Inactive posting DDS reports for pc that is slow

[Inactive] posting DDS reports for pc that is slow

Pc is slow and locking up. Here are DDS reports


DDS (Ver_09-07-30.01) - NTFSx86
Run by Bonnie at 21:07:51.24 on Tue 09/08/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.895.511 [GMT -7:00]

FW: AVG Firewall *disabled* {8decf618-9569-4340-b34a-d78d28969b66}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\PSIService.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\NETGEAR GA311 Adapter\GA311.exe
C:\WINDOWS\system32\svchost.exe -k HPService
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Documents and Settings\Bonnie\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
uSearch Bar = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = hxxp://www.emachines.com/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mURLSearchHooks: H - No File
BHO: Time Matters: {00f17ece-12da-46a0-b541-bde4eb7df027} - c:\tmw8\tmietb.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\acrobat\activex\AcroIEHelper.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 6.0\acrobat\AcroIEFavClient.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.15642\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 6.0\acrobat\AcroIEFavClient.dll
TB: Time Matters: {00f17ece-12da-46a0-b541-bde4eb7df027} - c:\tmw8\tmietb.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [NvCplDaemon] "c:\windows\system32\rundll32.exe" c:\windows\system32\NvCpl.dll,NvStartup
mRun: [LogMeIn GUI] "c:\program files\logmein\x86\LogMeInSystray.exe "
dRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ga311s~1.lnk - c:\program files\netgear ga311 adapter\GA311.exe
IE: &Search
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: Open with WordPerfect - c:\program files\wordperfect office x3\programs\WPLauncher.hta
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {01010200-5E80-11D8-9E86-0007E96C65AE} - hxxps://ra.qwest.com/sdccommon/download/tgctlins.cab
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://ra.qwest.com/sdccommon/download/tgctlcm.cab
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://go.microsoft.com/fwlink/?linkid=67633
DPF: {106E49CF-797A-11D2-81A2-00E02C015623} - hxxp://www.alternatiff.com/install/00/alttiff.cab
DPF: {34F12AFD-E9B5-492A-85D2-40FA4535BE83} - hxxp://www.symantec.com/techsupp/activedata/nprdtinf.cab
DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} - hxxp://apps.corel.com/nos_dl_manager_dev/plugin/IEGetPlugin.ocx
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1232581604836
DPF: {8BBDC81D-81B3-49EE-87E8-47B7A707FAE8} - hxxps://www.gotomeeting.com/default/applets/g2mdlax.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
DPF: {CB97291A-6603-466A-AA11-80C2EB74CB10} - hxxps://install.cox.net/CoxSelfInstall//CoxSelfInstallAx10.ocx
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://pm.webex.com/client/T25L/support/ieatgpc.cab
DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Name-Space Handler: ftp\* - {419A0123-4312-1122-A0C0-434FDA6DA542} - c:\progra~1\coreftp\pftpns.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: LMIinit - LMIinit.dll
Notify: PCANotify - PCANotify.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
LSA: Authentication Packages = msv1_0 relog_ap

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\bonnie\applic~1\mozilla\firefox\profiles\tqj3ri6r.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava11.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava12.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava13.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava14.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJava32.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPJPI150_02.dll
FF - plugin: c:\program files\java\jre1.5.0_02\bin\NPOJI610.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll

============= SERVICES / DRIVERS ===============

R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2008-8-9 29808]
R1 AW_HOST;AW_HOST;c:\windows\system32\drivers\AW_HOST5.sys [2003-5-5 16984]
R1 awlegacy;awlegacy;c:\windows\system32\drivers\AWLEGACY.sys [2003-4-21 10901]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-9-4 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-9-4 74480]
R2 LANPkt;Realtek LANPkt Protocol;c:\windows\system32\drivers\LANPkt.sys [2003-12-25 8440]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2007-8-3 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2008-10-8 47640]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\common files\nero\nero backitup 4\NBService.exe [2009-7-20 935208]
R2 WebrootSpySweeperService;Webroot Spy Sweeper Engine;c:\program files\webroot\spy sweeper\SpySweeper.exe [2008-8-9 3585384]
R3 Diag69xp;Diag69xp;c:\windows\system32\drivers\diag69xp.sys [2003-12-25 11237]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-9-4 7408]
S3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys --> c:\windows\system32\drivers\avgfwdx.sys [?]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys --> c:\windows\system32\drivers\avgfwdx.sys [?]
S3 awhost32;pcAnywhere Host Service;c:\program files\symantec\pcanywhere\awhost32.exe [2003-5-29 106496]
S3 AWINDIS5;AWINDIS5 Protocol Driver;c:\windows\system32\AWINDIS5.SYS [2006-2-12 16194]
S3 NETGEAR_WG311T_SERVICE;NETGEAR WG311T Wireless Adapter Service;c:\windows\system32\drivers\wg311tn5.sys [2006-2-12 395840]
S3 NetgearGA311;NETGEAR GA311 Gigabit Adapter Driver;c:\windows\system32\drivers\G311N6.sys [2008-12-28 70144]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]

=============== Created Last 30 ================

2009-09-08 14:43 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2009-09-08 14:43 <DIR> --d----- c:\program files\SUPERAntiSpyware
2009-09-08 14:43 <DIR> --d----- c:\docume~1\bonnie\applic~1\SUPERAntiSpyware.com
2009-09-07 20:29 <DIR> a-dshr-- C:\cmdcons
2009-09-07 20:28 230,912 a------- c:\windows\PEV.exe
2009-09-07 20:28 161,792 a------- c:\windows\SWREG.exe
2009-09-07 20:28 98,816 a------- c:\windows\sed.exe
2009-09-04 12:28 <DIR> --d-h--- C:\$AVG8.VAULT$
2009-09-04 10:35 <DIR> --d----- C:\usb stick
2009-09-03 22:40 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Downloaded Installations
2009-09-03 22:39 <DIR> --d----- c:\program files\AVG
2009-09-03 22:39 <DIR> --d----- c:\docume~1\alluse~1\applic~1\avg8
2009-09-03 22:36 <DIR> --d----- c:\docume~1\bonnie\applic~1\AVG8
2009-08-16 13:42 <DIR> --d----- c:\docume~1\bonnie\applic~1\CoxFastConnect20
2009-08-12 20:41 <DIR> --d----- c:\program files\NETGEAR GA311 Adapter
2009-08-12 20:40 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{B7A015B7-4802-4678-8CEC-700380BA9AFD}

==================== Find3M ====================

2009-09-07 20:16 83,288 a------- c:\windows\system32\LMIRfsClientNP.dll
2009-09-07 20:15 87,352 a------- c:\windows\system32\LMIinit.dll
2009-09-07 20:15 28,984 a------- c:\windows\system32\LMIport.dll
2009-09-07 20:15 25,248 a------- c:\windows\system32\lmimirr.dll
2009-09-07 20:15 11,552 a------- c:\windows\system32\lmimirr2.dll
2009-09-03 22:48 114 a------- C:\sccfg.sys
2009-09-03 13:09 67,936 a------- c:\docume~1\bonnie\applic~1\GDIPFONTCACHEV1.DAT
2009-08-09 12:58 320 a------- c:\docume~1\bonnie\applic~1\wklnhst.dat
2009-08-03 13:36 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-03 13:36 19,096 a------- c:\windows\system32\drivers\mbam.sys
2009-01-23 23:19 519,844 a------- c:\documents and settings\bonnie\House 011.zip
2009-01-23 23:10 467,155 a------- c:\documents and settings\bonnie\front yard5.zip
2009-01-23 22:58 882,825 a------- c:\documents and settings\bonnie\backyard.zip
2009-01-23 22:57 908,044 a------- c:\documents and settings\bonnie\Front Yard 1.zip
2008-10-28 13:42 2,516 a--sh--- c:\docume~1\alluse~1\applic~1\KGyGaAvL.sys
2008-10-28 13:42 88 ---shr-- c:\docume~1\alluse~1\applic~1\123FBDEACB.sys
2007-02-25 15:33 81,920 a------- c:\docume~1\bonnie\applic~1\ezpinst.exe
2007-02-25 15:33 47,360 a------- c:\docume~1\bonnie\applic~1\pcouffin.sys
2008-05-23 16:23 168 a--shr-- c:\windows\system32\123FBDEACB.sys
2008-05-23 16:23 2,516 a--sh--- c:\windows\system32\KGyGaAvL.sys

============= FINISH: 21:13:43.85 ===============

Here is attach.txt


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 2/12/2006 12:28:14 PM
System Uptime: 9/8/2009 8:45:26 PM (1 hours ago)

Motherboard: To be filled by O.E.M. | | MS-7207G
Processor: AMD Athlon(tm) 64 Processor 3400+ | CPU 1 | 2210/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 182 GiB total, 107.473 GiB free.
D: is FIXED (FAT32) - 4 GiB total, 2.381 GiB free.
E: is CDROM (CDFS)
F: is Removable
G: is Removable
H: is Removable
I: is Removable
L: is NetworkDisk (NTFS) - 112 GiB total, 84.662 GiB free.

==== Disabled Device Manager Items =============

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Packet Scheduler Miniport
Device ID: ROOT\MS_PSCHEDMP\0002
Manufacturer: Microsoft
Name: NETGEAR 108 Mbps Wireless PCI Adapter WG311T - Packet Scheduler Miniport
PNP Device ID: ROOT\MS_PSCHEDMP\0002
Service: PSched

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
Description: Officejet J6400 series
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Officejet J6400 series
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:

==== System Restore Points ===================

RP854: 6/8/2009 9:00:54 AM - System Checkpoint
RP855: 6/9/2009 12:54:11 PM - System Checkpoint
RP856: 6/10/2009 12:55:48 PM - System Checkpoint
RP857: 6/11/2009 12:56:03 PM - System Checkpoint
RP858: 6/12/2009 3:37:03 PM - System Checkpoint
RP859: 6/15/2009 1:42:20 PM - System Checkpoint
RP860: 6/16/2009 2:20:06 PM - picasa install
RP861: 6/17/2009 2:50:18 PM - System Checkpoint
RP862: 6/17/2009 10:34:54 PM - Software Distribution Service 3.0
RP863: 6/18/2009 10:50:10 PM - System Checkpoint
RP864: 6/19/2009 11:48:36 PM - System Checkpoint
RP865: 6/22/2009 9:18:13 AM - Printer Driver Microsoft XPS Document Writer Installed
RP866: 6/23/2009 9:20:03 AM - System Checkpoint
RP867: 6/24/2009 10:20:11 AM - System Checkpoint
RP868: 6/25/2009 11:59:09 AM - System Checkpoint
RP869: 6/26/2009 12:30:27 PM - System Checkpoint
RP870: 7/1/2009 3:47:24 PM - System Checkpoint
RP871: 7/2/2009 4:08:33 PM - System Checkpoint
RP872: 7/10/2009 8:32:24 PM - System Checkpoint
RP873: 7/11/2009 11:02:46 PM - System Checkpoint
RP874: 7/13/2009 5:03:44 PM - System Checkpoint
RP875: 7/14/2009 5:10:14 PM - System Checkpoint
RP876: 7/15/2009 6:08:09 PM - System Checkpoint
RP877: 7/20/2009 4:57:23 PM - ezfonts install
RP878: 7/22/2009 2:48:12 PM - System Checkpoint
RP879: 7/24/2009 11:37:44 AM - System Checkpoint
RP880: 8/1/2009 10:26:43 AM - System Checkpoint
RP881: 8/2/2009 11:14:26 AM - System Checkpoint
RP882: 8/5/2009 1:25:08 PM - System Checkpoint
RP883: 8/5/2009 4:51:37 PM - Installed Nero 9 Essentials 4.4.9.0
RP884: 8/9/2009 1:34:23 PM - System Checkpoint
RP885: 8/10/2009 2:21:44 PM - System Checkpoint
RP886: 8/11/2009 2:38:50 PM - System Checkpoint
RP887: 8/12/2009 5:47:08 PM - System Checkpoint
RP888: 8/12/2009 8:41:01 PM - Installed NETGEAR GA311 Gigabit Adapter
RP889: 8/12/2009 8:43:42 PM - Update to an unsigned driver
RP890: 8/12/2009 8:59:17 PM - Unsigned driver install
RP891: 8/12/2009 9:04:32 PM - Update to an unsigned driver
RP892: 8/12/2009 9:05:06 PM - Update to an unsigned driver
RP893: 8/12/2009 9:13:31 PM - Removed AVG 8.5
RP894: 8/12/2009 9:14:04 PM - Installed AVG 8.5
RP895: 8/16/2009 10:52:02 AM - System Checkpoint
RP896: 8/17/2009 11:35:52 AM - System Checkpoint
RP897: 8/18/2009 12:11:06 PM - System Checkpoint
RP898: 8/19/2009 6:50:25 PM - System Checkpoint
RP899: 8/20/2009 7:48:13 PM - System Checkpoint
RP900: 8/21/2009 9:12:11 PM - System Checkpoint
RP901: 8/22/2009 9:39:47 PM - System Checkpoint
RP902: 8/24/2009 10:51:29 PM - System Checkpoint
RP903: 8/25/2009 11:19:40 PM - System Checkpoint
RP904: 8/27/2009 12:19:40 AM - System Checkpoint
RP905: 8/28/2009 1:19:39 AM - System Checkpoint
RP906: 8/29/2009 2:19:38 AM - System Checkpoint
RP907: 8/30/2009 3:19:40 AM - System Checkpoint
RP908: 8/31/2009 3:27:27 PM - System Checkpoint
RP909: 9/2/2009 1:58:33 PM - System Checkpoint
RP910: 9/3/2009 7:50:58 PM - System Checkpoint
RP911: 9/3/2009 10:39:31 PM - Installed AVG 8.5
RP912: 9/4/2009 9:29:29 AM - Avg8 Update
RP913: 9/7/2009 8:16:57 PM - Printer Driver LogMeIn Printer Driver Installed
RP914: 9/7/2009 8:46:07 PM - Removed AVG 8.5
RP915: 9/7/2009 8:51:44 PM - Removed AVG 8.5
RP916: 9/8/2009 2:43:33 PM - Installed SUPERAntiSpyware Professional

==== Installed Programs ======================

1Click DVD Copy Pro 2.3.0.2
32 Bit HP CIO Components Installer
6400_Help
Acronis*True*Image*Home
Adobe Acrobat 6.0 Standard
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 2.0
Adobe Photoshop Elements 4.0
Adobe Reader 7.0
Advertising Center
AiO_Scan
Allway Sync version 8.3.1
AnswerWorks Runtime
BadCopy Pro
BigFix
bpd_scan
BPDSoftware
BPDSoftware_Ini
BufferChm
CCleaner (remove only)
ClientTools
CopyToDVD
Core FTP Lite 1.3b
Corel Applications
Corel WordPerfect Suite 8
Coupon Printer for Windows
Destination Component
DeviceDiscovery
DeviceManagementQFolder
Digital Media Reader
DiskExplorer for FAT
DocMgr
DocProc
DocProcQFolder
DVD43 v3.9.0
eChatTools
eSupportQFolder
EZ Fonts
Fax
Folder Lock
GetDataBack for FAT
GetDataBack for NTFS
Google Toolbar for Internet Explorer
GoToMeeting/GoToWebinar 3.0.0.198
GPBaseService
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB888795)
Hotfix for Windows XP (KB891593)
Hotfix for Windows XP (KB893357)
Hotfix for Windows XP (KB895961)
Hotfix for Windows XP (KB899337)
Hotfix for Windows XP (KB899510)
Hotfix for Windows XP (KB902841)
Hotfix for Windows XP (KB906569)
Hotfix for Windows XP (KB935448)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
HP Document Manager 1.0
HP Image Zone 4.2
HP Imaging Device Functions 10.0
HP Officejet J6400 Series
HP Photosmart Essential 2.5
HP PSC & OfficeJet 4.2
HP Solution Center 10.0
HPProductAssistant
ICS Viewer 6.0
J2SE Runtime Environment 5.0 Update 2
J6400
Lexis® Front Office - Time Matters® 9.0 Professional
LexisNexis Practice Management Installer
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
LogMeIn
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.0 Hotfix (KB887998)
Microsoft .NET Framework 1.0 Hotfix (KB930494)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Starter Edition 2006
Microsoft Digital Image Starter Edition 2006 Editor
Microsoft Digital Image Starter Edition 2006 Library
Microsoft Office Word Viewer 2003
Microsoft Office XP Professional with FrontPage
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (3.0.8)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 6.0 Parser (KB933579)
Multimedia Keyboard Driver
Napster Burn Engine
Nero 9 Essentials
Nero BurnRights
Nero ControlCenter
Nero Installer
Nero OEM
Nero Online Upgrade
Nero StartSmart
Nero StartSmart OEM
neroxml
NetDeviceManager
NETGEAR GA311 Gigabit Adapter
NETGEAR GA311 Smart Wizard Utility
NETGEAR Wireless Adapter WG311T
NVIDIA Drivers
OCR Software by I.R.I.S. 10.0
Picasa 3
PicViewer 2
PowerDesk 6
PowerDVD
ProductContext
PSSWCORE
PureEdge Viewer 6.1
QFolder
QuickTime
Readiris Pro 9
Realtek High Definition Audio Driver
Recovery Software Suite eMachines
Remote Administrator v2.2
Retrospect 7.0
Roxio RecordNow Audio
Roxio RecordNow Copy
Roxio RecordNow Data
Scan
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944338)
Security Update for Windows XP (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
SoftV92 Data Fax Modem with SmartCP
SolutionCenter
Sonic Encoders
Spy Sweeper
Spy Sweeper Core
Status
SUPERAntiSpyware Professional
Symantec pcAnywhere
Time Matters 6.0 - Legal Series
Toolbox
TrayApp
UltraVNC v1.0.2
Uniblue DriverScanner 2009
UnloadSupport
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB942840)
Update for Windows XP (KB953356)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update Rollup 2 for Windows XP Media Center Edition 2005
Verizon SmartCall
VideoToolkit01
WebEx
WebFldrs XP
WebReg
Windows Backup Utility
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888239
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Media Center Edition 2005 KB908250
WordPerfect Lightning
WordPerfect Lightning - EN
WordPerfect Lightning - IPM
WordPerfect Lightning - Messages
WordPerfect Lightning - MSOM
WordPerfect Office X3
WordPerfect Office X4
WordPerfect Office X4 - Common
WordPerfect Office X4 - Content
WordPerfect Office X4 - EN
WordPerfect Office X4 - Filters
WordPerfect Office X4 - Graphics
WordPerfect Office X4 - ICA
WordPerfect Office X4 - IPM
WordPerfect Office X4 - IPM T EN
WordPerfect Office X4 - MAIL
WordPerfect Office X4 - Migration Manager
WordPerfect Office X4 - PerfectExperts
WordPerfect Office X4 - PR
WordPerfect Office X4 - QP
WordPerfect Office X4 - Skins
WordPerfect Office X4 - System
WordPerfect Office X4 - WP

==== Event Viewer Messages From Past Week ========

9/8/2009 2:50:39 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD awlegacy Fips IPSec MRxSmb NetBIOS NetBT Processor RasAcd Rdbss SASDIFSV SASKUTIL Tcpip
9/8/2009 2:50:39 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
9/8/2009 2:50:39 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
9/8/2009 2:50:39 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
9/8/2009 2:50:39 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
9/8/2009 2:50:39 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments " " in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
9/8/2009 2:50:21 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
9/7/2009 9:05:10 PM, error: Service Control Manager [7023] - The Automatic Updates service terminated with the following error: The specified module could not be found.
9/7/2009 9:01:13 PM, error: Service Control Manager [7006] - The ScRegSetValueExW call failed for Start with the following error: Access is denied.
9/7/2009 8:45:40 PM, error: Service Control Manager [7034] - The AVGIDSWatcher service terminated unexpectedly. It has done this 1 time(s).
9/7/2009 8:31:34 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the PEVSystemStart service to connect.
9/7/2009 8:27:34 PM, error: Service Control Manager [7034] - The Webroot Spy Sweeper Engine service terminated unexpectedly. It has done this 1 time(s).
9/7/2009 8:23:23 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AvgLdx86 AvgMfx86 awlegacy Fips Processor
9/7/2009 8:22:34 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
9/7/2009 8:16:07 PM, error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.
9/4/2009 9:24:38 AM, error: Service Control Manager [7000] - The windrvNT service failed to start due to the following error: The system cannot find the file specified.
9/4/2009 9:22:50 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
9/3/2009 10:50:57 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer BR that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B6C35ED3-39E5-4773-B186. The master browser is stopping or an election is being forced.

==== End Of File ===========================

 

combo fix and HJT log

combo fix:

ComboFix 09-09-07.03 - Bonnie 09/10/2009 14:23:12.3.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.895.588 [GMT -7:00]
Running from: C:\Documents and Settings\Bonnie\Desktop\ComboFix.exe
FW: AVG Firewall *disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((( Files Created from 2009-08-10 to 2009-09-10 )))))))))))))))))))))))))))))))
.

2009-09-09 23:36:29 . 2009-09-09 23:36:29 0 d-----w- C:\WINDOWS\Sun
2009-09-08 21:43:45 . 2009-09-08 21:43:45 0 d-----w- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2009-09-08 21:43:34 . 2009-09-08 21:43:38 0 d-----w- C:\Program Files\SUPERAntiSpyware
2009-09-08 21:43:34 . 2009-09-08 21:43:34 0 d-----w- C:\Documents and Settings\Bonnie\Application Data\SUPERAntiSpyware.com
2009-09-08 03:17:01 . 2009-09-08 03:17:01 0 d-----w- C:\Documents and Settings\LocalService\Local Settings\Application Data\ICS
2009-09-04 19:28:32 . 2009-09-04 19:28:43 0 d--h--w- C:\$AVG8.VAULT$
2009-09-04 17:35:39 . 2009-09-04 17:37:33 0 d-----w- C:\usb stick
2009-09-04 05:40:48 . 2009-09-04 05:40:48 0 d-----w- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2009-09-04 05:39:35 . 2009-09-04 05:39:35 0 d-----w- C:\Program Files\AVG
2009-09-04 05:39:32 . 2009-09-08 03:57:01 0 d-----w- C:\Documents and Settings\All Users\Application Data\avg8
2009-09-04 05:36:51 . 2009-09-04 05:36:51 0 d-----w- C:\Documents and Settings\Bonnie\Application Data\AVG8
2009-08-16 20:42:20 . 2009-08-16 20:42:20 0 d-----w- C:\Documents and Settings\Bonnie\Application Data\CoxFastConnect20
2009-08-13 03:41:08 . 2009-08-13 03:41:16 0 d-----w- C:\Program Files\NETGEAR GA311 Adapter
2009-08-13 03:40:54 . 2009-08-13 03:40:54 0 d-----w- C:\Documents and Settings\All Users\Application Data\{B7A015B7-4802-4678-8CEC-700380BA9AFD}

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-10 21:06:52 . 2008-10-08 22:18:29 0 d-----w- C:\Program Files\LogMeIn
2009-09-08 21:41:54 . 2007-01-10 20:34:48 0 d-----w- C:\Program Files\Common Files\Wise Installation Wizard
2009-09-08 03:16:00 . 2008-10-08 22:18:45 83288 ----a-w- C:\WINDOWS\system32\LMIRfsClientNP.dll
2009-09-08 03:15:58 . 2008-10-08 22:18:45 28984 ----a-w- C:\WINDOWS\system32\LMIport.dll
2009-09-08 03:15:58 . 2008-10-08 22:18:41 87352 ----a-w- C:\WINDOWS\system32\LMIinit.dll
2009-09-08 03:15:58 . 2007-11-16 01:46:24 11552 ----a-w- C:\WINDOWS\system32\lmimirr2.dll
2009-09-08 03:15:58 . 2007-11-16 01:46:22 25248 ----a-w- C:\WINDOWS\system32\lmimirr.dll
2009-09-04 05:48:56 . 2007-02-21 22:11:20 114 ----a-w- C:\sccfg.sys
2009-09-03 05:59:55 . 2009-01-28 20:44:07 0 d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2009-08-09 19:58:30 . 2006-03-11 02:28:47 320 ----a-w- C:\Documents and Settings\Bonnie\Application Data\wklnhst.dat
2009-08-05 23:53:02 . 2009-08-05 23:52:13 0 d-----w- C:\Program Files\Nero
2009-08-05 23:52:47 . 2009-08-05 23:52:02 0 d-----w- C:\Documents and Settings\All Users\Application Data\Nero
2009-08-05 23:52:36 . 2009-08-05 23:52:02 0 d-----w- C:\Program Files\Common Files\Nero
2009-08-05 20:41:55 . 2005-01-10 01:26:51 67936 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-03 20:36:28 . 2009-01-28 20:44:08 38160 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2009-08-03 20:36:06 . 2009-01-28 20:44:11 19096 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2009-07-20 23:59:11 . 2009-07-20 23:59:04 0 d-----w- C:\Program Files\EZ Fonts
2008-05-23 23:23:49 . 2008-02-28 19:43:54 168 --sha-r- C:\WINDOWS\system32\123FBDEACB.sys
2008-05-23 23:23:51 . 2008-02-28 19:43:54 2516 --sha-w- C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-09-08_04.47.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-01-10 01:17:35 . 2009-09-08 21:16:29 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2005-01-10 01:17:35 . 2009-08-20 17:45:01 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2005-01-10 01:17:35 . 2009-09-08 21:16:29 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2005-01-10 01:17:35 . 2009-08-20 17:45:01 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2005-01-10 01:17:35 . 2009-09-08 21:16:29 16384 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2005-01-10 01:17:35 . 2009-08-20 17:45:01 16384 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2009-09-08 21:43:42 . 2009-09-08 21:43:42 65024 C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
+ 2009-09-08 21:43:42 . 2009-09-08 21:43:42 18944 C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
+ 2009-09-08 21:43:41 . 2009-09-08 21:43:41 1578496 C:\WINDOWS\Installer\72610.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware "= "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-09-04 21:49:58 1994480]
"swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-26 16:45:55 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogMeIn GUI "= "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" [2007-08-03 22:09:34 63048]
"NvCplDaemon "= "C:\WINDOWS\system32\NvCpl.dll" [2008-09-18 06:55:00 13574144]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"swg "= "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-26 16:45:55 68856]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "= "C:\Program Files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 17:13:36 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21:42 548352 ----a-w- C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2009-09-08 03:15:58 87352 ----a-w- C:\WINDOWS\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PCANotify]
2003-10-31 19:01:00 8704 ----a-w- C:\WINDOWS\system32\PCANotify.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@= "Service "

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk
backup=C:\WINDOWS\pss\Acrobat Assistant.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BigFix.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\BigFix.lnk
backup=C:\WINDOWS\pss\BigFix.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^GA311 Smart Wizard Utility.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\GA311 Smart Wizard Utility.lnk
backup=C:\WINDOWS\pss\GA311 Smart Wizard Utility.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MskService "=2 (0x2)
"Retrospect Helper "=2 (0x2)
"RetroLauncher "=2 (0x2)
"PrismXL "=2 (0x2)
"AdobeActiveFileMonitor4.0 "=2 (0x2)
"r_server "=2 (0x2)
"FastUserSwitchingCompatibility "=3 (0x3)
"WebrootSpySweeperService "=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride "=dword:00000001
"UpdatesDisableNotify "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe "=
"C:\\Program Files\\Dantz\\Retrospect 7.0\\Retrospect.exe "=
"C:\\Program Files\\Symantec\\pcAnywhere\\Winaw32.exe "=
"C:\\Program Files\\Symantec\\pcAnywhere\\awhost32.exe "=
"C:\\Program Files\\Symantec\\pcAnywhere\\awrem32.exe "=
"C:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe "=
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe "=
"C:\\Program Files\\Messenger\\msmsgs.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe "=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe "=
"C:\\Program Files\\LogMeIn\\x86\\LogMeIn.exe "=
"C:\\WINDOWS\\system32\\mmc.exe "=
"C:\\WINDOWS\\system32\\fxsclnt.exe "=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP "= 3389:TCPxpsp2res.dll,-22009

R0 ssfs0bbc;ssfs0bbc;C:\WINDOWS\system32\drivers\ssfs0bbc.sys [8/9/2008 2:42:12 PM 29808]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv.sys [9/4/2009 2:50:00 PM 9968]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [9/4/2009 2:49:58 PM 74480]
R2 LANPkt;Realtek LANPkt Protocol;C:\WINDOWS\system32\drivers\LANPkt.sys [12/25/2003 7:53:10 PM 8440]
R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files\LogMeIn\x86\rainfo.sys [8/3/2007 3:09:34 PM 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\WINDOWS\system32\drivers\LMIRfsDriver.sys [10/8/2008 3:18:45 PM 47640]
R3 SASENUM;SASENUM;C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [9/4/2009 2:50:02 PM 7408]
S3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys --> C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [?]
S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys --> C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [?]
S3 AWINDIS5;AWINDIS5 Protocol Driver;C:\WINDOWS\system32\AWINDIS5.SYS [2/12/2006 5:47:35 PM 16194]
S3 Diag69xp;Diag69xp;C:\WINDOWS\system32\drivers\diag69xp.sys [12/25/2003 7:53:10 PM 11237]
S3 NETGEAR_WG311T_SERVICE;NETGEAR WG311T Wireless Adapter Service;C:\WINDOWS\system32\drivers\wg311tn5.sys [2/12/2006 5:47:35 PM 395840]
S3 NetgearGA311;NETGEAR GA311 Gigabit Adapter Driver;C:\WINDOWS\system32\drivers\G311N6.sys [12/28/2008 11:47:05 AM 70144]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
uSearch Bar = hxxp://www.google.com/ie
uInternet Connection Wizard,ShellNext = hxxp://www.emachines.com/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Search
IE: Add to Google Photos Screensa&ver - C:\WINDOWS\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
Name-Space Handler: ftp\* - {419A0123-4312-1122-A0C0-434FDA6DA542} - C:\PROGRA~1\CoreFTP\pftpns.dll
DPF: {01010200-5E80-11D8-9E86-0007E96C65AE} - hxxps://ra.qwest.com/sdccommon/download/tgctlins.cab
DPF: {CB97291A-6603-466A-AA11-80C2EB74CB10} - hxxps://install.cox.net/CoxSelfInstall//CoxSelfInstallAx10.ocx
FF - ProfilePath - C:\Documents and Settings\Bonnie\Application Data\Mozilla\Firefox\Profiles\tqj3ri6r.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - plugin: C:\Program Files\Google\Picasa3\npPicasa3.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPJava11.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPJava12.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPJava13.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPJava14.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPJava32.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPJPI150_02.dll
FF - plugin: C:\Program Files\Java\jre1.5.0_02\bin\NPOJI610.dll
FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
.
HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:45:59 PM, on 9/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PSIService.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Bonnie\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
O2 - BHO: Time Matters - {00F17ECE-12DA-46A0-B541-BDE4EB7DF027} - C:\TMW8\tmietb.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Time Matters - {00F17ECE-12DA-46A0-B541-BDE4EB7DF027} - C:\TMW8\tmietb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe "
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01010200-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Installer) - https://ra.qwest.com/sdccommon/download/tgctlins.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://ra.qwest.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=67633
O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab
O16 - DPF: {34F12AFD-E9B5-492A-85D2-40FA4535BE83} (AxProdInfoCtl Class) - http://www.symantec.com/techsupp/activedata/nprdtinf.cab
O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager_dev/plugin/IEGetPlugin.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1232581604836
O16 - DPF: {8BBDC81D-81B3-49EE-87E8-47B7A707FAE8} (GoToMeeting/GoToWebinar Web Starter) - https://www.gotomeeting.com/default/applets/g2mdlax.cab
O16 - DPF: {CB97291A-6603-466A-AA11-80C2EB74CB10} (CoxSelfInstallAx10 Control) - https://install.cox.net/CoxSelfInstall//CoxSelfInstallAx10.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://pm.webex.com/client/T25L/support/ieatgpc.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\supportsoft\bin\ssrc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

--
End of file - 7397 bytes

 

get virus program

I was surprised there wasn't any trojan or virus since the machine hard locks when I use it. Should I run Malwarebytes and then install virus program and scan with that. Should any of these be in safe mode.