I am not very tech savy. so I hope what I describe below makes sense.
My PC got infected with a particularly nasty virus about three months ago. I dont remember what it was called, but it was a trojan that was trying to get me to buy some type of antivir, I think, software.
The virus disabled Malwarebytes and my Avira virus protection. I was able to run Spybot Search and Destroy to remove the virus, but it seems to have damaged files on the PC. I havent been able to access Windows Updates in the last three months, and I've tried a lot of work arounds, or perform a system restore. I have to reset the Proxy settings on Firefox each time I open it, from Manual Proxy Configuration to the No Proxy setting. I never had to do this before the infection.
Since the infection I've had several problems with browsing, mainly pages timing out or freezing, but Malwarebytes and Spybot have sorted them out, superficially, at least.
As of today, I am getting redircted to various sites from google, too many to mention, that have nothing to do with my search queries, or back to a fresh google page. I can not longer run Malwarebytes or Spybot, I get a pop up box "windows cannot access the specified device, path or file" and I've downloaded Super Anti Spyware and Uniblue, for the first time, today, and they crash when I try to run scans.
Any help would be greatly appreciated, thanks. DDS.txt and Attach.txt pasted below:
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_26
Run by Owner at 13:15:30 on 2011-07-25
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1534.846 [GMT 1:00]
.
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
"\\.\globalroot\Device\svchost.exe\svchost.exe"
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FinePixViewerS\QuickDCF2.exe
C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\explorer.exe
c:\program files\real\realplayer\RealPlay.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = https://www.facebook.com
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuz2.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - No File
BHO: Conduit Engine : {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\prxConduitEngine.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuz2.dll
BHO: {CCC250A6-F877-A9E5-5022-67950E1A08E3} - No File
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No File
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuz2.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRun: [RegistryBooster] "c:\program files\uniblue\registrybooster\launcher.exe" delay 20000
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\b3e5e2d8-0a15-47a2-9c73-8501bc1dccb5.com
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [basicsmssmenu] "c:\program files\seagate\basics\basics status\MaxMenuMgrBasics.exe"
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [SNJQ66R8MU] c:\windows\temp\Ffr.exe
dRun: [NtWqIVLZEWZU] c:\windows\temp\Ffs.exe
dRun: [OO1310T0QS] c:\windows\temp\Ffq.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\exifla~1.lnk - c:\program files\finepixviewers\QuickDCF2.exe
IE: &Winamp Search
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: mswsock.dll
Trusted Zone: gestrip.com\secure
Trusted Zone: randhi.com\update
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/200 ... oader5.cab
DPF: {33331111-1234-1111-1111-615111193427} - hxxp://www.www2.p0rt2.com/files/epl29bd.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resour ... se6770.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/fl ... rashim.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shoc ... wflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.1.254
TCP: Interfaces\{B82C503B-1E75-48D6-807E-134C5247B3A8} : DhcpNameServer = 192.168.1.254
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
SecurityProviders: msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, mvebkhep.dll
LSA: Notification Packages = scecli scecli
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\owner\application data\mozilla\firefox\profiles\3vrrmn6r.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.facebook.com
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 53717
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
FF - user.js: browser.startup.homepage - hxxps://www.facebook.com
FF - user.js: browser.startup.page - 1
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-8-19 11608]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-12 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-8-19 136360]
R2 ASKService;ASKService;c:\program files\askbardis\bar\bin\AskService.exe [2009-9-2 479232]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-8-19 66616]
R4 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-5-19 41272]
S2 AMService;AMService;c:\windows\temp\wbnq\setup.exe run --> c:\windows\temp\wbnq\setup.exe run [?]
S2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-8-19 269480]
S2 ASKUpgrade;ASKUpgrade;c:\program files\askbardis\bar\bin\ASKUpgrade.exe [2009-9-2 241664]
S2 vpiwqtqy;IP Traffic Filter Controller;c:\windows\system32\svchost.exe -k netsvcs [2003-7-16 14336]
S3 s816bus;Sony Ericsson Device 816 driver (WDM);c:\windows\system32\drivers\s816bus.sys [2009-2-18 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\system32\drivers\s816mdfl.sys [2009-2-18 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\system32\drivers\s816mdm.sys [2009-2-18 107304]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM);c:\windows\system32\drivers\s816unic.sys [2007-6-19 97704]
.
=============== Created Last 30 ================
.
2011-07-25 11:51:09 -------- d-----w- c:\documents and settings\owner\application data\SUPERAntiSpyware.com
2011-07-25 11:51:09 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com
2011-07-25 11:50:49 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-07-25 09:49:55 -------- dc-h--w- c:\documents and settings\all users\application data\{6DAA3B20-D487-4FA2-81D5-50404CCB868D}
2011-07-25 09:49:48 -------- d-----w- c:\program files\Uniblue
2011-07-25 09:49:32 -------- d-----w- c:\documents and settings\owner\local settings\application data\PackageAware
2011-07-25 09:41:21 -------- d-----w- c:\documents and settings\owner\DoctorWeb
2011-06-25 22:23:15 2106216 ----a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll
2011-06-25 22:23:14 1998168 ----a-w- c:\program files\mozilla firefox\d3dx9_43.dll
.
==================== Find3M ====================
.
2011-07-06 18:52:42 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-06 18:52:42 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-01 02:20:39 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-06-06 09:23:36 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-02 14:02:05 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-05-18 23:05:19 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-05-05 21:10:12 0 ----a-w- c:\windows\system32\tmp.tmp
2011-05-04 03:52:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-05-04 01:25:49 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel.dll
2011-04-29 16:19:43 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: Maxtor_6Y080L0 rev.YAR41BW0 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0xAD1E2F00]<<
_asm { MOV EAX, [ESP+0x4]; MOV ECX, [EAX+0x28]; PUSH EBP; MOV EBP, [ECX+0x4]; PUSH ESI; MOV ESI, [ESP+0x10]; PUSH EDI; MOV EDI, [ESI+0x60]; MOV AL, [EDI]; CMP AL, 0x16; JNZ 0x36; PUSH ESI; }
1 nt!IofCallDriver[0x804E37D5] -> \Device\Harddisk0\DR0[0x89FD5AB8]
3 CLASSPNP[0xF7637FD7] -> nt!IofCallDriver[0x804E37D5] -> [0x8994E030]
\Driver\00001643[0x89ABE6E8] -> IRP_MJ_CREATE -> 0xAD1E2F00
error: Read A device attached to the system is not functioning.
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [BP+0x0], CH; JL 0x2e; JNZ 0x3a; }
detected disk devices:
detected hooks:
\Driver\atapi DriverStartIo -> 0x89F9257B
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 13:19:27.56 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-23.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 20/07/2005 21:56:29
System Uptime: 25/07/2011 11:47:54 (2 hours ago)
.
Motherboard: Dell Computer Corp. | | 0G1548
Processor: Intel(R) Celeron(R) CPU 2.60GHz | Microprocessor | 2591/400mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 74 GiB total, 13.767 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is CDROM ()
H: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP280: 02/06/2011 22:08:15 - Installed Windows XP KB951698.
RP281: 02/06/2011 22:09:47 - Installed Windows XP KB951748.
RP282: 02/06/2011 22:11:21 - Installed Windows XP KB952287.
RP283: 02/06/2011 22:12:45 - Installed Windows XP KB952954.
RP284: 02/06/2011 22:14:15 - Installed Windows XP KB954211.
RP285: 02/06/2011 22:15:40 - Installed Windows XP KB954600.
RP286: 02/06/2011 22:17:06 - Installed Windows XP KB955069.
RP287: 02/06/2011 22:18:50 - Installed Windows XP KB956802.
RP288: 02/06/2011 22:20:19 - Installed Windows XP KB956803.
RP289: 02/06/2011 22:21:48 - Installed Windows XP KB956841.
RP290: 02/06/2011 22:23:22 - Installed Windows XP KB957097.
RP291: 02/06/2011 22:24:49 - Installed Windows XP KB958644.
RP292: 02/06/2011 22:26:12 - Installed Windows XP KB958687.
RP293: 03/06/2011 08:05:45 - Installed Java(TM) 6 Update 24
RP294: 04/06/2011 08:29:21 - System Checkpoint
RP295: 05/06/2011 09:00:21 - System Checkpoint
RP296: 06/06/2011 10:00:14 - System Checkpoint
RP297: 07/06/2011 10:34:33 - System Checkpoint
RP298: 08/06/2011 23:28:59 - System Checkpoint
RP299: 10/06/2011 00:03:45 - System Checkpoint
RP300: 11/06/2011 01:06:51 - System Checkpoint
RP301: 12/06/2011 01:43:55 - System Checkpoint
RP302: 13/06/2011 02:18:21 - System Checkpoint
RP303: 14/06/2011 02:31:21 - System Checkpoint
RP304: 15/06/2011 03:06:57 - System Checkpoint
RP305: 16/06/2011 03:27:49 - System Checkpoint
RP306: 17/06/2011 04:27:57 - System Checkpoint
RP307: 18/06/2011 05:27:52 - System Checkpoint
RP308: 19/06/2011 06:27:50 - System Checkpoint
RP309: 20/06/2011 03:00:29 - Software Distribution Service 3.0
RP310: 21/06/2011 03:00:31 - Software Distribution Service 3.0
RP311: 21/06/2011 17:21:55 - Software Distribution Service 3.0
RP312: 21/06/2011 17:37:58 - Software Distribution Service 3.0
RP313: 21/06/2011 17:56:52 - Software Distribution Service 3.0
RP314: 21/06/2011 19:42:59 - Software Distribution Service 3.0
RP315: 21/06/2011 19:45:19 - Software Distribution Service 3.0
RP316: 21/06/2011 19:57:00 - Restore Operation
RP317: 21/06/2011 20:12:53 - Software Distribution Service 3.0
RP318: 22/06/2011 03:00:32 - Software Distribution Service 3.0
RP319: 23/06/2011 03:00:24 - Software Distribution Service 3.0
RP320: 23/06/2011 08:59:06 - Installed Dell Solution Center
RP321: 23/06/2011 09:03:59 - Software Distribution Service 3.0
RP322: 23/06/2011 17:25:56 - Software Distribution Service 3.0
RP323: 23/06/2011 18:14:52 - Installed %1 %2.
RP324: 24/06/2011 03:00:21 - Software Distribution Service 3.0
RP325: 25/06/2011 03:00:19 - Software Distribution Service 3.0
RP326: 26/06/2011 03:00:28 - Software Distribution Service 3.0
RP327: 27/06/2011 03:00:19 - Software Distribution Service 3.0
RP328: 28/06/2011 03:00:24 - Software Distribution Service 3.0
RP329: 29/06/2011 03:00:19 - Software Distribution Service 3.0
RP330: 30/06/2011 03:00:31 - Software Distribution Service 3.0
RP331: 01/07/2011 03:00:18 - Software Distribution Service 3.0
RP332: 02/07/2011 03:00:38 - Software Distribution Service 3.0
RP333: 03/07/2011 03:00:27 - Software Distribution Service 3.0
RP334: 04/07/2011 03:00:31 - Software Distribution Service 3.0
RP335: 05/07/2011 03:00:30 - Software Distribution Service 3.0
RP336: 06/07/2011 03:00:29 - Software Distribution Service 3.0
RP337: 07/07/2011 03:00:28 - Software Distribution Service 3.0
RP338: 07/07/2011 21:36:31 - Installed Java(TM) 6 Update 26
RP339: 08/07/2011 03:00:20 - Software Distribution Service 3.0
RP340: 24/07/2011 13:33:05 - Software Distribution Service 3.0
RP341: 25/07/2011 03:00:23 - Software Distribution Service 3.0
.
==== Installed Programs ======================
.
Sansa Media Converter
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.4
Ahead Nero Burning ROM
ALZip
AnyImage Screensaver
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Avira AntiVir Personal - Free Antivirus
AviSynth 2.5
B57Inst
BACS
Bonjour
Broadcom 440x 10/100 Integrated Controller
Broadcom Advanced Control Suite
Broadcom Driver Installer
CCleaner
Conduit Engine
ConvertXtoDVD 2.2.3.258
Critical Update for Windows Media Player 11 (KB959772)
Dell AIO Printer A920
Dell ResourceCD
Dell Solution Center
Disc2Phone
DivXLand Media Subtitler
Drive Manager
DVD Decrypter (Remove Only)
DVD Shrink 3.2
ffdshow [rev 2583] [2009-01-05]
FLAC 1.2.1b (remove only)
FUJIFILM FinePixViewer S Ver.2.1
Haali Media Splitter
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976002-v5)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
ImgBurn
Intel(R) 537EP V9x DF PCI Modem
Intel(R) Extreme Graphics Driver
Internet Explorer Q903235
Java Auto Updater
Java(TM) 6 Update 26
JDownloader
K-Lite Codec Pack 4.7.5 (Full)
Malwarebytes' Anti-Malware version 1.51.1.1800
Media Player Classic - Home Cinema v. 1.3.1249.0
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works 7.0
Modem Helper
Mozilla Firefox 5.0 (x86 en-GB)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Picasa 2
PowerDVD
QuickTime
RealPlayer
RealUpgrade 1.0
Rosetta Stone Version 3
Sansa Updater
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Sigma REALmagic MPEG-4 Video Codec
Sonic RecordNow!
Sony Ericsson PC Suite
Sothink Video Converter
SoundMAX
Spybot - Search & Destroy
Spybot - Search & Destroy 1.4
SubtitleCreator
SUPERAntiSpyware
SwedishNow!
Uniblue RegistryBooster
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB972636)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VLC media player 1.1.10
VSO Inspector 2.0.2
Vuze
Vuze Toolbar
Vuze_Remote Toolbar
WebFldrs XP
Winamp
Winamp Detector Plug-in
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live OneCare safety scanner
Windows Media Format 11 runtime
Windows Media Player 10 Hotfix - KB895316
Windows Media Player 11
Windows PowerShell(TM) 1.0
Windows XP Service Pack 3
WinRAR archiver
Wondershare Video to Audio Converter(Build 4.2.0.56)
Yahoo! Detect
ZENcast Organizer
.
==== Event Viewer Messages From Past Week ========
.
25/07/2011 13:07:00, error: Schedule [7901] - The At25.job command failed to start due to the following error: General access denied error
25/07/2011 13:00:00, error: Schedule [7901] - The At14.job command failed to start due to the following error: General access denied error
25/07/2011 12:00:00, error: Schedule [7901] - The At13.job command failed to start due to the following error: General access denied error
25/07/2011 11:46:53, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD avgio avipbb Fips intelppm IPSec MRxSmb NetBIOS NetBT OMCI RasAcd Rdbss sptd ssmdrv Tcpip
25/07/2011 11:46:53, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD Networking Support Environment service which failed to start because of the following error: A device attached to the system is not functioning.
25/07/2011 11:46:53, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/07/2011 11:46:53, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/07/2011 11:46:53, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBT service which failed to start because of the following error: A device attached to the system is not functioning.
25/07/2011 11:46:53, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/07/2011 11:46:53, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/07/2011 11:45:35, error: sptd [4] - Driver detected an internal error in its data structures for .
25/07/2011 11:26:00, error: Schedule [7901] - The At26.job command failed to start due to the following error: General access denied error
25/07/2011 11:00:00, error: Schedule [7901] - The At12.job command failed to start due to the following error: General access denied error
25/07/2011 10:00:00, error: Schedule [7901] - The At11.job command failed to start due to the following error: General access denied error
25/07/2011 09:00:00, error: Schedule [7901] - The At10.job command failed to start due to the following error: General access denied error
25/07/2011 08:43:11, error: Service Control Manager [7023] - The Network Location Awareness (NLA) service terminated with the following error: The specified procedure could not be found.
25/07/2011 08:43:04, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the ASKUpgrade service to connect.
25/07/2011 08:43:04, error: Service Control Manager [7000] - The IP Traffic Filter Controller service failed to start due to the following error: The executable program that this service is configured to run in does not implement the service.
25/07/2011 08:43:04, error: Service Control Manager [7000] - The ASKUpgrade service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
25/07/2011 08:00:00, error: Schedule [7901] - The At9.job command failed to start due to the following error: General access denied error
25/07/2011 07:00:00, error: Schedule [7901] - The At8.job command failed to start due to the following error: General access denied error
25/07/2011 06:00:00, error: Schedule [7901] - The At7.job command failed to start due to the following error: General access denied error
25/07/2011 05:00:00, error: Schedule [7901] - The At6.job command failed to start due to the following error: General access denied error
25/07/2011 04:00:00, error: Schedule [7901] - The At5.job command failed to start due to the following error: General access denied error
25/07/2011 03:03:52, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f0f4: Update for Windows XP (KB2443685).
25/07/2011 03:00:00, error: Schedule [7901] - The At4.job command failed to start due to the following error: General access denied error
25/07/2011 02:00:00, error: Schedule [7901] - The At3.job command failed to start due to the following error: General access denied error
25/07/2011 01:00:00, error: Schedule [7901] - The At2.job command failed to start due to the following error: General access denied error
25/07/2011 00:09:00, error: Schedule [7901] - The At1.job command failed to start due to the following error: General access denied error
24/07/2011 23:00:00, error: Schedule [7901] - The At24.job command failed to start due to the following error: General access denied error
24/07/2011 22:00:00, error: Schedule [7901] - The At23.job command failed to start due to the following error: General access denied error
24/07/2011 21:00:00, error: Schedule [7901] - The At22.job command failed to start due to the following error: General access denied error
24/07/2011 20:00:00, error: Schedule [7901] - The At21.job command failed to start due to the following error: General access denied error
24/07/2011 19:00:00, error: Schedule [7901] - The At20.job command failed to start due to the following error: General access denied error
24/07/2011 18:00:00, error: Schedule [7901] - The At19.job command failed to start due to the following error: General access denied error
24/07/2011 17:00:00, error: Schedule [7901] - The At18.job command failed to start due to the following error: General access denied error
24/07/2011 16:00:00, error: Schedule [7901] - The At17.job command failed to start due to the following error: General access denied error
24/07/2011 15:00:00, error: Schedule [7901] - The At16.job command failed to start due to the following error: General access denied error
24/07/2011 14:43:00, error: Schedule [7901] - The At27.job command failed to start due to the following error: General access denied error
24/07/2011 14:00:00, error: Schedule [7901] - The At15.job command failed to start due to the following error: General access denied error
.
==== End Of File ===========================