Inactive Is there a helper that can read my Malware Logs for me, Please?
- Thread starter Aimee
- Start date
- Status
Mbam Log
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4861
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
10/17/2010 12:16:42 PM
mbam-log-2010-10-17 (12-16-42).txt
Scan type: Quick scan
Objects scanned: 173561
Time elapsed: 7 minute(s), 16 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 27
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Users\Aimee\AppData\Local\Temp\30D.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Users\Aimee\AppData\Local\Temp\12F6.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Users\Aimee\AppData\Local\Temp\7575.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Users\Kids\downloads\Zwinky.exe (Adware.Iwon) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\010010299575499.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\010251541025456.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\048101981005057.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\053100102995099.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\05553541029854.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\0569850489897.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\010010299575499.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\010251541025456.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\048101981005057.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\0525553565155.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\05553541029854.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010010299575499.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\01005453984899.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010155101545350.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010251541025456.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\048101981005057.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\048102565010199.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\0515498102101102.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\0569850489897.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\097101515598101.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4861
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
10/17/2010 12:16:42 PM
mbam-log-2010-10-17 (12-16-42).txt
Scan type: Quick scan
Objects scanned: 173561
Time elapsed: 7 minute(s), 16 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 27
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Users\Aimee\AppData\Local\Temp\30D.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Users\Aimee\AppData\Local\Temp\12F6.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Users\Aimee\AppData\Local\Temp\7575.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Users\Kids\downloads\Zwinky.exe (Adware.Iwon) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\010010299575499.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\010251541025456.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\048101981005057.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\053100102995099.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\05553541029854.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Aimee\Local Settings\Application Data\0569850489897.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\010010299575499.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\010251541025456.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\048101981005057.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\0525553565155.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Jason\Local Settings\Application Data\05553541029854.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010010299575499.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\01005453984899.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010155101545350.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\010251541025456.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\048101981005057.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\048102565010199.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\0515498102101102.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\0569850489897.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Kids\Local Settings\Application Data\097101515598101.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
DDS Log 1
DDS (Ver_10-10-10.03) - NTFSx86
Run by Aimee at 12:22:12.72 on Sun 10/17/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2047.1211 [GMT -4:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\Norton PC Checkup\Engine\2.0.6.11\SymcPCCULaunchSvc.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.6.11\ccSvcHst.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\taskhost.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.6.11\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\BearShare Applications\MediaBar\DataMngr\DataMngrUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Users\Aimee\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Aimee\Downloads\dds.scr
C:\Windows\system32\conhost.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://search.bearshare.com/
mDefault_Page_URL = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearshare applications\mediabar\toolbar\BearshareMediabarDx.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: UrlHelper Class: {74322bf9-df26-493f-b0da-6d2fc5e6429e} - c:\program files\bearshare applications\mediabar\datamngr\IEBHO.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearshare applications\mediabar\toolbar\BearshareMediabarDx.dll
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [Google Update] "c:\users\aimee\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [JMB36X IDE Setup] c:\windows\raidtool\xInsIDE.exe
mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe"
mRun: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [HotSync] "c:\program files\palmsource\desktop\HotSync.exe" -AllUsers
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [DataMngr] c:\progra~1\bearsh~1\mediabar\datamngr\DataMngrUI.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hotsyn~1.lnk - c:\program files\palm\Hotsync.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - hxxp://a516.g.akamai.net/f/516/25175/7d/runaware.download.akamai.com/25175/citrix/icaweb-20070115.cab
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
AppInit_DLLs: c:\progra~1\bearsh~1\mediabar\datamngr\datamngr.dll
================= FIREFOX ===================
FF - ProfilePath - c:\users\aimee\appdata\roaming\mozilla\firefox\profiles\6eea9gcq.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.bearshare.com/web?src=ffb&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\progra~1\palm\packag~1\NPInstal.dll
FF - plugin: c:\users\aimee\appdata\local\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\users\aimee\appdata\roaming\facebook\npfbplugin_1_0_3.dll
FF - plugin: c:\users\aimee\appdata\roaming\mozilla\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - truec:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
============= SERVICES / DRIVERS ===============
R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\norton pc checkup\engine\2.0.6.11\SymcPCCULaunchSvc.exe [2010-10-11 115056]
R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\norton pc checkup\engine\2.0.6.11\ccSvcHst.exe [2010-10-11 126392]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-6-10 139776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-5-18 1343400]
=============== Created Last 30 ================
2010-10-17 16:05:45 -------- d-----w- c:\users\aimee\appdata\roaming\Malwarebytes
2010-10-17 16:05:38 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-17 16:05:37 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-17 16:05:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-17 16:05:37 -------- d-----w- c:\progra~2\Malwarebytes
2010-10-17 14:52:21 -------- d-----w- c:\progra~2\158E
2010-10-13 16:18:35 -------- d-----w- c:\progra~2\2312C
2010-10-12 15:42:16 -------- d-----w- c:\users\aimee\appdata\roaming\Tific
2010-10-12 15:42:16 -------- d-----w- c:\users\aimee\appdata\local\Tific
2010-10-11 16:29:46 -------- d-----w- c:\program files\iPod
2010-10-11 16:29:45 -------- d-----w- c:\program files\iTunes
2010-10-11 16:29:25 -------- d-----w- c:\program files\common files\Symantec Shared
2010-10-11 16:27:35 -------- d-----w- c:\progra~2\Symantec
2010-10-11 16:21:53 -------- d-----w- c:\windows\system32\drivers\nortonpccheckup\0200060.00B
2010-10-11 16:21:53 -------- d-----w- c:\windows\system32\drivers\NortonPCCheckup
2010-10-11 16:21:52 -------- d-----w- c:\program files\Norton PC Checkup
2010-10-11 16:20:48 -------- d-----w- c:\program files\Bonjour
2010-10-11 16:00:25 6084944 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{32437ef2-616e-488b-a4d0-72dd193d6d53}\mpengine.dll
2010-10-11 13:22:37 -------- d-----w- c:\program files\Norton Internet Security
2010-10-11 13:22:36 -------- d-----w- c:\progra~2\Norton
2010-10-11 13:21:18 -------- d-----w- c:\program files\NortonInstaller
2010-10-11 13:21:18 -------- d-----w- c:\progra~2\NortonInstaller
2010-10-09 15:21:27 -------- d-----w- c:\progra~2\1B243
2010-10-02 14:40:37 -------- d-----w- c:\progra~2\252B3
2010-09-30 07:01:11 190976 ----a-w- c:\windows\system32\drivers\ks.sys
2010-09-29 10:49:34 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-29 10:49:30 13312 ----a-w- c:\program files\internet explorer\iecompat.dll
==================== Find3M ====================
2010-09-08 15:17:46 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-09-08 15:17:46 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-08-21 05:32:37 316928 ----a-w- c:\windows\system32\spoolsv.exe
2010-07-29 06:30:49 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30:34 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-27 22:44:10 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-07-27 22:44:10 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2010-07-27 22:44:10 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-07-27 22:44:10 107808 ----a-w- c:\windows\system32\dns-sd.exe
============= FINISH: 12:23:16.54 ===============
DDS (Ver_10-10-10.03) - NTFSx86
Run by Aimee at 12:22:12.72 on Sun 10/17/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.2047.1211 [GMT -4:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\Norton PC Checkup\Engine\2.0.6.11\SymcPCCULaunchSvc.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.6.11\ccSvcHst.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\taskhost.exe
C:\Program Files\Norton PC Checkup\Engine\2.0.6.11\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\BearShare Applications\MediaBar\DataMngr\DataMngrUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Users\Aimee\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Aimee\Downloads\dds.scr
C:\Windows\system32\conhost.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://search.bearshare.com/
mDefault_Page_URL = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearshare applications\mediabar\toolbar\BearshareMediabarDx.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: UrlHelper Class: {74322bf9-df26-493f-b0da-6d2fc5e6429e} - c:\program files\bearshare applications\mediabar\datamngr\IEBHO.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearshare applications\mediabar\toolbar\BearshareMediabarDx.dll
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [Google Update] "c:\users\aimee\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [JMB36X IDE Setup] c:\windows\raidtool\xInsIDE.exe
mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe"
mRun: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [HotSync] "c:\program files\palmsource\desktop\HotSync.exe" -AllUsers
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [DataMngr] c:\progra~1\bearsh~1\mediabar\datamngr\DataMngrUI.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hotsyn~1.lnk - c:\program files\palm\Hotsync.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - hxxp://a516.g.akamai.net/f/516/25175/7d/runaware.download.akamai.com/25175/citrix/icaweb-20070115.cab
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
AppInit_DLLs: c:\progra~1\bearsh~1\mediabar\datamngr\datamngr.dll
================= FIREFOX ===================
FF - ProfilePath - c:\users\aimee\appdata\roaming\mozilla\firefox\profiles\6eea9gcq.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.bearshare.com/web?src=ffb&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\progra~1\palm\packag~1\NPInstal.dll
FF - plugin: c:\users\aimee\appdata\local\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\users\aimee\appdata\roaming\facebook\npfbplugin_1_0_3.dll
FF - plugin: c:\users\aimee\appdata\roaming\mozilla\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - truec:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
============= SERVICES / DRIVERS ===============
R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\norton pc checkup\engine\2.0.6.11\SymcPCCULaunchSvc.exe [2010-10-11 115056]
R2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\norton pc checkup\engine\2.0.6.11\ccSvcHst.exe [2010-10-11 126392]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-6-10 139776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-5-18 1343400]
=============== Created Last 30 ================
2010-10-17 16:05:45 -------- d-----w- c:\users\aimee\appdata\roaming\Malwarebytes
2010-10-17 16:05:38 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-17 16:05:37 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-17 16:05:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-17 16:05:37 -------- d-----w- c:\progra~2\Malwarebytes
2010-10-17 14:52:21 -------- d-----w- c:\progra~2\158E
2010-10-13 16:18:35 -------- d-----w- c:\progra~2\2312C
2010-10-12 15:42:16 -------- d-----w- c:\users\aimee\appdata\roaming\Tific
2010-10-12 15:42:16 -------- d-----w- c:\users\aimee\appdata\local\Tific
2010-10-11 16:29:46 -------- d-----w- c:\program files\iPod
2010-10-11 16:29:45 -------- d-----w- c:\program files\iTunes
2010-10-11 16:29:25 -------- d-----w- c:\program files\common files\Symantec Shared
2010-10-11 16:27:35 -------- d-----w- c:\progra~2\Symantec
2010-10-11 16:21:53 -------- d-----w- c:\windows\system32\drivers\nortonpccheckup\0200060.00B
2010-10-11 16:21:53 -------- d-----w- c:\windows\system32\drivers\NortonPCCheckup
2010-10-11 16:21:52 -------- d-----w- c:\program files\Norton PC Checkup
2010-10-11 16:20:48 -------- d-----w- c:\program files\Bonjour
2010-10-11 16:00:25 6084944 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{32437ef2-616e-488b-a4d0-72dd193d6d53}\mpengine.dll
2010-10-11 13:22:37 -------- d-----w- c:\program files\Norton Internet Security
2010-10-11 13:22:36 -------- d-----w- c:\progra~2\Norton
2010-10-11 13:21:18 -------- d-----w- c:\program files\NortonInstaller
2010-10-11 13:21:18 -------- d-----w- c:\progra~2\NortonInstaller
2010-10-09 15:21:27 -------- d-----w- c:\progra~2\1B243
2010-10-02 14:40:37 -------- d-----w- c:\progra~2\252B3
2010-09-30 07:01:11 190976 ----a-w- c:\windows\system32\drivers\ks.sys
2010-09-29 10:49:34 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-29 10:49:30 13312 ----a-w- c:\program files\internet explorer\iecompat.dll
==================== Find3M ====================
2010-09-08 15:17:46 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-09-08 15:17:46 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-08-21 05:32:37 316928 ----a-w- c:\windows\system32\spoolsv.exe
2010-07-29 06:30:49 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30:34 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-07-27 22:44:10 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-07-27 22:44:10 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2010-07-27 22:44:10 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-07-27 22:44:10 107808 ----a-w- c:\windows\system32\dns-sd.exe
============= FINISH: 12:23:16.54 ===============
Hi Broni!
Well, GMER - I didn't run because I use Windows 7 and the directions say to skip this step if that's your operating system.
I'll repost the Malware log and attach the 2nd DDS...
New Malware:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4861
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
10/17/2010 6:08:52 PM
mbam-log-2010-10-17 (18-08-52).txt
Scan type: Quick scan
Objects scanned: 176481
Time elapsed: 8 minute(s), 10 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
DDS attach:
DDS (Ver_10-10-10.03)
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3/23/2010 8:29:40 AM
System Uptime: 10/17/2010 12:18:12 PM (0 hours ago)
Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD | | MS-7514
Processor: Intel(R) Celeron(R) CPU E1200 @ 1.60GHz | CPU 1 | 1603/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 298 GiB total, 216.836 GiB free.
E: is CDROM (CDFS)
==== Disabled Device Manager Items =============
Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}
Description: Photosmart C6100 series
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Photosmart C6100 series
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:
Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Description: Photosmart C6100 series
Device ID: ROOT\IMAGE\0000
Manufacturer: HP
Name: Photosmart C6100 series
PNP Device ID: ROOT\IMAGE\0000
Service: StillCam
==== System Restore Points ===================
RP163: 8/13/2010 6:40:53 AM - Windows Update
RP164: 8/13/2010 10:07:26 AM - Windows Update
RP165: 8/14/2010 3:00:28 AM - Windows Update
RP166: 8/15/2010 3:00:28 AM - Windows Update
RP167: 8/16/2010 12:50:10 AM - Windows Update
RP168: 8/16/2010 6:57:49 PM - Windows Update
RP169: 8/16/2010 11:09:28 PM - Windows Update
RP170: 8/17/2010 9:20:26 AM - Windows Update
RP171: 8/18/2010 11:08:26 AM - Windows Update
RP172: 8/19/2010 3:00:26 AM - Windows Update
RP173: 8/19/2010 11:54:21 AM - Windows Update
RP174: 8/20/2010 3:00:27 AM - Windows Update
RP175: 8/20/2010 11:21:19 PM - Installed iTunes
RP176: 8/21/2010 3:00:30 AM - Windows Update
RP177: 8/22/2010 3:05:49 AM - Windows Update
RP178: 8/22/2010 6:04:57 AM - Windows Update
RP179: 8/23/2010 3:00:40 AM - Windows Update
RP180: 8/24/2010 12:48:29 AM - Windows Update
RP181: 8/24/2010 3:00:33 AM - Windows Update
RP182: 8/24/2010 7:20:02 PM - Windows Update
RP183: 8/24/2010 10:44:56 PM - Windows Update
RP184: 8/26/2010 3:00:38 AM - Windows Update
RP185: 8/26/2010 5:54:21 AM - Windows Update
RP186: 8/27/2010 3:00:38 AM - Windows Update
RP187: 8/27/2010 9:28:46 AM - Windows Update
RP188: 8/28/2010 3:00:33 AM - Windows Update
RP189: 8/29/2010 12:48:47 AM - Windows Update
RP190: 8/29/2010 11:48:14 PM - Windows Update
RP191: 8/30/2010 7:48:07 AM - Windows Update
RP192: 8/30/2010 11:40:39 PM - Windows Update
RP193: 8/31/2010 7:53:26 AM - Windows Update
RP194: 9/1/2010 3:00:30 AM - Windows Update
RP195: 9/2/2010 7:30:29 AM - Windows Update
RP196: 9/3/2010 3:00:29 AM - Windows Update
RP197: 9/3/2010 3:35:58 AM - Windows Update
RP198: 9/4/2010 3:00:32 AM - Windows Update
RP199: 9/5/2010 7:09:17 AM - Windows Update
RP200: 9/5/2010 7:41:33 PM - Windows Update
RP201: 9/6/2010 9:47:15 PM - Windows Update
RP202: 9/7/2010 9:34:55 AM - Windows Update
RP203: 9/8/2010 6:59:00 AM - Windows Update
RP204: 9/10/2010 6:21:01 AM - Windows Update
RP205: 9/14/2010 10:00:50 AM - Windows Update
RP206: 9/16/2010 3:00:56 AM - Windows Update
RP207: 9/17/2010 3:00:36 AM - Windows Update
RP208: 9/17/2010 6:34:07 AM - Windows Update
RP209: 9/18/2010 3:00:24 AM - Windows Update
RP210: 9/19/2010 3:00:46 AM - Windows Update
RP211: 9/19/2010 6:22:33 AM - Windows Update
RP212: 9/19/2010 10:56:56 PM - Windows Update
RP213: 9/20/2010 10:28:42 AM - Windows Update
RP214: 9/20/2010 7:40:15 PM - Windows Update
RP215: 9/21/2010 1:41:18 PM - Windows Update
RP216: 9/21/2010 7:58:12 PM - Windows Update
RP217: 9/22/2010 3:05:01 PM - Windows Update
RP218: 9/24/2010 12:55:47 PM - Windows Update
RP219: 9/28/2010 7:14:17 AM - Windows Update
RP220: 9/30/2010 3:00:36 AM - Windows Update
RP221: 10/1/2010 7:25:32 AM - Windows Update
RP222: 10/2/2010 8:26:48 AM - Windows Update
RP223: 10/5/2010 7:54:18 AM - Windows Update
RP224: 10/7/2010 3:00:47 AM - Windows Update
RP225: 10/8/2010 7:45:53 AM - Windows Update
RP226: 10/15/2010 12:26:38 PM - Scheduled Checkpoint
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 2 (SP2)
32 Bit HP CIO Components Installer
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3.4
AIO_CDA_ProductContext
AIO_CDA_Software
AIO_Scan
Apple Application Support
Apple Mobile Device Support
Apple Software Update
BearShare
Bonjour
BufferChm
C-Media PCI Audio Device
C6100
c6100_Help
Citrix Presentation Server Web Client for Win32
Copy
Destinations
DeviceDiscovery
Diamond Xtreme Audio
DocProc
Driver Updater Pro
Facebook Plug-In
Fax
Google Chrome
GPBaseService2
HP Customer Participation Program 13.0
HP Imaging Device Functions 13.0
HP Photosmart All-In-One Driver Software 13.0 Rel. A
HP Photosmart Essential 3.5
HP Product Detection
HP Smart Web Printing 4.60
HP Solution Center 13.0
HP Update
HPPhotoGadget
HPPhotoSmartDiscLabelContent1
HPPhotosmartEssential
HPProductAssistant
HPSSupply
iMapBuilder Interactive Flash Map Builder v3.11 (Demo Version)
iTunes
JMB36X Raid Configurer
Malwarebytes' Anti-Malware
MarketResearch
McAfee Security Scan Plus
MediaBar
Microsoft .NET Framework 4 Client Profile
Microsoft Easy Assist v2
Microsoft MapPoint North America 2010
Microsoft Office Access database engine 2007 (English)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Plus 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
Microsoft Store Download Manager
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable Package
Mozilla Firefox (3.6.9)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 8 Essentials
Network
Norton PC Checkup
NVIDIA Display Control Panel
NVIDIA Drivers
OCR Software by I.R.I.S. 13.0
OGA Notifier 2.0.0048.0
Palm Desktop by ACCESS
ParetoLogic DriverCure
PVSonyDll
QuickTime
Realtek 8169 8168 8101E 8102E Ethernet Driver
Realtek High Definition Audio Driver
Scan
Security Update for 2007 Microsoft Office System (KB2277947)
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB982312)
Security Update for 2007 Microsoft Office System (KB982331)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB982308)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office Publisher 2007 (KB982124)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2251419)
Shop for HP Supplies
Sid Meier's Civilization 4 Complete
Sid Meier's Civilization IV Colonization
SmartWebPrinting
SolutionCenter
Status
Toolbox
TrayApp
UnloadSupport
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (kb2291599)
VCRedistSetup
WebReg
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
==== Event Viewer Messages From Past Week ========
10/17/2010 3:07:13 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wuauserv service.
10/17/2010 12:19:07 PM, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.
10/17/2010 12:01:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MMCSS service.
10/17/2010 12:01:00 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
10/17/2010 12:01:00 AM, Error: Service Control Manager [7001] - The Windows Image Acquisition (WIA) service depends on the Shell Hardware Detection service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion.
10/17/2010 12:01:00 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service stisvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
10/17/2010 12:00:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.
10/17/2010 11:51:12 AM, Error: Service Control Manager [7031] - The Common Client Job Manager Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 11:51:11 AM, Error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).
10/17/2010 10:53:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:53:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Multimedia Class Scheduler service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:53:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Computer Browser service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:52:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Server service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:51:51 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Windows Update service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Windows Management Instrumentation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The User Profile Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Themes service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Task Scheduler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The System Event Notification Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Shell Hardware Detection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Multimedia Class Scheduler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The IP Helper service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Group Policy Client service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Computer Browser service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Background Intelligent Transfer Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 1:02:01 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.
10/16/2010 6:21:21 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Winmgmt service.
10/16/2010 5:55:50 PM, Error: Service Control Manager [7031] - The Application Experience service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/16/2010 5:48:27 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR2.
10/15/2010 3:12:33 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Norton PC Checkup Application Launcher service.
10/15/2010 11:27:29 AM, Error: Service Control Manager [7000] - The Multimedia Class Scheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/14/2010 7:40:59 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} and APPID {000C101C-0000-0000-C000-000000000046} to the user Home\Jason SID (S-1-5-21-172486601-3228480683-2333224586-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
10/14/2010 4:26:08 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} and APPID {000C101C-0000-0000-C000-000000000046} to the user Home\Kids SID (S-1-5-21-172486601-3228480683-2333224586-1002) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
10/14/2010 10:51:57 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.
10/13/2010 7:40:47 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} and APPID {000C101C-0000-0000-C000-000000000046} to the user Home\Aimee SID (S-1-5-21-172486601-3228480683-2333224586-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
10/12/2010 7:32:39 PM, Error: Service Control Manager [7034] - The Application Information service terminated unexpectedly. It has done this 1 time(s).
10/12/2010 2:05:43 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000008e (0xc0000005, 0x83046050, 0x8af2352c, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101210-37331-01.
10/11/2010 9:27:26 AM, Error: Service Control Manager [7022] - The ccow service hung on starting.
10/11/2010 8:51:08 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD cow DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf
10/11/2010 8:51:07 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d3 (0x8e75c6db, 0x00000002, 0x00000001, 0x822a8784). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-26005-01.
10/11/2010 12:23:10 PM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Apple Mobile Device service, but this action failed with the following error: An instance of the service is already running.
10/11/2010 12:22:10 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/11/2010 12:21:11 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/11/2010 11:53:19 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
10/11/2010 11:52:52 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:52:50 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:52:49 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
10/11/2010 11:52:49 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
10/11/2010 11:52:47 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
10/11/2010 11:52:40 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
10/11/2010 11:52:28 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx86 discache eeCtrl IDSVix86 spldr SRTSP SRTSPX SymIRON SymNetS Wanarpv6
10/11/2010 11:52:23 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0x92593b98, 0x00000000, 0x850ffd82, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-30388-01.
10/11/2010 11:47:14 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:47:13 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
10/11/2010 11:47:13 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
10/11/2010 11:46:51 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD BHDrvx86 cow DfsC discache eeCtrl IDSVix86 NetBIOS NetBT nsiproxy Psched rdbss spldr SRTSP SRTSPX SymIRON SymNetS tdx Wanarpv6 WfpLwf
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:44:57 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x00000000, 0x00000002, 0x00000001, 0x8223da92). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-33462-01.
10/11/2010 11:42:25 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d3 (0x8f0bc6db, 0x00000002, 0x00000001, 0x8228d784). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-31621-01.
10/11/2010 11:39:43 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007f (0x0000000d, 0x00000000, 0x00000000, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-39530-01.
==== End Of File ===========================
Well, GMER - I didn't run because I use Windows 7 and the directions say to skip this step if that's your operating system.
I'll repost the Malware log and attach the 2nd DDS...
New Malware:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4861
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
10/17/2010 6:08:52 PM
mbam-log-2010-10-17 (18-08-52).txt
Scan type: Quick scan
Objects scanned: 176481
Time elapsed: 8 minute(s), 10 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
DDS attach:
DDS (Ver_10-10-10.03)
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3/23/2010 8:29:40 AM
System Uptime: 10/17/2010 12:18:12 PM (0 hours ago)
Motherboard: MICRO-STAR INTERNATIONAL CO.,LTD | | MS-7514
Processor: Intel(R) Celeron(R) CPU E1200 @ 1.60GHz | CPU 1 | 1603/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 298 GiB total, 216.836 GiB free.
E: is CDROM (CDFS)
==== Disabled Device Manager Items =============
Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}
Description: Photosmart C6100 series
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Photosmart C6100 series
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:
Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Description: Photosmart C6100 series
Device ID: ROOT\IMAGE\0000
Manufacturer: HP
Name: Photosmart C6100 series
PNP Device ID: ROOT\IMAGE\0000
Service: StillCam
==== System Restore Points ===================
RP163: 8/13/2010 6:40:53 AM - Windows Update
RP164: 8/13/2010 10:07:26 AM - Windows Update
RP165: 8/14/2010 3:00:28 AM - Windows Update
RP166: 8/15/2010 3:00:28 AM - Windows Update
RP167: 8/16/2010 12:50:10 AM - Windows Update
RP168: 8/16/2010 6:57:49 PM - Windows Update
RP169: 8/16/2010 11:09:28 PM - Windows Update
RP170: 8/17/2010 9:20:26 AM - Windows Update
RP171: 8/18/2010 11:08:26 AM - Windows Update
RP172: 8/19/2010 3:00:26 AM - Windows Update
RP173: 8/19/2010 11:54:21 AM - Windows Update
RP174: 8/20/2010 3:00:27 AM - Windows Update
RP175: 8/20/2010 11:21:19 PM - Installed iTunes
RP176: 8/21/2010 3:00:30 AM - Windows Update
RP177: 8/22/2010 3:05:49 AM - Windows Update
RP178: 8/22/2010 6:04:57 AM - Windows Update
RP179: 8/23/2010 3:00:40 AM - Windows Update
RP180: 8/24/2010 12:48:29 AM - Windows Update
RP181: 8/24/2010 3:00:33 AM - Windows Update
RP182: 8/24/2010 7:20:02 PM - Windows Update
RP183: 8/24/2010 10:44:56 PM - Windows Update
RP184: 8/26/2010 3:00:38 AM - Windows Update
RP185: 8/26/2010 5:54:21 AM - Windows Update
RP186: 8/27/2010 3:00:38 AM - Windows Update
RP187: 8/27/2010 9:28:46 AM - Windows Update
RP188: 8/28/2010 3:00:33 AM - Windows Update
RP189: 8/29/2010 12:48:47 AM - Windows Update
RP190: 8/29/2010 11:48:14 PM - Windows Update
RP191: 8/30/2010 7:48:07 AM - Windows Update
RP192: 8/30/2010 11:40:39 PM - Windows Update
RP193: 8/31/2010 7:53:26 AM - Windows Update
RP194: 9/1/2010 3:00:30 AM - Windows Update
RP195: 9/2/2010 7:30:29 AM - Windows Update
RP196: 9/3/2010 3:00:29 AM - Windows Update
RP197: 9/3/2010 3:35:58 AM - Windows Update
RP198: 9/4/2010 3:00:32 AM - Windows Update
RP199: 9/5/2010 7:09:17 AM - Windows Update
RP200: 9/5/2010 7:41:33 PM - Windows Update
RP201: 9/6/2010 9:47:15 PM - Windows Update
RP202: 9/7/2010 9:34:55 AM - Windows Update
RP203: 9/8/2010 6:59:00 AM - Windows Update
RP204: 9/10/2010 6:21:01 AM - Windows Update
RP205: 9/14/2010 10:00:50 AM - Windows Update
RP206: 9/16/2010 3:00:56 AM - Windows Update
RP207: 9/17/2010 3:00:36 AM - Windows Update
RP208: 9/17/2010 6:34:07 AM - Windows Update
RP209: 9/18/2010 3:00:24 AM - Windows Update
RP210: 9/19/2010 3:00:46 AM - Windows Update
RP211: 9/19/2010 6:22:33 AM - Windows Update
RP212: 9/19/2010 10:56:56 PM - Windows Update
RP213: 9/20/2010 10:28:42 AM - Windows Update
RP214: 9/20/2010 7:40:15 PM - Windows Update
RP215: 9/21/2010 1:41:18 PM - Windows Update
RP216: 9/21/2010 7:58:12 PM - Windows Update
RP217: 9/22/2010 3:05:01 PM - Windows Update
RP218: 9/24/2010 12:55:47 PM - Windows Update
RP219: 9/28/2010 7:14:17 AM - Windows Update
RP220: 9/30/2010 3:00:36 AM - Windows Update
RP221: 10/1/2010 7:25:32 AM - Windows Update
RP222: 10/2/2010 8:26:48 AM - Windows Update
RP223: 10/5/2010 7:54:18 AM - Windows Update
RP224: 10/7/2010 3:00:47 AM - Windows Update
RP225: 10/8/2010 7:45:53 AM - Windows Update
RP226: 10/15/2010 12:26:38 PM - Scheduled Checkpoint
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 2 (SP2)
32 Bit HP CIO Components Installer
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3.4
AIO_CDA_ProductContext
AIO_CDA_Software
AIO_Scan
Apple Application Support
Apple Mobile Device Support
Apple Software Update
BearShare
Bonjour
BufferChm
C-Media PCI Audio Device
C6100
c6100_Help
Citrix Presentation Server Web Client for Win32
Copy
Destinations
DeviceDiscovery
Diamond Xtreme Audio
DocProc
Driver Updater Pro
Facebook Plug-In
Fax
Google Chrome
GPBaseService2
HP Customer Participation Program 13.0
HP Imaging Device Functions 13.0
HP Photosmart All-In-One Driver Software 13.0 Rel. A
HP Photosmart Essential 3.5
HP Product Detection
HP Smart Web Printing 4.60
HP Solution Center 13.0
HP Update
HPPhotoGadget
HPPhotoSmartDiscLabelContent1
HPPhotosmartEssential
HPProductAssistant
HPSSupply
iMapBuilder Interactive Flash Map Builder v3.11 (Demo Version)
iTunes
JMB36X Raid Configurer
Malwarebytes' Anti-Malware
MarketResearch
McAfee Security Scan Plus
MediaBar
Microsoft .NET Framework 4 Client Profile
Microsoft Easy Assist v2
Microsoft MapPoint North America 2010
Microsoft Office Access database engine 2007 (English)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Plus 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
Microsoft Store Download Manager
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable Package
Mozilla Firefox (3.6.9)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 8 Essentials
Network
Norton PC Checkup
NVIDIA Display Control Panel
NVIDIA Drivers
OCR Software by I.R.I.S. 13.0
OGA Notifier 2.0.0048.0
Palm Desktop by ACCESS
ParetoLogic DriverCure
PVSonyDll
QuickTime
Realtek 8169 8168 8101E 8102E Ethernet Driver
Realtek High Definition Audio Driver
Scan
Security Update for 2007 Microsoft Office System (KB2277947)
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB982312)
Security Update for 2007 Microsoft Office System (KB982331)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB982308)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office Publisher 2007 (KB982124)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2251419)
Shop for HP Supplies
Sid Meier's Civilization 4 Complete
Sid Meier's Civilization IV Colonization
SmartWebPrinting
SolutionCenter
Status
Toolbox
TrayApp
UnloadSupport
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (kb2291599)
VCRedistSetup
WebReg
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
==== Event Viewer Messages From Past Week ========
10/17/2010 3:07:13 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the wuauserv service.
10/17/2010 12:19:07 PM, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.
10/17/2010 12:01:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MMCSS service.
10/17/2010 12:01:00 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
10/17/2010 12:01:00 AM, Error: Service Control Manager [7001] - The Windows Image Acquisition (WIA) service depends on the Shell Hardware Detection service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion.
10/17/2010 12:01:00 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service stisvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
10/17/2010 12:00:30 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BITS service.
10/17/2010 11:51:12 AM, Error: Service Control Manager [7031] - The Common Client Job Manager Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 11:51:11 AM, Error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).
10/17/2010 10:53:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:53:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Multimedia Class Scheduler service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:53:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Computer Browser service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:52:09 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Server service, but this action failed with the following error: An instance of the service is already running.
10/17/2010 10:51:51 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Windows Update service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Windows Management Instrumentation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The User Profile Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Themes service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Task Scheduler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The System Event Notification Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Shell Hardware Detection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Server service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Multimedia Class Scheduler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The IP Helper service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Group Policy Client service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Computer Browser service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
10/17/2010 10:51:09 AM, Error: Service Control Manager [7031] - The Background Intelligent Transfer Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/17/2010 1:02:01 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Schedule service.
10/16/2010 6:21:21 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Winmgmt service.
10/16/2010 5:55:50 PM, Error: Service Control Manager [7031] - The Application Experience service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/16/2010 5:48:27 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR2.
10/15/2010 3:12:33 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Norton PC Checkup Application Launcher service.
10/15/2010 11:27:29 AM, Error: Service Control Manager [7000] - The Multimedia Class Scheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/14/2010 7:40:59 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} and APPID {000C101C-0000-0000-C000-000000000046} to the user Home\Jason SID (S-1-5-21-172486601-3228480683-2333224586-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
10/14/2010 4:26:08 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} and APPID {000C101C-0000-0000-C000-000000000046} to the user Home\Kids SID (S-1-5-21-172486601-3228480683-2333224586-1002) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
10/14/2010 10:51:57 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service.
10/13/2010 7:40:47 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {000C101C-0000-0000-C000-000000000046} and APPID {000C101C-0000-0000-C000-000000000046} to the user Home\Aimee SID (S-1-5-21-172486601-3228480683-2333224586-1001) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
10/12/2010 7:32:39 PM, Error: Service Control Manager [7034] - The Application Information service terminated unexpectedly. It has done this 1 time(s).
10/12/2010 2:05:43 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000008e (0xc0000005, 0x83046050, 0x8af2352c, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101210-37331-01.
10/11/2010 9:27:26 AM, Error: Service Control Manager [7022] - The ccow service hung on starting.
10/11/2010 8:51:08 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD cow DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf
10/11/2010 8:51:07 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d3 (0x8e75c6db, 0x00000002, 0x00000001, 0x822a8784). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-26005-01.
10/11/2010 12:23:10 PM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Apple Mobile Device service, but this action failed with the following error: An instance of the service is already running.
10/11/2010 12:22:10 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/11/2010 12:21:11 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/11/2010 11:53:19 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
10/11/2010 11:52:52 AM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:52:50 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:52:49 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
10/11/2010 11:52:49 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
10/11/2010 11:52:47 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
10/11/2010 11:52:40 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
10/11/2010 11:52:28 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx86 discache eeCtrl IDSVix86 spldr SRTSP SRTSPX SymIRON SymNetS Wanarpv6
10/11/2010 11:52:23 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0x92593b98, 0x00000000, 0x850ffd82, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-30388-01.
10/11/2010 11:47:14 AM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:47:13 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
10/11/2010 11:47:13 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
10/11/2010 11:46:51 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD BHDrvx86 cow DfsC discache eeCtrl IDSVix86 NetBIOS NetBT nsiproxy Psched rdbss spldr SRTSP SRTSPX SymIRON SymNetS tdx Wanarpv6 WfpLwf
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:51 AM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:46:50 AM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
10/11/2010 11:44:57 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x00000000, 0x00000002, 0x00000001, 0x8223da92). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-33462-01.
10/11/2010 11:42:25 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d3 (0x8f0bc6db, 0x00000002, 0x00000001, 0x8228d784). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-31621-01.
10/11/2010 11:39:43 AM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000007f (0x0000000d, 0x00000000, 0x00000000, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 101110-39530-01.
==== End Of File ===========================
- Status
