1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive Auntie's Machine Running Slowly

Discussion in 'Malware and Virus Removal Archive' started by Blue Star, 2010/05/07.

Thread Status:
Not open for further replies.
  1. 2010/05/07
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    454
    Likes Received:
    2
    [Inactive] Auntie's Machine Running Slowly

    DDS (Ver_10-03-17.01) - NTFSx86
    Run by Owner at 18:57:07.82 on Fri 05/07/2010
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_19

    ============== Running Processes ===============

    C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Motive\McciCMService.exe
    C:\Program Files\Softex\OmniPass\Omniserv.exe
    C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    C:\Program Files\Softex\OmniPass\OPXPApp.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
    C:\WINDOWS\System32\igfxtray.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Owner\Desktop\dds.scr
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\System32\svchost.exe -k NetworkService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    C:\WINDOWS\System32\svchost.exe -k LocalService
    C:\WINDOWS\system32\svchost.exe -k hpdevmgmt

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.yahoo.com/?fr=fp-yie8
    uDefault_Search_URL = hxxp://srch-qus8.hpwis.com/
    mSearch Bar = hxxp://srch-qus8.hpwis.com/
    uInternet Settings,ProxyOverride = localhost
    uSearchAssistant =
    BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
    BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\smart web printing\hpswp_printenhancer.dll
    BHO: HP Print Clips: {053f9267-dc04-4294-a72c-58f732d338c0} - c:\program files\hp\smart web printing\hpswp_framework.dll
    BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 5.0\reader\activex\AcroIEHelper.ocx
    BHO: {243b17de-77c7-46bf-b94b-0b5f309a0e64} - c:\program files\microsoft money\system\mnyside.dll
    BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
    TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
    TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
    TB: {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
    EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
    uRun: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
    mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
    mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui
    mRun: [AlcxMonitor] ALCXMNTR.EXE
    mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {58ECB495-38F0-49cb-A538-10282ABF65E7} - {E763472E-A716-4CD9-89BD-DBDA6122F741} - c:\program files\hp\smart web printing\hpswp_extensions.dll
    IE: {700259D7-1666-479a-93B1-3250410481E8} - {A93C41D8-01F8-4F8B-B14C-DE20B117E636} - c:\program files\hp\smart web printing\hpswp_extensions.dll
    IE: {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - {DD6687B5-CB43-4211-BFC9-2942CCBDCB3E} - c:\program files\microsoft money\system\mnyside.dll
    Trusted Zone: securesite.com
    DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
    DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
    DPF: {321FB770-1FBE-4BFE-BDC1-6F622D4FA499} - hxxps://setup.bellsouth.net/wizlet/PWReset/static/controls/WebflowActiveXInstaller_6-1-2.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1272037067906
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1272037382218
    DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
    Notify: igfxcui - igfxsrvc.dll
    Notify: OPXPGina - c:\program files\softex\omnipass\opxpgina.dll
    mASetup: {A509B1FF-37FF-4bFF-8CFF-4F3A747040FF} - c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,launchinfsectionex c:\program files\internet explorer\clrtour.inf,DefaultInstall.ResetTour,,12

    ============= SERVICES / DRIVERS ===============

    R? mrtRate;mrtRate
    R? PCDRDRV;Pcdr Helper Driver
    S? aswSP;aswSP
    S? avast! Antivirus;avast! Antivirus
    S? avast! Mail Scanner;avast! Mail Scanner
    S? avast! Web Scanner;avast! Web Scanner

    =============== Created Last 30 ================

    2010-05-05 16:04:36 0 d-----w- c:\windows\system32\CatRoot_bak
    2010-05-05 15:58:45 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
    2010-05-05 15:55:12 470528 -c----w- c:\windows\system32\dllcache\aclayers.dll
    2010-05-05 15:52:24 283648 -c----w- c:\windows\system32\dllcache\pdh.dll
    2010-05-05 15:52:22 60416 -c----w- c:\windows\system32\dllcache\colbact.dll
    2010-05-05 15:52:20 399360 -c----w- c:\windows\system32\dllcache\rpcss.dll
    2010-05-05 15:52:19 473088 -c----w- c:\windows\system32\dllcache\fastprox.dll
    2010-05-05 15:52:19 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
    2010-05-05 15:52:19 110592 -c----w- c:\windows\system32\dllcache\services.exe
    2010-05-05 15:52:18 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
    2010-05-05 15:52:17 616960 -c----w- c:\windows\system32\dllcache\advapi32.dll
    2010-05-05 15:52:16 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
    2010-05-05 15:51:50 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
    2010-05-05 15:50:23 3555328 -c----w- c:\windows\system32\dllcache\moviemk.exe
    2010-05-05 15:44:18 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
    2010-05-05 15:44:03 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
    2010-05-05 15:42:57 683520 -c----w- c:\windows\system32\dllcache\inetcomm.dll
    2010-05-05 15:37:07 215552 -c----w- c:\windows\system32\dllcache\wordpad.exe
    2010-05-05 15:37:07 1196000 -c----w- c:\windows\system32\dllcache\sysmain.sdb
    2010-05-05 02:16:18 98816 ----a-w- c:\windows\sed.exe
    2010-05-05 02:16:18 77312 ----a-w- c:\windows\MBR.exe
    2010-05-05 02:16:18 256512 ----a-w- c:\windows\PEV.exe
    2010-05-05 02:16:18 161792 ----a-w- c:\windows\SWREG.exe
    2010-05-05 01:13:08 0 d-sh--w- c:\documents and settings\owner\PrivacIE
    2010-05-05 01:10:28 0 d-sh--w- c:\documents and settings\owner\IETldCache
    2010-05-04 21:37:44 0 d-----w- c:\windows\ie8updates
    2010-05-04 21:29:24 0 dc-h--w- c:\windows\ie8
    2010-05-04 21:28:23 0 d--h--w- c:\windows\msdownld.tmp
    2010-05-04 21:25:10 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
    2010-05-04 21:25:09 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
    2010-05-04 21:23:54 64000 -c----w- c:\windows\system32\dllcache\iecompat.dll
    2010-04-26 15:10:06 0 d-----w- c:\program files\SiteRanker
    2010-04-26 15:09:33 0 d-----w- c:\program files\Crawler
    2010-04-26 14:46:33 159744 ----a-w- c:\windows\system32\igfxres.dll
    2010-04-25 16:35:09 60288 ----a-w- c:\windows\system32\drivers\drmk.sys
    2010-04-25 16:35:05 145792 ----a-w- c:\windows\system32\drivers\portcls.sys
    2010-04-24 12:13:50 274288 ----a-w- c:\windows\system32\mucltui.dll
    2010-04-24 12:13:50 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
    2010-04-23 16:38:18 7208 ------w- c:\windows\system32\secupd.sig
    2010-04-23 16:38:18 4569 ------w- c:\windows\system32\secupd.dat
    2010-04-23 16:38:16 139264 ----a-w- c:\windows\system32\netid.dll
    2010-04-23 16:37:16 57667 ----a-w- c:\windows\system32\ieuinit.inf
    2010-04-23 16:36:56 19528 ----a-w- c:\windows\002357_.tmp
    2010-04-23 16:09:58 1082368 ----a-w- c:\windows\system32\esent.dll
    2010-04-23 15:43:19 18944 ----a-w- c:\windows\system32\qmgrprxy.dll
    2010-04-23 15:43:18 351232 ------w- c:\windows\system32\winhttp.dll
    2010-04-22 16:24:05 0 d-----w- c:\program files\WOT
    2010-04-14 00:48:51 0 d-----w- c:\docume~1\alluse~1\applic~1\Alwil Software
    2010-04-12 19:37:10 0 d-----w- c:\program files\ESET
    2010-04-11 23:28:23 411368 ----a-w- c:\windows\system32\deploytk.dll

    ==================== Find3M ====================

    2010-04-01 01:48:30 137447 -c--a-w- c:\windows\HPHins15.dat
    2010-03-29 20:24:58 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-03-29 20:24:44 19160 -c--a-w- c:\windows\system32\drivers\mbam.sys
    2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll
    2010-02-25 06:24:37 916480 ----a-w- c:\windows\system32\wininet.dll
    2010-02-16 13:17:38 2137088 ------w- c:\windows\system32\ntoskrnl.exe
    2010-02-16 12:39:04 2016768 ------w- c:\windows\system32\ntkrnlpa.exe
    2010-02-12 04:47:05 100864 ----a-w- c:\windows\system32\6to4svc.dll
    2002-06-27 15:58:48 41389 -c--a-w- c:\program files\lxaxsdrv.cat
    2002-05-16 02:28:32 5740 -c--a-w- c:\program files\lxaxsdrv.ini
    2002-05-15 06:57:56 9068 -c--a-w- c:\program files\lxaxspsz.gpd
    2002-04-02 02:30:42 8494 -c--a-w- c:\program files\lxaxsdrv.inf
    2002-03-15 10:36:56 4179 -c--a-w- c:\program files\lxaxsdrv.gpd
    2008-08-05 19:23:17 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\application data\microsoft\feeds cache\index.dat
    2008-08-05 01:29:08 49152 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008080420080805\index.dat
    2008-08-05 19:22:53 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008080520080806\index.dat

    ============= FINISH: 18:59:25.70 ===============






    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Home Edition
    Boot Device: \Device\HarddiskVolume2
    Install Date: 8/8/2008 6:20:54 PM
    System Uptime: 5/7/2010 1:57:43 PM (5 hours ago)

    Motherboard: TriGem Computer Inc. | | Glendale motherboard
    Processor: Intel(R) Celeron(R) CPU 2.50GHz | WMT478/NWD | 2491/mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 70 GiB total, 52.333 GiB free.
    D: is FIXED (FAT32) - 5 GiB total, 1.302 GiB free.
    E: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP42: 4/25/2010 1:48:05 PM - Installed Windows XP KB896358.
    RP43: 4/25/2010 1:49:12 PM - Installed Windows XP KB918439.
    RP44: 4/25/2010 1:51:02 PM - Installed Windows XP KB921398.
    RP45: 4/25/2010 1:52:30 PM - Installed Windows XP KB925486.
    RP46: 4/25/2010 1:54:36 PM - Installed Windows XP KB924496.
    RP47: 4/25/2010 1:56:23 PM - Installed Windows XP KB914798.
    RP48: 4/25/2010 1:58:03 PM - Installed Windows XP KB873339.
    RP49: 4/25/2010 2:04:44 PM - Installed Windows XP KB896423.
    RP50: 4/25/2010 2:07:23 PM - Installed Windows XP KB911562.
    RP51: 4/25/2010 2:09:12 PM - Installed Windows XP KB911280.
    RP52: 4/25/2010 2:11:29 PM - Installed Windows XP KB893756.
    RP53: 4/25/2010 2:13:40 PM - Installed Windows XP KB896424.
    RP54: 4/25/2010 2:15:31 PM - Installed Windows XP KB920685.
    RP55: 4/25/2010 2:18:44 PM - Installed Windows XP KB899591.
    RP56: 4/25/2010 2:20:50 PM - Installed Windows XP KB901017.
    RP57: 4/25/2010 2:23:08 PM - Installed Windows XP KB922616.
    RP58: 4/25/2010 2:25:14 PM - Installed Windows XP KB911927.
    RP59: 4/25/2010 2:26:41 PM - Installed Windows Media Player 9 KB917734_WMP9.
    RP60: 4/25/2010 2:28:48 PM - Installed Windows XP KB921883.
    RP61: 4/25/2010 2:30:47 PM - Installed Windows XP KB923414.
    RP62: 4/25/2010 2:32:40 PM - Installed Windows XP KB885836.
    RP63: 4/25/2010 2:34:51 PM - Installed Windows XP KB885835.
    RP64: 4/25/2010 2:37:22 PM - Installed Windows XP KB922819.
    RP65: 4/25/2010 2:46:40 PM - Installed Windows XP KB924191.
    RP66: 4/25/2010 2:49:35 PM - Installed Windows XP KB899587.
    RP67: 4/26/2010 10:53:13 AM - Software Distribution Service 3.0
    RP68: 4/27/2010 11:14:49 AM - System Checkpoint
    RP69: 4/27/2010 6:00:16 PM - Removed Weblink
    RP70: 4/27/2010 6:03:09 PM - Removed Sonic Update Manager
    RP71: 4/27/2010 6:12:22 PM - Software Distribution Service 3.0
    RP72: 4/28/2010 9:02:14 PM - System Checkpoint
    RP73: 4/29/2010 4:29:07 PM - Software Distribution Service 3.0
    RP74: 4/30/2010 9:35:16 AM - Software Distribution Service 3.0
    RP75: 3/31/2010 9:59:18 PM - System Checkpoint
    RP76: 4/1/2010 3:16:38 AM - Software Distribution Service 3.0
    RP77: 4/2/2010 10:19:00 AM - Software Distribution Service 3.0
    RP78: 5/2/2010 3:59:13 PM - System Checkpoint
    RP79: 5/3/2010 4:00:28 AM - Software Distribution Service 3.0
    RP80: 5/3/2010 7:30:25 AM - Software Distribution Service 3.0
    RP81: 5/3/2010 7:42:33 AM - Software Distribution Service 3.0
    RP82: 5/3/2010 7:47:23 AM - Software Distribution Service 3.0
    RP83: 5/3/2010 9:01:18 PM - Software Distribution Service 3.0
    RP84: 5/3/2010 9:46:37 PM - Software Distribution Service 3.0
    RP85: 5/4/2010 9:54:26 AM - Software Distribution Service 3.0
    RP86: 5/4/2010 10:03:00 AM - Software Distribution Service 3.0
    RP87: 5/4/2010 10:42:37 AM - Installed Windows XP Service Pack 2.
    RP88: 5/4/2010 11:06:54 AM - Installed Windows XP KB873339.
    RP89: 5/4/2010 11:10:08 AM - Installed Windows XP KB885835.
    RP90: 5/4/2010 11:12:50 AM - Installed Windows XP KB885836.
    RP91: 5/4/2010 11:15:18 AM - Installed Windows XP KB888302.
    RP92: 5/4/2010 11:17:50 AM - Installed Windows XP KB890046.
    RP93: 5/4/2010 11:20:59 AM - Installed Windows XP KB890859.
    RP94: 5/4/2010 11:24:19 AM - Installed Windows XP KB891781.
    RP95: 5/4/2010 11:26:50 AM - Installed Windows XP KB893756.
    RP96: 5/4/2010 11:29:14 AM - Installed Windows XP KB896358.
    RP97: 5/4/2010 11:31:44 AM - Installed Windows XP KB896423.
    RP98: 5/4/2010 11:34:50 AM - Installed Windows XP KB896424.
    RP99: 5/4/2010 11:37:35 AM - Installed Windows XP KB896428.
    RP100: 5/4/2010 11:40:20 AM - Installed Windows XP KB899587.
    RP101: 5/4/2010 11:43:05 AM - Installed Windows XP KB899591.
    RP102: 5/4/2010 11:46:16 AM - Installed Windows XP KB900725.
    RP103: 5/4/2010 11:49:01 AM - Installed Windows XP KB901017.
    RP104: 5/4/2010 11:51:32 AM - Installed Windows XP KB901190.
    RP105: 5/4/2010 11:54:05 AM - Installed Windows XP KB901214.
    RP106: 5/4/2010 11:56:48 AM - Installed Windows XP KB902400.
    RP107: 5/4/2010 11:59:43 AM - Installed Windows XP KB905414.
    RP108: 5/4/2010 12:02:38 PM - Installed Windows XP KB905749.
    RP109: 5/4/2010 12:05:27 PM - Installed Windows XP KB908519.
    RP110: 5/4/2010 12:08:03 PM - Installed Windows XP KB908531.
    RP111: 5/4/2010 12:10:59 PM - Installed Windows XP KB910437.
    RP112: 5/4/2010 12:13:34 PM - Installed Windows XP KB911280.
    RP113: 5/4/2010 12:16:09 PM - Installed Windows XP KB911562.
    RP114: 5/4/2010 12:18:46 PM - Installed Windows XP KB911927.
    RP115: 5/4/2010 12:21:32 PM - Installed Windows XP KB912919.
    RP116: 5/4/2010 12:24:11 PM - Installed Windows XP KB913580.
    RP117: 5/4/2010 12:26:49 PM - Installed Windows XP KB914388.
    RP118: 5/4/2010 12:29:43 PM - Installed Windows XP KB914389.
    RP119: 5/4/2010 12:32:28 PM - Installed Windows XP KB917344.
    RP120: 5/4/2010 12:34:58 PM - Installed Windows XP KB917422.
    RP121: 5/4/2010 12:37:34 PM - Installed Windows XP KB917953.
    RP122: 5/4/2010 12:40:21 PM - Installed Windows XP KB919007.
    RP123: 5/4/2010 12:44:19 PM - Installed Windows XP KB920670.
    RP124: 5/4/2010 12:46:49 PM - Installed Windows XP KB920683.
    RP125: 5/4/2010 12:49:27 PM - Installed Windows XP KB920685.
    RP126: 5/4/2010 12:52:28 PM - Installed Windows XP KB921398.
    RP127: 5/4/2010 12:55:17 PM - Installed Windows XP KB921883.
    RP128: 5/4/2010 12:58:19 PM - Installed Windows XP KB922616.
    RP129: 5/4/2010 1:01:00 PM - Installed Windows XP KB922819.
    RP130: 5/4/2010 1:03:33 PM - Installed Windows XP KB923191.
    RP131: 5/4/2010 1:06:12 PM - Installed Windows XP KB923414.
    RP132: 5/4/2010 1:08:49 PM - Installed Windows XP KB924191.
    RP133: 5/4/2010 1:11:25 PM - Installed Windows XP KB924496.
    RP134: 5/4/2010 5:32:05 PM - Installed Windows Internet Explorer 8.
    RP135: 5/4/2010 5:36:07 PM - Software Distribution Service 3.0
    RP136: 5/5/2010 11:16:47 AM - Software Distribution Service 3.0
    RP137: 5/7/2010 12:51:37 PM - Software Distribution Service 3.0
    RP138: 5/7/2010 6:30:09 PM - Software Distribution Service 3.0

    ==== Installed Programs ======================


    Adobe Acrobat 5.0
    Adobe Flash Player 10 ActiveX
    ATT-PRT22
    ATT-RemoteControl
    avast! Free Antivirus
    BufferChm
    Compaq Connections
    CustomerResearchQFolder
    D1400
    D1400_Help
    DeviceDiscovery
    DeviceManagementQFolder
    dj_sf_ProductContext
    dj_sf_software
    dj_sf_software_req
    ErrorFix
    ESET Online Scanner v3
    eSupportQFolder
    HijackThis 2.0.2
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB979306)
    HP Customer Participation Program 9.0
    HP Deskjet Printer Driver Software 9.0
    HP Deskjet printer preloaded drivers
    HP Imaging Device Functions 9.0
    HP Photosmart Essential 2.01
    HP Photosmart Essential2.01
    HP Product Assistant
    HP Smart Web Printing
    HP Solution Center 9.0
    HP Update
    HPProductAssistant
    HpSdpAppCoreApp
    HPSSupply
    Instant Support
    Intel(R) Extreme Graphics Driver
    IntelliMover Data Transfer Demo
    InterVideo WinDVD Player
    Java Auto Updater
    Java(TM) 6 Update 19
    LiveReg (Symantec Corporation)
    LiveUpdate 1.80 (Symantec Corporation)
    Malwarebytes' Anti-Malware
    MarketResearch
    Microsoft .NET Framework (English) v1.0.3705
    Microsoft Money 2003
    Microsoft Money 2003 System Pack
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Works 7.0
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    NVIDIA Windows 2000/XP Display Drivers
    OmniPass
    PanoStandAlone
    PC-Doctor for Windows
    PSSWCORE
    Python 2.2 combined Win32 extensions
    Quicken 2003 New User Edition
    RealOne Player
    RecordNow
    S3Display
    S3Gamma2
    S3Info2
    S3Overlay
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB979402)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 9 (KB917734)
    Security Update for Windows XP (KB890046)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896424)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB901190)
    Security Update for Windows XP (KB901214)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB912919)
    Security Update for Windows XP (KB913580)
    Security Update for Windows XP (KB914388)
    Security Update for Windows XP (KB914389)
    Security Update for Windows XP (KB917344)
    Security Update for Windows XP (KB917422)
    Security Update for Windows XP (KB917953)
    Security Update for Windows XP (KB919007)
    Security Update for Windows XP (KB920670)
    Security Update for Windows XP (KB920683)
    Security Update for Windows XP (KB920685)
    Security Update for Windows XP (KB921398)
    Security Update for Windows XP (KB921883)
    Security Update for Windows XP (KB922616)
    Security Update for Windows XP (KB922819)
    Security Update for Windows XP (KB923191)
    Security Update for Windows XP (KB923414)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB924191)
    Security Update for Windows XP (KB924496)
    Security Update for Windows XP (KB926247)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB958470)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB980232)
    Simple Installer - Multilanguage Version
    Singlesnet
    SolutionCenter
    Status
    Toolbox
    TrayApp
    UnloadSupport
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows Internet Explorer 8 (KB980302)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB908531)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB911280)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    VideoToolkit01
    Viewpoint Media Player
    WebFldrs XP
    WebReg
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Installer 3.1 (KB893803)
    Windows Internet Explorer 8
    Windows XP Hotfix - KB873339
    Windows XP Hotfix - KB885835
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890859
    Windows XP Hotfix - KB891781
    Windows XP Service Pack 2
    WOT for Internet Explorer
    Yahoo! Software Update
    Yahoo! Toolbar

    ==== Event Viewer Messages From Past Week ========

    5/4/2010 9:52:23 AM, error: Service Control Manager [7000] - The wscsvc service failed to start due to the following error: The executable program that this service is configured to run in does not implement the service.
    5/4/2010 9:09:55 PM, error: Service Control Manager [7000] - The mrtRate service failed to start due to the following error: The system cannot find the file specified.
    5/4/2010 8:42:05 PM, error: Srv [2019] - The server was unable to allocate from the system nonpaged pool because the pool was empty.
    5/4/2010 10:18:22 PM, error: Service Control Manager [7034] - The Softex OmniPass Service service terminated unexpectedly. It has done this 1 time(s).
    5/4/2010 10:00:21 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Microsoft .NET Framework 1.0 Service Pack 3, English Version.

    ==== End Of File ===========================
     
    Blue Star,
    #1
  2. 2010/05/07
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Print these instructions out.

    NOTE. If any of the programs listed below refuse to run, try renaming executive file to something else; for instance, rename hijackthis.exe to scanner.exe

    ***VERY IMPORTANT! Make sure, you update Malwarebytes before running the scans.***


    STEP 1. Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your desktop.
    (Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform Quick Scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

    The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

    RESTART COMPUTER!

    STEP 2. Download GMER: http://www.gmer.net/files.php, by clicking on Download EXE button.
    Alternative downloads:
    - http://majorgeeks.com/GMER_d5198.html
    - http://www.softpedia.com/get/Interne...ers/GMER.shtml
    Double click on downloaded .exe file, select Rootkit tab and click the Scan button.
    Do NOT use the computer while GMER is running!
    When scan is completed, click Save button, and save the results as gmer.log
    Warning ! Please, do not select the "Show all" checkbox during the scan.
    Post the log to your next reply.

    IMPORTANT! If for some reason GMER refuses to run, try again.
    If it still fails, try to UN-check "Devices" in right pane.
    If still no joy, try to run it from Safe Mode.

    RESTART COMPUTER

    STEP 3. Download HijackThis:
    http://free.antivirus.com/hijackthis/
    by clicking on Installer under Version 2.0.4
    Install, and run it.
    Post HijackThis log.
    NOTE. If you're using Vista, or 7, right click on HijackThis, and click Run as Administrator
    Do NOT attempt to "fix" anything!


    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #2


  3. to hide this advert.

  4. 2010/05/08
    Blue Star

    Blue Star Well-Known Member Thread Starter

    Joined:
    2010/03/25
    Messages:
    454
    Likes Received:
    2
    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org

    Database version: 4052

    Windows 5.1.2600 Service Pack 2
    Internet Explorer 8.0.6001.18702

    5/8/2010 3:12:50 PM
    mbam-log-2010-05-08 (15-12-50).txt

    Scan type: Quick scan
    Objects scanned: 126515
    Time elapsed: 32 minute(s), 44 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)


    doing gmer now....
     
    Blue Star,
    #3
  5. 2010/05/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Still waiting....:)
     
    broni,
    #4
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...