1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Slow boot ?related to wireless network

Discussion in 'Malware and Virus Removal Archive' started by rudymill, 2009/03/25.

  1. 2009/03/25
    rudymill Lifetime Subscription

    rudymill Inactive Thread Starter

    Joined:
    2002/01/08
    Messages:
    83
    Likes Received:
    0
    Windows xp/sp3. Kaspersky AV.

    I had problems with an extremely slow boot to the welcome screen (5min or so, normal 90 secs), then again slow the desktop (7min, normal 2min), then almost no response to mouse, etc.

    I was able to boot into Safe Mode w/ Networking. I disabled Kaspersky, and changed so that it would NOT run at startup. No change.

    Sinc Safe Mode worked, I did a system restore to yesterday, when all was fine; all three kids had been on computer, under their own logons, before it started having problems. Again, no change.

    I then noticed that there was no internet, even though I was in SMw/N. I've got a Linksys wireless card; I'd been using the Windows network adapter software to control the access; I've got DSL and Cable in my house.

    Neither the Windows or the Linksys software (which I don't normally use) could access the Internet (other computers connect wirelessy just fine, so I know both wireless routers are working).

    I uninstalled/reinstalled the Linksys software. I now can connect to both DSL and Cable. FWIW, although the setting for "Show icons...." is checked, the icon does not appear in the tray with either connection (I;'ve checked and unchecked each).

    Still slow boot and too slow to function in normal mode, although I can work in SMw/N at regular speed, except that I have to start the network connection manually; neither starts automatically. Kaspersky still off.

    So I've run the DDS program and included the logs.

    Suggestion? Thanks very much.

    Rudy M




    Attached below are the two dds files:



    DDS (Ver_09-03-16.01) - NTFSx86 NETWORK
    Run by Rudolph Miller at 20:19:36.95 on Wed 03/25/2009
    Internet Explorer: 7.0.5730.11
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.748 [GMT -5:00]

    AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated)

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\Rudolph Miller\Desktop\dds\dds.com

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.google.com/
    uSearch Page = hxxp://www.google.com
    uDefault_Page_URL = hxxp://www.google.com
    uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
    mDefault_Page_URL = hxxp://www.google.com
    mStart Page = hxxp://www.google.com
    mWindow Title = Microsoft Internet Explorer provided by Comcast
    mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/yme/*http://www.yahoo.com/ext/search/search.html
    uInternet Connection Wizard,ShellNext = iexplore
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    mSearchAssistant = hxxp://www.google.com/ie
    mWinlogon: Shell=c:\windows\explorer.exe
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.0.926.3450\swg.dll
    BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
    TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
    TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
    TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
    EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
    EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
    uRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NVMCTRAY.DLL,NvTaskbarInit
    uRun: [LogitechSoftwareUpdate] "c:\program files\logitech\video\ManifestEngine.exe" boot
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\wcescomm.exe "
    uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
    mRun: [nwiz] nwiz.exe /install
    mRun: [AdaptecDirectCD] c:\program files\roxio\easy cd creator 5\directcd\DirectCD.exe
    mRun: [Symantec PIF AlertEng] "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe" /a /m "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\AlertEng.dll "
    mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
    mRun: [PaperPort PTD] c:\program files\scansoft\paperport\pptd40nt.exe
    mRun: [IndexSearch] c:\program files\scansoft\paperport\IndexSearch.exe
    mRun: [ControlCenter2.0] c:\program files\brother\controlcenter2\brctrcen.exe /autorun
    mRun: [SetDefPrt] c:\program files\brother\brmfl05c\BrStDvPt.exe
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe "
    StartupFolder: c:\docume~1\rudolp~1\startm~1\programs\startup\natura~1.lnk - c:\program files\sec\natural color\NaturalColorLoad.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe
    uPolicies-explorer: NoViewOnDrive = 0 (0x0)
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
    IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - {85E0B171-04FA-11D1-B7DA-00A0C90348D6} - c:\program files\kaspersky lab\kaspersky anti-virus 7.0\SCIEPlgn.dll
    IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll
    IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~3\INetRepl.dll
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
    Trusted Zone: aol.com\free
    Trusted Zone: yahoo.com\sbc.login
    DPF: Microsoft XML Parser for Java
    DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} - hxxp://support.dell.com/systemprofiler/SysPro.CAB
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
    DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1005.cab
    DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} - hxxp://www.srtest.com/srl_bin/sysreqlab_ind.cab
    DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scan8/oscan8.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1110427511499
    DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - hxxps://webdl.symantec.com/activex/symdlmgr.cab
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1232592568046
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - hxxps://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
    DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab
    DPF: {CD372BF2-87E4-4291-9F49-E0A09A9FDF11} - hxxps://72.232.252.140/powerreader4/PRInstall.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxps://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45}
    Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
    Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll
    Notify: klogon - c:\windows\system32\klogon.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SSODL: DriveVolume - {319782b6-ebab-4caa-847c-7319dad2aa58} - No File
    SecurityProviders: msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

    ============= SERVICES / DRIVERS ===============

    R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2007-12-13 24592]
    S0 kl1;Kl1;c:\windows\system32\drivers\kl1.sys [2007-10-31 112144]
    S1 klif;Klif;c:\windows\system32\drivers\klif.sys [2007-12-28 195344]
    S2 atisvc_cgimcroqw;atisvc_cgimcroqw;c:\windows\system32\jodmt\atisvc_cgimcroqw.exe [2008-10-3 211645]
    S2 BCMNTIO;BCMNTIO;c:\progra~1\checkit\diagno~1\BCMNTIO.sys [2006-3-25 3744]
    S2 MAPMEM;MAPMEM;c:\progra~1\checkit\diagno~1\MAPMEM.sys [2006-3-25 3904]
    S2 QuickBooksDB18;QuickBooksDB18;c:\progra~1\intuit\quickb~2\qbdbmgrn.exe -hvquickbooksdb18 --> c:\progra~1\intuit\quickb~2\QBDBMgrN.exe -hvQuickBooksDB18 [?]
    S2 RSUpdateService;RamSoft PACS4 Update Service;c:\program files\ramsoft\powerreader4\updateservice\RSUpdateServiceApplication.exe [2008-1-19 564960]
    S3 AVP;Kaspersky Anti-Virus 7.0;c:\program files\kaspersky lab\kaspersky anti-virus 7.0\avp.exe [2008-2-8 227856]
    S3 cel90xbe;cel90xbe;\??\c:\docume~1\rudolp~1\locals~1\temp\cel90xbe.sys --> c:\docume~1\rudolp~1\locals~1\temp\cel90xbe.sys [?]
    S3 WoptiHWDetect;WoptiHWDetect;c:\program files\wopti\WoptiHWDetect.sys [2009-1-18 9720]
    S4 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-5-12 611664]
    S4 LocalCache20070116123;RamSoft PACS 4 Cache (LocalCache20070116123);c:\program files\ramsoft\powerreader4\cacheservers\localcache20070116123\prcacheservice.exe localcache20070116123 --> c:\program files\ramsoft\powerreader4\cacheservers\localcache20070116123\prcacheservice.exe LocalCache20070116123 [?]

    ============== File Associations ===============

    regfile=regedit.exe "%1" %*
    scrfile= "%1" %*

    =============== Created Last 30 ================

    2009-03-25 19:22 20,747 a------- c:\windows\system32\drivers\AegisP.sys
    2009-03-25 19:22 356,096 a------- c:\windows\system32\rt61.sys
    2009-03-25 19:22 243,328 a------- c:\windows\system32\rt2500.sys
    2009-03-25 19:22 7,878 a------- c:\windows\system32\RT2500.CAT
    2009-03-25 19:22 7,870 a------- c:\windows\system32\rt61.cat
    2009-03-25 19:22 920 a------- c:\windows\system32\WLAN.INI
    2009-03-25 19:08 <DIR> --d----- c:\windows\LastGood.Tmp
    2009-03-11 08:38 73,728 a------- c:\windows\system32\javacpl.cpl
    2009-03-11 07:06 <DIR> --d----- c:\program files\Windows Installer Clean Up
    2009-03-11 07:06 <DIR> --d----- c:\program files\MSECACHE
    2009-03-11 01:26 <DIR> --d----- c:\docume~1\rudolp~1\applic~1\Canneverbe_Limited
    2009-03-11 00:29 717,296 a------- c:\windows\system32\drivers\sptd.sys
    2009-03-11 00:29 <DIR> --d----- c:\program files\LSoft Technologies Inc

    ==================== Find3M ====================

    2009-03-25 07:09 246,212 a--sh--- c:\windows\system32\drivers\fidbox.idx
    2009-03-24 01:01 19,425,312 a--sh--- c:\windows\system32\drivers\fidbox.dat
    2009-03-17 14:36 252,704 a--sh--- c:\windows\system32\drivers\fidbox2.dat
    2009-03-12 04:25 23,156 a--sh--- c:\windows\system32\drivers\fidbox2.idx
    2009-03-11 08:38 410,984 a------- c:\windows\system32\deploytk.dll
    2009-03-10 21:23 31,320 a------- c:\docume~1\rudolp~1\applic~1\GDIPFONTCACHEV1.DAT
    2009-02-09 06:13 1,846,784 a------- c:\windows\system32\win32k.sys
    2009-02-03 12:35 101,287 a------- c:\windows\system32\drivers\klin.dat
    2009-02-03 12:35 89,601 a------- c:\windows\system32\drivers\klick.dat
    2009-01-27 17:21 112,144 a------- c:\windows\system32\drivers\kl1.sys
    2008-10-07 11:16 24 a------- c:\documents and settings\rudolph miller\jagex_runescape_preferences.dat
    2007-12-13 12:04 722,176 a------- c:\documents and settings\rudolph miller\gotomypc_428.exe
    2002-06-25 14:29 94,784 ---sh--- c:\windows\twain.dll
    2008-04-13 19:12 50,688 ---sh--- c:\windows\twain_32.dll
    2008-04-13 19:11 1,028,096 a--sh--- c:\windows\system32\mfc42.dll
    2008-04-13 19:12 57,344 ---sh--- c:\windows\system32\msvcirt.dll
    2008-04-13 19:12 413,696 a--sh--- c:\windows\system32\msvcp60.dll
    2008-04-13 19:12 343,040 a--sh--- c:\windows\system32\msvcrt.dll
    2008-04-13 19:12 551,936 ---sh--- c:\windows\system32\oleaut32.dll
    2008-04-13 19:12 84,992 ---sh--- c:\windows\system32\olepro32.dll
    2008-04-13 19:12 11,776 ---sh--- c:\windows\system32\regsvr32.exe

    ============= FINISH: 20:20:10.46 ===============







    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-03-16.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 3/9/2005 1:27:59 PM
    System Uptime: 3/25/2009 8:14:49 PM (0 hours ago)

    Motherboard: Dell Computer Corp. | |
    Processor: Intel(R) Pentium(R) 4 CPU 2.53GHz | Microprocessor | 2524/533mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 128 GiB total, 57.485 GiB free.
    D: is CDROM ()

    ==== Disabled Device Manager Items =============

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: Intel(R) PRO/100 VE Network Connection
    Device ID: PCI\VEN_8086&DEV_1039&SUBSYS_01421028&REV_81\4&3B1CAF2B&0&40F0
    Manufacturer: Intel
    Name: Intel(R) PRO/100 VE Network Connection
    PNP Device ID: PCI\VEN_8086&DEV_1039&SUBSYS_01421028&REV_81\4&3B1CAF2B&0&40F0
    Service: E100B

    ==== System Restore Points ===================

    RP1379: 12/25/2008 7:34:28 PM - System Checkpoint
    RP1380: 12/26/2008 8:33:35 PM - System Checkpoint
    RP1381: 12/27/2008 8:58:29 PM - System Checkpoint
    RP1382: 12/28/2008 9:32:59 PM - System Checkpoint
    RP1383: 12/29/2008 9:59:29 PM - System Checkpoint
    RP1384: 12/31/2008 1:34:57 PM - System Checkpoint
    RP1385: 1/5/2009 1:21:39 PM - System Checkpoint
    RP1386: 1/6/2009 2:17:25 PM - System Checkpoint
    RP1387: 1/7/2009 3:07:22 PM - System Checkpoint
    RP1388: 1/8/2009 3:47:16 PM - System Checkpoint
    RP1389: 1/9/2009 4:33:51 PM - System Checkpoint
    RP1390: 1/10/2009 6:33:18 PM - System Checkpoint
    RP1391: 1/11/2009 6:49:54 PM - System Checkpoint
    RP1392: 1/12/2009 7:19:54 PM - System Checkpoint
    RP1393: 1/13/2009 8:17:31 PM - System Checkpoint
    RP1394: 1/14/2009 3:00:19 AM - Software Distribution Service 3.0
    RP1395: 1/15/2009 3:15:23 AM - System Checkpoint
    RP1396: 1/16/2009 4:15:20 AM - System Checkpoint
    RP1397: 1/17/2009 5:15:20 AM - System Checkpoint
    RP1398: 1/17/2009 3:56:14 PM - Removed Tweakui Powertoy for Windows XP
    RP1399: 1/17/2009 8:09:45 PM - Advanced SystemCare RestorePoint
    RP1400: 1/18/2009 8:41:27 PM - System Checkpoint
    RP1401: 1/20/2009 9:27:19 AM - System Checkpoint
    RP1402: 1/20/2009 3:48:19 PM - Restore Operation
    RP1403: 1/20/2009 5:31:52 PM - Removed Symantec Technical Support Web Controls
    RP1404: 1/20/2009 5:39:13 PM - Installed Brother MFL-Pro Suite
    RP1405: 1/20/2009 6:22:59 PM - Installed Brother MFL-Pro Suite
    RP1406: 1/20/2009 6:31:38 PM - Unsigned driver install
    RP1407: 1/20/2009 6:54:19 PM - Unsigned printer driver Brother MFC-8860DN USB Print installed.
    RP1408: 1/20/2009 7:06:59 PM - Installed Brother MFL-Pro Suite
    RP1409: 1/20/2009 7:14:57 PM - Unsigned driver install
    RP1410: 1/20/2009 7:31:35 PM - Installed Brother MFL-Pro Suite
    RP1411: 1/20/2009 7:43:23 PM - Installed Brother MFL-Pro Suite
    RP1412: 1/20/2009 7:44:21 PM - Printer Driver Brother PC-FAX v.2 Installed
    RP1413: 1/20/2009 7:44:34 PM - Unsigned printer driver Brother MFC-8860DN BR-Script installed.
    RP1414: 1/20/2009 7:51:20 PM - Unsigned printer driver Brother MFC-8860DN USB Print installed.
    RP1415: 1/20/2009 7:52:11 PM - Unsigned driver install
    RP1416: 1/20/2009 10:52:32 PM - Update to an unsigned driver
    RP1417: 1/21/2009 5:38:06 PM - Installed Intel(R) Network Connections.
    RP1418: 1/21/2009 6:30:18 PM - Removed Kaspersky Anti-Virus 7.0.
    RP1419: 1/21/2009 6:51:23 PM - Installed Kaspersky Internet Security 7.0.
    RP1420: 1/21/2009 6:56:45 PM - Installed Brother MFL-Pro Suite
    RP1421: 1/21/2009 6:57:47 PM - Printer Driver Brother PC-FAX v.2 Installed
    RP1422: 1/21/2009 6:57:57 PM - Unsigned printer driver Brother MFC-8860DN BR-Script installed.
    RP1423: 1/21/2009 7:09:05 PM - Installed Brother MFL-Pro Suite
    RP1424: 1/21/2009 7:10:05 PM - Printer Driver Brother PC-FAX v.2 Installed
    RP1425: 1/21/2009 7:15:09 PM - Unsigned printer driver Brother MFC-8860DN USB Print installed.
    RP1426: 1/21/2009 7:15:53 PM - Unsigned driver install
    RP1427: 1/21/2009 7:23:59 PM - Installed Kaspersky Anti-Virus 7.0.
    RP1428: 1/21/2009 8:30:48 PM - Installed Windows XP KB950582.
    RP1429: 1/21/2009 8:54:41 PM - Software Distribution Service 3.0
    RP1430: 1/21/2009 9:06:46 PM - Software Distribution Service 3.0
    RP1431: 1/21/2009 9:09:46 PM - Software Distribution Service 3.0
    RP1432: 1/22/2009 9:23:08 PM - System Checkpoint
    RP1433: 1/23/2009 9:24:13 PM - System Checkpoint
    RP1434: 1/24/2009 10:23:08 PM - System Checkpoint
    RP1435: 1/26/2009 3:17:14 PM - System Checkpoint
    RP1436: 1/26/2009 3:43:27 PM - Installed Kaspersky Anti-Virus 7.0.
    RP1437: 1/26/2009 5:50:41 PM - Installed QuickBooks.
    RP1438: 1/27/2009 7:56:23 AM - Installed Windows XP KB942288-v3.
    RP1439: 1/27/2009 8:02:16 AM - Restore Operation
    RP1440: 1/27/2009 9:08:47 AM - Working with Office without Kaspersky printer
    RP1441: 1/27/2009 9:46:08 AM - Without printer Kaspersky (after uninstall) NoRegClean Before Defrag
    RP1442: 1/27/2009 2:12:27 PM - Defragmented without Kaspersky printer prior to reg clean
    RP1443: 1/27/2009 3:04:20 PM - After reg clean before defrag without kasper printer
    RP1444: 1/27/2009 3:19:13 PM - after reg fix before reg defrag no printer kaspersky
    RP1445: 1/27/2009 3:32:47 PM - After reg dfrag no printer kaspersk
    RP1446: 1/27/2009 3:42:19 PM - Installed Kaspersky Anti-Virus 7.0.
    RP1447: 1/27/2009 5:24:57 PM - after Kaspersky. No printer
    RP1448: 1/28/2009 5:37:13 PM - System Checkpoint
    RP1449: 1/29/2009 6:11:05 PM - System Checkpoint
    RP1450: 1/30/2009 6:31:13 PM - System Checkpoint
    RP1451: 1/31/2009 7:31:13 PM - System Checkpoint
    RP1452: 2/1/2009 7:32:17 PM - System Checkpoint
    RP1453: 2/2/2009 9:00:20 PM - System Checkpoint
    RP1454: 2/4/2009 1:31:05 AM - System Checkpoint
    RP1455: 2/5/2009 1:36:14 AM - System Checkpoint
    RP1456: 2/6/2009 1:46:05 AM - System Checkpoint
    RP1457: 2/7/2009 2:09:33 AM - System Checkpoint
    RP1458: 2/8/2009 3:09:33 AM - System Checkpoint
    RP1459: 2/8/2009 3:17:40 PM - Restore Operation
    RP1460: 2/9/2009 3:32:08 PM - System Checkpoint
    RP1461: 2/10/2009 3:46:20 PM - System Checkpoint
    RP1462: 2/11/2009 4:46:20 PM - System Checkpoint
    RP1463: 2/12/2009 3:00:16 AM - Software Distribution Service 3.0
    RP1464: 2/13/2009 3:05:14 AM - System Checkpoint
    RP1465: 2/14/2009 4:05:24 AM - System Checkpoint
    RP1466: 2/15/2009 5:05:14 AM - System Checkpoint
    RP1467: 2/16/2009 6:04:54 AM - System Checkpoint
    RP1468: 2/17/2009 7:04:55 AM - System Checkpoint
    RP1469: 2/18/2009 7:17:56 AM - System Checkpoint
    RP1470: 2/18/2009 9:16:05 AM - Software Distribution Service 3.0
    RP1471: 2/19/2009 10:04:54 AM - System Checkpoint
    RP1472: 2/20/2009 11:39:23 AM - System Checkpoint
    RP1473: 2/21/2009 12:04:57 PM - System Checkpoint
    RP1474: 2/22/2009 12:31:15 PM - System Checkpoint
    RP1475: 2/23/2009 1:04:14 PM - System Checkpoint
    RP1476: 2/24/2009 5:57:40 PM - System Checkpoint
    RP1477: 2/25/2009 6:42:24 PM - System Checkpoint
    RP1478: 2/26/2009 3:00:17 AM - Software Distribution Service 3.0
    RP1479: 2/27/2009 3:29:34 AM - System Checkpoint
    RP1480: 2/28/2009 4:29:59 AM - System Checkpoint
    RP1481: 3/1/2009 5:05:41 AM - System Checkpoint
    RP1482: 3/2/2009 5:29:34 AM - System Checkpoint
    RP1483: 3/3/2009 6:29:34 AM - System Checkpoint
    RP1484: 3/4/2009 8:01:54 AM - System Checkpoint
    RP1485: 3/5/2009 11:47:40 AM - System Checkpoint
    RP1486: 3/6/2009 3:00:17 AM - Software Distribution Service 3.0
    RP1487: 3/7/2009 8:32:34 AM - System Checkpoint
    RP1488: 3/8/2009 8:52:49 AM - System Checkpoint
    RP1489: 3/9/2009 9:38:18 AM - System Checkpoint
    RP1490: 3/10/2009 10:16:58 AM - System Checkpoint
    RP1491: 3/10/2009 11:29:31 PM - Installed Active@ ISO Burner
    RP1492: 3/10/2009 11:29:47 PM - SPTD setup V1.56
    RP1493: 3/11/2009 6:04:42 AM - Removed Java(TM) 6 Update 10
    RP1494: 3/11/2009 6:05:23 AM - Installed Java(TM) 6 Update 12
    RP1495: 3/11/2009 6:06:53 AM - Installed Windows Installer Clean Up
    RP1496: 3/11/2009 6:08:35 AM - Removed Java(TM) SE Runtime Environment 6 Update 1
    RP1497: 3/11/2009 6:09:10 AM - Removed Java(TM) 6 Update 2
    RP1498: 3/11/2009 6:09:44 AM - Removed Java(TM) 6 Update 3
    RP1499: 3/11/2009 6:10:19 AM - Removed Java(TM) 6 Update 5
    RP1500: 3/11/2009 6:11:02 AM - Removed Java(TM) 6 Update 7
    RP1501: 3/11/2009 6:15:24 AM - Installed Java(TM) 6 Update 12
    RP1502: 3/11/2009 7:38:16 AM - Installed Java(TM) 6 Update 12
    RP1503: 3/12/2009 2:00:16 AM - Software Distribution Service 3.0
    RP1504: 3/13/2009 2:00:17 AM - Software Distribution Service 3.0
    RP1505: 3/14/2009 2:30:53 AM - System Checkpoint
    RP1506: 3/15/2009 4:31:13 AM - System Checkpoint
    RP1507: 3/16/2009 5:30:54 AM - System Checkpoint
    RP1508: 3/17/2009 6:30:54 AM - System Checkpoint
    RP1509: 3/18/2009 6:44:37 AM - System Checkpoint
    RP1510: 3/19/2009 8:06:35 AM - System Checkpoint
    RP1511: 3/20/2009 8:44:36 AM - System Checkpoint
    RP1512: 3/21/2009 8:45:45 AM - System Checkpoint
    RP1513: 3/22/2009 9:53:21 AM - System Checkpoint
    RP1514: 3/23/2009 9:58:40 AM - System Checkpoint
    RP1515: 3/24/2009 10:56:20 AM - System Checkpoint
    RP1516: 3/25/2009 7:57:51 PM - Restore Operation

    ==== Installed Programs ======================

    Active@ ISO Burner
    Adobe Acrobat Connect Add-in
    Adobe Flash Player 10 ActiveX
    Adobe Reader 7.1.0
    Advanced SystemCare 3
    AGEIA PhysX v2.4.4
    Apple Mobile Device Support
    Apple Software Update
    ArcSoft Software Suite
    AT&T WorldNet Setup
    Audition
    Brother MFL-Pro Suite
    Canon PhotoRecord
    Canon PIXMA iP1500
    Canon Utilities Easy-PhotoPrint
    CDBurnerXP
    CheckIt Diagnostics
    Chuchupet 1.1.1
    Cinema Tycoon(TM) Gold
    Conexant HSF V92 56K RTAD Speakerphone PCI Modem
    Critical Update for Windows Media Player 11 (KB959772)
    CryptoHeaven v2.7.1
    CyPet 2.02
    Dell Picture Studio - Dell Image Expert
    Dell ResourceCD
    Desktop Toys Window
    DILBERT's Desktop Games
    Easy CD Creator 5 Basic
    Fairly OddParents Big Superhero Wish (remove only)
    Fenomen Games Downloader (remove only)
    Fetch
    Fish Tycoon (remove only)
    GameSpy Arcade
    Google Earth
    Google Toolbar for Internet Explorer
    Harry Potter II
    HijackThis 2.0.2
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Format SDK (KB902344)
    Hotfix for Windows Media Format SDK (KB910998)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    HouseCall 6.6
    hp instant support
    hp officejet d series
    HP Photo Printing Software
    HP Share-to-Web
    Intel(R) Network Connections 13.5.32.0
    iPACS Viewer
    iPod for Windows 2005-02-07
    iPod for Windows 2005-03-23
    iTunes
    Java(TM) 6 Update 12
    JumpStart 3rd Grade 2001
    Kaspersky Anti-Virus 7.0
    LEGO Friends
    Linksys Wireless-G PCI Adapter
    LiveUpdate 3.2 (Symantec Corporation)
    LiveUpdate Notice (Symantec Corporation)
    Logitech Desktop Messenger
    Logitech Print Service
    Logitech QuickCam Software
    Logitech® Camera Driver
    Mabinogi
    Macromedia Shockwave Player
    Malwarebytes' Anti-Malware
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0 Service Pack 1
    Microsoft ActiveSync
    Microsoft Age of Empires II
    Microsoft Age of Empires II: The Conquerors Expansion
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Halo
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Live Add-in 1.3
    Microsoft Office XP Professional
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 Parser and SDK
    MUSICMATCH Jukebox
    Nancy Drew: Danger by Design
    Nancy Drew: Last Train to Blue Moon Canyon
    Nancy Drew: Secret of the Old Clock
    Nancy Drew: The Curse of Blackmoor Manor
    Nancy Drew: The Phantom of Venice
    Natural Color
    Netscape Communicator 4.79
    Nikon Message Center
    Norton 360
    NVIDIA Windows 2000/XP Display Drivers
    oggcodecs 0.71.0946
    Paint Shop Pro 7
    Palm Desktop
    PaperPort
    PetzPlayer
    PictureProject
    Quake 3 Arena Demo
    QuickBooks Premier: Accountant Edition 2008
    QuickBooks Pro 2008
    QuickBooks Pro Edition 2004
    Quicken 2006
    QuickTime
    QuickTime 3.0
    Radio365_WM_Setup_Release_English
    RealPlayer
    RegSupreme
    Rhapsody Player Engine
    RollerCoaster Tycoon® 3
    Samsung SPH-i500 USB Driver and Tools
    SBC Yahoo! Applications
    School Tycoon
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 10 (KB936782)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950582)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960715)
    ShootOutClient Version 1.0
    Sid Meier's Pirates!
    Smart Defrag 1.10
    SoundMAX
    Spybot - Search & Destroy
    Supple -- Episode 1 (remove only)
    SupportSoft Assisted Service
    System Requirements Lab
    The Sims 2
    The Sims 2 Open For Business
    The Sims 2 Pets
    The Sims Deluxe Edition
    The White Wolf of Icicle Creek
    Update for Windows XP (KB943729)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955839)
    WavePad Uninstall
    WebFldrs XP
    Windows Genuine Advantage Notifications (KB905474)
    Windows Installer Clean Up
    Windows Internet Explorer 7
    Windows Live Sign-in Assistant
    Windows Media Format 11 runtime
    Windows Media Player 10 Hotfix - KB894476
    Windows Media Player 11
    Windows Mobile® Device Handbook
    Windows XP Service Pack 3
    Wopti Utilities
    World of Warcraft Trial
    Zoo Tycoon 2 Endangered Species
    Zoo Tycoon: Complete Collection
    Zoo Vet

    ==== Event Viewer Messages From Past Week ========

    3/21/2009 5:51:10 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service gusvc with arguments " " in order to run the server: {89DAE4CD-9F17-4980-902A-99BA84A8F5C8}
    3/24/2009 2:42:34 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the wscsvc service.
    3/24/2009 8:03:24 PM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.
    3/24/2009 8:03:25 PM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .
    3/24/2009 8:03:25 PM, error: SideBySide [59] - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80.DLL. Reference error message: The operation completed successfully. .
    3/24/2009 8:03:27 PM, error: SideBySide [59] - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80U.DLL. Reference error message: The operation completed successfully. .
    3/24/2009 8:09:26 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: cdudf_xp
    3/25/2009 12:19:42 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the LiveUpdate service to connect.
    3/25/2009 6:37:11 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    3/25/2009 6:38:20 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: cdudf_xp Fips intelppm kl1 klif
    3/25/2009 7:02:06 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

    ==== End Of File ===========================
     
  2. 2009/03/26
    rudymill Lifetime Subscription

    rudymill Inactive Thread Starter

    Joined:
    2002/01/08
    Messages:
    83
    Likes Received:
    0
    I realize that this is in the wrong forum.
     

  3. to hide this advert.

  4. 2009/03/26
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Why? Malware logs are only allowed in this forum.
     
  5. 2009/03/29
    wideawake

    wideawake Inactive

    Joined:
    2009/03/04
    Messages:
    2
    Likes Received:
    0
    Pick and choose one, only one, AV program.
    Dump Spybot, sad to say it was a good program but now it's useless.
    If you use Kaspersky make sure you go to Symantec and download and run the removal tool.

    "============== Pseudo HJT Report ===============" I have never seen this, are you sure that you have a legit copy of HijackThis? Should be one word, "HijackThis" not "Hijack This ".
     
  6. 2009/03/30
    rudymill Lifetime Subscription

    rudymill Inactive Thread Starter

    Joined:
    2002/01/08
    Messages:
    83
    Likes Received:
    0

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.