Inactive Intermittent Freezing...Requested Scan logs.....

[Inactive] Intermittent Freezing...Requested Scan logs.....

DDS (Ver_09-12-01.01) - NTFSX64
Run by Shannon at 13:07:55.54 on Sat 01/02/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.4094.2941 [GMT -5:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Shannon\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\syswow64\blank.htm
mWinlogon: Userinit=userinit.exe
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files (x86)\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files (x86)\windows live\toolbar\wltcore.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files (x86)\windows live\toolbar\wltcore.dll
uRun: [OpenDNS Updater] "c:\program files (x86)\opendns updater\OpenDNSUpdater.exe" /autostart
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files (x86)\windows live\writer\WriterBrowserExtension.dll
TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
mRun-x64: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide

============= SERVICES / DRIVERS ===============

R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-6-18 164720]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2009-6-18 40832]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-8-21 84512]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2009-3-1 187392]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]

=============== Created Last 30 ================

2010-01-02 15:51:01 0 d-----w- c:\program files\common files\Little Registry Cleaner
2010-01-02 15:50:06 0 d-----w- c:\program files (x86)\Little Registry Cleaner
2010-01-02 06:35:11 0 d-----w- c:\users\shannon\appdata\roaming\OpenDNS Updater
2010-01-02 06:35:09 0 d-----w- c:\program files (x86)\OpenDNS Updater
2010-01-02 06:16:58 2048 ----a-w- c:\windows\syswow64\tzres.dll
2010-01-02 06:16:58 2048 ----a-w- c:\windows\system32\tzres.dll
2010-01-02 06:15:16 4398360 ----a-w- c:\windows\system32\d3dx9_32.dll
2010-01-02 06:15:16 3426072 ----a-w- c:\windows\syswow64\d3dx9_32.dll
2010-01-02 06:15:13 0 d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2010-01-02 06:14:31 0 d-----w- c:\program files (x86)\Microsoft
2010-01-02 06:14:10 0 d-----w- c:\program files (x86)\Windows Live SkyDrive
2010-01-02 06:13:37 0 d-----w- c:\windows\PCHEALTH
2010-01-02 06:09:05 0 d-----w- c:\program files (x86)\common files\Windows Live
2010-01-02 06:08:39 311808 ----a-w- c:\windows\system32\msv1_0.dll
2010-01-02 06:08:39 257024 ----a-w- c:\windows\syswow64\msv1_0.dll
2010-01-02 05:35:01 0 d-----w- c:\programdata\NVIDIA
2010-01-02 05:26:59 46592 ----a-w- c:\windows\system32\msasn1.dll
2010-01-02 05:26:59 34816 ----a-w- c:\windows\syswow64\msasn1.dll
2010-01-02 05:26:58 0 d-----w- c:\program files (x86)\Microsoft Antimalware
2010-01-02 05:26:56 64512 ----a-w- c:\windows\syswow64\msfeedsbs.dll
2010-01-02 05:26:56 5958656 ----a-w- c:\windows\syswow64\mshtml.dll
2010-01-02 05:26:50 0 d-----w- c:\program files\Microsoft Security Essentials
2010-01-02 05:25:22 0 d-sh--w- c:\windows\Installer
2010-01-02 05:25:18 541800 ----a-w- c:\windows\system32\nvuninst.exe

==================== Find3M ====================

2009-11-03 01:42:06 226688 ------w- c:\windows\system32\MpSigStub.exe
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:54:24 174 --sha-w- c:\program files\desktop.ini
2009-07-14 04:54:24 174 --sha-w- c:\program files (x86)\desktop.ini
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 20:44:08 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-07-14 05:12:52 245760 --sha-w- c:\windows\system32\config\systemprofile\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-07-14 01:39:53 398848 --sha-w- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 13:08:22.85 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/2/2010 12:23:31 AM
System Uptime: 1/2/2010 12:11:47 PM (1 hours ago)

Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA770T-UD3P
Processor: AMD Phenom(tm) II X4 925 Processor | Socket M2 | 2800/200mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 159 GiB total, 142.106 GiB free.
D: is FIXED (NTFS) - 233 GiB total, 192.064 GiB free.
E: is FIXED (NTFS) - 74 GiB total, 66.365 GiB free.
F: is CDROM ()
G: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 1/2/2010 12:24:55 AM - Windows Update
RP2: 1/2/2010 12:27:23 AM - Windows Update
RP3: 1/2/2010 12:58:34 AM - Windows Backup
RP4: 1/2/2010 1:07:03 AM - Windows Update
RP5: 1/2/2010 1:29:10 AM - Date&Time
RP7: 1/2/2010 10:50:25 AM - First time running Little Registry Cleaner
RP9: 1/2/2010 10:52:04 AM - Before Little Registry Cleaner Registry Fix
RP11: 1/2/2010 10:52:39 AM - Before Little Registry Cleaner Registry Fix

==== Installed Programs ======================

Junk Mail filter update
Little Registry Cleaner
Microsoft Choice Guard
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
MSVCRT
OpenDNS Updater 2.2
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer

==== Event Viewer Messages From Past Week ========

1/2/2010 11:03:46 AM, Error: Service Control Manager [7016] - The NVIDIA Display Driver Service service has reported an invalid current state 32.

==== End Of File ===========================

 

This is the logs for my XP Pro Install::


DDS (Ver_09-12-01.01) - NTFSx86
Run by Shannon at 13:22:04.57 on Sat 01/02/2010
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.2237 [GMT -5:00]

AV: Panda Internet Security 2010 *On-access scanning enabled* (Updated) {4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0}
AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: Panda Personal Firewall 2010 *enabled* {7B090DC0-8905-4BAF-8040-FD98A41C8FB8}

============== Running Processes ===============

F:\WINDOWS\system32\nvsvc32.exe
F:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
F:\Program Files\Microsoft Security Essentials\MsMpEng.exe
F:\WINDOWS\system32\svchost.exe -k netsvcs
F:\Program Files\Panda Security\Panda Internet Security 2010\TPSrv.exe
svchost.exe
F:\PROGRAM FILES\PANDA SECURITY\PANDA INTERNET SECURITY 2010\WebProxy.exe
svchost.exe
F:\WINDOWS\system32\spoolsv.exe
svchost.exe
F:\WINDOWS\system32\svchost -k Panda
F:\Program Files\Panda Security\Panda Internet Security 2010\PsCtrls.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PavFnSvr.exe
F:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
f:\program files\panda security\panda internet security 2010\firewall\PSHOST.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\PsImSvc.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PskSvc.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\pavsrv51.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\AVENGINE.EXE
F:\WINDOWS\Explorer.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\ApVxdWin.exe
F:\Program Files\Microsoft Security Essentials\msseces.exe
F:\WINDOWS\system32\RUNDLL32.EXE
F:\WINDOWS\RTHDCPL.EXE
F:\Program Files\HDD Health\hddhealth.exe
F:\WINDOWS\system32\ctfmon.exe
F:\WINDOWS\System32\svchost.exe -k HTTPFilter
F:\Program Files\OpenDNS Updater\OpenDNSUpdater.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\SRVLOAD.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\PavBckPT.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\psimreal.exe
F:\Documents and Settings\Shannon\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = hxxp://www.pcpitstop.com/satisfaction/review/model/Gigabyte~Technology~Co.%2C~Ltd./GA-MA770T-UD3P.html
BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - f:\program files\wot\WOT.dll
TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - f:\program files\wot\WOT.dll
uRun: [HDDHealth] f:\program files\hdd health\hddhealth.exe -wl
uRun: [ctfmon.exe] f:\windows\system32\ctfmon.exe
uRun: [OpenDNS Updater] "f:\program files\opendns updater\OpenDNSUpdater.exe" /autostart
mRun: [MSSE] "f:\program files\microsoft security essentials\msseces.exe" -hide
mRun: [GBTUpd] f:\program files\gigabyte\gbtupd\PreRun.exe
mRun: [NvCplDaemon] RUNDLL32.EXE f:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE f:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [APVXDWIN] "f:\program files\panda security\panda internet security 2010\APVXDWIN.EXE" /s
mRun: [SCANINICIO] "f:\program files\panda security\panda internet security 2010\Inicio.exe "
mRun: [RTHDCPL] RTHDCPL.EXE
dRun: [DWQueuedReporting] "f:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - f:\program files\messenger\msmsgs.exe
DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://utilities.pcpitstop.com/Nirvana/controls/PCPitStop.CAB
DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0} - hxxp://utilities.pcpitstop.com/Nirvana/controls/DiskMD3Ctrl.dll
DPF: {A553720A-BFED-4EA4-A71F-7EFCA690A1F7} - hxxp://utilities.pcpitstop.com/Nirvana/controls/pcpitstopAntiVirus.dll
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} - hxxp://driveragent.com/files/driveragent.cab
DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} - hxxp://utilities.pcpitstop.com/Nirvana/controls/pcpitstop2.dll
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - f:\program files\wot\WOT.dll
Notify: avldr - avldr.dll

============= SERVICES / DRIVERS ===============

R0 pavboot;Panda boot driver;f:\windows\system32\drivers\pavboot.sys [2010-1-1 28552]
R1 APPFLT;App Filter Plugin;f:\windows\system32\drivers\APPFLT.SYS [2010-1-1 75016]
R1 DSAFLT;DSA Filter Plugin;f:\windows\system32\drivers\dsaflt.sys [2010-1-1 53128]
R1 FNETMON;NetMon Filter Plugin;f:\windows\system32\drivers\fnetmon.sys [2010-1-1 22072]
R1 IDSFLT;Ids Filter Plugin;f:\windows\system32\drivers\idsflt.sys [2010-1-1 193800]
R1 MpFilter;Microsoft Malware Protection Driver;f:\windows\system32\drivers\MpFilter.sys [2009-6-18 142832]
R1 NETFLTDI;Panda Net Driver [TDI Layer];f:\windows\system32\drivers\NETFLTDI.SYS [2010-1-1 159112]
R1 ShldDrv;Panda File Shield Driver;f:\windows\system32\drivers\ShlDrv51.sys [2010-1-1 41144]
R1 WNMFLT;Wifi Monitor Filter Plugin;f:\windows\system32\drivers\wnmflt.sys [2010-1-1 46728]
R2 Gwmsrv;Panda Goodware Cache Manager;f:\windows\system32\svchost -k panda --> f:\windows\system32\svchost -k Panda [?]
R2 Panda Software Controller;Panda Software Controller;f:\program files\panda security\panda internet security 2010\PsCtrlS.exe [2010-1-1 173312]
R2 PAVDRV;pavdrv;f:\windows\system32\drivers\pavdrv51.sys [2010-1-1 84024]
R2 PAVFNSVR;Panda Function Service;f:\program files\panda security\panda internet security 2010\PavFnSvr.exe [2010-1-1 169216]
R2 PavProc;Panda Process Protection Driver;f:\windows\system32\drivers\PavProc.sys [2010-1-1 163336]
R2 PavPrSrv;Panda Process Protection Service;f:\program files\common files\panda security\pavshld\PavPrSrv.exe [2010-1-1 62768]
R2 PAVSRV;Panda On-Access Anti-Malware Service;f:\program files\panda security\panda internet security 2010\PAVSRV51.EXE [2010-1-1 291584]
R2 PskSvcRetail;Panda PSK service;f:\program files\panda security\panda internet security 2010\psksvc.exe [2010-1-1 28928]
R3 AvFlt;Antivirus Filter Driver;f:\windows\system32\drivers\av5flt.sys --> f:\windows\system32\drivers\av5flt.sys [?]
R3 NETIMFLT01060039;PANDA NDIS IM Filter Miniport v1.6.0.39;f:\windows\system32\drivers\neti1639.sys [2010-1-1 199432]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;f:\windows\system32\drivers\nvhda32.sys [2010-1-1 57320]
R3 PavSRK.sys;PavSRK.sys;\??\f:\windows\system32\pavsrk.sys --> f:\windows\system32\PavSRK.sys [?]
R3 PavTPK.sys;PavTPK.sys;\??\f:\windows\system32\pavtpk.sys --> f:\windows\system32\PavTPK.sys [?]
S3 Ambfilt;Ambfilt;f:\windows\system32\drivers\Ambfilt.sys [2010-1-1 1684736]
S4 PCPitstop Scheduling;PCPitstop Scheduling;f:\program files\pcpitstop\PCPitstopScheduleService.exe [2010-1-1 85504]

============== File Associations ===============

JSEFile=f:\progra~1\pandas~1\pandai~1\PavScrip.exe "%1" %*
VBEFile=f:\progra~1\pandas~1\pandai~1\PavScrip.exe "%1" %*
VBSFile=f:\progra~1\pandas~1\pandai~1\PavScrip.exe "%1" %*

=============== Created Last 30 ================

2010-01-02 18:17:08 274288 ----a-w- f:\windows\system32\mucltui.dll
2010-01-02 18:17:08 215920 ----a-w- f:\windows\system32\muweb.dll
2010-01-02 18:17:08 16736 ----a-w- f:\windows\system32\mucltui.dll.mui
2010-01-02 15:44:19 0 d-----w- f:\program files\common files\Little Registry Cleaner
2010-01-02 15:43:43 0 d-----w- f:\program files\Little Registry Cleaner
2010-01-02 07:06:23 0 d-----w- f:\program files\OpenDNS Updater
2010-01-02 00:57:49 0 d-----w- f:\program files\WOT
2010-01-02 00:45:50 0 d-----w- f:\program files\HDD Health
2010-01-02 00:44:22 0 d-----w- f:\docume~1\shannon\applic~1\OpenDNS Updater
2010-01-02 00:20:51 0 d-----w- f:\docume~1\shannon\applic~1\Foxit
2010-01-02 00:20:30 0 d-----w- f:\program files\Foxit Software
2010-01-02 00:18:13 0 d-----w- f:\program files\VS Revo Group
2010-01-02 00:00:59 0 d-----w- f:\windows\system32\XPSViewer
2010-01-02 00:00:31 89088 -c----w- f:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-01-02 00:00:31 597504 -c----w- f:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-01-02 00:00:31 575488 -c----w- f:\windows\system32\dllcache\xpsshhdr.dll
2010-01-02 00:00:31 575488 ------w- f:\windows\system32\xpsshhdr.dll
2010-01-02 00:00:31 1676288 -c----w- f:\windows\system32\dllcache\xpssvcs.dll
2010-01-02 00:00:31 1676288 ------w- f:\windows\system32\xpssvcs.dll
2010-01-02 00:00:31 117760 ------w- f:\windows\system32\prntvpt.dll
2010-01-01 23:56:35 8627 ----a-w- f:\windows\system32\PAV_FOG.OPC
2010-01-01 23:51:38 262 ----a-w- f:\windows\system32\PavCPL.dat
2010-01-01 23:51:18 225236 ----a-w- f:\windows\system32\drivers\APPFCONT.DAT.bck
2010-01-01 23:51:18 225236 ----a-w- f:\windows\system32\drivers\APPFCONT.DAT
2010-01-01 23:51:18 1132 ----a-w- f:\windows\system32\drivers\APPFLTR.CFG.bck
2010-01-01 23:51:18 1132 ----a-w- f:\windows\system32\drivers\APPFLTR.CFG
2010-01-01 23:51:15 53128 ----a-w- f:\windows\system32\drivers\dsaflt.sys
2010-01-01 23:51:15 46728 ----a-w- f:\windows\system32\drivers\wnmflt.sys
2010-01-01 23:51:15 193800 ----a-w- f:\windows\system32\drivers\idsflt.sys
2010-01-01 23:51:11 75016 ----a-w- f:\windows\system32\drivers\APPFLT.SYS
2010-01-01 23:51:11 22072 ----a-w- f:\windows\system32\drivers\fnetmon.sys
2010-01-01 23:51:11 159112 ----a-w- f:\windows\system32\drivers\NETFLTDI.SYS
2010-01-01 23:51:09 0 d-----w- f:\docume~1\alluse~1\applic~1\Backup
2010-01-01 23:51:04 499712 ----a-w- f:\windows\system32\MSVCP71.DLL
2010-01-01 23:50:43 0 d-----w- f:\docume~1\shannon\applic~1\Panda Security
2010-01-01 23:50:42 0 d-----w- f:\program files\Panda Security
2010-01-01 23:50:42 0 d-----w- f:\docume~1\alluse~1\applic~1\Panda Security
2010-01-01 23:50:17 0 d-----w- f:\program files\common files\Panda Security
2010-01-01 23:42:51 0 d-----w- f:\windows\pss
2010-01-01 23:33:06 8743 ----a-w- f:\windows\system32\nvinfo.pb
2010-01-01 23:33:06 69632 ----a-w- f:\windows\system32\OpenCL.dll
2010-01-01 23:33:04 11374592 ----a-w- f:\windows\system32\nvcompiler.dll
2010-01-01 23:18:37 23600 ----a-w- f:\windows\system32\drivers\TVICHW32.SYS
2010-01-01 23:15:30 73728 ----a-w- f:\windows\system32\ISUSPM.cpl
2010-01-01 22:19:19 0 d-----w- f:\docume~1\shannon\applic~1\PCPitstop
2010-01-01 22:19:16 0 d-----w- f:\docume~1\alluse~1\applic~1\PCPitstop
2010-01-01 22:19:14 0 d-----w- f:\program files\PCPitstop
2010-01-01 22:05:06 991232 -c----w- f:\windows\system32\dllcache\ieframe.dll.mui
2010-01-01 22:05:06 6067200 -c----w- f:\windows\system32\dllcache\ieframe.dll
2010-01-01 22:05:06 52224 -c----w- f:\windows\system32\dllcache\msfeedsbs.dll
2010-01-01 22:05:06 459264 -c----w- f:\windows\system32\dllcache\msfeeds.dll
2010-01-01 22:05:06 268288 -c----w- f:\windows\system32\dllcache\iertutil.dll
2010-01-01 22:05:06 13824 -c----w- f:\windows\system32\dllcache\ieudinit.exe
2010-01-01 22:05:05 63488 -c----w- f:\windows\system32\dllcache\icardie.dll
2010-01-01 22:05:05 380928 -c----w- f:\windows\system32\dllcache\ieapfltr.dll
2010-01-01 22:05:05 2452872 -c----w- f:\windows\system32\dllcache\ieapfltr.dat
2010-01-01 21:59:05 0 d-----w- f:\program files\GIGABYTE
2010-01-01 21:54:21 0 d-----w- f:\windows\Logs
2010-01-01 21:50:04 592488 ----a-w- f:\windows\system32\nvuninst.exe
2010-01-01 21:49:50 592488 ----a-w- f:\windows\system32\nvuhda.exe
2010-01-01 21:49:50 57320 ----a-w- f:\windows\system32\drivers\nvhda32.sys
2010-01-01 21:49:50 19456 ----a-w- f:\windows\system32\nvhdap32.dll
2010-01-01 21:49:50 182888 ----a-w- f:\windows\system32\nvcohda.dll
2010-01-01 21:49:50 1368 ----a-w- f:\windows\system32\nvhda.nvu
2010-01-01 21:49:47 0 d-----w- F:\NVIDIA
2010-01-01 21:49:23 0 d-----w- f:\docume~1\alluse~1\applic~1\NVIDIA Corporation
2010-01-01 21:48:48 0 d-----w- f:\program files\NVIDIA Corporation
2010-01-01 21:36:04 272128 -c----w- f:\windows\system32\dllcache\bthport.sys
2010-01-01 21:36:04 272128 ------w- f:\windows\system32\drivers\bthport.sys
2010-01-01 21:34:58 455296 -c----w- f:\windows\system32\dllcache\mrxsmb.sys
2010-01-01 21:33:33 26488 ----a-w- f:\windows\system32\spupdsvc.exe
2010-01-01 21:33:33 0 d-----w- f:\windows\system32\PreInstall
2010-01-01 21:33:31 0 d--h--w- f:\windows\$hf_mig$
2010-01-01 21:32:30 2560 ------w- f:\windows\system32\xpsp4res.dll
2010-01-01 21:32:12 195456 ------w- f:\windows\system32\MpSigStub.exe
2010-01-01 21:29:31 0 d-----w- f:\windows\system32\ReinstallBackups
2010-01-01 21:29:28 33792 ----a-w- f:\windows\system32\drivers\AmdPPM.sys
2010-01-01 21:29:26 0 d-----w- f:\program files\AMD
2010-01-01 21:27:39 0 d-----w- f:\windows\system32\SoftwareDistribution
2010-01-01 21:27:28 73728 ----a-w- f:\windows\system32\RtNicProp32.dll
2010-01-01 21:27:28 143360 ----a-w- f:\windows\system32\drivers\Rtenicxp.sys
2010-01-01 21:26:44 940794 ----a-w- f:\windows\system32\LoopyMusic.wav
2010-01-01 21:26:44 146650 ----a-w- f:\windows\system32\BuzzingBee.wav
2010-01-01 21:26:42 0 d-----w- f:\windows\system32\Lang
2010-01-01 21:24:59 18782720 ----a-w- f:\windows\RTHDCPL.EXE
2010-01-01 21:24:58 2170880 ----a-w- f:\windows\MicCal.exe
2010-01-01 21:24:58 1389056 ----a-w- f:\windows\system32\drivers\Monfilt.sys
2010-01-01 21:24:55 57344 ----a-w- f:\windows\ALCMTR.EXE
2010-01-01 21:24:55 2808832 ----a-w- f:\windows\ALCWZRD.EXE
2010-01-01 21:24:55 1684736 ----a-w- f:\windows\system32\drivers\Ambfilt.sys
2010-01-01 21:24:54 278528 ----a-w- f:\windows\system32\ALSNDMGR.CPL
2010-01-01 21:24:54 0 d-----w- f:\program files\Realtek
2010-01-01 21:24:50 831488 ------r- f:\windows\RtlExUpd.dll
2010-01-01 21:23:55 207400 ----a-r- f:\windows\GSetup.exe
2010-01-01 21:23:55 10 ----a-w- f:\windows\GSetup.ini
2010-01-01 21:22:32 0 d-----w- f:\program files\Microsoft Security Essentials
2009-12-31 18:26:43 0 d-sh--w- F:\$RECYCLE.BIN
2009-12-31 18:00:18 0 d-----w- f:\program files\NeoSmart Technologies
2009-12-31 17:50:29 0 d-sh--w- f:\documents and settings\all users\DRM
2009-12-31 17:50:17 0 d--h--w- f:\program files\WindowsUpdate
2009-12-31 17:49:45 0 d-----w- f:\program files\common files\MSSoap
2009-12-31 17:48:28 0 d-----w- f:\program files\Online Services
2009-12-31 17:48:24 0 d-----w- f:\program files\Messenger
2009-12-31 17:48:21 0 d-----w- f:\program files\MSN Gaming Zone
2009-12-31 17:47:46 0 d-----w- f:\program files\Windows NT
2009-12-31 12:41:27 0 d-----w- f:\program files\common files\ODBC
2009-12-31 12:41:24 0 d-----w- f:\program files\common files\SpeechEngines
2009-12-31 12:40:58 0 d-----r- f:\documents and settings\all users\Documents

==================== Find3M ====================

2009-12-31 17:48:46 21640 ----a-w- f:\windows\system32\emptyregdb.dat
2009-11-21 02:34:54 6282752 ----a-w- f:\windows\system32\nv4_disp.dll
2009-11-21 02:34:54 4038656 ----a-w- f:\windows\system32\nvcuda.dll
2009-11-21 02:34:54 2293286 ----a-w- f:\windows\system32\nvdata.bin
2009-11-21 02:34:54 2259560 ----a-w- f:\windows\system32\nvcuvid.dll
2009-11-21 02:34:54 1989224 ----a-w- f:\windows\system32\nvcuvenc.dll
2009-11-21 02:34:54 182888 ----a-w- f:\windows\system32\nvcodins.dll
2009-11-21 02:34:54 182888 ----a-w- f:\windows\system32\nvcod.dll
2009-11-21 02:34:54 13602816 ----a-w- f:\windows\system32\nvoglnt.dll
2009-11-21 02:34:54 1056768 ----a-w- f:\windows\system32\nvapi.dll
2009-11-21 02:34:54 10235968 ----a-w- f:\windows\system32\drivers\nv4_mini.sys
2009-11-21 01:32:14 278120 ----a-w- f:\windows\system32\nvmccs.dll
2009-11-21 01:32:14 154216 ----a-w- f:\windows\system32\nvsvc32.exe
2009-11-21 01:32:14 145000 ----a-w- f:\windows\system32\nvcolor.exe
2009-11-21 01:32:14 12669544 ----a-w- f:\windows\system32\nvcpl.dll
2009-11-21 01:32:14 110184 ----a-w- f:\windows\system32\nvmctray.dll
2009-11-21 01:32:10 81920 ----a-w- f:\windows\system32\nvwddi.dll
2009-10-29 07:46:59 832512 ----a-w- f:\windows\system32\wininet.dll
2009-10-29 07:46:52 78336 ----a-w- f:\windows\system32\ieencode.dll
2009-10-29 07:46:50 17408 ----a-w- f:\windows\system32\corpol.dll
2009-10-23 09:53:52 41984 ----a-w- f:\windows\system32\RtkCoInstXP.dll
2009-10-13 10:30:16 270336 ----a-w- f:\windows\system32\oakley.dll
2009-10-12 13:38:19 149504 ----a-w- f:\windows\system32\rastls.dll
2009-10-12 13:38:18 79872 ----a-w- f:\windows\system32\raschap.dll
2009-10-08 05:24:42 352256 ----a-w- f:\windows\vncutil.exe

============= FINISH: 13:22:29.29 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 12/31/2009 12:52:46 PM
System Uptime: 1/2/2010 1:15:23 PM (0 hours ago)

Motherboard: Gigabyte Technology Co., Ltd. | | GA-MA770T-UD3P
Processor: AMD Phenom(tm) II X4 925 Processor | Socket M2 | 2812/200mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 0 GiB total, 0.072 GiB free.
D: is FIXED (NTFS) - 233 GiB total, 192.067 GiB free.
F: is FIXED (NTFS) - 74 GiB total, 66.769 GiB free.
G: is CDROM ()
H: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP13: 1/1/2010 6:15:28 PM - Installed DMIView B8.0717.01
RP14: 1/1/2010 6:57:10 PM - Software Distribution Service 3.0
RP15: 1/1/2010 6:58:06 PM - Software Distribution Service 3.0
RP16: 1/1/2010 7:18:31 PM - Revo Uninstaller's restore point - Adobe Reader 9.2
RP17: 1/1/2010 7:18:45 PM - Removed Adobe Reader 9.2.
RP18: 1/1/2010 7:50:17 PM - Software Distribution Service 3.0
RP19: 1/1/2010 7:57:48 PM - Installed WOT for Internet Explorer
RP20: 1/2/2010 2:03:37 AM - Revo Uninstaller's restore point - Foxit Toolbar
RP21: 1/2/2010 2:04:18 AM - Revo Uninstaller's restore point - OpenDNS Updater 2.2
RP22: 1/2/2010 4:28:02 AM - Software Distribution Service 3.0
RP23: 1/2/2010 10:46:17 AM - Before Little Registry Cleaner Registry Fix

==== Installed Programs ======================

@BIOS Ver.2.06
Adobe Flash Player 10 ActiveX
AMD Processor Driver
DMIView B8.0717.01
EasyBCD 1.7.2
Exterminate3
Foxit Reader
HDD Health v3.3 Beta
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB976098-v2)
Little Registry Cleaner
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Security Essentials
NVIDIA Display Control Panel
NVIDIA Drivers
NVIDIA nView Desktop Manager
OpenDNS Updater 2.2
Panda Internet Security 2010
PC Matic 1.0.0.0
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Revo Uninstaller 1.71
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB976325)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Manager B09.0908.1
WebFldrs XP
Windows Driver Package - Realtek Semiconductor Corp. (RTLE8023xp) Net (07/28/2009 5.736.0728.2009)
Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (11/03/2009 5.10.0.5973)
Windows Genuine Advantage Notifications (KB905474)
Windows Internet Explorer 7
WOT for Internet Explorer

==== Event Viewer Messages From Past Week ========

1/2/2010 8:52:22 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000243' while processing the file 'NetAdapt.cfg' on the volume 'HarddiskVolume3'. It has stopped monitoring the volume.
1/2/2010 1:40:28 AM, error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
1/1/2010 7:34:30 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Print Spooler service to connect.
1/1/2010 7:34:30 PM, error: Service Control Manager [7000] - The Print Spooler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/1/2010 4:50:21 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file f:\windows\system32\drivers\ks.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
1/1/2010 4:50:20 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file f:\windows\system32\drivers\portcls.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
1/1/2010 4:50:19 PM, information: Windows File Protection [64021] - The system file f:\windows\system32\ksproxy.ax could not be copied into the DLL cache. The specific error code is 0x00000000 [The operation completed successfully. ]. This file is necessary to maintain system stability.
1/1/2010 4:50:13 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file f:\windows\system32\drivers\stream.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
1/1/2010 4:50:08 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file f:\windows\system32\drivers\drmk.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
1/1/2010 4:27:29 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:27:29 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:27:29 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:27:29 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:27:28 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/1/2010 4:23:40 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:40 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:40 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:40 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiSpyware Update Type: Full User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:39 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/1/2010 4:23:01 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/1/2010 4:23:01 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiVirus Update Type: Full User: SMT4232383-PC\Shannon Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:01 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiVirus Update Type: Full User: SMT4232383-PC\Shannon Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:01 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiSpyware Update Type: Full User: SMT4232383-PC\Shannon Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved
1/1/2010 4:23:01 PM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?Lin...0.0&prod=BCF43643-A118-4432-AEDE-D861FCBCFCDE Signature Type: AntiSpyware Update Type: Full User: SMT4232383-PC\Shannon Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

==== End Of File ===========================

 

I could not find nor remove the MRT.exe. I looked in just about every file on my system. Thank you. I will post Windows 7 log soon.

Windows XP Logs::

ComboFix 10-01-01.05 - Shannon 01/02/2010 15:32:20.1.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.2327 [GMT -5:00]
Running from: f:\documents and settings\Shannon\Desktop\ComboFix.exe
AV: Panda Internet Security 2010 *On-access scanning disabled* (Updated) {4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0}
FW: Panda Personal Firewall 2010 *disabled* {7B090DC0-8905-4BAF-8040-FD98A41C8FB8}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

f:\$recycle.bin\S-1-5-21-1097336348-1492938566-2731489088-1000
f:\$recycle.bin\S-1-5-21-2709140684-444649712-3443151361-1001

.
((((((((((((((((((((((((( Files Created from 2009-12-02 to 2010-01-02 )))))))))))))))))))))))))))))))
.

2010-01-02 18:36 . 2010-01-02 18:36 -------- d-----w- f:\program files\MSXML 4.0
2010-01-02 18:17 . 2009-08-07 00:23 274288 ----a-w- f:\windows\system32\mucltui.dll
2010-01-02 18:17 . 2009-08-07 00:23 215920 ----a-w- f:\windows\system32\muweb.dll
2010-01-02 15:46 . 2010-01-02 15:46 -------- d-----w- f:\documents and settings\Shannon\Local Settings\Application Data\Little_Apps_(http___www.l
2010-01-02 15:44 . 2010-01-02 15:44 -------- d-----w- f:\program files\Common Files\Little Registry Cleaner
2010-01-02 15:43 . 2010-01-02 15:43 -------- d-----w- f:\program files\Little Registry Cleaner
2010-01-02 14:40 . 2010-01-02 14:40 -------- d-----w- f:\program files\DIFX
2010-01-02 07:06 . 2010-01-02 07:06 -------- d-----w- f:\program files\OpenDNS Updater
2010-01-02 00:57 . 2010-01-02 00:57 -------- d-----w- f:\program files\WOT
2010-01-02 00:45 . 2010-01-02 00:45 -------- d-----w- f:\program files\HDD Health
2010-01-02 00:44 . 2010-01-02 07:06 -------- d-----w- f:\documents and settings\Shannon\Application Data\OpenDNS Updater
2010-01-02 00:20 . 2010-01-02 00:20 -------- d-----w- f:\documents and settings\Shannon\Application Data\Foxit
2010-01-02 00:20 . 2010-01-02 00:20 -------- d-----w- f:\program files\Foxit Software
2010-01-02 00:18 . 2010-01-02 00:18 -------- d-----w- f:\documents and settings\Shannon\Local Settings\Application Data\Adobe
2010-01-02 00:18 . 2010-01-02 00:18 -------- d-----w- f:\program files\VS Revo Group
2010-01-02 00:00 . 2010-01-02 00:00 -------- d-----w- f:\windows\system32\XPSViewer
2010-01-02 00:00 . 2010-01-02 00:00 -------- d-----w- f:\program files\MSBuild
2010-01-02 00:00 . 2010-01-02 00:00 -------- d-----w- f:\program files\Reference Assemblies
2010-01-02 00:00 . 2008-07-06 12:06 89088 ----a-w- f:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-01-02 00:00 . 2008-07-06 12:06 89088 -c----w- f:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-01-02 00:00 . 2008-07-06 12:06 575488 -c----w- f:\windows\system32\dllcache\xpsshhdr.dll
2010-01-02 00:00 . 2008-07-06 12:06 575488 ------w- f:\windows\system32\xpsshhdr.dll
2010-01-02 00:00 . 2008-07-06 12:06 1676288 -c----w- f:\windows\system32\dllcache\xpssvcs.dll
2010-01-02 00:00 . 2008-07-06 12:06 1676288 ------w- f:\windows\system32\xpssvcs.dll
2010-01-02 00:00 . 2008-07-06 12:06 117760 ------w- f:\windows\system32\prntvpt.dll
2010-01-02 00:00 . 2008-07-06 10:50 597504 -c----w- f:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-01-02 00:00 . 2008-07-06 10:50 597504 ------w- f:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-01-01 23:51 . 2010-01-01 23:51 262 ----a-w- f:\windows\system32\PavCPL.dat
2010-01-01 23:51 . 2010-01-01 23:51 -------- d-----w- f:\documents and settings\Shannon\Local Settings\Application Data\Panda Security
2010-01-01 23:51 . 2010-01-02 20:22 223064 ----a-w- f:\windows\system32\drivers\APPFCONT.DAT
2010-01-01 23:51 . 2009-06-16 18:33 46728 ----a-w- f:\windows\system32\drivers\wnmflt.sys
2010-01-01 23:51 . 2009-06-16 18:32 53128 ----a-w- f:\windows\system32\drivers\dsaflt.sys
2010-01-01 23:51 . 2009-06-16 18:32 193800 ----a-w- f:\windows\system32\drivers\idsflt.sys
2010-01-01 23:51 . 2009-10-01 04:07 75016 ----a-w- f:\windows\system32\drivers\APPFLT.SYS
2010-01-01 23:51 . 2009-06-16 18:33 159112 ----a-w- f:\windows\system32\drivers\NETFLTDI.SYS
2010-01-01 23:51 . 2008-03-28 16:25 22072 ----a-w- f:\windows\system32\drivers\fnetmon.sys
2010-01-01 23:51 . 2010-01-01 23:51 -------- d-----w- f:\documents and settings\All Users\Application Data\Backup
2010-01-01 23:51 . 2003-03-19 10:14 499712 ----a-w- f:\windows\system32\MSVCP71.DLL
2010-01-01 23:33 . 2009-11-21 02:34 69632 ----a-w- f:\windows\system32\OpenCL.dll
2010-01-01 23:33 . 2009-11-21 02:34 11374592 ----a-w- f:\windows\system32\nvcompiler.dll
2010-01-01 23:18 . 2010-01-01 23:18 23600 ----a-w- f:\windows\system32\drivers\TVICHW32.SYS
2010-01-01 23:15 . 2010-01-01 23:15 -------- d-----w- f:\documents and settings\All Users\Application Data\InstallShield
2010-01-01 22:19 . 2010-01-01 22:19 -------- d-----w- f:\documents and settings\Shannon\Application Data\PCPitstop
2010-01-01 22:19 . 2010-01-02 14:59 -------- d-----w- f:\documents and settings\All Users\Application Data\PCPitstop
2010-01-01 22:19 . 2010-01-01 22:19 -------- d-----w- f:\program files\PCPitstop
2010-01-01 22:05 . 2009-10-29 07:46 52224 -c----w- f:\windows\system32\dllcache\msfeedsbs.dll
2010-01-01 22:05 . 2009-10-29 07:46 459264 -c----w- f:\windows\system32\dllcache\msfeeds.dll
2010-01-01 22:05 . 2009-10-29 07:46 6067200 -c----w- f:\windows\system32\dllcache\ieframe.dll
2010-01-01 22:05 . 2009-10-29 07:46 268288 -c----w- f:\windows\system32\dllcache\iertutil.dll
2010-01-01 22:05 . 2009-10-28 14:36 13824 -c----w- f:\windows\system32\dllcache\ieudinit.exe
2010-01-01 22:05 . 2009-10-29 07:46 63488 -c----w- f:\windows\system32\dllcache\icardie.dll
2010-01-01 22:05 . 2009-10-29 07:46 380928 -c----w- f:\windows\system32\dllcache\ieapfltr.dll
2010-01-01 22:05 . 2009-06-29 08:33 2452872 -c----w- f:\windows\system32\dllcache\ieapfltr.dat
2010-01-01 21:59 . 2010-01-01 23:15 -------- d-----w- f:\program files\GIGABYTE
2010-01-01 21:54 . 2010-01-01 21:54 -------- d-----w- f:\windows\Logs
2010-01-01 21:50 . 2009-11-20 02:42 592488 ----a-w- f:\windows\system32\nvuninst.exe
2010-01-01 21:49 . 2009-11-12 04:15 592488 ----a-w- f:\windows\system32\nvuhda.exe
2010-01-01 21:49 . 2009-11-12 04:14 57320 ----a-w- f:\windows\system32\drivers\nvhda32.sys
2010-01-01 21:49 . 2009-11-12 01:08 19456 ----a-w- f:\windows\system32\nvhdap32.dll
2010-01-01 21:49 . 2009-11-10 23:15 182888 ----a-w- f:\windows\system32\nvcohda.dll
2010-01-01 21:49 . 2010-01-01 23:33 -------- d-----w- F:\NVIDIA
2010-01-01 21:49 . 2010-01-01 21:49 -------- d-----w- f:\documents and settings\All Users\Application Data\NVIDIA Corporation
2010-01-01 21:48 . 2010-01-01 23:33 -------- d-----w- f:\program files\NVIDIA Corporation
2010-01-01 21:36 . 2008-06-13 11:05 272128 -c----w- f:\windows\system32\dllcache\bthport.sys
2010-01-01 21:36 . 2008-06-13 11:05 272128 ------w- f:\windows\system32\drivers\bthport.sys
2010-01-01 21:35 . 2009-08-04 15:13 2145280 -c----w- f:\windows\system32\dllcache\ntkrnlmp.exe
2010-01-01 21:35 . 2009-08-04 14:20 2023936 -c----w- f:\windows\system32\dllcache\ntkrpamp.exe
2010-01-01 21:35 . 2009-08-04 14:20 2066048 -c----w- f:\windows\system32\dllcache\ntkrnlpa.exe
2010-01-01 21:34 . 2008-10-24 11:21 455296 -c----w- f:\windows\system32\dllcache\mrxsmb.sys
2010-01-01 21:33 . 2007-11-30 11:18 26488 ----a-w- f:\windows\system32\spupdsvc.exe
2010-01-01 21:33 . 2010-01-02 18:36 -------- d--h--w- f:\windows\$hf_mig$
2010-01-01 21:32 . 2008-05-03 11:55 2560 ------w- f:\windows\system32\xpsp4res.dll
2010-01-01 21:32 . 2009-11-03 01:42 195456 ------w- f:\windows\system32\MpSigStub.exe
2010-01-01 21:29 . 2007-04-16 21:46 33792 ----a-w- f:\windows\system32\drivers\AmdPPM.sys
2010-01-01 21:29 . 2010-01-02 19:59 -------- dc----w- f:\windows\system32\DRVSTORE
2010-01-01 21:29 . 2010-01-01 21:29 -------- d-----w- f:\program files\AMD
2010-01-01 21:29 . 2010-01-01 21:29 -------- d-----w- f:\documents and settings\Shannon\Application Data\InstallShield
2010-01-01 21:27 . 2010-01-01 21:27 -------- d-----w- f:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth
2010-01-01 21:27 . 2009-07-28 21:55 143360 ----a-w- f:\windows\system32\drivers\Rtenicxp.sys
2010-01-01 21:27 . 2009-07-08 17:05 73728 ----a-w- f:\windows\system32\RtNicProp32.dll
2010-01-01 21:26 . 2010-01-01 21:26 -------- d-----w- f:\windows\system32\Lang
2010-01-01 21:24 . 2009-08-14 06:08 18702336 ----a-w- f:\windows\RTHDCPL.EXE
2010-01-01 21:24 . 2009-08-04 05:31 2170880 ----a-w- f:\windows\MicCal.exe
2010-01-01 21:24 . 2006-01-04 06:41 1389056 ----a-w- f:\windows\system32\drivers\Monfilt.sys
2010-01-01 21:24 . 2009-03-02 02:14 57344 ----a-w- f:\windows\ALCMTR.EXE
2010-01-01 21:24 . 2008-08-05 11:10 1684736 ----a-w- f:\windows\system32\drivers\Ambfilt.sys
2010-01-01 21:24 . 2008-06-19 07:42 2808832 ----a-w- f:\windows\ALCWZRD.EXE
2010-01-01 21:24 . 2010-01-01 21:27 -------- d-----w- f:\program files\Realtek
2010-01-01 21:24 . 2010-01-01 23:50 -------- d--h--w- f:\program files\InstallShield Installation Information
2010-01-01 21:24 . 2009-08-05 08:10 831488 ------r- f:\windows\RtlExUpd.dll
2010-01-01 21:24 . 2010-01-01 23:15 -------- d-----w- f:\program files\Common Files\InstallShield
2010-01-01 21:23 . 2009-08-27 07:04 207400 ----a-r- f:\windows\GSetup.exe
2010-01-01 21:23 . 2010-01-01 21:23 -------- d-----w- f:\documents and settings\Shannon\Local Settings\Application Data\PCHealth
2010-01-01 21:23 . 2010-01-01 21:23 -------- d-----w- f:\documents and settings\LocalService\Local Settings\Application Data\PCHealth
2009-12-31 18:02 . 2009-12-31 18:02 -------- d-----w- f:\documents and settings\Shannon\Local Settings\Application Data\NeoSmart_Technologies
2009-12-31 18:00 . 2009-12-31 18:00 -------- d-----w- f:\program files\NeoSmart Technologies

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-02 20:22 . 2010-01-01 23:51 223064 ----a-w- f:\windows\system32\drivers\APPFCONT.DAT.bck
2010-01-02 20:22 . 2010-01-01 23:51 1132 ----a-w- f:\windows\system32\drivers\APPFLTR.CFG.bck
2010-01-02 20:22 . 2010-01-01 23:51 1132 ----a-w- f:\windows\system32\drivers\APPFLTR.CFG
2010-01-02 13:56 . 2009-12-31 17:50 86327 ----a-w- f:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-02 00:35 . 2009-12-31 17:55 12328 ----a-w- f:\documents and settings\Shannon\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-01 23:50 . 2010-01-01 23:50 -------- d-----w- f:\program files\Panda Security
2010-01-01 23:50 . 2010-01-01 23:50 -------- d-----w- f:\documents and settings\Shannon\Application Data\Panda Security
2010-01-01 23:50 . 2010-01-01 23:50 -------- d-----w- f:\documents and settings\All Users\Application Data\Panda Security
2010-01-01 23:50 . 2010-01-01 23:50 -------- d-----w- f:\program files\Common Files\Panda Security
2009-12-31 17:51 . 2009-12-31 17:51 -------- d-----w- f:\program files\microsoft frontpage
2009-12-31 17:48 . 2009-12-31 17:48 21640 ----a-w- f:\windows\system32\emptyregdb.dat
2009-11-21 02:34 . 2009-09-27 23:12 6282752 ----a-w- f:\windows\system32\nv4_disp.dll
2009-11-21 02:34 . 2009-09-27 23:12 4038656 ----a-w- f:\windows\system32\nvcuda.dll
2009-11-21 02:34 . 2009-09-27 23:12 2293286 ----a-w- f:\windows\system32\nvdata.bin
2009-11-21 02:34 . 2009-09-27 23:12 2259560 ----a-w- f:\windows\system32\nvcuvid.dll
2009-11-21 02:34 . 2009-09-27 23:12 1989224 ----a-w- f:\windows\system32\nvcuvenc.dll
2009-11-21 02:34 . 2009-09-27 23:12 182888 ----a-w- f:\windows\system32\nvcodins.dll
2009-11-21 02:34 . 2009-09-27 23:12 182888 ----a-w- f:\windows\system32\nvcod.dll
2009-11-21 02:34 . 2009-09-27 23:12 13602816 ----a-w- f:\windows\system32\nvoglnt.dll
2009-11-21 02:34 . 2009-09-27 23:12 1056768 ----a-w- f:\windows\system32\nvapi.dll
2009-11-21 02:34 . 2009-09-27 23:12 10235968 ----a-w- f:\windows\system32\drivers\nv4_mini.sys
2009-11-21 01:32 . 2009-11-21 01:32 278120 ----a-w- f:\windows\system32\nvmccs.dll
2009-11-21 01:32 . 2009-11-21 01:32 154216 ----a-w- f:\windows\system32\nvsvc32.exe
2009-11-21 01:32 . 2009-11-21 01:32 145000 ----a-w- f:\windows\system32\nvcolor.exe
2009-11-21 01:32 . 2009-11-21 01:32 12669544 ----a-w- f:\windows\system32\nvcpl.dll
2009-11-21 01:32 . 2009-11-21 01:32 110184 ----a-w- f:\windows\system32\nvmctray.dll
2009-11-21 01:32 . 2009-11-21 01:32 81920 ----a-w- f:\windows\system32\nvwddi.dll
2009-10-29 07:46 . 2008-04-14 12:00 832512 ----a-w- f:\windows\system32\wininet.dll
2009-10-29 07:46 . 2008-04-14 12:00 78336 ----a-w- f:\windows\system32\ieencode.dll
2009-10-29 07:46 . 2008-04-14 12:00 17408 ----a-w- f:\windows\system32\corpol.dll
2009-10-21 05:38 . 2008-04-14 12:00 75776 ----a-w- f:\windows\system32\strmfilt.dll
2009-10-21 05:38 . 2008-04-14 12:00 25088 ----a-w- f:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2008-04-14 12:00 265728 ----a-w- f:\windows\system32\drivers\http.sys
2009-10-13 10:30 . 2008-04-14 12:00 270336 ----a-w- f:\windows\system32\oakley.dll
2009-10-12 13:38 . 2008-04-14 12:00 149504 ----a-w- f:\windows\system32\rastls.dll
2009-10-12 13:38 . 2008-04-14 12:00 79872 ----a-w- f:\windows\system32\raschap.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDDHealth "= "f:\program files\HDD Health\hddhealth.exe" [2008-06-15 1692672]
"OpenDNS Updater "= "f:\program files\OpenDNS Updater\OpenDNSUpdater.exe" [2009-11-16 839168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GBTUpd "= "f:\program files\GIGABYTE\GBTUpd\PreRun.exe" [2008-04-03 297480]
"NvCplDaemon "= "f:\windows\system32\NvCpl.dll" [2009-11-21 12669544]
"NvMediaCenter "= "f:\windows\system32\NvMcTray.dll" [2009-11-21 110184]
"APVXDWIN "= "f:\program files\Panda Security\Panda Internet Security 2010\APVXDWIN.EXE" [2009-09-25 906496]
"SCANINICIO "= "f:\program files\Panda Security\Panda Internet Security 2010\Inicio.exe" [2009-08-12 56064]
"ISUSPM Startup "= "f:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-17 221184]
"RTHDCPL "= "RTHDCPL.EXE" [2009-08-14 18702336]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting "= "f:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
2008-03-18 21:58 58672 ----a-w- f:\windows\system32\avldr.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail]
@= "Service "

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe "=
"%windir%\\system32\\sessmgr.exe "=
"f:\\Program Files\\GIGABYTE\\GBTUpd\\RunUpd.exe "=
"f:\\Program Files\\GIGABYTE\\GBTUpd\\GBTUpd.exe "=
"f:\\WINDOWS\\system32\\mmc.exe "=

R0 pavboot;Panda boot driver;f:\windows\system32\drivers\pavboot.sys [1/1/2010 6:50 PM 28552]
R1 APPFLT;App Filter Plugin;f:\windows\system32\drivers\APPFLT.SYS [1/1/2010 6:51 PM 75016]
R1 DSAFLT;DSA Filter Plugin;f:\windows\system32\drivers\dsaflt.sys [1/1/2010 6:51 PM 53128]
R1 FNETMON;NetMon Filter Plugin;f:\windows\system32\drivers\fnetmon.sys [1/1/2010 6:51 PM 22072]
R1 IDSFLT;Ids Filter Plugin;f:\windows\system32\drivers\idsflt.sys [1/1/2010 6:51 PM 193800]
R1 NETFLTDI;Panda Net Driver [TDI Layer];f:\windows\system32\drivers\NETFLTDI.SYS [1/1/2010 6:51 PM 159112]
R1 ShldDrv;Panda File Shield Driver;f:\windows\system32\drivers\ShlDrv51.sys [1/1/2010 6:50 PM 41144]
R1 WNMFLT;Wifi Monitor Filter Plugin;f:\windows\system32\drivers\wnmflt.sys [1/1/2010 6:51 PM 46728]
R2 Gwmsrv;Panda Goodware Cache Manager;f:\windows\system32\svchost -k Panda --> f:\windows\system32\svchost -k Panda [?]
R2 PavProc;Panda Process Protection Driver;f:\windows\system32\drivers\PavProc.sys [1/1/2010 6:50 PM 163336]
R2 PskSvcRetail;Panda PSK service;f:\program files\Panda Security\Panda Internet Security 2010\psksvc.exe [1/1/2010 6:51 PM 28928]
R3 AvFlt;Antivirus Filter Driver;f:\windows\system32\drivers\av5flt.sys --> f:\windows\system32\drivers\av5flt.sys [?]
R3 NETIMFLT01060039;PANDA NDIS IM Filter Miniport v1.6.0.39;f:\windows\system32\drivers\neti1639.sys [1/1/2010 6:50 PM 199432]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;f:\windows\system32\drivers\nvhda32.sys [1/1/2010 4:49 PM 57320]
R3 PavSRK.sys;PavSRK.sys;\??\f:\windows\system32\PavSRK.sys --> f:\windows\system32\PavSRK.sys [?]
R3 PavTPK.sys;PavTPK.sys;\??\f:\windows\system32\PavTPK.sys --> f:\windows\system32\PavTPK.sys [?]
S3 Ambfilt;Ambfilt;f:\windows\system32\drivers\Ambfilt.sys [1/1/2010 4:24 PM 1684736]
S4 PCPitstop Scheduling;PCPitstop Scheduling;f:\program files\PCPitstop\PCPitstopScheduleService.exe [1/1/2010 5:19 PM 85504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
panda REG_MULTI_SZ Gwmsrv
.
Contents of the 'Scheduled Tasks' folder

2010-01-02 f:\windows\Tasks\User_Feed_Synchronization-{7B4E4110-691C-4D38-91FC-362B603CDA0B}.job
- f:\windows\system32\msfeedssync.exe [2007-08-13 23:36]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = hxxp://www.pcpitstop.com/satisfaction/review/model/Gigabyte~Technology~Co.%2C~Ltd./GA-MA770T-UD3P.html
DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0} - hxxp://utilities.pcpitstop.com/Nirvana/controls/DiskMD3Ctrl.dll
DPF: {A553720A-BFED-4EA4-A71F-7EFCA690A1F7} - hxxp://utilities.pcpitstop.com/Nirvana/controls/pcpitstopAntiVirus.dll
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-Adobe ARM - f:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe



**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1192)
f:\windows\system32\avldr.dll

- - - - - - - > 'explorer.exe'(3012)
f:\windows\system32\WININET.dll
f:\windows\system32\ieframe.dll
.
Completion time: 2010-01-02 15:34:18
ComboFix-quarantined-files.txt 2010-01-02 20:34

Pre-Run: 73,086,259,200 bytes free
Post-Run: 73,076,326,400 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
;
;Warning: Boot.ini is used on Windows XP and earlier operating systems.
;Warning: Use BCDEDIT.exe to modify Windows Vista boot options.
;
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(3)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(3)\WINDOWS= "Microsoft Windows XP Professional" /NOEXECUTE=OPTIN /FASTDETECT /USEPMTIMER

- - End Of File - - 06407C4C6FEFF0F7EDF9D8C5055981F9


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:36:37 PM, on 1/2/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\nvsvc32.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\TPSrv.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PsCtrls.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PavFnSvr.exe
F:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
f:\program files\panda security\panda internet security 2010\firewall\PSHOST.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\PsImSvc.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PskSvc.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\pavsrv51.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\AVENGINE.EXE
F:\WINDOWS\system32\RUNDLL32.EXE
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\RTHDCPL.EXE
F:\Program Files\HDD Health\hddhealth.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\OpenDNS Updater\OpenDNSUpdater.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PavBckPT.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\WebProxy.exe
F:\ComboFix\CF26508.cfxxe
F:\ComboFix\mbr.cfxxe
F:\WINDOWS\explorer.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\apvxdwin.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\SRVLOAD.EXE
F:\Documents and Settings\Shannon\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.pcpitstop.com/satisfaction/review/model/Gigabyte~Technology~Co.,~Ltd./GA-MA770T-UD3P.html
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - F:\Program Files\WOT\WOT.dll
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - F:\Program Files\WOT\WOT.dll
O4 - HKLM\..\Run: [GBTUpd] F:\Program Files\GIGABYTE\GBTUpd\PreRun.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [APVXDWIN] "F:\Program Files\Panda Security\Panda Internet Security 2010\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "F:\Program Files\Panda Security\Panda Internet Security 2010\Inicio.exe "
O4 - HKLM\..\Run: [ISUSPM Startup] F:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKCU\..\Run: [HDDHealth] F:\Program Files\HDD Health\hddhealth.exe -wl
O4 - HKCU\..\Run: [OpenDNS Updater] "F:\Program Files\OpenDNS Updater\OpenDNSUpdater.exe" /autostart
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "F:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "F:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://utilities.pcpitstop.com/Nirvana/controls/PCPitStop.CAB
O16 - DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0} (diskhealth Class) - http://utilities.pcpitstop.com/Nirvana/controls/DiskMD3Ctrl.dll
O16 - DPF: {A553720A-BFED-4EA4-A71F-7EFCA690A1F7} (PCPitstop AntiVirus) - http://utilities.pcpitstop.com/Nirvana/controls/pcpitstopAntiVirus.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Nirvana/controls/pcpitstop2.dll
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - F:\Program Files\WOT\WOT.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - F:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Panda Security International - f:\program files\panda security\panda internet security 2010\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PskSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\TPSrv.exe

--
End of file - 6622 bytes

 

ComboFix absolutely would not run on Windows 7 at all no matter what I did (i.e. troubleshooting compatibility, run as admin, ect...)
Here is the HJT log though, again thank you::

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:34:22 PM, on 1/2/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe
C:\Users\Shannon\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKCU\..\Run: [OpenDNS Updater] "C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5392 bytes

 

I am going to do the scan in a few mins. Running a couple of memory tests for CyberPower... Yes both OSes freeze.

Have a quick question, if the system was running 2 different kinds of RAM would that cause the freezing?

Again, thank you.

 

Yes scanning each stick in each slot is a pain. I noticed during the MemTest86 tests that one stick said DDR(937) 468MHz and the other was DDR(625) 312MHz; but then I just switched them around in slot one again and they both said they were the same (468MHz & DDR(937)) Thought it a little weird. I am trying slots1&3 now as dual channel, so far no issues but MemTest86 didn't get but 48% through the first test before it shut down with both sticks in, no matter which slots. I am done testing and I will get that next scan done and post results. Thank you so very much!!

 

OK, sorry it took so long. Was having some troubles getting windows ried XP to load. OK, so, System Look works in Windows 7, but doesn't find anything. In Windows XP, System Look didn't work. In the top left corner of the title bar it has the exe symbol like it's not responding but in task manager it says it is running. Also, the look button does not ever stay scanning, it's like clicking a button that doesn't work basically. Hope I explained that correctly. I tried downloading from both mirrors just in case. So I have no log to post unless you want the one from Win7 which says it found nothing? I just looked at the file that is auto made on the XP desktop, says nothing found. I'll post in a sec working on two puters here, lol.

 

This is the auto log that was creatd on XP. Like I said though it did not seem like a proper search truly happened.

SystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 17:10 on 02/01/2010 by Shannon (Administrator - Elevation successful)

========== filefind ==========

Searching for "MRT.exe "
No files found.

-=End Of File=-

 

I also wanted to kinda put it out there that the only memory slots that the modules will work in together for any period of time is 3 & 4.

 

Holy Moly; many freezes took me forever to get this one log.... Hopefully MalwareBytes' will run, have had trouble with it on this machine.....Anyway here's XP Anitspy log::

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/02/2010 at 07:05 PM

Application Version : 4.32.1000

Core Rules Database Version : 3143
Trace Rules Database Version: 2265

Scan type : Complete Scan
Total Scan Time : 00:21:32

Memory items scanned : 213
Memory threats detected : 0
Registry items scanned : 3689
Registry threats detected : 0
File items scanned : 10151
File threats detected : 11

Adware.Tracking Cookie
F:\Documents and Settings\Shannon\Cookies\shannon@ads.pointroll[1].txt
F:\Documents and Settings\Shannon\Cookies\shannon@microsoftsto.112.2o7[1].txt
F:\Documents and Settings\Shannon\Cookies\shannon@doubleclick[1].txt
F:\Documents and Settings\Shannon\Cookies\shannon@collective-media[1].txt
F:\Documents and Settings\Shannon\Cookies\shannon@tribalfusion[2].txt
F:\Documents and Settings\Shannon\Cookies\shannon@pointroll[1].txt
F:\Documents and Settings\Shannon\Cookies\shannon@questionmarket[1].txt
F:\Documents and Settings\Shannon\Cookies\shannon@ads.infinisource[2].txt
F:\Documents and Settings\Shannon\Cookies\shannon@media6degrees[2].txt
F:\Documents and Settings\Shannon\Cookies\shannon@kontera[2].txt
F:\Documents and Settings\Shannon\Cookies\shannon@microsoftinternetexplorer.112.2o7[1].txt

 

There will be no MalwareBytes' log. After 6 tries getting it to install right, I got it to open and tried download, no go. Then, no scan; error codes... 730,0,0 and '0' and I think it was '404' run time errors. Working on GMer now.

 

No GMER log either kept freezing no matter what I did. Tried safe mode even and the system then had to recover from a serious error. Two files I noticed that it froze on a couple of times...
IAT: F:\Program Files\Panda Security\Panda Internet Security 2010\APVXDWIN.EXE[3544] F:\\WINDOWS\system32\SHELL32.dll

and

Sections: F:\WINDOWS\system32\webem\wmiprvse.exe[328] F:\\WINDOWS\System32\SHELL32.dll

I will log in from that system in a minute with the new HJT log, although I doubt it has changed very much.

Should I try to do all these same scans on the Windows 7 system too?I figure yes.It'll be a bit though.

 

HJT Log::

Oh, I have to say again thanks for all your help!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:41:56 PM, on 1/2/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\nvsvc32.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\TPSrv.exe
F:\PROGRAM FILES\PANDA SECURITY\PANDA INTERNET SECURITY 2010\WebProxy.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PsCtrls.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PavFnSvr.exe
F:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
f:\program files\panda security\panda internet security 2010\firewall\PSHOST.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\PsImSvc.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\PskSvc.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\pavsrv51.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\AVENGINE.EXE
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\RUNDLL32.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\APVXDWIN.EXE
F:\WINDOWS\RTHDCPL.EXE
F:\Program Files\HDD Health\hddhealth.exe
F:\Program Files\OpenDNS Updater\OpenDNSUpdater.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\GIGABYTE\GBTUpd\RunUpd.exe
F:\Program Files\Panda Security\Panda Internet Security 2010\SRVLOAD.EXE
F:\Program Files\Panda Security\Panda Internet Security 2010\PavBckPT.exe
F:\Documents and Settings\Shannon\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.pcpitstop.com/satisfaction/review/model/Gigabyte~Technology~Co.,~Ltd./GA-MA770T-UD3P.html
O2 - BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - F:\Program Files\WOT\WOT.dll
O3 - Toolbar: WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - F:\Program Files\WOT\WOT.dll
O4 - HKLM\..\Run: [GBTUpd] F:\Program Files\GIGABYTE\GBTUpd\PreRun.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [APVXDWIN] "F:\Program Files\Panda Security\Panda Internet Security 2010\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "F:\Program Files\Panda Security\Panda Internet Security 2010\Inicio.exe "
O4 - HKLM\..\Run: [ISUSPM Startup] F:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKCU\..\Run: [HDDHealth] F:\Program Files\HDD Health\hddhealth.exe -wl
O4 - HKCU\..\Run: [OpenDNS Updater] "F:\Program Files\OpenDNS Updater\OpenDNSUpdater.exe" /autostart
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "F:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "F:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://utilities.pcpitstop.com/Nirvana/controls/PCPitStop.CAB
O16 - DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0} (diskhealth Class) - http://utilities.pcpitstop.com/Nirvana/controls/DiskMD3Ctrl.dll
O16 - DPF: {A553720A-BFED-4EA4-A71F-7EFCA690A1F7} (PCPitstop AntiVirus) - http://utilities.pcpitstop.com/Nirvana/controls/pcpitstopAntiVirus.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Nirvana/controls/pcpitstop2.dll
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - F:\Program Files\WOT\WOT.dll
O20 - Winlogon Notify: !SASWinLogon - F:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - F:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\pavsrv51.exe
O23 - Service: Panda Host Service (PSHost) - Panda Security International - f:\program files\panda security\panda internet security 2010\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\PskSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - F:\Program Files\Panda Security\Panda Internet Security 2010\TPSrv.exe

--
End of file - 6673 bytes