ms malware removal tool virus ... Help me Please

I have tried to boot up in safe mode and i downloaded rkill and malwarebytes on a cd and tried to run and also on an external drive and neither will run on my computer. I am stuck.

Sorry we could not get to you sooner.

Your options are a Dell PC Restore to factory settings or to reformat/reinstall Windows.

Hello bugbatter,

  There isn't anything online that will scan my computer without me having to download?When I use the external hard drive that have malwarebytes on it it works o n another computer, why won't it work ? i am up for anything right now. do I need to be offline when i run the external frive? just kind of waiting for the next step.

thanks

There isn't anything online that will scan my computer without me having to download?

Nod32 online scanner -- http://www.eset.com/onlinescan/ 

BitDefender -- http://www.bitdefender.com/scanner/online/free.html

When I use the external hard drive that have malwarebytes on it it works o n another computer, why won't it work ?

is there anything to do at this point without losing all information on the computer at this point? what would be the next steps to take from here?

As long as you have been making routine backups of your documents, pictures, music, etc. and have the installation CD's for your installed programs, it may take some time, but  doing a Dell PC Restore or reinstall of Windows will be the way to go. See my links above.

hell Bugbatter,

i ran a program from microsoft, a scan of some sort, it was about halfway finished when our power blinked and it had found 18 problems and 6 issues and when i closed it, firefox came back on.i then executed m-bam set up and it loaded. I am scanning computer right now.

where to go from here?

Please post your log from MBAM showing that it found.

Also please include the following:

Please download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt

• Save both reports to your desktop.

-----------------------------------------------------

• Copy/paste both logs to your reply on the forum. Do not attach them.
• Close the program window, and delete the program from your desktop.
• Don't forget your log from MBAM.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE.

here is the dds files

DDS (Ver_11-03-05.01) - NTFSx86 
Run by Ernest at 15:38:16.03 on Sun 04/10/2011
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.1014.388 [GMT -5:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
svchost.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\mfevtps.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\Program Files\McAfee Online Backup\MOBKbackup.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
\\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\Documents and Settings\Ernest\My Documents\Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/
uInternet Settings,ProxyOverride =
uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: del.icio.us Toolbar Helper: {7aa07ae6-01ef-44ec-93ca-9d7cd41ccdb6} - c:\program files\del.icio.us\internet explorer buttons\dlcsIE.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20110304222914.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: del.icio.us: {981fe6a8-260c-4930-960f-c3bc82746cb0} - c:\program files\del.icio.us\internet explorer buttons\dlcsIE.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Microsoft Works Update Detection] c:\program files\microsoft works\WkDetect.exe
uRun: [Yahoo! Pager] "c:\progra~1\yahoo!\messen~1\YAHOOM~1.EXE" -quiet
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [DLCCCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLCCtime.dll,_RunDLLEntry@16
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [dlccmon.exe] "c:\program files\dell photo aio printer 924\dlccmon.exe"
mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYASwBQAEMAQgAtADYAQgBXAEYATQAtAFQAUgBMAFEAUgAtAEIAUgBVAEgAUAAtAEMAUAA4ADYARwA"&"inst=NwA3AC0ANAAyADUANwA5ADcANQA5ADAALQBGAFAAOQArADYALQBCAEEAUgA5AEcAKwAxAC0AVABCADkAKwAyAC0ARgBMACsAOQAtAFgATwAzADYAKwAxAC0ARgA5AE0ANwBDACsANQAtAEYAOQBNADEAMABCACsAMQA"&"prod=90"&"ver=9.0.872
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
dRunOnce: [RunNarrator] Narrator.exe
dRunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Trusted Zone: intuit.com\ttlc
DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6886.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1259001713093
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} - hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://zone.msn.com/bingame/dim2/default/popcaploader_v6.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\570\G2AWinLogon.dll
Notify: igfxcui - igfxdev.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\ernest\applic~1\mozilla\firefox\profiles\bx84xqj1.default\
FF - prefs.js: browser.search.selectedEngine - Secure Search
FF - prefs.js: browser.startup.homepage - hxxp://fmz.qiwa.com
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p=
FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll
FF - plugin: c:\documents and settings\ernest\application data\mozilla\firefox\profiles\bx84xqj1.default\extensions\{195a3098-0bd5-4e90-ae22-ba1c540afd1e}\plugins\npGarmin.dll
FF - plugin: c:\documents and settings\ernest\local settings\application data\yahoo!\browserplus\2.8.1\plugins\npybrowserplus_2.8.1.dll
FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npclntax_ClickPotatoLiteSA.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files\mcafee\SiteAdvisor
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
.
============= SERVICES / DRIVERS ===============
.
R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2010-10-13 386840]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2011-3-4 84072]
R1 MOBKFilter;MOBKFilter;c:\windows\system32\drivers\MOBK.sys [2011-3-4 54776]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-11-11 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-11-11 74480]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2011-3-4 271480]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2011-3-4 271480]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2011-3-4 271480]
R2 McProxy;McAfee Proxy Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2011-3-4 271480]
R2 McShield;McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2011-3-4 171168]
R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2011-3-4 188136]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2011-3-4 141792]
R2 MOBKbackup;McAfee Online Backup;c:\program files\mcafee online backup\MOBKbackup.exe [2010-4-13 229688]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2011-3-4 55840]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2011-3-4 152960]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2011-3-4 52104]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2011-3-4 313288]
R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2011-3-4 88544]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2011-3-4 88544]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2011-3-4 84264]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-11-11 7408]
S4 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2008-3-3 24652]
.
=============== Created Last 30 ================
.
2011-04-10 06:17:08    --------    d-----w-    c:\program files\ESET
2011-04-09 03:50:31    --------    d-----w-    c:\windows\system32\wbem\repository\FS
2011-04-09 03:50:31    --------    d-----w-    c:\windows\system32\wbem\Repository
2011-04-09 02:42:13    --------    d-----w-    c:\docume~1\alluse~1\applic~1\kBi06511aBbKh06511
.
==================== Find3M  ====================
.
.
============= FINISH: 15:41:42.62 ===============

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6325

Windows 5.1.2600 Service Pack 2
Internet Explorer 7.0.5730.13

4/10/2011 3:27:45 PM
mbam-log-2011-04-10 (15-27-45).txt

Scan type: Full scan (C:\|)
Objects scanned: 355025
Time elapsed: 3 hour(s), 0 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 5
Folders Infected: 0
Files Infected: 16

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Documents and Settings\Ernest\Local Settings\Application Data\jig.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe") Good: (firefox.exe) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Documents and Settings\Ernest\Local Settings\Application Data\jig.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode) Good: (firefox.exe -safe-mode) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP326\A0023207.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP330\A0024211.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP330\A0024212.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP330\A0024213.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP330\A0024214.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP330\A0024215.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP330\A0024216.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP331\A0026228.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP331\A0026229.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP331\A0026234.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP331\A0026235.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP331\A0026236.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP331\A0026237.exe (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP371\A0032324.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\system volume information\_restore{fbeaaad6-f449-4452-a4b7-2f2ab3aaaf66}\RP371\A0032325.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Ernest\Desktop\explorer.exe (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted

successfully.downloading dds now

IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 12/16/2009 12:41:25 PM
System Uptime: 4/10/2011 3:32:17 PM (0 hours ago)
.
Motherboard: Dell Inc. |  | 0MG532
Processor: Genuine Intel(R) CPU           T2400  @ 1.83GHz | Microprocessor | 1829/133mhz
Processor: Genuine Intel(R) CPU           T2400  @ 1.83GHz | Microprocessor | 1830/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 110 GiB total, 42.715 GiB free.
D: is CDROM (CDFS)
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP300: 1/11/2011 7:05:33 PM - System Checkpoint
RP301: 1/12/2011 10:35:26 PM - Software Distribution Service 3.0
RP302: 1/14/2011 9:51:50 PM - System Checkpoint
RP303: 1/15/2011 10:50:53 PM - System Checkpoint
RP304: 1/17/2011 6:55:29 PM - System Checkpoint
RP305: 1/18/2011 11:22:48 PM - System Checkpoint
RP306: 1/19/2011 11:23:59 PM - System Checkpoint
RP307: 1/21/2011 6:41:02 PM - System Checkpoint
RP308: 1/22/2011 9:53:16 PM - System Checkpoint
RP309: 1/23/2011 10:32:02 PM - System Checkpoint
RP310: 1/27/2011 9:10:18 AM - System Checkpoint
RP311: 1/28/2011 10:12:15 AM - System Checkpoint
RP312: 1/29/2011 10:18:44 AM - System Checkpoint
RP313: 1/30/2011 11:36:44 AM - System Checkpoint
RP314: 1/30/2011 4:51:25 PM - Configured TBS WMP Plug-in
RP315: 1/31/2011 7:48:12 PM - System Checkpoint
RP316: 2/1/2011 8:58:55 PM - System Checkpoint
RP317: 2/2/2011 9:12:05 PM - System Checkpoint
RP318: 2/4/2011 7:21:09 PM - System Checkpoint
RP319: 2/5/2011 9:55:04 AM - Installed BlackBerry Device Software Updater.
RP320: 2/5/2011 9:59:22 AM - Removed BlackBerry Device Software Updater.
RP321: 2/5/2011 10:26:55 AM - Installed Windows XP Wdf01009.
RP322: 2/6/2011 11:02:12 AM - System Checkpoint
RP323: 2/6/2011 3:00:25 PM - Software Distribution Service 3.0
RP324: 2/7/2011 8:04:10 PM - System Checkpoint
RP325: 2/8/2011 9:03:15 PM - System Checkpoint
RP326: 2/9/2011 5:48:35 PM - Software Distribution Service 3.0
RP327: 2/13/2011 2:57:33 PM - System Checkpoint
RP328: 2/14/2011 8:49:39 PM - System Checkpoint
RP329: 2/16/2011 9:32:28 AM - System Checkpoint
RP330: 2/17/2011 7:12:31 PM - System Checkpoint
RP331: 2/18/2011 6:27:09 PM - Software Distribution Service 3.0
RP332: 2/19/2011 10:13:31 PM - System Checkpoint
RP333: 2/21/2011 6:37:09 PM - System Checkpoint
RP334: 2/22/2011 6:43:28 PM - System Checkpoint
RP335: 2/23/2011 11:30:37 PM - System Checkpoint
RP336: 2/25/2011 6:43:22 PM - System Checkpoint
RP337: 2/26/2011 7:30:12 PM - Installed TurboTax 2010 wrapper
RP338: 2/26/2011 7:47:59 PM - Installed TurboTax 2010 wrapper
RP339: 2/26/2011 10:05:58 PM - Installed TurboTax 2010 waliper
RP340: 2/27/2011 10:31:22 PM - System Checkpoint
RP341: 3/1/2011 9:17:11 PM - System Checkpoint
RP342: 3/2/2011 10:34:15 PM - System Checkpoint
RP343: 3/4/2011 7:15:25 PM - System Checkpoint
RP344: 3/4/2011 9:39:36 PM - Removed AVG Free 9.0
RP345: 3/5/2011 9:41:32 PM - System Checkpoint
RP346: 3/7/2011 6:54:23 PM - System Checkpoint
RP347: 3/8/2011 7:22:36 PM - System Checkpoint
RP348: 3/9/2011 10:10:25 PM - Software Distribution Service 3.0
RP349: 3/11/2011 6:41:48 PM - System Checkpoint
RP350: 3/12/2011 7:14:53 PM - System Checkpoint
RP351: 3/13/2011 8:15:23 PM - System Checkpoint
RP352: 3/14/2011 8:45:41 PM - System Checkpoint
RP353: 3/15/2011 10:41:31 PM - System Checkpoint
RP354: 3/17/2011 7:45:41 PM - System Checkpoint
RP355: 3/18/2011 8:46:27 PM - System Checkpoint
RP356: 3/19/2011 9:10:17 PM - System Checkpoint
RP357: 3/20/2011 11:51:22 PM - System Checkpoint
RP358: 3/22/2011 9:37:09 PM - System Checkpoint
RP359: 3/24/2011 7:12:11 PM - System Checkpoint
RP360: 3/25/2011 7:43:54 PM - System Checkpoint
RP361: 3/26/2011 8:51:21 PM - System Checkpoint
RP362: 3/27/2011 9:19:42 PM - System Checkpoint
RP363: 3/29/2011 8:34:36 PM - System Checkpoint
RP364: 3/30/2011 10:30:43 PM - System Checkpoint
RP365: 4/1/2011 7:12:25 PM - System Checkpoint
RP366: 4/2/2011 8:06:43 PM - System Checkpoint
RP367: 4/3/2011 10:23:05 PM - System Checkpoint
RP368: 4/5/2011 9:33:03 PM - System Checkpoint
RP369: 4/6/2011 11:00:48 PM - System Checkpoint
RP370: 4/8/2011 7:34:48 PM - System Checkpoint
RP371: 4/8/2011 10:49:07 PM - Restore Operation
RP372: 4/9/2011 11:33:44 PM - System Checkpoint
.
==== Installed Programs ======================
.
.
ABBYY FineReader 6.0 Sprint
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.2
Adobe Shockwave Player
Adobe Shockwave Player 11.5
AIM 6
Apple Application Support
Apple Mobile Device Support
Apple Software Update
BlackBerry Desktop Software 6.0.1
BlackBerry Device Software Updater
BlackBerry® Media Sync
Bonjour
Color Schemer Studio
Compatibility Pack for the 2007 Office system
Conexant HDA D110 MDC V.92 Modem
Crystal Reports for .NET Framework 2.0 (x86)
del.icio.us Buttons for Internet Explorer
Dell Photo AIO Printer 924
ESET Online Scanner v3
Flock 1.2
Garmin City Navigator North America NT 2011.20 Update
GoToAssist Corporate
GTK+ Runtime 2.14.7 rev a (remove only)
H&R Block Alabama 2009
H&R Block Deluxe + Efile + State 2009
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows XP (KB888795)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Intel(R) Graphics Media Accelerator Driver
iPhone Configuration Utility
iTunes
Jasc Paint Shop Pro 8
Java(TM) 6 Update 17
Java(TM) 6 Update 3
Java(TM) SE Runtime Environment 6
Last.fm 1.5.4.24567
Magic M4A to MP3 Converter 3.1
Malwarebytes' Anti-Malware
McAfee Online Backup
McAfee Total Protection
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SOSHOME22)
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Word 2002
Microsoft Works 2002 Setup Launcher
Microsoft Works 6.0
MobileMe Control Panel
Mozilla Firefox (3.6.16)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
Nero OEM
OpenAL
OpenOffice.org 2.2
Personal Ancestral File 5
Pidgin
PowerDVD
Q10 Editor
QuickTime
RoughDraft 3.0
Safari
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971032)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB976325)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB981349)
Sims2DB Version 1.02
Sims2Pack Clean Installer
SUPERAntiSpyware Free Edition
Switched-On Schoolhouse 2008 - Home Edition
Synaptics Pointing Device Driver
System Requirements Lab
The Sims 2
The Sims 2 Nightlife
The Sims 2 Pets
The Sims 2 University
The Sims™ 2 Seasons
TurboTax 2010
TurboTax 2010 waliper
TurboTax 2010 WinPerFedFormset
TurboTax 2010 WinPerReleaseEngine
TurboTax 2010 WinPerTaxSupport
TurboTax 2010 wrapper
UltraKiss V3.2a
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows XP (KB894391)
Update for Windows XP (KB900485)
Update for Windows XP (KB907265)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB925720)
Update for Windows XP (KB925876)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 1 for Windows XP Media Center Edition 2005 with HDTV Support (KB873369)
Viewpoint Media Player
Walmart MP3 Music Downloads
WebFldrs XP
Windows Driver Package - Broadcom Bluetooth  (02/24/2004 5.1.2535.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer 3.1 (KB893803)
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Live OneCare safety scanner
Windows Media Format Runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player Firefox Plugin
Windows Presentation Foundation
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Media Center Edition 2005 KB888316
WinRAR archiver
Works Suite OS Pack
Works Synchronization
WritePad Sync Lite
XML Paper Specification Shared Components Pack 1.0
Yahoo! BrowserPlus 2.8.1
Yahoo! Messenger
yWriter4
.
==== Event Viewer Messages From Past Week ========
.
4/9/2011 3:12:53 PM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD Fips intelppm IPSec mfehidk mfetdi2k MOBKFilter MRxSmb NetBIOS NetBT RasAcd Rdbss SASDIFSV SASKUTIL Tcpip WS2IFSL
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McShield service depends on the McAfee Validation Trust Protection Service service which failed to start because of the following error:  The dependency service or group failed to start.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McAfee Validation Trust Protection Service service depends on the McAfee Inc. mfehidk service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McAfee Proxy Service service depends on the McAfee Firewall Core Service service which failed to start because of the following error:  The dependency service or group failed to start.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McAfee Personal Firewall Service service depends on the McAfee Firewall Core Service service which failed to start because of the following error:  The dependency service or group failed to start.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McAfee Network Agent service depends on the McAfee Firewall Core Service service which failed to start because of the following error:  The dependency service or group failed to start.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McAfee Firewall Core Service service depends on the McAfee Validation Trust Protection Service service which failed to start because of the following error:  The dependency service or group failed to start.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The McAfee Anti-Spam Service service depends on the McAfee Firewall Core Service service which failed to start because of the following error:  The dependency service or group failed to start.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:53 PM, error: Service Control Manager [7001]  - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
4/9/2011 3:12:48 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
4/9/2011 3:12:32 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
4/9/2011 2:28:01 PM, error: Service Control Manager [7023]  - The Computer Browser service terminated with the following error:  This operation returned because the timeout period expired.
4/9/2011 2:23:59 PM, error: Service Control Manager [7034]  - The McAfee Application Installer Cleanup (0111321302322942) service terminated unexpectedly.  It has done this 1 time(s).
4/9/2011 10:45:47 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service McAfee SiteAdvisor Service with arguments "" in order to run the server: {5A90F5EE-16B8-4C2A-81B3-FD5329BA477C}
4/9/2011 10:45:39 PM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  Fips intelppm MOBKFilter SASDIFSV SASKUTIL
4/9/2011 10:14:34 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
4/9/2011 10:10:33 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service McNaiAnn with arguments "" in order to run the server: {DC7EF8E1-824F-4110-AB43-1604DA9B4F40}
4/8/2011 9:59:59 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 8 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:59:58 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 5 time(s).
4/8/2011 9:59:26 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 4 time(s).
4/8/2011 9:58:59 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 7 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:58:52 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 3 time(s).
4/8/2011 9:58:22 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 2 time(s).
4/8/2011 9:57:58 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 6 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:56:58 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 5 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:55:58 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 4 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:54:57 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 3 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:57 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee Anti-Spam Service service to connect.
4/8/2011 9:53:57 PM, error: Service Control Manager [7000]  - The McAfee Anti-Spam Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:56 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:56 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee Proxy Service service to connect.
4/8/2011 9:53:56 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee Network Agent service to connect.
4/8/2011 9:53:56 PM, error: Service Control Manager [7000]  - The McAfee Proxy Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:56 PM, error: Service Control Manager [7000]  - The McAfee Network Agent service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:55 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee VirusScan Announcer service to connect.
4/8/2011 9:53:55 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee Services service to connect.
4/8/2011 9:53:55 PM, error: Service Control Manager [7000]  - The McAfee VirusScan Announcer service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:55 PM, error: Service Control Manager [7000]  - The McAfee Services service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:54 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee Personal Firewall Service service to connect.
4/8/2011 9:53:54 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Apple Mobile Device service to connect.
4/8/2011 9:53:54 PM, error: Service Control Manager [7000]  - The McAfee Personal Firewall Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:54 PM, error: Service Control Manager [7000]  - The Apple Mobile Device service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The Windows User Mode Driver Framework service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The SQL Server VSS Writer service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The SQL Server (SOSHOME22) service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The McAfee Online Backup service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The Intuit Update Service service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7034]  - The dlcc_device service terminated unexpectedly.  It has done this 1 time(s).
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The Windows Presentation Foundation Font Cache 3.0.0.0 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The McAfee VirusScan Announcer service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The McAfee Services service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The McAfee Proxy Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The McAfee Personal Firewall Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The McAfee Network Agent service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The McAfee Anti-Spam Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7031]  - The Apple Mobile Device service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 9:53:04 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Windows Presentation Foundation Font Cache 3.0.0.0 service to connect.
4/8/2011 9:53:04 PM, error: Service Control Manager [7000]  - The Windows Presentation Foundation Font Cache 3.0.0.0 service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 6:35:54 PM, error: Dhcp [1002]  - The IP address lease 192.168.1.100 for the Network Card with network address 001302D58D4C has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
4/8/2011 10:14:32 PM, error: Service Control Manager [7000]  - The Upload Manager service failed to start due to the following error:  The account specified for this service is different from the account specified for other services running in the same process.
4/8/2011 10:14:32 PM, error: Service Control Manager [7000]  - The Bonjour Service service failed to start due to the following error:  The system cannot find the path specified.
4/8/2011 10:05:09 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the McAfee SiteAdvisor Service service to connect.
4/8/2011 10:05:09 PM, error: Service Control Manager [7000]  - The McAfee SiteAdvisor Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 10:05:09 PM, error: DCOM [10005]  - DCOM got error "%1053" attempting to start the service McAfee SiteAdvisor Service with arguments "" in order to run the server: {5A90F5EE-16B8-4C2A-81B3-FD5329BA477C}
4/8/2011 10:04:39 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 14 time(s).
4/8/2011 10:04:08 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 13 time(s).
4/8/2011 10:03:36 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 12 time(s).
4/8/2011 10:03:05 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 11 time(s).
4/8/2011 10:02:34 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 10 time(s).
4/8/2011 10:02:02 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 9 time(s).
4/8/2011 10:02:00 PM, error: Service Control Manager [7000]  - The SQL Server Browser service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
4/8/2011 10:01:59 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the SQL Server Browser service to connect.
4/8/2011 10:01:32 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 8 time(s).
4/8/2011 10:01:01 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 7 time(s).
4/8/2011 10:01:00 PM, error: Service Control Manager [7031]  - The SQL Server Browser service terminated unexpectedly.  It has done this 9 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/8/2011 10:00:29 PM, error: Service Control Manager [7034]  - The McAfee SiteAdvisor Service service terminated unexpectedly.  It has done this 6 time(s).
4/6/2011 5:46:46 PM, error: Dhcp [1002]  - The IP address lease 192.168.1.101 for the Network Card with network address 001302D58D4C has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
4/5/2011 8:17:15 PM, error: ipnathlp [32003]  - The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
4/4/2011 6:14:15 PM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
4/10/2011 1:04:25 AM, error: Service Control Manager [7034]  - The McAfee Validation Trust Protection Service service terminated unexpectedly.  It has done this 1 time(s).
.
==== End Of File ===========================

Please post your other log from DDS. There should have been two.

You have Viewpoint installed. Viewpoint developed a behavioral targeting product in 2006. Viewpoint is associated with a program called viewmgr.exe and the ViewPoint Media Player.
Viewpoint is bundled with AOL, AOL Instant Messenger, Adobe Atmosphere, Netscape 7, etc and sometimes not mentioned in the license agreement. Hardware manufacturers pre-install some of these applications.
ViewPoint Toolbar will redirect your search queries and also transmits non personally identifiable information back to their servers. The Viewpoint Toolbar is listed is also classified as a threat in the CounterSpy Threat Library because it hijacks your search queries and also transmits non personally identifiable information back to their servers.
Viewpoint Manager is a media player often bundled with AIM software. Viewpoint Manager is a useless add on.
Because Viewpoint's software will track your web surfing and tailor advertisements based on the web pages you are visiting, I suggest you remove the program.
** Note: Removing Viewpoint Media Player may cause the program that bundled it to not function as intended. For AOL and AIM it is needed to use their 3D icons known as Super Buddies and for customized themes, etc.
If you wish to remove Viewpoint, end process on ViewManager in Task Manager.
Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present.

• • Viewpoint
  • Viewpoint Manager
  • Viewpoint Media Player
  • Viewpoint Toolbar
• Viewpoint Experience Technology

Following that, remove the Viewpoint folder in your Program Files.

Download and scan each user profile with CCleaner (a good utility to keep and use regularly.):

http://www.piriform.com/ccleaner/builds

** Select to download the SLIM version.

** Because CCleaner removes everything in temp folders, if you have anything saved in a temp folder, back it up or move it to a permanent folder prior to running CCleaner.

** We will be cleaning cookies as well. Make a note of any passwords, etc. that you want to save. If you do not want to delete cookies, simply uncheck that option.

1. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"

2. Then select the items you wish to clean up. In the Windows Tab:

• Clean all entries in the "Internet Explorer" section.
• Clean all the entries in the "Windows Explorer" section
• Clean all entries in the "System" section.
• Clean all entries in the "Advanced" section.
• Clean any others that you choose. In the Applications Tab:
• Clean all in the Firefox/Mozilla section if you use it.
• Clean all in the Opera section if you use it.
• Clean Sun Java in the Internet Section.
• Clean any others that you choose.

3. Click the "Analyze" button. When the list of files comes up, click the "Run Cleaner" button.

4. A pop up box will appear advising this process will permanently delete files from your system.

5. Click "OK" and it will scan and clean your system.

6. Click "exit" when done. REBOOT.

Please follow these steps to remove older version Java components and update.

• Download the latest version of Java SE Runtime Environment (JRE) 6 Update 24  to your Desktop.
• You will find it here: http://majorgeeks.com/download.php?det=4648
• Click the "Download" button. Make sure you do not by accident download any of the other programs advertised on that page.
• Do not install it yet.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each of the Java versions.
  Close Add/Remove.

• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-6u24-windows-i586.exe to install the newest version. NOTE: As always during installations, beware of any pre-checked option to install a toolbar. If you do not want it, UNcheck it.

Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.

Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications.

To disable the JQS service if you don't want to use it:

* Go to Start-->Control Panel-->Java-->Advanced-->Miscellaneous and uncheck the box for Java Quick Starter.

* Click Ok and reboot your computer.

Finally, please post a fresh HijackThis log.

Let me know how things are running, and if you are seeing any signs of malware at that point.

Due to the lack of feedback this topic is closed. If you need continued support, please begin a new thread, and provide a link to this topic. This applies only to the original topic starter. Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.