Solved Possible Virus, slow computer

[Resolved] Possible Virus, slow computer

Please help if you can, I have been having trouble getting my computer to shut down properly, it is extremely slow and it recently told me my system had recovered from a serious error. Thanks ahead of time for any help that can be given. Attached are all reports from my computer as I was instructed to obtain.


MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000001d

Kernel Drivers (total 193):
0x804D7000 \WINDOWS\system32\ntoskrnl.exe
0x806EF000 \WINDOWS\system32\hal.dll
0xF7B24000 \WINDOWS\system32\KDCOM.DLL
0xF7A34000 \WINDOWS\system32\BOOTVID.dll
0xF75D5000 ACPI.sys
0xF7B26000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF75C4000 pci.sys
0xF7624000 isapnp.sys
0xF7BEC000 pciide.sys
0xF78A4000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF7B28000 aliide.sys
0xF7B2A000 cmdide.sys
0xF7B2C000 toside.sys
0xF7B2E000 viaide.sys
0xF7B30000 intelide.sys
0xF7634000 MountMgr.sys
0xF75A5000 ftdisk.sys
0xF78AC000 PartMgr.sys
0xF7644000 VolSnap.sys
0xF7A38000 cpqarray.sys
0xF758D000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
0xF7575000 atapi.sys
0xF7A3C000 aha154x.sys
0xF78B4000 sparrow.sys
0xF7A40000 symc810.sys
0xF7654000 aic78xx.sys
0xF7A44000 dac960nt.sys
0xF7664000 ql10wnt.sys
0xF7A48000 amsint.sys
0xF78BC000 asc.sys
0xF7A4C000 asc3550.sys
0xF78C4000 mraid35x.sys
0xF78CC000 i2omp.sys
0xF7A50000 ini910u.sys
0xF7674000 ql1240.sys
0xF7684000 aic78u2.sys
0xF78D4000 symc8xx.sys
0xF78DC000 sym_hi.sys
0xF78E4000 sym_u3.sys
0xF78EC000 ABP480N5.SYS
0xF78F4000 asc3350p.sys
0xF7B32000 cd20xrnt.sys
0xF7694000 ultra.sys
0xF755C000 adpu160m.sys
0xF78FC000 dpti2o.sys
0xF76A4000 ql1080.sys
0xF76B4000 ql1280.sys
0xF76C4000 ql12160.sys
0xF7904000 perc2.sys
0xF7B34000 perc2hib.sys
0xF790C000 hpn.sys
0xF7A54000 cbidf2k.sys
0xF7530000 dac2w2k.sys
0xF76D4000 disk.sys
0xF76E4000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF7510000 fltmgr.sys
0xF74FE000 sr.sys
0xF76F4000 Lbd.sys
0xF74E9000 drvmcdb.sys
0xF7914000 PxHelp20.sys
0xF74D2000 KSecDD.sys
0xF7445000 Ntfs.sys
0xF7418000 NDIS.sys
0xF7704000 sisagp.sys
0xF7714000 viaagp.sys
0xF73FE000 Mup.sys
0xF791C000 avgrkx86.sys
0xF7724000 AVGIDSEH.Sys
0xF7734000 agp440.sys
0xF7744000 alim1541.sys
0xF7754000 amdagp.sys
0xF7764000 agpCPQ.sys
0xF735E000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF6B55000 \SystemRoot\system32\DRIVERS\ialmnt5.sys
0xF6B41000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF79DC000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF6B1D000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF79E4000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF6AE9000 \SystemRoot\system32\DRIVERS\HSFHWBS2.sys
0xF6AC6000 \SystemRoot\system32\DRIVERS\ks.sys
0xF69C7000 \SystemRoot\system32\DRIVERS\HSF_DP.sys
0xF6920000 \SystemRoot\system32\DRIVERS\HSF_CNXT.sys
0xF79EC000 \SystemRoot\System32\Drivers\Modem.SYS
0xF7794000 \SystemRoot\system32\DRIVERS\bcm4sbxp.sys
0xF79F4000 \SystemRoot\system32\DRIVERS\fdc.sys
0xF77A4000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF79FC000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF77B4000 \SystemRoot\system32\DRIVERS\serial.sys
0xF7AFC000 \SystemRoot\system32\DRIVERS\serenum.sys
0xF690C000 \SystemRoot\system32\DRIVERS\parport.sys
0xF7B52000 \SystemRoot\system32\drivers\sscdbhk5.sys
0xF77C4000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF77D4000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF77E4000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF687B000 \SystemRoot\system32\drivers\smwdm.sys
0xF6857000 \SystemRoot\system32\drivers\portcls.sys
0xF77F4000 \SystemRoot\system32\drivers\drmk.sys
0xF7B54000 \SystemRoot\system32\drivers\aeaudio.sys
0xF7C65000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF7804000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF7B08000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF6840000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF6CAB000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF6C9B000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF7A04000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF682F000 \SystemRoot\system32\DRIVERS\psched.sys
0xF6C8B000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF7A0C000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF7A14000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF6C7B000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF7A1C000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF7B56000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF67A5000 \SystemRoot\system32\DRIVERS\update.sys
0xF7B18000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF7A24000 \SystemRoot\system32\DRIVERS\omci.sys
0xF6C6B000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF6C4B000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF7B58000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF732A000 \SystemRoot\system32\drivers\MODEMCSA.sys
0xF7A2C000 \SystemRoot\system32\DRIVERS\flpydisk.sys
0xF731A000 \SystemRoot\System32\Drivers\i2omgmt.SYS
0xF7814000 \SystemRoot\system32\DRIVERS\avgmfx86.sys
0xF7B5C000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7C87000 \SystemRoot\System32\Drivers\Null.SYS
0xF7B5E000 \SystemRoot\System32\Drivers\Beep.SYS
0xF793C000 \SystemRoot\system32\drivers\ssrtln.sys
0xF7944000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xF794C000 \SystemRoot\System32\drivers\vga.sys
0xF7B60000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7B62000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF7954000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF795C000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF725A000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xEE5DA000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xEE581000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xEE539000 \SystemRoot\system32\DRIVERS\avgtdix.sys
0xEE513000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xF7824000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xEE4C3000 \SystemRoot\system32\DRIVERS\netbt.sys
0xEE4A1000 \SystemRoot\System32\drivers\afd.sys
0xF7834000 \SystemRoot\system32\DRIVERS\netbios.sys
0xEE476000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xEE406000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF7844000 \SystemRoot\System32\Drivers\Fips.SYS
0xEE3CA000 \SystemRoot\system32\DRIVERS\avgldx86.sys
0xF7AD0000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF7854000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF796C000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF7AD8000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xF7AE0000 \SystemRoot\system32\DRIVERS\usbscan.sys
0xF797C000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xF73EE000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xEE33A000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF7BA6000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xEE3B2000 \SystemRoot\System32\drivers\Dxapi.sys
0xF79AC000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF7D29000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF020000 \SystemRoot\System32\ialmdnt5.dll
0xBF012000 \SystemRoot\System32\ialmrnt5.dll
0xBF03F000 \SystemRoot\System32\ialmdev5.DLL
0xBF06B000 \SystemRoot\System32\ialmdd5.DLL
0xBF148000 \SystemRoot\System32\ATMFD.DLL
0xEE66D000 \SystemRoot\system32\drivers\drvnddm.sys
0xF7C36000 \SystemRoot\system32\dla\tfsndres.sys
0xEE1E4000 \SystemRoot\system32\dla\tfsnifs.sys
0xEE3C2000 \SystemRoot\system32\dla\tfsnopio.sys
0xF7BBE000 \SystemRoot\system32\dla\tfsnpool.sys
0xF79B4000 \SystemRoot\system32\dla\tfsnboio.sys
0xEE65D000 \SystemRoot\system32\dla\tfsncofs.sys
0xF7C37000 \SystemRoot\system32\dla\tfsndrct.sys
0xEE1CB000 \SystemRoot\system32\dla\tfsnudf.sys
0xEE1B2000 \SystemRoot\system32\dla\tfsnudfa.sys
0xF79C4000 \SystemRoot\system32\DRIVERS\AegisP.sys
0xEE124000 \SystemRoot\system32\DRIVERS\nwlnkipx.sys
0xF73CE000 \SystemRoot\system32\DRIVERS\nwlnknb.sys
0xEE20E000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xEE272000 \SystemRoot\system32\DRIVERS\nwlnkspx.sys
0xEDE80000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xEDE1B000 \SystemRoot\system32\drivers\wdmaud.sys
0xEE0D4000 \SystemRoot\system32\drivers\sysaudio.sys
0xEDBE0000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xF7B9E000 \SystemRoot\System32\Drivers\ASCTRM.SYS
0xEDCDD000 \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys
0xEDC2D000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0xEDA98000 \SystemRoot\system32\DRIVERS\srv.sys
0xEDB60000 \SystemRoot\system32\DRIVERS\AVGIDSFilter.Sys
0xED8E0000 \SystemRoot\system32\DRIVERS\AVGIDSDriver.Sys
0xED327000 \SystemRoot\System32\Drivers\HTTP.sys
0xECEA8000 \??\C:\DOCUME~1\Customer\LOCALS~1\Temp\uwlyapow.sys
0xECDAC000 \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
0x7C900000 \WINDOWS\SYSTEM32\ntdll.dll

Processes (total 56):
0 System Idle Process
4 System
540 C:\WINDOWS\SYSTEM32\smss.exe
760 csrss.exe
784 C:\WINDOWS\SYSTEM32\winlogon.exe
832 C:\WINDOWS\SYSTEM32\services.exe
844 C:\WINDOWS\SYSTEM32\lsass.exe
1032 C:\WINDOWS\SYSTEM32\svchost.exe
1108 svchost.exe
1208 C:\WINDOWS\SYSTEM32\svchost.exe
1288 svchost.exe
1460 svchost.exe
1736 C:\WINDOWS\explorer.exe
1748 C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
1816 C:\WINDOWS\SYSTEM32\spoolsv.exe
1332 svchost.exe
1392 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
1248 C:\Program Files\AVG\AVG10\avgwdsvc.exe
1448 C:\Program Files\Bonjour\mDNSResponder.exe
1624 C:\Program Files\Java\jre6\bin\jqs.exe
1896 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
504 C:\WINDOWS\SYSTEM32\svchost.exe
580 C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
1052 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
1196 C:\WINDOWS\SYSTEM32\fxssvc.exe
2624 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
2876 UNSECAPP.EXE
3132 wmiprvse.exe
3168 alg.exe
3380 C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
156 C:\WINDOWS\SYSTEM32\wuauclt.exe
3652 C:\WINDOWS\SYSTEM32\hkcmd.exe
3728 C:\Program Files\Real\RealPlayer\realplay.exe
3636 C:\WINDOWS\SYSTEM32\dla\tfswctrl.exe
2464 C:\Program Files\Common Files\Dell\EUSW\Support.exe
808 C:\Program Files\AVG\AVG10\avgtray.exe
1156 C:\Program Files\HP\HP Software Update\hpwuschd2.exe
4028 C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
200 C:\Program Files\Messenger\msmsgs.exe
444 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
576 C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
356 C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
2344 C:\Documents and Settings\Customer\My Documents\Downloads\i1qem4vk.exe
1584 C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
2732 C:\Program Files\AVG\AVG10\avgemcx.exe
2476 C:\Program Files\AVG\AVG10\avgnsx.exe
2488 C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
3924 C:\PROGRA~1\AVG\AVG10\avgrsx.exe
1656 C:\Program Files\AVG\AVG10\avgcsrvx.exe
668 C:\Program Files\AVG\AVG10\avgui.exe
3664 C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
2620 C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
2268 C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
3004 C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
3944 C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
644 C:\Documents and Settings\Customer\My Documents\Downloads\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`02f10c00 (NTFS)

PhysicalDrive0 Model Number: ST3120026A, Rev: 3.16

Size Device Name MBR Status
--------------------------------------------
108 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: E66C176942DF42CCFE7A0113EAFF39E82F8B0047


Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:



Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6258

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

4/3/2011 3:36:56 PM
mbam-log-2011-04-03 (15-36-56).txt

Scan type: Quick scan
Objects scanned: 144061
Time elapsed: 5 minute(s), 22 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


DDS (Ver_11-03-05.01) - NTFSx86
Run by Customer at 20:55:55.70 on Sun 04/03/2011
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.549 [GMT -5:00]
.
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgchsvx.exe
C:\Program Files\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Customer\My Documents\Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.mycricket.com/
uDefault_Page_URL = hxxp://www.dell4me.com/mywaybiz
mStart Page = hxxp://www.dell4me.com/mywaybiz
uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/mywaybiz
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\5.0.1449.0\npwinext.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
TB: @c:\program files\msn toolbar\platform\5.0.1449.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\5.0.1449.0\npwinext.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
uRun: [Google Update] "c:\documents and settings\customer\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [TomTomHOME.exe] "c:\program files\tomtom home 2\TomTomHOMERunner.exe "
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [IntelMeM] c:\program files\intel\modem event monitor\IntelMEM.exe
mRun: [RealTray] c:\program files\real\realplayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [DwlClient] c:\program files\common files\dell\eusw\Support.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [Bing Bar] "c:\program files\msn toolbar\platform\5.0.1449.0\mswinext.exe "
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1267104411265
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1267104396937
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-3-26 64512]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 251728]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 299984]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-1-6 6128720]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2011-3-25 1405384]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\tomtom home 2\TomTomHOMEService.exe [2011-3-9 92592]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-3 123472]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-3 30288]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-3 26192]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\lavasoft\ad-aware\kernexplorer.sys [2011-3-25 15232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-3-26 136176]
S3 ATMFBUS;A600 USB Composite Device Driver;c:\windows\system32\drivers\ATMFBUS.sys [2010-5-13 47360]
S3 ATMFCVsp;A600 Cricket CM Port;c:\windows\system32\drivers\ATMFCVsp.sys [2010-5-13 153600]
S3 ATMFFLT;A600 USB Modem Installation CD;c:\windows\system32\drivers\ATMFFLT.sys [2010-5-13 13312]
S3 ATMFMdm;A600 Cricket EVDO Modem;c:\windows\system32\drivers\ATMFMdm.sys [2010-5-13 153472]
S3 ATMFNET;A600 Cricket EVDO Network Adapter;c:\windows\system32\drivers\ATMFNET.sys [2010-5-13 103424]
S3 ATMFNVsp;A600 Cricket NMEA Port Serial Port;c:\windows\system32\drivers\ATMFNVsp.sys [2010-5-13 153600]
S3 ATMFVsp;A600 Cricket Diagnostics Port;c:\windows\system32\drivers\ATMFVsp.sys [2010-5-13 153472]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-3-25 517448]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\drivers\wg111v2.sys --> c:\windows\system32\drivers\wg111v2.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 ZD1211BU(Atheros);Atheros ZD1211B IEEE 802.11 Wireless LAN Driver (USB)(Atheros);c:\windows\system32\drivers\zd1211bu.sys --> c:\windows\system32\drivers\zd1211Bu.sys [?]
.
=============== Created Last 30 ================
.
2011-04-03 18:53:35 -------- d-----w- c:\docume~1\customer\applic~1\Malwarebytes
2011-04-03 18:52:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-03 18:52:41 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-04-03 18:52:38 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-03 18:52:38 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-02 23:25:04 -------- d-----w- c:\docume~1\alluse~1\applic~1\TomTom
2011-04-02 23:20:34 -------- d-----w- c:\docume~1\customer\locals~1\applic~1\TomTom
2011-04-02 23:20:34 -------- d-----w- c:\docume~1\customer\applic~1\TomTom
2011-04-02 23:19:24 -------- d-----w- c:\program files\TomTom International B.V
2011-04-02 23:17:07 -------- d-----w- c:\program files\TomTom HOME 2
2011-04-02 13:15:44 -------- d-----w- c:\windows\pss
2011-04-01 22:02:21 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2011-04-01 22:02:21 14592 ----a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-04-01 02:05:04 -------- d-----w- c:\program files\Microsoft
2011-04-01 02:05:01 -------- d-----w- c:\program files\MSN Toolbar
2011-04-01 02:04:36 -------- d-----w- c:\program files\Bing Bar Installer
2011-04-01 02:04:30 -------- d-----w- c:\program files\HP Photo Creations
2011-04-01 02:04:30 -------- d-----w- c:\docume~1\alluse~1\applic~1\HP Photo Creations
2011-04-01 02:04:26 -------- d-----w- c:\windows\Cache
2011-04-01 02:04:23 -------- d-----w- c:\program files\Coupons
2011-04-01 02:04:02 -------- d-----w- c:\docume~1\customer\applic~1\HpUpdate
2011-04-01 02:03:21 273256 ------w- c:\windows\system32\HPDiscoPM9311.dll
2011-04-01 02:03:16 1907560 ----a-w- c:\windows\system32\HPScanMiniDrv_DJ3050_J610.dll
2011-04-01 02:03:09 264552 ----a-w- c:\windows\system32\hpinksts9311LM.dll
2011-04-01 02:03:09 213352 ----a-w- c:\windows\system32\hpinkcoi9311.dll
2011-04-01 02:03:08 232296 ----a-w- c:\windows\system32\hpinksts9311.dll
2011-04-01 02:02:12 -------- d-----w- c:\program files\HP
2011-04-01 02:01:33 -------- d-----w- c:\docume~1\customer\locals~1\applic~1\HP
2011-03-26 06:12:54 64512 ----a-w- c:\windows\system32\drivers\Lbd.sys
2011-03-26 06:12:44 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-03-26 06:09:59 -------- d-----w- c:\docume~1\customer\locals~1\applic~1\Sunbelt Software
2011-03-26 06:04:58 -------- dc-h--w- c:\docume~1\alluse~1\applic~1\{8790345A-AF70-4319-B9E7-AAA25C6DCD42}
2011-03-26 06:04:12 -------- d-----w- c:\program files\Lavasoft
2011-03-26 04:12:50 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-03-26 04:12:50 -------- d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2011-03-26 04:01:45 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVG Security Toolbar
2011-03-26 04:00:11 -------- d-----w- c:\windows\system32\drivers\AVG
2011-03-23 02:14:18 -------- d-----w- c:\docume~1\customer\applic~1\AVG10
2011-03-23 02:12:27 -------- d--h--w- c:\docume~1\alluse~1\applic~1\Common Files
2011-03-23 02:10:26 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVG10
2011-03-23 02:09:38 -------- d-----w- c:\program files\AVG
2011-03-23 01:42:24 -------- d-----w- c:\docume~1\alluse~1\applic~1\MFAData
.
==================== Find3M ====================
.
2011-02-09 13:53:52 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53:52 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-02 07:58:35 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57:06 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44:37 439296 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09:02 290048 ----a-w- c:\windows\system32\atmfd.dll
.
============= FINISH: 20:57:11.35 ===============



attach.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 2/25/2010 7:20:57 AM
System Uptime: 4/3/2011 3:48:30 PM (5 hours ago)
.
Motherboard: Dell Computer Corp. | | 0C2425
Processor: Intel(R) Celeron(R) CPU 2.40GHz | Microprocessor | 2392/400mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 34 GiB total, 16.087 GiB free.
D: is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID:
Description:
Device ID: ROOT\MS_PSCHEDMP\0002
Manufacturer:
Name:
PNP Device ID: ROOT\MS_PSCHEDMP\0002
Service:
.
==== System Restore Points ===================
.
RP352: 2/11/2011 3:38:37 AM - System Checkpoint
RP353: 2/12/2011 3:56:07 AM - System Checkpoint
RP354: 2/13/2011 3:05:14 PM - System Checkpoint
RP355: 2/14/2011 3:22:55 PM - System Checkpoint
RP356: 2/15/2011 3:27:40 PM - System Checkpoint
RP357: 2/16/2011 3:34:58 PM - System Checkpoint
RP358: 2/17/2011 4:18:40 PM - System Checkpoint
RP359: 2/18/2011 5:06:56 PM - System Checkpoint
RP360: 2/19/2011 5:59:25 PM - System Checkpoint
RP361: 2/20/2011 6:55:52 PM - System Checkpoint
RP362: 2/21/2011 7:47:57 PM - System Checkpoint
RP363: 2/22/2011 8:47:13 PM - System Checkpoint
RP364: 2/23/2011 8:54:23 PM - System Checkpoint
RP365: 2/24/2011 9:31:06 PM - System Checkpoint
RP366: 2/25/2011 10:25:27 PM - System Checkpoint
RP367: 2/26/2011 11:24:21 PM - System Checkpoint
RP368: 2/28/2011 8:25:24 AM - System Checkpoint
RP369: 2/28/2011 6:22:56 PM - Removed iTunes
RP370: 2/28/2011 6:29:42 PM - Software Distribution Service 3.0
RP371: 3/1/2011 11:28:43 PM - System Checkpoint
RP372: 3/3/2011 12:09:52 AM - System Checkpoint
RP373: 3/4/2011 1:06:33 AM - System Checkpoint
RP374: 3/5/2011 1:33:24 AM - System Checkpoint
RP375: 3/6/2011 1:58:52 AM - System Checkpoint
RP376: 3/7/2011 2:02:23 AM - System Checkpoint
RP377: 3/8/2011 4:46:07 AM - System Checkpoint
RP378: 3/9/2011 5:03:33 AM - System Checkpoint
RP379: 3/9/2011 6:14:15 AM - Software Distribution Service 3.0
RP380: 3/10/2011 7:11:03 PM - System Checkpoint
RP381: 3/11/2011 7:47:00 PM - System Checkpoint
RP382: 3/12/2011 9:19:41 PM - System Checkpoint
RP383: 3/13/2011 11:04:09 PM - System Checkpoint
RP384: 3/14/2011 11:13:10 PM - System Checkpoint
RP385: 3/15/2011 11:27:16 PM - System Checkpoint
RP386: 3/16/2011 3:00:15 AM - Software Distribution Service 3.0
RP387: 3/17/2011 3:19:54 AM - System Checkpoint
RP388: 3/18/2011 4:19:53 AM - System Checkpoint
RP389: 3/19/2011 5:18:49 AM - System Checkpoint
RP390: 3/20/2011 6:18:49 AM - System Checkpoint
RP391: 3/22/2011 9:09:22 PM - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
RP392: 3/22/2011 9:09:37 PM - Installed AVG 2011
RP393: 3/22/2011 9:10:12 PM - Installed AVG 2011
RP394: 3/23/2011 9:29:39 PM - System Checkpoint
RP395: 3/24/2011 6:23:03 AM - Software Distribution Service 3.0
RP396: 3/25/2011 7:51:09 AM - System Checkpoint
RP397: 3/25/2011 9:44:49 PM - Removed AVG 2011
RP398: 3/25/2011 9:46:02 PM - Removed AVG 2011
RP399: 3/25/2011 10:59:15 PM - Installed AVG 2011
RP400: 3/25/2011 11:00:00 PM - Installed AVG 2011
RP401: 3/26/2011 11:32:47 PM - System Checkpoint
RP402: 3/28/2011 12:32:46 AM - System Checkpoint
RP403: 3/29/2011 1:46:39 AM - System Checkpoint
RP404: 3/30/2011 2:10:11 AM - System Checkpoint
RP405: 3/31/2011 3:09:12 AM - System Checkpoint
RP406: 4/1/2011 4:07:02 AM - System Checkpoint
RP407: 4/1/2011 11:52:28 PM - Software Distribution Service 3.0
RP408: 4/1/2011 11:59:31 PM - Software Distribution Service 3.0
RP409: 4/2/2011 3:00:16 AM - Software Distribution Service 3.0
RP410: 4/3/2011 3:00:19 AM - Software Distribution Service 3.0
.
==== Installed Programs ======================
.
Ad-Aware
Adobe Flash Player 10 Plugin
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG 2011
Banctec Service Agreement
Bing Bar
Bing Bar Platform
Bonjour
Broadcom Management Programs
Conexant D850 56K V.9x DFVc Modem
Coupon Printer for Windows
Cricket Broadband 1.0
Cricket EVDO Modem
Dell Digital Jukebox Driver
Dell Driver Reset Tool
Dell Networking Guide
Dell Support
FrostWire 4.21.3
Google Chrome
Google Earth
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Deskjet 3050 J610 series Basic Device Software
HP Deskjet 3050 J610 series Help
HP Deskjet 3050 J610 series Product Improvement Study
HP Photo Creations
HP Update
Intel(R) 537EP V9x DF PCI Modem
Intel(R) Extreme Graphics Driver
Internet Explorer Default Page
Jasc Paint Shop Photo Album
Jasc Paint Shop Pro 8 Dell Edition
Java(TM) 6 Update 18
Learn2 Player (Uninstall Only)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Default Manager
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Modem Event Monitor
Modem Helper
Modem On Hold
QuickTime
RealPlayer Basic
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2183461)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360131)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2416400)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2482017)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982381)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Sonic DLA
Sonic RecordNow!
Sonic Update Manager
Spybot - Search & Destroy
TomTom HOME 2.8.1.2218
TomTom HOME Visual Studio Merge Modules
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update for Windows XP (KB978207)
Update for Windows XP (KB980182)
Viewpoint Media Player
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Live ID Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WordPerfect Office 12
.
==== Event Viewer Messages From Past Week ========
.
4/3/2011 4:42:13 PM, error: System Error [1003] - Error code 100000d1, parameter1 f7044d9c, parameter2 00000002, parameter3 00000001, parameter4 f794682f.
4/3/2011 12:10:39 PM, error: Service Control Manager [7034] - The TomTomHOMEService service terminated unexpectedly. It has done this 1 time(s).
4/3/2011 12:10:39 PM, error: Service Control Manager [7034] - The SeaPort service terminated unexpectedly. It has done this 1 time(s).
4/3/2011 12:10:39 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
4/3/2011 12:10:39 PM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
4/3/2011 12:10:39 PM, error: Service Control Manager [7031] - The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
4/3/2011 12:10:39 PM, error: Service Control Manager [7031] - The Lavasoft Ad-Aware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
4/3/2011 12:10:39 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/1/2011 11:52:52 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Bing Bar 7.0 (KB2505591).
3/30/2011 9:12:57 PM, error: Print [6161] - The document Windows Live Hotmail Print Message owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 196544. Number of bytes printed: 196544. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/30/2011 11:52:28 PM, error: Print [6161] - The document Why does my printer say - FixYa owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 1103161. Number of bytes printed: 1103161. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/30/2011 10:14:18 PM, error: Print [6161] - The document Windows Live Hotmail Print Message owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 730833. Number of bytes printed: 730833. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/30/2011 10:00:15 PM, error: Print [6161] - The document Windows Live Hotmail Print Message owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 173692. Number of bytes printed: 173692. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 11:06:48 PM, error: Service Control Manager [7000] - The ZDPSp50 NDIS Protocol Driver service failed to start due to the following error: The system cannot find the file specified.
3/29/2011 11:04:41 PM, error: Print [6161] - The document free dumpsite for your tear out, fill material owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 514440. Number of bytes printed: 514440. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 11:03:18 PM, error: Print [6161] - The document mkMSITStore:C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\dlcxhe owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 447546. Number of bytes printed: 447546. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:53:40 PM, error: Print [6161] - The document Test Page owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 1042776. Number of bytes printed: 1042776. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:47:04 PM, error: Print [6161] - The document Need Carpet Installer - Carpet Layer- Labor and Materials owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 544060. Number of bytes printed: 544060. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:46:58 PM, error: Print [6161] - The document Cricket Wireless | Cell Phones, Cellular Phone Plans, Mobile Broadband owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 1605004. Number of bytes printed: 1605004. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:41:35 PM, error: Print [6161] - The document Cricket Wireless | Cell Phones, Cellular Phone Plans, Mobile Broadband owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 1611230. Number of bytes printed: 1611230. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:41:30 PM, error: Print [6161] - The document Cricket Wireless | Cell Phones, Cellular Phone Plans, Mobile Broadband owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 1689050. Number of bytes printed: 1689050. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:35:23 PM, error: Print [6161] - The document Cricket Wireless | Cell Phones, Cellular Phone Plans, Mobile Broadband owned by Customer failed to print on printer Dell Photo AIO Printer 926. Data type: LEMF. Size of the spool file in bytes: 1578576. Number of bytes printed: 1578576. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:13:52 PM, error: Print [6161] - The document Windows Live Hotmail Print Message owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 756660. Number of bytes printed: 756660. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/29/2011 10:08:17 PM, error: Print [6161] - The document Windows Live Hotmail Print Message owned by Customer failed to print on printer Dell Photo AIO Printer 926 (Copy 1). Data type: LEMF. Size of the spool file in bytes: 715868. Number of bytes printed: 715868. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\D3H37361. Win32 error code returned by the print processor: 0 (0x0).
3/27/2011 11:37:21 AM, error: Dhcp [1002] - The IP address lease 71.14.91.20 for the Network Card with network address 000D5618A300 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================

 

ComboFix report

I have followed all instructions that you posted in your reply to me. ComboFix has been run and attached is the report: Please advise and thank you again!



ComboFix 11-04-05.02 - Customer 04/05/2011 21:03:22.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.687 [GMT -5:00]
Running from: c:\documents and settings\Customer\My Documents\Downloads\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\fad.sys
.
.
((((((((((((((((((((((((( Files Created from 2011-03-06 to 2011-04-06 )))))))))))))))))))))))))))))))
.
.
2011-04-03 18:53 . 2011-04-03 18:53 -------- d-----w- c:\documents and settings\Customer\Application Data\Malwarebytes
2011-04-03 18:52 . 2010-12-20 23:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-03 18:52 . 2011-04-03 18:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-04-03 18:52 . 2011-04-03 20:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-03 18:52 . 2010-12-20 23:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-02 23:25 . 2011-04-02 23:25 -------- d-----w- c:\documents and settings\All Users\Application Data\TomTom
2011-04-02 23:20 . 2011-04-02 23:20 -------- d-----w- c:\documents and settings\Customer\Local Settings\Application Data\TomTom
2011-04-02 23:20 . 2011-04-02 23:20 -------- d-----w- c:\documents and settings\Customer\Application Data\TomTom
2011-04-02 23:19 . 2011-04-02 23:19 -------- d-----w- c:\program files\TomTom International B.V
2011-04-02 23:17 . 2011-04-02 23:17 -------- d-----w- c:\program files\TomTom HOME 2
2011-04-01 22:02 . 2008-04-13 17:39 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2011-04-01 22:02 . 2008-04-13 17:39 14592 ----a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-04-01 02:05 . 2011-04-01 02:05 -------- d-----w- c:\program files\Microsoft
2011-04-01 02:05 . 2011-04-01 02:05 -------- d-----w- c:\program files\MSN Toolbar
2011-04-01 02:01 . 2011-04-01 02:01 -------- d-----w- c:\documents and settings\Customer\Local Settings\Application Data\HP
2011-03-30 04:06 . 2011-03-30 04:06 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2011-03-27 01:26 . 2011-03-27 01:26 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2011-03-27 01:26 . 2011-03-27 01:30 -------- d-----w- c:\program files\Google
2011-03-26 06:12 . 2011-03-26 06:12 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-03-26 06:09 . 2011-03-26 06:09 -------- d-----w- c:\documents and settings\Customer\Local Settings\Application Data\Sunbelt Software
2011-03-26 06:04 . 2011-04-05 23:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2011-03-26 04:12 . 2011-03-26 05:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2011-03-26 04:12 . 2011-03-26 04:13 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-03-23 02:14 . 2011-03-23 02:14 -------- d-----w- c:\documents and settings\Customer\Application Data\AVG10
2011-03-23 02:12 . 2011-03-23 02:12 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files
2011-03-23 02:10 . 2011-04-06 01:29 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG10
2011-03-23 02:09 . 2011-03-23 02:09 -------- d-----w- c:\program files\AVG
2011-03-23 01:42 . 2011-03-26 03:56 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-09 13:53 . 2004-08-04 11:00 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2004-08-04 11:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-02 07:58 . 2004-08-04 11:00 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57 . 2004-08-04 11:00 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2004-08-04 11:00 439296 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2004-08-04 11:00 290048 ----a-w- c:\windows\system32\atmfd.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update "= "c:\documents and settings\Customer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2010-03-02 135664]
"TomTomHOME.exe "= "c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2011-03-09 247728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray "= "c:\windows\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2005-10-19 126976]
"IntelMeM "= "c:\program files\Intel\Modem Event Monitor\IntelMEM.exe" [2003-09-04 221184]
"RealTray "= "c:\program files\Real\RealPlayer\RealPlay.exe" [2004-11-12 26112]
"UpdateManager "= "c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2004-01-07 110592]
"dla "= "c:\windows\system32\dla\tfswctrl.exe" [2004-08-13 122939]
"DwlClient "= "c:\program files\Common Files\Dell\EUSW\Support.exe" [2004-05-28 323584]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"HP Software Update "= "c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"Bing Bar "= "c:\program files\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe" [2010-04-27 243544]
"Microsoft Default Manager "= "c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-11-11 288088]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer "=c:\program files\Spybot - Search & Destroy\TeaTimer.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"%windir%\\Network Diagnostic\\xpnetdiag.exe "=
.
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [3/9/2011 7:30 AM 92592]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [3/26/2011 8:26 PM 136176]
S3 ATMFBUS;A600 USB Composite Device Driver;c:\windows\SYSTEM32\DRIVERS\ATMFBUS.sys [5/13/2010 7:36 PM 47360]
S3 ATMFCVsp;A600 Cricket CM Port;c:\windows\SYSTEM32\DRIVERS\ATMFCVsp.sys [5/13/2010 7:36 PM 153600]
S3 ATMFFLT;A600 USB Modem Installation CD;c:\windows\SYSTEM32\DRIVERS\ATMFFLT.sys [5/13/2010 7:36 PM 13312]
S3 ATMFMdm;A600 Cricket EVDO Modem;c:\windows\SYSTEM32\DRIVERS\ATMFMdm.sys [5/13/2010 7:36 PM 153472]
S3 ATMFNET;A600 Cricket EVDO Network Adapter;c:\windows\SYSTEM32\DRIVERS\ATMFNET.sys [5/13/2010 7:36 PM 103424]
S3 ATMFNVsp;A600 Cricket NMEA Port Serial Port;c:\windows\SYSTEM32\DRIVERS\ATMFNVsp.sys [5/13/2010 7:36 PM 153600]
S3 ATMFVsp;A600 Cricket Diagnostics Port;c:\windows\SYSTEM32\DRIVERS\ATMFVsp.sys [5/13/2010 7:36 PM 153472]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\DRIVERS\wg111v2.sys --> c:\windows\system32\DRIVERS\wg111v2.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S3 ZD1211BU(Atheros);Atheros ZD1211B IEEE 802.11 Wireless LAN Driver (USB)(Atheros);c:\windows\system32\DRIVERS\zd1211Bu.sys --> c:\windows\system32\DRIVERS\zd1211Bu.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 16:50]
.
2011-04-05 c:\windows\Tasks\At1.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-06-14 21:07]
.
2011-04-06 c:\windows\Tasks\At2.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-06-14 21:07]
.
2011-04-05 c:\windows\Tasks\At3.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-06-14 21:07]
.
2011-04-05 c:\windows\Tasks\At4.job
- c:\program files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2010-06-14 21:07]
.
2011-04-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-27 01:26]
.
2011-04-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-27 01:26]
.
2011-04-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4132779238-765217113-32525424-1006Core.job
- c:\documents and settings\Customer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 00:41]
.
2011-04-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4132779238-765217113-32525424-1006UA.job
- c:\documents and settings\Customer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 00:41]
.
2010-02-25 c:\windows\Tasks\ISP signup reminder 1.job
- c:\windows\system32\OOBE\OOBEBALN.EXE [2004-08-04 00:12]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.mycricket.com/
mStart Page = hxxp://www.dell4me.com/mywaybiz
uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/mywaybiz
uInternet Settings,ProxyOverride = *.local
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-05 21:08
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DwlClient = c:\program files\Common Files\Dell\EUSW\Support.exe?l?e?s?\?D?e?l?l?\?E?U?S?W?\?S?u?p?p?o?r?t?.?e?x?e??????? ???????????????X:??????????????????x????????:??x???????? ??????????x???? ??x???x???????(??????|????????x???????????????4???????x???????????x??????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2011-04-05 21:10:32
ComboFix-quarantined-files.txt 2011-04-06 02:10
.
Pre-Run: 17,992,753,152 bytes free
Post-Run: 17,957,236,736 bytes free
.
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug= "do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS= "Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 0B09311D8251C22FF75DF1F36AA0B23C

 

Okay, copy/pasted the CFScript into notepad and drug it over to Combofix. Ran Combofix and have copied the results below. I would like to tell you that the computer is running slow and freezing up a little here and there.Last evening when I ran Combofix the 1st time I had to uninstall AVG AV when I went to redownload I noticed the free version really does not cover me for anything but internet browsing so I purchased Vipre AV and uninstalled Spy Bot and did not re-download AVG. I figured that was okay seeing as how instructions said it was okay to re-install AVG and both Vipre and AVG are Anti-Virus programs. Please advise, thanks so much!




ComboFix 11-04-06.01 - Customer 04/06/2011 19:29:49.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.649 [GMT -5:00]
Running from: c:\documents and settings\Customer\My Documents\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\Customer\Desktop\CFScript.txt
AV: Sunbelt VIPRE *Disabled/Updated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
FW: Sunbelt VIPRE *Disabled* {FF1CD5B7-1553-4625-A258-1775385CED33}
.
FILE ::
"c:\windows\Tasks\At1.job "
"c:\windows\Tasks\At2.job "
"c:\windows\Tasks\At3.job "
"c:\windows\Tasks\At4.job "
"c:\windows\Tasks\ISP signup reminder 1.job "
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Tasks\At1.job
c:\windows\Tasks\At2.job
c:\windows\Tasks\At3.job
c:\windows\Tasks\At4.job
c:\windows\Tasks\ISP signup reminder 1.job
.
.
((((((((((((((((((((((((( Files Created from 2011-03-07 to 2011-04-07 )))))))))))))))))))))))))))))))
.
.
2011-04-06 04:15 . 2010-06-14 19:54 69976 ----a-w- c:\windows\system32\drivers\sbapifs.sys
2011-04-06 04:15 . 2010-06-14 19:54 21464 ----a-w- c:\windows\system32\drivers\sbaphd.sys
2011-04-06 04:05 . 2011-04-06 04:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Sunbelt
2011-04-06 04:05 . 2011-04-06 04:05 -------- d-----w- c:\documents and settings\Customer\Application Data\Sunbelt
2011-04-06 04:03 . 2010-07-27 09:48 94040 ----a-w- c:\windows\system32\drivers\sbhips.sys
2011-04-06 04:03 . 2010-07-27 09:48 212568 ----a-w- c:\windows\system32\drivers\sbtis.sys
2011-04-06 04:03 . 2010-07-27 09:48 331992 ----a-w- c:\windows\system32\drivers\SbFw.sys
2011-04-06 04:03 . 2010-04-15 23:35 68696 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2011-04-06 04:03 . 2011-04-06 04:03 -------- d-----w- c:\program files\Sunbelt Software
2011-04-03 18:53 . 2011-04-03 18:53 -------- d-----w- c:\documents and settings\Customer\Application Data\Malwarebytes
2011-04-03 18:52 . 2010-12-20 23:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-04-03 18:52 . 2011-04-03 18:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-04-03 18:52 . 2011-04-03 20:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-04-03 18:52 . 2010-12-20 23:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-02 23:25 . 2011-04-02 23:25 -------- d-----w- c:\documents and settings\All Users\Application Data\TomTom
2011-04-02 23:20 . 2011-04-02 23:20 -------- d-----w- c:\documents and settings\Customer\Local Settings\Application Data\TomTom
2011-04-02 23:20 . 2011-04-02 23:20 -------- d-----w- c:\documents and settings\Customer\Application Data\TomTom
2011-04-02 23:19 . 2011-04-02 23:19 -------- d-----w- c:\program files\TomTom International B.V
2011-04-02 23:17 . 2011-04-02 23:17 -------- d-----w- c:\program files\TomTom HOME 2
2011-04-01 22:02 . 2008-04-13 17:39 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2011-04-01 22:02 . 2008-04-13 17:39 14592 ----a-w- c:\windows\system32\dllcache\kbdhid.sys
2011-04-01 02:05 . 2011-04-01 02:05 -------- d-----w- c:\program files\Microsoft
2011-04-01 02:05 . 2011-04-01 02:05 -------- d-----w- c:\program files\MSN Toolbar
2011-04-01 02:01 . 2011-04-01 02:01 -------- d-----w- c:\documents and settings\Customer\Local Settings\Application Data\HP
2011-03-30 04:06 . 2011-03-30 04:06 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2011-03-27 01:26 . 2011-03-27 01:26 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2011-03-27 01:26 . 2011-03-27 01:30 -------- d-----w- c:\program files\Google
2011-03-26 06:12 . 2011-03-26 06:12 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-03-26 06:09 . 2011-03-26 06:09 -------- d-----w- c:\documents and settings\Customer\Local Settings\Application Data\Sunbelt Software
2011-03-26 06:04 . 2011-04-05 23:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2011-03-26 04:12 . 2011-04-06 04:01 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-03-26 04:12 . 2011-04-06 04:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2011-03-23 02:14 . 2011-03-23 02:14 -------- d-----w- c:\documents and settings\Customer\Application Data\AVG10
2011-03-23 02:12 . 2011-03-23 02:12 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files
2011-03-23 02:10 . 2011-04-06 01:29 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG10
2011-03-23 02:09 . 2011-03-23 02:09 -------- d-----w- c:\program files\AVG
2011-03-23 01:42 . 2011-03-26 03:56 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-09 13:53 . 2004-08-04 11:00 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2004-08-04 11:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-02 07:58 . 2004-08-04 11:00 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57 . 2004-08-04 11:00 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44 . 2004-08-04 11:00 439296 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2004-08-04 11:00 290048 ----a-w- c:\windows\system32\atmfd.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-06_02.08.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-04-06 22:38 . 2011-04-06 22:38 16384 c:\windows\Temp\Perflib_Perfdata_760.dat
+ 2010-08-20 14:18 . 2010-08-20 14:18 27984 c:\windows\SYSTEM32\sbbd.exe
+ 2003-04-18 21:29 . 2003-04-18 21:29 82432 c:\windows\SYSTEM32\msxml4r.dll
+ 2011-04-06 04:03 . 2011-04-06 04:03 71032 c:\windows\Installer\{2305B203-951F-4D88-B366-6E86F524390D}\NewShortcut21_339C927BB4B547F9804FDF51F01D2D57.exe
+ 2011-04-06 04:03 . 2011-04-06 04:03 71040 c:\windows\Installer\{2305B203-951F-4D88-B366-6E86F524390D}\NewShortcut2_339C927BB4B547F9804FDF51F01D2D57.exe
+ 2010-04-08 15:53 . 2010-04-08 15:53 634560 c:\windows\SYSTEM32\XceedZip.dll
+ 2011-04-06 04:03 . 2011-04-06 04:03 345472 c:\windows\Installer\{2305B203-951F-4D88-B366-6E86F524390D}\ARPPRODUCTICON.exe
+ 2003-04-18 21:46 . 2003-04-18 21:46 1233920 c:\windows\SYSTEM32\msxml4.dll
+ 2011-04-06 04:03 . 2011-04-06 04:03 3467264 c:\windows\Installer\75cdc9.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update "= "c:\documents and settings\Customer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2010-03-02 135664]
"TomTomHOME.exe "= "c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2011-03-09 247728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray "= "c:\windows\system32\igfxtray.exe" [2005-10-19 155648]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2005-10-19 126976]
"IntelMeM "= "c:\program files\Intel\Modem Event Monitor\IntelMEM.exe" [2003-09-04 221184]
"RealTray "= "c:\program files\Real\RealPlayer\RealPlay.exe" [2004-11-12 26112]
"UpdateManager "= "c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2004-01-07 110592]
"dla "= "c:\windows\system32\dla\tfswctrl.exe" [2004-08-13 122939]
"DwlClient "= "c:\program files\Common Files\Dell\EUSW\Support.exe" [2004-05-28 323584]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"HP Software Update "= "c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"Bing Bar "= "c:\program files\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe" [2010-04-27 243544]
"Microsoft Default Manager "= "c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-11-11 288088]
"SBAMTray "= "c:\program files\Sunbelt Software\VIPRE\SBAMTray.exe" [2010-08-20 1348944]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@= "Service "
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBPIMSvc]
@= "Service "
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall "= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe "=
"%windir%\\Network Diagnostic\\xpnetdiag.exe "=
.
R1 sbaphd;sbaphd;c:\windows\SYSTEM32\DRIVERS\sbaphd.sys [4/5/2011 11:15 PM 21464]
R1 SbFw;SbFw;c:\windows\SYSTEM32\DRIVERS\SbFw.sys [4/5/2011 11:03 PM 331992]
R1 SBRE;SBRE;c:\windows\SYSTEM32\DRIVERS\SBREDrv.sys [3/26/2011 1:12 AM 98392]
R1 SbTis;SbTis;c:\windows\SYSTEM32\DRIVERS\sbtis.sys [4/5/2011 11:03 PM 212568]
R2 SBAMSvc;VIPRE Antivirus Premium;c:\program files\Sunbelt Software\VIPRE\SBAMSvc.exe [8/20/2010 9:16 AM 2763080]
R2 sbapifs;sbapifs;c:\windows\SYSTEM32\DRIVERS\sbapifs.sys [4/5/2011 11:15 PM 69976]
R2 SBPIMSvc;SB Recovery Service;c:\program files\Sunbelt Software\VIPRE\SBPIMSvc.exe [8/20/2010 9:15 AM 181584]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [3/9/2011 7:30 AM 92592]
R3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\SYSTEM32\DRIVERS\SbFwIm.sys [4/5/2011 11:03 PM 68696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 1:16 PM 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [3/26/2011 8:26 PM 136176]
S3 ATMFBUS;A600 USB Composite Device Driver;c:\windows\SYSTEM32\DRIVERS\ATMFBUS.sys [5/13/2010 7:36 PM 47360]
S3 ATMFCVsp;A600 Cricket CM Port;c:\windows\SYSTEM32\DRIVERS\ATMFCVsp.sys [5/13/2010 7:36 PM 153600]
S3 ATMFFLT;A600 USB Modem Installation CD;c:\windows\SYSTEM32\DRIVERS\ATMFFLT.sys [5/13/2010 7:36 PM 13312]
S3 ATMFMdm;A600 Cricket EVDO Modem;c:\windows\SYSTEM32\DRIVERS\ATMFMdm.sys [5/13/2010 7:36 PM 153472]
S3 ATMFNET;A600 Cricket EVDO Network Adapter;c:\windows\SYSTEM32\DRIVERS\ATMFNET.sys [5/13/2010 7:36 PM 103424]
S3 ATMFNVsp;A600 Cricket NMEA Port Serial Port;c:\windows\SYSTEM32\DRIVERS\ATMFNVsp.sys [5/13/2010 7:36 PM 153600]
S3 ATMFVsp;A600 Cricket Diagnostics Port;c:\windows\SYSTEM32\DRIVERS\ATMFVsp.sys [5/13/2010 7:36 PM 153472]
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\DRIVERS\wg111v2.sys --> c:\windows\system32\DRIVERS\wg111v2.sys [?]
S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\SYSTEM32\DRIVERS\SbFwIm.sys [4/5/2011 11:03 PM 68696]
S3 sbhips;sbhips;c:\windows\SYSTEM32\DRIVERS\sbhips.sys [4/5/2011 11:03 PM 94040]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 1:16 PM 753504]
S3 ZD1211BU(Atheros);Atheros ZD1211B IEEE 802.11 Wireless LAN Driver (USB)(Atheros);c:\windows\system32\DRIVERS\zd1211Bu.sys --> c:\windows\system32\DRIVERS\zd1211Bu.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 16:50]
.
2011-04-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-27 01:26]
.
2011-04-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-27 01:26]
.
2011-04-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4132779238-765217113-32525424-1006Core.job
- c:\documents and settings\Customer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 00:41]
.
2011-04-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4132779238-765217113-32525424-1006UA.job
- c:\documents and settings\Customer\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 00:41]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.mycricket.com/
mStart Page = hxxp://www.dell4me.com/mywaybiz
uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/mywaybiz
uInternet Settings,ProxyOverride = *.local
.
- - - - ORPHANS REMOVED - - - -
.
BHO-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-06 19:35
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DwlClient = c:\program files\Common Files\Dell\EUSW\Support.exe?l?e?s?\?D?e?l?l?\?E?U?S?W?\?S?u?p?p?o?r?t?.?e?x?e??????? ???????????????X:??????????????????x????????:??x???????? ??????????x???? ??x???x???????(??????|????????x???????????????4???????x???????????x??????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2011-04-06 19:37:35
ComboFix-quarantined-files.txt 2011-04-07 00:37
ComboFix2.txt 2011-04-06 02:35
.
Pre-Run: 17,753,808,896 bytes free
Post-Run: 17,743,618,048 bytes free
.
- - End Of File - - 659B9D5BCAC4738640D647A09671E4F2

 

Okay, I followed your instructions for OTL, enclosed are the requested logs. I am Having to post the 2 logs in separate posts due to too many characters. So this post has the OTL.txt


OTL logfile created on: 4/7/2011 8:19:36 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Customer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 583.00 Mb Available Physical Memory | 57.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 33.70 Gb Total Space | 16.45 Gb Free Space | 48.81% Space Free | Partition Type: NTFS

Computer Name: D3H37361 | User Name: Customer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/04/07 20:17:09 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Customer\Desktop\OTL (1).exe
PRC - [2011/03/23 12:49:21 | 001,004,088 | ---- | M] (Google Inc.) -- C:\Documents and Settings\Customer\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2011/03/09 07:30:08 | 000,247,728 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2011/03/09 07:30:08 | 000,092,592 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2010/08/20 09:33:18 | 001,348,944 | ---- | M] (Sunbelt Software) -- C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe
PRC - [2010/08/20 09:16:34 | 002,763,080 | ---- | M] (Sunbelt Software) -- C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe
PRC - [2010/08/20 09:15:54 | 000,181,584 | ---- | M] (Sunbelt Software) -- C:\Program Files\Sunbelt Software\VIPRE\SBPIMSvc.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004/11/11 22:12:32 | 000,026,112 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\realplay.exe
PRC - [2004/05/27 21:05:42 | 000,323,584 | ---- | M] (Dell) -- C:\Program Files\Common Files\Dell\EUSW\Support.exe


========== Modules (SafeList) ==========

MOD - [2011/04/07 20:17:09 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Customer\Desktop\OTL (1).exe
MOD - [2010/08/23 11:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010/03/11 16:39:58 | 000,110,592 | ---- | M] (Nektra S.A.) -- C:\Program Files\Sunbelt Software\VIPRE\oehook.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011/03/09 07:30:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2010/08/20 09:16:34 | 002,763,080 | ---- | M] (Sunbelt Software) [Auto | Running] -- C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe -- (SBAMSvc)
SRV - [2010/08/20 09:15:54 | 000,181,584 | ---- | M] (Sunbelt Software) [Auto | Running] -- C:\Program Files\Sunbelt Software\VIPRE\SBPIMSvc.exe -- (SBPIMSvc)


========== Driver Services (SafeList) ==========

DRV - [2011/03/26 01:12:44 | 000,098,392 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\SBREDrv.sys -- (SBRE)
DRV - [2010/07/27 04:48:30 | 000,331,992 | ---- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\SbFw.sys -- (SbFw)
DRV - [2010/07/27 04:48:30 | 000,212,568 | ---- | M] (Sunbelt Software, Inc.) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\sbtis.sys -- (SbTis)
DRV - [2010/07/27 04:48:30 | 000,094,040 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\sbhips.sys -- (sbhips)
DRV - [2010/06/14 14:54:30 | 000,069,976 | ---- | M] (Sunbelt Software) [File_System | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\sbapifs.sys -- (sbapifs)
DRV - [2010/06/14 14:54:30 | 000,021,464 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\sbaphd.sys -- (sbaphd)
DRV - [2010/04/15 18:35:02 | 000,068,696 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\SbFwIm.sys -- (SBFWIMCLMP)
DRV - [2010/04/15 18:35:02 | 000,068,696 | ---- | M] (Sunbelt Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\SbFwIm.sys -- (SBFWIMCL)
DRV - [2009/10/01 05:51:08 | 000,153,600 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFNVsp.sys -- (ATMFNVsp)
DRV - [2009/10/01 05:51:08 | 000,153,600 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFCVsp.sys -- (ATMFCVsp)
DRV - [2009/10/01 05:51:08 | 000,153,472 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFVsp.sys -- (ATMFVsp)
DRV - [2009/10/01 05:51:08 | 000,153,472 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFMdm.sys -- (ATMFMdm)
DRV - [2009/10/01 05:51:08 | 000,103,424 | ---- | M] (DEVGURU Co., LTD.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFNET.sys -- (ATMFNET)
DRV - [2009/10/01 05:51:08 | 000,047,360 | ---- | M] (DEVGURU Co., LTD.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFBUS.sys -- (ATMFBUS)
DRV - [2009/10/01 05:51:08 | 000,013,312 | ---- | M] (DEVGURU Co., LTD.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ATMFFLT.sys -- (ATMFFLT)
DRV - [2008/04/13 13:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2004/11/11 22:12:37 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM)
DRV - [2004/08/04 06:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKNB.SYS -- (NwlnkNb)
DRV - [2004/08/04 06:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKSPX.SYS -- (NwlnkSpx)
DRV - [2004/06/15 23:52:40 | 000,061,157 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC53.sys -- (IntelC53)
DRV - [2004/03/05 23:15:34 | 000,647,929 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC52.sys -- (IntelC52)
DRV - [2004/03/05 23:14:42 | 001,233,525 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC51.sys -- (IntelC51)
DRV - [2004/03/05 23:13:38 | 000,037,048 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\mohfilt.sys -- (mohfilt)
DRV - [2003/11/17 16:59:20 | 000,212,224 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\HSFHWBS2.sys -- (HSFHWBS2)
DRV - [2003/11/17 16:58:02 | 000,680,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys -- (winachsf)
DRV - [2003/11/17 16:56:26 | 001,042,432 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_DP.sys -- (HSF_DP)
DRV - [2003/05/23 13:58:30 | 000,043,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2002/11/08 14:45:06 | 000,017,217 | ---- | M] (Dell Computer Corporation) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys -- (omci)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/mywaybiz


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.dell4me.com/mywaybiz
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.dell4me.com/mywaybiz
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-4132779238-765217113-32525424-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mycricket.com/
IE - HKU\S-1-5-21-4132779238-765217113-32525424-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4132779238-765217113-32525424-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: MapShare-status@tomtom.com:1.7.1
FF - prefs.js..extensions.enabledItems: baseTheme@tomtom.com:1.0.2

FF - HKLM\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\Firefox [2011/03/31 21:05:01 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011/04/01 23:53:02 | 000,000,000 | ---D | M]

[2011/04/02 18:21:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Customer\Application Data\Mozilla\Extensions
[2011/04/02 18:21:18 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Customer\Application Data\Mozilla\Extensions\home2@tomtom.com
[2010/06/21 10:20:14 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Customer\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2011/04/02 18:17:27 | 000,000,000 | ---D | M] (Map status indicator) -- C:\PROGRAM FILES\TOMTOM HOME 2\XUL\EXTENSIONS\MAPSHARE-STATUS@TOMTOM.COM

O1 HOSTS File: ([2011/04/06 19:35:05 | 000,000,027 | ---- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\SYSTEM32\dla\tfswshx.dll (Sonic Solutions)
O3 - HKU\S-1-5-21-4132779238-765217113-32525424-1006\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKU\S-1-5-21-4132779238-765217113-32525424-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O4 - HKLM..\Run: [DwlClient] c:\Program Files\Common Files\Dell\EUSW\Support.exe (Dell)
O4 - HKLM..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe (Sunbelt Software)
O4 - HKLM..\Run: [UpdateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe (Sonic Solutions)
O4 - HKU\S-1-5-21-4132779238-765217113-32525424-1006..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-4132779238-765217113-32525424-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4132779238-765217113-32525424-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-4132779238-765217113-32525424-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-4132779238-765217113-32525424-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\SYSTEM32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1267104411265 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1267104396937 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.217.0.5 24.217.201.67 68.113.206.10
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Customer\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Customer\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 14:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\SYSTEM32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\SYSTEM32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\TSSOFT32.ACM (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: wave - C:\WINDOWS\System32\SERWVDRV.DLL (Microsoft Corporation)
Drivers32: wave2 - C:\WINDOWS\System32\SERWVDRV.DLL (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 30 Days ==========

[2011/04/07 20:17:20 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Customer\Desktop\OTL (1).exe
[2011/04/07 03:00:26 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011/04/06 19:28:06 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/04/05 23:15:20 | 000,069,976 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\sbapifs.sys
[2011/04/05 23:15:20 | 000,021,464 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\sbaphd.sys
[2011/04/05 23:05:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sunbelt
[2011/04/05 23:05:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Application Data\Sunbelt
[2011/04/05 23:03:41 | 000,094,040 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\sbhips.sys
[2011/04/05 23:03:40 | 000,212,568 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\sbtis.sys
[2011/04/05 23:03:23 | 000,331,992 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFw.sys
[2011/04/05 23:03:23 | 000,068,696 | ---- | C] (Sunbelt Software, Inc.) -- C:\WINDOWS\System32\drivers\SbFwIm.sys
[2011/04/05 23:03:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Sunbelt Software
[2011/04/05 23:03:14 | 000,000,000 | ---D | C] -- C:\Program Files\Sunbelt Software
[2011/04/05 21:02:13 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/04/05 20:59:31 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/04/05 20:59:31 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/04/05 20:59:31 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/04/05 20:59:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/04/05 19:01:13 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/04/03 13:53:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Application Data\Malwarebytes
[2011/04/03 13:52:42 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/04/03 13:52:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/04/03 13:52:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/04/03 13:52:38 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/04/03 13:52:38 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/04/02 18:25:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\My Documents\TomTom
[2011/04/02 18:25:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TomTom
[2011/04/02 18:20:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Local Settings\Application Data\TomTom
[2011/04/02 18:20:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Application Data\TomTom
[2011/04/02 18:19:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Start Menu\Programs\TomTom
[2011/04/02 18:19:24 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom International B.V
[2011/04/02 18:17:07 | 000,000,000 | ---D | C] -- C:\Program Files\TomTom HOME 2
[2011/04/02 08:15:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2011/03/31 21:05:04 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2011/03/31 21:05:01 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Toolbar
[2011/03/31 21:04:36 | 000,000,000 | ---D | C] -- C:\Program Files\Bing Bar Installer
[2011/03/31 21:04:30 | 000,000,000 | ---D | C] -- C:\Program Files\HP Photo Creations
[2011/03/31 21:04:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\HP Photo Creations
[2011/03/31 21:04:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cache
[2011/03/31 21:04:23 | 000,000,000 | ---D | C] -- C:\Program Files\Coupons
[2011/03/31 21:04:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Coupons
[2011/03/31 21:04:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Application Data\HpUpdate
[2011/03/31 21:03:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\HP
[2011/03/31 21:02:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\HP
[2011/03/31 21:02:12 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2011/03/31 21:01:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Local Settings\Application Data\HP
[2011/03/29 23:06:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2011/03/26 20:31:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Application Data\Google
[2011/03/26 20:30:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Google Earth
[2011/03/26 20:26:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2011/03/26 20:26:03 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011/03/26 01:12:44 | 000,098,392 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2011/03/26 01:09:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Local Settings\Application Data\Sunbelt Software
[2011/03/26 01:04:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2011/03/25 23:12:50 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2011/03/25 23:12:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2011/03/22 21:14:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Customer\Application Data\AVG10
[2011/03/22 21:12:27 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2011/03/22 21:10:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2011/03/22 21:09:38 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2011/03/22 20:42:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\MFAData

========== Files - Modified Within 30 Days ==========

[2011/04/07 20:17:09 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Customer\Desktop\OTL (1).exe
[2011/04/07 20:05:21 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/07 20:05:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT
[2011/04/07 20:05:09 | 1071,714,304 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/07 20:02:00 | 000,000,990 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4132779238-765217113-32525424-1006UA.job
[2011/04/07 19:31:00 | 000,000,890 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/06 19:35:05 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\ETC\hosts
[2011/04/05 23:03:19 | 000,001,740 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\VIPRE.lnk
[2011/04/05 21:02:17 | 000,000,327 | RHS- | M] () -- C:\BOOT.INI
[2011/04/05 20:58:15 | 000,000,934 | ---- | M] () -- C:\Documents and Settings\Customer\Desktop\Shortcut to ComboFix.lnk
[2011/04/05 16:02:01 | 000,000,938 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4132779238-765217113-32525424-1006Core.job
[2011/04/03 13:52:43 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/03 00:43:17 | 000,000,629 | ---- | M] () -- C:\Documents and Settings\Customer\Desktop\TomTom HOME 2.lnk
[2011/04/02 14:05:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/03/31 21:04:31 | 000,000,772 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HP Photo Creations.lnk
[2011/03/31 21:03:19 | 000,001,981 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series.lnk
[2011/03/31 21:03:19 | 000,000,939 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Shop for Supplies - HP Deskjet 3050 J610 series.lnk
[2011/03/31 21:03:19 | 000,000,934 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series Scan.lnk
[2011/03/28 20:13:12 | 000,002,429 | ---- | M] () -- C:\Documents and Settings\Customer\Desktop\WordPerfect.lnk
[2011/03/28 20:12:15 | 000,001,498 | ---- | M] () -- C:\Documents and Settings\Customer\Desktop\Calculator.lnk
[2011/03/27 11:37:38 | 000,002,321 | ---- | M] () -- C:\Documents and Settings\Customer\Desktop\Google Chrome.lnk
[2011/03/26 20:30:36 | 000,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2011/03/26 20:03:49 | 000,002,549 | ---- | M] () -- C:\Documents and Settings\Customer\Desktop\Cricket Broadband.lnk
[2011/03/26 01:12:44 | 000,098,392 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys
[2011/03/25 22:14:46 | 000,495,580 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT
[2011/03/25 22:14:46 | 000,085,072 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT
[2011/03/24 06:23:33 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/03/22 05:36:10 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL

========== Files Created - No Company Name ==========

[2011/04/05 23:03:19 | 000,001,740 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\VIPRE.lnk
[2011/04/05 21:02:17 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011/04/05 21:02:14 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2011/04/05 20:59:31 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/04/05 20:59:31 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/04/05 20:59:31 | 000,089,088 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/04/05 20:59:31 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/04/05 20:59:31 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/04/05 20:58:15 | 000,000,934 | ---- | C] () -- C:\Documents and Settings\Customer\Desktop\Shortcut to ComboFix.lnk
[2011/04/03 13:52:43 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/03 00:43:17 | 000,000,629 | ---- | C] () -- C:\Documents and Settings\Customer\Desktop\TomTom HOME 2.lnk
[2011/03/31 21:05:18 | 000,001,077 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Default Manager.lnk
[2011/03/31 21:04:49 | 000,001,077 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Live ID.lnk
[2011/03/31 21:04:31 | 000,000,772 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\HP Photo Creations.lnk
[2011/03/31 21:03:19 | 000,001,981 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series.lnk
[2011/03/31 21:03:19 | 000,000,939 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Shop for Supplies - HP Deskjet 3050 J610 series.lnk
[2011/03/31 21:03:19 | 000,000,934 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\HP Deskjet 3050 J610 series Scan.lnk
[2011/03/28 20:13:01 | 000,002,429 | ---- | C] () -- C:\Documents and Settings\Customer\Desktop\WordPerfect.lnk
[2011/03/28 20:12:15 | 000,001,498 | ---- | C] () -- C:\Documents and Settings\Customer\Desktop\Calculator.lnk
[2011/03/27 11:37:38 | 000,002,321 | ---- | C] () -- C:\Documents and Settings\Customer\Desktop\Google Chrome.lnk
[2011/03/26 20:30:36 | 000,001,915 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2011/03/26 20:26:17 | 000,000,890 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/03/26 20:26:17 | 000,000,886 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/01/22 15:56:54 | 000,034,932 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2011/01/22 10:32:02 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\Customer\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/21 14:19:09 | 000,061,678 | ---- | C] () -- C:\Documents and Settings\Customer\Application Data\PFP120JPR.{PB
[2010/06/21 14:19:09 | 000,012,358 | ---- | C] () -- C:\Documents and Settings\Customer\Application Data\PFP120JCM.{PB
[2010/03/20 11:42:04 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\Customer\Local Settings\Application Data\fusioncache.dat
[2010/02/25 11:07:30 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2005/07/12 15:44:42 | 000,015,872 | ---- | C] () -- C:\WINDOWS\System32\InsDrvZD64.DLL
[2004/11/11 22:25:31 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/11/11 22:23:08 | 000,000,138 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2004/11/11 22:19:05 | 000,149,504 | ---- | C] () -- C:\WINDOWS\UNWISE.EXE
[2004/11/11 22:11:25 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2004/11/11 22:00:42 | 000,002,048 | --S- | C] () -- C:\WINDOWS\BOOTSTAT.DAT
[2004/11/11 21:59:52 | 000,495,580 | ---- | C] () -- C:\WINDOWS\System32\PERFH009.DAT
[2004/11/11 21:59:52 | 000,085,072 | ---- | C] () -- C:\WINDOWS\System32\PERFC009.DAT
[2004/11/11 21:44:10 | 000,000,519 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2004/09/15 23:03:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/10 14:13:12 | 000,000,780 | ---- | C] () -- C:\WINDOWS\ORUN32.INI
[2004/08/10 14:08:08 | 000,177,056 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/10 14:03:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/10 14:02:16 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/08/10 11:08:26 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\OEMBIOS.BIN
[2004/08/10 11:08:26 | 000,004,627 | ---- | C] () -- C:\WINDOWS\System32\OEMBIOS.DAT
[2004/08/04 06:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\MLANG.DAT
[2004/08/04 06:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\PERFI009.DAT
[2004/08/04 06:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\DSSEC.DAT
[2004/08/04 06:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\MIB.BIN
[2004/08/04 06:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\PERFD009.DAT
[2004/08/04 06:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\SECUPD.DAT
[2004/08/04 06:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 06:00:00 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\FXSPERF.INI
[2004/08/04 06:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT
[2004/07/19 17:01:02 | 000,045,056 | ---- | C] () -- C:\WINDOWS\SETPWRCG.EXE
[2004/05/26 16:09:26 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\DSRIRREM.EXE
[2004/03/23 17:38:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\InsDrvZD.dll
[2003/03/14 13:24:00 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\ZyDelReg.exe

========== LOP Check ==========

[2011/04/05 20:29:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2011/03/22 21:12:27 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2011/03/25 22:56:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2011/04/02 18:25:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TomTom
[2004/11/11 22:13:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/06/21 10:58:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/02/25 11:50:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2011/03/22 21:14:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Customer\Application Data\AVG10
[2010/03/01 23:47:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Customer\Application Data\Cricket
[2011/01/23 03:33:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Customer\Application Data\FrostWire
[2010/02/25 10:46:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Customer\Application Data\Leadertech
[2011/04/02 18:20:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Customer\Application Data\TomTom

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2004/08/10 14:04:08 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/02/25 08:20:52 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2011/04/05 21:02:17 | 000,000,327 | RHS- | M] () -- C:\BOOT.INI
[2011/04/06 19:16:12 | 000,000,156 | ---- | M] () -- C:\CFScript.txt
[2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr
[2011/04/06 19:37:36 | 000,013,720 | ---- | M] () -- C:\ComboFix.txt
[2004/08/10 14:04:08 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2004/11/11 21:48:46 | 000,004,085 | RH-- | M] () -- C:\DELL.SDR
[2011/04/07 20:05:09 | 1071,714,304 | -HS- | M] () -- C:\hiberfil.sys
[2004/08/10 14:14:36 | 000,004,128 | ---- | M] () -- C:\INFCACHE.1
[2004/08/10 14:04:08 | 000,000,000 | -H-- | M] () -- C:\IO.SYS
[2004/11/11 22:13:10 | 000,000,857 | -H-- | M] () -- C:\IPH.PH
[2004/08/10 14:04:08 | 000,000,000 | -H-- | M] () -- C:\MSDOS.SYS
[2004/08/04 06:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2010/02/25 08:53:13 | 000,250,048 | RHS- | M] () -- C:\NTLDR
[2011/04/07 20:05:08 | 1610,612,736 | -HS- | M] () -- C:\pagefile.sys
[2004/11/11 22:13:21 | 000,000,087 | ---- | M] () -- C:\SystemInfo.ini

< %systemroot%\Fonts\*.com >
[2006/04/18 16:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/10 14:03:42 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\DESKTOP.INI

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 07:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\filterpipelineprintproc.dll
[2008/07/06 05:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/10 13:56:48 | 000,094,208 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.SAV
[2004/08/10 13:56:46 | 000,634,880 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.SAV
[2004/08/10 13:56:46 | 000,872,448 | ---- | M] () -- C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/02/25 08:57:37 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\DESKTOP.INI

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/05/13 20:11:53 | 000,000,119 | -HS- | M] () -- C:\Documents and Settings\Customer\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI
[2004/08/10 14:08:38 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Customer\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011/04/07 20:17:09 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Customer\Desktop\OTL (1).exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2004/08/04 06:00:00 | 000,000,791 | ---- | M] () -- C:\WINDOWS\ADDINS\FXSEXT.ECF

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2010/02/25 09:13:21 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\Customer\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >
[2011/04/07 20:15:53 | 000,049,152 | ---- | M] () -- C:\Documents and Settings\Customer\Cookies\INDEX.DAT

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >
[2007/06/26 23:10:26 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\INF\unregmp2.exe

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >
[2008/04/13 19:11:51 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\custsat.dll
[2004/08/04 02:06:34 | 000,004,821 | ---- | M] () -- C:\Program Files\Messenger\LOGOWIN.GIF
[2004/08/04 02:06:34 | 000,007,047 | ---- | M] () -- C:\Program Files\Messenger\LVBACK.GIF
[2008/05/02 09:01:49 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgsc.dll
[2008/04/13 12:30:28 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msgslang.dll
[2008/04/13 19:12:28 | 001,695,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe
[2004/08/04 02:06:36 | 000,002,882 | ---- | M] () -- C:\Program Files\Messenger\NEWALERT.WAV
[2004/08/04 02:06:36 | 000,006,156 | ---- | M] () -- C:\Program Files\Messenger\NEWEMAIL.WAV
[2004/08/04 02:06:36 | 000,006,160 | ---- | M] () -- C:\Program Files\Messenger\ONLINE.WAV
[2004/08/04 02:06:36 | 000,004,454 | ---- | M] () -- C:\Program Files\Messenger\TYPE.WAV
[2004/08/04 02:06:36 | 000,115,981 | ---- | M] () -- C:\Program Files\Messenger\XPMSGR.CHM

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >


< End of report >

 

#2 of 2 posts, containing Extras.txt log. it would not let me post both logs together, said too many characters. Please advise, thank you!


OTL Extras logfile created on: 4/7/2011 8:19:36 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Customer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1,022.00 Mb Total Physical Memory | 583.00 Mb Available Physical Memory | 57.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 33.70 Gb Total Space | 16.45 Gb Free Space | 48.81% Space Free | Partition Type: NTFS

Computer Name: D3H37361 | User Name: Customer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-4132779238-765217113-32525424-1006\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNetisabledxpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNetisabledxpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe" = C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe:LocalSubNet:Enabled:HP Device Setup -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe" = C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe:LocalSubNet:Enabled:HP Network Communicator -- (Hewlett-Packard Co.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = Sonic Update Manager
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = Sonic DLA
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2305B203-951F-4D88-B366-6E86F524390D}" = VIPRE Antivirus Premium
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2B9B1B9E-45E5-4A76-9CA8-E06F897A3201}" = Cricket Broadband 1.0
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35BDEFF1-A610-4956-A00D-15453C116395}" = Internet Explorer Default Page
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = Modem On Hold
"{43FCA273-9534-40DB-B7C5-D7758875616A}" = Dell Support
"{4B9F45E8-E3CE-40B4-9463-80A9B3481DEF}" = Banctec Service Agreement
"{4F7177E9-2B54-48B4-AAFD-03FA1F87A542}" = Bing Bar Platform
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{68D60342-7686-45C9-B8EB-40EF843D0460}" = Dell Networking Guide
"{6DA93E66-5FA8-44ED-9CCA-40773444C10D}" = HP Deskjet 3050 J610 series Basic Device Software
"{787D1A33-A97B-4245-87C0-7174609A540C}" = HP Update
"{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}" = Modem Event Monitor
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{81A34902-9D0B-4920-A25C-4CDC5D14B328}" = Jasc Paint Shop Pro 8 Dell Edition
"{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Management Programs
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics Driver
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = Sonic RecordNow!
"{9DBCF56A-CDF0-41bf-BE0F-E00A88B18F56}" = Cricket EVDO Modem
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AF19F291-F22F-4798-9662-525305AE9E48}" = WordPerfect Office 12
"{B95B1BA9-F887-4B3C-8D3A-CCD4C4675120}" = Microsoft Default Manager
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C768790F-04FB-11E0-9B2C-001AA037B01E}" = Google Earth
"{CC000127-5E5D-4A1C-90CB-EEAAAC1E3AC0}" = Jasc Paint Shop Photo Album
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E1497C00-2605-433E-822E-3E82649CE056}" = HP Deskjet 3050 J610 series Product Improvement Study
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F7632A9B-661E-4FD9-B1A4-3B86BC99847F}" = HP Deskjet 3050 J610 series Help
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1" = Conexant D850 56K V.9x DFVc Modem
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"Dell Digital Jukebox Driver" = Dell Digital Jukebox Driver
"FrostWire" = FrostWire 4.21.3
"HP Photo Creations" = HP Photo Creations
"InstallShield_{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Management Programs
"Intel(R) 537EP V9x DF PCI Modem" = Intel(R) 537EP V9x DF PCI Modem
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"RealPlayer 6.0" = RealPlayer Basic
"StreetPlugin" = Learn2 Player (Uninstall Only)
"TomTom HOME" = TomTom HOME 2.8.1.2218
"ViewpointMediaPlayer" = Viewpoint Media Player
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-4132779238-765217113-32525424-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/5/2011 4:00:32 AM | Computer Name = D3H37361 | Source = MsiInstaller | ID = 10005
Description = Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later.

Error - 4/5/2011 9:02:21 PM | Computer Name = D3H37361 | Source = Application Hang | ID = 1002
Description = Hanging application SpybotSD.exe, version 1.6.2.46, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 4/5/2011 9:02:42 PM | Computer Name = D3H37361 | Source = Application Hang | ID = 1001
Description = Fault bucket 1116954496.

Error - 4/5/2011 9:21:16 PM | Computer Name = D3H37361 | Source = MsiInstaller | ID = 11921
Description = SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2011 -- Error
1921. SA_Error1921: StandardAction(0xC0070781): Service 'AVG WatchDog' (avgwd)
could not be stopped. Verify that you have sufficient privileges to stop system
services.

Error - 4/5/2011 9:32:35 PM | Computer Name = D3H37361 | Source = Application Error | ID = 1000
Description = Faulting application pev.exe, version 0.0.0.0, faulting module , version
0.0.0.0, fault address 0x0008d560.

Error - 4/5/2011 9:33:37 PM | Computer Name = D3H37361 | Source = Application Error | ID = 1000
Description = Faulting application pev.exe, version 0.0.0.0, faulting module pev.exe,
version 0.0.0.0, fault address 0x0008d560.

Error - 4/6/2011 4:09:51 AM | Computer Name = D3H37361 | Source = MsiInstaller | ID = 10005
Description = Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later.

Error - 4/6/2011 7:14:50 AM | Computer Name = D3H37361 | Source = MsiInstaller | ID = 10005
Description = Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later.

Error - 4/7/2011 4:00:57 AM | Computer Name = D3H37361 | Source = MsiInstaller | ID = 10005
Description = Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later.

Error - 4/7/2011 7:33:13 AM | Computer Name = D3H37361 | Source = MsiInstaller | ID = 10005
Description = Product: Bing Bar -- Bing Bar requires Internet Explorer 7 or later.

[ System Events ]
Error - 4/5/2011 9:55:02 PM | Computer Name = D3H37361 | Source = Service Control Manager | ID = 7000
Description = The ZDPSp50 NDIS Protocol Driver service failed to start due to the
following error: %%2

Error - 4/6/2011 12:05:39 AM | Computer Name = D3H37361 | Source = Service Control Manager | ID = 7000
Description = The ZDPSp50 NDIS Protocol Driver service failed to start due to the
following error: %%2

Error - 4/6/2011 4:14:05 AM | Computer Name = D3H37361 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Bing Bar 7.0 (KB2505591).

Error - 4/6/2011 7:14:52 AM | Computer Name = D3H37361 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Bing Bar 7.0 (KB2505591).

Error - 4/6/2011 6:38:42 PM | Computer Name = D3H37361 | Source = Service Control Manager | ID = 7000
Description = The ZDPSp50 NDIS Protocol Driver service failed to start due to the
following error: %%2

Error - 4/6/2011 9:05:24 PM | Computer Name = D3H37361 | Source = Service Control Manager | ID = 7000
Description = The ZDPSp50 NDIS Protocol Driver service failed to start due to the
following error: %%2

Error - 4/7/2011 4:01:15 AM | Computer Name = D3H37361 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Bing Bar 7.0 (KB2505591).

Error - 4/7/2011 7:33:15 AM | Computer Name = D3H37361 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Bing Bar 7.0 (KB2505591).

Error - 4/7/2011 8:22:40 PM | Computer Name = D3H37361 | Source = Service Control Manager | ID = 7000
Description = The ZDPSp50 NDIS Protocol Driver service failed to start due to the
following error: %%2

Error - 4/7/2011 9:05:46 PM | Computer Name = D3H37361 | Source = Service Control Manager | ID = 7000
Description = The ZDPSp50 NDIS Protocol Driver service failed to start due to the
following error: %%2


< End of report >

 

I am trying to run JavaRa.exe and I am able to input Language and go to remove older versions but I then get a box that pops up and says JavaRa has encountered a problem and needs to close. Sorry for any Inconvenience. What do I do now? Have not went any further.

 

I tried again to run JavaRa and it said it removed all older versions....but IDK. Attached are the logs that you requested. However there will not be a log for ESET Online Scanner because there was "No Threats Found ".



All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found.
Registry value HKEY_USERS\S-1-5-21-4132779238-765217113-32525424-1006\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Registry value HKEY_USERS\S-1-5-21-4132779238-765217113-32525424-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Folder C:\Documents and Settings\All Users\Application Data\Viewpoint\ not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Customer
->Temp folder emptied: 217 bytes
->Temporary Internet Files folder emptied: 42748 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 9113393 bytes
->Flash cache emptied: 343 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Owner

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5280 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 9.00 mb


[EMPTYFLASH]

User: All Users

User: Customer
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Owner

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 04102011_110201

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...



Results of screen317's Security Check version 0.99.7
Windows XP Service Pack 3
Internet Explorer 6 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
VIPRE Antivirus Premium
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 24
Out of date Java installed!
Adobe Flash Player 10.0.45.2
````````````````````````````````
Process Check:
objlist.exe by Laurent
``````````End of Log````````````

 

Computer is clean.....thanks so much for the help and all of the recommendations to keep it updated so far so good, computer seems to be running well. Enclosed is the log from running OTL.


All processes killed
========== OTL ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Customer
->Temp folder emptied: 434 bytes
->Temporary Internet Files folder emptied: 112101 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 60702312 bytes
->Flash cache emptied: 1006 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Owner

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1341660 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 59.00 mb


[EMPTYFLASH]

User: All Users

User: Customer
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

User: Owner

Total Flash Files Cleaned = 0.00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.22.3 log created on 04102011_195039

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...