TechSpot

[A] Request for help in cleaning computer 1 of 4 emails

Inactive
By agnesb
Jun 25, 2012
Topic Status:
Not open for further replies.
  1. Hello,

    Thanks for being there to help out folks like me. I followed the 5 step preliminary removal instructions. I'm sending a total of 4 emails. The Gmer log will be in the following three emails. Below is the log from Malwarebytes and info from DDS.txt and Attach.txt.

    Malwarebytes Anti-Malware 1.61.0.1400
    www.malwarebytes.org

    Database version: v2012.06.20.07

    Windows XP Service Pack 3 x86 NTFS
    Internet Explorer 7.0.5730.13
    Celeste Langstaff :: NONSEQUITUR [administrator]

    6/25/2012 9:47:34 AM
    mbam-log-2012-06-25 (09-47-34).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 294904
    Time elapsed: 38 minute(s), 20 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 1
    C:\Documents and Settings\Celeste Langstaff\My Documents\Downloads\SoftonicDownloader_for_task-killer.exe (PUP.ToolbarDownloader) -> Quarantined and deleted successfully.

    (end)


    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_24
    Run by Celeste Langstaff at 16:31:17 on 2012-06-25
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1084 [GMT -7:00]
    .
    AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Anvisoft\Anvi Smart Defender\ASDSrv.exe
    C:\Program Files\AVG\AVG2012\avgwdsvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\Program Files\AVG\AVG2012\avgnsx.exe
    C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
    C:\Program Files\LogMeIn\x86\RaMaint.exe
    C:\Program Files\LogMeIn\x86\LogMeIn.exe
    C:\Program Files\AVG\AVG2012\avgrsx.exe
    C:\Program Files\AVG\AVG2012\avgcsrvx.exe
    C:\WINDOWS\system32\nvsvc32.exe
    c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
    C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Compal Electronics, INC\Smart Watchdog\SWDsvc.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\system32\Wacom_Tablet.exe
    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
    C:\Program Files\X-Rite\Devices\Services\xrdd.exe
    C:\WINDOWS\system32\Wacom_Tablet.exe
    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Compal\Wireless Select Switch\WLSS.exe
    C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    C:\Program Files\Compal\Smart Battery\SMBTray.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\AVAST Software\Avast\avastUI.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\X-Rite\ColorMunki Display\ColorMunkiDisplayTray.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Documents and Settings\Celeste Langstaff\Application Data\Dropbox\bin\Dropbox.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\WINDOWS\system32\WISPTIS.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Documents and Settings\Celeste Langstaff\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Common Files\Corel\Standby\Standby.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.com/advanced_search?hl=en
    uInternet Settings,ProxyOverride = local;*.local
    BHO: AutorunsDisabled - No File
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
    BHO: AVG Do Not Track: {31332eef-cb9f-458f-afeb-d30e9a66b6ba} - c:\program files\avg\avg2012\avgdtiex.dll
    BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll
    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
    BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [nwiz] nwiz.exe /install
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NVMCTRAY.DLL,NvTaskbarInit
    mRun: [RTHDCPL] RTHDCPL.EXE
    mRun: [WLSS] c:\program files\compal\wireless select switch\WLSS.exe
    mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
    mRun: [SMBTray] c:\program files\compal\smart battery\SMBTray.exe
    mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    mRun: [Standby] "c:\program files\common files\corel\standby\Standby.exe" -START
    mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
    mRun: [AdobeCS5ServiceManager] "c:\program files\common files\adobe\cs5servicemanager\CS5ServiceManager.exe" -launchedbylogin
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
    StartupFolder: c:\docume~1\celest~1\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\celeste langstaff\application data\dropbox\bin\Dropbox.exe
    StartupFolder: c:\docume~1\celest~1\startm~1\programs\startup\taskmgr.lnk - c:\windows\system32\taskmgr.exe
    StartupFolder: c:\docume~1\celest~1\startm~1\programs\startup\autoru~1\screen~1.lnk - c:\windows\FSScrCtl.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\colorm~1.lnk - c:\program files\x-rite\colormunki display\ColorMunkiDisplayTray.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\xrgamma.lnk - c:\program files\x-rite\colormunki display\XRGamma.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\autoru~1\device~1.lnk - c:\program files\olympus vn-960pc recorder\devicedetector\DevDtct2.exe
    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\msoffi~1\office12\ONBttnIE.dll
    IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - c:\program files\avg\avg2012\avgdtiex.dll
    IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\msoffi~1\office12\REFIEBAR.DLL
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
    Trusted Zone: intuit.com\community
    DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} - hxxp://picasaweb.google.com/s/v/63.16/uploader2.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1200598978196
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
    DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab
    DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100
    Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks premier 2008\HelpAsyncPluggableProtocol.dll
    Handler: intu-help-qb2 - {84D77A00-41B5-4b8b-8ADF-86486D72E749} - c:\program files\intuit\quickbooks 2009\HelpAsyncPluggableProtocol.dll
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll
    Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
    Notify: LMIinit - LMIinit.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\celeste langstaff\application data\mozilla\firefox\profiles\0nykkaku.default\
    FF - prefs.js: browser.startup.homepage - about:blank|hxxp://www.google.com/advanced_search?hl=en
    FF - prefs.js: network.proxy.type - 1
    FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
    FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
    FF - plugin: c:\documents and settings\celeste langstaff\application data\facebook\npfbplugin_1_0_3.dll
    FF - plugin: c:\documents and settings\celeste langstaff\application data\mozilla\plugins\npgoogletalk.dll
    FF - plugin: c:\documents and settings\celeste langstaff\application data\mozilla\plugins\npgtpo3dautoplugin.dll
    FF - plugin: c:\documents and settings\celeste langstaff\local settings\application data\google\update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npatgpc.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
    FF - plugin: c:\program files\tabletplugins\npwacom.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-4-19 24896]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 31952]
    R0 EMSC;COMPAL Embedded System Control;c:\windows\system32\drivers\EMSC.sys [2008-1-18 9856]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-6-24 612184]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-6-24 337880]
    R1 avfsmn;avfsmn;c:\windows\system32\drivers\avfsmn.sys [2012-6-21 17704]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 235216]
    R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 41040]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-9-7 301248]
    R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2008-5-28 8944]
    R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2008-5-28 55024]
    R2 asdsrv;Anvi Smart Defender Realtime Guard Service;c:\program files\anvisoft\anvi smart defender\ASDSrv.exe [2012-4-28 644392]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-6-24 20696]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-6-24 44768]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\avgidsagent.exe [2012-4-30 5106744]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2012-2-14 193288]
    R2 avhips;AntiMalware Host-based Intrusion Prevention System;c:\windows\system32\drivers\avhips.sys [2012-6-21 23848]
    R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\logmein\x86\LMIGuardianSvc.exe [2010-11-3 374152]
    R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2008-8-11 12856]
    R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2008-11-7 47640]
    R2 Smart Watchdog;Smart Watchdog Service;c:\program files\compal electronics, inc\smart watchdog\SWDsvc.exe [2007-5-14 118784]
    R2 TabletServiceWacom;TabletServiceWacom;c:\windows\system32\Wacom_Tablet.exe [2010-7-10 5010288]
    R2 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver;c:\windows\system32\drivers\DDCDrv.sys [2011-10-13 10240]
    R2 xrdd.exe;X-Rite Device Services Manager;c:\program files\x-rite\devices\services\xrdd.exe [2011-10-11 203088]
    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2011-12-23 139856]
    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [2011-12-23 24144]
    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2011-12-23 17232]
    R3 CamFilter;CamFilter;c:\windows\system32\drivers\Camfilter.sys [2007-5-11 16640]
    R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [2010-7-10 16168]
    S2 avgcoresvc;LUsbFilt;c:\windows\system32\svchost.exe -k netsvcs [2004-8-4 14336]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-11-18 136176]
    S2 pavreport;Pae_avs;c:\windows\system32\svchost.exe -k netsvcs [2004-8-4 14336]
    S2 symantecantibotfilter;U81xmdm;c:\windows\system32\svchost.exe -k netsvcs [2004-8-4 14336]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-11-18 136176]
    S3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2008-1-17 36608]
    S3 LPRB;LPRB;c:\docume~1\celest~1\locals~1\temp\lprb.exe --> c:\docume~1\celest~1\locals~1\temp\LPRB.exe [?]
    S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2008-5-28 7408]
    S3 SwitchBoard;Adobe SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]
    S3 tapoas;TAP-Win32 Adapter OAS;c:\windows\system32\drivers\tapoas.sys [2011-8-19 26112]
    S3 vsdatant;vsdatant;\??\c:\windows\system32\vsdatant.sys --> c:\windows\system32\vsdatant.sys [?]
    S4 LMIRfsClientNP;LMIRfsClientNP; [x]
    .
    =============== Created Last 30 ================
    .
    2012-06-25 01:35:03 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-06-25 01:30:32 41184 ----a-w- c:\windows\avastSS.scr
    2012-06-25 01:29:04 -------- d-----w- c:\program files\AVAST Software
    2012-06-25 01:29:04 -------- d-----w- c:\documents and settings\all users\application data\AVAST Software
    2012-06-22 00:53:08 -------- d-----w- c:\windows\Task Killer
    2012-06-22 00:46:57 -------- d-----w- c:\windows\system32\Task Killer
    2012-06-21 17:50:52 -------- d-----w- c:\documents and settings\celeste langstaff\application data\Anvisoft
    2012-06-21 17:49:54 23848 ----a-w- c:\windows\system32\drivers\avhips.sys
    2012-06-21 17:49:54 17704 ----a-w- c:\windows\system32\drivers\avfsmn.sys
    2012-06-21 17:49:24 -------- d-----w- c:\program files\Anvisoft
    2012-06-20 21:51:49 -------- d-----w- c:\documents and settings\celeste langstaff\application data\Malwarebytes
    2012-06-20 21:51:36 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes
    2012-06-20 21:51:35 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-06-20 21:51:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2012-06-20 20:50:44 -------- d-----w- c:\program files\Dropbox
    2012-06-20 19:58:38 -------- d-----w- c:\program files\uTorrent
    2012-06-20 19:55:51 -------- d-----w- c:\documents and settings\celeste langstaff\application data\uTorrent
    2012-06-20 19:46:12 -------- d-----w- c:\documents and settings\celeste langstaff\application data\Titanium
    2012-06-20 19:34:40 26624 ----a-w- c:\windows\system32\drivers\tap0901.sys
    2012-06-20 19:08:23 -------- d-----w- c:\program files\Skype
    .
    ==================== Find3M ====================
    .
    2012-06-02 22:19:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
    2012-06-02 22:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
    2012-06-02 22:19:38 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
    2012-06-02 22:19:34 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
    2012-06-02 22:19:30 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
    2012-05-31 13:22:09 599040 ----a-w- c:\windows\system32\crypt32.dll
    2012-05-15 15:39:54 832512 ----a-w- c:\windows\system32\wininet.dll
    2012-05-15 13:20:33 1863168 ----a-w- c:\windows\system32\win32k.sys
    2012-05-04 13:16:13 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
    2012-05-04 12:32:19 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2012-05-02 13:46:36 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
    2012-04-23 14:46:47 78336 ----a-w- c:\windows\system32\ieencode.dll
    2012-04-23 14:46:47 1830912 ------w- c:\windows\system32\inetcpl.cpl
    2012-04-23 14:46:47 17408 ------w- c:\windows\system32\corpol.dll
    2012-04-19 11:50:26 24896 ----a-w- c:\windows\system32\drivers\avgidshx.sys
    .
    ============= FINISH: 16:38:08.92 ===============
    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows XP Home Edition
    Boot Device: \Device\HarddiskVolume1
    Install Date: 6/19/2008 8:31:36 PM
    System Uptime: 6/25/2012 4:03:31 PM (0 hours ago)
    .
    Motherboard: - | | JFL92
    Processor: Intel(R) Core(TM)2 Duo CPU T7500 @ 2.20GHz | U2E1 | 2194/mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 93 GiB total, 30.545 GiB free.
    D: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: Intel(R) Wireless WiFi Link 4965AGN
    Device ID: PCI\VEN_8086&DEV_4229&SUBSYS_11008086&REV_61\4&C308017&0&00E5
    Manufacturer: Intel Corporation
    Name: Intel(R) Wireless WiFi Link 4965AGN
    PNP Device ID: PCI\VEN_8086&DEV_4229&SUBSYS_11008086&REV_61\4&C308017&0&00E5
    Service: NETw4x32
    .
    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description:
    Device ID: ROOT\NET\0000
    Manufacturer:
    Name:
    PNP Device ID: ROOT\NET\0000
    Service:
    .
    ==== System Restore Points ===================
    .
    RP1: 3/29/2012 3:25:02 PM - System Checkpoint
    RP2: 3/31/2012 7:04:00 PM - System Checkpoint
    RP3: 4/1/2012 8:53:07 PM - System Checkpoint
    RP4: 6/20/2012 2:51:15 PM - Software Distribution Service 3.0
    RP5: 6/21/2012 11:08:56 AM - Installed OpenVPN Connect
    RP6: 6/22/2012 8:54:01 AM - Removed Private Internet Access Support Files
    RP7: 6/24/2012 6:29:04 PM - avast! Free Antivirus Setup
    RP8: 6/25/2012 6:48:06 AM - Software Distribution Service 3.0
    .
    ==== Installed Programs ======================
    .
    µTorrent
    2007 Microsoft Office system
    Activation Assistant for the 2007 Microsoft Office suites
    Adobe AIR
    Adobe Anchor Service CS4
    Adobe Bridge CS4
    Adobe CMaps CS4
    Adobe Color - Photoshop Specific CS4
    Adobe Color EU Extra Settings CS4
    Adobe Color JA Extra Settings CS4
    Adobe Color NA Recommended Settings CS4
    Adobe Color Video Profiles CS CS4
    Adobe Community Help
    Adobe CSI CS4
    Adobe Default Language CS4
    Adobe Device Central CS4
    Adobe Drive CS4
    Adobe ExtendScript Toolkit CS4
    Adobe Extension Manager CS4
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Fonts All
    Adobe Linguistics CS4
    Adobe Media Player
    Adobe Output Module
    Adobe PDF Library Files CS4
    Adobe Photoshop CS4
    Adobe Photoshop CS4 Support
    Adobe Photoshop CS5
    Adobe Reader X (10.1.3)
    Adobe Search for Help
    Adobe Service Manager Extension
    Adobe Setup
    Adobe Type Support CS4
    Adobe Update Manager CS4
    Adobe WinSoft Linguistics Plugin
    Adobe XMP Panels CS4
    AdobeColorCommonSetCMYK
    AdobeColorCommonSetRGB
    Anvi Smart Defender 1.01
    AnyDVD
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Audacity 1.2.6
    avast! Free Antivirus
    AVG 2012
    AVG PC Tuneup
    Bluetooth Stack for Windows by Toshiba
    Bonjour
    Business Contact Manager for Outlook 2007
    CCleaner
    CDCheck
    CloneCD
    CloneDVD2
    CloneDVDmobile
    CoffeeCup Free Zip Wizard
    CoffeeCup HTML Editor
    ColorMunki Display 1.0.2
    Connect
    Contents
    Core FTP LE 2.1
    Corel VideoStudio Pro X3
    CutePDF Writer 2.7
    DeviceIO
    DivX Web Player
    Dropbox
    DVD Suite
    EMSC
    EVEREST Home Edition v2.20
    Evrsoft First Page 2006
    EZ Vinyl Converter by MixMeister 1.0.6
    Facebook Plug-In
    Final Draft
    Final Draft 7
    Foxit PDF Editor
    Foxit Reader
    Google Chrome
    Google Talk Plugin
    Google Update Helper
    GoToMeeting 4.5.0.457
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB2570791)
    Hotfix for Windows XP (KB2633952)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB981793)
    ICA
    Impulse To Travel Screen Saver
    Intel(R) PROSet/Wireless Software
    IP Monitor
    iPhoneModem
    IPM_VS_Pro
    iTunes
    Java Auto Updater
    Java(TM) 6 Update 24
    KeePass Password Safe 1.11
    KTP Ware PS/2-x86 5.0.3.13
    kuler
    LogMeIn
    Magic MP3 Tagger 2.2.6
    Malwarebytes Anti-Malware version 1.61.0.1400
    mDriver
    Media Player Codec Pack 3.9.6
    MediaShow 3.0
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB2656353)
    Microsoft .NET Framework 1.1 Security Update (KB2656370)
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2003 Web Components
    Microsoft Office 2007 Primary Interop Assemblies
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Accounting 2007
    Microsoft Office Accounting ADP Payroll Addin
    Microsoft Office Accounting Equifax Addin
    Microsoft Office Accounting Fixed Asset Manager
    Microsoft Office Accounting PayPal Addin
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Home and Student 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Professional 2007
    Microsoft Office Professional Hybrid 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Small Business Connectivity Components
    Microsoft Office Word MUI (English) 2007
    Microsoft Software Update for Web Folders (English) 12
    Microsoft SQL Server 2005
    Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
    Microsoft SQL Server Native Client
    Microsoft SQL Server Setup Support Files (English)
    Microsoft SQL Server VSS Writer
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
    Microsoft Visual Studio 2005 Tools for Office Runtime
    Microsoft_VC80_ATL_x86
    Microsoft_VC80_CRT_x86
    Microsoft_VC80_MFC_x86
    Microsoft_VC80_MFCLOC_x86
    Microsoft_VC90_ATL_x86
    Microsoft_VC90_CRT_x86
    Microsoft_VC90_MFC_x86
    MLE
    MobileMe Control Panel
    Motorola SM56 Data Fax Modem
    Mozilla Firefox 11.0 (x86 en-US)
    MRU-Blaster v1.5 (Database 3/28/2004)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 4.0 SP2 Parser and SDK
    MSXML 6.0 Parser (KB933579)
    NVIDIA Drivers
    Nvu 1.0PR
    Olympus Digital Wave Player
    OLYMPUS DSS Player-Lite
    PageBreeze Free HTML Editor
    PDF Settings CS4
    PDF Settings CS5
    PhotoNow! 1.0
    Photoshop Camera Raw
    Power2Go 5.0
    PowerBackup 2.5
    PowerDVD
    PowerProducer
    PureHD
    QODBC Driver
    QuickBooks
    QuickBooks Enterprise Solutions: Accountant Edition 7.0
    QuickBooks Enterprise Solutions: Accountant Edition 9.0
    QuickBooks Premier: Accountant Edition 2006
    QuickBooks Premier: Accountant Edition 2008
    QuickBooks Premier: Accountant Edition 2009
    QuickTime
    RealNetworks - Microsoft Visual C++ 2008 Runtime
    RealPlayer
    Realtek High Definition Audio Driver
    RealUpgrade 1.0
    RealUpgrade 1.1
    Registry Mechanic 7.0
    RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Windows Internet Explorer 7 (KB2183461)
    Security Update for Windows Internet Explorer 7 (KB2360131)
    Security Update for Windows Internet Explorer 7 (KB2416400)
    Security Update for Windows Internet Explorer 7 (KB2482017)
    Security Update for Windows Internet Explorer 7 (KB2497640)
    Security Update for Windows Internet Explorer 7 (KB2530548)
    Security Update for Windows Internet Explorer 7 (KB2544521)
    Security Update for Windows Internet Explorer 7 (KB2559049)
    Security Update for Windows Internet Explorer 7 (KB2586448)
    Security Update for Windows Internet Explorer 7 (KB2618444)
    Security Update for Windows Internet Explorer 7 (KB2647516)
    Security Update for Windows Internet Explorer 7 (KB2699988)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Internet Explorer 7 (KB969897)
    Security Update for Windows Internet Explorer 7 (KB972260)
    Security Update for Windows Internet Explorer 7 (KB974455)
    Security Update for Windows Internet Explorer 7 (KB976325)
    Security Update for Windows Internet Explorer 7 (KB978207)
    Security Update for Windows Internet Explorer 7 (KB982381)
    Security Update for Windows Media Encoder (KB2447961)
    Security Update for Windows Media Encoder (KB954156)
    Security Update for Windows Media Encoder (KB979332)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB936782)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2279986)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2296199)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2412687)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2436673)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476490)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2479943)
    Security Update for Windows XP (KB2481109)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB2485663)
    Security Update for Windows XP (KB2503658)
    Security Update for Windows XP (KB2503665)
    Security Update for Windows XP (KB2506212)
    Security Update for Windows XP (KB2506223)
    Security Update for Windows XP (KB2507618)
    Security Update for Windows XP (KB2507938)
    Security Update for Windows XP (KB2508272)
    Security Update for Windows XP (KB2508429)
    Security Update for Windows XP (KB2509553)
    Security Update for Windows XP (KB2510581)
    Security Update for Windows XP (KB2511455)
    Security Update for Windows XP (KB2524375)
    Security Update for Windows XP (KB2535512)
    Security Update for Windows XP (KB2536276-v2)
    Security Update for Windows XP (KB2536276)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2544893)
    Security Update for Windows XP (KB2555917)
    Security Update for Windows XP (KB2562937)
    Security Update for Windows XP (KB2566454)
    Security Update for Windows XP (KB2567053)
    Security Update for Windows XP (KB2567680)
    Security Update for Windows XP (KB2570222)
    Security Update for Windows XP (KB2570947)
    Security Update for Windows XP (KB2584146)
    Security Update for Windows XP (KB2585542)
    Security Update for Windows XP (KB2592799)
    Security Update for Windows XP (KB2598479)
    Security Update for Windows XP (KB2603381)
    Security Update for Windows XP (KB2618451)
    Security Update for Windows XP (KB2619339)
    Security Update for Windows XP (KB2620712)
    Security Update for Windows XP (KB2624667)
    Security Update for Windows XP (KB2631813)
    Security Update for Windows XP (KB2633171)
    Security Update for Windows XP (KB2639417)
    Security Update for Windows XP (KB2646524)
    Security Update for Windows XP (KB2653956)
    Security Update for Windows XP (KB2659262)
    Security Update for Windows XP (KB2660465)
    Security Update for Windows XP (KB2661637)
    Security Update for Windows XP (KB2676562)
    Security Update for Windows XP (KB2685939)
    Security Update for Windows XP (KB2686509)
    Security Update for Windows XP (KB2695962)
    Security Update for Windows XP (KB2707511)
    Security Update for Windows XP (KB2709162)
    Security Update for Windows XP (KB923789)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB977165-v2)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981349)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Setup
    Share
    Skype™ 4.0
    Smart Battery
    Smart Watchdog
    SmartSound Common Data
    SmartSound Quicktracks 5
    SpaceMonger 2.1.1
    Spybot - Search & Destroy
    SpywareBlaster 4.2
    Suite Shared Configuration CS4
    SUPERAntiSpyware Free Edition
    SupportSoft Assisted Service
    Task Killer (remove only)
    Trojan Remover 6.8.1
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 7 (KB976749)
    Update for Windows Internet Explorer 7 (KB980182)
    Update for Windows XP (KB2141007)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2467659)
    Update for Windows XP (KB2541763)
    Update for Windows XP (KB2616676-v2)
    Update for Windows XP (KB2641690)
    Update for Windows XP (KB2718704)
    Update for Windows XP (KB971029)
    USB Video Device
    Veoh Web Player
    VIO
    Visual Studio 2005 Tools for Office Second Edition Runtime
    VSClassic
    VSPro
    Wacom Tablet
    WebEx
    WebFldrs XP
    WebTablet IE Plugin
    WebTablet Netscape Plugin
    WIDCOMM Bluetooth Software
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Installer Clean Up
    Windows Internet Explorer 7
    Windows Media Encoder 9 Series
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player Firefox Plugin
    Windows XP Service Pack 3
    WinRAR archiver
    Wireless Select Switch
    Wow Video&Audio utility
    X-Rite Device Services Manager
    XRD i1d3
    Zinio Reader 4
    Zortam Mp3 Media Studio 10.60
    .
    ==== Event Viewer Messages From Past Week ========
    .
    6/25/2012 11:42:00 AM, error: atapi [9] - The device, \Device\Ide\IdePort2, did not respond within the timeout period.
    6/25/2012 11:24:34 AM, error: Ntfs [55] - The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.
    6/24/2012 7:21:45 PM, error: HTTP [15005] - Unable to bind to the underlying transport for 0.0.0.0:2869. The IP Listen-Only list may contain a reference to an interface which may not exist on this machine. The data field contains the error number.
    6/24/2012 6:57:20 PM, error: Service Control Manager [7023] - The Anvi Smart Defender Realtime Guard Service service terminated with the following error: The system cannot find the file specified.
    6/21/2012 6:10:57 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.
    6/21/2012 6:10:57 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
    6/21/2012 6:10:43 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: avfsmn Avgldx86 Avgmfx86 ElbyCDIO EMSC Fips intelppm SASDIFSV SASKUTIL Tosrfcom
    6/21/2012 6:10:17 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
    6/21/2012 6:09:56 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
    6/21/2012 6:09:31 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    6/21/2012 4:40:45 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service LogMeIn with arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
    6/21/2012 12:54:07 PM, error: Dhcp [1002] - The IP address lease 10.28.3.38 for the Network Card with network address 00FFDC2265C9 has been denied by the DHCP server 10.28.20.33 (The DHCP Server sent a DHCPNACK message).
    6/21/2012 12:51:07 PM, error: Dhcp [1002] - The IP address lease 10.21.20.14 for the Network Card with network address 00FFDC2265C9 has been denied by the DHCP server 10.28.3.37 (The DHCP Server sent a DHCPNACK message).
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Zdeviceservice service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Wpsscannersvc service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Webcompserver service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Vwkernel service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The USBMN1X1 service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The U81xmdm service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Tunnelguardservice service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The SymIM service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Swupdtmr service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Sr_watchdog service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The SNPSTD3 service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Sisperf service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Se45mdm service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Rt2500 service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Rismxdp service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The PTDCMdm service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Procmon10 service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Pinnaclesys.mediaserver service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Pinger service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Pae_avs service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The P1131vid service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Omniusb service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Olregcap service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Odclientservice service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Nsctop service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The NPPTNT service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Mwspollserver service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The MSMQ service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Mrpostman service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Mgactrl service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Maplom service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The LUsbFilt service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The LMouFilt service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Kpf4 service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Kavsvc service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Imountsrv service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Ikfileflt service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The IJPLMSVC service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Iirsp service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Ibmpmsvc service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Help and Support service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Govsrv service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Genmcmn service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Fasttraksvc service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Epfw service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The EIO service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Eelsservice service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Dlcc_device service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Defragfs service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The DcCam service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The CXAVXBAR service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Cwafrmiregistry service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The CrystalSysInfo service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Ccsetmgr service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Atitool service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Aracpi service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The Addfiltr service terminated with the following error: The specified module could not be found.
    6/21/2012 10:45:19 AM, error: Service Control Manager [7023] - The .netframework service terminated with the following error: The specified module could not be found.
    6/21/2012 10:20:22 AM, error: Dhcp [1002] - The IP address lease 10.26.3.10 for the Network Card with network address 00FF1533281F has been denied by the DHCP server 10.26.20.21 (The DHCP Server sent a DHCPNACK message).
    6/20/2012 9:51:54 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
    6/20/2012 8:13:27 PM, error: BROWSER [8007] - The browser was unable to update the service status bits. The data is the error.
    6/20/2012 2:50:02 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
    6/20/2012 2:50:02 PM, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    6/20/2012 2:40:34 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    6/20/2012 2:40:32 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect.
    6/20/2012 10:40:08 AM, error: Service Control Manager [7034] - The QBCFMonitorService service terminated unexpectedly. It has done this 1 time(s).
    .
    ==== End Of File ===========================
  2. agnesb

    agnesb Newcomer, in training Topic Starter

    Sorry, only 2 emails. I thought the gmer.log was going to be huge because I clicked on the Scan button. Realized my mistake, closed Gmer then ran it again and did not click the Scan button. Here's what it showed:

    GMER 1.0.15.15641 - http://www.gmer.net
    Rootkit quick scan 2012-06-25 17:52:21
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-e Hitachi_HTS722010K9SA00 rev.DC2OC76A
    Running: 6jdct024.exe; Driver: C:\DOCUME~1\CELEST~1\LOCALS~1\Temp\uxriqaoc.sys


    ---- System - GMER 1.0.15 ----

    SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwEnumerateKey [0xB6F8F28E]
    SSDT \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software) ZwEnumerateValueKey [0xB6F8F0F9]

    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0xB7004D92]
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObInsertObject
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject

    ---- Devices - GMER 1.0.15 ----

    Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/AVAST Software)

    AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software)
    AttachedDevice \FileSystem\Ntfs \Ntfs avgidsfilterx.sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
    AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\Tcp AswRdr.SYS (avast! TDI Redirect Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\Udp AswRdr.SYS (avast! TDI Redirect Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\RawIp AswRdr.SYS (avast! TDI Redirect Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)

    ---- EOF - GMER 1.0.15 ----
  3. Broni

    Broni Malware Annihilator Posts: 46,447   +252

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running tools or applying updates other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    =================================================

    1. You're not saying what computer problems are.

    2. You're running two AV programs, AVG and Avast.
    One of them has to go.
    If AVG use AVG Remover: http://www.avg.com/us-en/utilities
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.