TechSpot

Computer runs slow all of a sudden...is ak.exe.imgfarm a virus?

Solved
By cjprang
Feb 9, 2011
  1. Hi,

    Computer: Laptop with XP Pro and all service packs and updates.

    Problems:
    1. Garbled sound(this includes during start up, playing music), but not in all cases
    2. Slow start up
    3. Shows a different box during start up

    How it started: Everything was fine. I had Outlook 2003, Firefox, iTunes and a Word document open. I went to YouTube and started to watch a video (music) and then I either tried to pause the video, X out of the browser tab or bring up the Word document I had open. Then it bogged down, but the music kept playing. I tried closing some things but it was slow. So I waited for the computer to chill and then started closing everything. I got everything closed, but it was still slow. So I went to defrag with Diskeeper 2009 home edition. I did, but something was not right with Diskeeper...the schedule section was greyed out and normally it is not. I rebooted and it took at least several minutes and brought up a different Microsoft box and then switched to the regular one. While rebooting the Windows chime was garbled...had not been that way before.

    So I defragged again, cleaned my temp files, compressed files, etc. Diskeeper was still messed up, so I uninstalled and reinstalled and it is now working and looking fine, but the computer is hesitant and when I play music it is garbled. I tried reinstalling a sound card, but that didn't help.

    Other than deleting files...which I do routinely, I did remove Microsoft.Net Framework several days prior.

    I ran Hijack this (see below). Any ideas...other than reformatting the hard drive?

    Thanks for the help.

    Chris

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 1:50:40 PM, on 2/9/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AVG\AVG10\avgtray.exe
    C:\Program Files\AVG\AVG10\avgwdsvc.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
    C:\Program Files\AVG\AVG10\avgnsx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\AVG\AVG10\avgrsx.exe
    C:\Program Files\AVG\AVG10\avgcsrvx.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://agents.humana.com/AgentHome/Home.aspx
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
    O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
    O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/WebfettiInitialSetup1.0.1.1.cab
    O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: IBackupWeb - Pro-Softnet - C:\IBackup for Windows\IBackupWebM.exe
    O23 - Service: IBWin Service - Pro Softnet Corporation - C:\IBackup for Windows\IBWin Service_955.exe
    O23 - Service: IDriveE Service - Pro Softnet Corporation - C:\Program Files\IDrive\IDriveE Service.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: IDrive WebManager (IDriveWebM) - Pro-Softnet - C:\Program Files\IDrive\IDriveWebM.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
    O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
    O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

    --
    End of file - 8437 bytes
     
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    [​IMG]
    (Image courtesy animationplayhouse.com)

    Welcome to TechSpot, Chris!
    ak.exe.imgfarm is part of the name of a website for images. I note is has FunWebProducts which is a straight road to the MyWebSearch Malware. If you system is badly infected with this, it could be at least a part of the reason for the slowdown.

    I'll be glad to help but we don't screen for malware using HijackThis.

    If you would like us to check the system for malware, please follow the steps in the Preliminary Virus and Malware Removal thread HERE.

    When you have finished, leave the logs for review in your next reply .
    NOTE: Logs must be pasted in the replies. Attached logs will not be reviewed.

    Important!
    Please do not use any other cleaning programs or scans while I'm helping you, unless I direct you to. Do not use a Registry cleaner or make any changes in the Registry.
     
  3. cjprang

    cjprang TS Rookie Topic Starter

    Having trouble with GMER

    Hi,

    I ran GMER and when I clicked Save it bogged down. I waited and waited and finally gave up and powered off the laptop by holding down the power button. After it restarted I ran GMER again. After some time my screen turned black. So I shut it down again. I started to run GMER again and after a few minutes the computer restarted. I tried again and it did the same thing. Then it gave me a warning message and I said No. Apparently GMER will not run now. What do I do?

    Chris
     
  4. cjprang

    cjprang TS Rookie Topic Starter

    Logs

    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org

    Database version: 5724

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    2/9/2011 5:49:00 PM
    mbam-log-2011-02-09 (17-49-00).txt

    Scan type: Quick scan
    Objects scanned: 143020
    Time elapsed: 25 minute(s), 1 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 5
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)



    GMER 1.0.15.15530 - http://www.gmer.net
    Rootkit scan 2011-02-10 07:19:45
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4 WDC_WD2500BEVE-00WZT0 rev.01.01A01
    Running: z9g1ux3x.exe; Driver: C:\DOCUME~1\CJP\LOCALS~1\Temp\kxrdapow.sys


    ---- System - GMER 1.0.15 ----

    SSDT Lbd.sys (Boot Driver/Lavasoft AB) ZwCreateKey [0xF75AE87E]
    SSDT Lbd.sys (Boot Driver/Lavasoft AB) ZwSetValueKey [0xF75AEBFE]

    ---- Kernel code sections - GMER 1.0.15 ----

    .text ntoskrnl.exe!_abnormal_termination + F0 804E275C 4 Bytes CALL 10AF1EBB

    ---- Devices - GMER 1.0.15 ----

    AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
    AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

    ---- EOF - GMER 1.0.15 ----




    DDS (Ver_10-12-12.02) - NTFSx86
    Run by CJP at 7:50:51.09 on Thu 02/10/2011
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1007.347 [GMT -5:00]

    AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}

    ============== Running Processes ===============

    C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\AVG\AVG10\avgwdsvc.exe
    C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\Program Files\AVG\AVG10\avgnsx.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AVG\AVG10\avgtray.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\PROGRA~1\AVG\AVG10\avgrsx.exe
    C:\Program Files\AVG\AVG10\avgcsrvx.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Documents and Settings\CJP\My Documents\Downloads\dds.scr

    ============== Pseudo HJT Report ===============

    uSearch Page = hxxp://www.google.com
    uSearch Bar = hxxp://www.google.com/ie
    uInternet Settings,ProxyOverride = *.local
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    mSearchAssistant = hxxp://www.google.com/ie
    mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
    BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\swg.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
    TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
    uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
    mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
    DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
    Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
    Notify: igfxcui - igfxsrvc.dll
    Notify: IntelWireless - c:\program files\intel\wireless\bin\LgNotify.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\cjp\applic~1\mozilla\firefox\profiles\sri41bpm.default\
    FF - prefs.js: browser.startup.homepage - www.ChristianEconomicReport.com
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
    FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\nphssb.dll
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
    FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
    FF - Ext: Screen Capture Elite: screencaptureelite@plugin - %profile%\extensions\screencaptureelite@plugin
    FF - Ext: Forecastfox Weather: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3} - %profile%\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
    FF - Ext: Torbutton: {e0204bd5-9d31-402b-a99d-a6aa8ffebdca} - %profile%\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
    FF - Ext: BetterPrivacy: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} - %profile%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}

    ============= SERVICES / DRIVERS ===============

    R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064]
    R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2010-5-22 64288]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 251728]
    R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-9-7 299984]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-1-6 6128720]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400]
    R2 IBFs;IBackup File System Driver;c:\ibackup drive\IBfs.sys [2010-5-22 35840]
    R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2010-8-12 1375992]
    R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-7-15 35088]
    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 123472]
    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 30288]
    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 26192]
    R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\lavasoft\ad-aware\kernexplorer.sys [2010-8-12 15264]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-5-22 136176]
    S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2010-10-17 517448]
    S3 DKRtWrt;DKRtWrt;c:\windows\system32\drivers\DKRtWrt.sys [2010-5-22 46256]
    S3 IBackupWeb;IBackupWeb;c:\ibackup for windows\IBackupWebM.exe [2010-5-22 54760]
    S3 IBNP;IBackup Network Provider; [x]
    S3 IDriveE Service;IDriveE Service;c:\program files\idrive\IDriveE Service.exe [2010-5-22 148936]
    S3 IDriveWebM;IDrive WebManager;c:\program files\idrive\IDriveWebM.exe [2010-5-22 267720]
    S3 TuneConvertAudio;TuneConvertAudio;c:\windows\system32\drivers\TuneConvertAudio.sys [2010-11-28 23608]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; [x]

    =============== Created Last 30 ================

    2011-02-09 21:57:15 -------- d-----w- c:\docume~1\cjp\applic~1\Malwarebytes
    2011-02-09 21:15:41 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2011-02-09 21:15:35 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
    2011-02-09 21:15:25 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-02-09 21:15:24 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2011-02-09 19:58:38 -------- d-----w- c:\program files\Spybot - Search & Destroy
    2011-02-09 19:58:38 -------- d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
    2011-02-08 23:03:31 -------- d-----w- c:\program files\common files\Diskeeper Corporation
    2011-02-08 23:03:22 -------- d-----w- c:\docume~1\alluse~1\applic~1\Diskeeper Corporation
    2011-02-08 23:03:16 -------- d-----w- c:\program files\Diskeeper Corporation
    2011-01-30 19:57:00 103864 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
    2011-01-30 19:57:00 103864 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
    2011-01-28 04:02:24 -------- d-----w- c:\program files\iPod
    2011-01-28 02:04:52 -------- d-----w- c:\windows\system32\NtmsData
    2011-01-28 01:11:49 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVS4YOU
    2011-01-28 01:11:18 -------- d-----w- c:\docume~1\cjp\applic~1\AVS4YOU
    2011-01-28 01:09:08 10833920 ----a-w- c:\windows\system32\libmfxsw32.dll
    2011-01-28 01:09:05 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
    2011-01-28 01:09:05 10915840 ----a-w- c:\windows\system32\libmfxhw32.dll
    2011-01-28 01:09:02 -------- d-----w- c:\program files\AVS4YOU
    2011-01-28 01:08:38 -------- d-----w- c:\program files\common files\AVSMedia
    2011-01-21 14:44:37 439296 -c----w- c:\windows\system32\dllcache\shimgvw.dll
    2011-01-13 00:18:45 -------- d-----w- c:\docume~1\cjp\locals~1\applic~1\WMTools Downloaded Files

    ==================== Find3M ====================

    2011-02-07 23:43:59 256 ----a-w- c:\windows\system32\pool.bin
    2011-01-21 14:44:37 439296 ----a-w- c:\windows\system32\shimgvw.dll
    2011-01-07 14:09:02 290048 ----a-w- c:\windows\system32\atmfd.dll
    2010-12-31 13:10:33 1854976 ----a-w- c:\windows\system32\win32k.sys
    2010-12-22 12:34:28 301568 ----a-w- c:\windows\system32\kerberos.dll
    2010-12-20 23:59:20 916480 ----a-w- c:\windows\system32\wininet.dll
    2010-12-20 23:59:19 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2010-12-20 23:59:19 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2010-12-20 17:26:00 730112 ----a-w- c:\windows\system32\lsasrv.dll
    2010-12-20 12:55:26 385024 ----a-w- c:\windows\system32\html.iec
    2010-12-09 15:15:09 718336 ----a-w- c:\windows\system32\ntdll.dll
    2010-12-09 14:30:22 33280 ----a-w- c:\windows\system32\csrsrv.dll
    2010-12-09 13:38:47 2192768 ----a-w- c:\windows\system32\ntoskrnl.exe
    2010-12-09 13:07:05 2069376 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2010-11-29 22:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
    2010-11-29 22:38:30 69632 -c--a-w- c:\windows\system32\QuickTime.qts
    2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
    2010-11-13 00:18:08 24576 ----a-w- c:\windows\system32\msxml3a.dll

    ============= FINISH: 7:52:26.76 ===============





    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-12-12.02)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 5/22/2010 12:56:42 PM
    System Uptime: 2/10/2011 7:21:12 AM (0 hours ago)

    Motherboard: ASUSTeK Computer Inc. | | M7A
    Processor: Intel(R) Pentium(R) M processor 1.73GHz | Socket 478 | 1728/133mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 233 GiB total, 194.931 GiB free.
    D: is CDROM ()

    ==== Disabled Device Manager Items =============

    Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
    Description: PCI Modem
    Device ID: PCI\VEN_8086&DEV_266D&SUBSYS_18861043&REV_04\3&267A616A&0&F3
    Manufacturer:
    Name: PCI Modem
    PNP Device ID: PCI\VEN_8086&DEV_266D&SUBSYS_18861043&REV_04\3&267A616A&0&F3
    Service:

    ==== System Restore Points ===================

    RP286: 11/11/2010 9:52:55 PM - System Checkpoint
    RP287: 11/12/2010 10:41:11 PM - System Checkpoint
    RP288: 11/14/2010 8:32:57 AM - System Checkpoint
    RP289: 11/15/2010 12:37:02 PM - System Checkpoint
    RP290: 11/16/2010 8:13:01 PM - System Checkpoint
    RP291: 11/17/2010 8:43:16 PM - System Checkpoint
    RP292: 11/18/2010 10:21:14 PM - System Checkpoint
    RP293: 11/19/2010 11:05:40 PM - System Checkpoint
    RP294: 11/21/2010 12:04:36 AM - System Checkpoint
    RP295: 11/22/2010 1:04:37 AM - System Checkpoint
    RP296: 11/23/2010 2:04:35 AM - System Checkpoint
    RP297: 11/24/2010 3:04:35 AM - System Checkpoint
    RP298: 11/25/2010 3:18:05 AM - System Checkpoint
    RP299: 11/26/2010 3:18:23 AM - System Checkpoint
    RP300: 11/27/2010 4:18:23 AM - System Checkpoint
    RP301: 11/28/2010 5:18:24 AM - System Checkpoint
    RP302: 11/29/2010 7:32:07 AM - System Checkpoint
    RP303: 11/30/2010 8:29:21 AM - System Checkpoint
    RP304: 12/1/2010 8:38:35 AM - System Checkpoint
    RP305: 12/2/2010 9:37:31 AM - System Checkpoint
    RP306: 12/3/2010 10:36:08 AM - System Checkpoint
    RP307: 12/4/2010 10:37:34 AM - System Checkpoint
    RP308: 12/5/2010 11:46:25 AM - System Checkpoint
    RP309: 12/6/2010 12:05:13 PM - System Checkpoint
    RP310: 12/7/2010 12:38:35 PM - System Checkpoint
    RP311: 12/8/2010 9:59:46 PM - System Checkpoint
    RP312: 12/9/2010 10:22:50 PM - System Checkpoint
    RP313: 12/10/2010 10:23:56 PM - System Checkpoint
    RP314: 12/11/2010 10:43:06 PM - System Checkpoint
    RP315: 12/12/2010 11:22:55 PM - System Checkpoint
    RP316: 12/13/2010 11:23:02 PM - System Checkpoint
    RP317: 12/15/2010 12:23:05 AM - System Checkpoint
    RP318: 12/15/2010 7:06:25 AM - Software Distribution Service 3.0
    RP319: 12/16/2010 7:13:35 AM - System Checkpoint
    RP320: 12/16/2010 5:09:01 PM - Installed Windows Media Player 11
    RP321: 12/16/2010 5:13:46 PM - Installed Windows XP MSCompPackV1.
    RP322: 12/17/2010 9:05:40 PM - System Checkpoint
    RP323: 12/19/2010 12:44:07 AM - System Checkpoint
    RP324: 12/20/2010 1:27:51 AM - System Checkpoint
    RP325: 12/21/2010 2:27:47 AM - System Checkpoint
    RP326: 12/22/2010 3:27:48 AM - System Checkpoint
    RP327: 12/23/2010 4:27:48 AM - System Checkpoint
    RP328: 12/24/2010 12:00:09 PM - System Checkpoint
    RP329: 12/25/2010 1:52:35 PM - System Checkpoint
    RP330: 12/26/2010 2:43:05 PM - System Checkpoint
    RP331: 12/27/2010 3:43:03 PM - System Checkpoint
    RP332: 12/28/2010 4:43:09 PM - System Checkpoint
    RP333: 12/29/2010 5:28:22 PM - System Checkpoint
    RP334: 12/30/2010 9:53:03 PM - System Checkpoint
    RP335: 1/1/2011 8:13:16 AM - System Checkpoint
    RP336: 1/2/2011 8:33:27 AM - System Checkpoint
    RP337: 1/3/2011 9:33:30 AM - System Checkpoint
    RP338: 1/4/2011 9:46:13 AM - System Checkpoint
    RP339: 1/5/2011 11:13:05 AM - System Checkpoint
    RP340: 1/6/2011 11:43:21 AM - System Checkpoint
    RP341: 1/7/2011 12:37:53 PM - System Checkpoint
    RP342: 1/8/2011 12:38:06 PM - System Checkpoint
    RP343: 1/9/2011 12:46:01 PM - System Checkpoint
    RP344: 1/10/2011 1:38:06 PM - System Checkpoint
    RP345: 1/11/2011 1:49:46 PM - Software Distribution Service 3.0
    RP346: 1/12/2011 1:52:32 PM - System Checkpoint
    RP347: 1/13/2011 9:59:38 PM - System Checkpoint
    RP348: 1/14/2011 10:42:38 PM - System Checkpoint
    RP349: 1/15/2011 10:55:09 PM - System Checkpoint
    RP350: 1/16/2011 11:42:39 PM - System Checkpoint
    RP351: 1/18/2011 12:42:39 AM - System Checkpoint
    RP352: 1/19/2011 1:42:40 AM - System Checkpoint
    RP353: 1/20/2011 2:42:40 AM - System Checkpoint
    RP354: 1/21/2011 3:42:38 AM - System Checkpoint
    RP355: 1/22/2011 8:19:37 AM - System Checkpoint
    RP356: 1/23/2011 2:37:37 PM - System Checkpoint
    RP357: 1/24/2011 5:58:06 PM - System Checkpoint
    RP358: 1/25/2011 6:21:24 PM - System Checkpoint
    RP359: 1/26/2011 7:34:25 PM - System Checkpoint
    RP360: 1/27/2011 8:36:04 PM - System Checkpoint
    RP361: 1/28/2011 9:19:34 PM - System Checkpoint
    RP362: 1/29/2011 10:18:40 PM - System Checkpoint
    RP363: 1/30/2011 10:36:46 PM - System Checkpoint
    RP364: 1/31/2011 11:36:49 PM - System Checkpoint
    RP365: 2/2/2011 12:36:48 AM - System Checkpoint
    RP366: 2/3/2011 1:36:47 AM - System Checkpoint
    RP367: 2/4/2011 2:36:45 AM - System Checkpoint
    RP368: 2/5/2011 3:36:45 AM - System Checkpoint
    RP369: 2/6/2011 4:44:59 AM - System Checkpoint
    RP370: 2/7/2011 7:22:40 AM - System Checkpoint
    RP371: 2/8/2011 9:30:38 AM - System Checkpoint
    RP372: 2/8/2011 5:56:02 PM - Removed Diskeeper 2009 Home.
    RP373: 2/8/2011 6:03:06 PM - Installed Diskeeper 2009 Home.
    RP374: 2/9/2011 6:29:26 PM - System Checkpoint
    RP375: 2/9/2011 9:05:27 PM - Software Distribution Service 3.0

    ==== Installed Programs ======================

    ABBYY FineReader 5.0 Sprint Plus
    Acrobat.com
    Ad-Aware
    Ad-Aware Email Scanner for Outlook
    Adobe AIR
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Reader 9.4.2
    Adobe Shockwave Player 11.5
    AML Free Registry Cleaner 4.21
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Ask Toolbar
    ATK0100 ACPI UTILITY
    Audacity 1.2.6
    Avery Wizard 3.1
    AVG 2011
    BerBible
    BlackBerry Desktop Software 4.5
    Bonjour
    Canon Camera Access Library
    Canon Camera Support Core Library
    Canon Camera Window DC_DV 5 for ZoomBrowser EX
    Canon Camera Window DC_DV 6 for ZoomBrowser EX
    Canon Camera Window MC 6 for ZoomBrowser EX
    Canon G.726 WMP-Decoder
    Canon MovieEdit Task for ZoomBrowser EX
    Canon RAW Image Task for ZoomBrowser EX
    Canon RemoteCapture Task for ZoomBrowser EX
    Canon Utilities EOS Utility
    Canon Utilities PhotoStitch
    Canon Utilities ZoomBrowser EX
    Compatibility Pack for the 2007 Office system
    Diskeeper 2009 Home
    Dropbox
    e-Sword
    Google Toolbar for Internet Explorer
    Google Update Helper
    HiJackThis
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    IBackup Drive v9.8.0
    IBackup for Windows Version - 9.0
    IDrive version 3.3.3 May 18, 2010
    Intel(R) Graphics Media Accelerator Driver for Mobile
    Intel(R) PROSet/Wireless Software
    ISA 2 basic
    iTunes
    Java Auto Updater
    Java(TM) 6 Update 20
    Lexmark X6100 Series
    Malwarebytes' Anti-Malware
    mCore
    mDriver
    mDrWiFi
    Media Player Codec Pack 3.9.6
    mEoU.msi
    mHelp
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Small Business Edition 2003
    Microsoft Outlook Personal Folders Backup
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    mIWA
    mIWCA
    mLogView
    mMHouse
    Mozilla Firefox (3.6.9)
    mPfMgr
    mPfWiz
    mProSafe
    mSSO
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 6 Service Pack 2 (KB973686)
    mToolkit
    mWlsSafe
    mXML
    mZConfig
    Octoshape add-in for Adobe Flash Player
    OGA Notifier 2.0.0048.0
    PDFCreator
    Power DVD Player 2.1
    Print to Fax
    QuickBooks Pro Edition 2004
    QuickTime
    Realtek AC'97 Audio
    REALTEK Gigabit and Fast Ethernet NIC Driver
    Roxio Media Manager
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
    Security Update for Windows Internet Explorer 8 (KB2183461)
    Security Update for Windows Internet Explorer 8 (KB2360131)
    Security Update for Windows Internet Explorer 8 (KB2416400)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player (KB979402)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2279986)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2296199)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2436673)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923789)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Security Update for Windows XP (KB982802)
    Spybot - Search & Destroy
    Stamps.com
    SwordSearcher 5.3.1.3
    Synaptics Pointing Device Driver
    TouchCopy 09
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows Internet Explorer 8 (KB980302)
    Update for Windows XP (KB2141007)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2467659)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    Update for Windows XP (KB980182)
    Visual C++ 2008 x86 Runtime - (v9.0.30729)
    Visual C++ 2008 x86 Runtime - v9.0.30729.01
    VLC media player 1.0.5
    WavePad Sound Editor
    WebFldrs XP
    Windows Genuine Advantage Notifications (KB905474)
    Windows Imaging Component
    Windows Internet Explorer 8
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows XP Service Pack 3
    WinPcap 4.1.2

    ==== Event Viewer Messages From Past Week ========

    2/9/2011 9:34:32 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft Office Outlook 2003 Junk Email Filter (KB2492441).
    2/9/2011 9:11:52 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 3 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    2/9/2011 8:48:45 PM, error: System Error [1003] - Error code 000000f7, parameter1 86299620, parameter2 00005453, parameter3 ffffabac, parameter4 00000000.
    2/9/2011 8:39:24 PM, error: System Error [1003] - Error code 10000050, parameter1 e38f2000, parameter2 00000000, parameter3 a8e07c4d, parameter4 00000001.
    2/9/2011 4:50:18 PM, error: Service Control Manager [7034] - The Diskeeper service terminated unexpectedly. It has done this 1 time(s).
    2/9/2011 4:50:18 PM, error: Service Control Manager [7031] - The Lavasoft Ad-Aware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
    2/9/2011 10:44:03 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    2/9/2011 10:43:58 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Avgldx86 Avgmfx86 Avgtdix Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
    2/9/2011 10:43:58 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
    2/9/2011 10:43:58 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2/9/2011 10:43:58 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2/9/2011 10:43:58 PM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2/9/2011 10:43:58 PM, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
    2/9/2011 10:43:57 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
    2/8/2011 6:22:32 PM, error: Service Control Manager [7034] - The LexBce Server service terminated unexpectedly. It has done this 2 time(s).
    2/8/2011 2:37:53 PM, error: atapi [11] - The driver detected a controller error on \Device\Ide\IdePort0.
    2/8/2011 2:37:21 PM, error: atapi [9] - The device, \Device\Ide\IdePort0, did not respond within the timeout period.
    2/7/2011 12:56:07 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 9:57:33 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    2/5/2011 9:57:30 AM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 6 time(s).
    2/5/2011 10:24:41 AM, error: Service Control Manager [7034] - The WLANKEEPER service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:37 AM, error: Service Control Manager [7034] - The RegSrvc service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:36 AM, error: Service Control Manager [7034] - The OwnershipProtocol service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:34 AM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:33 AM, error: Service Control Manager [7034] - The Spectrum24 Event Monitor service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:31 AM, error: Service Control Manager [7034] - The EvtEng service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:28 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:24:26 AM, error: Service Control Manager [7034] - The LexBce Server service terminated unexpectedly. It has done this 1 time(s).
    2/5/2011 10:22:29 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Roxio Hard Drive Watcher 9 service to connect.
    2/5/2011 10:21:53 AM, error: Print [19] - Sharing printer failed + 1722, Printer Microsoft XPS Document Writer share name Printer2.
    2/5/2011 1:55:37 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    2/3/2011 1:52:58 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 5 time(s).
    2/3/2011 1:52:19 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    2/3/2011 1:51:44 PM, error: Service Control Manager [7034] - The LexBce Server service terminated unexpectedly. It has done this 3 time(s).
    2/10/2011 7:19:16 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

    ==== End Of File ===========================
     
  5. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Okay, you can hold on GMER until I see Combofix.

    Please update Java: Check this site .Java Updates Stay current as most updates are for security. Uninstall any earlier versions in Add/Remove Programs as they are vulnerabilities for the system.
    =======================================
    Note: You will have to disable or uninstall AVG to run Combofix. Try the disable first:
    To Disable/Uninstall AVG:
    Boot into Safe Mode
    • Restart your computer and start pressing the F8 key on your keyboard.
    • Select the Safe Mode option when the Windows Advanced Options menu appears, and then press ENTER.
    • Click on Start> Run> type in services.msc> double click on each AVG Service> Change Startup type to Disabled> Stop the Services
    • Look in Tray and right click the icon(s). On the menu - select Check also Task Manager to see that it's not tricking you. Ctrl+Alt+Delete should open that one so that you can go over the relevant tabs.
    • You can shut things down from there by clicking on the processes so that they get blue. Then right click to get a small popup menu that allows you to terminate.
    If necessary: To disable the LinkScanner,
    • Open AVG User Interface.
    • Double-click on the LinkScanner.
    • Un-tick the option Enable AVG Search-Shield and Enable Active Surf-Shield.
    • Save the changes.
    Please do not forget to activate the LinkScanner again once you performed the tasks requiring its deactivation. [/list]
    Please enable the servers that were enabled originally again when possible.

    IF that doesn't work (it has for some) uninstall as follows:
    Download AppRemover and save to the desktop]
    How to Use AppRemover to Remove a Complete Security Application
    1. Double click the setup on the desktop> click Next
    2. Select “Remove Security Application”
    3. Let scan finish to determine security apps
    4. A screen like below will appear:
      http://www.appremover.com/about/chooseuninstall.gif/image_preview[/img[*] Click on [b]Next[/b] after choice has been made
      [*] Check the AVG program you want to uninstall
      [*] After uninstall shows complete, follow online prompts to Exit the program.[/list]
      ===========================================
      [b]Download Combofix to your desktop from one of these locations:[/b][b]
      [url=http://www.bleepingcomputer.com/download/anti-virus/combofix]Link 1[/url]
      [url=http://www.forospyware.com/sUBs/ComboFix.exe]Link 2[/b][/url][list]
      [*]Double click combofix.exe & follow the prompts.
      [*]As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. It is strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode if needed.
      [*]Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
      [*][B]Query- Recovery Console image[/B]
      [img]http://img.photobucket.com/albums/v706/ried7/RcAuto1.gif
    5. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
      [​IMG]
    6. .Click on Yes, to continue scanning for malware
    7. .If Combofix asks you to update the program, allow
    8. .Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    9. .Close any open browsers.
    10. .Double click combofix.exe[​IMG] & follow the prompts to run.
    11. When the scan completes it will open a text window. Please paste that log in your next reply.
    Notes:
    1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
    2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
    3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
    4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
    ==================================
    Then do this online virus scan: Run Eset NOD32 Online AntiVirus scan HERE
    1. Tick the box next to YES, I accept the Terms of Use.
    2. Click Start
    3. When asked, allow the Active X control to install
    4. Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
    5. Click Start
    6. Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
    7. Click Scan
    8. Wait for the scan to finish
    9. Re-enable your Antivirus software.
    10. A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.

    Either reactivate AVG when finished, or install one of these free and good AV:
    Avira Free
    Avast Home
    Please reboot the system after the installation is complete.

    Logs in next reply please.
     
  6. cjprang

    cjprang TS Rookie Topic Starter

    ComboFix and Eset Logs

    ComboFix 11-02-11.01 - CJP 02/11/2011 20:35:50.1.1 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1007.671 [GMT -5:00]
    Running from: c:\documents and settings\CJP\My Documents\Downloads\ComboFix.exe
    AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
    .

    ((((((((((((((((((((((((( Files Created from 2011-01-12 to 2011-02-12 )))))))))))))))))))))))))))))))
    .

    2011-02-12 01:00 . 2011-02-12 01:00 -------- d-----w- c:\program files\Common Files\Java
    2011-02-12 00:59 . 2011-02-12 00:58 73728 ----a-w- c:\windows\system32\javacpl.cpl
    2011-02-09 21:57 . 2011-02-09 21:57 -------- d-----w- c:\documents and settings\CJP\Application Data\Malwarebytes
    2011-02-09 21:15 . 2010-12-20 23:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2011-02-09 21:15 . 2011-02-09 21:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2011-02-09 21:15 . 2010-12-20 23:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-02-09 21:15 . 2011-02-09 21:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2011-02-09 19:58 . 2011-02-09 21:54 -------- d-----w- c:\program files\Spybot - Search & Destroy
    2011-02-09 19:58 . 2011-02-09 21:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2011-02-08 23:03 . 2011-02-08 23:03 -------- d-----w- c:\program files\Common Files\Diskeeper Corporation
    2011-02-08 23:03 . 2011-02-08 23:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Diskeeper Corporation
    2011-02-08 23:03 . 2011-02-08 23:03 -------- d-----w- c:\program files\Diskeeper Corporation
    2011-01-30 19:57 . 2011-01-30 19:57 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
    2011-01-30 19:57 . 2011-01-30 19:57 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
    2011-01-28 04:02 . 2011-01-28 04:02 -------- d-----w- c:\program files\iPod
    2011-01-28 02:04 . 2011-01-28 02:07 -------- d-----w- c:\windows\system32\NtmsData
    2011-01-28 01:11 . 2011-01-28 01:11 -------- d-----w- c:\documents and settings\All Users\Application Data\AVS4YOU
    2011-01-28 01:11 . 2011-01-28 01:11 -------- d-----w- c:\documents and settings\CJP\Application Data\AVS4YOU
    2011-01-28 01:09 . 2010-11-29 21:21 10833920 ----a-w- c:\windows\system32\libmfxsw32.dll
    2011-01-28 01:09 . 2010-11-29 21:21 10915840 ----a-w- c:\windows\system32\libmfxhw32.dll
    2011-01-28 01:09 . 2010-11-13 00:18 1700352 ----a-w- c:\windows\system32\GdiPlus.dll
    2011-01-28 01:09 . 2011-01-28 01:48 -------- d-----w- c:\program files\AVS4YOU
    2011-01-28 01:08 . 2011-01-28 01:48 -------- d-----w- c:\program files\Common Files\AVSMedia
    2011-01-21 14:44 . 2011-01-21 14:44 439296 -c----w- c:\windows\system32\dllcache\shimgvw.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-02-12 00:58 . 2010-05-22 20:09 472808 ----a-w- c:\windows\system32\deployJava1.dll
    2011-01-21 14:44 . 2004-08-04 12:00 439296 ----a-w- c:\windows\system32\shimgvw.dll
    2011-01-07 14:09 . 2004-08-04 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
    2010-12-31 13:10 . 2004-08-04 12:00 1854976 ----a-w- c:\windows\system32\win32k.sys
    2010-12-22 12:34 . 2004-08-04 12:00 301568 ----a-w- c:\windows\system32\kerberos.dll
    2010-12-20 23:59 . 2004-08-04 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
    2010-12-20 23:59 . 2004-08-04 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2010-12-20 23:59 . 2004-08-04 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2010-12-20 17:26 . 2004-08-04 12:00 730112 ----a-w- c:\windows\system32\lsasrv.dll
    2010-12-20 12:55 . 2004-08-04 12:00 385024 ----a-w- c:\windows\system32\html.iec
    2010-12-09 15:15 . 2004-08-04 12:00 718336 ----a-w- c:\windows\system32\ntdll.dll
    2010-12-09 14:30 . 2004-08-04 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
    2010-12-09 13:38 . 2004-08-04 12:00 2192768 ----a-w- c:\windows\system32\ntoskrnl.exe
    2010-12-09 13:07 . 2004-08-03 22:59 2069376 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2010-11-29 22:38 . 2010-11-29 22:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
    2010-11-29 22:38 . 2010-11-29 22:38 69632 -c--a-w- c:\windows\system32\QuickTime.qts
    2010-11-18 18:12 . 2010-05-22 16:50 81920 ----a-w- c:\windows\system32\isign32.dll
    2010-11-18 17:14 . 2010-11-28 15:12 23608 ----a-w- c:\windows\system32\drivers\TuneConvertAudio.sys
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2009-12-09 01:19 94208 ----a-w- c:\documents and settings\CJP\Application Data\Dropbox\bin\DropboxExt.13.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2009-12-09 01:19 94208 ----a-w- c:\documents and settings\CJP\Application Data\Dropbox\bin\DropboxExt.13.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2009-12-09 01:19 94208 ----a-w- c:\documents and settings\CJP\Application Data\Dropbox\bin\DropboxExt.13.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-05-22 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
    2004-10-15 15:27 110592 ----a-w- c:\program files\Intel\Wireless\Bin\LgNotify.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0autocheck lsdelete\0autocheck lsdelete\0autocheck c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0autocheck c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
    @="Service"

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
    backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^CJP^Start Menu^Programs^Startup^Dropbox.lnk]
    backup=c:\windows\pss\Dropbox.lnkStartup

    [HKLM\~\startupfolder\C:^Documents and Settings^CJP^Start Menu^Programs^Startup^IDrive Tray.lnk]
    backup=c:\windows\pss\IDrive Tray.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck]
    c:\windows\system32\dumprep 0 -u [X]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2010-09-21 03:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2011-01-31 08:44 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    2008-04-14 00:12 15360 -c--a-w- c:\windows\system32\ctfmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EOUApp]
    2004-10-15 15:31 356352 ----a-w- c:\program files\Intel\Wireless\Bin\EOUWiz.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControl]
    2004-12-16 08:19 98304 -c--a-w- c:\windows\ATK0100\HControl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
    2004-11-24 13:41 126976 -c--a-r- c:\windows\system32\hkcmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IBWin Background process]
    2010-05-19 22:10 38376 ----a-w- c:\ibackup for windows\IBackground_955.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IBWin Monitor]
    2010-05-19 22:14 1893864 ----a-w- c:\ibackup for windows\IBMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDriveE Startup]
    2010-04-22 23:05 177608 ----a-w- c:\program files\IDrive\IDrvieEStartup.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    2004-11-24 13:41 155648 -c--a-r- c:\windows\system32\igfxtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
    2004-10-15 15:27 385024 ----a-w- c:\program files\Intel\Wireless\Bin\iFrmewrk.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2011-01-25 20:08 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Lexmark X6100 Series]
    2003-05-16 10:10 57344 ----a-w- c:\program files\Lexmark X6100 Series\lxbfbmgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2010-12-25 13:37 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
    2008-03-06 20:19 236016 -c--a-w- c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
    2004-11-05 13:59 73728 ----a-w- c:\windows\SOUNDMAN.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
    2009-03-05 21:07 2260480 --sha-r- c:\program files\Spybot - Search & Destroy\TeaTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2010-05-14 16:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
    2004-12-22 06:23 688218 -c--a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPLpr]
    2004-12-22 06:23 98394 -c--a-w- c:\program files\Synaptics\SynTP\SynTPLpr.exe

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\IBackup for Windows\\ibackup_ssl_sch_955.exe"=
    "c:\\IBackup Drive\\IDriveEng.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Documents and Settings\\CJP\\Application Data\\Dropbox\\bin\\Dropbox.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\WINDOWS\\system32\\mmc.exe"=

    R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [5/22/2010 1:37 PM 64288]
    R2 IBFs;IBackup File System Driver;c:\ibackup drive\IBfs.sys [5/22/2010 2:20 PM 35840]
    R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [7/15/2010 7:45 PM 35088]
    S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [5/22/2010 12:38 PM 136176]
    S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [8/12/2010 7:15 AM 1375992]
    S3 DKRtWrt;DKRtWrt;c:\windows\system32\drivers\DKRtWrt.sys [5/22/2010 8:32 PM 46256]
    S3 IBackupWeb;IBackupWeb;c:\ibackup for windows\IBackupWebM.exe [5/22/2010 2:19 PM 54760]
    S3 IBNP;IBackup Network Provider; [x]
    S3 IDriveE Service;IDriveE Service;c:\program files\IDrive\IDriveE Service.exe [5/22/2010 2:16 PM 148936]
    S3 IDriveWebM;IDrive WebManager;c:\program files\IDrive\IDriveWebM.exe [5/22/2010 2:16 PM 267720]
    S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [8/12/2010 7:15 AM 15264]
    S3 TuneConvertAudio;TuneConvertAudio;c:\windows\system32\drivers\TuneConvertAudio.sys [11/28/2010 10:12 AM 23608]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; [x]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    .
    Contents of the 'Scheduled Tasks' folder

    2011-02-12 c:\windows\Tasks\Ad-Aware Update (Weekly).job
    - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 19:39]

    2011-02-08 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:50]

    2011-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-22 17:38]

    2011-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-22 17:38]

    2011-02-12 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
    - c:\program files\Ask.com\UpdateTask.exe [2010-01-20 14:34]

    2010-12-01 c:\windows\Tasks\wavepadShakeIcon.job
    - c:\program files\NCH Swift Sound\WavePad\wavepad.exe [2010-11-28 15:25]
    .
    .
    ------- Supplementary Scan -------
    .
    uInternet Settings,ProxyOverride = *.local
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
    DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
    FF - ProfilePath - c:\documents and settings\CJP\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\
    FF - prefs.js: browser.startup.homepage - www.ChristianEconomicReport.com
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
    FF - Ext: Screen Capture Elite: screencaptureelite@plugin - %profile%\extensions\screencaptureelite@plugin
    FF - Ext: Forecastfox Weather: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3} - %profile%\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
    FF - Ext: Torbutton: {e0204bd5-9d31-402b-a99d-a6aa8ffebdca} - %profile%\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
    FF - Ext: BetterPrivacy: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} - %profile%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
    .
    - - - - ORPHANS REMOVED - - - -

    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
    AddRemove-Octoshape add-in for Adobe Flash Player - c:\documents and settings\CJP\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2011-02-11 20:42
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...


    c:\documents and settings\CJP\Application Data\Dropbox\shellext\l\4d55e618 124 bytes

    scan completed successfully
    hidden files: 1

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(944)
    c:\program files\Intel\Wireless\Bin\LgNotify.dll

    - - - - - - - > 'explorer.exe'(2032)
    c:\windows\system32\WININET.dll
    c:\documents and settings\CJP\Application Data\Dropbox\bin\DropboxExt.13.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    c:\windows\system32\xpsp3res.dll
    c:\ibackup drive\ibnp.dll
    c:\ibackup drive\IBWorker.dll
    c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
    .
    Completion time: 2011-02-11 20:47:09
    ComboFix-quarantined-files.txt 2011-02-12 01:46

    Pre-Run: 209,922,871,296 bytes free
    Post-Run: 209,914,499,072 bytes free

    WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    UnsupportedDebug="do not select this" /debug
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    - - End Of File - - 94B57C27468D608918E37BFF46D8B1B0



    ESETSmartInstaller@High as downloader log:
    all ok
    # version=7
    # OnlineScannerApp.exe=1.0.0.1
    # OnlineScanner.ocx=1.0.0.6419
    # api_version=3.0.2
    # EOSSerial=1e0f216728d866479a36c6bc13cbe7af
    # end=finished
    # remove_checked=false
    # archives_checked=true
    # unwanted_checked=true
    # unsafe_checked=false
    # antistealth_checked=true
    # utc_time=2011-02-12 05:15:46
    # local_time=2011-02-12 12:15:46 (-0500, Eastern Standard Time)
    # country="United States"
    # lang=1033
    # osver=5.1.2600 NT Service Pack 3
    # compatibility_mode=512 16777215 100 0 21824435 21824435 0 0
    # compatibility_mode=8192 67108863 100 0 0 0 0 0
    # scanned=72445
    # found=1
    # cleaned=0
    # scan_time=11583
    C:\Documents and Settings\CJP\My Documents\Downloads\media.player.codec.pack.v3.9.6.setup.exe Win32/Adware.Toolbar.Dealio application (unable to clean) 00000000000000000000000000000000 I
     
  7. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    Please download OTMovit by Old Timer and save to your desktop.
    • Double-click OTMoveIt3.exe to run it. (Vista users, please right click on OTMoveit3.exe and select "Run as an Administrator")
    • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
      Code:
      :Files  
      C:\Documents and Settings\CJP\My Documents\Downloads\media.player.codec.pack.v3.9.6.setup.exe
      :Commands
      [purity]
      [emptytemp]
      [start explorer]
      [Reboot]
    • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window and choose Paste.
    • Click the red Moveit! button.
    • A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
    • Close OTMoveIt3
    If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
    ===========================================
    Mbam did remove some entries for MyWebSearch, which is related to the process you asked about. But your machine is not so infected that you should be showing such a slow down.

    How much installed RAM do you have>
    Have you used the Error Checking when doing maintenance for the system?
     
  8. cjprang

    cjprang TS Rookie Topic Starter

    Answers & Log

    Computer is still just as slow and sound is still garbled.

    Per System Properties RAM = .098 GB or RAM with an Intel Premium Processor of 1.73 GHz.

    Per System Information:
    Total Physical Memory 1,024.00 MB
    Available Physical Memory 388.30 MB
    Total Virtual Memory 2.00 GB
    Available Virtual Memory 1.96 GB

    Yes I have run Chkdsk. It took about 8 hours to run. The only thing it ever showed was this: Docume~1\CJP\Applic~1\Mozilla\Firefox\Profiles\SR141B~1.DEF\Session~2.JS

    Here's the log....


    All processes killed
    ========== FILES ==========
    File/Folder C:\Documents and Settings\CJP\My Documents\Downloads\media.player.codec.pack.v3.9.6.setup.exe not found.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: CJP
    ->Temp folder emptied: 884065 bytes
    ->Temporary Internet Files folder emptied: 3432619 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 100986835 bytes
    ->Flash cache emptied: 2312 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: LocalService
    ->Temp folder emptied: 66016 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 505 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 101.00 mb


    OTM by OldTimer - Version 3.1.17.2 log created on 02132011_141904

    Files moved on Reboot...
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\Cache\_CACHE_001_ moved successfully.
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\Cache\_CACHE_002_ moved successfully.
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\Cache\_CACHE_003_ moved successfully.
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\Cache\_CACHE_MAP_ moved successfully.
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\urlclassifier3.sqlite moved successfully.
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\XPC.mfl moved successfully.
    C:\Documents and Settings\CJP\Local Settings\Application Data\Mozilla\Firefox\Profiles\sri41bpm.default\XUL.mfl moved successfully.

    Registry entries deleted on Reboot...
     
  9. cjprang

    cjprang TS Rookie Topic Starter

    This just pop up in my processes: RedirectMediater.exe. Any idea what that is? It is gone now.

    NEVERMIND, I FIGURED THAT ONE OUT.
     
  10. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +36

    It is my experience that rarely does something happen to a computer system "all of a sudden." Exception would be a massive malware infection> which you didn't have.

    I can not identify RedirectMediater.exe. In fact, it does not appear to have been identified yet. It is not a Windows process and I would be concerned with it "popping up."

    OTM did not find this to clean it:
    C:\Documents and Settings\CJP\My Documents\Downloads\media.player.codec.pack.v3.9.6.setup.exe Win32/Adware.Toolbar.Dealio application

    Problems:
    1. Garbled sound(this includes during start up, playing music), but not in all cases> check the sound card- although you reinstalled it, it might have either gone bad or need a driver update.
    2. Slow start up>> usually due to many processes loading>
    To remove entries from Startup using the msconfig utility:
    • Click on Start> Run> type in msconfig> enter>
    • Click on Selective Startup
    • Choose the Startup tab:
      This is where you UNCHECK the Startup items. This does not remove the item or uninstall anything> it just stops it from starting on boot. It can be rechecked at any time if wanted.
    • To expand the Command Column, (this shows what the process 'belongs' to) hold left mouse button down on the dividing line on frame above Location and move to the right to expand.
      The only processes that need to start on boot are: antivirus program, firewall if you have 3rd party firewall, touchpad if on laptop and network processes if using Pure/Cisco Networks>>> nothing else!
    • Click on Apply> OK when finished.

    NOTE:
    When you reboot the system the first time after making changes using the msconfig utility, a nag message comes up that can be ignored and closed after checking 'don't show this message again.'
    Once you make changes to the Startup menu, you must remain in Selective Startup to retain those changed. If you go back to Normal Startup, everything you unchecked will be checked again and start on boot.

    3. Shows a different box during start up:> describe this please
    ========================================
    Regarding Memory:
    By default, the virtual memory paging file that is created during installation is 1.5 times the physical RAM on your computer. Therefore, a computer that has 1GB of installed RAM will have 1.5GB of virtual memory.

    Total Physical Memory 1,024.00 MB
    Available Physical Memory 388.30 MB
    Total Virtual Memory 2.00 GB>> try setting this down
    Available Virtual Memory 1.96 GB
     
  11. cjprang

    cjprang TS Rookie Topic Starter

    Hi,

    Thanks for trying. I finally did what I should've done a week ago. I went ahead and reformatted the hard drive and now everything is fine.

    I appreciate the help.
     
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.