Inactive Browser redirect & Window update not working

[Inactive] Browser redirect & Window update not working

Hello,

My Laptop is running on Windows 7 64bit. I am facing a browser redirect malware issue from a long time. I formatted my laptop but i m still facing it. I have temporarily fixed the issue by changing the HOST file. But i am not able to resolve the issue permanently. Also i m unable to update Windows Defender and Windows updates are not working.

My system is running with NIS 2010 and MBAM.

Please help me out.

Thanks

 

Sorry for that.

DDS.txt
DDS (Ver_10-03-17.01) - NTFSX64
Run by Rahul at 2:07:19.13 on Sat 05/08/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4095.2664 [GMT 5.5:30]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Windows\system32\CISVC.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Norton Internet Security\Engine\17.6.0.32\ccSvcHst.exe
C:\Windows\SysWOW64\rpcnet.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Windows\System32\rundll32.exe
C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files (x86)\Norton Internet Security\Engine\17.6.0.32\ccSvcHst.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Digsby\lib\digsby-app.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\MagicDisc\MagicDisc.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Rahul\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Rahul\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files (x86)\norton internet security\engine\17.6.0.32\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files (x86)\norton internet security\engine\17.6.0.32\IPSBHO.DLL
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files (x86)\norton internet security\engine\17.6.0.32\coIEPlg.dll
uRun: [uTorrent] "c:\program files (x86)\utorrent\uTorrent.exe "
mRun: [ATKMEDIA] c:\program files (x86)\asus\atk media\DMedia.exe
mRun: [ATKOSD2] c:\program files (x86)\asus\atkosd2\ATKOSD2.exe
mRun: [DirectConsole2] c:\program files (x86)\asus\direct console\Direct Console.exe
mRun: [Malwarebytes' Anti-Malware] "c:\program files (x86)\malwarebytes' anti-malware\mbamgui.exe" /starttray
StartupFolder: c:\users\rahul\appdata\roaming\micros~1\windows\startm~1\programs\startup\digsby.lnk - c:\program files (x86)\digsby\digsby.exe
StartupFolder: c:\users\rahul\appdata\roaming\micros~1\windows\startm~1\programs\startup\magicd~1.lnk - c:\program files (x86)\magicdisc\MagicDisc.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to &Evernote - c:\program files (x86)\evernote\evernote3.5\enbar.dll/2000
IE: E&xport to Microsoft Excel - c:\progra~2\micros~1\office12\EXCEL.EXE/3000
IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - c:\program files (x86)\evernote\evernote3.5\enbar.dll
mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun-x64: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun-x64: [RtHDVCpl] c:\program files\realtek\audio\hda\RAVCpl64.exe -s

================= FIREFOX ===================

FF - ProfilePath - c:\users\rahul\appdata\roaming\mozilla\firefox\profiles\eb9gss0n.default\
FF - prefs.js: browser.startup.homepage - www.google.co.in
FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_17.5.0.127\coffplgn\components\coFFPlgn.dll
FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_17.5.0.127\ipsffplgn\components\IPSFFPl.dll
FF - component: c:\users\rahul\appdata\roaming\mozilla\firefox\profiles\eb9gss0n.default\extensions\{6ac85730-7d0f-4de0-b3fa-21142dd85326}\platform\winnt\components\ColorZilla.dll
FF - component: c:\users\rahul\appdata\roaming\mozilla\firefox\profiles\eb9gss0n.default\extensions\piclens@cooliris.com\components\coolirisstub.dll
FF - plugin: c:\program files (x86)\google\picasa3\npPicasa3.dll
FF - plugin: c:\users\rahul\appdata\local\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\users\rahul\appdata\roaming\mozilla\firefox\profiles\eb9gss0n.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
FF - plugin: c:\users\rahul\appdata\roaming\mozilla\plugins\npgoogletalk.dll

---- FIREFOX POLICIES ----
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "ui.use_native_colors ", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "ui.use_native_popup_windows ", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.enable_click_image_resizing ", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "accessibility.browsewithcaret_shortcut.enabled ", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "javascript.options.mem.high_water_mark ", 32);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "javascript.options.mem.gc_frequency ", 1600);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "svg.smil.enabled ", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "ui.trackpoint_hack.enabled ", -1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.debug ", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.agedWeight ", 2);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.bucketSize ", 1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.maxTimeGroupings ", 25);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.timeGroupingSize ", 604800);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.boundaryWeight ", 25);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "browser.formfill.prefixWeight ", 5);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref( "html5.enable ", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref ", true);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.renego_unrestricted_hosts ", " ");
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.treat_unsafe_negotiation_as_broken ", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.require_safe_negotiation ", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl3.rsa_seed_sha ", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref( "app.update.download.backgroundInterval ", 600);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref( "app.update.url.manual ", "http://www.firefox.com ");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref( "browser.search.param.yahoo-fr-ja ", "mozff ");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ", "chrome://browser/locale/browser.properties ");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ", "chrome://browser/locale/browser.properties ");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add ", "addons.mozilla.org ");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add.36 ", "getpersonas.com ");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "lightweightThemes.update.enabled ", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "browser.allTabs.previews ", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "plugins.hide_infobar_for_outdated_plugin ", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "toolbar.customization.usesheet ", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "browser.taskbar.previews.enable ", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "browser.taskbar.previews.max ", 20);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref( "browser.taskbar.previews.cachetime ", 20);

============= SERVICES / DRIVERS ===============

R0 lullaby;lullaby;c:\windows\system32\drivers\lullaby.sys [2010-4-13 15928]
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\nisx64\1106000.020\symds64.sys [2010-4-28 433200]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\nisx64\1106000.020\symefa64.sys [2010-4-28 221232]
R1 BHDrvx64;BHDrvx64;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_17.5.0.127\definitions\bashdefs\20100429.001\BHDrvx64.sys [2010-4-29 678448]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\nisx64\1106000.020\cchpx64.sys [2010-4-28 615040]
R1 IDSVia64;IDSVia64;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_17.5.0.127\definitions\ipsdefs\20100429.001\IDSviA64.sys [2010-5-4 466992]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\nisx64\1106000.020\ironx64.sys [2010-4-28 149552]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\nisx64\1106000.020\symtdiv.sys [2010-4-28 451120]
R2 ASMMAP64;ASMMAP64;c:\program files\atkgfnex\ASMMAP64.sys [2010-4-13 14904]
R2 MBAMService;MBAMService;c:\program files (x86)\malwarebytes' anti-malware\mbamservice.exe [2010-4-13 304464]
R2 NIS;Norton Internet Security;c:\program files (x86)\norton internet security\engine\17.6.0.32\ccsvchst.exe [2010-4-28 126392]
R2 TeamViewer5;TeamViewer 5;c:\program files (x86)\teamviewer\version5\TeamViewer_Service.exe [2010-1-12 185640]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-4-28 132656]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-4-13 24664]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\drivers\netw5v64.sys [2009-6-11 5434368]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-5-1 81440]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2010-4-13 236544]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\common files\macrovision shared\flexnet publisher\FNPLicensingService64.exe [2010-4-14 1038088]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\drivers\itecir.sys [2010-4-13 60416]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\drivers\usbaapl64.sys [2009-10-16 50176]
S3 WatAdminSvc;WatAdminSvc;c:\windows\system32\wat\WatAdminSvc.exe [2010-5-5 1247528]

============== File Associations ===============

txtfile= "c:\program files (x86)\e\e.exe" "%1 "

=============== Created Last 30 ================

2010-05-07 00:07:04 57752 ------w- c:\windows\syswow64\rpcnet.exe
2010-05-07 00:00:47 0 d-----w- c:\users\rahul\appdata\roaming\Tific
2010-05-06 23:48:39 17408 ----a-w- c:\windows\syswow64\rpcnetp.dll
2010-05-06 23:48:06 17408 ----a-w- c:\windows\syswow64\rpcnetp.exe
2010-05-06 23:14:01 0 d-----w- c:\users\rahul\workspace
2010-05-06 22:46:24 0 d-----w- c:\program files (x86)\InCode Solutions
2010-05-06 22:38:56 0 d-----w- C:\eclipse
2010-05-05 21:04:56 0 d-----w- c:\program files (x86)\mektek.net
2010-05-05 21:00:59 0 d-----w- C:\inetpub
2010-05-05 10:20:29 0 d-----w- c:\windows\syswow64\Wat
2010-05-05 10:20:29 0 d-----w- c:\windows\system32\Wat
2010-05-03 01:23:48 2 --shatr- c:\windows\winstart.bat
2010-05-03 01:23:48 2 --shatr- c:\windows\syswow64\CONFIG.NT
2010-05-03 01:23:48 2 --shatr- c:\windows\syswow64\AUTOEXEC.NT
2010-05-03 01:23:19 0 d-----w- c:\program files (x86)\UnHackMe
2010-05-03 01:22:50 0 d-----w- c:\program files (x86)\Sophos
2010-04-30 00:04:45 0 d-----w- c:\programdata\ASUS
2010-04-29 21:58:18 0 d-----w- c:\users\rahul\Sun
2010-04-29 21:52:57 17 ----a-w- c:\users\rahul\.javafx_ping_sent
2010-04-29 21:52:53 0 d-----w- c:\users\rahul\.javafx
2010-04-29 21:52:53 0 ----a-w- c:\users\rahul\.javafx_eula_accepted
2010-04-28 06:19:46 0 d-----w- c:\windows\syswow64\http%3a%2f%2fcygwin.lilengine.com%2f
2010-04-27 19:01:13 7440 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.CAT
2010-04-27 19:01:12 854 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.INF
2010-04-27 19:01:12 173104 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2010-04-27 19:01:10 0 d-----w- c:\program files\Symantec
2010-04-27 19:01:10 0 d-----w- c:\program files\common files\Symantec Shared
2010-04-27 19:00:51 0 d-----w- c:\windows\system32\drivers\NISx64
2010-04-27 19:00:48 0 d-----w- c:\program files (x86)\Norton Internet Security
2010-04-27 19:00:45 0 d-----w- c:\programdata\Norton
2010-04-27 19:00:35 0 d-----w- c:\program files (x86)\NortonInstaller
2010-04-27 18:57:50 0 d-----w- c:\programdata\NortonInstaller
2010-04-24 23:31:59 0 d-----w- c:\users\rahul\appdata\roaming\Titanium
2010-04-24 23:14:38 0 d-----w- c:\programdata\Titanium
2010-04-24 23:14:07 0 d-----w- c:\program files (x86)\Titanium Developer
2010-04-23 16:55:28 151328 ---ha-w- c:\windows\syswow64\mlfcache.dat
2010-04-22 09:00:33 0 d-----w- c:\users\rahul\appdata\roaming\Fallon.957283BD7AE99C519B762F3E2F85073ED97331F2.1
2010-04-18 20:30:42 0 d-----w- c:\program files (x86)\Mendeley Desktop
2010-04-15 10:03:15 0 d-----w- c:\programdata\FLEXnet
2010-04-14 21:15:20 0 d-----w- c:\programdata\TrackMania
2010-04-14 21:07:21 0 d-----w- c:\program files (x86)\TmUnitedForever
2010-04-14 15:24:12 386 ----a-w- c:\windows\Uninstuxga.reg
2010-04-14 15:24:12 386 ----a-w- c:\windows\Uninstsxga.reg
2010-04-14 15:24:12 384 ----a-w- c:\windows\Uninstvga.reg
2010-04-14 15:24:12 2266 ----a-w- c:\windows\Uninstvga.bat
2010-04-14 15:24:12 2008 ----a-w- c:\windows\Uninstsxga.bat
2010-04-14 15:24:12 1682 ----a-w- c:\windows\Uninstuxga.bat
2010-04-14 14:11:17 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2010-04-14 08:11:55 0 d-----w- c:\program files\Adobe
2010-04-14 08:09:20 0 d-----w- c:\windows\syswow64\spool
2010-04-14 08:07:19 0 d-----w- c:\program files\common files\Macrovision Shared
2010-04-14 08:07:18 0 d-----w- c:\program files\common files\Adobe
2010-04-14 08:07:15 0 d-----w- c:\program files (x86)\common files\Macrovision Shared
2010-04-13 18:25:06 0 d-----w- C:\Databases
2010-04-13 18:24:55 0 d-----w- C:\Logs
2010-04-13 14:25:24 0 d-----w- c:\users\rahul\appdata\roaming\Malwarebytes
2010-04-13 14:25:14 24664 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-13 14:25:14 0 d-----w- c:\programdata\Malwarebytes
2010-04-13 14:25:14 0 d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2010-04-13 14:22:03 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-04-13 13:29:32 0 d-----w- c:\programdata\eMule
2010-04-13 11:57:12 0 d-----w- c:\program files (x86)\Evernote
2010-04-13 11:45:53 126312 ----a-w- c:\windows\system32\GEARAspi64.dll
2010-04-13 11:45:53 107368 ----a-w- c:\windows\syswow64\GEARAspi.dll
2010-04-13 11:45:52 34152 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-04-13 11:45:42 0 d-----w- c:\program files\iPod
2010-04-13 11:45:41 0 d-----w- c:\programdata\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
2010-04-13 11:45:41 0 d-----w- c:\program files\iTunes
2010-04-13 11:45:41 0 d-----w- c:\program files (x86)\iTunes
2010-04-13 11:45:19 0 d-----w- c:\programdata\Apple Computer
2010-04-13 11:45:11 0 d-----w- c:\program files\common files\Apple
2010-04-13 11:45:03 0 d-----w- c:\program files\Bonjour
2010-04-13 11:45:03 0 d-----w- c:\program files (x86)\Bonjour
2010-04-13 11:45:00 0 d-----w- c:\programdata\Apple
2010-04-13 11:16:19 0 d-----w- c:\programdata\Skype
2010-04-13 11:16:19 0 d-----r- c:\program files (x86)\Skype
2010-04-13 11:10:29 0 d-----w- c:\program files (x86)\VideoLAN
2010-04-13 11:04:48 38 ----a-w- c:\windows\avisplitter.ini
2010-04-13 11:04:48 165376 ----a-w- c:\windows\syswow64\unrar.dll
2010-04-13 11:04:47 839680 ----a-w- c:\windows\syswow64\lameACM.acm
2010-04-13 11:04:47 414 ----a-w- c:\windows\syswow64\lame_acm.xml
2010-04-13 11:04:47 217088 ----a-w- c:\windows\syswow64\yv12vfw.dll
2010-04-13 11:04:47 151552 ----a-w- c:\windows\syswow64\ac3acm.acm
2010-04-13 11:04:46 881664 ----a-w- c:\windows\syswow64\xvidcore.dll
2010-04-13 11:04:46 205824 ----a-w- c:\windows\syswow64\xvidvfw.dll
2010-04-13 11:04:45 85504 ----a-w- c:\windows\syswow64\ff_vfw.dll
2010-04-13 11:04:45 547 ----a-w- c:\windows\syswow64\ff_vfw.dll.manifest
2010-04-13 11:04:43 0 d-----w- c:\program files (x86)\K-Lite Codec Pack
2010-04-13 10:57:06 85504 ----a-w- c:\windows\system32\cpwmon64.dll
2010-04-13 10:57:05 0 d-----w- c:\program files (x86)\Acro Software
2010-04-13 10:56:49 0 d-----w- c:\program files (x86)\GPLGS
2010-04-13 10:45:45 0 d-----w- c:\program files (x86)\eMule
2010-04-13 10:43:41 0 d-----w- c:\program files (x86)\CCleaner
2010-04-13 07:22:58 0 d-----w- c:\windows\Panther
2010-04-13 06:23:38 17408 ----a-w- c:\windows\system32\rpcnetp.exe
2010-04-12 23:58:54 0 d-----w- c:\program files (x86)\Stardock
2010-04-12 23:46:21 304128 ----a-w- c:\windows\IsUninst.exe
2010-04-12 23:41:55 0 d-----w- C:\cygwin
2010-04-12 23:39:09 0 d-----w- c:\users\rahul\appdata\roaming\e
2010-04-12 23:38:57 0 d-----w- c:\program files (x86)\e
2010-04-12 21:29:55 0 d-----w- c:\program files (x86)\Merriam-Webster
2010-04-12 21:09:10 0 d-----w- c:\programdata\Sunbelt
2010-04-12 20:52:48 0 d-----w- c:\program files (x86)\EA Sports
2010-04-12 20:35:53 0 d-----w- c:\programdata\Sun
2010-04-12 20:35:31 411368 ----a-w- c:\windows\syswow64\deploytk.dll
2010-04-12 20:32:44 255552 ----a-w- c:\windows\system32\drivers\mcdbus.sys
2010-04-12 20:32:43 0 d-----w- c:\program files (x86)\MagicDisc
2010-04-12 20:29:29 0 d-----w- c:\windows\syswow64\Adobe
2010-04-12 20:11:56 0 d-----w- c:\windows\syswow64\Macromed
2010-04-12 19:56:08 0 d-----w- c:\users\rahul\appdata\roaming\Digsby
2010-04-12 19:56:08 0 d-----w- c:\programdata\Digsby
2010-04-12 19:53:52 0 d-----w- c:\program files (x86)\Digsby
2010-04-12 19:50:41 65536 --sha-w- c:\users\rahul\NTUSER.DAT{e6300d96-4668-11df-92c6-00248c11cb7a}.TM.blf
2010-04-12 19:50:41 524288 --sha-w- c:\users\rahul\NTUSER.DAT{e6300d96-4668-11df-92c6-00248c11cb7a}.TMContainer00000000000000000002.regtrans-ms
2010-04-12 19:50:41 524288 --sha-w- c:\users\rahul\NTUSER.DAT{e6300d96-4668-11df-92c6-00248c11cb7a}.TMContainer00000000000000000001.regtrans-ms
2010-04-12 19:40:47 0 d-----w- c:\programdata\Systweak
2010-04-12 19:35:22 0 d-----w- c:\windows\Repair
2010-04-12 19:35:21 0 d-----w- c:\users\rahul\appdata\roaming\Systweak
2010-04-12 19:35:09 0 d-----w- c:\programdata\MyDefrag
2010-04-12 19:35:02 0 d-----w- c:\program files (x86)\Advanced System Optimizer 3
2010-04-12 19:28:28 0 d-----w- c:\users\rahul\appdata\roaming\Trillian
2010-04-12 19:27:18 0 d-----w- c:\program files (x86)\common files\Symantec Shared
2010-04-12 19:25:10 0 d-----w- c:\programdata\NVIDIA
2010-04-12 19:04:21 0 d-----w- c:\users\rahul\appdata\roaming\TeamViewer
2010-04-12 19:04:07 0 d-----w- c:\program files (x86)\TeamViewer
2010-04-12 19:01:15 0 d-----w- C:\wamp
2010-04-12 18:56:45 0 d-----w- c:\windows\PCHEALTH
2010-04-12 18:56:43 0 d-----w- c:\windows\system32\appmgmt
2010-04-12 18:55:40 0 d-----w- c:\program files\Microsoft Office
2010-04-12 18:54:59 0 d-----w- c:\programdata\Microsoft Help
2010-04-12 18:52:11 0 d-----w- c:\program files (x86)\uTorrent
2010-04-12 18:51:57 0 d-----w- c:\users\rahul\appdata\roaming\uTorrent
2010-04-12 18:48:26 0 d-----w- c:\programdata\Adobe
2010-04-12 18:46:03 183296 ----a-w- c:\windows\syswow64\ACEngSvr.exe
2010-04-12 18:45:25 60416 ----a-w- c:\windows\system32\drivers\itecir.sys
2010-04-12 18:45:25 0 d-----w- c:\program files (x86)\ITE
2010-04-12 18:45:09 0 d-----w- c:\programdata\P4G
2010-04-12 18:45:09 0 d-----w- c:\program files\P4G
2010-04-12 18:44:05 97792 ----a-w- c:\windows\system32\RTNUninst64.dll
2010-04-12 18:44:05 67584 ----a-w- c:\windows\system32\RtNicProp64.dll
2010-04-12 18:44:05 236544 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2010-04-12 18:43:01 15928 ----a-w- c:\windows\system32\drivers\lullaby.sys
2010-04-12 18:42:40 0 d-----w- c:\programdata\AmUStor
2010-04-12 18:42:40 0 d-----w- c:\program files (x86)\AmIcoSingLun
2010-04-12 18:41:05 0 d-----w- c:\program files (x86)\ASUS
2010-04-12 18:40:48 0 d-----w- c:\program files\ATKGFNEX
2010-04-12 18:39:36 0 d-----w- c:\windows\syswow64\AGEIA
2010-04-12 18:39:24 88064 ----a-w- c:\windows\system32\CmdRtr64.DLL
2010-04-12 18:39:24 72704 ----a-w- c:\windows\syswow64\CmdRtr.DLL
2010-04-12 18:39:24 188416 ----a-w- c:\windows\system32\APOMgr64.DLL
2010-04-12 18:39:24 159 ---ha-r- c:\windows\ctfile.rfc
2010-04-12 18:39:24 146432 ----a-w- c:\windows\syswow64\APOMngr.DLL
2010-04-12 18:39:15 0 d-----w- c:\program files (x86)\common files\Wise Installation Wizard
2010-04-12 18:39:07 0 d-----w- c:\windows\syswow64\RTCOM
2010-04-12 18:39:07 0 d-----w- c:\program files\Realtek
2010-04-12 18:38:53 0 d-----w- c:\program files (x86)\Realtek
2010-04-12 18:38:47 0 d--h--w- c:\program files (x86)\Temp
2010-04-12 18:35:13 542312 ----a-w- c:\windows\system32\nvuninst.exe
2010-04-12 18:27:19 57752 ----a-w- c:\windows\syswow64\rpcnet.dll
2010-04-12 18:26:47 13160 ----a-w- c:\windows\syswow64\Upgrd.exe
2010-04-12 18:18:06 0 d-sh--w- c:\windows\Installer
2010-04-12 18:14:24 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01009.Wdf
2010-04-12 18:14:21 0 d-----w- c:\program files\Synaptics
2010-04-12 18:09:33 0 d-sh--w- C:\Recovery

==================== Find3M ====================

2010-04-01 11:53:54 348160 ----a-w- c:\windows\syswow64\msvcr71.dll
2010-04-01 11:53:52 499712 ----a-w- c:\windows\syswow64\msvcp71.dll
2010-03-22 18:38:00 3600384 ----a-w- c:\windows\syswow64\GPhotos.scr
2010-02-12 06:31:24 95520 ----a-w- c:\windows\system32\dnssd.dll
2010-02-12 06:31:24 69408 ----a-w- c:\windows\system32\jdns_sd.dll
2010-02-12 06:31:24 237856 ----a-w- c:\windows\system32\dnssdX.dll
2010-02-12 06:31:24 119584 ----a-w- c:\windows\system32\dns-sd.exe
2010-02-12 06:16:14 91424 ----a-w- c:\windows\syswow64\dnssd.dll
2010-02-12 06:16:14 75040 ----a-w- c:\windows\syswow64\jdns_sd.dll
2010-02-12 06:16:14 197920 ----a-w- c:\windows\syswow64\dnssdX.dll
2010-02-12 06:16:14 107808 ----a-w- c:\windows\syswow64\dns-sd.exe
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:54:24 174 --sha-w- c:\program files\desktop.ini
2009-07-14 04:54:24 174 --sha-w- c:\program files (x86)\desktop.ini
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-04-08 05:01:56 106496 ----a-w- c:\program files (x86)\common files\CPInstallAction.dll
2008-08-11 16:15:20 155648 ----a-w- c:\program files (x86)\common files\MSIactionall.dll
2008-05-22 03:05:54 51962 ----a-w- c:\program files (x86)\common files\banner.jpg
2007-06-12 04:04:50 35822 ----a-w- c:\program files (x86)\common files\ASPG_icon.ico
2009-06-10 20:44:08 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-07-14 01:39:53 398848 --sha-w- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 2:08:17.39 ===============

 

Attach.txt

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 4/12/2010 11:40:17 PM
System Uptime: 5/8/2010 1:57:49 AM (1 hours ago)

Motherboard: ASUSTeK Computer Inc. | | G50VT
Processor: Intel(R) Core(TM)2 Duo CPU P7450 @ 2.13GHz | Socket 478 | 2133/267mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 160 GiB total, 93.631 GiB free.
D: is FIXED (NTFS) - 118 GiB total, 9.001 GiB free.
E: is FIXED (NTFS) - 21 GiB total, 4.74 GiB free.
F: is CDROM ()
G: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID:
Description: Base System Device
Device ID: PCI\VEN_1180&DEV_0592&SUBSYS_19A71043&REV_12\4&3574AEE4&0&0BF0
Manufacturer:
Name: Base System Device
PNP Device ID: PCI\VEN_1180&DEV_0592&SUBSYS_19A71043&REV_12\4&3574AEE4&0&0BF0
Service:

Class GUID:
Description: Base System Device
Device ID: PCI\VEN_1180&DEV_0843&SUBSYS_19A71043&REV_12\4&3574AEE4&0&0AF0
Manufacturer:
Name: Base System Device
PNP Device ID: PCI\VEN_1180&DEV_0843&SUBSYS_19A71043&REV_12\4&3574AEE4&0&0AF0
Service:

Class GUID:
Description: Base System Device
Device ID: PCI\VEN_1180&DEV_0852&SUBSYS_19A71043&REV_12\4&3574AEE4&0&0CF0
Manufacturer:
Name: Base System Device
PNP Device ID: PCI\VEN_1180&DEV_0852&SUBSYS_19A71043&REV_12\4&3574AEE4&0&0CF0
Service:

Class GUID:
Description:
Device ID: ACPI\ITE8708\4&1F005F5F&0
Manufacturer:
Name:
PNP Device ID: ACPI\ITE8708\4&1F005F5F&0
Service:

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

µTorrent
Adobe AIR
Adobe Anchor Service CS4
Adobe Bridge CS4
Adobe CMaps CS4
Adobe Color - Photoshop Specific CS4
Adobe Color EU Extra Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Recommended Settings CS4
Adobe Color Video Profiles CS CS4
Adobe CSI CS4
Adobe Default Language CS4
Adobe Device Central CS4
Adobe Drive CS4
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Fonts All
Adobe Linguistics CS4
Adobe Media Player
Adobe Output Module
Adobe PDF Library Files CS4
Adobe Photoshop CS4
Adobe Photoshop CS4 Support
Adobe Reader 9.3.2
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe Shockwave Player 11.5
Adobe Type Support CS4
Adobe Update Manager CS4
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
AdobeColorCommonSetRGB
Alcor Micro USB Card Reader
Apple Application Support
Apple Software Update
ASUS CopyProtect
ASUS LifeFrame3
ASUS Live Update
ASUS MultiFrame
ASUS SmartLogon
ASUS Splendid Video Enhancement Technology
ASUS Virtual Camera
ATK Generic Function Service
ATK Hotkey
ATK Media
ATKOSD2
CCleaner
Connect
Digsby
Direct Console 2.0
e - v1.0.39
Evernote
FIFA 10
FileZilla Client 3.3.0.1
Google Chrome
Google Talk Plugin
K-Lite Codec Pack 5.8.3 (Full)
kuler
MagicDisc 2.7.106
Malwarebytes' Anti-Malware
Mendeley Desktop 0.9.6.2
Merriam-Webster
Merriam-Webster 3.0
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Mozilla Firefox (3.6.3)
MTX
Norton Internet Security
Notepad++
NVIDIA PhysX
PDF Settings CS4
Photoshop Camera Raw
Picasa 3
QuickTime
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
RemoveIT Pro v4 - SE
Sins of a Solar Empire Trinity
Skype™ 4.2
Suite Shared Configuration CS4
TeamViewer 5
Titanium Developer
TmUnitedForever
VLC media player 1.0.5
WampServer 2.0
WinFlash
WinRAR archiver

==== Event Viewer Messages From Past Week ========

5/7/2010 5:30:03 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: SRTSP
5/7/2010 5:30:00 AM, Error: Service Control Manager [7000] - The Remote Procedure Call (RPC) Net service failed to start due to the following error: The system cannot find the file specified.
5/7/2010 5:29:42 AM, Error: SRTSP [5] - Error loading Symantec real time Anti-Virus driver.
5/7/2010 5:29:42 AM, Error: SRTSP [4] - Error loading virus definitions.
5/7/2010 5:23:56 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
5/7/2010 5:22:08 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
5/7/2010 5:22:08 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments " " in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
5/7/2010 5:22:08 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments " " in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
5/7/2010 5:22:08 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments " " in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
5/7/2010 5:22:07 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
5/7/2010 5:22:02 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments " " in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
5/7/2010 5:19:48 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD BHDrvx64 ccHP CSC DfsC discache eeCtrl IDSVia64 NetBIOS NetBT nsiproxy Psched rdbss spldr SRTSP SRTSPX SymIRON SYMTDIv tdx Wanarpv6 WfpLwf
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2010 5:19:47 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
5/7/2010 4:33:22 AM, Error: Service Control Manager [7034] - The Remote Procedure Call (RPC) Net service terminated unexpectedly. It has done this 1 time(s).
5/7/2010 10:41:10 AM, Error: Microsoft-Windows-DistributedCOM [10001] - Unable to start a DCOM Server: {F87B28F1-DA9A-4F35-8EC0-800EFCF26B83} as /. The error: "5" Happened while starting this command: C:\Windows\System32\slui.exe -Embedding
5/6/2010 2:32:22 AM, Error: Service Control Manager [7023] - The SPP Notification Service service terminated with the following error: Access is denied.
5/4/2010 11:13:40 PM, Error: Service Control Manager [7034] - The ATKGFNEX Service service terminated unexpectedly. It has done this 1 time(s).
5/4/2010 10:13:20 PM, Error: Service Control Manager [7034] - The ASLDR Service service terminated unexpectedly. It has done this 1 time(s).
5/3/2010 7:57:14 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Partizan SAVRKBootTasks
5/3/2010 7:50:18 AM, Error: Service Control Manager [7000] - The MEMSWEEP2 service failed to start due to the following error: This driver has been blocked from loading
5/3/2010 7:50:18 AM, Error: Application Popup [1060] - \??\C:\Windows\system32\FD0.tmp has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
5/3/2010 6:53:50 AM, Error: Application Popup [1060] - \??\C:\Windows\system32\8B35.tmp has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

==== End Of File ===========================