Your HijackThis should be in your program files, otherwise it will be removed when we delete your temporary internet files. Please review the instructions for downloading and installing Hijackthis again. After it is installed, please run a scan and place a checkmark next to this entry:
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
Close all other windows and click "Fix checked". Close HijackThis.
Please run CCleaner using the following steps:
** Because CCleaner removes everything in temp folders, if you have anything saved in a temp folder, back it up or move it to a permanent folder prior to running CCleaner.
** We will be cleaning cookies as well. Make a note of any passwords, etc. that you want to save. If you do not want to delete cookies, simply uncheck that option.
1. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
2. Then select the items you wish to clean up. In the Windows Tab:
Clean all entries in the "Internet Explorer" section.
Clean all the entries in the "Windows Explorer" section
Clean all entries in the "System" section.
Clean all entries in the "Advanced" section.
Clean any others that you choose. In the Applications Tab:
Clean all in the Firefox/Mozilla section if you use it.
Clean all in the Opera section if you use it.
Clean Sun Java in the Internet Section.
Clean any others that you choose.
3. Click the "Analyze" button. When the list of files comes up, click the "Run Cleaner" button.
4. A pop up box will appear advising this process will permanently delete files from your system.
5. Click "OK" and it will scan and clean your system.
6. Click "exit" when done. REBOOT.
Following that, we'll need to see some additional information about what is happening in your machine.
Please download DDS and save it to your desktop from here or here or here. Disable any script blocker, and then double click dds.scr to run the tool.
Copy/paste both logs to your reply on the forum. Do not attach them.
Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE.
DDS (Ver_10-12-12.02) - NTFSx86 Run by Administrator at 17:03:49.71 on Wed 02/02/2011 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1521 [GMT -6:00]
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
============= FINISH: 17:05:10.46 =============== Bugbatter, Finally here is the requested information. From the other thread, I did not even know I had Live One Care. I only found out when I checked on Bing about Client Protection msg I kept getting. So I have now remover Windows Defender. I have MS Security Essentials which found no problems. From my other thread, also, is there a program I can run to do all this or just keep running the two programs( security essentials and antimalware bytes)? Thanks. I also have reinstalled hijack properly now.
There is no one program that you can run that will do everything because they find different things. MS Security Essentials updates automatically and runs in realtime. Malwarebytes AM will run when you manually update it and manually run a scan ( unless you buy the paid version that updates and runs automatically).
You forgot to include the Attach.txt. Please post that. Thanks.
DDS (Ver_10-12-12.02) - NTFSx86 Run by Administrator at 21:09:45.39 on Wed 02/02/2011 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1458 [GMT -6:00]
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume2 Install Date: 12/6/2010 3:57:53 PM System Uptime: 2/2/2011 6:47:57 PM (3 hours ago)
A: is Removable C: is FIXED (NTFS) - 34 GiB total, 20.298 GiB free. D: is CDROM () F: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP208: 2/2/2011 12:25:57 PM - Installed Windows XP KB978601. RP209: 2/2/2011 12:25:57 PM - Installed Windows XP KB978706. RP210: 2/2/2011 12:25:57 PM - Installed Windows XP KB979309. RP211: 2/2/2011 12:25:56 PM - Installed Windows XP KB979482. RP212: 2/2/2011 12:25:56 PM - Installed Windows XP KB979559. RP213: 2/2/2011 12:25:55 PM - Installed Windows XP KB979683. RP214: 2/2/2011 12:25:55 PM - Installed Windows XP KB980218. RP215: 2/2/2011 12:25:54 PM - Installed Windows XP KB980232. RP216: 2/2/2011 12:25:54 PM - Software Distribution Service 3.0 RP217: 2/2/2011 12:25:53 PM - after sp3 and ie8 RP218: 2/2/2011 12:25:53 PM - Installed Adobe Reader X. RP219: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0 RP220: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0 RP221: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0 RP222: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0 RP223: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP224: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP225: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP226: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP227: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP228: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP229: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0 RP230: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0 RP231: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0 RP232: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0 RP233: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0 RP234: 2/2/2011 12:25:51 PM - System Checkpoint RP235: 2/2/2011 12:25:51 PM - System Checkpoint RP236: 2/2/2011 12:25:51 PM - Restore Operation RP237: 2/2/2011 12:25:51 PM - Cleaned registry with Windows Live OneCare safety scanner RP238: 2/2/2011 12:25:50 PM - Software Distribution Service 3.0 RP239: 2/2/2011 12:25:07 PM - Installed Microsoft Fix it 50195 RP240: 2/1/2011 4:12:34 AM - Restore Operation RP241: 2/1/2011 4:19:15 AM - Software Distribution Service 3.0 RP242: 2/2/2011 3:08:32 AM - Software Distribution Service 3.0 RP243: 2/2/2011 10:17:11 AM - Installed Windows Defender RP244: 2/2/2011 10:18:33 AM - Software Distribution Service 3.0 RP245: 2/2/2011 10:25:59 AM - Advanced Registry Optimizer 2010 - Before Installation RP246: 2/2/2011 10:27:09 AM - Advanced Registry Optimizer 2010 Wed, Feb 02, 11 10:27 RP247: 2/2/2011 10:47:23 AM - Software Distribution Service 3.0 RP248: 2/2/2011 11:06:50 AM - Installed WOT for Internet Explorer RP249: 2/2/2011 3:52:36 PM - Removed Windows Defender RP250: 2/2/2011 4:07:55 PM - Installed HiJackThis RP251: 2/2/2011 4:57:27 PM - before cleaner RP252: 2/2/2011 6:20:02 PM - Software Distribution Service 3.0 RP253: 2/2/2011 6:45:11 PM - Software Distribution Service 3.0
==== Installed Programs ======================
Adobe AIR Adobe Flash Player 10 ActiveX Adobe Reader X Adobe Shockwave Player 11.5 ArcSoft PhotoImpression 6 ArcSoft Print Creations Bing Bar Bing Bar Platform Bing Rewards Client Installer CCleaner Dell Driver Reset Tool Dell PC TuneUp Dell ResourceCD EPSON CX8400 User's Guide EPSON Printer Software EPSON Scan EPSON Stylus CX8400 Series Scanner Driver Update EPSON TWAIN 5 FinePixViewer Ver.4.2 FUJIFILM USB Driver GoToAssist Corporate HiJackThis Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB2158563) Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB915800-v4) Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB954550-v5) Hotfix for Windows XP (KB954708) Hotfix for Windows XP (KB961118) Hotfix for Windows XP (KB981793) ImageMixer VCD2 for FinePix Intel(R) Extreme Graphics 2 Driver Internet Explorer (Enable DEP) Junk Mail filter update Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft Antimalware Microsoft Application Error Reporting Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Choice Guard Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Default Manager Microsoft Fix it Center Microsoft Office Live Add-in 1.3 Microsoft Office Outlook Connector Microsoft Office Standard Edition 2003 Microsoft Search Enhancement Pack Microsoft Security Client Microsoft Security Essentials Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Sync Framework Services Native v1.0 (x86) Microsoft User-Mode Driver Framework Feature Pack 1.0 MicroStaff WINASPI Mozilla Firefox (3.6.13) MSVCRT NGIS NGISCT NGISRD OGA Notifier 2.0.0048.0 PlayBack 1.0.0.5 PowerDVD 5.7 RAW FILE CONVERTER LE REALTEK GbE & FE Ethernet PCI NIC Driver Secunia PSI (2.0.0.3001) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Windows Internet Explorer 8 (KB2360131) Security Update for Windows Internet Explorer 8 (KB2416400) Security Update for Windows Internet Explorer 8 (KB971961) Security Update for Windows Internet Explorer 8 (KB981332) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows Media Player (KB2378111) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB975558) Security Update for Windows Media Player (KB978695) Security Update for Windows Media Player (KB979402) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Search 4 - KB963093 Security Update for Windows XP (KB2079403) Security Update for Windows XP (KB2115168) Security Update for Windows XP (KB2121546) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB2259922) Security Update for Windows XP (KB2279986) Security Update for Windows XP (KB2286198) Security Update for Windows XP (KB2296011) Security Update for Windows XP (KB2296199) Security Update for Windows XP (KB2347290) Security Update for Windows XP (KB2360937) Security Update for Windows XP (KB2387149) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2436673) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB970430) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975561) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979559) Security Update for Windows XP (KB979683) Security Update for Windows XP (KB979687) Security Update for Windows XP (KB980195) Security Update for Windows XP (KB980218) Security Update for Windows XP (KB980232) Security Update for Windows XP (KB980436) Security Update for Windows XP (KB981322) Security Update for Windows XP (KB981852) Security Update for Windows XP (KB981957) Security Update for Windows XP (KB981997) Security Update for Windows XP (KB982132) Security Update for Windows XP (KB982214) Security Update for Windows XP (KB982381) Security Update for Windows XP (KB982665) Segoe UI SoundMAX SpywareBlaster 4.4 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Windows (KB971513) Update for Windows Internet Explorer 8 (KB2447568) Update for Windows Internet Explorer 8 (KB976662) Update for Windows XP (KB2141007) Update for Windows XP (KB2345886) Update for Windows XP (KB2467659) Update for Windows XP (KB951978) Update for Windows XP (KB955759) Update for Windows XP (KB961503) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB971737) Update for Windows XP (KB973687) Update for Windows XP (KB973815) WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Internet Explorer 8 Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live ID Sign-in Assistant Windows Live Mail Windows Live Messenger Windows Live Photo Gallery Windows Live Sync Windows Live Toolbar Windows Live Upload Tool Windows Live Writer Windows Management Framework Core Windows Media Format 11 runtime Windows Media Player 11 Windows Search 4.0 Windows XP Service Pack 3 WOT for Internet Explorer XML Paper Specification Shared Components Pack 1.0
==== Event Viewer Messages From Past Week ========
2/2/2011 6:30:39 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows Search service to connect. 2/2/2011 6:30:39 PM, error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 2/2/2011 6:30:39 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 2/2/2011 6:20:45 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2416447). 2/2/2011 3:09:10 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.875.0). 2/2/2011 3:08:55 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.97.840.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6502.0 Error code: 0x80070643 Error description: Fatal error during installation. 2/1/2011 5:42:31 AM, error: Print [19] - Sharing printer failed + 1722, Printer Microsoft XPS Document Writer share name Printer. 2/1/2011 5:31:39 PM, error: Dhcp [1002] - The IP address lease 192.168.1.64 for the Network Card with network address 000ACD1AC1D5 has been denied by the DHCP server 192.168.1.254 (The DHCP Server sent a DHCPNACK message). 2/1/2011 10:07:55 PM, error: Service Control Manager [7024] - The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).
==== End Of File =========================== Bugbatter, Ok, I downloaded the dds again and now have posted both reports. Sorry about that.
2/2/2011 12:25:51 PM - Cleaned registry with Windows Live OneCare safety scanner
2/2/2011 10:25:59 AM - Advanced Registry Optimizer 2010 - Before Installation
2/2/2011 10:27:09 AM - Advanced Registry Optimizer 2010 Wed, Feb 02, 11 10:27
Registry Cleaners can get you into trouble. They can aggravate a situation and take steps we are many times not manually aware of. It is better not to resort to such programs if you don't know what is happening with the proposed fix and the registry. Otherwise, a change to the registry can make a system unbootable by one mistake. Here are some good discussions:
Those Registry Cleaners left an orphan, so we will fix it.
Please run Notepad and copy/paste the text between the lines into a new file. Do not copy the dotted lines. * Make sure that Word Wrap is turned off in Notepad - (click the Format menu and uncheck Word Wrap)
Important: Make sure there are NO blank lines before Windows Registry Editor Version 5.00 Make sure there is one blank line at the end of the file.
------------------------------------------------------------------------------------------ Windows Registry Editor Version 5.00
Make sure that you have copied all of the text (e.g. Don't miss the first 'W'.) Save the file to the desktop as fix.reg and make sure the "Save as Type" field says "All Files". Then please go to the desktop and double-click on fix.reg, and click Yes to merge it with the registry.
CCleaner is a good utility to use weekly as part of your regular maintenance for cleaning temps, temporary internet files, cookies, etc..but I do not recommend using the Registry Issues component for reasons stated above. You will need to keep SpywareBlaster and Malwarebytes updated. The free versions require manual updates. Secunia is optional but it will let you know when your security needs to be updated, so it can be quite handy to have. When you installed it, if you missed the use instructions, they are here: http://www.youtube.com/watch?v=t1rQib1Y-Pc
You can delete the fix.reg on your Desktop , DDS and its logs, as well as Hijackthis (use Add/Remove Programs for uninstalling HijackThis).
In conclusion, I'd say you are in good shape now and are good to go, unless you have any additional questions. :emotion-1:
Bugbatter, I am not sure about live one care, I did not know I had it I just wanted to delete, because I could not download Windows Defender. As for the other registry cleaner. I was trying to download the cccleaner and this was the first download to pop up, so naturally then I had to remove it. I did reboot after the removals. The PC tune up backs up the registry all the time. But I don't normally like to mess with the registry at any time. I already had a mess when I ran a dulicate files scan, had 1700 of them so I deleted them all and had to reinstall op sys and everything else. So now I am ok and I thank you. I do have another question. Should I open a new thread?
Bugbatter, I realized that I did not ask the questions. I believe they might need to be posted on the operating system forum, but not sure. First, I ran a scan in safe mode ms security essentials, but I had to do it without protection because I got an error msg 0x800705b4 which meant that I had to turn off Windows Defender, which I do not have installed. Second, Why does ms sec ess not start automatically, it takes about ten seconds before it turns on,(from red to green in the notification window of the taskbar). Third, sometimes the firewall is turned off and after about ten seconds turns itself on. These last two questions only occur after a restart. Fourth, If my computer is bug free now why is it not faster, I use a computer at a friend's workplace and it has no protection whatsoever and when I click on internet explorer icon windows starts right away. On my computer, the first time I click it, it usually takes about 25 to 30 seconds. Let me know where to post these questions, please, and thank you once again.
As for the other registry cleaner. I was trying to download the cccleaner and this was the first download to pop up, so naturally then I had to remove it.
It is best to download programs from the vendor's website. This is CCleaner's website: http://www.piriform.com/
You downloaded CCleaner from another site that had popups.
MSE takes a few seconds to turn from red to green because it is loading the database.
As far as the error message, you probably received that error message because MSE was already running in the background, and Windows Defender is included in MSE.
The speed of your computer depends on the processor, RAM and other variables such as how many programs you have loading at Startup. Regarding PC Tuneup, Windows XP System Restore also backs up the registry. For internet access, it depends on your internet provider and the speed at which that is responding. Does Firefox take less time to load than IE? You could take a look at toolbars and other add-ons that need to load when the browser opens. Perhaps removing some of the add-ons will help.
You've also run a couple of registry cleaners. It is impossible to tell exactly what changes they have made to the system. I'm not sure what you mean by the firewall turning off. If you have allowed certain programs through, it will not stop them as long as they have access.
Bugbatter , Ok, thanks for all your help. As for the firewall, When I restart I get a pop-up that says antivirus is off to fix click here. I know now that it is loading its database. Well when I restart I also get a pop-up saying that my firewall is turned off to fix click here. It goes away just like the antivirus popup in just a bit even if I do nothing and both turn on. The firewall thing started while I had stopsign. I had to turn their firewall off because it was interfering with my downloads. After that is when the firewall thing started happening, I called them and they said that it was ok because it turned on after a little while. I said ok. But this has only been going on for a couple of months, and it does turn it self back on quickly. Does this mean that there is a problem?
I thought you removed StopSign. Which firewall are you getting alerts from -- the StopSign firewall? Or the Windows Firewall? Go to the Control Panel>Security Center, and make sure the Windows Firewall and Antivirus is turned on.
Bugbatter, Yes I have removed stop sign for at least a week now. The alerts are for the windows firewall. But, like I said the alert disappear after a few seconds. It started when I had stopsign, which is all gone from my computer. I could go to control panel and the first few times I got these alerts, I did. But, by the time the panel came up the alert was gone because the firewall had turned itself on. That is why I wondered if this is a problem, it is not hindering anything as far as I can tell.
Bugbatter, yes both are turned on. They usually stay on until I do a restart. Then they will come on in approx 15 seconds. You have explained that Ms security essentials has to load its database, so that is ok. As far as I know I only have one firewall-Windows. Here is the notepad document.
Results of screen317's Security Check version 0.99.8 Windows XP Service Pack 3 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! Microsoft Security Essentials Antivirus up to date! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware CCleaner Adobe Flash Player Adobe Reader X Mozilla Firefox (3.6.13) ```````````````````````````````` Process Check: objlist.exe by Laurent Windows Defender MSMpEng.exe Microsoft Security Essentials msseces.exe Microsoft Security Client Antimalware MsMpEng.exe ``````````End of Log````````````
Bugbatter, OK, Thanks once again. The problem has not occurred the last three times I restarted my machine. The only thing left is that I am really scared to use cccleaner. I do not want to mess up anything and it always wants to remove things.
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 2nd, 2011 10:00
Hi Liz 1954,
Your HijackThis should be in your program files, otherwise it will be removed when we delete your temporary internet files. Please review the instructions for downloading and installing Hijackthis again.
After it is installed, please run a scan and place a checkmark next to this entry:
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
Close all other windows and click "Fix checked". Close HijackThis.
Please run CCleaner using the following steps:
** Because CCleaner removes everything in temp folders, if you have anything saved in a temp folder, back it up or move it to a permanent folder prior to running CCleaner.
** We will be cleaning cookies as well. Make a note of any passwords, etc. that you want to save. If you do not want to delete cookies, simply uncheck that option.
1. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
2. Then select the items you wish to clean up. In the Windows Tab:
3. Click the "Analyze" button. When the list of files comes up, click the "Run Cleaner" button.
4. A pop up box will appear advising this process will permanently delete files from your system.
5. Click "OK" and it will scan and clean your system.
6. Click "exit" when done. REBOOT.
Following that, we'll need to see some additional information about what is happening in your machine.
Please download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
-----------------------------------------------------
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE.
liz1954
2 Intern
•
161 Posts
0
February 2nd, 2011 15:00
DDS (Ver_10-12-12.02) - NTFSx86
Run by Administrator at 17:03:49.71 on Wed 02/02/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1521 [GMT -6:00]
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\mswinext.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\Administrator\Desktop\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://yahoo.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\6.3.2380.0\npwinext.dll
TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe
mPolicies-system: DisableCAD = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki...
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: microsoft.com\support
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {362C56AA-6E4F-40C7-A0B5-85501DBDAD77} - hxxp://i.dell.com/images/global/js/scanner/SysProExe.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1291868006437
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1291867998890
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\615\G2AWinLogon.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
LSA: Notification Packages = :\windows\syste
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\admini~1\applic~1\mozilla\firefox\profiles\b15huoy6.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
============= SERVICES / DRIVERS ===============
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-24 165264]
R1 MpKsl7c3a9136;MpKsl7c3a9136;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5fcccda6-68ce-497a-a802-c9a45ff8a3bc}\MpKsl7c3a9136.sys [2011-2-2 28752]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-1-10 993848]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-1-10 399416]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 ioloFileInfoList;iolo FileInfoList Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2010-12-9 600944]
S3 ioloSystemService;iolo System Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2010-12-9 600944]
S3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\microsoft fix it center\Matsvc.exe [2010-11-16 267568]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-12 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
=============== File Associations ===============
JSEFile=NOTEPAD.EXE %1
VBEFile=NOTEPAD.EXE %1
VBSFile=NOTEPAD.EXE %1
=============== Created Last 30 ================
2011-02-02 22:59:18 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{5fcccda6-68ce-497a-a802-c9a45ff8a3bc}\MpKsl7c3a9136.sys
2011-02-02 22:07:58 388096 ----a-r- c:\docume~1\admini~1\applic~1\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-02-02 22:07:56 -------- d-----w- c:\program files\Trend Micro
2011-02-02 19:08:00 -------- d-----w- c:\docume~1\admini~1\locals~1\applic~1\Mozilla
2011-02-02 18:32:45 -------- d-----w- c:\docume~1\admini~1\locals~1\applic~1\Secunia PSI
2011-02-02 17:13:40 -------- d-----w- c:\program files\SpywareBlaster
2011-02-02 17:06:51 -------- d-----w- c:\program files\WOT
2011-02-02 17:04:47 -------- d-----w- c:\program files\CCleaner
2011-02-02 16:59:05 -------- d-----w- c:\program files\Secunia
2011-02-02 16:48:05 5890896 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2011-02-02 16:47:54 5890896 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{5fcccda6-68ce-497a-a802-c9a45ff8a3bc}\mpengine.dll
2011-02-02 16:45:55 -------- d-----w- c:\program files\Microsoft Security Client
2011-02-02 16:35:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-02 16:35:50 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-02 16:35:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-02 16:04:27 -------- d-----w- C:\WINSSLog
2011-02-01 10:12:55 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-02-01 10:12:55 -------- d-----w- c:\windows\system32\wbem\Repository
2011-01-31 21:02:14 -------- d-----w- c:\docume~1\admini~1\applic~1\Malwarebytes
2011-01-31 21:02:04 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-01-31 18:22:48 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-26 20:30:20 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2011-01-26 20:29:47 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2011-01-26 20:29:13 974848 -c----w- c:\windows\system32\dllcache\mfc42.dll
2011-01-26 20:29:13 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2011-01-26 20:28:22 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2011-01-26 17:32:58 -------- d-----w- c:\windows\system32\Adobe
2011-01-26 16:39:04 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-01-26 16:21:22 -------- d-----w- c:\windows\ServicePackFiles
2011-01-26 16:21:06 294912 ------w- c:\program files\windows media player\dlimport.exe
2011-01-26 16:21:00 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2011-01-26 13:52:12 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2011-01-26 13:47:28 357248 -c----w- c:\windows\system32\dllcache\srv.sys
2011-01-26 13:46:39 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2011-01-26 13:35:32 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-01-26 13:35:32 272128 ------w- c:\windows\system32\drivers\bthport.sys
2011-01-26 13:35:28 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2011-01-26 13:30:20 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2011-01-26 13:30:20 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2011-01-26 13:30:10 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2011-01-26 13:30:09 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2011-01-26 13:30:09 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-01-26 13:30:09 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2011-01-26 13:30:09 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2011-01-26 13:30:09 110592 -c----w- c:\windows\system32\dllcache\services.exe
2011-01-26 13:30:08 730112 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2011-01-26 13:30:08 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
2011-01-26 13:30:08 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2011-01-26 13:07:41 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2011-01-26 13:00:21 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe
2011-01-24 03:14:58 -------- d-----w- c:\program files\XP_CD-DVD-Fix
2011-01-17 20:58:09 645616 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2011-01-17 20:58:09 446464 ----a-r- c:\windows\system32\hhactivex.dll
2011-01-17 20:58:09 414944 ----a-w- c:\windows\system32\COMCT332.OCX
2011-01-17 20:58:08 328480 ----a-w- c:\windows\system32\ssa3d30.ocx
2011-01-17 20:58:07 89360 ----a-w- c:\windows\system32\VB5DB.DLL
2011-01-17 20:58:06 13632 ------w- c:\windows\system32\drivers\omci.sys
2011-01-17 20:40:43 -------- d-----w- c:\docume~1\admini~1\locals~1\applic~1\PowerDVD
2011-01-15 18:58:27 -------- d-----w- c:\program files\ACW
2011-01-15 18:54:27 -------- d-----w- c:\docume~1\admini~1\applic~1\ElevatedDiagnostics
==================== Find3M ====================
2010-12-09 18:40:20 74703 ----a-w- c:\windows\system32\mfc45.dll
2010-12-09 02:05:32 1409 ----a-w- c:\windows\system32\tmp065A2.FOT
2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-16 07:10:14 65328 -c--a-w- c:\windows\apppatch\matsshim.dll
2010-11-09 14:52:35 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:26:58 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 ------w- c:\windows\system32\inetcpl.cpl
============= FINISH: 17:05:10.46 ===============
Bugbatter, Finally here is the requested information. From the other thread, I did not even know I had Live One Care. I only found out when I checked on Bing about Client Protection msg I kept getting. So I have now remover Windows Defender. I have MS Security Essentials which found no problems. From my other thread, also, is there a program I can run to do all this or just keep running the two programs( security essentials and antimalware bytes)? Thanks. I also have reinstalled hijack properly now.
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 2nd, 2011 16:00
There is no one program that you can run that will do everything because they find different things. MS Security Essentials updates automatically and runs in realtime. Malwarebytes AM will run when you manually update it and manually run a scan ( unless you buy the paid version that updates and runs automatically).
You forgot to include the Attach.txt. Please post that. Thanks.
liz1954
2 Intern
•
161 Posts
0
February 2nd, 2011 19:00
DDS (Ver_10-12-12.02) - NTFSx86
Run by Administrator at 21:09:45.39 on Wed 02/02/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1458 [GMT -6:00]
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\MSN Toolbar\Platform\6.3.2380.0\mswinext.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Administrator\Desktop\dds.com
============== Pseudo HJT Report ===============
uStart Page = hxxp://yahoo.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\6.3.2380.0\npwinext.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe
mPolicies-system: DisableCAD = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki...
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: microsoft.com\support
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {362C56AA-6E4F-40C7-A0B5-85501DBDAD77} - hxxp://i.dell.com/images/global/js/scanner/SysProExe.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1291868006437
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1291867998890
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\615\G2AWinLogon.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
LSA: Notification Packages = :\windows\syste
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\admini~1\applic~1\mozilla\firefox\profiles\b15huoy6.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
============= SERVICES / DRIVERS ===============
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-24 165264]
R1 MpKsl6ea0ead8;MpKsl6ea0ead8;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{152aba8e-0406-4130-8ff3-c510c96eae82}\MpKsl6ea0ead8.sys [2011-2-2 28752]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2011-2-2 54760]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-1-10 993848]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-1-10 399416]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-4-28 704872]
S3 ioloFileInfoList;iolo FileInfoList Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2010-12-9 600944]
S3 ioloSystemService;iolo System Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2010-12-9 600944]
S3 MatSvc;Microsoft Automated Troubleshooting Service;c:\program files\microsoft fix it center\Matsvc.exe [2010-11-16 267568]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-12 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
=============== File Associations ===============
JSEFile=NOTEPAD.EXE %1
regfile=NOTEPAD.EXE %1
scrfile=NOTEPAD.EXE %1
VBEFile=NOTEPAD.EXE %1
VBSFile=NOTEPAD.EXE %1
=============== Created Last 30 ================
2011-02-03 00:48:32 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{152aba8e-0406-4130-8ff3-c510c96eae82}\MpKsl6ea0ead8.sys
2011-02-03 00:46:23 5890896 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{152aba8e-0406-4130-8ff3-c510c96eae82}\mpengine.dll
2011-02-03 00:34:43 -------- d-----w- c:\documents and settings\administrator\Tracing
2011-02-03 00:33:28 54760 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys
2011-02-03 00:31:58 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2011-02-03 00:31:48 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-02-03 00:26:07 74520 ----a-w- c:\program files\common files\windows live\.cache\f2ed2eaa1cbc338\DSETUP.dll
2011-02-03 00:26:07 484632 ----a-w- c:\program files\common files\windows live\.cache\f2ed2eaa1cbc338\DXSETUP.exe
2011-02-03 00:26:07 1670936 ----a-w- c:\program files\common files\windows live\.cache\f2ed2eaa1cbc338\dsetup32.dll
2011-02-03 00:25:37 1013800 ----a-w- c:\program files\common files\windows live\.cache\e15c9b9e1cbc338\WindowsXP-KB954708-x86-ENU.exe
2011-02-02 22:07:58 388096 ----a-r- c:\docume~1\admini~1\applic~1\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-02-02 22:07:56 -------- d-----w- c:\program files\Trend Micro
2011-02-02 19:08:00 -------- d-----w- c:\docume~1\admini~1\locals~1\applic~1\Mozilla
2011-02-02 18:32:45 -------- d-----w- c:\docume~1\admini~1\locals~1\applic~1\Secunia PSI
2011-02-02 17:13:40 -------- d-----w- c:\program files\SpywareBlaster
2011-02-02 17:06:51 -------- d-----w- c:\program files\WOT
2011-02-02 17:04:47 -------- d-----w- c:\program files\CCleaner
2011-02-02 16:59:05 -------- d-----w- c:\program files\Secunia
2011-02-02 16:48:05 5890896 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2011-02-02 16:45:55 -------- d-----w- c:\program files\Microsoft Security Client
2011-02-02 16:35:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-02-02 16:35:50 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-02-02 16:35:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-02-02 16:04:27 -------- d-----w- C:\WINSSLog
2011-02-01 10:12:55 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-02-01 10:12:55 -------- d-----w- c:\windows\system32\wbem\Repository
2011-01-31 21:02:14 -------- d-----w- c:\docume~1\admini~1\applic~1\Malwarebytes
2011-01-31 21:02:04 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-01-31 18:22:48 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-26 20:30:20 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2011-01-26 20:29:47 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2011-01-26 20:29:13 974848 -c----w- c:\windows\system32\dllcache\mfc42.dll
2011-01-26 20:29:13 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2011-01-26 20:28:22 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2011-01-26 17:32:58 -------- d-----w- c:\windows\system32\Adobe
2011-01-26 16:39:04 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-01-26 16:21:22 -------- d-----w- c:\windows\ServicePackFiles
2011-01-26 16:21:06 294912 ------w- c:\program files\windows media player\dlimport.exe
2011-01-26 16:21:00 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2011-01-26 13:52:12 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2011-01-26 13:47:28 357248 -c----w- c:\windows\system32\dllcache\srv.sys
2011-01-26 13:46:39 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2011-01-26 13:35:32 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-01-26 13:35:32 272128 ------w- c:\windows\system32\drivers\bthport.sys
2011-01-26 13:35:28 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2011-01-26 13:30:20 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2011-01-26 13:30:20 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2011-01-26 13:30:10 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2011-01-26 13:30:09 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2011-01-26 13:30:09 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-01-26 13:30:09 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2011-01-26 13:30:09 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2011-01-26 13:30:09 110592 -c----w- c:\windows\system32\dllcache\services.exe
2011-01-26 13:30:08 730112 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2011-01-26 13:30:08 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
2011-01-26 13:30:08 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2011-01-26 13:07:41 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2011-01-26 13:00:21 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe
2011-01-24 03:14:58 -------- d-----w- c:\program files\XP_CD-DVD-Fix
2011-01-17 20:58:09 645616 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2011-01-17 20:58:09 446464 ----a-r- c:\windows\system32\hhactivex.dll
2011-01-17 20:58:09 414944 ----a-w- c:\windows\system32\COMCT332.OCX
2011-01-17 20:58:08 328480 ----a-w- c:\windows\system32\ssa3d30.ocx
2011-01-17 20:58:07 89360 ----a-w- c:\windows\system32\VB5DB.DLL
2011-01-17 20:58:06 13632 ------w- c:\windows\system32\drivers\omci.sys
2011-01-17 20:40:43 -------- d-----w- c:\docume~1\admini~1\locals~1\applic~1\PowerDVD
2011-01-15 18:58:27 -------- d-----w- c:\program files\ACW
2011-01-15 18:54:27 -------- d-----w- c:\docume~1\admini~1\applic~1\ElevatedDiagnostics
==================== Find3M ====================
2010-12-09 18:40:20 74703 ----a-w- c:\windows\system32\mfc45.dll
2010-12-09 02:05:32 1409 ----a-w- c:\windows\system32\tmp065A2.FOT
2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-16 07:10:14 65328 -c--a-w- c:\windows\apppatch\matsshim.dll
2010-11-09 14:52:35 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:26:58 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 ------w- c:\windows\system32\inetcpl.cpl
============= FINISH: 21:11:28.54 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 12/6/2010 3:57:53 PM
System Uptime: 2/2/2011 6:47:57 PM (3 hours ago)
Motherboard: Dell Computer Corp. | | 0N6381
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2793/800mhz
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 34 GiB total, 20.298 GiB free.
D: is CDROM ()
F: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP208: 2/2/2011 12:25:57 PM - Installed Windows XP KB978601.
RP209: 2/2/2011 12:25:57 PM - Installed Windows XP KB978706.
RP210: 2/2/2011 12:25:57 PM - Installed Windows XP KB979309.
RP211: 2/2/2011 12:25:56 PM - Installed Windows XP KB979482.
RP212: 2/2/2011 12:25:56 PM - Installed Windows XP KB979559.
RP213: 2/2/2011 12:25:55 PM - Installed Windows XP KB979683.
RP214: 2/2/2011 12:25:55 PM - Installed Windows XP KB980218.
RP215: 2/2/2011 12:25:54 PM - Installed Windows XP KB980232.
RP216: 2/2/2011 12:25:54 PM - Software Distribution Service 3.0
RP217: 2/2/2011 12:25:53 PM - after sp3 and ie8
RP218: 2/2/2011 12:25:53 PM - Installed Adobe Reader X.
RP219: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0
RP220: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0
RP221: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0
RP222: 2/2/2011 12:25:53 PM - Software Distribution Service 3.0
RP223: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP224: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP225: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP226: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP227: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP228: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP229: 2/2/2011 12:25:52 PM - Software Distribution Service 3.0
RP230: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0
RP231: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0
RP232: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0
RP233: 2/2/2011 12:25:51 PM - Software Distribution Service 3.0
RP234: 2/2/2011 12:25:51 PM - System Checkpoint
RP235: 2/2/2011 12:25:51 PM - System Checkpoint
RP236: 2/2/2011 12:25:51 PM - Restore Operation
RP237: 2/2/2011 12:25:51 PM - Cleaned registry with Windows Live OneCare safety scanner
RP238: 2/2/2011 12:25:50 PM - Software Distribution Service 3.0
RP239: 2/2/2011 12:25:07 PM - Installed Microsoft Fix it 50195
RP240: 2/1/2011 4:12:34 AM - Restore Operation
RP241: 2/1/2011 4:19:15 AM - Software Distribution Service 3.0
RP242: 2/2/2011 3:08:32 AM - Software Distribution Service 3.0
RP243: 2/2/2011 10:17:11 AM - Installed Windows Defender
RP244: 2/2/2011 10:18:33 AM - Software Distribution Service 3.0
RP245: 2/2/2011 10:25:59 AM - Advanced Registry Optimizer 2010 - Before Installation
RP246: 2/2/2011 10:27:09 AM - Advanced Registry Optimizer 2010 Wed, Feb 02, 11 10:27
RP247: 2/2/2011 10:47:23 AM - Software Distribution Service 3.0
RP248: 2/2/2011 11:06:50 AM - Installed WOT for Internet Explorer
RP249: 2/2/2011 3:52:36 PM - Removed Windows Defender
RP250: 2/2/2011 4:07:55 PM - Installed HiJackThis
RP251: 2/2/2011 4:57:27 PM - before cleaner
RP252: 2/2/2011 6:20:02 PM - Software Distribution Service 3.0
RP253: 2/2/2011 6:45:11 PM - Software Distribution Service 3.0
==== Installed Programs ======================
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader X
Adobe Shockwave Player 11.5
ArcSoft PhotoImpression 6
ArcSoft Print Creations
Bing Bar
Bing Bar Platform
Bing Rewards Client Installer
CCleaner
Dell Driver Reset Tool
Dell PC TuneUp
Dell ResourceCD
EPSON CX8400 User's Guide
EPSON Printer Software
EPSON Scan
EPSON Stylus CX8400 Series Scanner Driver Update
EPSON TWAIN 5
FinePixViewer Ver.4.2
FUJIFILM USB Driver
GoToAssist Corporate
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB954708)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB981793)
ImageMixer VCD2 for FinePix
Intel(R) Extreme Graphics 2 Driver
Internet Explorer (Enable DEP)
Junk Mail filter update
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Default Manager
Microsoft Fix it Center
Microsoft Office Live Add-in 1.3
Microsoft Office Outlook Connector
Microsoft Office Standard Edition 2003
Microsoft Search Enhancement Pack
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft User-Mode Driver Framework Feature Pack 1.0
MicroStaff WINASPI
Mozilla Firefox (3.6.13)
MSVCRT
NGIS
NGISCT
NGISRD
OGA Notifier 2.0.0048.0
PlayBack 1.0.0.5
PowerDVD 5.7
RAW FILE CONVERTER LE
REALTEK GbE & FE Ethernet PCI NIC Driver
Secunia PSI (2.0.0.3001)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Search 4 - KB963093
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982381)
Security Update for Windows XP (KB982665)
Segoe UI
SoundMAX
SpywareBlaster 4.4
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Windows (KB971513)
Update for Windows Internet Explorer 8 (KB2447568)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer
Windows Management Framework Core
Windows Media Format 11 runtime
Windows Media Player 11
Windows Search 4.0
Windows XP Service Pack 3
WOT for Internet Explorer
XML Paper Specification Shared Components Pack 1.0
==== Event Viewer Messages From Past Week ========
2/2/2011 6:30:39 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows Search service to connect.
2/2/2011 6:30:39 PM, error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
2/2/2011 6:30:39 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
2/2/2011 6:20:45 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2416447).
2/2/2011 3:09:10 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.875.0).
2/2/2011 3:08:55 AM, error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.97.840.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6502.0 Error code: 0x80070643 Error description: Fatal error during installation.
2/1/2011 5:42:31 AM, error: Print [19] - Sharing printer failed + 1722, Printer Microsoft XPS Document Writer share name Printer.
2/1/2011 5:31:39 PM, error: Dhcp [1002] - The IP address lease 192.168.1.64 for the Network Card with network address 000ACD1AC1D5 has been denied by the DHCP server 192.168.1.254 (The DHCP Server sent a DHCPNACK message).
2/1/2011 10:07:55 PM, error: Service Control Manager [7024] - The Windows Search service terminated with service-specific error 2147749155 (0x80040D23).
==== End Of File ===========================
Bugbatter, Ok, I downloaded the dds again and now have posted both reports. Sorry about that.
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 2nd, 2011 21:00
Why did you run these today?
2/2/2011 12:25:51 PM - Cleaned registry with Windows Live OneCare safety scanner
2/2/2011 10:25:59 AM - Advanced Registry Optimizer 2010 - Before Installation
2/2/2011 10:27:09 AM - Advanced Registry Optimizer 2010 Wed, Feb 02, 11 10:27
Registry Cleaners can get you into trouble. They can aggravate a situation and take steps we are many times not manually aware of. It is better not to resort to such programs if you don't know what is happening with the proposed fix and the registry. Otherwise, a change to the registry can make a system unbootable by one mistake. Here are some good discussions:
http://windows.microsoft.com/en-US/windows-vista/Are-registry-cleaners-necessary
http://aumha.net/viewtopic.php?t=28099
http://cwsandiego.com/2010/11/16/registry-cleaners-proceed-with-caution/
http://blogs.technet.com/b/markrussinovich/archive/2005/10/02/registry-junk-a-windows-fact-of-life.aspx
http://www.whatthetech.com/2007/11/25/do-i-need-a-registry-cleaner/
http://billpstudios.blogspot.com/2007/04/do-i-need-registry-cleaner.html
If you absolutely must use a registry cleaner, always backup the registry first:
http://windows.microsoft.com/en-us/windows7/Back-up-the-registry
Those Registry Cleaners left an orphan, so we will fix it.
Please run Notepad and copy/paste the text between the lines into a new file. Do not copy the dotted lines.
* Make sure that Word Wrap is turned off in Notepad - (click the Format menu and uncheck Word Wrap)
Important:
Make sure there are NO blank lines before Windows Registry Editor Version 5.00 Make sure there is one blank line at the end of the file.
------------------------------------------------------------------------------------------
Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
-------------------------------------------------------------------------------------
Make sure that you have copied all of the text (e.g. Don't miss the first 'W'.) Save the file to the desktop as fix.reg and make sure the "Save as Type" field says "All Files". Then please go to the desktop and double-click on fix.reg, and click Yes to merge it with the registry.
CCleaner is a good utility to use weekly as part of your regular maintenance for cleaning temps, temporary internet files, cookies, etc..but I do not recommend using the Registry Issues component for reasons stated above. You will need to keep SpywareBlaster and Malwarebytes updated. The free versions require manual updates. Secunia is optional but it will let you know when your security needs to be updated, so it can be quite handy to have. When you installed it, if you missed the use instructions, they are here: http://www.youtube.com/watch?v=t1rQib1Y-Pc
You can delete the fix.reg on your Desktop , DDS and its logs, as well as Hijackthis (use Add/Remove Programs for uninstalling HijackThis).
In conclusion, I'd say you are in good shape now and are good to go, unless you have any additional questions. :emotion-1:
liz1954
2 Intern
•
161 Posts
0
February 2nd, 2011 22:00
Bugbatter, I am not sure about live one care, I did not know I had it I just wanted to delete, because I could not download Windows Defender. As for the other registry cleaner. I was trying to download the cccleaner and this was the first download to pop up, so naturally then I had to remove it. I did reboot after the removals. The PC tune up backs up the registry all the time. But I don't normally like to mess with the registry at any time. I already had a mess when I ran a dulicate files scan, had 1700 of them so I deleted them all and had to reinstall op sys and everything else. So now I am ok and I thank you. I do have another question. Should I open a new thread?
liz1954
2 Intern
•
161 Posts
0
February 3rd, 2011 00:00
Bugbatter, I realized that I did not ask the questions. I believe they might need to be posted on the operating system forum, but not sure. First, I ran a scan in safe mode ms security essentials, but I had to do it without protection because I got an error msg 0x800705b4 which meant that I had to turn off Windows Defender, which I do not have installed. Second, Why does ms sec ess not start automatically, it takes about ten seconds before it turns on,(from red to green in the notification window of the taskbar). Third, sometimes the firewall is turned off and after about ten seconds turns itself on. These last two questions only occur after a restart. Fourth, If my computer is bug free now why is it not faster, I use a computer at a friend's workplace and it has no protection whatsoever and when I click on internet explorer icon windows starts right away. On my computer, the first time I click it, it usually takes about 25 to 30 seconds. Let me know where to post these questions, please, and thank you once again.
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 3rd, 2011 11:00
It is best to download programs from the vendor's website. This is CCleaner's website: http://www.piriform.com/
You downloaded CCleaner from another site that had popups.
MSE takes a few seconds to turn from red to green because it is loading the database.
As far as the error message, you probably received that error message because MSE was already running in the background, and Windows Defender is included in MSE.
The speed of your computer depends on the processor, RAM and other variables such as how many programs you have loading at Startup. Regarding PC Tuneup, Windows XP System Restore also backs up the registry. For internet access, it depends on your internet provider and the speed at which that is responding. Does Firefox take less time to load than IE? You could take a look at toolbars and other add-ons that need to load when the browser opens. Perhaps removing some of the add-ons will help.
You've also run a couple of registry cleaners. It is impossible to tell exactly what changes they have made to the system. I'm not sure what you mean by the firewall turning off. If you have allowed certain programs through, it will not stop them as long as they have access.
liz1954
2 Intern
•
161 Posts
0
February 3rd, 2011 12:00
Bugbatter , Ok, thanks for all your help. As for the firewall, When I restart I get a pop-up that says antivirus is off to fix click here. I know now that it is loading its database. Well when I restart I also get a pop-up saying that my firewall is turned off to fix click here. It goes away just like the antivirus popup in just a bit even if I do nothing and both turn on. The firewall thing started while I had stopsign. I had to turn their firewall off because it was interfering with my downloads. After that is when the firewall thing started happening, I called them and they said that it was ok because it turned on after a little while. I said ok. But this has only been going on for a couple of months, and it does turn it self back on quickly. Does this mean that there is a problem?
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 3rd, 2011 14:00
I thought you removed StopSign. Which firewall are you getting alerts from -- the StopSign firewall? Or the Windows Firewall? Go to the Control Panel>Security Center, and make sure the Windows Firewall and Antivirus is turned on.
liz1954
2 Intern
•
161 Posts
0
February 3rd, 2011 15:00
Bugbatter, Yes I have removed stop sign for at least a week now. The alerts are for the windows firewall. But, like I said the alert disappear after a few seconds. It started when I had stopsign, which is all gone from my computer. I could go to control panel and the first few times I got these alerts, I did. But, by the time the panel came up the alert was gone because the firewall had turned itself on. That is why I wondered if this is a problem, it is not hindering anything as far as I can tell.
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 3rd, 2011 16:00
When you go to the Security Center now, is the firewall and antivirus turned on?
Please run the following (You can delete Security Check from the Desktop when you have finished posting here.):
Download Security Check by screen317 and save it to your Desktop: here or here
liz1954
2 Intern
•
161 Posts
0
February 3rd, 2011 19:00
Bugbatter, yes both are turned on. They usually stay on until I do a restart. Then they will come on in approx 15 seconds. You have explained that Ms security essentials has to load its database, so that is ok. As far as I know I only have one firewall-Windows. Here is the notepad document.
Results of screen317's Security Check version 0.99.8
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
CCleaner
Adobe Flash Player
Adobe Reader X
Mozilla Firefox (3.6.13)
````````````````````````````````
Process Check:
objlist.exe by Laurent
Windows Defender MSMpEng.exe
Microsoft Security Essentials msseces.exe
Microsoft Security Client Antimalware MsMpEng.exe
``````````End of Log````````````
Bugbatter
3 Apprentice
•
20.5K Posts
0
February 3rd, 2011 22:00
It looks fine to me.:emotion-1:
liz1954
2 Intern
•
161 Posts
0
February 4th, 2011 09:00
Bugbatter, OK, Thanks once again. The problem has not occurred the last three times I restarted my machine. The only thing left is that I am really scared to use cccleaner. I do not want to mess up anything and it always wants to remove things.