my Anti-Virus(Avira) detected these trojan a while ago, 'TR/Trash.Gen [trojan]', and i always remove it but thn it keeps coming back. then, i run a full scan on my pc using avira and i found out there are a few trojans lurking in my pc which is:
TR/Agent.5599232 Trojan
TR/Black.Gen2 Trojan
TR/Spy.Gen Trojan
TR/Trash.Gen Trojan
Also, I was having a few symptoms like:
the umbrella icon (avira) has disappeared from the system tray
Cannot open any videos (youtube), and internet flash games (Facebook)
Frequent detection of trojan from avira
and btw I've run a scan from a few anti spyware software which is Malwarebytes Removal and also Spybot and resolved the 2nd and 3rd problem. However, the icon for avira is still missing.
Here are the DDS logs that is requested. Thank you for the time reading this post. Help will be appreciated thanks again.
.
DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_24
Run by [removed] at 21:30:44 on 2011-06-07
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3326.2575 [GMT 8:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
D:\Program Files\Dassault Systemes\B16\intel_a\code\bin\CATSysDemon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PROLiNK\Common\RalinkRegistryWriter.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\MSI\BToes Bluetooth Software\BTTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\KWMUSIC\bin\kwmv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://eis.esnips.com/page/search/?clie ... fde8d1391d
mStart Page = hxxp://eis.esnips.com/page/search/?clie ... fde8d1391d
uInternet Settings,ProxyServer = 65.167.88.59:3128
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = about:blank
uURLSearchHooks: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\4.4\iobitToolbarIE.dll
uURLSearchHooks: DeviceVM Url Search Hook: {0063bf63-bfff-4b8f-9d26-4267df7f17dd} - c:\windows\system32\dvmurl.dll
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\4.4\iobitToolbarIE.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - No File
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {28387537-e3f9-4ed7-860c-11e69af4a8a0} - No File
TB: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\4.4\iobitToolbarIE.dll
EB: Groove Folder Synchronization: {2a541ae1-5bf6-4665-a8a3-cfa9672e4291} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpeedBitVideoAccelerator] c:\program files\speedbit video accelerator\VideoAccelerator.exe
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.2; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.freeonlinegames.com/embed.php?g_id=12952"
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [ctfmon.exe] ctfmon.exe
mRun: [RTBatteryMeter] c:\program files\vibrategamedevicedriver\RFPIcon.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [<NO NAME>]
mRun: [SearchSettings] "c:\program files\common files\spigot\search settings\SearchSettings.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\msi\btoes bluetooth software\BTTray.exe
mPolicies-system: EnableLUA = 0 (0x0)
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\msi\btoes bluetooth software\btsendto_ie_ctx.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\msi\btoes bluetooth software\btsendto_ie.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{15388BA7-7968-4A64-91A6-4A5A54481FAB} : DhcpNameServer = 192.168.1.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: TPSvc - TPSvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://istudent.uitm.edu.my/stp/home/main2.asp
FF - prefs.js: keyword.URL - hxxp://malaysia.search.yahoo.com/search ... =371596&p=
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\user\application data\idm\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency3.5.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency3.6.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar-ff3.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{def3454d-d9ea-4a19-8804-24f76d263ca4}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{def3454d-d9ea-4a19-8804-24f76d263ca4}\components\RadioWMPCore.dll
FF - component: c:\program files\common files\spigot\wtxpcom\components\WidgiToolbarFF.dll
FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
FF - plugin: c:\documents and settings\user\application data\mozilla\plugins\npoctoshape.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2010-11-9 28552]
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-4-16 13496]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-11-6 11608]
R1 cdawdm;CDAWDM;c:\windows\system32\drivers\cdawdm.sys [2002-1-24 46735]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-4-6 98160]
R1 LUMDriver;LUMDriver;c:\windows\system32\drivers\LUMDriver.sys [2003-7-11 14912]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-18 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-11 67656]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-11-6 136360]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-11-6 269480]
R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2011-5-6 393112]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-11-6 61960]
R2 BBDemon;Backbone Service;d:\program files\dassault systemes\b16\intel_a\code\bin\CATSysDemon.exe [2005-9-6 35840]
R2 GEST Service;GEST Service for program management.;c:\program files\gigabyte\energysaver\GSvr.exe [2009-5-11 68136]
R2 RalinkRegistryWriter;Ralink Registry Writer;c:\program files\prolink\common\RalinkRegistryWriter.exe [2009-5-11 75040]
R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\speedb~1\videoacceleratorservice.exe -start -scm --> c:\progra~1\speedb~1\VideoAcceleratorService.exe -start -scm [?]
R3 DynCal;Dynamic Calibration Service;c:\windows\system32\drivers\DynCal.sys [2007-11-7 12928]
R3 rt2870;802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-5-11 650624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-8-17 136176]
S3 asc3360pr;asc3360pr;\??\c:\windows\system32\drivers\puloju.sys --> c:\windows\system32\drivers\puloju.sys [?]
S3 cpuz132;cpuz132;\??\c:\docume~1\user\locals~1\temp\cpuz132\cpuz132_x32.sys --> c:\docume~1\user\locals~1\temp\cpuz132\cpuz132_x32.sys [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\user\locals~1\temp\yue363.tmp --> c:\docume~1\user\locals~1\temp\YUE363.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\garena\safedrv.sys --> c:\program files\garena\safedrv.sys [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-8-17 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-11-6 39984]
S3 NPF;WinPcap Packet Driver (NPF);c:\windows\system32\drivers\npf.sys [2010-10-7 50704]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [2004-1-23 13952]
S3 PPortJoystick;Parallel Port Joystick device driver;c:\windows\system32\drivers\PPortJoy.sys [2004-1-23 28800]
S3 RAPIProtocol;Ralink RAPI Protocol Driver;c:\windows\system32\drivers\RAPIProtocol.sys [2009-5-11 16512]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== File Associations ===============
.
.scr=AutoCADScriptFile
.
=============== Created Last 30 ================
.
2011-06-07 13:27:29 -------- d--h--w- c:\windows\PIF
2011-06-07 12:58:31 388096 ----a-r- c:\documents and settings\user\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-06-07 12:31:23 -------- d-----w- c:\documents and settings\user\application data\SUPERAntiSpyware.com
2011-06-07 12:31:23 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com
2011-06-07 12:31:16 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-06-07 07:31:07 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-06-07 07:31:07 -------- d-----w- c:\windows\system32\wbem\Repository
2011-06-07 03:17:27 -------- d-----w- c:\documents and settings\all users\application data\STOPzilla!
2011-06-04 09:32:28 81920 ----a-w- c:\program files\common files\installshield\updateservice\issch.exe
2011-06-04 09:32:28 512000 ----a-w- c:\program files\common files\installshield\updateservice\agent.exe
2011-06-04 09:32:28 368640 ----a-w- c:\program files\common files\installshield\updateservice\_isusres.dll
2011-06-04 09:32:28 217088 ----a-w- c:\program files\common files\installshield\updateservice\ISDM.exe
2011-06-04 09:32:28 -------- d-----w- c:\program files\THQ
2011-06-04 02:19:39 -------- d-----w- c:\documents and settings\all users\application data\NexonUS
2011-06-03 02:31:42 -------- d-----w- c:\documents and settings\user\application data\Nexon
2011-06-02 03:21:42 -------- d-----w- c:\documents and settings\user\application data\Search Settings
2011-06-02 03:21:39 -------- d-----w- c:\program files\IObit Toolbar
2011-06-02 03:21:39 -------- d-----w- c:\program files\common files\Spigot
2011-06-02 03:21:39 -------- d-----w- c:\program files\Application Updater
2011-05-25 03:43:06 -------- d-----w- c:\documents and settings\user\application data\Logia
2011-05-25 03:43:05 -------- d-----w- c:\program files\Logia
2011-05-24 14:19:56 -------- d-----w- c:\documents and settings\user\Lionhead Studios
2011-05-24 14:19:04 -------- d-sh--w- c:\documents and settings\all users\application data\DSS
2011-05-24 14:18:13 -------- d-----w- c:\documents and settings\user\application data\Lionhead Studios
2011-05-17 04:24:07 -------- d-----w- c:\documents and settings\user\application data\Teleca
2011-05-17 04:23:53 -------- d-----w- c:\documents and settings\all users\application data\Sony Ericsson
2011-05-17 04:23:51 -------- d-----w- c:\program files\common files\Teleca Shared
2011-05-17 04:23:46 -------- d-----w- c:\documents and settings\all users\application data\Teleca
2011-05-17 04:22:05 5808 ----a-w- c:\windows\system32\drivers\w810wh.sys
2011-05-17 04:22:04 6176 ----a-w- c:\windows\system32\drivers\w810cm.sys
2011-05-17 04:21:59 -------- d-----w- c:\windows\Downloaded Installations
2011-05-15 02:02:42 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-09 15:50:48 -------- d-----w- c:\documents and settings\user\local settings\application data\My Games
.
==================== Find3M ====================
.
2011-06-07 13:08:44 16608 ----a-w- c:\windows\gdrv.sys
2011-05-29 01:11:30 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 01:11:20 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-03-28 17:46:40 98160 ----a-w- c:\windows\system32\drivers\idmtdi.sys
.
============= FINISH: 21:31:03.31 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-03.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 5/7/2005 11:24:05 PM
System Uptime: 6/7/2011 9:08:06 PM (0 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | EP43-DS3L
Processor: Intel Pentium III Xeon processor | Socket 775 | 2800/266mhz
Processor: Intel Pentium III Xeon processor | Socket 775 | 2800/266mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 146 GiB total, 76.375 GiB free.
D: is FIXED (NTFS) - 149 GiB total, 36.58 GiB free.
E: is CDROM (CDFS)
G: is Removable
H: is Removable
I: is Removable
J: is CDROM ()
K: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC
Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_02\4&2182FE78&0&00E5
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC
PNP Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_02\4&2182FE78&0&00E5
Service: RTLE8023xp
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0000
Manufacturer: Microsoft
Name: Bluetooth LAN Access Server Driver -
PNP Device ID: ROOT\MS_PASSTHRUMP\0000
Service: Passthru
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0001
Manufacturer: Microsoft
Name: PROLiNK WN2000 Mini USB2.0 Wireless Adapter -
PNP Device ID: ROOT\MS_PASSTHRUMP\0001
Service: Passthru
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0002
Manufacturer: Microsoft
Name: Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC -
PNP Device ID: ROOT\MS_PASSTHRUMP\0002
Service: Passthru
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0003
Manufacturer: Microsoft
Name: WAN Miniport (IP) -
PNP Device ID: ROOT\MS_PASSTHRUMP\0003
Service: Passthru
.
==== System Restore Points ===================
.
RP1: 4/16/2011 9:34:00 PM - System Checkpoint
RP2: 4/16/2011 9:34:15 PM - Advanced SystemCare RestorePoint
RP3: 4/17/2011 8:44:46 PM - Restore Operation
RP4: 4/17/2011 8:48:42 PM - Restore Operation
RP5: 4/17/2011 8:53:34 PM - Restore Operation
RP6: 4/18/2011 10:10:24 PM - System Checkpoint
RP7: 4/19/2011 10:42:25 PM - System Checkpoint
RP8: 4/21/2011 4:16:26 PM - System Checkpoint
RP9: 4/23/2011 11:00:09 AM - Removed The Sims: Medieval.
RP10: 4/23/2011 11:05:27 AM - Removed STREET FIGHTER IV.
RP11: 4/24/2011 1:51:19 PM - System Checkpoint
RP12: 4/25/2011 6:24:42 PM - System Checkpoint
RP13: 4/26/2011 1:13:03 PM - Removed Dragon Age 2.
RP14: 4/27/2011 3:54:22 PM - System Checkpoint
RP15: 4/27/2011 11:10:18 PM - Installed Bulletstorm.
RP16: 4/29/2011 11:25:25 AM - System Checkpoint
RP17: 4/30/2011 6:50:19 PM - System Checkpoint
RP18: 5/1/2011 8:30:11 PM - System Checkpoint
RP19: 5/2/2011 2:50:23 PM - Installed USB Vibration Joystick
RP20: 5/2/2011 2:59:54 PM - Installed DirectX
RP21: 5/2/2011 3:00:13 PM - Installed STREET FIGHTER IV.
RP22: 5/2/2011 3:42:58 PM - Unsigned driver install
RP23: 5/2/2011 7:13:36 PM - Removed STREET FIGHTER IV.
RP24: 5/2/2011 9:01:25 PM - Installed Pro Evolution Soccer 2010.
RP25: 5/6/2011 1:14:48 PM - System Checkpoint
RP26: 5/7/2011 3:15:01 PM - System Checkpoint
RP27: 5/8/2011 6:16:42 PM - System Checkpoint
RP28: 5/9/2011 11:48:21 PM - Installed DirectX
RP29: 5/10/2011 4:37:04 PM - Removed DarksidersInstaller.
RP30: 5/10/2011 4:37:14 PM - Removed DarksidersInstaller.
RP31: 5/11/2011 5:20:47 PM - System Checkpoint
RP32: 5/12/2011 6:53:54 PM - System Checkpoint
RP33: 5/13/2011 9:42:20 PM - System Checkpoint
RP34: 5/15/2011 2:24:55 PM - System Checkpoint
RP35: 5/16/2011 5:50:12 PM - System Checkpoint
RP36: 5/17/2011 12:22:30 PM - Installed Sony Ericsson PC Suite 1.20.173
RP37: 5/18/2011 7:51:23 PM - System Checkpoint
RP38: 5/19/2011 8:29:31 PM - System Checkpoint
RP39: 5/20/2011 8:45:02 PM - System Checkpoint
RP40: 5/22/2011 1:35:41 PM - System Checkpoint
RP41: 5/22/2011 6:32:11 PM - Installed DirectX
RP42: 5/22/2011 6:33:45 PM - Installed DirectX
RP43: 5/23/2011 10:19:44 PM - System Checkpoint
RP44: 5/24/2011 10:00:59 PM - Installed Fable III.
RP45: 5/24/2011 10:01:39 PM - Installed Fable III.
RP46: 5/25/2011 12:11:40 PM - Removed DarksidersInstaller.
RP47: 5/25/2011 12:12:01 PM - Removed Apple Software Update
RP48: 5/27/2011 8:44:42 PM - Removed Batman: Arkham Asylum
RP49: 5/27/2011 8:45:36 PM - Removed DarksidersInstaller.
RP50: 5/27/2011 8:51:43 PM - Removed Superstars?V8 Racing
RP51: 5/30/2011 7:16:38 PM - System Checkpoint
RP52: 6/1/2011 1:04:37 PM - System Checkpoint
RP53: 6/2/2011 2:58:02 PM - System Checkpoint
RP54: 6/3/2011 7:33:10 PM - System Checkpoint
RP55: 6/4/2011 5:32:28 PM - Installed Juiced
RP56: 6/5/2011 8:48:32 PM - Removed Juiced
RP57: 6/6/2011 11:37:56 AM - Removed Fable III.
RP58: 6/7/2011 11:17:19 AM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
RP59: 6/7/2011 12:06:17 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP60: 6/7/2011 3:30:28 PM - Restore Operation
RP61: 6/7/2011 6:53:08 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP62: 6/7/2011 8:58:30 PM - Installed HiJackThis
.
==== Installed Programs ======================
.
????? 2011
7-Zip 4.65
AC Tool
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.2.6
Adobe Shockwave Player 11.5
AnalogX Vocal Remover (WinAmp)
Angkor
Apple Application Support
Apple Mobile Device Support
AquaPOP
AutoCAD 2007 - English
Autodesk DWF Viewer
Avira AntiVir Personal - Free Antivirus
Barbie(TM) as Rapunzel
Barbie(TM) as The Princess and the Pauper
Batman: Arkham Asylum
Bejeweled 2
Bonjour
Bonnie's Bookstore
Brain Booster
Breaking News
Browser Configuration Utility
Bubblefish Bob
Cake Mania 2
Charles
Cheat Engine 5.5
Cheat Engine 5.6
Chicken Chase
Chinese Simplified Fonts Support For Adobe Reader 8
Chocolatier 2
Collapse II
CopyTrans Suite Remove Only
DarksidersInstaller
Dassault Systemes Software B16
Delicious Deluxe
Diner Dash Flo on the Go (remove only)
Disc2Phone
Dynomite
Energy Saver Advance B8.1015.1
Eusing Free Registry Cleaner
Fab Fashion
Farm Craft
Farm Mania
Feeding Frenzy 2
Finders Keepers
Finding Doggy
Fitness Dash
Forgotten Riddles The Mayan Princess
Futuremark SystemInfo
GameDrive
Garden Dreams
Garena 2010
Gold Miner Vegas
GOM Player
Google Chrome
Google Update Helper
Great Secrets Da Vinci
Haali Media Splitter
Happy Hour
Harvest Mania To Go
High Definition Audio Driver Package - KB888111
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB919880)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB954550-v5)
House Of Wonders The Kitty Kat Wedding
HyperMediaCenter
Iggle Pop
Insaniquarium
Internet Download Manager
IObit Toolbar v4.4
iPhone Explorer 2.101
iPhoneBrowser
iTunes
Janes Hotel
Java Auto Updater
Java(TM) 6 Update 24
JDownloader 0.9
Kudos 2
KWorld DVB-T Hybrid BDA Drivers
KWorld EM_USB Device Utilities
Lavenders Botanicals
Law And Order The Vengeful Heart
League of Legends
MadCaps
Magic Ball 2
Magic ISO Maker v5.5 (build 0281)
Malwarebytes' Anti-Malware version 1.51.0.1200
Matroska Pack
MCE Software Encoder 1.1
MEGAMANX8
meta-iPod, the iTunes Cleaner 1.8
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2003 Web Components
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft WSE 3.0 Runtime
Monkey Island 2 LeChucks Revenge Special Edition
Mozilla Firefox 4.0.1 (x86 en-US)
MSN
MSVCRT
MSXML 6.0 Parser (KB925673)
My Tribe
Mystery In London
Mystery PI The Lottery Ticket
Nero 7 Lite v7.7.5.1
neroxml
Ninja Log Out!
NVIDIA Drivers
NVIDIA PhysX
Octoshape Streaming Services
Operation Mania
Orca
Panda ActiveScan 2.0
Parking Dash
Pcsx2 0.9.6
Peggle Nights
Piggly Christmas Edition
Pizza Frenzy
Plant Tycoon
Posh Shop
PowerDVD
Prince of Persia T2T
Pro Evolution Soccer 2010
Project64 1.6
PROLiNK PROLiNK WN2000
QuickTime
Real Alternative 2.0.2
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Restoring Rhonda
Rocket Mania Deluxe
Rosetta Stone Version 3
Sallys Salon
Segoe UI
SimplePiano (remove only)
SKIPBO Castaway Caper
Skype Toolbars
Skype™ 4.2
Smart Defrag 2
SolidWorks 2008 SP0
Sony Ericsson Bluetooth Remote Control 4.01
Sony Ericsson PC Suite 1.20.173
SpeedBit Video Accelerator
Spider-Man(TM) - Friend or Foe
Spybot - Search & Destroy
Stand O Food
StarCraft II
Storm Codec
Sudoku Pagoda
Sunshine Acres
SUPERAntiSpyware
Sushi Frenzy
System Mania
System Requirements Lab
The Sims™ 3
The Sims™ 3 Ambitions
The Sims™ 3 Late Night
The Sims™ 3 World Adventures
The Witcher 2
Turtle Bay
Tweak UI
Typer Shark
USB Vibration Joystick
VibrateGameDeviceDriver
VideoLAN VLC media player 0.8.6a
Virtual Villagers 2
WebFldrs XP
Wedding Dash
WIDCOMM Bluetooth Software
Winamp (remove only)
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
WinRAR archiver
WinSCP 4.3.2
Word Web Deluxe
XML Paper Specification Shared Components Pack 1.0
Zuma
.
==== Event Viewer Messages From Past Week ========
.
6/7/2011 6:47:56 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the szserver service.
6/4/2011 4:56:18 PM, error: Service Control Manager [7000] - The npkcrypt service failed to start due to the following error: The system cannot find the path specified.
6/3/2011 2:29:10 PM, error: Service Control Manager [7000] - The Bluetooth Serial Driver service failed to start due to the following error: The system cannot find the file specified.
6/3/2011 2:29:10 PM, error: Service Control Manager [7000] - The Bluetooth Port Client Driver service failed to start due to the following error: The system cannot find the file specified.
6/2/2011 11:37:32 AM, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 00120EADBC99 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
6/2/2011 11:26:27 AM, error: Dhcp [1002] - The IP address lease 192.168.1.7 for the Network Card with network address 00120EADBC99 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
5/31/2011 8:22:47 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
5/31/2011 7:56:37 PM, error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
.
==== End Of File ===========================
TR/Agent.5599232 Trojan TR/Black.Gen2 Trojan TR/Spy.Gen Trojan TR/Trash.Gen TrojanAlso, I was having a few symptoms like:
the umbrella icon (avira) has disappeared from the system tray Cannot open any videos (youtube), and internet flash games (Facebook) Frequent detection of trojan from aviraand btw I've run a scan from a few anti spyware software which is Malwarebytes Removal and also Spybot and resolved the 2nd and 3rd problem. However, the icon for avira is still missing.
Here are the DDS logs that is requested. Thank you for the time reading this post. Help will be appreciated thanks again.
.
DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_24
Run by [removed] at 21:30:44 on 2011-06-07
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3326.2575 [GMT 8:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
D:\Program Files\Dassault Systemes\B16\intel_a\code\bin\CATSysDemon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PROLiNK\Common\RalinkRegistryWriter.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\MSI\BToes Bluetooth Software\BTTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\KWMUSIC\bin\kwmv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://eis.esnips.com/page/search/?clie ... fde8d1391d
mStart Page = hxxp://eis.esnips.com/page/search/?clie ... fde8d1391d
uInternet Settings,ProxyServer = 65.167.88.59:3128
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = about:blank
uURLSearchHooks: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\4.4\iobitToolbarIE.dll
uURLSearchHooks: DeviceVM Url Search Hook: {0063bf63-bfff-4b8f-9d26-4267df7f17dd} - c:\windows\system32\dvmurl.dll
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\4.4\iobitToolbarIE.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - No File
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {28387537-e3f9-4ed7-860c-11e69af4a8a0} - No File
TB: IObit Toolbar: {0bda0769-fd72-49f4-9266-e1fb004f4d8f} - c:\program files\iobit toolbar\ie\4.4\iobitToolbarIE.dll
EB: Groove Folder Synchronization: {2a541ae1-5bf6-4665-a8a3-cfa9672e4291} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpeedBitVideoAccelerator] c:\program files\speedbit video accelerator\VideoAccelerator.exe
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.2; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.freeonlinegames.com/embed.php?g_id=12952"
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [ctfmon.exe] ctfmon.exe
mRun: [RTBatteryMeter] c:\program files\vibrategamedevicedriver\RFPIcon.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [<NO NAME>]
mRun: [SearchSettings] "c:\program files\common files\spigot\search settings\SearchSettings.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\msi\btoes bluetooth software\BTTray.exe
mPolicies-system: EnableLUA = 0 (0x0)
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\msi\btoes bluetooth software\btsendto_ie_ctx.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\msi\btoes bluetooth software\btsendto_ie.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{15388BA7-7968-4A64-91A6-4A5A54481FAB} : DhcpNameServer = 192.168.1.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: TPSvc - TPSvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://istudent.uitm.edu.my/stp/home/main2.asp
FF - prefs.js: keyword.URL - hxxp://malaysia.search.yahoo.com/search ... =371596&p=
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\user\application data\idm\idmmzcc3\components\idmmzcc.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency3.5.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components\dtTransparency3.6.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar-ff3.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{def3454d-d9ea-4a19-8804-24f76d263ca4}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\user\application data\mozilla\firefox\profiles\jdup537t.default\extensions\{def3454d-d9ea-4a19-8804-24f76d263ca4}\components\RadioWMPCore.dll
FF - component: c:\program files\common files\spigot\wtxpcom\components\WidgiToolbarFF.dll
FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
FF - plugin: c:\documents and settings\user\application data\mozilla\plugins\npoctoshape.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2010-11-9 28552]
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-4-16 13496]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-11-6 11608]
R1 cdawdm;CDAWDM;c:\windows\system32\drivers\cdawdm.sys [2002-1-24 46735]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-4-6 98160]
R1 LUMDriver;LUMDriver;c:\windows\system32\drivers\LUMDriver.sys [2003-7-11 14912]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-18 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-11 67656]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-11-6 136360]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-11-6 269480]
R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2011-5-6 393112]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-11-6 61960]
R2 BBDemon;Backbone Service;d:\program files\dassault systemes\b16\intel_a\code\bin\CATSysDemon.exe [2005-9-6 35840]
R2 GEST Service;GEST Service for program management.;c:\program files\gigabyte\energysaver\GSvr.exe [2009-5-11 68136]
R2 RalinkRegistryWriter;Ralink Registry Writer;c:\program files\prolink\common\RalinkRegistryWriter.exe [2009-5-11 75040]
R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\speedb~1\videoacceleratorservice.exe -start -scm --> c:\progra~1\speedb~1\VideoAcceleratorService.exe -start -scm [?]
R3 DynCal;Dynamic Calibration Service;c:\windows\system32\drivers\DynCal.sys [2007-11-7 12928]
R3 rt2870;802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-5-11 650624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-8-17 136176]
S3 asc3360pr;asc3360pr;\??\c:\windows\system32\drivers\puloju.sys --> c:\windows\system32\drivers\puloju.sys [?]
S3 cpuz132;cpuz132;\??\c:\docume~1\user\locals~1\temp\cpuz132\cpuz132_x32.sys --> c:\docume~1\user\locals~1\temp\cpuz132\cpuz132_x32.sys [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\user\locals~1\temp\yue363.tmp --> c:\docume~1\user\locals~1\temp\YUE363.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\garena\safedrv.sys --> c:\program files\garena\safedrv.sys [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-8-17 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-11-6 39984]
S3 NPF;WinPcap Packet Driver (NPF);c:\windows\system32\drivers\npf.sys [2010-10-7 50704]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [2004-1-23 13952]
S3 PPortJoystick;Parallel Port Joystick device driver;c:\windows\system32\drivers\PPortJoy.sys [2004-1-23 28800]
S3 RAPIProtocol;Ralink RAPI Protocol Driver;c:\windows\system32\drivers\RAPIProtocol.sys [2009-5-11 16512]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== File Associations ===============
.
.scr=AutoCADScriptFile
.
=============== Created Last 30 ================
.
2011-06-07 13:27:29 -------- d--h--w- c:\windows\PIF
2011-06-07 12:58:31 388096 ----a-r- c:\documents and settings\user\application data\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-06-07 12:31:23 -------- d-----w- c:\documents and settings\user\application data\SUPERAntiSpyware.com
2011-06-07 12:31:23 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com
2011-06-07 12:31:16 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-06-07 07:31:07 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-06-07 07:31:07 -------- d-----w- c:\windows\system32\wbem\Repository
2011-06-07 03:17:27 -------- d-----w- c:\documents and settings\all users\application data\STOPzilla!
2011-06-04 09:32:28 81920 ----a-w- c:\program files\common files\installshield\updateservice\issch.exe
2011-06-04 09:32:28 512000 ----a-w- c:\program files\common files\installshield\updateservice\agent.exe
2011-06-04 09:32:28 368640 ----a-w- c:\program files\common files\installshield\updateservice\_isusres.dll
2011-06-04 09:32:28 217088 ----a-w- c:\program files\common files\installshield\updateservice\ISDM.exe
2011-06-04 09:32:28 -------- d-----w- c:\program files\THQ
2011-06-04 02:19:39 -------- d-----w- c:\documents and settings\all users\application data\NexonUS
2011-06-03 02:31:42 -------- d-----w- c:\documents and settings\user\application data\Nexon
2011-06-02 03:21:42 -------- d-----w- c:\documents and settings\user\application data\Search Settings
2011-06-02 03:21:39 -------- d-----w- c:\program files\IObit Toolbar
2011-06-02 03:21:39 -------- d-----w- c:\program files\common files\Spigot
2011-06-02 03:21:39 -------- d-----w- c:\program files\Application Updater
2011-05-25 03:43:06 -------- d-----w- c:\documents and settings\user\application data\Logia
2011-05-25 03:43:05 -------- d-----w- c:\program files\Logia
2011-05-24 14:19:56 -------- d-----w- c:\documents and settings\user\Lionhead Studios
2011-05-24 14:19:04 -------- d-sh--w- c:\documents and settings\all users\application data\DSS
2011-05-24 14:18:13 -------- d-----w- c:\documents and settings\user\application data\Lionhead Studios
2011-05-17 04:24:07 -------- d-----w- c:\documents and settings\user\application data\Teleca
2011-05-17 04:23:53 -------- d-----w- c:\documents and settings\all users\application data\Sony Ericsson
2011-05-17 04:23:51 -------- d-----w- c:\program files\common files\Teleca Shared
2011-05-17 04:23:46 -------- d-----w- c:\documents and settings\all users\application data\Teleca
2011-05-17 04:22:05 5808 ----a-w- c:\windows\system32\drivers\w810wh.sys
2011-05-17 04:22:04 6176 ----a-w- c:\windows\system32\drivers\w810cm.sys
2011-05-17 04:21:59 -------- d-----w- c:\windows\Downloaded Installations
2011-05-15 02:02:42 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-09 15:50:48 -------- d-----w- c:\documents and settings\user\local settings\application data\My Games
.
==================== Find3M ====================
.
2011-06-07 13:08:44 16608 ----a-w- c:\windows\gdrv.sys
2011-05-29 01:11:30 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 01:11:20 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-03-28 17:46:40 98160 ----a-w- c:\windows\system32\drivers\idmtdi.sys
.
============= FINISH: 21:31:03.31 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-03.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 5/7/2005 11:24:05 PM
System Uptime: 6/7/2011 9:08:06 PM (0 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | EP43-DS3L
Processor: Intel Pentium III Xeon processor | Socket 775 | 2800/266mhz
Processor: Intel Pentium III Xeon processor | Socket 775 | 2800/266mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 146 GiB total, 76.375 GiB free.
D: is FIXED (NTFS) - 149 GiB total, 36.58 GiB free.
E: is CDROM (CDFS)
G: is Removable
H: is Removable
I: is Removable
J: is CDROM ()
K: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC
Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_02\4&2182FE78&0&00E5
Manufacturer: Realtek Semiconductor Corp.
Name: Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC
PNP Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_02\4&2182FE78&0&00E5
Service: RTLE8023xp
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0000
Manufacturer: Microsoft
Name: Bluetooth LAN Access Server Driver -
PNP Device ID: ROOT\MS_PASSTHRUMP\0000
Service: Passthru
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0001
Manufacturer: Microsoft
Name: PROLiNK WN2000 Mini USB2.0 Wireless Adapter -
PNP Device ID: ROOT\MS_PASSTHRUMP\0001
Service: Passthru
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0002
Manufacturer: Microsoft
Name: Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC -
PNP Device ID: ROOT\MS_PASSTHRUMP\0002
Service: Passthru
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ROOT\MS_PASSTHRUMP\0003
Manufacturer: Microsoft
Name: WAN Miniport (IP) -
PNP Device ID: ROOT\MS_PASSTHRUMP\0003
Service: Passthru
.
==== System Restore Points ===================
.
RP1: 4/16/2011 9:34:00 PM - System Checkpoint
RP2: 4/16/2011 9:34:15 PM - Advanced SystemCare RestorePoint
RP3: 4/17/2011 8:44:46 PM - Restore Operation
RP4: 4/17/2011 8:48:42 PM - Restore Operation
RP5: 4/17/2011 8:53:34 PM - Restore Operation
RP6: 4/18/2011 10:10:24 PM - System Checkpoint
RP7: 4/19/2011 10:42:25 PM - System Checkpoint
RP8: 4/21/2011 4:16:26 PM - System Checkpoint
RP9: 4/23/2011 11:00:09 AM - Removed The Sims: Medieval.
RP10: 4/23/2011 11:05:27 AM - Removed STREET FIGHTER IV.
RP11: 4/24/2011 1:51:19 PM - System Checkpoint
RP12: 4/25/2011 6:24:42 PM - System Checkpoint
RP13: 4/26/2011 1:13:03 PM - Removed Dragon Age 2.
RP14: 4/27/2011 3:54:22 PM - System Checkpoint
RP15: 4/27/2011 11:10:18 PM - Installed Bulletstorm.
RP16: 4/29/2011 11:25:25 AM - System Checkpoint
RP17: 4/30/2011 6:50:19 PM - System Checkpoint
RP18: 5/1/2011 8:30:11 PM - System Checkpoint
RP19: 5/2/2011 2:50:23 PM - Installed USB Vibration Joystick
RP20: 5/2/2011 2:59:54 PM - Installed DirectX
RP21: 5/2/2011 3:00:13 PM - Installed STREET FIGHTER IV.
RP22: 5/2/2011 3:42:58 PM - Unsigned driver install
RP23: 5/2/2011 7:13:36 PM - Removed STREET FIGHTER IV.
RP24: 5/2/2011 9:01:25 PM - Installed Pro Evolution Soccer 2010.
RP25: 5/6/2011 1:14:48 PM - System Checkpoint
RP26: 5/7/2011 3:15:01 PM - System Checkpoint
RP27: 5/8/2011 6:16:42 PM - System Checkpoint
RP28: 5/9/2011 11:48:21 PM - Installed DirectX
RP29: 5/10/2011 4:37:04 PM - Removed DarksidersInstaller.
RP30: 5/10/2011 4:37:14 PM - Removed DarksidersInstaller.
RP31: 5/11/2011 5:20:47 PM - System Checkpoint
RP32: 5/12/2011 6:53:54 PM - System Checkpoint
RP33: 5/13/2011 9:42:20 PM - System Checkpoint
RP34: 5/15/2011 2:24:55 PM - System Checkpoint
RP35: 5/16/2011 5:50:12 PM - System Checkpoint
RP36: 5/17/2011 12:22:30 PM - Installed Sony Ericsson PC Suite 1.20.173
RP37: 5/18/2011 7:51:23 PM - System Checkpoint
RP38: 5/19/2011 8:29:31 PM - System Checkpoint
RP39: 5/20/2011 8:45:02 PM - System Checkpoint
RP40: 5/22/2011 1:35:41 PM - System Checkpoint
RP41: 5/22/2011 6:32:11 PM - Installed DirectX
RP42: 5/22/2011 6:33:45 PM - Installed DirectX
RP43: 5/23/2011 10:19:44 PM - System Checkpoint
RP44: 5/24/2011 10:00:59 PM - Installed Fable III.
RP45: 5/24/2011 10:01:39 PM - Installed Fable III.
RP46: 5/25/2011 12:11:40 PM - Removed DarksidersInstaller.
RP47: 5/25/2011 12:12:01 PM - Removed Apple Software Update
RP48: 5/27/2011 8:44:42 PM - Removed Batman: Arkham Asylum
RP49: 5/27/2011 8:45:36 PM - Removed DarksidersInstaller.
RP50: 5/27/2011 8:51:43 PM - Removed Superstars?V8 Racing
RP51: 5/30/2011 7:16:38 PM - System Checkpoint
RP52: 6/1/2011 1:04:37 PM - System Checkpoint
RP53: 6/2/2011 2:58:02 PM - System Checkpoint
RP54: 6/3/2011 7:33:10 PM - System Checkpoint
RP55: 6/4/2011 5:32:28 PM - Installed Juiced
RP56: 6/5/2011 8:48:32 PM - Removed Juiced
RP57: 6/6/2011 11:37:56 AM - Removed Fable III.
RP58: 6/7/2011 11:17:19 AM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
RP59: 6/7/2011 12:06:17 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP60: 6/7/2011 3:30:28 PM - Restore Operation
RP61: 6/7/2011 6:53:08 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP62: 6/7/2011 8:58:30 PM - Installed HiJackThis
.
==== Installed Programs ======================
.
????? 2011
7-Zip 4.65
AC Tool
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.2.6
Adobe Shockwave Player 11.5
AnalogX Vocal Remover (WinAmp)
Angkor
Apple Application Support
Apple Mobile Device Support
AquaPOP
AutoCAD 2007 - English
Autodesk DWF Viewer
Avira AntiVir Personal - Free Antivirus
Barbie(TM) as Rapunzel
Barbie(TM) as The Princess and the Pauper
Batman: Arkham Asylum
Bejeweled 2
Bonjour
Bonnie's Bookstore
Brain Booster
Breaking News
Browser Configuration Utility
Bubblefish Bob
Cake Mania 2
Charles
Cheat Engine 5.5
Cheat Engine 5.6
Chicken Chase
Chinese Simplified Fonts Support For Adobe Reader 8
Chocolatier 2
Collapse II
CopyTrans Suite Remove Only
DarksidersInstaller
Dassault Systemes Software B16
Delicious Deluxe
Diner Dash Flo on the Go (remove only)
Disc2Phone
Dynomite
Energy Saver Advance B8.1015.1
Eusing Free Registry Cleaner
Fab Fashion
Farm Craft
Farm Mania
Feeding Frenzy 2
Finders Keepers
Finding Doggy
Fitness Dash
Forgotten Riddles The Mayan Princess
Futuremark SystemInfo
GameDrive
Garden Dreams
Garena 2010
Gold Miner Vegas
GOM Player
Google Chrome
Google Update Helper
Great Secrets Da Vinci
Haali Media Splitter
Happy Hour
Harvest Mania To Go
High Definition Audio Driver Package - KB888111
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB919880)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB954550-v5)
House Of Wonders The Kitty Kat Wedding
HyperMediaCenter
Iggle Pop
Insaniquarium
Internet Download Manager
IObit Toolbar v4.4
iPhone Explorer 2.101
iPhoneBrowser
iTunes
Janes Hotel
Java Auto Updater
Java(TM) 6 Update 24
JDownloader 0.9
Kudos 2
KWorld DVB-T Hybrid BDA Drivers
KWorld EM_USB Device Utilities
Lavenders Botanicals
Law And Order The Vengeful Heart
League of Legends
MadCaps
Magic Ball 2
Magic ISO Maker v5.5 (build 0281)
Malwarebytes' Anti-Malware version 1.51.0.1200
Matroska Pack
MCE Software Encoder 1.1
MEGAMANX8
meta-iPod, the iTunes Cleaner 1.8
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2003 Web Components
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft WSE 3.0 Runtime
Monkey Island 2 LeChucks Revenge Special Edition
Mozilla Firefox 4.0.1 (x86 en-US)
MSN
MSVCRT
MSXML 6.0 Parser (KB925673)
My Tribe
Mystery In London
Mystery PI The Lottery Ticket
Nero 7 Lite v7.7.5.1
neroxml
Ninja Log Out!
NVIDIA Drivers
NVIDIA PhysX
Octoshape Streaming Services
Operation Mania
Orca
Panda ActiveScan 2.0
Parking Dash
Pcsx2 0.9.6
Peggle Nights
Piggly Christmas Edition
Pizza Frenzy
Plant Tycoon
Posh Shop
PowerDVD
Prince of Persia T2T
Pro Evolution Soccer 2010
Project64 1.6
PROLiNK PROLiNK WN2000
QuickTime
Real Alternative 2.0.2
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Restoring Rhonda
Rocket Mania Deluxe
Rosetta Stone Version 3
Sallys Salon
Segoe UI
SimplePiano (remove only)
SKIPBO Castaway Caper
Skype Toolbars
Skype™ 4.2
Smart Defrag 2
SolidWorks 2008 SP0
Sony Ericsson Bluetooth Remote Control 4.01
Sony Ericsson PC Suite 1.20.173
SpeedBit Video Accelerator
Spider-Man(TM) - Friend or Foe
Spybot - Search & Destroy
Stand O Food
StarCraft II
Storm Codec
Sudoku Pagoda
Sunshine Acres
SUPERAntiSpyware
Sushi Frenzy
System Mania
System Requirements Lab
The Sims™ 3
The Sims™ 3 Ambitions
The Sims™ 3 Late Night
The Sims™ 3 World Adventures
The Witcher 2
Turtle Bay
Tweak UI
Typer Shark
USB Vibration Joystick
VibrateGameDeviceDriver
VideoLAN VLC media player 0.8.6a
Virtual Villagers 2
WebFldrs XP
Wedding Dash
WIDCOMM Bluetooth Software
Winamp (remove only)
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
WinRAR archiver
WinSCP 4.3.2
Word Web Deluxe
XML Paper Specification Shared Components Pack 1.0
Zuma
.
==== Event Viewer Messages From Past Week ========
.
6/7/2011 6:47:56 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the szserver service.
6/4/2011 4:56:18 PM, error: Service Control Manager [7000] - The npkcrypt service failed to start due to the following error: The system cannot find the path specified.
6/3/2011 2:29:10 PM, error: Service Control Manager [7000] - The Bluetooth Serial Driver service failed to start due to the following error: The system cannot find the file specified.
6/3/2011 2:29:10 PM, error: Service Control Manager [7000] - The Bluetooth Port Client Driver service failed to start due to the following error: The system cannot find the file specified.
6/2/2011 11:37:32 AM, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 00120EADBC99 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
6/2/2011 11:26:27 AM, error: Dhcp [1002] - The IP address lease 192.168.1.7 for the Network Card with network address 00120EADBC99 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
5/31/2011 8:22:47 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
5/31/2011 7:56:37 PM, error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
.
==== End Of File ===========================
