UNSOLVED

6881

updated

16 years ago

6

6881

2 Posts

0

1124

September 4th, 2010 20:00

Antivir

I am having some problems with this one.  I am getting fascinating pop ups for "work at home" opportunities and from time to time, it shuts down the wireless zero configuration and I lose connectivity.  It also redirects some google searches.

 

Below are the Hijackthis and Malwarebytes logs.  I appreciate any help you can provide.

 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:08:25 PM, on 9/4/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\PROGRA~1\AT&TGL~1\NetCfgSv.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
C:\WINDOWS\vVX6000.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Documents and Settings\Bryan\My Documents\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.myway.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TwcToolbarBhoApp Class - {AA1F9DDB-E605-4ba6-81D4-E427DEE012AD} - C:\WINDOWS\system32\TwcToolbarBho.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [VX6000] C:\WINDOWS\vVX6000.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)" -"http://www.miniclip.com/games/motocross-urban-fever/en/webgame.php"
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O15 - Trusted Zone: *.intuit.com
O15 - Trusted Zone: http://intrabusinessobjects.searshc.com
O15 - Trusted Zone: http://*.turbotax.com
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - https://livewc02.custhelp.com/7520-b289h-turbotax/rnl/java/RntX.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Network Configuration Service (NetCfgSvr) - AT&T - C:\PROGRA~1\AT&TGL~1\NetCfgSv.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 6862 bytes

 

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4539

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

9/4/2010 9:41:26 PM
mbam-log-2010-09-04 (21-41-26).txt

Scan type: Quick scan
Objects scanned: 228286
Time elapsed: 33 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

  • 6881

    2 Posts

    533

    0

    Posted September 4th, 2010 20:00

    Also, here is the screen317's checkup.txt.  Below that are DDS.txt and Attach.txt from DDS.

     

    Thanks again for any assistance.

     

    Results of screen317's Security Check version 0.99.5 
     Windows XP Service Pack 3 
     Internet Explorer 7 Out of date!
    ``````````````````````````````
    Antivirus/Firewall Check:

     Windows Firewall Enabled! 
     avast! Free Antivirus   
     OneCare Advisor (Windows Live Toolbar) 
     Antivirus up to date! 
    ```````````````````````````````
    Anti-malware/Other Utilities Check:

     Out of date HijackThis installed!
     Malwarebytes' Anti-Malware   
     HijackThis 1.99.1   
     Java(TM) SE Runtime Environment 6 Update 1
     Java 2 Runtime Environment, SE v1.4.2_03
     Adobe Flash Player 10.0.42.34 
    Adobe Reader 9.3.3
    ````````````````````````````````
    Process Check: 
    objlist.exe by Laurent

     Alwil Software Avast5 AvastSvc.exe 
     ALWILS~1 Avast5 avastUI.exe 
    ````````````````````````````````
    DNS Vulnerability Check:

     GREAT! (Not vulnerable to DNS cache poisoning)

    ``````````End of Log````````````

     

    DDS.txt:


    DDS (Ver_10-03-17.01) - NTFSx86 
    Run by Bryan at 21:51:27.51 on Sat 09/04/2010
    Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_01
    Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.1014.329 [GMT -5:00]

    AV: avast! Antivirus *On-access scanning enabled* (Updated)   {7591DB91-41F0-48A3-B128-1A293FD8233D}

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\WINDOWS\system32\CTsvcCDA.EXE
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\PROGRA~1\AT&TGL~1\NetCfgSv.EXE
    C:\WINDOWS\system32\HPZipm12.exe
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
    C:\WINDOWS\system32\Rundll32.exe
    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\WINDOWS\vVX6000.exe
    C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\notepad.exe
    C:\WINDOWS\Explorer.EXE
    C:\Documents and Settings\Bryan\My Documents\Downloads\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://my.myway.com/
    uSearch Bar = hxxp://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
    uDefault_Page_URL = hxxp://www.dell4me.com/myway
    uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway
    uInternet Settings,ProxyOverride =
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: TwcToolbarBhoApp Class: {aa1f9ddb-e605-4ba6-81d4-e427dee012ad} - c:\windows\system32\TwcToolbarBho.dll
    BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
    TB: The Weather Channel Toolbar: {2e5e800e-6ac0-411e-940a-369530a35e43} - c:\windows\system32\TwcToolbarIe7.dll
    TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
    TB: {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - No File
    TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
    EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)" -"http://www.miniclip.com/games/motocross-urban-fever/en/webgame.php"
    mRun: [CTSysVol] c:\program files\creative\sound blaster live! 24-bit\surround mixer\CTSysVol.exe /r
    mRun: [P17Helper] Rundll32 P17.dll,P17Helper
    mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe"
    mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe
    mRun: [VX6000] c:\windows\vVX6000.exe
    mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui
    IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    Trusted Zone: intuit.com
    Trusted Zone: intuit.com\ttlc
    Trusted Zone: searshc.com\intrabusinessobjects
    Trusted Zone: turbotax.com
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
    DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} - hxxp://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} - hxxps://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
    DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {E7D2588A-7FB5-47DC-8830-832605661009} - hxxps://livewc02.custhelp.com/7520-b289h-turbotax/rnl/java/RntX.cab
    Notify: igfxcui - igfxdev.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\bryan\applic~1\mozilla\firefox\profiles\m0irtw9r.default\
    FF - prefs.js: browser.startup.homepage - hxxp://my.myway.com/
    FF - plugin: c:\documents and settings\bryan\application data\move networks\plugins\npqmp071503000010.dll
    FF - plugin: c:\documents and settings\bryan\application data\mozilla\firefox\profiles\m0irtw9r.default\extensions\{195a3098-0bd5-4e90-ae22-ba1c540afd1e}\plugins\npGarmin.dll
    FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
    FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
    FF - plugin: c:\program files\google\update\1.2.183.29\npGoogleOneClick8.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

    ---- FIREFOX POLICIES ----
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
    c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
    c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
    c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
    c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
    c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation",  false);
    c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
    c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");

    ============= SERVICES / DRIVERS ===============

    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010-8-28 165456]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-8-28 17744]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-8-28 40384]
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-11-5 54752]
    R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-8-28 40384]
    R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-8-28 40384]
    R3 bkn50USB;Belkin 54Mbps Wireless USB Network Adapter;c:\windows\system32\drivers\rt2500usb.sys [2005-11-29 140416]
    R3 dfmirage;dfmirage;c:\windows\system32\drivers\dfmirage.sys [2005-11-25 31896]
    R3 VX6000;Microsoft LifeCam VX-6000;c:\windows\system32\drivers\VX6000Xp.sys [2006-6-29 2383152]
    S3 BELKIN;Belkin Wireless G USB Network Adapter;c:\windows\system32\drivers\BLKWGU.sys [2008-3-8 238848]
    S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-9-27 10664]
    S3 SDTHOOK;SDTHOOK;c:\windows\system32\drivers\SDTHOOK.SYS [2008-1-14 44928]
    S4 Belkin 54g Wireless USB Network Adapter Service;Belkin 54g Wireless USB Network Adapter;c:\program files\belkin\belkin wireless network utility\WLService.exe [2005-11-29 49152]
    S4 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
    S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-6-5 136176]
    S4 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]

    =============== Created Last 30 ================

    2010-09-04 00:27:50    0    d-----w-    c:\docume~1\bryan\applic~1\Malwarebytes
    2010-09-04 00:27:36    38224    ----a-w-    c:\windows\system32\drivers\mbamswissarmy.sys
    2010-09-04 00:27:35    20952    ----a-w-    c:\windows\system32\drivers\mbam.sys
    2010-09-04 00:27:35    0    d-----w-    c:\program files\Malwarebytes' Anti-Malware
    2010-09-04 00:27:35    0    d-----w-    c:\docume~1\alluse~1\applic~1\Malwarebytes
    2010-08-28 23:50:00    38848    ----a-w-    c:\windows\avastSS.scr
    2010-08-28 23:20:09    0    d-----w-    c:\windows\system32\wbem\Repository
    2010-08-28 13:27:47    664    ----a-w-    c:\windows\system32\d3d9caps.dat
    2010-08-28 12:01:53    120    ----a-w-    c:\windows\Wdeqo.dat
    2010-08-28 12:01:53    0    ----a-w-    c:\windows\Scitiwakeco.bin

    ==================== Find3M  ====================

    2010-07-27 06:30:35    8462336    ------w-    c:\windows\system32\dllcache\shell32.dll
    2010-06-30 12:31:35    149504    ----a-w-    c:\windows\system32\schannel.dll
    2010-06-30 12:31:35    149504    ------w-    c:\windows\system32\dllcache\schannel.dll
    2010-06-23 13:44:04    1851904    ----a-w-    c:\windows\system32\win32k.sys
    2010-06-23 13:44:04    1851904    ------w-    c:\windows\system32\dllcache\win32k.sys
    2010-06-23 12:06:51    70656    ------w-    c:\windows\system32\dllcache\ie4uinit.exe
    2010-06-23 12:06:51    13824    ------w-    c:\windows\system32\dllcache\ieudinit.exe
    2010-06-21 15:27:11    354304    ------w-    c:\windows\system32\dllcache\srv.sys
    2010-06-18 13:36:12    3558912    ------w-    c:\windows\system32\dllcache\moviemk.exe
    2010-06-17 15:12:57    634656    ------w-    c:\windows\system32\dllcache\iexplore.exe
    2010-06-17 15:11:25    161792    ------w-    c:\windows\system32\dllcache\ieakui.dll
    2010-06-17 14:03:00    80384    ----a-w-    c:\windows\system32\iccvid.dll
    2010-06-14 14:31:20    744448    ------w-    c:\windows\system32\dllcache\helpsvc.exe
    2010-06-14 07:41:45    1172480    ----a-w-    c:\windows\system32\msxml3.dll
    2010-06-14 07:41:45    1172480    ------w-    c:\windows\system32\dllcache\msxml3.dll
    2006-01-03 02:51:23    56    --sh--r-    c:\windows\system32\A114E4DA28.sys
    2009-12-14 02:07:34    952    --sha-w-    c:\windows\system32\KGyGaAvL.sys
    2008-09-05 12:23:39    32768    --sha-w-    c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008090520080906\index.dat

    ============= FINISH: 21:53:03.75 ===============


    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 11/29/2005 8:34:53 PM
    System Uptime: 9/4/2010 8:52:09 PM (1 hours ago)

    Motherboard: Dell Inc.           |  | 0RD203
    Processor:               Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 144 GiB total, 56.954 GiB free.
    D: is CDROM ()
    E: is CDROM (CDFS)
    F: is Removable

    ==== Disabled Device Manager Items =============

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: AGN Virtual Network Adapter
    Device ID: ROOT\NET\0000
    Manufacturer: AT&T
    Name: AGN Virtual Network Adapter
    PNP Device ID: ROOT\NET\0000
    Service: avpnnic

    ==== System Restore Points ===================

    RP1689: 6/6/2010 6:46:53 PM - System Checkpoint
    RP1690: 6/6/2010 7:34:02 PM - Installed BlackBerry Desktop Software 5.0.1.
    RP1691: 6/7/2010 7:46:57 PM - System Checkpoint
    RP1692: 6/8/2010 8:15:56 PM - System Checkpoint
    RP1693: 6/9/2010 8:48:06 PM - System Checkpoint
    RP1694: 6/10/2010 10:09:43 PM - System Checkpoint
    RP1695: 6/11/2010 10:47:04 PM - System Checkpoint
    RP1696: 6/13/2010 12:13:15 AM - System Checkpoint
    RP1697: 6/14/2010 12:47:16 AM - System Checkpoint
    RP1698: 6/15/2010 4:42:33 AM - System Checkpoint
    RP1699: 6/15/2010 8:16:02 PM - Software Distribution Service 3.0
    RP1700: 6/16/2010 8:47:26 PM - System Checkpoint
    RP1701: 6/17/2010 9:49:09 PM - System Checkpoint
    RP1702: 6/18/2010 6:32:52 AM - Software Distribution Service 3.0
    RP1703: 6/19/2010 6:47:18 AM - System Checkpoint
    RP1704: 6/20/2010 7:32:18 AM - System Checkpoint
    RP1705: 6/21/2010 7:56:18 AM - System Checkpoint
    RP1706: 6/22/2010 8:56:17 AM - System Checkpoint
    RP1707: 6/22/2010 9:24:57 PM - avast! Free Antivirus Setup
    RP1708: 6/22/2010 9:28:36 PM - Removed RollerCoaster Tycoon 3 Platinum
    RP1709: 6/22/2010 9:46:55 PM - Removed Musicmatch for Windows Media Player
    RP1710: 6/23/2010 9:56:14 PM - System Checkpoint
    RP1711: 6/24/2010 10:40:42 PM - System Checkpoint
    RP1712: 6/25/2010 11:28:09 PM - System Checkpoint
    RP1713: 6/27/2010 12:40:11 AM - System Checkpoint
    RP1714: 6/27/2010 1:15:57 PM - Software Distribution Service 3.0
    RP1715: 6/28/2010 2:14:03 PM - System Checkpoint
    RP1716: 6/29/2010 2:18:36 PM - System Checkpoint
    RP1717: 6/30/2010 3:18:36 PM - System Checkpoint
    RP1718: 7/1/2010 4:00:45 PM - System Checkpoint
    RP1719: 7/3/2010 2:36:52 AM - System Checkpoint
    RP1720: 7/4/2010 3:00:47 AM - System Checkpoint
    RP1721: 7/5/2010 4:00:48 AM - System Checkpoint
    RP1722: 7/6/2010 5:00:49 AM - System Checkpoint
    RP1723: 7/7/2010 6:00:53 AM - System Checkpoint
    RP1724: 7/8/2010 6:15:03 AM - System Checkpoint
    RP1725: 7/9/2010 7:00:55 AM - System Checkpoint
    RP1726: 7/10/2010 8:00:58 AM - System Checkpoint
    RP1727: 7/11/2010 9:00:59 AM - System Checkpoint
    RP1728: 7/12/2010 10:01:02 AM - System Checkpoint
    RP1729: 7/13/2010 11:01:04 AM - System Checkpoint
    RP1730: 7/14/2010 12:01:04 PM - System Checkpoint
    RP1731: 7/15/2010 1:01:07 PM - System Checkpoint
    RP1732: 7/16/2010 2:01:09 PM - System Checkpoint
    RP1733: 7/17/2010 2:13:12 PM - System Checkpoint
    RP1734: 7/18/2010 2:54:38 PM - System Checkpoint
    RP1735: 7/19/2010 3:26:58 PM - System Checkpoint
    RP1736: 7/20/2010 4:39:02 PM - System Checkpoint
    RP1737: 7/20/2010 8:57:18 PM - Software Distribution Service 3.0
    RP1738: 7/21/2010 9:39:03 PM - System Checkpoint
    RP1739: 7/23/2010 12:38:07 AM - System Checkpoint
    RP1740: 7/23/2010 10:51:43 AM - Restore Operation
    RP1741: 7/24/2010 11:00:23 AM - System Checkpoint
    RP1742: 7/25/2010 11:59:20 AM - System Checkpoint
    RP1743: 7/26/2010 1:11:21 PM - System Checkpoint
    RP1744: 7/27/2010 1:23:21 PM - System Checkpoint
    RP1745: 7/28/2010 1:59:23 PM - System Checkpoint
    RP1746: 7/29/2010 2:59:24 PM - System Checkpoint
    RP1747: 7/30/2010 3:59:24 PM - System Checkpoint
    RP1748: 7/31/2010 4:43:02 PM - System Checkpoint
    RP1749: 8/1/2010 5:43:02 PM - System Checkpoint
    RP1750: 8/2/2010 6:43:05 PM - System Checkpoint
    RP1751: 8/3/2010 7:43:07 PM - System Checkpoint
    RP1752: 8/4/2010 8:43:10 PM - System Checkpoint
    RP1753: 8/5/2010 9:43:12 PM - System Checkpoint
    RP1754: 8/6/2010 10:43:14 PM - System Checkpoint
    RP1755: 8/7/2010 11:43:16 PM - System Checkpoint
    RP1756: 8/9/2010 12:43:21 AM - System Checkpoint
    RP1757: 8/10/2010 1:43:22 AM - System Checkpoint
    RP1758: 8/11/2010 2:43:24 AM - System Checkpoint
    RP1759: 8/12/2010 3:43:24 AM - System Checkpoint
    RP1760: 8/13/2010 3:43:28 AM - System Checkpoint
    RP1761: 8/14/2010 7:07:08 PM - Software Distribution Service 3.0
    RP1762: 8/15/2010 7:32:49 PM - System Checkpoint
    RP1763: 8/16/2010 7:37:20 PM - System Checkpoint
    RP1764: 8/17/2010 8:37:23 PM - System Checkpoint
    RP1765: 8/18/2010 9:37:24 PM - System Checkpoint
    RP1766: 8/19/2010 10:37:26 PM - System Checkpoint
    RP1767: 8/20/2010 11:37:29 PM - System Checkpoint
    RP1768: 8/22/2010 12:37:30 AM - System Checkpoint
    RP1769: 8/23/2010 1:37:36 AM - System Checkpoint
    RP1770: 8/24/2010 2:37:39 AM - System Checkpoint
    RP1771: 8/25/2010 3:37:41 AM - System Checkpoint
    RP1772: 8/26/2010 4:19:58 AM - System Checkpoint
    RP1773: 8/27/2010 5:19:58 AM - System Checkpoint
    RP1774: 8/28/2010 6:20:02 AM - System Checkpoint
    RP1775: 8/28/2010 7:38:01 AM - Restore Operation
    RP1776: 8/28/2010 5:55:21 PM - Restore Operation
    RP1777: 8/28/2010 6:18:52 PM - Restore Operation
    RP1778: 8/28/2010 6:49:50 PM - avast! Free Antivirus Setup
    RP1779: 8/29/2010 6:53:32 PM - System Checkpoint
    RP1780: 8/30/2010 10:45:19 PM - System Checkpoint
    RP1781: 8/31/2010 11:34:49 PM - System Checkpoint
    RP1782: 9/2/2010 12:30:37 AM - System Checkpoint
    RP1783: 9/3/2010 1:15:32 AM - System Checkpoint
    RP1784: 9/4/2010 2:02:19 AM - System Checkpoint

    ==== Installed Programs ======================


    1600
    1600_Help
    1600Trb
    Acrobat.com
    Adobe AIR
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Media Player
    Adobe Reader 9.3.3
    Adobe Shockwave Player 11.5
    AiO_Scan
    AiOSoftware
    AnswerWorks 4.0 Runtime - English
    AnswerWorks 5.0 English Runtime
    AOLIcon
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    AT&T Global Network Client
    AutoUpdate
    avast! Free Antivirus
    Belkin 54g USB Network Adapter
    BlackBerry Desktop Software 4.1
    BlackBerry Desktop Software 5.0.1
    BlackBerry v4.1.0 for the 7520 Wireless Handheld
    Bonjour
    BufferChm
    Comcast High-Speed Internet Install Wizard
    Comcast Video Mail - Version 3.4 Build 3778
    Copy
    Corel Photo Album 6
    CP_AtenaShokunin1Config
    cp_dwShrek2Albums1
    cp_dwShrek2Cards1
    Creative MediaSource
    CreativeProjects
    CreativeProjectsTemplates
    CueTour
    Dell Digital Jukebox Driver
    Dell Driver Reset Tool
    Dell System Restore
    Destinations
    Director
    DivX
    DocProc
    DocumentViewer
    EssBase v6.5
    Family Tree Maker 2006
    Fax
    Form Fill (Windows Live Toolbar)
    Garmin City Navigator North America NT 2010.10
    Garmin Communicator Plugin
    Garmin POI Loader
    Garmin USB Drivers
    Garmin WebUpdater
    GemMaster Mystic
    getPlus(R) for Adobe
    Google Chrome
    Google Earth
    Google Earth Plug-in
    Google Update Helper
    High Definition Audio Driver Package - KB835221
    HijackThis 1.99.1
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 10 (KB903157)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB954708)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB970653-v3)
    Hotfix for Windows XP (KB976098-v2)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    hp deskjet 950c series (Remove only)
    HP Image Zone 4.7
    HP Product Assistant
    HP PSC & OfficeJet 4.7
    HP Software Update
    HPSystemDiagnostics
    HumanConcepts OrgViewer 5
    InstantShare
    Intel(R) 537EP V9x DF PCI Modem
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PRO Network Connections Drivers
    Intel(R) PROSet for Wired Connections
    Internet Explorer Default Page
    iPod for Windows 2005-02-22
    iTunes
    J2SE Runtime Environment 5.0 Update 10
    J2SE Runtime Environment 5.0 Update 11
    J2SE Runtime Environment 5.0 Update 6
    J2SE Runtime Environment 5.0 Update 9
    Java 2 Runtime Environment, SE v1.4.2_03
    Java(TM) SE Runtime Environment 6 Update 1
    Junk Mail filter update
    Kids Cam Show and Share Creativity Center
    Macromedia Flash Player
    Malwarebytes' Anti-Malware
    Map Button (Windows Live Toolbar)
    Microsoft .NET Framework 1.0 Hotfix (KB953295)
    Microsoft .NET Framework 1.0 Hotfix (KB979904)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Choice Guard
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft LifeCam
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2000 Professional
    Microsoft Office Word Viewer 2003
    Microsoft Plus! Digital Media Edition Installer
    Microsoft Plus! Photo Story 2 LE
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Mirage Driver 1.1
    Modem Event Monitor
    Modem Helper
    Modem On Hold
    Mozilla Firefox (3.5.11)
    MSVCRT
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MyDSC2
    OneCare Advisor (Windows Live Toolbar)
    PanoStandAlone
    Photo Viewer 2.3
    PhotoGallery
    Popup Blocker (Windows Live Toolbar)
    PowerDVD 5.5
    ProductContext
    PTS Waterfall Charter 1.11
    QFolder
    QuickTime
    Readme
    RealPlayer Basic
    RootsMagic 3.2.2.0
    Rosetta Stone V3
    Roxio Content 9
    Roxio MyDVD 9 Studio Premier
    Roxio Update Manager
    Scan
    ScannerCopy
    Security Update for CAPICOM (KB931906)
    Security Update for Windows Internet Explorer 7 (KB2183461)
    Security Update for Windows Internet Explorer 7 (KB928090)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB933566)
    Security Update for Windows Internet Explorer 7 (KB937143)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Internet Explorer 7 (KB969897)
    Security Update for Windows Internet Explorer 7 (KB972260)
    Security Update for Windows Internet Explorer 7 (KB974455)
    Security Update for Windows Internet Explorer 7 (KB976325)
    Security Update for Windows Internet Explorer 7 (KB978207)
    Security Update for Windows Internet Explorer 7 (KB982381)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 10 (KB936782)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969898)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971486)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973525)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977165)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978251)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981349)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Segoe UI
    SkinsHP1
    Smart Menus (Windows Live Toolbar)
    Sonic Encoders
    Sonic MyDVD LE
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sound Blaster Live! 24-bit
    The Weather Channel Toolbar
    TrayApp
    TurboTax 2008
    TurboTax 2008 wiliper
    TurboTax 2008 WinPerFedFormset
    TurboTax 2008 WinPerProgramHelp
    TurboTax 2008 WinPerReleaseEngine
    TurboTax 2008 WinPerTaxSupport
    TurboTax 2008 WinPerUserEducation
    TurboTax 2008 wmdiper
    TurboTax 2008 wrapper
    TurboTax 2009
    TurboTax 2009 wiliper
    TurboTax 2009 WinPerFedFormset
    TurboTax 2009 WinPerReleaseEngine
    TurboTax 2009 WinPerTaxSupport
    TurboTax 2009 wmdiper
    TurboTax 2009 wrapper
    TurboTax Deluxe 2005
    TurboTax Deluxe 2007
    TurboTax Deluxe Deduction Maximizer 2006
    U.B. Funkeys
    Ultimate Mahjongg 15
    Unload
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 7 (KB980182)
    Update for Windows Media Player 10 (KB910393)
    Update for Windows Media Player 10 (KB913800)
    Update for Windows Media Player 10 (KB926251)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    Update Rollup 2 for Windows XP Media Center Edition 2005
    USB MassStorage CardReader
    Weather Add-in for Windows Live Toolbar
    WebFldrs XP
    WebReg
    WexTech AnswerWorks
    WildTangent Web Driver
    Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0)
    Windows Internet Explorer 7
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Family Safety
    Windows Live Favorites for Windows Live Toolbar
    Windows Live Mail
    Windows Live Messenger
    Windows Live Outlook Toolbar (Windows Live Toolbar)
    Windows Live Photo Gallery
    Windows Live Sign-in Assistant
    Windows Live Sync
    Windows Live Toolbar
    Windows Live Toolbar Extension (Windows Live Toolbar)
    Windows Live Toolbar Feed Detector (Windows Live Toolbar)
    Windows Live Upload Tool
    Windows Live Writer
    Windows Media Format 11 runtime
    Windows Media Player 10
    Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
    Windows Media Player 11
    Windows Media Player Firefox Plugin
    Windows XP Media Center Edition 2005 KB925766
    Windows XP Media Center Edition 2005 KB973768
    Windows XP Service Pack 3
    WinZip

    ==== Event Viewer Messages From Past Week ========

    9/3/2010 7:15:24 PM, error: Service Control Manager [7023]  - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error:  Access is denied.
    9/3/2010 4:02:36 PM, error: Service Control Manager [7000]  - The Background Intelligent Transfer Service service failed to start due to the following error:  All pipe instances are busy.
    9/3/2010 4:02:36 PM, error: DCOM [10005]  - DCOM got error "%231" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097}
    9/3/2010 4:01:04 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the Schedule service.
    9/3/2010 4:00:34 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the SharedAccess service.
    9/3/2010 3:59:34 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the wuauserv service.
    9/3/2010 11:16:52 PM, error: Service Control Manager [7032]  - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error:  An instance of the service is already running.
    9/2/2010 6:04:45 AM, error: Service Control Manager [7034]  - The Windows Installer service terminated unexpectedly.  It has done this 1 time(s).
    9/1/2010 8:25:32 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the ShellHWDetection service.
    9/1/2010 8:25:32 PM, error: ipnathlp [32003]  - The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
    9/1/2010 8:25:02 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the WZCSVC service.
    8/31/2010 5:23:51 AM, error: Service Control Manager [7006]  - The ScRegSetValueExW call failed for Start with the following error:  Access is denied.
    8/30/2010 9:30:36 PM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
    8/28/2010 8:39:44 AM, error: DCOM [10005]  - DCOM got error "%1058" attempting to start the service SeaPort with arguments "-Service" in order to run the server: {D6381B4A-D254-46EB-9018-A62E0F4BA6BA}
    8/28/2010 7:42:19 AM, error: Ftdisk [49]  - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
    8/28/2010 7:42:19 AM, error: Ftdisk [45]  - The system could not sucessfully load the crash dump driver.
    8/28/2010 7:38:05 AM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    8/28/2010 7:37:13 AM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
    8/28/2010 7:35:49 AM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
    8/28/2010 7:35:49 AM, error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:  A device attached to the system is not functioning.
    8/28/2010 7:35:49 AM, error: Service Control Manager [7001]  - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:  A device attached to the system is not functioning.
    8/28/2010 7:35:49 AM, error: Service Control Manager [7001]  - The fssfltr service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
    8/28/2010 7:35:49 AM, error: Service Control Manager [7001]  - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
    8/28/2010 7:35:49 AM, error: Service Control Manager [7001]  - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:  A device attached to the system is not functioning.
    8/28/2010 7:35:49 AM, error: Service Control Manager [7001]  - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
    8/28/2010 7:26:53 AM, error: DCOM [10005]  - DCOM got error "%1058" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
    8/28/2010 6:28:58 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
    8/28/2010 6:28:17 PM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  Fips intelppm
    8/28/2010 6:21:43 PM, error: Print [19]  - Sharing printer failed + 1722, Printer HP PSC 1600 series share name HPPSC160.
    8/28/2010 5:57:44 PM, error: Print [19]  - Sharing printer failed + 1722, Printer Intuit Internal Printer share name Printer.

    ==== End Of File ===========================