* If you are using any P2P (file sharing) programs, please remove them before we clean your computer. The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state. There is a list here: http://en.community.dell.com/forums/p/19241146/19367569.aspx#19367569
* If this computer belongs to someone else, do you have authority to apply the fixes we will use?
* Have you already fixed entries using HijackThis? If so, please restore all the backups and then post another log.
* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures. Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
* During the course of our cleanup please do not do any online work or surfing until we have verified that your system is clean.
* We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case. Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.
* If your replies do not fit in one post while we are handling your issue, please reply to yourself until all text is submitted. It may take several posts.
I look forward to your reply so we can begin cleaning.
Instructions posted for this user are customized for this user only. The tools used may cause damage if used on a computer with different infections. If you think you have similar problems, please post a HijackThis log at the top of this board to start a new forum topic.
* If you are using any cracked software, please remove it.
No cracked software is installed on my system.
* If you are using any P2P (file sharing) programs, please remove them before we clean your computer.
No P2P software is installed on my system.
* If this computer belongs to someone else, do you have authority to apply the fixes we will use?
I am the owner of this computer.
* Have you already fixed entries using HijackThis?
No, this is the initial log file from Highjack This ; No actions have been taken to resolve any issues.
* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures. Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
Does this include not running any virus detection software? My system is scanned multiple times daily. If required, I will disable the scans until the problem is resolved.
--------------------------------------------------- Please include the contents of the following in your next reply:
DDS.txt
Attach the following report to your post by clicking the Options tab at the top of your post. Add/Update. Click the BROWSE botton to browse to where you saved the file Attach.txt, and click SAVE
To answer your question, you can run your routine (scheduled) scans, however do not remove anything found. Instead, please let me know what that is, in case it is one one of our tools. If I need you to disable your AV, I will let you know when.
I followed your instructions, but when I click 'Save' to attach the file 'Attach.txt' from my desktop to my post I get the following error:
Only files with the following extensions are allowed: gif, jpg, jpeg, png, bmp, txt, avi, wmv, asf, flv, dat, rm, rmvb, mov, mpeg, avi, wmv, wma, mp3, ra . Please select a valid file.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Version 1.0)
Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 11/6/2006 1:19:49 PM System Uptime: 11/19/2008 7:35:58 AM (3 hours ago)
Motherboard: Dell Inc. | | 0GC375 Processor: Intel(R) Pentium(R) D CPU 3.20GHz | Microprocessor | 3192/800mhz BIOS: Phoenix ROM BIOS PLUS Version 1.10 A02 | DELL - 7 | A02 | 9/14/2005 5:00:00 PM
==== Disk Partitions =========================
A: is Removable C: is FIXED (NTFS) - 298 GiB total, 270.656 GiB free. D: is CDROM () E: is CDROM () F: is Removable G: is Removable H: is Removable I: is Removable J: is FIXED (NTFS) - 298 GiB total, 273.134 GiB free.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: 1394 Net Adapter Device ID: V1394\NIC1394\ACB73E2280140000 Manufacturer: Microsoft Name: 1394 Net Adapter PNP Device ID: V1394\NIC1394\ACB73E2280140000 Service: NIC1394
==== System Restore Points ===================
RP832: 10/18/2008 6:12:07 PM - System Checkpoint RP833: 10/18/2008 6:13:24 PM - 101808_18:13 RP834: 10/19/2008 7:19:12 AM - Installed Symantec Technical Support Advanced Chat Controls RP835: 10/19/2008 6:56:08 PM - Norton 360 Registry Clean RP836: 10/21/2008 6:43:43 AM - Software Distribution Service 3.0 RP837: 10/21/2008 4:04:19 PM - Norton 360 Registry Clean RP838: 10/21/2008 4:26:19 PM - Installed Microsoft Office Enterprise 2007 RP839: 10/21/2008 4:34:24 PM - Printer Driver Send To Microsoft OneNote Driver Installed RP840: 10/21/2008 5:21:28 PM - Printer Driver Send To Microsoft OneNote Driver Installed RP841: 10/21/2008 5:44:39 PM - Printer Driver Send To Microsoft OneNote Driver Installed RP842: 10/21/2008 5:53:38 PM - Installed Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs RP843: 10/22/2008 10:34:30 AM - Removed Adobe Reader 8.1.2 RP844: 10/22/2008 10:35:51 AM - Installed Adobe Reader 9. RP845: 10/22/2008 10:44:36 AM - Software Distribution Service 3.0 RP846: 10/23/2008 12:35:10 PM - System Checkpoint RP847: 10/24/2008 6:49:21 AM - Software Distribution Service 3.0 RP848: 10/25/2008 1:22:35 PM - System Checkpoint RP849: 10/26/2008 2:18:25 PM - System Checkpoint RP850: 10/28/2008 7:31:17 AM - System Checkpoint RP851: 10/29/2008 7:35:04 AM - System Checkpoint RP852: 10/30/2008 12:21:47 PM - System Checkpoint RP853: 11/1/2008 1:16:22 PM - System Checkpoint RP854: 11/2/2008 12:43:15 PM - System Checkpoint RP855: 11/3/2008 7:02:01 PM - System Checkpoint RP856: 11/4/2008 7:13:46 PM - System Checkpoint RP857: 11/6/2008 4:08:59 PM - Unsigned driver install RP858: 11/6/2008 4:31:33 PM - Unsigned driver install RP859: 11/8/2008 3:02:18 PM - System Checkpoint RP860: 11/9/2008 3:34:13 PM - System Checkpoint RP861: 11/10/2008 7:30:04 PM - System Checkpoint RP862: 11/12/2008 6:58:00 AM - Software Distribution Service 3.0 RP863: 11/13/2008 8:28:38 AM - Software Distribution Service 3.0 RP864: 11/13/2008 10:42:45 AM - Norton 360 Registry Clean RP865: 11/14/2008 10:11:34 AM - Installed Ad-Aware RP866: 11/14/2008 11:35:06 AM - Norton 360 Registry Clean RP867: 11/14/2008 11:56:42 AM - Installed Print to Fax RP868: 11/15/2008 12:23:49 PM - System Checkpoint RP869: 11/15/2008 5:47:08 PM - Removed Jasc Paint Shop Photo Album RP870: 11/15/2008 5:48:12 PM - Removed Jasc Paint Shop Pro 8 Dell Edition RP871: 11/15/2008 5:52:25 PM - Norton 360 Registry Clean RP872: 11/17/2008 7:21:19 AM - System Checkpoint RP873: 11/18/2008 12:21:18 PM - System Checkpoint RP874: 11/18/2008 12:36:15 PM - Removed Print to Fax
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1) Acrobat.com Ad-Aware Adobe AIR Adobe Flash Player ActiveX Adobe Reader 9 Adobe Shockwave Player AppCore Apple Software Update Auto Care Backup ccCommon Channel Master Corel Paint Shop Pro Photo XI Corel Snapfire DVD Maker Corel Snapfire Plus Creative Audio Console Creative MediaSource 5 Dell Resource CD Dell Support Center (Support Software) DesignPro 5.0 Limited Edition Easy-Link internet launch pad Evrsoft First Page 2006 Form Fill (Windows Live Toolbar) GearDrvs getPlus(R) for Adobe Highlight Viewer (Windows Live Toolbar) HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.0 (KB932471) Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB915800-v4) Hotfix for Windows XP (KB932716-v2) Hotfix for Windows XP (KB952287) Intel(R) 537EP V9x DF PCI Modem J2SE Runtime Environment 5.0 Update 10 Java(TM) 6 Update 3 Java(TM) 6 Update 5 Java(TM) 6 Update 7 Java(TM) SE Runtime Environment 6 Update 1 LiveUpdate (Symantec Corporation) Map Button (Windows Live Toolbar) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 1 Microsoft Application Error Reporting Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Digital Image Library 9 - Blocker Microsoft Digital Image Standard 2006 Editor Microsoft Digital Image Standard 2006 Library Microsoft Digital Image Standard 2006 Update Microsoft IntelliPoint 6.1 Microsoft IntelliType Pro 6.1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs Microsoft Silverlight Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.7 Microsoft Visual C++ 2005 Redistributable Microsoft WinUsb 1.0 MSN MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 Parser and SDK MSXML 6.0 Parser (KB933579) Norton 360 Norton 360 (Symantec Corporation) Norton 360 HTMLHelp Norton Confidential Core NVIDIA Drivers PaltalkScene Photo Story 3 for Windows Popup Blocker (Windows Live Toolbar) PowerDVD 5.5 QuickTime Qwest QuickCare Security Update for 2007 Microsoft Office System (KB951550) Security Update for 2007 Microsoft Office System (KB951944) Security Update for 2007 Microsoft Office System (KB955936) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Excel 2007 (KB955470) Security Update for Microsoft Office OneNote 2007 (KB950130) Security Update for Microsoft Office PowerPoint 2007 (KB951338) Security Update for Microsoft Office Publisher 2007 (KB950114) Security Update for Microsoft Office system 2007 (KB951808) Security Update for Microsoft Office system 2007 (KB954326) Security Update for Microsoft Office Word 2007 (KB950113) Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) Smart Menus (Windows Live Toolbar) Sonic Audio module Sonic DLA Sonic Encoders Sonic MyDVD LE Sonic RecordNow Copy Sonic RecordNow Data Sonic Update Manager Sound Blaster for Media Center Sound Blaster X-Fi SPBBC 32bit Symantec Real Time Storage Protection Component Symantec Technical Support Controls Symantec Technical Support Web Controls SymNet Try Corel Snapfire muvee autoProducer add on Tweak UI Update for Microsoft Office Excel 2007 Help (KB957242) Update for Microsoft Office OneNote 2007 Help (KB957245) Update for Microsoft Office Outlook 2007 (KB952142) Update for Microsoft Office Outlook 2007 Help (KB957246) Update for Microsoft Office PowerPoint 2007 Help (KB957247) Update for Microsoft Office Publisher 2007 Help (KB957249) Update for Microsoft Office Word 2007 Help (KB957252) Update for Microsoft Script Editor Help (KB957253) Update for Office 2007 (KB946691) Update for Outlook 2007 Junk Email Filter (kb957829) Update for Windows Media Player 10 (KB913800) Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Update Rollup 2 for Windows XP Media Center Edition 2005 VX-7 Commander v1.3.4 WD Media Center Driver WebCyberCoach 3.2 Dell WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage Validation Tool (KB892130) Windows Imaging Component Windows Installer Clean Up Windows Internet Explorer 7 Windows Live Favorites for Windows Live Toolbar Windows Live installer Windows Live Messenger Windows Live OneCare safety scanner Windows Live Sign-in Assistant Windows Live Toolbar Windows Live Toolbar Extension (Windows Live Toolbar) Windows Live Toolbar Feed Detector (Windows Live Toolbar) Windows Live Writer Windows Media Format 11 runtime Windows Media Player 11 Windows Presentation Foundation Windows Rights Management Client Backwards Compatibility SP2 Windows Rights Management Client with Service Pack 2 Windows XP Media Center Edition 2005 KB914548 Windows XP Media Center Edition 2005 KB925766 Windows XP Service Pack 3 XML Paper Specification Shared Components Pack 1.0 Yahoo! Messenger Zune Zune Language Pack (ES) Zune Language Pack (FR)
==== Event Viewer Messages ===================
11/13/2008 11:19:29 AM, error: Service Control Manager [7023] - The Uninterruptible Power Supply service terminated with the following error: %%2481 11/13/2008 11:19:06 AM, error: UPS [2481] - The UPS service is not configured correctly. 11/12/2008 7:18:59 PM, error: Print [6161] - The document https://ibdswebp12-ext.pb.com/images/USPS/HTMLFolders/HTML5/f5e owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 549429. Number of bytes printed: 549429. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 0 (0x0). 11/14/2008 12:01:27 PM, error: Print [6161] - The document Test Page owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 665123. Number of bytes printed: 665123. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 6 (0x6).
I don't see any malware yet. Your Java is vulnerable with those old versions in there, so we might as well clean that up. We'll also see if MBAM finds anything hiding. First we'll take care of Java.
Please follow these steps to remove older version Java components and update.
Scroll down to where it says The Java SE Runtime Environment (JRE) allows end-users to run Java applications. .
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
NOTE: As always during installations, beware of any pre-checked option to install the Microsoft's Live Search Toolbar.
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each of the Java versions. Close Add/Remove.
* In Windows Explorer, navigate to C:\Program Files\Java =this folder. Delete any subfolders. * Do NOT delete C:\Program Files\ JavaVM =this folder, if found!
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u10-windows-i586-p.exe to install the newest version.
Please download Malwarebytes' Anti-Malware from Here or from Here
Make sure you are connected to the Internet.
Double-click on Download_mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
If you encounter any problems while downloading the updates, manually download them fromhereand just double-click on mbam-rules.exe to install.
On the Scanner tab:
Make sure the "Perform Quick Scan" option is selected.
Then click on the Scan button.
The next screen will ask you to select the drives to scan. Leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. :(see Note below)
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.
Please include a fresh HijackThis log as well. Notes:
**If you encounter this message:"c:\program files\malwarebytes' Anti-Malware\mbamext.dll Unable to register the dll/ocx: RegSvr32 failed with exit code 0x5" Click on ignore mbamext.dll
**If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
DDS (Version 1.0) - NTFSx86 Run by jmmilliron at 10:33:20.92 on Wed 11/19/2008 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2045.1444 [GMT -8:00]
Memory Processes Infected: (No malicious items detected)
Memory Modules Infected: (No malicious items detected)
Registry Keys Infected: HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected: (No malicious items detected)
Registry Data Items Infected: (No malicious items detected)
Folders Infected: (No malicious items detected)
Files Infected: (No malicious items detected)
----------
DDS (Version 1.0) - NTFSx86 Run by jmmilliron at 13:23:11.18 on Wed 11/19/2008 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2045.1430 [GMT -8:00]
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Version 1.0)
Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 11/6/2006 1:19:49 PM System Uptime: 11/19/2008 1:01:53 PM (0 hours ago)
Motherboard: Dell Inc. | | 0GC375 Processor: Intel(R) Pentium(R) D CPU 3.20GHz |
Microprocessor | 3192/800mhz BIOS: Phoenix ROM BIOS PLUS Version 1.10 A02 | DELL - 7 | A02 |
9/14/2005 5:00:00 PM
==== Disk Partitions =========================
A: is Removable C: is FIXED (NTFS) - 298 GiB total, 270.7 GiB free. D: is CDROM () E: is CDROM () F: is Removable G: is Removable H: is Removable I: is Removable J: is FIXED (NTFS) - 298 GiB total, 273.134 GiB free.
2007 Microsoft Office Suite Service Pack 1 (SP1) Acrobat.com Ad-Aware Adobe AIR Adobe Flash Player ActiveX Adobe Reader 9 Adobe Shockwave Player AppCore Apple Software Update Auto Care Backup ccCommon Channel Master Corel Paint Shop Pro Photo XI Corel Snapfire DVD Maker Corel Snapfire Plus Creative Audio Console Creative MediaSource 5 Dell Resource CD Dell Support Center (Support Software) DesignPro 5.0 Limited Edition Easy-Link internet launch pad Evrsoft First Page 2006 Form Fill (Windows Live Toolbar) GearDrvs getPlus(R) for Adobe Highlight Viewer (Windows Live Toolbar) HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.0 (KB932471) Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB915800-v4) Hotfix for Windows XP (KB932716-v2) Hotfix for Windows XP (KB952287) Intel(R) 537EP V9x DF PCI Modem Java(TM) 6 Update 10 LiveUpdate (Symantec Corporation) Malwarebytes' Anti-Malware Map Button (Windows Live Toolbar) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 1 Microsoft Application Error Reporting Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Digital Image Library 9 - Blocker Microsoft Digital Image Standard 2006 Editor Microsoft Digital Image Standard 2006 Library Microsoft Digital Image Standard 2006 Update Microsoft IntelliPoint 6.1 Microsoft IntelliType Pro 6.1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office
programs Microsoft Silverlight Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.7 Microsoft Visual C++ 2005 Redistributable Microsoft WinUsb 1.0 MSN MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 Parser and SDK MSXML 6.0 Parser (KB933579) Norton 360 Norton 360 (Symantec Corporation) Norton 360 HTMLHelp Norton Confidential Core NVIDIA Drivers PaltalkScene Photo Story 3 for Windows Popup Blocker (Windows Live Toolbar) PowerDVD 5.5 QuickTime Qwest QuickCare Security Update for 2007 Microsoft Office System (KB951550) Security Update for 2007 Microsoft Office System (KB951944) Security Update for 2007 Microsoft Office System (KB955936) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Excel 2007 (KB955470) Security Update for Microsoft Office OneNote 2007 (KB950130) Security Update for Microsoft Office PowerPoint 2007 (KB951338) Security Update for Microsoft Office Publisher 2007 (KB950114) Security Update for Microsoft Office system 2007 (KB951808) Security Update for Microsoft Office system 2007 (KB954326) Security Update for Microsoft Office Word 2007 (KB950113) Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) Smart Menus (Windows Live Toolbar) Sonic Audio module Sonic DLA Sonic Encoders Sonic MyDVD LE Sonic RecordNow Copy Sonic RecordNow Data Sonic Update Manager Sound Blaster for Media Center Sound Blaster X-Fi SPBBC 32bit Symantec Real Time Storage Protection Component Symantec Technical Support Controls Symantec Technical Support Web Controls SymNet Try Corel Snapfire muvee autoProducer add on Tweak UI Update for Microsoft Office Excel 2007 Help (KB957242) Update for Microsoft Office OneNote 2007 Help (KB957245) Update for Microsoft Office Outlook 2007 (KB952142) Update for Microsoft Office Outlook 2007 Help (KB957246) Update for Microsoft Office PowerPoint 2007 Help (KB957247) Update for Microsoft Office Publisher 2007 Help (KB957249) Update for Microsoft Office Word 2007 Help (KB957252) Update for Microsoft Script Editor Help (KB957253) Update for Office 2007 (KB946691) Update for Outlook 2007 Junk Email Filter (kb957829) Update for Windows Media Player 10 (KB913800) Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Update Rollup 2 for Windows XP Media Center Edition 2005 VX-7 Commander v1.3.4 WD Media Center Driver WebCyberCoach 3.2 Dell WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage Validation Tool (KB892130) Windows Imaging Component Windows Installer Clean Up Windows Internet Explorer 7 Windows Live Favorites for Windows Live Toolbar Windows Live installer Windows Live Messenger Windows Live OneCare safety scanner Windows Live Sign-in Assistant Windows Live Toolbar Windows Live Toolbar Extension (Windows Live Toolbar) Windows Live Toolbar Feed Detector (Windows Live Toolbar) Windows Live Writer Windows Media Format 11 runtime Windows Media Player 11 Windows Presentation Foundation Windows Rights Management Client Backwards Compatibility SP2 Windows Rights Management Client with Service Pack 2 Windows XP Media Center Edition 2005 KB914548 Windows XP Media Center Edition 2005 KB925766 Windows XP Service Pack 3 XML Paper Specification Shared Components Pack 1.0 Yahoo! Messenger Zune Zune Language Pack (ES) Zune Language Pack (FR)
==== Event Viewer Messages ===================
11/13/2008 11:38:36 AM, error: Service Control Manager [7023] -
The Uninterruptible Power Supply service terminated with the
following error: %%2481 11/13/2008 11:38:19 AM, error: UPS [2481] - The UPS service is not
Just some remnants in the registry, but nothing that would cause your printer problem. Let's try an online scan with rootkit detection. If that does not show anything, I'll send you back to the printers forum.
Follow the directions on the F-Secure page for proper Installation.
* You may receive an alert on the address bar at this point to install the ActiveX control. * Click on that alert and then click "Install ActiveX component". * Read the license agreement and click "Accept". * Click "Custom Scan" and be sure the following are checked:
Scan whole System
Scan all files
Scan whole system for rootkits
Scan whole system for spyware
Scan inside archives
Use advanced heuristics
* When the scan completes, click the "I want to decide item by item" button. * For each item found, Select "Disinfect" and click "Next". * When done, click the "Show Report" button, then copy and paste the entire report into your next reply.
I d/l the scanner, but when I try to run it I keep getting an error:
An error has occured! Please close the scanner and your browser, then try again. (Id:12)
I went to the FAQ for F-Secure and saw it only works with IE (I was using MSN) so I closed it and opened IE7, checked privacy level (Medium), cleared all history, cookies, etc. closed and reopened. Tried to initiate scan again, but got same error. Right clicked IE icon and told it to 'run as' my user name (I have admin rights) then tried again - same error. Right clicked IE icon again and noticed an option that had a check in the box:
'Protect my computer and data from unauthorized program activity.'
I unchecked the box and tried again to run the scanner - same error.
Any idea what I may be doing wrong that is not allowing the scanner to run?
Approve the install of the required ActiveX Control, then follow on-screen instructions.
Disable the protection of your resident anti-virus program after installing theactive X control that Eset has installed and again when you actually start scanning.
Enable (check) the Remove found threats option, and run the scan.
After the scan completes, the Details tab in the Results window will display what was found and removed. A record of these results will be found here: C:\program files\esetonlinescanner\log.txt.
Please include a copy of that log in your next reply along with a fresh HijackThis log.
This online scan may take quite a bit of time to complete so please be patient.
If necessary, allow the scan to run overnight. Please do not use the machine to do anything else (e.g. browse; check email; chat) until the scan completes.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Version 1.0)
Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 11/6/2006 1:19:49 PM System Uptime: 11/19/2008 2:02:56 PM (5 hours ago)
Motherboard: Dell Inc. | | 0GC375 Processor: Intel(R) Pentium(R) D CPU 3.20GHz | Microprocessor | 3192/800mhz BIOS: Phoenix ROM BIOS PLUS Version 1.10 A02 | DELL - 7 | A02 | 9/14/2005 5:00:00 PM
==== Disk Partitions =========================
A: is Removable C: is FIXED (NTFS) - 298 GiB total, 270.652 GiB free. D: is CDROM () E: is CDROM () F: is Removable G: is Removable H: is Removable I: is Removable J: is FIXED (NTFS) - 298 GiB total, 273.135 GiB free.
==== Disabled Device Manager Items =============
Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A} Description: Zune Device ID: USB\VID_045E&PID_0710\800282C5-E08D-A06D-82D8-26EEADCC0CE8 Manufacturer: Microsoft Name: Zune PNP Device ID: USB\VID_045E&PID_0710\800282C5-E08D-A06D-82D8-26EEADCC0CE8 Service: WUDFRd
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318} Description: 1394 Net Adapter Device ID: V1394\NIC1394\ACB73E2280140000 Manufacturer: Microsoft Name: 1394 Net Adapter PNP Device ID: V1394\NIC1394\ACB73E2280140000 Service: NIC1394
==== System Restore Points ===================
RP832: 10/18/2008 6:12:07 PM - System Checkpoint RP833: 10/18/2008 6:13:24 PM - 101808_18:13 RP834: 10/19/2008 7:19:12 AM - Installed Symantec Technical Support Advanced Chat Controls RP835: 10/19/2008 6:56:08 PM - Norton 360 Registry Clean RP836: 10/21/2008 6:43:43 AM - Software Distribution Service 3.0 RP837: 10/21/2008 4:04:19 PM - Norton 360 Registry Clean RP838: 10/21/2008 4:26:19 PM - Installed Microsoft Office Enterprise 2007 RP839: 10/21/2008 4:34:24 PM - Printer Driver Send To Microsoft OneNote Driver Installed RP840: 10/21/2008 5:21:28 PM - Printer Driver Send To Microsoft OneNote Driver Installed RP841: 10/21/2008 5:44:39 PM - Printer Driver Send To Microsoft OneNote Driver Installed RP842: 10/21/2008 5:53:38 PM - Installed Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs RP843: 10/22/2008 10:34:30 AM - Removed Adobe Reader 8.1.2 RP844: 10/22/2008 10:35:51 AM - Installed Adobe Reader 9. RP845: 10/22/2008 10:44:36 AM - Software Distribution Service 3.0 RP846: 10/23/2008 12:35:10 PM - System Checkpoint RP847: 10/24/2008 6:49:21 AM - Software Distribution Service 3.0 RP848: 10/25/2008 1:22:35 PM - System Checkpoint RP849: 10/26/2008 2:18:25 PM - System Checkpoint RP850: 10/28/2008 7:31:17 AM - System Checkpoint RP851: 10/29/2008 7:35:04 AM - System Checkpoint RP852: 10/30/2008 12:21:47 PM - System Checkpoint RP853: 11/1/2008 1:16:22 PM - System Checkpoint RP854: 11/2/2008 12:43:15 PM - System Checkpoint RP855: 11/3/2008 7:02:01 PM - System Checkpoint RP856: 11/4/2008 7:13:46 PM - System Checkpoint RP857: 11/6/2008 4:08:59 PM - Unsigned driver install RP858: 11/6/2008 4:31:33 PM - Unsigned driver install RP859: 11/8/2008 3:02:18 PM - System Checkpoint RP860: 11/9/2008 3:34:13 PM - System Checkpoint RP861: 11/10/2008 7:30:04 PM - System Checkpoint RP862: 11/12/2008 6:58:00 AM - Software Distribution Service 3.0 RP863: 11/13/2008 8:28:38 AM - Software Distribution Service 3.0 RP864: 11/13/2008 10:42:45 AM - Norton 360 Registry Clean RP865: 11/14/2008 10:11:34 AM - Installed Ad-Aware RP866: 11/14/2008 11:35:06 AM - Norton 360 Registry Clean RP867: 11/14/2008 11:56:42 AM - Installed Print to Fax RP868: 11/15/2008 12:23:49 PM - System Checkpoint RP869: 11/15/2008 5:47:08 PM - Removed Jasc Paint Shop Photo Album RP870: 11/15/2008 5:48:12 PM - Removed Jasc Paint Shop Pro 8 Dell Edition RP871: 11/15/2008 5:52:25 PM - Norton 360 Registry Clean RP872: 11/17/2008 7:21:19 AM - System Checkpoint RP873: 11/18/2008 12:21:18 PM - System Checkpoint RP874: 11/18/2008 12:36:15 PM - Removed Print to Fax RP875: 11/19/2008 12:55:09 PM - Removed J2SE Runtime Environment 5.0 Update 10 RP876: 11/19/2008 12:55:43 PM - Removed Java(TM) 6 Update 3 RP877: 11/19/2008 12:56:19 PM - Removed Java(TM) 6 Update 5 RP878: 11/19/2008 12:56:59 PM - Removed Java(TM) 6 Update 7 RP879: 11/19/2008 12:57:31 PM - Removed Java(TM) SE Runtime Environment 6 Update 1 RP880: 11/19/2008 1:08:41 PM - Installed Java(TM) 6 Update 10
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1) Acrobat.com Ad-Aware Adobe AIR Adobe Flash Player ActiveX Adobe Reader 9 Adobe Shockwave Player AppCore Apple Software Update Auto Care Backup ccCommon Channel Master Corel Paint Shop Pro Photo XI Corel Snapfire DVD Maker Corel Snapfire Plus Creative Audio Console Creative MediaSource 5 Dell Resource CD Dell Support Center (Support Software) DesignPro 5.0 Limited Edition Easy-Link internet launch pad ESET Online Scanner Evrsoft First Page 2006 Form Fill (Windows Live Toolbar) GearDrvs getPlus(R) for Adobe Highlight Viewer (Windows Live Toolbar) HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.0 (KB932471) Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB915800-v4) Hotfix for Windows XP (KB932716-v2) Hotfix for Windows XP (KB952287) Intel(R) 537EP V9x DF PCI Modem Java(TM) 6 Update 10 LiveUpdate (Symantec Corporation) Malwarebytes' Anti-Malware Map Button (Windows Live Toolbar) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 1 Microsoft Application Error Reporting Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Digital Image Library 9 - Blocker Microsoft Digital Image Standard 2006 Editor Microsoft Digital Image Standard 2006 Library Microsoft Digital Image Standard 2006 Update Microsoft IntelliPoint 6.1 Microsoft IntelliType Pro 6.1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs Microsoft Silverlight Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.7 Microsoft Visual C++ 2005 Redistributable Microsoft WinUsb 1.0 MSN MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 Parser and SDK MSXML 6.0 Parser (KB933579) Norton 360 Norton 360 (Symantec Corporation) Norton 360 HTMLHelp Norton Confidential Core NVIDIA Drivers PaltalkScene Photo Story 3 for Windows Popup Blocker (Windows Live Toolbar) PowerDVD 5.5 QuickTime Qwest QuickCare Security Update for 2007 Microsoft Office System (KB951550) Security Update for 2007 Microsoft Office System (KB951944) Security Update for 2007 Microsoft Office System (KB955936) Security Update for CAPICOM (KB931906) Security Update for Microsoft Office Excel 2007 (KB955470) Security Update for Microsoft Office OneNote 2007 (KB950130) Security Update for Microsoft Office PowerPoint 2007 (KB951338) Security Update for Microsoft Office Publisher 2007 (KB950114) Security Update for Microsoft Office system 2007 (KB951808) Security Update for Microsoft Office system 2007 (KB954326) Security Update for Microsoft Office Word 2007 (KB950113) Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB929969) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954459) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) Smart Menus (Windows Live Toolbar) Sonic Audio module Sonic DLA Sonic Encoders Sonic MyDVD LE Sonic RecordNow Copy Sonic RecordNow Data Sonic Update Manager Sound Blaster for Media Center Sound Blaster X-Fi SPBBC 32bit Symantec Real Time Storage Protection Component Symantec Technical Support Controls Symantec Technical Support Web Controls SymNet Try Corel Snapfire muvee autoProducer add on Tweak UI Update for Microsoft Office Excel 2007 Help (KB957242) Update for Microsoft Office OneNote 2007 Help (KB957245) Update for Microsoft Office Outlook 2007 (KB952142) Update for Microsoft Office Outlook 2007 Help (KB957246) Update for Microsoft Office PowerPoint 2007 Help (KB957247) Update for Microsoft Office Publisher 2007 Help (KB957249) Update for Microsoft Office Word 2007 Help (KB957252) Update for Microsoft Script Editor Help (KB957253) Update for Office 2007 (KB946691) Update for Outlook 2007 Junk Email Filter (kb957829) Update for Windows Media Player 10 (KB913800) Update for Windows XP (KB951072-v2) Update for Windows XP (KB951978) Update Rollup 2 for Windows XP Media Center Edition 2005 VX-7 Commander v1.3.4 WD Media Center Driver WebCyberCoach 3.2 Dell WebFldrs XP Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage Validation Tool (KB892130) Windows Imaging Component Windows Installer Clean Up Windows Internet Explorer 7 Windows Live Favorites for Windows Live Toolbar Windows Live installer Windows Live Messenger Windows Live OneCare safety scanner Windows Live Sign-in Assistant Windows Live Toolbar Windows Live Toolbar Extension (Windows Live Toolbar) Windows Live Toolbar Feed Detector (Windows Live Toolbar) Windows Live Writer Windows Media Format 11 runtime Windows Media Player 11 Windows Presentation Foundation Windows Rights Management Client Backwards Compatibility SP2 Windows Rights Management Client with Service Pack 2 Windows XP Media Center Edition 2005 KB914548 Windows XP Media Center Edition 2005 KB925766 Windows XP Service Pack 3 XML Paper Specification Shared Components Pack 1.0 Yahoo! Messenger Zune Zune Language Pack (ES) Zune Language Pack (FR)
==== Event Viewer Messages ===================
11/14/2008 6:37:57 AM, error: Service Control Manager [7023] - The Uninterruptible Power Supply service terminated with the following error: %%2481 11/14/2008 6:37:35 AM, error: UPS [2481] - The UPS service is not configured correctly. 11/12/2008 7:18:59 PM, error: Print [6161] - The document https://ibdswebp12-ext.pb.com/images/USPS/HTMLFolders/HTML5/f5e owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 549429. Number of bytes printed: 549429. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 0 (0x0). 11/14/2008 12:01:27 PM, error: Print [6161] - The document Test Page owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 665123. Number of bytes printed: 665123. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 6 (0x6).
==== End Of File =========================== ----------- DDS (Version 1.0) - NTFSx86 Run by jmmilliron at 19:36:10.03 on Wed 11/19/2008 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2045.1324 [GMT -8:00]
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 18th, 2008 19:00
Welcome. Thank you for using Dell Community Forums.
I am reviewing your log. In the meantime, you can help me by addressing the following:
* Have you have posted this issue on another forum? If so, please provide a link to the topic.
* If you are using any cracked software, please remove it. Definition of cracked software: http://en.wikipedia.org/wiki/Software_cracking
* If you are using any P2P (file sharing) programs, please remove them before we clean your computer. The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state. There is a list here: http://en.community.dell.com/forums/p/19241146/19367569.aspx#19367569
* If this computer belongs to someone else, do you have authority to apply the fixes we will use?
* Have you already fixed entries using HijackThis? If so, please restore all the backups and then post another log.
* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures. Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
* During the course of our cleanup please do not do any online work or surfing until we have verified that your system is clean.
* We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case. Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.
* If your replies do not fit in one post while we are handling your issue, please reply to yourself until all text is submitted. It may take several posts.
I look forward to your reply so we can begin cleaning.
Instructions posted for this user are customized for this user only. The tools used may cause damage if used on a computer with different infections. If you think you have similar problems, please post a HijackThis log at the top of this board to start a new forum topic.
Dude Its A Dell
17 Posts
0
November 19th, 2008 08:00
* Have you have posted this issue on another forum? If so, please provide a link to the topic.
I have posted in the following thread:
http://en.community.dell.com/forums/p/19206697/19370883.aspx#19370883
My posts are number 9, 11, 13 & 15 on page 1
* If you are using any cracked software, please remove it.
No cracked software is installed on my system.
* If you are using any P2P (file sharing) programs, please remove them before we clean your computer.
No P2P software is installed on my system.
* If this computer belongs to someone else, do you have authority to apply the fixes we will use?
I am the owner of this computer.
* Have you already fixed entries using HijackThis?
No, this is the initial log file from Highjack This ; No actions have been taken to resolve any issues.
* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures. Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
Does this include not running any virus detection software? My system is scanned multiple times daily. If required, I will disable the scans until the problem is resolved.
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 10:00
Please download DDS and save it to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:
DDS.txt
Attach the following report to your post by clicking the Options tab at the top of your post. Add/Update. Click the BROWSE botton to browse to where you saved the file Attach.txt, and click SAVE
To answer your question, you can run your routine (scheduled) scans, however do not remove anything found. Instead, please let me know what that is, in case it is one one of our tools. If I need you to disable your AV, I will let you know when.
Dude Its A Dell
17 Posts
0
November 19th, 2008 10:00
I followed your instructions, but when I click 'Save' to attach the file 'Attach.txt' from my desktop to my post I get the following error:
Only files with the following extensions are allowed: gif, jpg, jpeg, png, bmp, txt, avi, wmv, asf, flv, dat, rm, rmvb, mov, mpeg, avi, wmv, wma, mp3, ra . Please select a valid file.
Dude Its A Dell
17 Posts
0
November 19th, 2008 11:00
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Version 1.0)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 11/6/2006 1:19:49 PM
System Uptime: 11/19/2008 7:35:58 AM (3 hours ago)
Motherboard: Dell Inc. | | 0GC375
Processor: Intel(R) Pentium(R) D CPU 3.20GHz | Microprocessor | 3192/800mhz
BIOS: Phoenix ROM BIOS PLUS Version 1.10 A02 | DELL - 7 | A02 | 9/14/2005 5:00:00 PM
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 270.656 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is FIXED (NTFS) - 298 GiB total, 273.134 GiB free.
==== Disabled Device Manager Items =============
Class GUID: {4D36E96D-E325-11CE-BFC1-08002BE10318}
Description: Intel(R) 537EP V9x DF PCI Modem
Device ID: PCI\VEN_8086&DEV_1080&SUBSYS_10001028&REV_04\4&26EC2DE1&0&2090
Manufacturer: Intel Corporation
Name: Intel(R) 537EP V9x DF PCI Modem
PNP Device ID: PCI\VEN_8086&DEV_1080&SUBSYS_10001028&REV_04\4&26EC2DE1&0&2090
Service: Modem
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\ACB73E2280140000
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\ACB73E2280140000
Service: NIC1394
==== System Restore Points ===================
RP832: 10/18/2008 6:12:07 PM - System Checkpoint
RP833: 10/18/2008 6:13:24 PM - 101808_18:13
RP834: 10/19/2008 7:19:12 AM - Installed Symantec Technical Support Advanced Chat Controls
RP835: 10/19/2008 6:56:08 PM - Norton 360 Registry Clean
RP836: 10/21/2008 6:43:43 AM - Software Distribution Service 3.0
RP837: 10/21/2008 4:04:19 PM - Norton 360 Registry Clean
RP838: 10/21/2008 4:26:19 PM - Installed Microsoft Office Enterprise 2007
RP839: 10/21/2008 4:34:24 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP840: 10/21/2008 5:21:28 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP841: 10/21/2008 5:44:39 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP842: 10/21/2008 5:53:38 PM - Installed Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
RP843: 10/22/2008 10:34:30 AM - Removed Adobe Reader 8.1.2
RP844: 10/22/2008 10:35:51 AM - Installed Adobe Reader 9.
RP845: 10/22/2008 10:44:36 AM - Software Distribution Service 3.0
RP846: 10/23/2008 12:35:10 PM - System Checkpoint
RP847: 10/24/2008 6:49:21 AM - Software Distribution Service 3.0
RP848: 10/25/2008 1:22:35 PM - System Checkpoint
RP849: 10/26/2008 2:18:25 PM - System Checkpoint
RP850: 10/28/2008 7:31:17 AM - System Checkpoint
RP851: 10/29/2008 7:35:04 AM - System Checkpoint
RP852: 10/30/2008 12:21:47 PM - System Checkpoint
RP853: 11/1/2008 1:16:22 PM - System Checkpoint
RP854: 11/2/2008 12:43:15 PM - System Checkpoint
RP855: 11/3/2008 7:02:01 PM - System Checkpoint
RP856: 11/4/2008 7:13:46 PM - System Checkpoint
RP857: 11/6/2008 4:08:59 PM - Unsigned driver install
RP858: 11/6/2008 4:31:33 PM - Unsigned driver install
RP859: 11/8/2008 3:02:18 PM - System Checkpoint
RP860: 11/9/2008 3:34:13 PM - System Checkpoint
RP861: 11/10/2008 7:30:04 PM - System Checkpoint
RP862: 11/12/2008 6:58:00 AM - Software Distribution Service 3.0
RP863: 11/13/2008 8:28:38 AM - Software Distribution Service 3.0
RP864: 11/13/2008 10:42:45 AM - Norton 360 Registry Clean
RP865: 11/14/2008 10:11:34 AM - Installed Ad-Aware
RP866: 11/14/2008 11:35:06 AM - Norton 360 Registry Clean
RP867: 11/14/2008 11:56:42 AM - Installed Print to Fax
RP868: 11/15/2008 12:23:49 PM - System Checkpoint
RP869: 11/15/2008 5:47:08 PM - Removed Jasc Paint Shop Photo Album
RP870: 11/15/2008 5:48:12 PM - Removed Jasc Paint Shop Pro 8 Dell Edition
RP871: 11/15/2008 5:52:25 PM - Norton 360 Registry Clean
RP872: 11/17/2008 7:21:19 AM - System Checkpoint
RP873: 11/18/2008 12:21:18 PM - System Checkpoint
RP874: 11/18/2008 12:36:15 PM - Removed Print to Fax
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acrobat.com
Ad-Aware
Adobe AIR
Adobe Flash Player ActiveX
Adobe Reader 9
Adobe Shockwave Player
AppCore
Apple Software Update
Auto Care
Backup
ccCommon
Channel Master
Corel Paint Shop Pro Photo XI
Corel Snapfire DVD Maker
Corel Snapfire Plus
Creative Audio Console
Creative MediaSource 5
Dell Resource CD
Dell Support Center (Support Software)
DesignPro 5.0 Limited Edition
Easy-Link internet launch pad
Evrsoft First Page 2006
Form Fill (Windows Live Toolbar)
GearDrvs
getPlus(R) for Adobe
Highlight Viewer (Windows Live Toolbar)
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB932716-v2)
Hotfix for Windows XP (KB952287)
Intel(R) 537EP V9x DF PCI Modem
J2SE Runtime Environment 5.0 Update 10
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
Java(TM) SE Runtime Environment 6 Update 1
LiveUpdate (Symantec Corporation)
Map Button (Windows Live Toolbar)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Standard 2006 Editor
Microsoft Digital Image Standard 2006 Library
Microsoft Digital Image Standard 2006 Update
Microsoft IntelliPoint 6.1
Microsoft IntelliType Pro 6.1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.7
Microsoft Visual C++ 2005 Redistributable
Microsoft WinUsb 1.0
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser (KB933579)
Norton 360
Norton 360 (Symantec Corporation)
Norton 360 HTMLHelp
Norton Confidential Core
NVIDIA Drivers
PaltalkScene
Photo Story 3 for Windows
Popup Blocker (Windows Live Toolbar)
PowerDVD 5.5
QuickTime
Qwest QuickCare
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB955936)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB955470)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB913433)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Smart Menus (Windows Live Toolbar)
Sonic Audio module
Sonic DLA
Sonic Encoders
Sonic MyDVD LE
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sound Blaster for Media Center
Sound Blaster X-Fi
SPBBC 32bit
Symantec Real Time Storage Protection Component
Symantec Technical Support Controls
Symantec Technical Support Web Controls
SymNet
Try Corel Snapfire muvee autoProducer add on
Tweak UI
Update for Microsoft Office Excel 2007 Help (KB957242)
Update for Microsoft Office OneNote 2007 Help (KB957245)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Microsoft Office Outlook 2007 Help (KB957246)
Update for Microsoft Office PowerPoint 2007 Help (KB957247)
Update for Microsoft Office Publisher 2007 Help (KB957249)
Update for Microsoft Office Word 2007 Help (KB957252)
Update for Microsoft Script Editor Help (KB957253)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb957829)
Update for Windows Media Player 10 (KB913800)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update Rollup 2 for Windows XP Media Center Edition 2005
VX-7 Commander v1.3.4
WD Media Center Driver
WebCyberCoach 3.2 Dell
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
Windows Rights Management Client Backwards Compatibility SP2
Windows Rights Management Client with Service Pack 2
Windows XP Media Center Edition 2005 KB914548
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Zune
Zune Language Pack (ES)
Zune Language Pack (FR)
==== Event Viewer Messages ===================
11/13/2008 11:19:29 AM, error: Service Control Manager [7023] - The Uninterruptible Power Supply service terminated with the following error: %%2481
11/13/2008 11:19:06 AM, error: UPS [2481] - The UPS service is not configured correctly.
11/12/2008 7:18:59 PM, error: Print [6161] - The document https://ibdswebp12-ext.pb.com/images/USPS/HTMLFolders/HTML5/f5e owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 549429. Number of bytes printed: 549429. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 0 (0x0).
11/14/2008 12:01:27 PM, error: Print [6161] - The document Test Page owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 665123. Number of bytes printed: 665123. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 6 (0x6).
==== End Of File ===========================
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 11:00
Sorry about that. The forum software is new. It should be able to save a .txt file.
I guess the only choice is to post the text from that log in the thread.
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 11:00
That is the log which was to be attached. Thanks.
Can you please post the first report of the two. Near the top of the report it will show:
=============== Created Last 30 ================
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 12:00
That's it. Thanks! I'll review the logs and post as soon as I have the next steps.
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 12:00
I don't see any malware yet. Your Java is vulnerable with those old versions in there, so we might as well clean that up. We'll also see if MBAM finds anything hiding. First we'll take care of Java.
Please follow these steps to remove older version Java components and update.
Close Add/Remove.
* In Windows Explorer, navigate to C:\Program Files\Java =this folder. Delete any subfolders.
* Do NOT delete C:\Program Files\ JavaVM =this folder, if found!
Official JAVA Installation Instructions if needed.
Please download Malwarebytes' Anti-Malware from Here or from Here
Please include a fresh HijackThis log as well.
Notes:
**If you encounter this message:"c:\program files\malwarebytes' Anti-Malware\mbamext.dll Unable to register the dll/ocx: RegSvr32 failed with exit code 0x5" Click on ignore mbamext.dll
**If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
Dude Its A Dell
17 Posts
0
November 19th, 2008 12:00
DDS (Version 1.0) - NTFSx86
Run by jmmilliron at 10:33:20.92 on Wed 11/19/2008
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2045.1444 [GMT -8:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\WDC\SetIcon.exe
C:\Program Files\Easy-Link\Easy-Link internet launch pad.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\cidaemon.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\MSN\MSNCoreFiles\msn.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\jmmilliron\Desktop\dds.scr
============== Psuedo HJT Report ===============
uInternet Connection Wizard,ShellNext = iexplore
BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\common files\symantec shared\coshared\browser\2.6\coIEPlg.dll
BHO: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll
BHO: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\common files\symantec shared\coshared\browser\2.6\CoIEPlg.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\common files\symantec shared\coshared\browser\2.6\CoIEPlg.dll
uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [CTDVDDET] "c:\program files\creative\sound blaster x-fi\dvdaudio\CTDVDDET.EXE"
mRun: [VolPanel] "c:\program files\creative\sound blaster x-fi\volume panel\VolPanel.exe" /r
mRun: [AudioDrvEmulator] "c:\program files\creative\shared files\module loader\dllml.exe" -1 audiodrvemulator "c:\program files\creative\shared files\module loader\audio emulator\AudDrvEm.dll"
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTxfiHlp] CTXFIHLP.EXE
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe"
mRun: [SetIcon] \Program Files\WDC\SetIcon.exe
mRun: [eligmini] c:\program files\easy-link\Easy-Link internet launch pad.exe 0
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [nwiz] nwiz.exe /install
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [Zune Launcher] "c:\program files\zune\ZuneLauncher.exe"
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [osCheck] "c:\program files\norton 360\osCheck.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [dlbxmon.exe] "c:\program files\dell photo aio printer 962\dlbxmon.exe"
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office12\EXCEL.EXE/3000
IE: eBay Search - c:\program files\ebay\ebay toolbar2\eBayTb.dll/RCSearch.html
IE: Lookup on Merriam Webster - file://c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\iespell\wikipedia.HTM
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jmmilliron\start menu\programs\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mi1933~1\office12\ONBttnIE.dll
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jmmilliron\start menu\programs\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
============= SERVICES / DRIVERS ===============
R2 LiveUpdate Notice;LiveUpdate Notice;"c:\program files\common files\symantec shared\ccSvcHst.exe" /h ccCommon [2008-2-18 149352]
R2 zumbus;Zune Bus Enumerator Driver;c:\windows\system32\drivers\zumbus.sys [2008-1-11 40832]
R3 Angel;Angel MPEG Device;c:\windows\system32\drivers\Angel.sys [2006-11-6 376320]
R3 ha20x2k;Creative 20X HAL Driver;c:\windows\system32\drivers\ha20x2k.sys [2006-8-17 1160504]
S3 COH_Mon;COH_Mon;\??\c:\windows\system32\drivers\COH_Mon.sys [2008-1-12 23888]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\nos\bin\getPlus_HelperSvc.exe [2008-10-22 33752]
=============== Created Last 30 ================
2008-11-18 11:28
2008-11-14 10:11
2008-11-14 10:11
2008-11-13 08:45
2008-11-12 06:57 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2008-11-12 06:56 1,106,944 -c------ c:\windows\system32\dllcache\msxml3.dll
2008-11-06 16:09 43,136 a----r-- c:\windows\system32\drivers\ser2pl.sys
2008-11-05 09:44
2008-10-24 05:49 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2008-10-21 15:34 32,592 a------- c:\windows\system32\msonpmon.dll
2008-10-21 15:28
2008-10-21 15:27
==================== Find3M ====================
2008-11-19 10:25
2008-11-19 06:37
2008-11-16 17:43 9,492 a--sh--- c:\windows\system32\KGyGaAvL.sys
2008-11-15 17:48
2008-11-14 12:05
2008-11-14 10:10
2008-11-04 06:36
2008-10-22 09:56 116,240 a------- c:\windows\system32\GDIPFONTCACHEV1.DAT
2008-10-21 16:53
2008-10-21 16:51
2008-10-19 17:53
2008-10-19 07:35
2008-10-19 07:34 60,800 a------- c:\windows\system32\S32EVNT1.DLL
2008-10-19 07:34
2008-10-18 17:06
2008-10-18 17:02
2008-10-06 13:45
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-22 13:34
2008-09-15 04:12 1,846,400 a------- c:\windows\system32\win32k.sys
2008-09-12 17:48 245,664 a------- c:\windows\system32\ZuneWlanCfgSvc.exe
2008-09-12 17:46 61,856 a------- c:\windows\system32\ZuneBusEnum.exe
2008-09-12 17:32 73,216 a------- c:\windows\system32\ZuneUsbTransport.dll
2008-09-12 17:32 18,944 a------- c:\windows\system32\ZuneTcp2Udp.dll
2008-09-12 17:32 57,344 a------- c:\windows\system32\ZuneRegUtil.dll
2008-09-12 17:32 12,800 a------- c:\windows\system32\ZunePTDNS.dll
2008-09-12 17:32 310,272 a------- c:\windows\system32\ZuneNetProxy.dll
2008-09-12 17:32 145,920 a------- c:\windows\system32\ZuneMTPZ.dll
2008-09-09 17:14 1,307,648 a------- c:\windows\system32\msxml6.dll
2008-09-04 09:15 1,106,944 a------- c:\windows\system32\msxml3.dll
2008-08-27 15:19 1,302,600 a------- c:\windows\system32\WUDFUpdate_01007.dll
2008-08-27 15:19 581,192 a------- c:\windows\system32\WinUSBCoInstaller.dll
2008-08-25 23:24 826,368 a------- c:\windows\system32\wininet.dll
2008-08-02 07:37
2008-06-07 10:48
2008-05-15 18:45
2008-03-31 17:31
2008-01-18 13:18
2008-01-18 13:18
2008-01-18 12:23
2007-12-30 09:58
2007-12-21 10:36
2007-12-15 17:35
2007-11-16 09:46
2007-10-13 09:29
2007-10-13 09:27
2007-10-13 09:27
2007-06-28 15:34
2007-05-14 09:02
2007-04-15 10:21
2007-02-01 11:48
2007-01-28 17:28
2007-01-28 17:28
2007-01-08 16:40
2007-01-01 17:26
2006-12-25 16:58
2006-12-25 16:09
2006-12-25 16:03
2006-11-20 11:51
2006-11-08 08:26
2007-04-11 14:10 88 ---shr-- c:\windows\system32\6AF5308BF9.sys
2008-05-06 14:35 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008050620080507\index.dat
============= FINISH: 10:33:37.92 ===============
Dude Its A Dell
17 Posts
0
November 19th, 2008 13:00
Malwarebytes' Anti-Malware 1.30
Database version: 1306
Windows 5.1.2600 Service Pack 3
11/19/2008 1:21:53 PM
mbam-log-2008-11-19 (13-21-53).txt
Scan type: Quick Scan
Objects scanned: 69993
Time elapsed: 6 minute(s), 53 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
----------
DDS (Version 1.0) - NTFSx86
Run by jmmilliron at 13:23:11.18 on Wed 11/19/2008
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2045.1430 [GMT -8:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\WDC\SetIcon.exe
C:\Program Files\Easy-Link\Easy-Link internet launch pad.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\MSN\MSNCoreFiles\msn.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\jmmilliron\Desktop\dds.scr
============== Psuedo HJT Report ===============
uInternet Connection Wizard,ShellNext = iexplore
BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\common files\symantec shared\coshared\browser\2.6\coIEPlg.dll
BHO: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll
BHO: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll
BHO: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows
live\WindowsLiveLogin.dll
BHO: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\common files\symantec shared\coshared\browser\2.6\CoIEPlg.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\common files\symantec shared\coshared\browser\2.6\CoIEPlg.dll
uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [CTDVDDET] "c:\program files\creative\sound blaster x-fi\dvdaudio\CTDVDDET.EXE"
mRun: [VolPanel] "c:\program files\creative\sound blaster x-fi\volume panel\VolPanel.exe" /r
mRun: [AudioDrvEmulator] "c:\program files\creative\shared files\module loader\dllml.exe" -1 audiodrvemulator "c:\program
files\creative\shared files\module loader\audio emulator\AudDrvEm.dll"
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTxfiHlp] CTXFIHLP.EXE
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [SetIcon] \Program Files\WDC\SetIcon.exe
mRun: [eligmini] c:\program files\easy-link\Easy-Link internet launch pad.exe 0
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [nwiz] nwiz.exe /install
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [Zune Launcher] "c:\program files\zune\ZuneLauncher.exe"
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [osCheck] "c:\program files\norton 360\osCheck.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [dlbxmon.exe] "c:\program files\dell photo aio printer 962\dlbxmon.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office12\EXCEL.EXE/3000
IE: eBay Search - c:\program files\ebay\ebay toolbar2\eBayTb.dll/RCSearch.html
IE: Lookup on Merriam Webster - file://c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\iespell\wikipedia.HTM
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jmmilliron\start menu\programs\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows
live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mi1933~1\office12
\ONBttnIE.dll
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12
\REFIEBAR.DLL
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jmmilliron\start menu\programs\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12
\GrooveSystemServices.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
============= SERVICES / DRIVERS ===============
R2 LiveUpdate Notice;LiveUpdate Notice;"c:\program files\common files\symantec shared\ccSvcHst.exe" /h ccCommon [2008-2-18
149352]
R2 zumbus;Zune Bus Enumerator Driver;c:\windows\system32\drivers\zumbus.sys [2008-1-11 40832]
R3 Angel;Angel MPEG Device;c:\windows\system32\drivers\Angel.sys [2006-11-6 376320]
R3 ha20x2k;Creative 20X HAL Driver;c:\windows\system32\drivers\ha20x2k.sys [2006-8-17 1160504]
S3 COH_Mon;COH_Mon;\??\c:\windows\system32\drivers\COH_Mon.sys [2008-1-12 23888]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\nos\bin\getPlus_HelperSvc.exe [2008-10-22 33752]
=============== Created Last 30 ================
2008-11-19 13:11
2008-11-19 13:11 15,504 a------- c:\windows\system32\drivers\mbam.sys
2008-11-19 13:11 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-19 13:11
2008-11-19 13:11
2008-11-19 13:08 410,976 a------- c:\windows\system32\deploytk.dll
2008-11-19 13:08 73,728 a------- c:\windows\system32\javacpl.cpl
2008-11-18 11:28
2008-11-14 10:11
2008-11-14 10:11
2008-11-13 08:45
2008-11-12 06:57 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2008-11-12 06:56 1,106,944 -c------ c:\windows\system32\dllcache\msxml3.dll
2008-11-06 16:09 43,136 a----r-- c:\windows\system32\drivers\ser2pl.sys
2008-11-05 09:44
2008-10-24 05:49 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2008-10-21 15:34 32,592 a------- c:\windows\system32\msonpmon.dll
2008-10-21 15:28
2008-10-21 15:27
==================== Find3M ====================
2008-11-19 13:12
2008-11-19 13:04
2008-11-16 17:43 9,492 a--sh--- c:\windows\system32\KGyGaAvL.sys
2008-11-15 17:48
2008-11-14 12:05
2008-11-14 10:10
2008-11-04 06:36
2008-10-22 09:56 116,240 a------- c:\windows\system32\GDIPFONTCACHEV1.DAT
2008-10-21 16:53
2008-10-21 16:51
2008-10-19 17:53
2008-10-19 07:35
2008-10-19 07:34 60,800 a------- c:\windows\system32\S32EVNT1.DLL
2008-10-19 07:34
2008-10-18 17:06
2008-10-18 17:02
2008-10-06 13:45
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-22 13:34
2008-09-15 04:12 1,846,400 a------- c:\windows\system32\win32k.sys
2008-09-12 17:48 245,664 a------- c:\windows\system32\ZuneWlanCfgSvc.exe
2008-09-12 17:46 61,856 a------- c:\windows\system32\ZuneBusEnum.exe
2008-09-12 17:32 73,216 a------- c:\windows\system32\ZuneUsbTransport.dll
2008-09-12 17:32 18,944 a------- c:\windows\system32\ZuneTcp2Udp.dll
2008-09-12 17:32 57,344 a------- c:\windows\system32\ZuneRegUtil.dll
2008-09-12 17:32 12,800 a------- c:\windows\system32\ZunePTDNS.dll
2008-09-12 17:32 310,272 a------- c:\windows\system32\ZuneNetProxy.dll
2008-09-12 17:32 145,920 a------- c:\windows\system32\ZuneMTPZ.dll
2008-09-09 17:14 1,307,648 a------- c:\windows\system32\msxml6.dll
2008-09-04 09:15 1,106,944 a------- c:\windows\system32\msxml3.dll
2008-08-27 15:19 1,302,600 a------- c:\windows\system32\WUDFUpdate_01007.dll
2008-08-27 15:19 581,192 a------- c:\windows\system32\WinUSBCoInstaller.dll
2008-08-25 23:24 826,368 a------- c:\windows\system32\wininet.dll
2008-08-02 07:37
2008-06-07 10:48
2008-05-15 18:45
2008-03-31 17:31
2008-01-18 13:18
2008-01-18 13:18
2008-01-18 12:23
2007-12-30 09:58
2007-12-21 10:36
2007-12-15 17:35
2007-11-16 09:46
2007-10-13 09:29
2007-10-13 09:27
2007-10-13 09:27
2007-06-28 15:34
2007-05-14 09:02
2007-04-15 10:21
2007-02-01 11:48
2007-01-28 17:28
2007-01-28 17:28
2007-01-08 16:40
2007-01-01 17:26
2006-12-25 16:58
2006-12-25 16:09
2006-12-25 16:03
2006-11-20 11:51
2006-11-08 08:26
2007-04-11 14:10 88 ---shr-- c:\windows\system32\6AF5308BF9.sys
2008-05-06 14:35 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5
\mshist012008050620080507\index.dat
============= FINISH: 13:23:39.60 ===============
-------
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Version 1.0)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 11/6/2006 1:19:49 PM
System Uptime: 11/19/2008 1:01:53 PM (0 hours ago)
Motherboard: Dell Inc. | | 0GC375
Processor: Intel(R) Pentium(R) D CPU 3.20GHz |
Microprocessor | 3192/800mhz
BIOS: Phoenix ROM BIOS PLUS Version 1.10 A02 | DELL - 7 | A02 |
9/14/2005 5:00:00 PM
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 270.7 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is FIXED (NTFS) - 298 GiB total, 273.134 GiB free.
==== Disabled Device Manager Items =============
Class GUID: {4D36E96D-E325-11CE-BFC1-08002BE10318}
Description: Intel(R) 537EP V9x DF PCI Modem
Device ID: PCI\VEN_8086&DEV_1080&SUBSYS_10001028&REV_04
\4&26EC2DE1&0&2090
Manufacturer: Intel Corporation
Name: Intel(R) 537EP V9x DF PCI Modem
PNP Device ID: PCI\VEN_8086&DEV_1080&SUBSYS_10001028&REV_04
\4&26EC2DE1&0&2090
Service: Modem
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\ACB73E2280140000
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\ACB73E2280140000
Service: NIC1394
==== System Restore Points ===================
RP832: 10/18/2008 6:12:07 PM - System Checkpoint
RP833: 10/18/2008 6:13:24 PM - 101808_18:13
RP834: 10/19/2008 7:19:12 AM - Installed Symantec Technical Support
Advanced Chat Controls
RP835: 10/19/2008 6:56:08 PM - Norton 360 Registry Clean
RP836: 10/21/2008 6:43:43 AM - Software Distribution Service 3.0
RP837: 10/21/2008 4:04:19 PM - Norton 360 Registry Clean
RP838: 10/21/2008 4:26:19 PM - Installed Microsoft Office
Enterprise 2007
RP839: 10/21/2008 4:34:24 PM - Printer Driver Send To Microsoft
OneNote Driver Installed
RP840: 10/21/2008 5:21:28 PM - Printer Driver Send To Microsoft
OneNote Driver Installed
RP841: 10/21/2008 5:44:39 PM - Printer Driver Send To Microsoft
OneNote Driver Installed
RP842: 10/21/2008 5:53:38 PM - Installed Microsoft Save as PDF or
XPS Add-in for 2007 Microsoft Office programs
RP843: 10/22/2008 10:34:30 AM - Removed Adobe Reader 8.1.2
RP844: 10/22/2008 10:35:51 AM - Installed Adobe Reader 9.
RP845: 10/22/2008 10:44:36 AM - Software Distribution Service 3.0
RP846: 10/23/2008 12:35:10 PM - System Checkpoint
RP847: 10/24/2008 6:49:21 AM - Software Distribution Service 3.0
RP848: 10/25/2008 1:22:35 PM - System Checkpoint
RP849: 10/26/2008 2:18:25 PM - System Checkpoint
RP850: 10/28/2008 7:31:17 AM - System Checkpoint
RP851: 10/29/2008 7:35:04 AM - System Checkpoint
RP852: 10/30/2008 12:21:47 PM - System Checkpoint
RP853: 11/1/2008 1:16:22 PM - System Checkpoint
RP854: 11/2/2008 12:43:15 PM - System Checkpoint
RP855: 11/3/2008 7:02:01 PM - System Checkpoint
RP856: 11/4/2008 7:13:46 PM - System Checkpoint
RP857: 11/6/2008 4:08:59 PM - Unsigned driver install
RP858: 11/6/2008 4:31:33 PM - Unsigned driver install
RP859: 11/8/2008 3:02:18 PM - System Checkpoint
RP860: 11/9/2008 3:34:13 PM - System Checkpoint
RP861: 11/10/2008 7:30:04 PM - System Checkpoint
RP862: 11/12/2008 6:58:00 AM - Software Distribution Service 3.0
RP863: 11/13/2008 8:28:38 AM - Software Distribution Service 3.0
RP864: 11/13/2008 10:42:45 AM - Norton 360 Registry Clean
RP865: 11/14/2008 10:11:34 AM - Installed Ad-Aware
RP866: 11/14/2008 11:35:06 AM - Norton 360 Registry Clean
RP867: 11/14/2008 11:56:42 AM - Installed Print to Fax
RP868: 11/15/2008 12:23:49 PM - System Checkpoint
RP869: 11/15/2008 5:47:08 PM - Removed Jasc Paint Shop Photo Album
RP870: 11/15/2008 5:48:12 PM - Removed Jasc Paint Shop Pro 8 Dell
Edition
RP871: 11/15/2008 5:52:25 PM - Norton 360 Registry Clean
RP872: 11/17/2008 7:21:19 AM - System Checkpoint
RP873: 11/18/2008 12:21:18 PM - System Checkpoint
RP874: 11/18/2008 12:36:15 PM - Removed Print to Fax
RP875: 11/19/2008 12:55:09 PM - Removed J2SE Runtime Environment
5.0 Update 10
RP876: 11/19/2008 12:55:43 PM - Removed Java(TM) 6 Update 3
RP877: 11/19/2008 12:56:19 PM - Removed Java(TM) 6 Update 5
RP878: 11/19/2008 12:56:59 PM - Removed Java(TM) 6 Update 7
RP879: 11/19/2008 12:57:31 PM - Removed Java(TM) SE Runtime
Environment 6 Update 1
RP880: 11/19/2008 1:08:41 PM - Installed Java(TM) 6 Update 10
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acrobat.com
Ad-Aware
Adobe AIR
Adobe Flash Player ActiveX
Adobe Reader 9
Adobe Shockwave Player
AppCore
Apple Software Update
Auto Care
Backup
ccCommon
Channel Master
Corel Paint Shop Pro Photo XI
Corel Snapfire DVD Maker
Corel Snapfire Plus
Creative Audio Console
Creative MediaSource 5
Dell Resource CD
Dell Support Center (Support Software)
DesignPro 5.0 Limited Edition
Easy-Link internet launch pad
Evrsoft First Page 2006
Form Fill (Windows Live Toolbar)
GearDrvs
getPlus(R) for Adobe
Highlight Viewer (Windows Live Toolbar)
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB932716-v2)
Hotfix for Windows XP (KB952287)
Intel(R) 537EP V9x DF PCI Modem
Java(TM) 6 Update 10
LiveUpdate (Symantec Corporation)
Malwarebytes' Anti-Malware
Map Button (Windows Live Toolbar)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Standard 2006 Editor
Microsoft Digital Image Standard 2006 Library
Microsoft Digital Image Standard 2006 Update
Microsoft IntelliPoint 6.1
Microsoft IntelliType Pro 6.1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office
programs
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.7
Microsoft Visual C++ 2005 Redistributable
Microsoft WinUsb 1.0
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser (KB933579)
Norton 360
Norton 360 (Symantec Corporation)
Norton 360 HTMLHelp
Norton Confidential Core
NVIDIA Drivers
PaltalkScene
Photo Story 3 for Windows
Popup Blocker (Windows Live Toolbar)
PowerDVD 5.5
QuickTime
Qwest QuickCare
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB955936)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB955470)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB913433)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Smart Menus (Windows Live Toolbar)
Sonic Audio module
Sonic DLA
Sonic Encoders
Sonic MyDVD LE
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sound Blaster for Media Center
Sound Blaster X-Fi
SPBBC 32bit
Symantec Real Time Storage Protection Component
Symantec Technical Support Controls
Symantec Technical Support Web Controls
SymNet
Try Corel Snapfire muvee autoProducer add on
Tweak UI
Update for Microsoft Office Excel 2007 Help (KB957242)
Update for Microsoft Office OneNote 2007 Help (KB957245)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Microsoft Office Outlook 2007 Help (KB957246)
Update for Microsoft Office PowerPoint 2007 Help (KB957247)
Update for Microsoft Office Publisher 2007 Help (KB957249)
Update for Microsoft Office Word 2007 Help (KB957252)
Update for Microsoft Script Editor Help (KB957253)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb957829)
Update for Windows Media Player 10 (KB913800)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update Rollup 2 for Windows XP Media Center Edition 2005
VX-7 Commander v1.3.4
WD Media Center Driver
WebCyberCoach 3.2 Dell
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
Windows Rights Management Client Backwards Compatibility SP2
Windows Rights Management Client with Service Pack 2
Windows XP Media Center Edition 2005 KB914548
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Zune
Zune Language Pack (ES)
Zune Language Pack (FR)
==== Event Viewer Messages ===================
11/13/2008 11:38:36 AM, error: Service Control Manager [7023] -
The Uninterruptible Power Supply service terminated with the
following error: %%2481
11/13/2008 11:38:19 AM, error: UPS [2481] - The UPS service is not
configured correctly.
11/12/2008 7:18:59 PM, error: Print [6161] - The document
https://ibdswebp12-ext.pb.com/images/USPS/HTMLFolders/HTML5/f5e
owned by jmmilliron failed to print on printer Dell Photo AIO
Printer 962. Data type: LEMF. Size of the spool file in bytes:
549429. Number of bytes printed: 549429. Total number of pages in
the document: 1. Number of pages printed: 0. Client machine:
\\2K0HV81. Win32 error code returned by the print processor: 0
(0x0).
11/14/2008 12:01:27 PM, error: Print [6161] - The document Test
Page owned by jmmilliron failed to print on printer Dell Photo AIO
Printer 962. Data type: LEMF. Size of the spool file in bytes:
665123. Number of bytes printed: 665123. Total number of pages in
the document: 1. Number of pages printed: 0. Client machine:
\\2K0HV81. Win32 error code returned by the print processor: 6
(0x6).
==== End Of File ===========================
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 15:00
Just some remnants in the registry, but nothing that would cause your printer problem. Let's try an online scan with rootkit detection. If that does not show anything, I'll send you back to the printers forum.
Please perform this online scan: F-Secure Online Scanner
The online scanner is on the bottom right of the page.
Direct link: http://support.f-secure.com/enu/home/ols.shtml
Follow the directions on the F-Secure page for proper Installation.
* You may receive an alert on the address bar at this point to install the ActiveX control.
* Click on that alert and then click "Install ActiveX component".
* Read the license agreement and click "Accept".
* Click "Custom Scan" and be sure the following are checked:
* When the scan completes, click the "I want to decide item by item" button.
* For each item found, Select "Disinfect" and click "Next". * When done, click the "Show Report" button, then copy and paste the entire report into your next reply.
Dude Its A Dell
17 Posts
0
November 19th, 2008 15:00
I d/l the scanner, but when I try to run it I keep getting an error:
An error has occured!
Please close the scanner and your browser, then try again. (Id:12)
I went to the FAQ for F-Secure and saw it only works with IE (I was using MSN) so I closed it and opened IE7, checked privacy level (Medium), cleared all history, cookies, etc. closed and reopened. Tried to initiate scan again, but got same error. Right clicked IE icon and told it to 'run as' my user name (I have admin rights) then tried again - same error. Right clicked IE icon again and noticed an option that had a check in the box:
'Protect my computer and data from unauthorized program activity.'
I unchecked the box and tried again to run the scanner - same error.
Any idea what I may be doing wrong that is not allowing the scanner to run?
Bugbatter
3 Apprentice
•
20.5K Posts
0
November 19th, 2008 18:00
We won't waste time on that.
Please perform an online scan here:
http://www.eset.eu/online-scanner
Dude Its A Dell
17 Posts
0
November 19th, 2008 19:00
# version=4
# OnlineScanner.ocx=1.0.0.56
# OnlineScannerDLLA.dll=1, 0, 0, 51
# OnlineScannerDLLW.dll=1, 0, 0, 51
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=3626 (20081119)
# vers_arch_module=1.064 (20080214)
# vers_adv_heur_module=1.066 (20070917)
# EOSSerial=063e289eabb18a45a8888eb148697d8e
# end=finished
# remove_checked=false
# unwanted_checked=false
# utc_time=2008-11-20 03:24:17
# local_time=2008-11-19 07:24:17 (-0800, Pacific Standard Time)
# country="United States"
# osver=5.1.2600 NT Service Pack 3
# scanned=326833
# found=0
# scan_time=2571
-----------
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Version 1.0)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 11/6/2006 1:19:49 PM
System Uptime: 11/19/2008 2:02:56 PM (5 hours ago)
Motherboard: Dell Inc. | | 0GC375
Processor: Intel(R) Pentium(R) D CPU 3.20GHz | Microprocessor | 3192/800mhz
BIOS: Phoenix ROM BIOS PLUS Version 1.10 A02 | DELL - 7 | A02 | 9/14/2005 5:00:00 PM
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 270.652 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is FIXED (NTFS) - 298 GiB total, 273.135 GiB free.
==== Disabled Device Manager Items =============
Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A}
Description: Zune
Device ID: USB\VID_045E&PID_0710\800282C5-E08D-A06D-82D8-26EEADCC0CE8
Manufacturer: Microsoft
Name: Zune
PNP Device ID: USB\VID_045E&PID_0710\800282C5-E08D-A06D-82D8-26EEADCC0CE8
Service: WUDFRd
Class GUID: {4D36E96D-E325-11CE-BFC1-08002BE10318}
Description: Intel(R) 537EP V9x DF PCI Modem
Device ID: PCI\VEN_8086&DEV_1080&SUBSYS_10001028&REV_04\4&26EC2DE1&0&2090
Manufacturer: Intel Corporation
Name: Intel(R) 537EP V9x DF PCI Modem
PNP Device ID: PCI\VEN_8086&DEV_1080&SUBSYS_10001028&REV_04\4&26EC2DE1&0&2090
Service: Modem
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\ACB73E2280140000
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\ACB73E2280140000
Service: NIC1394
==== System Restore Points ===================
RP832: 10/18/2008 6:12:07 PM - System Checkpoint
RP833: 10/18/2008 6:13:24 PM - 101808_18:13
RP834: 10/19/2008 7:19:12 AM - Installed Symantec Technical Support Advanced Chat Controls
RP835: 10/19/2008 6:56:08 PM - Norton 360 Registry Clean
RP836: 10/21/2008 6:43:43 AM - Software Distribution Service 3.0
RP837: 10/21/2008 4:04:19 PM - Norton 360 Registry Clean
RP838: 10/21/2008 4:26:19 PM - Installed Microsoft Office Enterprise 2007
RP839: 10/21/2008 4:34:24 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP840: 10/21/2008 5:21:28 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP841: 10/21/2008 5:44:39 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP842: 10/21/2008 5:53:38 PM - Installed Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
RP843: 10/22/2008 10:34:30 AM - Removed Adobe Reader 8.1.2
RP844: 10/22/2008 10:35:51 AM - Installed Adobe Reader 9.
RP845: 10/22/2008 10:44:36 AM - Software Distribution Service 3.0
RP846: 10/23/2008 12:35:10 PM - System Checkpoint
RP847: 10/24/2008 6:49:21 AM - Software Distribution Service 3.0
RP848: 10/25/2008 1:22:35 PM - System Checkpoint
RP849: 10/26/2008 2:18:25 PM - System Checkpoint
RP850: 10/28/2008 7:31:17 AM - System Checkpoint
RP851: 10/29/2008 7:35:04 AM - System Checkpoint
RP852: 10/30/2008 12:21:47 PM - System Checkpoint
RP853: 11/1/2008 1:16:22 PM - System Checkpoint
RP854: 11/2/2008 12:43:15 PM - System Checkpoint
RP855: 11/3/2008 7:02:01 PM - System Checkpoint
RP856: 11/4/2008 7:13:46 PM - System Checkpoint
RP857: 11/6/2008 4:08:59 PM - Unsigned driver install
RP858: 11/6/2008 4:31:33 PM - Unsigned driver install
RP859: 11/8/2008 3:02:18 PM - System Checkpoint
RP860: 11/9/2008 3:34:13 PM - System Checkpoint
RP861: 11/10/2008 7:30:04 PM - System Checkpoint
RP862: 11/12/2008 6:58:00 AM - Software Distribution Service 3.0
RP863: 11/13/2008 8:28:38 AM - Software Distribution Service 3.0
RP864: 11/13/2008 10:42:45 AM - Norton 360 Registry Clean
RP865: 11/14/2008 10:11:34 AM - Installed Ad-Aware
RP866: 11/14/2008 11:35:06 AM - Norton 360 Registry Clean
RP867: 11/14/2008 11:56:42 AM - Installed Print to Fax
RP868: 11/15/2008 12:23:49 PM - System Checkpoint
RP869: 11/15/2008 5:47:08 PM - Removed Jasc Paint Shop Photo Album
RP870: 11/15/2008 5:48:12 PM - Removed Jasc Paint Shop Pro 8 Dell Edition
RP871: 11/15/2008 5:52:25 PM - Norton 360 Registry Clean
RP872: 11/17/2008 7:21:19 AM - System Checkpoint
RP873: 11/18/2008 12:21:18 PM - System Checkpoint
RP874: 11/18/2008 12:36:15 PM - Removed Print to Fax
RP875: 11/19/2008 12:55:09 PM - Removed J2SE Runtime Environment 5.0 Update 10
RP876: 11/19/2008 12:55:43 PM - Removed Java(TM) 6 Update 3
RP877: 11/19/2008 12:56:19 PM - Removed Java(TM) 6 Update 5
RP878: 11/19/2008 12:56:59 PM - Removed Java(TM) 6 Update 7
RP879: 11/19/2008 12:57:31 PM - Removed Java(TM) SE Runtime Environment 6 Update 1
RP880: 11/19/2008 1:08:41 PM - Installed Java(TM) 6 Update 10
==== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 1 (SP1)
Acrobat.com
Ad-Aware
Adobe AIR
Adobe Flash Player ActiveX
Adobe Reader 9
Adobe Shockwave Player
AppCore
Apple Software Update
Auto Care
Backup
ccCommon
Channel Master
Corel Paint Shop Pro Photo XI
Corel Snapfire DVD Maker
Corel Snapfire Plus
Creative Audio Console
Creative MediaSource 5
Dell Resource CD
Dell Support Center (Support Software)
DesignPro 5.0 Limited Edition
Easy-Link internet launch pad
ESET Online Scanner
Evrsoft First Page 2006
Form Fill (Windows Live Toolbar)
GearDrvs
getPlus(R) for Adobe
Highlight Viewer (Windows Live Toolbar)
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB932716-v2)
Hotfix for Windows XP (KB952287)
Intel(R) 537EP V9x DF PCI Modem
Java(TM) 6 Update 10
LiveUpdate (Symantec Corporation)
Malwarebytes' Anti-Malware
Map Button (Windows Live Toolbar)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Standard 2006 Editor
Microsoft Digital Image Standard 2006 Library
Microsoft Digital Image Standard 2006 Update
Microsoft IntelliPoint 6.1
Microsoft IntelliType Pro 6.1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.7
Microsoft Visual C++ 2005 Redistributable
Microsoft WinUsb 1.0
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser (KB933579)
Norton 360
Norton 360 (Symantec Corporation)
Norton 360 HTMLHelp
Norton Confidential Core
NVIDIA Drivers
PaltalkScene
Photo Story 3 for Windows
Popup Blocker (Windows Live Toolbar)
PowerDVD 5.5
QuickTime
Qwest QuickCare
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB955936)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB955470)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB913433)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Smart Menus (Windows Live Toolbar)
Sonic Audio module
Sonic DLA
Sonic Encoders
Sonic MyDVD LE
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sound Blaster for Media Center
Sound Blaster X-Fi
SPBBC 32bit
Symantec Real Time Storage Protection Component
Symantec Technical Support Controls
Symantec Technical Support Web Controls
SymNet
Try Corel Snapfire muvee autoProducer add on
Tweak UI
Update for Microsoft Office Excel 2007 Help (KB957242)
Update for Microsoft Office OneNote 2007 Help (KB957245)
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Microsoft Office Outlook 2007 Help (KB957246)
Update for Microsoft Office PowerPoint 2007 Help (KB957247)
Update for Microsoft Office Publisher 2007 Help (KB957249)
Update for Microsoft Office Word 2007 Help (KB957252)
Update for Microsoft Script Editor Help (KB957253)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb957829)
Update for Windows Media Player 10 (KB913800)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update Rollup 2 for Windows XP Media Center Edition 2005
VX-7 Commander v1.3.4
WD Media Center Driver
WebCyberCoach 3.2 Dell
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
Windows Rights Management Client Backwards Compatibility SP2
Windows Rights Management Client with Service Pack 2
Windows XP Media Center Edition 2005 KB914548
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Zune
Zune Language Pack (ES)
Zune Language Pack (FR)
==== Event Viewer Messages ===================
11/14/2008 6:37:57 AM, error: Service Control Manager [7023] - The Uninterruptible Power Supply service terminated with the following error: %%2481
11/14/2008 6:37:35 AM, error: UPS [2481] - The UPS service is not configured correctly.
11/12/2008 7:18:59 PM, error: Print [6161] - The document https://ibdswebp12-ext.pb.com/images/USPS/HTMLFolders/HTML5/f5e owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 549429. Number of bytes printed: 549429. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 0 (0x0).
11/14/2008 12:01:27 PM, error: Print [6161] - The document Test Page owned by jmmilliron failed to print on printer Dell Photo AIO Printer 962. Data type: LEMF. Size of the spool file in bytes: 665123. Number of bytes printed: 665123. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\2K0HV81. Win32 error code returned by the print processor: 6 (0x6).
==== End Of File ===========================
-----------
DDS (Version 1.0) - NTFSx86
Run by jmmilliron at 19:36:10.03 on Wed 11/19/2008
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2045.1324 [GMT -8:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WDC\SetIcon.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Easy-Link\Easy-Link internet launch pad.exe
C:\Program Files\Zune\ZuneLauncher.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\ZuneBusEnum.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\cidaemon.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\MSN\MSNCoreFiles\msn.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\jmmilliron\Desktop\dds.scr
============== Psuedo HJT Report ===============
uInternet Connection Wizard,ShellNext = iexplore
BHO: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\common files\symantec shared\coshared\browser\2.6\coIEPlg.dll
BHO: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll
BHO: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll
BHO: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\common files\symantec shared\coshared\browser\2.6\CoIEPlg.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - c:\program files\windows live toolbar\msntb.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\common files\symantec shared\coshared\browser\2.6\CoIEPlg.dll
uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [CTDVDDET] "c:\program files\creative\sound blaster x-fi\dvdaudio\CTDVDDET.EXE"
mRun: [VolPanel] "c:\program files\creative\sound blaster x-fi\volume panel\VolPanel.exe" /r
mRun: [AudioDrvEmulator] "c:\program files\creative\shared files\module loader\dllml.exe" -1 audiodrvemulator "c:\program files\creative\shared files\module loader\audio emulator\AudDrvEm.dll"
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTxfiHlp] CTXFIHLP.EXE
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [SetIcon] \Program Files\WDC\SetIcon.exe
mRun: [eligmini] c:\program files\easy-link\Easy-Link internet launch pad.exe 0
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [nwiz] nwiz.exe /install
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [Zune Launcher] "c:\program files\zune\ZuneLauncher.exe"
mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [osCheck] "c:\program files\norton 360\osCheck.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [dlbxmon.exe] "c:\program files\dell photo aio printer 962\dlbxmon.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office12\EXCEL.EXE/3000
IE: eBay Search - c:\program files\ebay\ebay toolbar2\eBayTb.dll/RCSearch.html
IE: Lookup on Merriam Webster - file://c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\iespell\wikipedia.HTM
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jmmilliron\start menu\programs\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mi1933~1\office12\ONBttnIE.dll
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jmmilliron\start menu\programs\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
============= SERVICES / DRIVERS ===============
R2 LiveUpdate Notice;LiveUpdate Notice;"c:\program files\common files\symantec shared\ccSvcHst.exe" /h ccCommon [2008-2-18 149352]
R2 zumbus;Zune Bus Enumerator Driver;c:\windows\system32\drivers\zumbus.sys [2008-1-11 40832]
R3 Angel;Angel MPEG Device;c:\windows\system32\drivers\Angel.sys [2006-11-6 376320]
R3 ha20x2k;Creative 20X HAL Driver;c:\windows\system32\drivers\ha20x2k.sys [2006-8-17 1160504]
S3 COH_Mon;COH_Mon;\??\c:\windows\system32\drivers\COH_Mon.sys [2008-1-12 23888]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\nos\bin\getPlus_HelperSvc.exe [2008-10-22 33752]
=============== Created Last 30 ================
2008-11-19 18:39
2008-11-19 15:25
2008-11-19 13:11
2008-11-19 13:11 15,504 a------- c:\windows\system32\drivers\mbam.sys
2008-11-19 13:11 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-19 13:11
2008-11-19 13:11
2008-11-19 13:08 410,976 a------- c:\windows\system32\deploytk.dll
2008-11-19 13:08 73,728 a------- c:\windows\system32\javacpl.cpl
2008-11-18 11:28
2008-11-14 10:11
2008-11-14 10:11
2008-11-13 08:45
2008-11-12 06:57 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2008-11-12 06:56 1,106,944 -c------ c:\windows\system32\dllcache\msxml3.dll
2008-11-06 16:09 43,136 a----r-- c:\windows\system32\drivers\ser2pl.sys
2008-11-05 09:44
2008-10-24 05:49 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2008-10-21 15:34 32,592 a------- c:\windows\system32\msonpmon.dll
2008-10-21 15:28
2008-10-21 15:27
==================== Find3M ====================
2008-11-19 16:28
2008-11-19 14:03
2008-11-16 17:43 9,492 a--sh--- c:\windows\system32\KGyGaAvL.sys
2008-11-15 17:48
2008-11-14 12:05
2008-11-14 10:10
2008-11-04 06:36
2008-10-22 09:56 116,240 a------- c:\windows\system32\GDIPFONTCACHEV1.DAT
2008-10-21 16:53
2008-10-21 16:51
2008-10-19 17:53
2008-10-19 07:35
2008-10-19 07:34 60,800 a------- c:\windows\system32\S32EVNT1.DLL
2008-10-19 07:34
2008-10-18 17:06
2008-10-18 17:02
2008-10-06 13:45
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-22 13:34
2008-09-15 04:12 1,846,400 a------- c:\windows\system32\win32k.sys
2008-09-12 17:48 245,664 a------- c:\windows\system32\ZuneWlanCfgSvc.exe
2008-09-12 17:46 61,856 a------- c:\windows\system32\ZuneBusEnum.exe
2008-09-12 17:32 73,216 a------- c:\windows\system32\ZuneUsbTransport.dll
2008-09-12 17:32 18,944 a------- c:\windows\system32\ZuneTcp2Udp.dll
2008-09-12 17:32 57,344 a------- c:\windows\system32\ZuneRegUtil.dll
2008-09-12 17:32 12,800 a------- c:\windows\system32\ZunePTDNS.dll
2008-09-12 17:32 310,272 a------- c:\windows\system32\ZuneNetProxy.dll
2008-09-12 17:32 145,920 a------- c:\windows\system32\ZuneMTPZ.dll
2008-09-09 17:14 1,307,648 a------- c:\windows\system32\msxml6.dll
2008-09-04 09:15 1,106,944 a------- c:\windows\system32\msxml3.dll
2008-08-27 15:19 1,302,600 a------- c:\windows\system32\WUDFUpdate_01007.dll
2008-08-27 15:19 581,192 a------- c:\windows\system32\WinUSBCoInstaller.dll
2008-08-25 23:24 826,368 a------- c:\windows\system32\wininet.dll
2008-08-02 07:37
2008-06-07 10:48
2008-05-15 18:45
2008-03-31 17:31
2008-01-18 13:18
2008-01-18 13:18
2008-01-18 12:23
2007-12-30 09:58
2007-12-21 10:36
2007-12-15 17:35
2007-11-16 09:46
2007-10-13 09:29
2007-10-13 09:27
2007-10-13 09:27
2007-06-28 15:34
2007-05-14 09:02
2007-04-15 10:21
2007-02-01 11:48
2007-01-28 17:28
2007-01-28 17:28
2007-01-08 16:40
2007-01-01 17:26
2006-12-25 16:58
2006-12-25 16:09
2006-12-25 16:03
2006-11-20 11:51
2006-11-08 08:26
2007-04-11 14:10 88 ---shr-- c:\windows\system32\6AF5308BF9.sys
2008-05-06 14:35 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008050620080507\index.dat
============= FINISH: 19:36:30.39 ===============