Solved Very Slow Start from Stand-By

[Resolved] Very Slow Start from Stand-By

I updated Mozilla. Note very long (5 minute) time before window comes up and hard drive is grinding.

When Mozilla comes up and the HD stops grinding, things settle down and I can do my thing. Happens daily now.

Checked processes and svchost seems to be running wild. I did two scans, MS and Malwarebytes and no indication of malware or virus.

Also, I had switched to MS antivirus programs, and when it is updated things slow also, but I do not believe this program is problem, but what do I know?

BTW. We did a malware removal action about two months ago, and I have not been anywhere noted as risky since, save accidentally clicking on red warning locations but moving off at warning...sites were for used bike shock forks and so on, if that helps.

See no reason I should have reacquired malware etc.


I ran DDS as soon as I could and they are below.


DDS (Ver_10-03-17.01) - NTFSx86
Run by Owner at 5:20:24.10 on Sat 08/28/2010
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.213 [GMT -5:00]

AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE
C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\apdproxy.exe
C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe
C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\EmailsAgent\EmailsAgent\EmailsAgent.exe
C:\Program Files\BBNikon\NkvMon.exe
svchost.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\PhotoshopElementsFileAgent.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\PhotoDownloader.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\My Documents\Downloads\dds(3).scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.yahoo.com/
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {4982D40A-C53B-4615-B15B-B5B5E98D167C} - No File
uRun: [OM2_Monitor] "c:\program files\olympus\olympus master 2\MMonitor.exe "
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [ccleaner] "c:\program files\ccleaner\CCleaner.exe" /AUTO
uRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\NPSWF32_FlashUtil.exe -p
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [SunKistEM] c:\program files\digital media reader\shwiconem.exe
mRun: [CHotkey] zHotkey.exe
mRun: [HostManager] c:\program files\common files\aol\1123365865\ee\AOLHostManager.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe "
mRun: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
mRun: [Mixersel] c:\program files\realtek\installshield\mixersel.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop elements 5.0\microtekall\apdproxy.exe "
mRun: [Microtek_Scanner_Server] c:\program files\microtek\scanwizard pro\LANServer.exe
mRun: [OM2_Monitor] "c:\program files\olympus\olympus master 2\FirstStart.exe" /OM
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe "
mRun: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide -runkey
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\emails~1.lnk - c:\program files\emailsagent\emailsagent\EmailsAgent.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\nkvmon~1.lnk - c:\program files\bbnikon\NkvMon.exe
IE: &AOL Toolbar search - c:\program files\aol toolbar\toolbar.dll/SEARCH.HTML
IE: &Google Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IE: &Translate English Word - c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate Page into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Notify: igfxcui - igfxsrvc.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\owner\applic~1\mozilla\firefox\profiles\c39nhkkw.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/firefox/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - plugin: c:\documents and settings\owner\application data\move networks\plugins\npqmp071705000014.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\all.js - pref( "ui.use_native_colors ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "ui.use_native_popup_windows ", false);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.enable_click_image_resizing ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "accessibility.browsewithcaret_shortcut.enabled ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "javascript.options.mem.high_water_mark ", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref( "javascript.options.mem.gc_frequency ", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.lu ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.nu ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.nz ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgbaam7a8h ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgberp4a5d4ar ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--p1ai ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgbayh7gpa ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.tel ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.proxy.type ", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.buffer.cache.count ", 24);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.buffer.cache.size ", 4096);
c:\program files\mozilla firefox\greprefs\all.js - pref( "dom.ipc.plugins.timeoutSecs ", 45);
c:\program files\mozilla firefox\greprefs\all.js - pref( "svg.smil.enabled ", false);
c:\program files\mozilla firefox\greprefs\all.js - pref( "ui.trackpoint_hack.enabled ", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.debug ", false);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.agedWeight ", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.bucketSize ", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.maxTimeGroupings ", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.timeGroupingSize ", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.boundaryWeight ", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.formfill.prefixWeight ", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref( "accelerometer.enabled ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "html5.enable ", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref ", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.renego_unrestricted_hosts ", " ");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.treat_unsafe_negotiation_as_broken ", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl.require_safe_negotiation ", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl3.rsa_seed_sha ", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref( "app.update.download.backgroundInterval ", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref( "app.update.url.manual ", "http://www.firefox.com ");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref( "browser.search.param.yahoo-fr-ja ", "mozff ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ", "chrome://browser/locale/browser.properties ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ", "chrome://browser/locale/browser.properties ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add ", "addons.mozilla.org ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add.36 ", "getpersonas.com ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "lightweightThemes.update.enabled ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.allTabs.previews ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "plugins.hide_infobar_for_outdated_plugin ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "toolbar.customization.usesheet ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "dom.ipc.plugins.enabled.nptest.dll ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "dom.ipc.plugins.enabled.npswf32.dll ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "dom.ipc.plugins.enabled.npctrl.dll ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "dom.ipc.plugins.enabled.npqtplugin.dll ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "dom.ipc.plugins.enabled ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.taskbar.previews.enable ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.taskbar.previews.max ", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.taskbar.previews.cachetime ", 20);

============= SERVICES / DRIVERS ===============

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2010-4-18 28552]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-3-25 151216]

=============== Created Last 30 ================

2010-08-15 11:23:52 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-08-15 11:04:51 0 d-----w- c:\program files\Microsoft Security Essentials

==================== Find3M ====================

2010-06-30 12:31:35 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-24 12:15:28 832512 ----a-w- c:\windows\system32\wininet.dll
2010-06-24 12:15:26 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-24 12:15:26 17408 ------w- c:\windows\system32\corpol.dll
2010-06-23 13:44:04 1851904 ----a-w- c:\windows\system32\win32k.sys
2010-06-17 14:03:00 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-06-14 07:41:45 1172480 ----a-w- c:\windows\system32\msxml3.dll
2009-04-02 16:46:49 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009040220090403\index.dat

============= FINISH: 5:21:16.90 ===============



UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 2/19/2006 7:11:01 AM
System Uptime: 8/26/2010 10:46:40 AM (43 hours ago)

Motherboard: Intel Corporation | | D915GAG
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | | 3000/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 182 GiB total, 151.88 GiB free.
D: is FIXED (FAT32) - 5 GiB total, 2.406 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP16: 5/31/2010 6:43:13 AM - System Checkpoint
RP17: 6/2/2010 8:14:03 AM - System Checkpoint
RP18: 6/3/2010 11:30:08 AM - System Checkpoint
RP19: 6/5/2010 7:00:18 AM - Software Distribution Service 3.0
RP20: 6/6/2010 10:49:18 AM - System Checkpoint
RP21: 6/7/2010 2:01:39 PM - System Checkpoint
RP22: 6/8/2010 3:44:39 PM - System Checkpoint
RP23: 6/10/2010 7:28:47 AM - System Checkpoint
RP24: 6/11/2010 7:31:46 AM - System Checkpoint
RP25: 6/12/2010 7:54:45 AM - Software Distribution Service 3.0
RP26: 6/15/2010 2:50:46 AM - System Checkpoint
RP27: 6/16/2010 8:20:31 AM - System Checkpoint
RP28: 6/17/2010 9:14:42 AM - System Checkpoint
RP29: 6/22/2010 2:37:48 PM - System Checkpoint
RP30: 6/24/2010 7:04:25 AM - System Checkpoint
RP31: 6/25/2010 8:02:00 AM - System Checkpoint
RP32: 6/26/2010 8:16:40 AM - System Checkpoint
RP33: 6/27/2010 8:37:09 AM - System Checkpoint
RP34: 6/28/2010 8:55:57 AM - System Checkpoint
RP35: 6/29/2010 3:54:23 PM - System Checkpoint
RP36: 7/1/2010 8:56:07 AM - System Checkpoint
RP37: 7/2/2010 9:10:26 AM - System Checkpoint
RP38: 7/3/2010 11:43:37 AM - System Checkpoint
RP39: 7/8/2010 7:09:00 AM - System Checkpoint
RP40: 7/9/2010 11:41:12 AM - System Checkpoint
RP41: 7/13/2010 8:53:30 AM - System Checkpoint
RP42: 7/14/2010 9:35:31 AM - Software Distribution Service 3.0
RP43: 7/16/2010 6:15:12 AM - System Checkpoint
RP44: 7/18/2010 3:55:19 PM - System Checkpoint
RP45: 7/20/2010 2:48:18 PM - System Checkpoint
RP46: 7/22/2010 6:39:59 AM - System Checkpoint
RP47: 7/26/2010 6:03:05 AM - System Checkpoint
RP48: 7/27/2010 7:20:54 AM - System Checkpoint
RP49: 7/28/2010 7:23:00 AM - System Checkpoint
RP50: 7/29/2010 8:28:57 AM - System Checkpoint
RP51: 7/30/2010 8:32:04 AM - System Checkpoint
RP52: 7/31/2010 8:42:52 AM - System Checkpoint
RP53: 8/2/2010 6:57:35 AM - System Checkpoint
RP54: 8/3/2010 2:07:47 PM - System Checkpoint
RP55: 8/5/2010 8:19:27 AM - System Checkpoint
RP56: 8/6/2010 9:40:15 AM - System Checkpoint
RP57: 8/7/2010 4:45:39 AM - Software Distribution Service 3.0
RP58: 8/8/2010 6:25:14 AM - System Checkpoint
RP59: 8/9/2010 7:05:33 AM - System Checkpoint
RP60: 8/10/2010 9:26:59 AM - System Checkpoint
RP61: 8/11/2010 11:19:13 AM - System Checkpoint
RP62: 8/12/2010 1:33:19 PM - Software Distribution Service 3.0
RP63: 8/13/2010 7:12:16 PM - System Checkpoint
RP64: 8/15/2010 5:09:13 AM - System Checkpoint
RP65: 8/15/2010 6:23:50 AM - Software Distribution Service 3.0
RP66: 8/16/2010 7:13:21 AM - Software Distribution Service 3.0
RP67: 8/17/2010 9:58:01 AM - Software Distribution Service 3.0
RP68: 8/18/2010 10:49:59 AM - Software Distribution Service 3.0
RP69: 8/19/2010 11:35:42 AM - Software Distribution Service 3.0
RP70: 8/21/2010 2:28:17 AM - Software Distribution Service 3.0
RP71: 8/22/2010 4:01:31 AM - Software Distribution Service 3.0
RP72: 8/23/2010 6:39:34 AM - Software Distribution Service 3.0
RP73: 8/24/2010 8:21:48 AM - System Checkpoint
RP74: 8/24/2010 10:31:41 AM - Software Distribution Service 3.0
RP75: 8/26/2010 5:23:53 AM - Software Distribution Service 3.0
RP76: 8/27/2010 7:26:06 AM - Software Distribution Service 3.0

==== Installed Programs ======================

Adobe Acrobat 4.0
Adobe Flash Player 10 Plugin
Adobe Help Center 2.1
Adobe Photoshop 6.0
Adobe Photoshop Elements 2.0
Adobe Photoshop Elements 5.0
Adobe Reader 7.1.0
Adobe SVG Viewer 3.0
ArcSoft Software Suite
Auto Dust Brush Plug-in
BigFix
CCleaner
Color Matching System
Digital Media Reader
DiMAGE Scan Dual4 ver.1.0
Google Toolbar for Internet Explorer
High Definition Audio Driver Package - KB835221
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PRO Network Adapters and Drivers
InterVideo MediaOne Gallery
iTunes
Java Auto Updater
Java(TM) 6 Update 20
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Digital Image Library 9 - Blocker
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2005
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft Office Standard Edition 2003
Microsoft Picture It! Library 10
Microsoft Picture It! Premium 10
Microsoft Security Essentials
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft XML Parser
Microtek Scanner ICC Profiler
Move Media Player
Mozilla Firefox (3.6.8)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Multimedia Keyboard Driver
Napster Burn Engine
Nero BurnRights
Nero OEM
NetObjects Fusion 7.5
Nikon View 5
OLYMPUS Master 2
Panda ActiveScan 2.0
PowerDVD
Rand McNally TripMaker 2000
RealPlayer Basic
Realtek High Definition Audio Driver
Recovery Software Suite Gateway
ScanWizard Pro
Security Update for Windows Internet Explorer 7 (KB2183461)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
SilverFast MicrotekSDK-SE 6.5.5r1
SoftV92 Data Fax Modem with SmartCP
Sonic Encoders
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 1 for Windows XP Media Center Edition 2005 with HDTV Support (KB873369)
Viewpoint Media Player
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Media Format Runtime
Windows Media Player 10
Windows XP Media Center Edition 2005 KB890629
Windows XP Media Center Edition 2005 KB890760
Windows XP Media Center Edition 2005 KB895198
Windows XP Media Center Edition 2005 KB895678
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
Yahoo! Install Manager
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

8/24/2010 10:21:04 AM, error: Service Control Manager [7031] - The Microsoft Antimalware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.
8/24/2010 10:15:16 AM, error: Microsoft Antimalware [5008] - Microsoft Antimalware engine has been terminated due to an unexpected error. Failure Type: Crash Exception code: 0xc0000005 Resource: file:\Device\HarddiskVolume1\Documents and Settings\Owner\Local Settings\Application Data\Mozilla\Firefox\Profiles\c39nhkkw.default\Cache\1C2271C1d01
8/22/2010 6:34:10 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

==== End Of File ===========================

 

Slow System Posting Logs


Broni,

Sorry for late reply. been gone.

I have completed the three tasks; however, when I tried to open Malwarebytes to copy the log, the computer bogged down.

Malwarebytes will/would not open. The window to open program remains on screen blocking view and whatever you see here is happening in lurches, with 20 second delays.

The screen went gray for a bit a few times, and Mozilla was not responding at times..?

I am going to try to copy this window and restart, and add log.

Well, I got ****** and shut down.

I restarted and this was saved in Mozilla, so now will try to get Malwarebytes' log.

This time it came up.

Here it is:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4535

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

9/3/2010 12:32:58 PM
mbam-log-2010-09-03 (12-32-58).txt

Scan type: Full scan (C:\|)
Objects scanned: 219851
Time elapsed: 48 minute(s), 55 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)




GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-09-03 13:59:47
Windows 5.1.2600 Service Pack 3
Running: g9o0p9iv.exe; Driver: C:\DOCUME~1\Owner\LOCALS~1\Temp\pwlcqfob.sys


---- Kernel code sections - GMER 1.0.15 ----

init C:\WINDOWS\System32\Drivers\sunkfilt.sys entry point in "init" section [0xF79DA300]

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLHOS~1.EXE[172] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!SetUnhandledExceptionFilter] [10007D24] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)
IAT C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe[436] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [10007CD1] C:\Program Files\Common Files\AOL\AOLDiag\tbdiag.dll (AOL Diagnostics Resources/America Online, Inc.)

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x000003fc

Kernel Drivers (total 177):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E4000 \WINDOWS\system32\hal.dll
0xF89F6000 \WINDOWS\system32\KDCOM.DLL
0xF8906000 \WINDOWS\system32\BOOTVID.dll
0xF83C7000 ACPI.sys
0xF89F8000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF83B6000 pci.sys
0xF84F6000 isapnp.sys
0xF8ABE000 pciide.sys
0xF8776000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF89FA000 aliide.sys
0xF89FC000 cmdide.sys
0xF89FE000 toside.sys
0xF8A00000 viaide.sys
0xF8A02000 intelide.sys
0xF8506000 MountMgr.sys
0xF8397000 ftdisk.sys
0xF8A04000 dmload.sys
0xF8371000 dmio.sys
0xF877E000 PartMgr.sys
0xF8786000 pavboot.sys
0xF8516000 VolSnap.sys
0xF890A000 cpqarray.sys
0xF8359000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
0xF8341000 atapi.sys
0xF890E000 aha154x.sys
0xF878E000 sparrow.sys
0xF8912000 symc810.sys
0xF8526000 aic78xx.sys
0xF8916000 dac960nt.sys
0xF8536000 ql10wnt.sys
0xF891A000 amsint.sys
0xF8796000 asc.sys
0xF891E000 asc3550.sys
0xF879E000 mraid35x.sys
0xF87A6000 i2omp.sys
0xF8922000 ini910u.sys
0xF8546000 ql1240.sys
0xF8556000 aic78u2.sys
0xF87AE000 symc8xx.sys
0xF87B6000 sym_hi.sys
0xF87BE000 sym_u3.sys
0xF87C6000 ABP480N5.SYS
0xF87CE000 asc3350p.sys
0xF8A06000 cd20xrnt.sys
0xF8566000 ultra.sys
0xF8328000 adpu160m.sys
0xF87D6000 dpti2o.sys
0xF8576000 ql1080.sys
0xF8586000 ql1280.sys
0xF8596000 ql12160.sys
0xF87DE000 perc2.sys
0xF8A08000 perc2hib.sys
0xF87E6000 hpn.sys
0xF8926000 cbidf2k.sys
0xF82FC000 dac2w2k.sys
0xF85A6000 disk.sys
0xF85B6000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF82DC000 fltmgr.sys
0xF82CA000 sr.sys
0xF87EE000 PxHelp20.sys
0xF82B3000 KSecDD.sys
0xF8226000 Ntfs.sys
0xF81F9000 NDIS.sys
0xF85C6000 sisagp.sys
0xF85D6000 viaagp.sys
0xF85E6000 ohci1394.sys
0xF85F6000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xF81DF000 Mup.sys
0xF8606000 agp440.sys
0xF8616000 alim1541.sys
0xF8626000 amdagp.sys
0xF8636000 agpCPQ.sys
0xF86E6000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xF78B7000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF77C9000 \SystemRoot\system32\DRIVERS\ialmnt5.sys
0xF77B5000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF778D000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xF8826000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF7769000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF882E000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF7733000 \SystemRoot\system32\DRIVERS\HSFHWBS2.sys
0xF7710000 \SystemRoot\system32\DRIVERS\ks.sys
0xF7611000 \SystemRoot\system32\DRIVERS\HSF_DP.sys
0xF7569000 \SystemRoot\system32\DRIVERS\HSF_CNXT.sys
0xF8836000 \SystemRoot\System32\Drivers\Modem.SYS
0xF7543000 \SystemRoot\system32\DRIVERS\e100b325.sys
0xF752F000 \SystemRoot\system32\DRIVERS\parport.sys
0xF78A7000 \SystemRoot\system32\DRIVERS\serial.sys
0xF8117000 \SystemRoot\system32\DRIVERS\serenum.sys
0xF7897000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF8113000 \SystemRoot\system32\drivers\iviaspi.sys
0xF7887000 \SystemRoot\System32\Drivers\Cdr4_xp.SYS
0xF8656000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF8666000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF883E000 \SystemRoot\System32\Drivers\Cdralw2k.SYS
0xF8846000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
0xF8BEE000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF8676000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF8103000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF7518000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF8686000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF8696000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF884E000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF7507000 \SystemRoot\system32\DRIVERS\psched.sys
0xF86A6000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF8856000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF79F2000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF74D7000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xF86B6000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF79EA000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF79E2000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF8A34000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF7479000 \SystemRoot\system32\DRIVERS\update.sys
0xF80E7000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF86D6000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xAA3D8000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xAA3B4000 \SystemRoot\system32\drivers\portcls.sys
0xF86F6000 \SystemRoot\system32\drivers\drmk.sys
0xF8716000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF8A38000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF89B2000 \SystemRoot\System32\Drivers\i2omgmt.SYS
0xF79DA000 \??\C:\WINDOWS\System32\Drivers\sunkfilt.sys
0xF79D2000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xF89B6000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF8736000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF79CA000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xF89BA000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xAA369000 \SystemRoot\system32\DRIVERS\MpFilter.sys
0xF79AA000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF8A80000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF8C06000 \SystemRoot\System32\Drivers\Null.SYS
0xF8A82000 \SystemRoot\System32\Drivers\Beep.SYS
0xF885E000 \SystemRoot\System32\drivers\vga.sys
0xF8A84000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF8A86000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF8866000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF886E000 \SystemRoot\System32\Drivers\Npfs.SYS
0xAA622000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xAA336000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xAA2DD000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xAA2B5000 \SystemRoot\system32\DRIVERS\netbt.sys
0xAA293000 \SystemRoot\System32\drivers\afd.sys
0xF81CF000 \SystemRoot\system32\DRIVERS\netbios.sys
0xAA1C8000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xAA1A2000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xAA132000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF81AF000 \SystemRoot\System32\Drivers\Fips.SYS
0xF819F000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xF818F000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xAA3A8000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xAA0E6000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xF814F000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xAA0CE000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF8AB0000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xF89EA000 \SystemRoot\System32\drivers\Dxapi.sys
0xF88AE000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF8C0B000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF020000 \SystemRoot\System32\ialmdnt5.dll
0xBF012000 \SystemRoot\System32\ialmrnt5.dll
0xBF03F000 \SystemRoot\System32\ialmdev5.DLL
0xBF068000 \SystemRoot\System32\ialmdd5.DLL
0xA9FB2000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA9CF9000 \SystemRoot\system32\drivers\wdmaud.sys
0xA9E4E000 \SystemRoot\system32\drivers\sysaudio.sys
0xA9936000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xF8A3C000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xF8A42000 \SystemRoot\System32\Drivers\ASCTRM.SYS
0xA9963000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0xA97C7000 \SystemRoot\system32\DRIVERS\srv.sys
0xA92FE000 \SystemRoot\System32\Drivers\HTTP.sys
0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
0xA8EAC000 \??\C:\DOCUME~1\Owner\LOCALS~1\Temp\pwlcqfob.sys
0xA8E81000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 46):
0 System Idle Process
4 System
636 C:\WINDOWS\system32\smss.exe
708 csrss.exe
732 C:\WINDOWS\system32\winlogon.exe
776 C:\WINDOWS\system32\services.exe
788 C:\WINDOWS\system32\lsass.exe
968 C:\WINDOWS\system32\svchost.exe
1036 svchost.exe
1132 C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
1172 C:\WINDOWS\system32\svchost.exe
1260 svchost.exe
1388 svchost.exe
1576 C:\WINDOWS\system32\spoolsv.exe
1844 C:\WINDOWS\explorer.exe
1988 C:\WINDOWS\ehome\ehtray.exe
1996 C:\Program Files\Digital Media Reader\shwiconEM.exe
2008 C:\WINDOWS\zHotkey.exe
2036 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
172 C:\Program Files\Common Files\AOL\1123365865\EE\AOLHostManager.exe
184 C:\WINDOWS\system32\hkcmd.exe
196 C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\apdproxy.exe
236 C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe
252 C:\Program Files\Common Files\Java\Java Update\jusched.exe
260 C:\Program Files\Microsoft Security Essentials\msseces.exe
352 C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
436 C:\PROGRA~1\COMMON~1\AOL\112336~1\EE\AOLServiceHost.exe
448 C:\WINDOWS\system32\ctfmon.exe
532 C:\Program Files\EmailsAgent\EmailsAgent\EmailsAgent.exe
544 C:\Program Files\BBNikon\NkvMon.exe
668 svchost.exe
752 C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\PhotoshopElementsFileAgent.exe
988 C:\WINDOWS\ehome\ehRecvr.exe
1020 C:\WINDOWS\ehome\ehSched.exe
1112 C:\Program Files\Java\jre6\bin\jqs.exe
1244 C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
1484 C:\WINDOWS\system32\svchost.exe
1956 C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
2696 C:\WINDOWS\system32\dllhost.exe
3024 alg.exe
3680 C:\WINDOWS\ehome\ehmsas.exe
4040 C:\WINDOWS\system32\svchost.exe
2124 C:\WINDOWS\system32\wuauclt.exe
3336 C:\Program Files\Common Files\Java\Java Update\jucheck.exe
2812 C:\Program Files\Mozilla Firefox\firefox.exe
1476 C:\Documents and Settings\Owner\My Documents\Downloads\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`2b0fc400 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (FAT32)

PhysicalDrive0 Model Number: ST3200822AS, Rev: 3.02

Size Device Name MBR Status
--------------------------------------------
186 GB \\.\PhysicalDrive0 Gateway MBR code detected
SHA1: 007DADCB3671462B53686F6996D328CFD544ABBD


Done!

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----

 

Very slow Intermittant

Broni,

Hi, Below is log. I had to uninstall MS scanner/security program do do scan. No way to temp disable.

I might add that the system remains agonizingly sluggish. I believe it is due to Firefox and/or the MS security program as seems coincidental with adding/updating either.

Here is Combofix log:

ComboFix 10-09-03.02 - Owner 09/04/2010 7:10.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.314 [GMT -5:00]
Running from: c:\documents and settings\Owner\Desktop\ComboFix.exe
.

((((((((((((((((((((((((( Files Created from 2010-08-04 to 2010-09-04 )))))))))))))))))))))))))))))))
.

2010-08-29 11:41 . 2010-08-29 11:42 -------- d-----w- c:\program files\Fusionparts
2010-08-29 11:25 . 2010-08-31 12:14 -------- d-----w- c:\windows\SxsCaPendDel
2010-08-15 11:23 . 2010-06-01 17:37 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-08-07 09:08 . 2010-08-07 09:08 503808 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-2702a822-n\msvcp71.dll
2010-08-07 09:08 . 2010-08-07 09:08 499712 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-2702a822-n\jmc.dll
2010-08-07 09:08 . 2010-08-07 09:08 348160 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-2702a822-n\msvcr71.dll
2010-08-07 09:08 . 2010-08-07 09:08 12800 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-659ce0e9-n\decora-d3d.dll
2010-08-07 09:08 . 2010-08-07 09:08 61440 ----a-w- c:\documents and settings\Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-659ce0e9-n\decora-sse.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-04 12:00 . 2010-03-13 20:51 -------- d-----w- c:\program files\Microsoft Silverlight
2010-08-14 08:18 . 2006-03-03 14:39 -------- d-----w- c:\program files\FireFox
2010-06-30 12:31 . 2005-04-13 16:56 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-24 12:15 . 2005-04-13 16:56 832512 ----a-w- c:\windows\system32\wininet.dll
2010-06-24 12:15 . 2005-04-13 16:55 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-06-24 12:15 . 2005-04-13 16:55 17408 ------w- c:\windows\system32\corpol.dll
2010-06-23 13:44 . 2005-04-13 16:56 1851904 ----a-w- c:\windows\system32\win32k.sys
2010-06-21 15:27 . 2005-04-13 16:56 354304 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-17 14:03 . 2005-04-13 16:55 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-06-14 14:31 . 2005-04-13 17:16 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:41 . 2005-04-13 16:55 1172480 ----a-w- c:\windows\system32\msxml3.dll
2010-06-10 11:47 . 2010-06-10 11:46 1924976 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OM2_Monitor "= "c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2009-11-26 95632]
"ccleaner "= "c:\program files\CCleaner\CCleaner.exe" [2010-04-23 1668920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray "= "c:\windows\ehome\ehtray.exe" [2004-08-10 59392]
"SunKistEM "= "c:\program files\Digital Media Reader\shwiconem.exe" [2004-11-15 135168]
"CHotkey "= "zHotkey.exe" [2005-05-03 543232]
"HostManager "= "c:\program files\Common Files\AOL\1123365865\EE\AOLHostManager.exe" [2004-11-03 125528]
"RemoteControl "= "c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-03 32768]
"High Definition Audio Property Page Shortcut "= "HDAudPropShortcut.exe" [2004-08-13 61952]
"Mixersel "= "c:\program files\Realtek\InstallShield\mixersel.exe" [2003-11-11 369664]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2004-12-01 126976]
"Adobe Photo Downloader "= "c:\program files\Adobe\Photoshop Elements 5.0\MicroTekALL\apdproxy.exe" [2006-12-22 67752]
"Microtek_Scanner_Server "= "c:\program files\Microtek\ScanWizard Pro\LANServer.exe" [2007-05-16 233472]
"OM2_Monitor "= "c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2009-11-26 54672]
"SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
EmailsAgentShortcut.lnk - c:\program files\EmailsAgent\EmailsAgent\EmailsAgent.exe [2010-3-9 81920]
NkvMon.exe.lnk - c:\program files\BBNikon\NkvMon.exe [2006-2-19 233472]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe "=
"c:\\Program Files\\Common Files\\AOL\\1123365865\\EE\\AOLServiceHost.exe "=
"c:\\Program Files\\iTunes\\iTunes.exe "=
"c:\\Program Files\\Messenger\\msmsgs.exe "=
"c:\\Program Files\\Adobe\\Photoshop Elements 5.0\\MicroTekALL\\AdobePhotoshopElementsMediaServer.exe "=
"%windir%\\Network Diagnostic\\xpnetdiag.exe "=
"c:\\Program Files\\Microtek\\ScanWizard Pro\\LANServer.exe "=

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [4/18/2010 6:27 AM 28552]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yahoo.com/
IE: &AOL Toolbar search - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: &Google Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IE: &Translate English Word - c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate Page into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html
FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\c39nhkkw.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/firefox/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - plugin: c:\documents and settings\Owner\Application Data\Move Networks\plugins\npqmp071705000014.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgbaam7a8h ", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgberp4a5d4ar ", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref( "dom.ipc.plugins.enabled ", false);
.
- - - - ORPHANS REMOVED - - - -

AddRemove-NetObjects Fusion 7.5 - c:\program files\bbfusion75\Uninst.isu



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-04 07:15
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(776)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
.
Completion time: 2010-09-04 07:18:13
ComboFix-quarantined-files.txt 2010-09-04 12:18
ComboFix2.txt 2010-04-27 11:54

Pre-Run: 162,686,058,496 bytes free
Post-Run: 162,661,105,664 bytes free

- - End Of File - - D1130D6A72C9A437E4D2E83623EC724B

 

Very Slow Intermittant

FWIW, it seems that getting rid of the MS security has solved some of the slow problem, but not sure. I hope that helps. It could also be Mozilla...

 

Very Slow From Standby

Broni. the two files are below. It is in two responses as BBS limited input...

Two observations. Since I dumped MS Security, things seem to be faster. but
I have not started up in the early AM where I could have sworn, Mozilla was the culprit. At this point things seem back to normal, save the security oversight, and will download what you suggested immediately.



OTL logfile created on: 9/8/2010 6:45:15 AM - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Documents and Settings\Owner\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

502.00 Mb Total Physical Memory | 284.00 Mb Available Physical Memory | 57.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 181.64 Gb Total Space | 151.62 Gb Free Space | 83.48% Space Free | Partition Type: NTFS
Drive D: | 4.66 Gb Total Space | 2.41 Gb Free Space | 51.58% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: 1014GLENECHO2
Current User Name: Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/09/08 06:25:18 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
PRC - [2010/03/09 23:13:00 | 000,081,920 | ---- | M] (EmailsAgent) -- C:\Program Files\EmailsAgent\EmailsAgent\EmailsAgent.exe
PRC - [2010/02/18 11:43:20 | 000,490,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2009/11/25 21:42:26 | 000,095,632 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/05/15 22:58:06 | 000,233,472 | ---- | M] () -- C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe
PRC - [2006/12/22 08:31:50 | 000,108,712 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\PhotoshopElementsFileAgent.exe
PRC - [2006/12/22 08:29:56 | 000,067,752 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\apdproxy.exe
PRC - [2005/08/06 17:03:18 | 000,172,032 | ---- | M] (New Boundary Technologies, Inc.) -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
PRC - [2005/05/03 16:02:00 | 000,543,232 | ---- | M] () -- C:\WINDOWS\zHotkey.exe
PRC - [2004/12/13 05:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2004/11/15 17:04:32 | 000,135,168 | ---- | M] (Alcor Micro, Corp.) -- C:\Program Files\Digital Media Reader\shwiconEM.exe
PRC - [2004/11/03 16:03:00 | 000,125,528 | ---- | M] (America Online, Inc.) -- C:\Program Files\Common Files\AOL\1123365865\EE\AOLHostManager.exe
PRC - [2004/11/03 16:03:00 | 000,110,680 | ---- | M] (America Online, Inc.) -- C:\Program Files\Common Files\AOL\1123365865\EE\AOLServiceHost.exe
PRC - [2002/05/23 15:59:58 | 000,233,472 | ---- | M] (Nikon Corporation) -- C:\Program Files\BBNikon\NkvMon.exe


========== Modules (SafeList) ==========

MOD - [2010/09/08 06:25:18 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
MOD - [2008/04/13 19:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2001/07/02 09:36:30 | 000,024,576 | ---- | M] () -- C:\WINDOWS\HKNTDLL.dll


========== Win32 Services (SafeList) ==========

SRV - [2006/12/22 08:31:50 | 000,108,712 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor5.0)
SRV - [2005/08/06 17:03:18 | 000,172,032 | ---- | M] (New Boundary Technologies, Inc.) [Auto | Running] -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS -- (PrismXL)
SRV - [2004/12/13 05:34:32 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Owner\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2009/06/30 09:37:16 | 000,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\pavboot.sys -- (pavboot)
DRV - [2008/04/13 13:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008/04/13 13:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008/04/13 11:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2006/11/22 19:13:22 | 000,016,024 | ---- | M] (InterVideo, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\iviaspi.sys -- (Iviaspi)
DRV - [2005/08/06 17:05:28 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM)
DRV - [2004/11/15 19:41:54 | 000,036,804 | ---- | M] (Alcor Micro Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Sunkfilt.sys -- (SunkFilt)
DRV - [2004/11/10 19:30:18 | 000,024,832 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k)
DRV - [2004/11/10 19:27:34 | 000,044,288 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp)
DRV - [2004/10/27 20:24:00 | 002,297,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2004/08/12 19:45:52 | 000,113,664 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2004/08/04 00:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2004/06/17 17:56:22 | 000,220,032 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys -- (HSFHWBS2)
DRV - [2004/06/17 17:55:38 | 000,685,056 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004/06/17 17:55:04 | 001,041,536 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
DRV - [2003/01/10 16:13:04 | 000,033,588 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - [2001/08/17 23:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001/08/17 23:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001/08/17 23:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001/08/17 23:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001/08/17 23:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001/08/17 22:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001/08/17 22:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001/08/17 22:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001/08/17 22:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001/08/17 22:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001/08/17 22:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001/08/17 22:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001/08/17 22:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001/08/17 22:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001/08/17 22:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
DRV - [2001/08/17 15:49:32 | 000,019,968 | ---- | M] (Macronix International Co., Ltd. ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mxnic.sys -- (mxnic)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo "
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p= "
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff- "
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff- "
FF - prefs.js..browser.search.selectedEngine: "Google "
FF - prefs.js..browser.startup.homepage: "http://www.google.com/firefox/ "
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:7
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100823
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.3.20100310105313
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p= "


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/08/17 05:48:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/14 05:14:11 | 000,000,000 | ---D | M]

[2009/01/11 11:45:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
[2010/09/07 06:47:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\c39nhkkw.default\extensions
[2010/05/18 19:01:15 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\c39nhkkw.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/08/28 12:48:58 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\c39nhkkw.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010/09/07 06:47:45 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/04/29 11:49:45 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/04/29 11:49:26 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

Hosts file not found
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [CHotkey] C:\WINDOWS\zHotkey.exe ()
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\Hdaudpropshortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1123365865\EE\AOLHostManager.exe (America Online, Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Microtek_Scanner_Server] C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe ()
O4 - HKLM..\Run: [Mixersel] C:\Program Files\Realtek\InstallShield\mixersel.exe ()
O4 - HKLM..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe (OLYMPUS IMAGING CORP.)
O4 - HKLM..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconEM.exe (Alcor Micro, Corp.)
O4 - HKCU..\Run: [ccleaner] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
O4 - HKCU..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe (OLYMPUS IMAGING CORP.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\EmailsAgentShortcut.lnk = C:\Program Files\EmailsAgent\EmailsAgent\EmailsAgent.exe (EmailsAgent)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NkvMon.exe.lnk = C:\Program Files\BBNikon\NkvMon.exe (Nikon Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &Google Search - c:\program files\google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: &Translate English Word - c:\program files\google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Backward Links - c:\program files\google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Similar Pages - c:\program files\google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Translate Page into English - c:\program files\google\GoogleToolbar1.dll (Google Inc.)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.213.162.4 206.230.105.4
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Owner\My Documents\My Pictures\BandW1\Bridge\RRBridge2.BMP
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Owner\My Documents\My Pictures\BandW1\Bridge\RRBridge2.BMP
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/04/13 12:20:25 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: aux - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: midi - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\WINDOWS\System32\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.imaadpcm - C:\WINDOWS\System32\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\WINDOWS\System32\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msaudio1 - C:\WINDOWS\System32\msaud32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\WINDOWS\System32\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msg723 - C:\WINDOWS\System32\msg723.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\WINDOWS\System32\msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.I420 - C:\WINDOWS\System32\msh263.drv (Microsoft Corporation)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.iyuv - C:\WINDOWS\System32\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.M261 - C:\WINDOWS\System32\msh261.drv (Microsoft Corporation)
Drivers32: vidc.M263 - C:\WINDOWS\System32\msh263.drv (Microsoft Corporation)
Drivers32: vidc.mrle - C:\WINDOWS\System32\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\WINDOWS\System32\msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - C:\WINDOWS\System32\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\WINDOWS\System32\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\WINDOWS\System32\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\WINDOWS\System32\msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2010/09/08 06:25:17 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
[2010/09/07 12:09:22 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner\Recent
[2010/09/04 09:19:51 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/09/04 07:08:34 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/09/04 07:08:33 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/09/04 07:08:33 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/09/04 07:08:33 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/09/04 07:07:38 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2010/09/04 07:01:52 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/08/31 16:15:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Food
[2010/08/31 16:14:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\FishGunsONE 09
[2010/08/29 06:41:10 | 000,000,000 | ---D | C] -- C:\Program Files\Fusionparts
[2010/08/29 06:25:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel
[2010/08/17 10:07:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Sailing
[2010/08/17 09:56:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\WDNOPS2010
[2010/08/15 06:23:52 | 000,221,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[3 C:\Documents and Settings\Owner\My Documents\*.tmp files -> C:\Documents and Settings\Owner\My Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/09/08 06:25:18 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\Desktop\OTL.exe
[2010/09/07 16:19:04 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\082010Noise.doc
[2010/09/07 13:47:38 | 000,023,040 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\090110Sports2222.doc
[2010/09/07 12:45:21 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\090110Sports.doc
[2010/09/06 21:21:59 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/09/06 21:21:40 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/09/06 21:21:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/09/06 21:21:35 | 525,963,264 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/04 14:54:34 | 000,174,743 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\MVC-014X_jpg.jpg
[2010/09/04 10:51:52 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\D.doc
[2010/09/04 07:15:36 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/09/04 06:54:26 | 003,835,729 | R--- | M] () -- C:\Documents and Settings\Owner\Desktop\ComboFix.exe
[2010/09/03 12:36:48 | 000,088,576 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/03 11:23:13 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\Owner\ntuser.ini
[2010/09/03 11:23:12 | 009,961,472 | ---- | M] () -- C:\Documents and Settings\Owner\NTUSER.DAT
[2010/08/31 16:35:16 | 000,000,812 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Shortcut to B&WssII.lnk
[2010/08/31 12:47:07 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/08/31 09:11:08 | 000,051,200 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\CrashCourse.doc
[2010/08/30 08:58:57 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Geoffrey R.doc
[2010/08/28 10:13:40 | 000,019,456 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\If ye love wealth better than liberty.doc
[2010/08/22 12:29:20 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\Owner\My Documents\Enlarger.doc
[2010/08/14 05:14:15 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/08/14 05:14:15 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/08/12 14:24:23 | 000,215,264 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/08/12 13:38:45 | 000,000,689 | ---- | M] () -- C:\WINDOWS\win.ini
[3 C:\Documents and Settings\Owner\My Documents\*.tmp files -> C:\Documents and Settings\Owner\My Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/09/07 12:50:12 | 000,023,040 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\090110Sports2222.doc
[2010/09/04 14:54:34 | 000,174,743 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\MVC-014X_jpg.jpg
[2010/09/04 10:51:51 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\D.doc
[2010/09/04 07:08:34 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/09/04 07:08:33 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/09/04 07:08:33 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/09/04 07:08:33 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/09/04 07:08:33 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/09/04 06:52:43 | 003,835,729 | R--- | C] () -- C:\Documents and Settings\Owner\Desktop\ComboFix.exe
[2010/09/01 09:04:11 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\090110Sports.doc
[2010/08/30 08:41:31 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Geoffrey R.doc
[2010/08/28 10:13:40 | 000,019,456 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\If ye love wealth better than liberty.doc
[2010/08/21 12:37:32 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\Enlarger.doc
[2010/08/21 07:20:45 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\Owner\My Documents\082010Noise.doc
[2009/06/17 10:55:05 | 000,000,270 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\wklnhst.dat
[2008/11/10 12:44:34 | 000,000,035 | ---- | C] () -- C:\WINDOWS\Ulead32.INI
[2008/05/28 09:31:56 | 000,020,531 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\R49LW
[2006/04/22 07:00:17 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/04/22 06:33:32 | 000,001,751 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2006/03/15 09:46:08 | 000,000,335 | ---- | C] () -- C:\WINDOWS\Trpmaker.INI
[2006/03/15 09:45:42 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\Msvcrt10.dll
[2006/02/28 11:41:47 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2006/02/19 09:14:50 | 000,000,624 | ---- | C] () -- C:\WINDOWS\videoimp.ini
[2006/02/19 09:14:28 | 000,000,021 | ---- | C] () -- C:\WINDOWS\CS_setup.ini
[2006/02/19 08:35:58 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\Inst2891.dll
[2006/02/19 08:11:15 | 000,088,576 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/11/11 05:43:28 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\libssl32.dll
[2005/11/11 05:43:24 | 000,887,296 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2005/09/09 17:19:14 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\Mphase32.dll
[2005/09/09 17:19:14 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\MSCANDC.INI
[2005/09/09 17:19:14 | 000,000,025 | ---- | C] () -- C:\WINDOWS\System32\MSAPN.INI
[2005/08/06 17:08:52 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2005/08/06 17:04:01 | 000,532,544 | ---- | C] () -- C:\WINDOWS\PIC.dll
[2005/08/06 17:04:01 | 000,024,576 | ---- | C] () -- C:\WINDOWS\HKNTDLL.dll
[2005/08/06 17:01:41 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/08/06 16:37:53 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2005/04/13 14:02:03 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/04/13 11:57:05 | 000,001,218 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005/04/13 11:57:05 | 000,000,465 | ---- | C] () -- C:\WINDOWS\System32\emver.ini
[2005/02/22 06:40:02 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\MiiDSR.dll
[2003/09/04 05:47:10 | 000,000,062 | ---- | C] () -- C:\WINDOWS\System32\mice.ini
[2003/01/07 17:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/07/02 05:15:30 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\Smc732.dll
[2001/06/15 08:35:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\MS32RES.DLL
[2001/01/17 04:52:54 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\Smbd32.dll
[2001/01/17 04:52:54 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\Sm9e32.dll
[2001/01/17 04:34:16 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\Smb432.dll
[2000/12/08 07:41:30 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\smB332.dll
[2000/12/08 07:40:50 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\Smdd32.dll
[2000/12/08 07:39:58 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\smCA32.dll
[2000/12/08 07:39:48 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\Smcb32.dll
[2000/12/08 07:39:38 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\Smb832.dll
[2000/02/25 06:13:30 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\Sma332.dll
[2000/01/17 13:55:08 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\Smb032.dll
[1999/10/25 08:32:26 | 000,038,400 | ---- | C] () -- C:\WINDOWS\System32\Smb632.dll
[1999/08/05 07:17:48 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\Decoder.dll
[1999/07/14 04:33:08 | 000,054,784 | ---- | C] () -- C:\WINDOWS\System32\Sm9132.dll
[1999/04/28 04:23:34 | 000,036,352 | ---- | C] () -- C:\WINDOWS\System32\Aspi32.dll
[1999/01/22 13:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[1997/12/05 02:05:00 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\Dspimg32.dll
[1996/10/22 03:28:02 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\Raven32.dll

========== LOP Check ==========

[2008/05/28 10:33:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\espionServerData
[2007/02/20 21:06:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Geek Squad
[2007/09/05 04:04:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LiveSubscribe
[2010/03/24 07:42:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster
[2010/04/18 13:49:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/01/18 07:12:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2005/08/06 17:05:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/01/08 12:21:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\InterVideo
[2008/05/31 10:23:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Lasersoft Imaging
[2006/02/19 09:20:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Nikon
[2008/05/04 12:54:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Opera
[2007/09/08 13:45:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\RegClean
[2005/08/06 17:10:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\SampleView
[2009/06/17 10:55:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Template
[2009/12/17 14:40:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Transcend

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2008/05/28 10:33:50 | 000,000,000 | ---- | M] () -- C:\AdobeDebug.txt
[2005/04/13 12:20:25 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2006/02/19 08:10:57 | 000,000,209 | ---- | M] () -- C:\Boot.bak
[2010/04/27 06:46:26 | 000,000,279 | RHS- | M] () -- C:\boot.ini
[2009/02/12 21:25:40 | 000,000,076 | ---- | M] () -- C:\Catalog.LiveSubscribe
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2010/09/04 07:18:14 | 000,008,342 | ---- | M] () -- C:\ComboFix.txt
[2005/04/13 12:20:25 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/04/19 10:16:41 | 000,033,619 | ---- | M] () -- C:\CybDefInstallInfo.log
[2008/10/06 10:51:34 | 000,000,182 | ---- | M] () -- C:\drwtsn32.log
[2010/09/06 21:21:35 | 525,963,264 | -HS- | M] () -- C:\hiberfil.sys
[2005/04/13 12:20:25 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2005/08/06 17:06:05 | 000,001,158 | -H-- | M] () -- C:\IPH.PH
[2010/04/29 11:33:37 | 000,002,670 | ---- | M] () -- C:\JavaRa.log
[2010/06/03 10:05:41 | 000,000,109 | ---- | M] () -- C:\mbam-error.txt
[2005/04/13 12:20:25 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2005/08/06 17:06:33 | 000,000,160 | ---- | M] () -- C:\napster.log
[2004/08/10 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2009/04/02 11:31:15 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/09/06 21:21:34 | 792,723,456 | -HS- | M] () -- C:\pagefile.sys
[2005/08/06 17:09:33 | 000,000,411 | ---- | M] () -- C:\RtlAudio_Result.txt

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >
[2007/04/09 13:23:54 | 000,028,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll

< %systemroot%\system32\*.wt >

< %systemroot%\system32\*.ruy >

< %systemroot%\Fonts\*.com >

< %systemroot%\Fonts\*.dll >

< %systemroot%\system32\spool\prtprocs\w32x86\*.tmp >

< %systemroot%\*. /mp /s >


< %systemroot%\system32\*.dll /lockedfiles >
[2008/04/13 19:11:51 | 001,267,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\WINDOWS\system32\comsvcs.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2005/04/13 05:06:16 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2005/04/13 05:06:16 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2005/04/13 05:06:16 | 000,856,064 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\user32.dll /md5 >
[2008/04/13 19:12:08 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=B26B135FF1B9F60C9388B4A7D16F600B -- C:\WINDOWS\system32\user32.dll

< %systemroot%\system32\ws2_32.dll /md5 >
[2008/04/13 19:12:10 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=2CCC474EB85CEAA3E1FA1726580A3E5A -- C:\WINDOWS\system32\ws2_32.dll

< %systemroot%\system32\ws2help.dll /md5 >
[2008/04/13 19:12:10 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=9789E95E1D88EEB4B922BF3EA7779C28 -- C:\WINDOWS\system32\ws2help.dll

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMPFC5A2B2
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP1B5B4F1
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >

 

Ooops!

Here 'tis...

Yes, since I unplugged MS Security, things are more or less back to normal. I thought I had 1027 RAM but will look into it and do it if I can and have time. That would certainly help...any special infor I need to know?

OTL Extras logfile created on: 9/8/2010 6:42:59 AM - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Documents and Settings\Owner\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

502.00 Mb Total Physical Memory | 291.00 Mb Available Physical Memory | 58.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 73.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 181.64 Gb Total Space | 151.62 Gb Free Space | 83.48% Space Free | Partition Type: NTFS
Drive D: | 4.66 Gb Total Space | 2.41 Gb Free Space | 51.58% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: 1014GLENECHO2
Current User Name: Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabledxpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabledxpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabledxpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabledxpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Application Loader -- (America Online, Inc.)
"C:\Program Files\Common Files\AOL\1123365865\EE\AOLServiceHost.exe" = C:\Program Files\Common Files\AOL\1123365865\EE\AOLServiceHost.exe:*:Enabled:AOL -- (America Online, Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Computer, Inc.)
"C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\AdobePhotoshopElementsMediaServer.exe" = C:\Program Files\Adobe\Photoshop Elements 5.0\MicroTekALL\AdobePhotoshopElementsMediaServer.exe:*isabled:Adobe Photoshop Elements Media Server -- ()
"C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe" = C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe:*isabled:LAN Server -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{15377C3E-9655-400F-B441-E69F0A6BEAFE}" = Recovery Software Suite Gateway
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{25569723-DC5A-4467-A639-79535BF01B71}" = Adobe Help Center 2.1
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{34F0D55F-C386-4195-9A5B-961D3F6ACD46}" = InterVideo MediaOne Gallery
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3F262ADC-5AD2-48E5-A586-44315E04A9E2}" = Microsoft Picture It! Library 10
"{42756145-9997-4D28-809B-8756BFD00106}" = Microsoft Picture It! Premium 10
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A344E44-3337-11D9-8629-00055DFD8F8E}" = Microtek Scanner ICC Profiler
"{4B445837-4FD0-468D-9CAA-7AA605EA612B}" = OLYMPUS Master 2
"{59C4F14F-7590-45FC-BE9F-A67AB3590709}" = iTunes
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6E66ECBD-FCA7-4AE1-A8C5-1CA78BEEB057}" = Multimedia Keyboard Driver
"{6F00F343-7562-4F03-B3C3-F9360E2DA333}" = DiMAGE Scan Dual4 ver.1.0
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{81EED1A1-AE78-4B11-BE47-C6AE9F5E87F1}" = Digital Media Reader
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9941F0AA-B903-4AF4-A055-83A9815CC011}" = Sonic Encoders
"{9F7FC79B-3059-4264-9450-39EB368E3225}" = Microsoft Digital Image Library 9 - Blocker
"{A0307120-889A-11D8-8627-00055DFD8F8E}" = Color Matching System
"{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}" = Adobe Photoshop Elements 5.0
"{AAB84E83-C8DF-4752-9DFC-2E2A48EE5E9F}" = Nikon View 5
"{AC76BA86-7AD7-1033-7B44-A71000000002}" = Adobe Reader 7.1.0
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{C1334AAA-5C3E-11D6-8FC3-0080C85A0C2D}" = ScanWizard Pro
"{C4D2A420-1AA5-4DF5-99F7-E49DBC801D7E}" = Auto Dust Brush Plug-in
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Acrobat 4.0" = Adobe Acrobat 4.0
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop 6.0" = Adobe Photoshop 6.0
"Adobe Photoshop Elements 2.0" = Adobe Photoshop Elements 2.0
"Adobe Photoshop Elements 5" = Adobe Photoshop Elements 5.0
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"ArcSoft Software Suite" = ArcSoft Software Suite
"BigFix" = BigFix
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200014F1" = SoftV92 Data Fax Modem with SmartCP
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{59C4F14F-7590-45FC-BE9F-A67AB3590709}" = iTunes
"InstallShield_{81EED1A1-AE78-4B11-BE47-C6AE9F5E87F1}" = Digital Media Reader
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"Nero - Burning Rom!UninstallKey" = Nero OEM
"Nero BurnRights!UninstallKey" = Nero BurnRights
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PictureItPrem_v10" = Microsoft Picture It! Premium 10
"PROSet" = Intel(R) PRO Network Adapters and Drivers
"RealPlayer 6.0" = RealPlayer Basic
"SilverFast MicrotekSDK-SE" = SilverFast MicrotekSDK-SE 6.5.5r1
"ViewpointMediaPlayer" = Viewpoint Media Player
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar
"YInstHelper" = Yahoo! Install Manager

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Move Media Player" = Move Media Player

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8/22/2010 7:34:14 AM | Computer Name = 1014GLENECHO2 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 8/24/2010 11:15:30 AM | Computer Name = 1014GLENECHO2 | Source = Application Error | ID = 1000
Description = Faulting application MsMpEng.exe, version 2.1.6805.0, faulting module
mpengine.dll, version 1.1.6103.0, fault address 0x0005eb76.

Error - 8/24/2010 11:15:53 AM | Computer Name = 1014GLENECHO2 | Source = Application Error | ID = 1001
Description = Fault bucket 2001270412.

Error - 8/27/2010 3:53:13 AM | Computer Name = 1014GLENECHO2 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 9/2/2010 12:47:22 PM | Computer Name = 1014GLENECHO2 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 9/3/2010 12:32:55 PM | Computer Name = 1014GLENECHO2 | Source = MPSampleSubmission | ID = 5000
Description =

Error - 9/5/2010 6:52:51 AM | Computer Name = 1014GLENECHO2 | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.3855, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 9/5/2010 6:53:24 AM | Computer Name = 1014GLENECHO2 | Source = Application Error | ID = 1000
Description = Faulting application plugin-container.exe, version 1.9.2.3855, faulting
module ntdll.dll, version 5.1.2600.5755, fault address 0x0000100b.

Error - 9/5/2010 6:53:39 AM | Computer Name = 1014GLENECHO2 | Source = Application Error | ID = 1001
Description = Fault bucket 1967498370.

Error - 9/5/2010 6:53:45 AM | Computer Name = 1014GLENECHO2 | Source = Application Hang | ID = 1001
Description = Fault bucket 1966851204.

[ System Events ]
Error - 9/6/2010 10:48:19 AM | Computer Name = 1014GLENECHO2 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 9/6/2010 10:48:21 AM | Computer Name = 1014GLENECHO2 | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 9/6/2010 10:48:21 AM | Computer Name = 1014GLENECHO2 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 15 minutes. NtpClient has no source of accurate
time.

Error - 9/6/2010 10:21:44 PM | Computer Name = 1014GLENECHO2 | Source = SideBySide | ID = 16842784
Description = Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last
Error was The referenced assembly is not installed on your system.

Error - 9/6/2010 10:21:44 PM | Computer Name = 1014GLENECHO2 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference
error message: The referenced assembly is not installed on your system. .

Error - 9/6/2010 10:21:44 PM | Computer Name = 1014GLENECHO2 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\Program Files\OLYMPUS\OLYMPUS
Master 2\MFC80U.DLL. Reference error message: The operation completed successfully.
.

Error - 9/6/2010 10:21:44 PM | Computer Name = 1014GLENECHO2 | Source = SideBySide | ID = 16842784
Description = Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last
Error was The referenced assembly is not installed on your system.

Error - 9/6/2010 10:21:44 PM | Computer Name = 1014GLENECHO2 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference
error message: The referenced assembly is not installed on your system. .

Error - 9/6/2010 10:21:44 PM | Computer Name = 1014GLENECHO2 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\Program Files\OLYMPUS\OLYMPUS
Master 2\MFC80U.DLL. Reference error message: The operation completed successfully.
.

Error - 9/6/2010 10:21:53 PM | Computer Name = 1014GLENECHO2 | Source = Service Control Manager | ID = 7023
Description = The HID Input Service service terminated with the following error:
%%126


< End of report >

 

Very Slow From Standby

My ISP is HBCI.com or HBC.com local media corp, does TV also.

Thanks for Heads Up on memory. I will likely update shortly.

I see there is suspicious file, but it was not the item that was slowing me down, as I now think it was MS Security program.

Did the Kaspersky program remove above? I did not note that it did.

Logs:

OTL

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
C:\Documents and Settings\Owner\My Documents\~WRL0001.tmp deleted successfully.
C:\Documents and Settings\Owner\My Documents\~WRL0002.tmp deleted successfully.
C:\Documents and Settings\Owner\My Documents\~WRL0003.tmp deleted successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\UserShell\AOL9Plus folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\UserShell\AOL9 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\UserShell folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_03 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_02 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_01 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_00 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology\Resources folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Experience Technology folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint folder moved successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMPFC5A2B2 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP1B5B4F1 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8 deleted successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 65748 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: Owner
->Temp folder emptied: 9251825 bytes
->Temporary Internet Files folder emptied: 107727 bytes
->Java cache emptied: 2027 bytes
->FireFox cache emptied: 75429537 bytes
->Flash cache emptied: 26760 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 255 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 81.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Owner
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.12.0 log created on 09142010_151555

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

Security Check Log

Results of screen317's Security Check version 0.99.5
Windows XP Service Pack 3
Internet Explorer 7 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Avira AntiVir Personal - Free Antivirus
Antivirus up to date!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
CCleaner
Java(TM) 6 Update 21
Adobe Flash Player 10.0.45.2
Adobe Reader 7.1.0
Out of date Adobe Reader installed!
Mozilla Firefox (3.6.9)
````````````````````````````````
Process Check:
objlist.exe by Laurent
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
````````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````





KASPERSKY ONLINE SCANNER 7.0: scan report
Wednesday, September 15, 2010
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Tuesday, September 14, 2010 18:44:09
Records in database: 4212113
Scan settings
scan using the following database extended
Scan archives yes
Scan e-mail databases yes
Scan area My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
Scan statistics
Objects scanned 94605
Threats found 1
Infected objects found 0
Suspicious objects found 1
Scan duration 03:56:26

File name Threat Threats count
C:\Documents and Settings\Owner\Local Settings\Application Data\Identities\{651FEF03-F5AD-49E8-8735-3B1E6475A8FE}\Microsoft\Outlook Express\PayPal.dbx Suspicious: Trojan-Spy.HTML.Fraud.gen 1
Selected area has been scanned.

 

RESOLVED Very Slow From Standby

1. I have followed each suggestion, save added memory, which will do next month. Changing ID and passwords took a bit of time, but cannot take chances.

BTW, I run Malewarebytes scans monthly. That errant file was not noted, but it was also, I think, sitting in unused Outlook Express dbx file but I have no clue what it is and do not use Outlook. That file also never showed and must have been there long before I changed to gmail. If I can locate, will delete it.

2. The computer runs like new. It is faster, than new I believe.

3. I thank Broni for his time and knowledge.

4. I will post follow-up in months to come.

5. I have one question that I will post, when I can find the files the question concerns.

Thank-you again.

Below is last OTL log:

All processes killed
========== OTL ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Owner
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 49286 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 41542970 bytes
->Flash cache emptied: 3418 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 40.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Owner
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.12.0 log created on 09162010_074030

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

 

Very Slow From Standby

Broni, couple questions regarding above processes.

I noted I have a few files MSMXL files or similar in the list of files to add or remove...most are 2MB, and when I did search, I noted many such files, some connected to MS service packs. Are these nec? Must each service pack be retained.

Last ?...the Secunia program noted 5 programs it deemed in need of update. One was Firefox which was just updated. What does that mean? I figure -fox must be okay???

 

Very Slow From Standby

Yes, that is what I decided to do.

The program also suggested I have issues with 5 other items also, but I do not use them, so I just ignored the suggestions.

In fact, one of them I could not locate on my computer...

Thanks, Robert