404 not found - nginx

[capelion]

I have been trying to access the site http://www.einthusan.com/ for a while now but without joy, every time I try to open it I get a page with a white background saying " 404 not found - nginx "

I have tried changing AV from ZA firewall+AV to Avast and scanned my computer, a few infections were detected and files were deleted but the issue persists.

The nginx problem happens on my android phone device too.

Could you please help?

Thanks in advance

Vish

 

[capelion]

I am just wondering if I broke any rules in posting my problem here 'coz my post isn't 'active' it says 'redirect' instead and is missing the number of views/replies

 

[fimbles]

404 not found is a broken or dead link, it cant be fixed at your end its the host servers problem. the webpage is offline.

This one however works perfectly : [FONT=Verdana]http://tinyurl.com/ba3dj2p[/FONT]

[FONT=tahoma]Hope this helps [/FONT]

 

[captaincranky]

My personal choice of action would be to stay away from either one. "TinyURL" has long been associated with the distribution of malware. It gives me pause to wonder if the first web page, isn't broken, but was taken down. (Just speculation, though).

 

[capelion]

I asked one of my friends to open the site in USA, it opens and the videos stream/play. So I know that the site is up , its my computer, could someone please help ?

Vish

 

[bobcat]

Right now, the site is up and working fine - I'm using Opera. Moreover, it's not associated with any security problems, according to site assessors.

The first advice is to try another browser, clear cookies and cache. But if it's not accessible by your Android either, try using a proxy, in case the site is blocked by your ISP.

P.S. I like your sense of humor fimbles. Maybe the site requires wearing a shirt to allow entry.

 

[capelion]

Tried to open the site in opera, lo and behold !!! it opened fine !! could you please help check why it wont open in IE and FF.

Would someone please help?

To Bobcat-- looks like Opera is more tolerant to shirtless men as it is to attacks

 

[capelion]

Could someone please help me to check if its a malware or some other infection that is preventing me from opening the site in FF ?

 

[DelJo63]

On the failing system;
get a command prompt
make sure you can ping the domain name, eg: ping techspot.com
then use TRACETR the.failing.domainname
the last line of tracert mustbe the same IP addess show by the ping
otherwise, traffic is being blocked.

The first line of TRACERT will be your local router
the second is your ISP gateway
anything below that is a network node over which you have no control

 

[capelion]

Thank you for your reply.
I ran the ping test and got replies , no problem. On the tracert test , 1st line was indeed the local router, the 2nd line said 'Request timed out' (I tried this twice) ; the last line of tracert is the same IP addess shown by the ping. The site still opens in opera.
Any other Ideas please

 

[DelJo63]

Thank you for your reply.
I ran the ping test and got replies , no problem. On the tracert test , 1st line was indeed the local router, the 2nd line said 'Request timed out' (I tried this twice) ;

great. it's unusual to see your own gateway configured to ignore ping, but it is vaid and clearly, pinging beyond shows it's passing packets thru.

the last line of tracert is the same IP addess shown by the ping.

and this shows packets are reaching the site in question

The site still opens in opera.

Are you saying one browser fails while another (Opera) is working correctly??? That would finger the problem to be the setup in the failing browser!

 

[capelion]

Yes, that's my point, Opera works on my desktop while FF (version 18) and IE (version 8) display the error, also the Opera browser in my android device displays the error.
The FF browser is a fresh setup and the IE 8 updates automatically on my licensed copy of XP, it would be a rare coincidence that both of them are failing along with Opera on an android device

 

[DelJo63]

Recommend you see this topic for trouble shooting FF

 

[capelion]

Sorry for the delayed reply.
I tried to access the site using FF whilst in troubleshooting (safe) mode (w/o add-ons), same error.
I don't this this a browser specific issue, it happens in FF, IE and I just checked that it happens in chrome too

 

[DelJo63]

You need to understand Networking vs Browsers.

Are you saying one browser fails while another (Opera) is working correctly??? That would finger the problem to be the setup in the failing browser!

If ANY browser CAN access the site in question, then issues with other browsers are just that - - browser issues.

The fundamental transport is TCP and the fact that you can get the IP address using a domain name (using nslookup)
says clearly that the transport is working.

The 404 error code is from the website that was accessed OR a proxy that is intervening in the request.
As Opera runs for you (and the participants in this thread are able to access the page), clearly the website is fine.

So take one of your failing browsers, disable ALL add-ons, extensions and themes, and first access common sites
like yahoo.com, google.com, yelp.com and http://www.bbc.co.uk/ - - if these are working, try your failing site too.
Otherwise, somewhere in the path is a proxy or filter that is messing with the request.

 

[capelion]

Ok, I took ff disabled all add-ons & extensions(I dont have themes), yahoo.com, google.com, all sites open. ditto procedure with chrome; no go.
I have got a feeling that some files that these browsers use have been corrupted owing to some infection and opera does not need those files; that's why it opens the page.
The other browsers seem to be a victim of malicious proxy reroute/block.

 

[DelJo63]

The other browsers seem to be a victim of malicious proxy reroute/block.

I think so too - - start Virus / Malware code removal procedures here

 

[capelion]

That's where I started this thread. pardon me, but which steps shall I follow?

 

[Cinders]

https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/

Start reading and follow the steps.

 

[capelion]

May I will follow the steps and reply back over the weekend, my wireless kbd is kaput & need a new one. Shall I please have about 4 days to follow the steps?

 

[Cinders]

Yes, of course.

 

[capelion]

Thank you Cinders

 

[DelJo63]

Btw:- we're all on the same page?
Nginx is a caching proxy

 

[capelion]

Sorry for the delay and Thank you for your patience, The Malwarebytes and DDS logs are as follows
-----------------------------------------------------------------------------------------------------------------------------

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.02.03.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
User :: AU001WD4394 [administrator]

2/6/2013 12:11:09 PM
mbam-log-2013-02-06 (12-11-09).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 226270
Time elapsed: 8 minute(s), 32 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)



---------------------------------------------------------------------------------------------------------------------------------



DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_37
Run by User at 2:43:28 on 2013-02-07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2039.687 [GMT 5.5:30]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: ZoneAlarm Free Firewall Antivirus *Disabled/Updated* {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\osk.exe
C:\WINDOWS\system32\MSSWCHX.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k bthsvcs
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://gateway.wipro.com/
BHO: Skype add-on (mastermind): {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Free Download Manager: {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - c:\program files\free download manager\iefdm2.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: Download all with Free Download Manager - c:\program files\free download manager\dlall.htm
IE: Download selected with Free Download Manager - c:\program files\free download manager\dlselected.htm
IE: Download video with Free Download Manager - c:\program files\free download manager\dlfvideo.htm
IE: Download with Free Download Manager - c:\program files\free download manager\dllink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
TCP: Interfaces\{BC3B8947-C615-43E0-AC26-0AF86CD88401} : NameServer = 59.185.0.50,59.185.0.23
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\application data\mozilla\firefox\profiles\x1x86xxf.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - www.google.com
FF - component: c:\program files\free download manager\firefox\extension\components\component.dll
FF - component: c:\program files\free download manager\firefox\extension\components\vmsfdmff.dll
FF - plugin: c:\documents and settings\user\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\user\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\documents and settings\user\local settings\application data\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: c:\windows\system32\adobe\director\np32dsw_1168638.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_5_502_135.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - ExtSQL: 2013-01-08 10:39; wrc@avast.com; c:\program files\avast software\avast\webrep\FF
FF - ExtSQL: !HIDDEN! 2011-03-18 23:16; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.zonealarm.autoRvrt - false
FF - user.js: extensions.zonealarm_i.newTab - false
FF - user.js: extensions.zonealarm.tlbrSrchUrl - hxxp://search.zonealarm.com/search?Source=ToolBar&oemCode=ZLN27689894426394-1001&toolbarId=base&affiliateId=1025&Lan={dfltLng}&utid=48faadee00000000000000226ba334d7&q=
FF - user.js: extensions.zonealarm.id - 48faadee00000000000000226ba334d7
FF - user.js: extensions.zonealarm.instlDay - 15702
FF - user.js: extensions.zonealarm.vrsn - 1.6.7.4
FF - user.js: extensions.zonealarm.vrsni - 1.6.7.4
FF - user.js: extensions.zonealarm_i.vrsnTs - 1.6.7.41:25:13
FF - user.js: extensions.zonealarm.prtnrId - checkpoint
FF - user.js: extensions.zonealarm.prdct - zonealarm
FF - user.js: extensions.zonealarm.aflt - 1025
FF - user.js: extensions.zonealarm_i.smplGrp - none
FF - user.js: extensions.zonealarm.tlbrId - base
FF - user.js: extensions.zonealarm.instlRef - ZLN27689894426394-1001
FF - user.js: extensions.zonealarm.dfltLng - en
FF - user.js: extensions.zonealarm.excTlbr - false
FF - user.js: extensions.zonealarm.admin - false
.
============= SERVICES / DRIVERS ===============
.
R0 KL1;kl1;c:\windows\system32\drivers\kl1.sys [2012-6-27 133208]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-1-8 738504]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-1-8 361032]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2012-6-27 11352]
R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2012-6-27 485808]
R1 NEOFLTR_700_19501;Juniper Networks TDI Filter Driver (NEOFLTR_700_19501);c:\windows\system32\drivers\NEOFLTR_700_19501.SYS [2012-3-16 85064]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-13 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2012-7-12 116608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-1-8 21256]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2013-1-8 44808]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2013-2-6 40776]
S1 SBRE;SBRE;\??\c:\windows\system32\drivers\sbredrv.sys --> c:\windows\system32\drivers\SBREdrv.sys [?]
S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2009-12-18 11336]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\lavasoft\ad-aware\kernexplorer.sys --> c:\program files\lavasoft\ad-aware\KernExplorer.sys [?]
S3 pgriakow;pgriakow;\??\c:\docume~1\user\locals~1\temp\pgriakow.sys --> c:\docume~1\user\locals~1\temp\pgriakow.sys [?]
S3 V0230Vfx;V0230Vfx;c:\windows\system32\drivers\V0230Vfx.sys [2006-3-23 6272]
S3 V0230VID;Live! Cam Video IM Pro;c:\windows\system32\drivers\V0230VID.sys [2006-9-28 500480]
.
=============== File Associations ===============
.
FileExt: .txt: Applications\WordPad.exe="c:\program files\windows nt\accessories\WORDPAD.EXE" "%1" [UserChoice]
ShellExec: Foxit Reader.exe: print="c:\program files\foxit software\foxit reader\Foxit Reader.exe"/p "%1"
ShellExec: Foxit Reader.exe: printto="c:\program files\foxit software\foxit reader\Foxit Reader.exe"/t "%1" "%2" "%3" "%4"
.
=============== Created Last 30 ================
.
2013-02-06 06:40:42 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2013-02-04 02:39:14 -------- d-----w- c:\windows\system32\wbem\repository\FS
2013-02-04 02:39:14 -------- d-----w- c:\windows\system32\wbem\Repository
2013-01-13 15:40:13 -------- d-----w- c:\documents and settings\all users\application data\Free Download Manager
2013-01-13 12:47:51 74288 ----a-w- c:\program files\mozilla firefox\breakpadinjector.dll
2013-01-13 12:47:48 421200 ----a-w- c:\program files\mozilla firefox\msvcp100.dll
2013-01-13 12:47:47 770384 ----a-w- c:\program files\mozilla firefox\msvcr100.dll
2013-01-13 12:47:43 96816 ----a-w- c:\program files\mozilla firefox\webapprt-stub.exe
2013-01-13 12:47:43 157864 ----a-w- c:\program files\mozilla firefox\webapp-uninstaller.exe
2013-01-13 10:17:45 -------- d-----w- c:\program files\Mozilla Maintenance Service
2013-01-13 10:17:26 193312 ----a-w- c:\program files\mozilla firefox\maintenanceservice_installer.exe
2013-01-13 10:17:26 115760 ----a-w- c:\program files\mozilla firefox\maintenanceservice.exe
2013-01-08 05:27:50 -------- d-----w- c:\documents and settings\user\application data\DriverCure
2013-01-08 05:27:49 -------- d-----w- c:\documents and settings\user\application data\ParetoLogic
2013-01-08 05:09:46 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-01-08 05:09:02 41224 ----a-w- c:\windows\avastSS.scr
2013-01-08 04:41:27 -------- d-----w- c:\program files\NortonInstaller
2013-01-08 04:41:26 -------- d-----w- c:\documents and settings\all users\application data\NortonInstaller
2013-01-08 04:39:08 -------- d-----w- c:\program files\AVAST Software
2013-01-08 04:39:08 -------- d-----w- c:\documents and settings\all users\application data\AVAST Software
.
==================== Find3M ====================
.
2013-01-30 05:53:02 859552 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-01-30 05:53:02 780192 ----a-w- c:\windows\system32\deployJava1.dll
2013-01-18 18:59:46 697864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-01-18 18:59:45 74248 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-01-14 04:22:54 59 -c--a-w- c:\windows\wpd99.drv
2012-12-14 11:19:28 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
.
============= FINISH: 2:44:46.37 ===============



------------------------------------------------------------------------------------------------------------------------------------------





nk you for your patience.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 6/16/2010 7:19:35 AM
System Uptime: 2/6/2013 8:14:33 PM (6 hours ago)
.
Motherboard: Hewlett-Packard | | 09F8h
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | XU1 PROCESSOR | 2990/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 20 GiB total, 0.96 GiB free.
D: is FIXED (NTFS) - 55 GiB total, 2.064 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) - 699 GiB total, 373.018 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Broadcom NetXtreme Gigabit Ethernet
Device ID: PCI\VEN_14E4&DEV_1600&SUBSYS_3011103C&REV_01\4&4878531&0&00E1
Manufacturer: Broadcom
Name: Broadcom NetXtreme Gigabit Ethernet
PNP Device ID: PCI\VEN_14E4&DEV_1600&SUBSYS_3011103C&REV_01\4&4878531&0&00E1
Service: b57w2k
.
Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
Description: Dell Touchpad
Device ID: ACPI\PNP0F13\4&EDE93E0&0
Manufacturer: Alps Electric
Name: Dell Touchpad
PNP Device ID: ACPI\PNP0F13\4&EDE93E0&0
Service: i8042prt
.
Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Device ID: ACPI\PNP0303\4&EDE93E0&0
Manufacturer: (Standard keyboards)
Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
PNP Device ID: ACPI\PNP0303\4&EDE93E0&0
Service: i8042prt
.
==== System Restore Points ===================
.
RP689: 1/27/2013 11:17:14 AM - System Checkpoint
RP690: 1/28/2013 12:45:08 AM - System Checkpoint
RP691: 1/30/2013 10:35:40 AM - System Checkpoint
RP692: 1/30/2013 11:21:32 AM - Removed Java 7 Update 10
RP693: 1/30/2013 11:22:50 AM - Installed Java 7 Update 11
RP694: 2/1/2013 12:15:12 AM - Removed Java 7 Update 11
RP695: 2/2/2013 4:21:50 PM - System Checkpoint
RP696: 2/3/2013 6:31:30 PM - System Checkpoint
RP697: 2/3/2013 9:54:58 PM - Restore Operation
RP698: 2/4/2013 12:55:52 AM - ADHOC WELL
RP699: 2/4/2013 8:06:54 AM - Restore Operation
RP700: 2/6/2013 12:26:47 PM - System Checkpoint
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Shockwave Player 11.6
AoA Audio Extractor
Apple Application Support
Apple Software Update
Ask Toolbar
avast! Free Antivirus
CCleaner
Creative Live! Cam Video IM Pro Driver (1.01.03.0928)
Dell Touchpad
Easy Video Splitter 1.28
ESET Online Scanner v3
Fast AVI MPEG Joiner 1.1.2
FLV to AVI MPEG WMV 3GP MP4 iPod Converter 3.9.1108
Foxit Creator
Foxit PDF Editor
Foxit Reader
Free Download Manager 3.9.2
GOM Player
Google Chrome
Google Earth
Google Talk (remove only)
Google Talk Plugin
GTK2-Runtime
HiDownloadPlatinum
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
iCall
Intel(R) Graphics Media Accelerator Driver
IsoBuster 2.2
Java Auto Updater
Java(TM) 6 Update 37
Juniper Networks Secure Application Manager
Juniper Networks Setup Client
Juniper Networks Setup Client Activex Control
K-Lite Codec Pack 7.2.0 (Full)
Linksys Wireless-G PCI Adapter
Malwarebytes Anti-Malware version 1.70.0.1100
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Mobiola Web Camera 2 for S60 3rd Edition
Mozilla Firefox 18.0 (x86 en-US)
Mozilla Maintenance Service
Mozilla Thunderbird (3.1.10)
MSVC80_x86_v2
Nokia Connectivity Cable Driver
Nokia PC Suite
ooVoo
Opera 12.10
Pdf995
PennyMate
Picasa 3
Power Data Recovery 4.1.1
PowerISO
QuickTime
Real Alternative 2.0.2
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2530548)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Internet Explorer 8 (KB2699988)
Security Update for Windows Internet Explorer 8 (KB2722913)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2482017)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Skype Launcher
Skype™ 3.6
Spybot - Search & Destroy
SUPERAntiSpyware
swMSM
System Requirements Lab for Intel
Temp File Cleaner
The KMPlayer (remove only)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB2447568)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VC80CRTRedist - 8.0.50727.6195
VLC media player 1.1.11
WebFldrs XP
Windows Driver Package - Nokia Modem (06/09/2010 7.01.0.8)
Windows Driver Package - Nokia Modem (10/07/2010 4.6)
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
WinRAR archiver
Yahoo! Messenger
ZoneAlarm Antivirus
ZoneAlarm LTD Toolbar
.
==== Event Viewer Messages From Past Week ========
.
2/4/2013 12:38:16 AM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer DELL1200 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{BC3B8947-C615-43E0-. The master browser is stopping or an election is being forced.
2/4/2013 12:36:42 AM, error: System Error [1003] - Error code 10000050, parameter1 e38de000, parameter2 00000000, parameter3 a767f0fc, parameter4 00000001.
2/4/2013 12:36:18 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: SBRE
2/3/2013 6:37:22 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer DELL1200 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8AE6D763-4A76-4D12-. The master browser is stopping or an election is being forced.
2/3/2013 6:28:25 PM, error: NetBT [4321] - The name "MSHOME :1d" could not be registered on the Interface with IP address 192.168.0.3. The machine with the IP address 192.168.0.2 did not allow the name to be claimed by this machine.
2/3/2013 5:27:01 PM, error: Server [2505] - The server could not bind to the transport \Device\NetbiosSmb because another computer on the network has the same name. The server could not start.
2/3/2013 5:21:07 PM, error: NetBT [4307] - Initialization failed because the transport refused to open initial Addresses.
2/3/2013 10:04:00 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: i8042prt SBRE
2/1/2013 12:12:10 AM, error: Dhcp [1002] - The IP address lease 192.168.2.2 for the Network Card with network address 00226BA334D7 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================



Thank you again
- Vish

 

[capelion]

Hello Cinders, Could you please analyze my logs and help me fix the issue.
Thanks
-Vish