7 (KB938127)--> "C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe "
    Security Update for Windows Internet Explorer 7 (KB938127-v2)--> "C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe "
    Security Update for Windows Internet Explorer 7 (KB953838)--> "C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe "
    Security Update for Windows Internet Explorer 7 (KB956390)--> "C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe "
    Security Update for Windows Internet Explorer 7 (KB958215)--> "C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe "
    Security Update for Windows Internet Explorer 7 (KB960714)--> "C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe "
    Security Update for Windows Media Player (KB952069)--> "C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe "
    Security Update for Windows Media Player 10 (KB936782)--> "C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe "
    Security Update for Windows Media Player 11 (KB936782)--> "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe "
    Security Update for Windows Media Player 11 (KB954154)--> "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB938464)--> "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB941569)--> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB946648)--> "C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB950762)--> "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB950974)--> "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB951066)--> "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB951376-v2)--> "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB951698)--> "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB951748)--> "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB952954)--> "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB953839)--> "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB954211)--> "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB954459)--> "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB954600)--> "C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB955069)--> "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB956391)--> "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB956802)--> "C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB956803)--> "C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB956841)--> "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB957095)--> "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB957097)--> "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe "
    Security Update for Windows XP (KB958644)--> "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe "
    Sonic DLA-->MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
    Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
    Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
    Sonic Update Manager-->MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
    Update for Windows XP (KB951072-v2)--> "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe "
    Update for Windows XP (KB951978)--> "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe "
    Update for Windows XP (KB955839)--> "C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe "
    VideoLAN VLC media player 0.8.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
    Windows Media Format 11 runtime--> "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Format 11 runtime--> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe "
    Windows Media Player 10 Hotfix - KB895316--> "C:\WINDOWS\$NtUninstallKB895316$\spuninst\spuninst.exe "
    Windows Media Player 11--> "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
    Windows Media Player 11--> "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe "
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    Windows XP Service Pack 3--> "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe "
    ZENcast Organizer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C029DB0E-C59F-417A-90F8-88FD5B2C4AE7}\setup.exe" -l0x9 /remove

    ======Security center information======

    AV: AVG Anti-Virus Free

    System event log

    Computer Name: PAULFRASER83
    Event Code: 7036
    Message: The Universal Plug and Play Device Host service entered the running state.

    Record Number: 36500
    Source Name: Service Control Manager
    Time Written: 20081122232524.000000+000
    Event Type: information
    User:

    Computer Name: PAULFRASER83
    Event Code: 7035
    Message: The Universal Plug and Play Device Host service was successfully sent a start control.

    Record Number: 36499
    Source Name: Service Control Manager
    Time Written: 20081122232523.000000+000
    Event Type: information
    User: NT AUTHORITY\SYSTEM

    Computer Name: PAULFRASER83
    Event Code: 4201
    Message: The system detected that network adapter Belkin...G Desktop Card - Packet Scheduler Miniport was connected to the network,
    and has initiated normal operation over the network adapter.

    Record Number: 36498
    Source Name: Tcpip
    Time Written: 20081122185252.000000+000
    Event Type: information
    User:

    Computer Name: PAULFRASER83
    Event Code: 7036
    Message: The iPod Service service entered the running state.

    Record Number: 36497
    Source Name: Service Control Manager
    Time Written: 20081122182837.000000+000
    Event Type: information
    User:

    Computer Name: PAULFRASER83
    Event Code: 7035
    Message: The iPod Service service was successfully sent a start control.

    Record Number: 36496
    Source Name: Service Control Manager
    Time Written: 20081122182837.000000+000
    Event Type: information
    User: NT AUTHORITY\SYSTEM

    Application event log

    Computer Name: PAULFRASER83
    Event Code: 1517
    Message: Windows saved user PAULFRASER83\Paul registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.


    This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

    Record Number: 22844
    Source Name: Userenv
    Time Written: 20080601203743.000000+060
    Event Type: warning
    User: NT AUTHORITY\SYSTEM

    Computer Name: PAULFRASER83
    Event Code: 0
    Message:
    Record Number: 22843
    Source Name: iPod Service
    Time Written: 20080601192631.000000+060
    Event Type: information
    User:

    Computer Name: PAULFRASER83
    Event Code: 1
    Message:
    Record Number: 22842
    Source Name: Avg7UpdSvc
    Time Written: 20080601192455.000000+060
    Event Type: information
    User:

    Computer Name: PAULFRASER83
    Event Code: 105
    Message:
    Record Number: 22841
    Source Name: Creative Service for CDROM Access
    Time Written: 20080601192455.000000+060
    Event Type: information
    User:

    Computer Name: PAULFRASER83
    Event Code: 1
    Message:
    Record Number: 22840
    Source Name: ccProxy
    Time Written: 20080601192454.000000+060
    Event Type: information
    User: NT AUTHORITY\SYSTEM

    ======Environment variables======

    "ComSpec "=%SystemRoot%\system32\cmd.exe
    "Path "=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\PROGRA~1\COMMON~1\SONICS~1\;C:\Program Files\QuickTime\QTSystem\
    "windir "=%SystemRoot%
    "FP_NO_HOST_CHECK "=NO
    "OS "=Windows_NT
    "PROCESSOR_ARCHITECTURE "=x86
    "PROCESSOR_LEVEL "=15
    "PROCESSOR_IDENTIFIER "=x86 Family 15 Model 4 Stepping 1, GenuineIntel
    "PROCESSOR_REVISION "=0401
    "NUMBER_OF_PROCESSORS "=1
    "PATHEXT "=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP "=%SystemRoot%\TEMP
    "TMP "=%SystemRoot%\TEMP
    "CLASSPATH "=.;C:\Program Files\Java\jre1.5.0_02\lib\ext\QTJava.zip
    "QTJAVA "=C:\Program Files\Java\jre1.5.0_02\lib\ext\QTJava.zip

    -----------------EOF-----------------
     
  2. 2009/01/09
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    @texastig

    If you have training in malware removal, please provide me with details via PM if you'd like to assist in malware removal here, otherwise please refrain in this forum.



    Welcome to WindowsBBS AtTheBorderGuy,

    Please download ComboFix to your usb drive and save it with a different name. Something such as trumofex.exe should do nicely. Transfer it to the desktop of the affected computer.
    Disable realtime protection applications as they sometimes interfere with the tool. Check this link for your applicable programs.

    • Close all open programs and windows
    • Double click trumofex.exe and follow the prompts.
    • It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
     

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.