Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Internet Explorer not responding due to win32/sirefef virus (or another possible virus)??

Started by Kayte , Aug 03 2012 01:01 AM

Next

Please log in to reply

35 replies to this topic

#1 Kayte

Member

Members
19 posts

Gender:Female

Posted 03 August 2012 - 01:01 AM

How do i get rid of this virus (or any other virus that may be causing problems on my computer)? About 2-3 weeks ago, I keep receiving the message "Internet Explorer cannot display the webpage." I scanned my computer using Microsoft Security Essentials to see if there was a virus and found out that there was one by the name of win32/sirefef. I also needed to update Microsoft Security Essentials, but when i tried to do that, the update couldn't complete because I "wasn't connected to the Internet." I'm sure I'm connected because I'm sharing the connection with another computer and it works fine.

I went to Microsoft's article "prevent and remove viruses and other malware" (http://support.microsoft.com/kb/129972/en-us) and followed the steps. One of the steps was to reset the Internet Proxy settings in order for me to download/install things that I needed, and so I manually reset it myself (since I couldn't run the "fix it for me program"). After I did this, the message still pops up. What can I do now? Any help is appreciated. Thanks in advance!

The infected computer is a Windows XP, and I'm currently using another PC since the infected computer cannot access the Internet.

Back to top

BC Ads
BleepingComputer.com

#2 narenxp

Forum Addict

BC Advisor
16,365 posts

Gender:Male
Location:India

Posted 03 August 2012 - 01:08 AM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Download

FSS

Checkmark all the boxes

Click on "Scan".
Please copy and paste the log to your reply.

Back to top

#3 Kayte

Member

Members
19 posts

Gender:Female

Posted 03 August 2012 - 01:14 AM

I'm using a mac. Am I able to save the downloads on a flash drive and run it on the infected computer?

Back to top

#4 narenxp

Forum Addict

BC Advisor
16,365 posts

Gender:Male
Location:India

Posted 03 August 2012 - 01:25 AM

Yes

Back to top

#5 Kayte

Member

Members
19 posts

Gender:Female

Posted 03 August 2012 - 12:06 PM

Here is the TDSSkiller log

09:58:28.0234 0144 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
09:58:28.0406 0144 ============================================================
09:58:28.0406 0144 Current date / time: 2012/08/03 09:58:28.0406
09:58:28.0406 0144 SystemInfo:
09:58:28.0406 0144
09:58:28.0406 0144 OS Version: 5.1.2600 ServicePack: 3.0
09:58:28.0406 0144 Product type: Workstation
09:58:28.0406 0144 ComputerName: MY_BABY
09:58:28.0406 0144 UserName: Amy
09:58:28.0406 0144 Windows directory: C:\WINDOWS
09:58:28.0406 0144 System windows directory: C:\WINDOWS
09:58:28.0406 0144 Processor architecture: Intel x86
09:58:28.0406 0144 Number of processors: 2
09:58:28.0406 0144 Page size: 0x1000
09:58:28.0406 0144 Boot type: Normal boot
09:58:28.0406 0144 ============================================================
09:58:30.0843 0144 Drive \Device\Harddisk0\DR0 - Size: 0x2540BE4000 (149.01 Gb), SectorSize: 0x200, Cylinders: 0x4BFC, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
09:58:30.0859 0144 Drive \Device\Harddisk1\DR3 - Size: 0x1DD180000 (7.45 Gb), SectorSize: 0x200, Cylinders: 0x3CD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
09:58:30.0859 0144 ============================================================
09:58:30.0859 0144 \Device\Harddisk0\DR0:
09:58:30.0859 0144 MBR partitions:
09:58:30.0859 0144 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x139C5, BlocksNum 0x129ED876
09:58:30.0859 0144 \Device\Harddisk1\DR3:
09:58:30.0859 0144 MBR partitions:
09:58:30.0859 0144 \Device\Harddisk1\DR3\Partition0: MBR, Type 0xB, StartLBA 0x20, BlocksNum 0xEE8BE0
09:58:30.0859 0144 ============================================================
09:58:30.0859 0144 C: <-> \Device\Harddisk0\DR0\Partition0
09:58:30.0859 0144 ============================================================
09:58:30.0859 0144 Initialize success
09:58:30.0859 0144 ============================================================
09:58:57.0765 0800 ============================================================
09:58:57.0765 0800 Scan started
09:58:57.0765 0800 Mode: Manual; TDLFS;
09:58:57.0765 0800 ============================================================
09:58:57.0968 0800 Abiosdsk - ok
09:58:57.0984 0800 abp480n5 - ok
09:58:58.0046 0800 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
09:58:58.0046 0800 ACPI - ok
09:58:58.0078 0800 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
09:58:58.0078 0800 ACPIEC - ok
09:58:58.0171 0800 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
09:58:58.0171 0800 AdobeFlashPlayerUpdateSvc - ok
09:58:58.0187 0800 adpu160m - ok
09:58:58.0218 0800 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
09:58:58.0218 0800 aec - ok
09:58:58.0265 0800 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys
09:58:58.0281 0800 AFD - ok
09:58:58.0296 0800 Aha154x - ok
09:58:58.0312 0800 aic78u2 - ok
09:58:58.0343 0800 aic78xx - ok
09:58:58.0390 0800 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
09:58:58.0406 0800 Alerter - ok
09:58:58.0453 0800 ALG (f1958fbf86d5c004cf19a5951a9514b7) C:\WINDOWS\System32\alg.exe
09:58:58.0453 0800 ALG - ok
09:58:58.0468 0800 AliIde - ok
09:58:58.0484 0800 amsint - ok
09:58:58.0531 0800 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:\WINDOWS\System32\appmgmts.dll
09:58:58.0562 0800 AppMgmt - ok
09:58:58.0578 0800 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
09:58:58.0625 0800 Arp1394 - ok
09:58:58.0625 0800 asc - ok
09:58:58.0656 0800 asc3350p - ok
09:58:58.0671 0800 asc3550 - ok
09:58:58.0828 0800 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
09:58:58.0828 0800 aspnet_state - ok
09:58:58.0859 0800 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:58:58.0875 0800 AsyncMac - ok
09:58:58.0906 0800 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
09:58:58.0953 0800 atapi - ok
09:58:58.0968 0800 Atdisk - ok
09:58:59.0000 0800 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
09:58:59.0046 0800 Atmarpc - ok
09:58:59.0078 0800 AudioSrv (db66db626e4882ebef55f136f12c1829) C:\WINDOWS\System32\audiosrv.dll
09:58:59.0109 0800 AudioSrv - ok
09:58:59.0156 0800 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
09:58:59.0156 0800 audstub - ok
09:58:59.0218 0800 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
09:58:59.0218 0800 Beep - ok
09:58:59.0265 0800 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
09:58:59.0281 0800 BITS - ok
09:58:59.0312 0800 Browser (e3cfccdda4edd1d0dc9168b2e18f27b8) C:\WINDOWS\System32\browser.dll
09:58:59.0328 0800 Browser - ok
09:58:59.0328 0800 catchme - ok
09:58:59.0359 0800 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
09:58:59.0359 0800 cbidf2k - ok
09:58:59.0375 0800 cd20xrnt - ok
09:58:59.0390 0800 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
09:58:59.0390 0800 Cdaudio - ok
09:58:59.0437 0800 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
09:58:59.0500 0800 Cdfs - ok
09:58:59.0531 0800 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
09:58:59.0578 0800 Cdrom - ok
09:58:59.0609 0800 cercsr6 (84853b3fd012251690570e9e7e43343f) C:\WINDOWS\system32\drivers\cercsr6.sys
09:58:59.0625 0800 cercsr6 - ok
09:58:59.0640 0800 Changer - ok
09:58:59.0671 0800 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
09:58:59.0703 0800 CiSvc - ok
09:58:59.0718 0800 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
09:58:59.0765 0800 ClipSrv - ok
09:58:59.0796 0800 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:58:59.0796 0800 clr_optimization_v2.0.50727_32 - ok
09:58:59.0796 0800 CmdIde - ok
09:58:59.0828 0800 COMSysApp - ok
09:58:59.0875 0800 Cpqarray - ok
09:58:59.0906 0800 Creative Service for CDROM Access (3c8b6609712f4ff78e521f6dcfc4032b) C:\WINDOWS\system32\CTsvcCDA.EXE
09:58:59.0906 0800 Creative Service for CDROM Access - ok
09:58:59.0937 0800 CryptSvc (10654f9ddcea9c46cfb77554231be73b) C:\WINDOWS\System32\cryptsvc.dll
09:58:59.0937 0800 CryptSvc - ok
09:58:59.0984 0800 ctac32k (1e41b8a10b9d78240c8bfacc269db155) C:\WINDOWS\system32\drivers\ctac32k.sys
09:59:00.0000 0800 ctac32k - ok
09:59:00.0031 0800 ctaud2k (9bf1aa0eac9c7d33ce4d8a152e151f60) C:\WINDOWS\system32\drivers\ctaud2k.sys
09:59:00.0031 0800 ctaud2k - ok
09:59:00.0078 0800 ctdvda2k (29f78d59b053cb8778f8426e4e24099c) C:\WINDOWS\system32\drivers\ctdvda2k.sys
09:59:00.0078 0800 ctdvda2k - ok
09:59:00.0093 0800 ctprxy2k (a6f4c70da545230d001915d8eb08d881) C:\WINDOWS\system32\drivers\ctprxy2k.sys
09:59:00.0093 0800 ctprxy2k - ok
09:59:00.0125 0800 ctsfm2k (b39e55c1c5e28e016ee3848f2e34c205) C:\WINDOWS\system32\drivers\ctsfm2k.sys
09:59:00.0140 0800 ctsfm2k - ok
09:59:00.0140 0800 dac2w2k - ok
09:59:00.0171 0800 dac960nt - ok
09:59:00.0234 0800 DcomLaunch (01095febf33beea00c2a0730b9b3ec28) C:\WINDOWS\system32\rpcss.dll
09:59:00.0234 0800 DcomLaunch - ok
09:59:00.0281 0800 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
09:59:00.0281 0800 Dhcp - ok
09:59:00.0328 0800 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
09:59:00.0359 0800 Disk - ok
09:59:00.0437 0800 DLABOIOM (d8d58a84f3ece3359df95fd2e459b330) C:\WINDOWS\system32\DLA\DLABOIOM.SYS
09:59:00.0453 0800 DLABOIOM - ok
09:59:00.0468 0800 DLACDBHM (ec6ae8bc9f773382d2eed49e4dfdae2a) C:\WINDOWS\system32\Drivers\DLACDBHM.SYS
09:59:00.0484 0800 DLACDBHM - ok
09:59:00.0500 0800 DLADResN (27c78078bd9c4f2de2ad3eb04bfe101b) C:\WINDOWS\system32\DLA\DLADResN.SYS
09:59:00.0515 0800 DLADResN - ok
09:59:00.0531 0800 DLAIFS_M (7f2d93e560b763ef5d11422d78da8ed0) C:\WINDOWS\system32\DLA\DLAIFS_M.SYS
09:59:00.0578 0800 DLAIFS_M - ok
09:59:00.0593 0800 DLAOPIOM (f643637de6aac57e38d197aa63d9ea74) C:\WINDOWS\system32\DLA\DLAOPIOM.SYS
09:59:00.0609 0800 DLAOPIOM - ok
09:59:00.0625 0800 DLAPoolM (340705474807f57a46d59d18fc2959f1) C:\WINDOWS\system32\DLA\DLAPoolM.SYS
09:59:00.0640 0800 DLAPoolM - ok
09:59:00.0656 0800 DLARTL_N (0605b66052f82b6f07204dbdb61c13ff) C:\WINDOWS\system32\Drivers\DLARTL_N.SYS
09:59:00.0687 0800 DLARTL_N - ok
09:59:00.0703 0800 DLAUDFAM (6984ea763907c045ce813468882bc587) C:\WINDOWS\system32\DLA\DLAUDFAM.SYS
09:59:00.0750 0800 DLAUDFAM - ok
09:59:00.0765 0800 DLAUDF_M (12b30c449cfd36adbed53eb6560933c6) C:\WINDOWS\system32\DLA\DLAUDF_M.SYS
09:59:00.0812 0800 DLAUDF_M - ok
09:59:00.0828 0800 dmadmin - ok
09:59:00.0875 0800 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
09:59:00.0937 0800 dmboot - ok
09:59:00.0953 0800 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
09:59:00.0984 0800 dmio - ok
09:59:01.0000 0800 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
09:59:01.0000 0800 dmload - ok
09:59:01.0046 0800 dmserver (1639d9964c9e1b2ecca95c8217d3e70d) C:\WINDOWS\System32\dmserver.dll
09:59:01.0046 0800 dmserver - ok
09:59:01.0078 0800 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
09:59:01.0078 0800 DMusic - ok
09:59:01.0109 0800 Dnscache (aac8ffbfd61e784fa3bac851d4a0bd5f) C:\WINDOWS\System32\dnsrslvr.dll
09:59:01.0125 0800 Dnscache - ok
09:59:01.0171 0800 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
09:59:01.0234 0800 Dot3svc - ok
09:59:01.0250 0800 dpti2o - ok
09:59:01.0281 0800 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
09:59:01.0281 0800 drmkaud - ok
09:59:01.0312 0800 DRVMCDB (fd0f95981fef9073659d8ec58e40aa3c) C:\WINDOWS\system32\Drivers\DRVMCDB.SYS
09:59:01.0343 0800 DRVMCDB - ok
09:59:01.0343 0800 DRVNDDM (b4869d320428cdc5ec4d7f5e808e99b5) C:\WINDOWS\system32\Drivers\DRVNDDM.SYS
09:59:02.0687 0800 DRVNDDM - ok
09:59:02.0703 0800 EagleNT - ok
09:59:02.0734 0800 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
09:59:02.0781 0800 EapHost - ok
09:59:02.0890 0800 ehRecvr (8301243bde5b6cd316d79c0191d50d9a) C:\WINDOWS\eHome\ehRecvr.exe
09:59:02.0890 0800 ehRecvr - ok
09:59:02.0937 0800 ehSched (a53243709439ac2a4c216b817f8d7411) C:\WINDOWS\eHome\ehSched.exe
09:59:02.0953 0800 ehSched - ok
09:59:03.0000 0800 emupia (5d70013d7e6602ec0a482f2985558c2d) C:\WINDOWS\system32\drivers\emupia2k.sys
09:59:03.0000 0800 emupia - ok
09:59:03.0031 0800 ERSvc (67dff7bbbd0e80aab7b3cf061448db8a) C:\WINDOWS\System32\ersvc.dll
09:59:03.0031 0800 ERSvc - ok
09:59:03.0078 0800 Eventlog (0e776ed5f7cc9f94299e70461b7b8185) C:\WINDOWS\system32\services.exe
09:59:03.0078 0800 Eventlog - ok
09:59:03.0109 0800 EventSystem (60d1a6342238378bfb7545c81ee3606c) C:\WINDOWS\system32\es.dll
09:59:03.0125 0800 EventSystem - ok
09:59:03.0140 0800 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
09:59:03.0156 0800 Fastfat - ok
09:59:03.0187 0800 FastUserSwitchingCompatibility (6815def9b810aefac107eeaf72da6f82) C:\WINDOWS\System32\shsvcs.dll
09:59:03.0187 0800 FastUserSwitchingCompatibility - ok
09:59:03.0203 0800 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
09:59:03.0234 0800 Fdc - ok
09:59:03.0265 0800 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
09:59:03.0296 0800 Fips - ok
09:59:03.0390 0800 FLEXnet Licensing Service (73081cf28f0ae20a52ca4f67cee6e6b0) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
09:59:03.0562 0800 FLEXnet Licensing Service - ok
09:59:03.0578 0800 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
09:59:03.0593 0800 Flpydisk - ok
09:59:03.0640 0800 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
09:59:03.0671 0800 FltMgr - ok
09:59:03.0812 0800 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
09:59:03.0812 0800 FontCache3.0.0.0 - ok
09:59:03.0828 0800 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:59:03.0828 0800 Fs_Rec - ok
09:59:03.0859 0800 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
09:59:03.0859 0800 Ftdisk - ok
09:59:03.0890 0800 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
09:59:03.0906 0800 gameenum - ok
09:59:03.0953 0800 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
09:59:03.0968 0800 Gpc - ok
09:59:04.0125 0800 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
09:59:04.0125 0800 gupdate - ok
09:59:04.0140 0800 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
09:59:04.0140 0800 gupdatem - ok
09:59:04.0187 0800 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
09:59:04.0203 0800 gusvc - ok
09:59:04.0265 0800 ha10kx2k (7ec50a84b89dae3458cb0308739b80de) C:\WINDOWS\system32\drivers\ha10kx2k.sys
09:59:04.0281 0800 ha10kx2k - ok
09:59:04.0312 0800 hap16v2k (02a6bad64177c56d8b86b198b38db361) C:\WINDOWS\system32\drivers\hap16v2k.sys
09:59:04.0312 0800 hap16v2k - ok
09:59:04.0375 0800 helpsvc (8827911a8c37e40c027cbfc88e69d967) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
09:59:04.0375 0800 helpsvc - ok
09:59:04.0390 0800 HidServ - ok
09:59:04.0437 0800 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
09:59:04.0453 0800 hidusb - ok
09:59:04.0484 0800 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
09:59:04.0546 0800 hkmsvc - ok
09:59:04.0562 0800 hpn - ok
09:59:04.0750 0800 hpqcxs08 (5da42d24712e00728cea2342a65009b2) C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
09:59:04.0750 0800 hpqcxs08 - ok
09:59:04.0796 0800 hpqddsvc (d86a39bf100069444d026d22d9a6e555) C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
09:59:04.0796 0800 hpqddsvc - ok
09:59:04.0843 0800 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
09:59:04.0843 0800 HPZid412 - ok
09:59:04.0859 0800 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
09:59:04.0859 0800 HPZipr12 - ok
09:59:04.0890 0800 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
09:59:04.0890 0800 HPZius12 - ok
09:59:04.0921 0800 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys
09:59:04.0921 0800 HTTP - ok
09:59:04.0953 0800 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
09:59:04.0968 0800 HTTPFilter - ok
09:59:04.0984 0800 i2omgmt - ok
09:59:05.0000 0800 i2omp - ok
09:59:05.0046 0800 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\drivers\i8042prt.sys
09:59:05.0078 0800 i8042prt - ok
09:59:05.0250 0800 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:59:05.0265 0800 idsvc - ok
09:59:05.0281 0800 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
09:59:05.0328 0800 Imapi - ok
09:59:05.0359 0800 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
09:59:05.0359 0800 ImapiService - ok
09:59:05.0390 0800 ini910u - ok
09:59:05.0421 0800 IntelIde - ok
09:59:05.0453 0800 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
09:59:05.0484 0800 intelppm - ok
09:59:05.0515 0800 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
09:59:05.0546 0800 Ip6Fw - ok
09:59:05.0562 0800 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:59:05.0578 0800 IpFilterDriver - ok
09:59:05.0593 0800 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
09:59:05.0640 0800 IpInIp - ok
09:59:05.0687 0800 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
09:59:05.0687 0800 IpNat - ok
09:59:05.0718 0800 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
09:59:05.0765 0800 IPSec - ok
09:59:05.0796 0800 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
09:59:05.0812 0800 IRENUM - ok
09:59:05.0859 0800 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
09:59:05.0890 0800 isapnp - ok
09:59:06.0062 0800 JavaQuickStarterService (e731921db2e17dcd3db472fad5549c57) C:\Program Files\Java\jre6\bin\jqs.exe
09:59:06.0062 0800 JavaQuickStarterService - ok
09:59:06.0078 0800 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
09:59:06.0109 0800 Kbdclass - ok
09:59:06.0125 0800 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
09:59:06.0156 0800 kbdhid - ok
09:59:06.0187 0800 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
09:59:06.0187 0800 kmixer - ok
09:59:06.0218 0800 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys
09:59:06.0265 0800 KSecDD - ok
09:59:06.0296 0800 lanmanserver (f385f4b02c535bffe1d70cab80838123) C:\WINDOWS\System32\srvsvc.dll
09:59:06.0296 0800 lanmanserver - ok
09:59:06.0328 0800 lanmanworkstation (1b67b632786fef1c1bbaef46c2f3f2e6) C:\WINDOWS\System32\wkssvc.dll
09:59:06.0359 0800 lanmanworkstation - ok
09:59:06.0375 0800 lbrtfdc - ok
09:59:06.0437 0800 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
09:59:06.0468 0800 LmHosts - ok
09:59:06.0546 0800 McrdSvc (df0a511f38f16016bf658fca0090cb87) C:\WINDOWS\ehome\mcrdsvc.exe
09:59:06.0562 0800 McrdSvc - ok
09:59:06.0578 0800 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
09:59:06.0609 0800 Messenger - ok
09:59:06.0640 0800 MHN (b7521f69c0a9b29d356157229376fb21) C:\WINDOWS\System32\mhn.dll
09:59:06.0640 0800 MHN - ok
09:59:06.0656 0800 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys
09:59:06.0656 0800 MHNDRV - ok
09:59:06.0687 0800 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
09:59:06.0703 0800 mnmdd - ok
09:59:06.0734 0800 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\system32\mnmsrvc.exe
09:59:06.0796 0800 mnmsrvc - ok
09:59:06.0828 0800 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
09:59:06.0859 0800 Modem - ok
09:59:06.0890 0800 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
09:59:06.0921 0800 Mouclass - ok
09:59:06.0968 0800 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
09:59:06.0968 0800 mouhid - ok
09:59:06.0984 0800 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
09:59:07.0015 0800 MountMgr - ok
09:59:07.0078 0800 MpFilter (d993bea500e7382dc4e760bf4f35efcb) C:\WINDOWS\system32\DRIVERS\MpFilter.sys
09:59:07.0078 0800 MpFilter - ok
09:59:07.0187 0800 MpKsld9c3edb0 (a69630d039c38018689190234f866d77) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A2CB8417-9DF6-40F9-B14A-45927CAF3295}\MpKsld9c3edb0.sys
09:59:07.0187 0800 MpKsld9c3edb0 - ok
09:59:07.0187 0800 mraid35x - ok
09:59:07.0218 0800 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
09:59:07.0218 0800 MRxDAV - ok
09:59:07.0265 0800 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:59:07.0328 0800 MRxSmb - ok
09:59:07.0359 0800 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\system32\msdtc.exe
09:59:07.0390 0800 MSDTC - ok
09:59:07.0406 0800 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
09:59:07.0484 0800 Msfs - ok
09:59:07.0500 0800 MSIServer - ok
09:59:07.0531 0800 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:59:07.0546 0800 MSKSSRV - ok
09:59:07.0687 0800 MsMpSvc (24516bf4e12a46cb67302e2cdcb8cddf) c:\Program Files\Microsoft Security Client\MsMpEng.exe
09:59:07.0687 0800 MsMpSvc - ok
09:59:07.0718 0800 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:59:07.0734 0800 MSPCLOCK - ok
09:59:07.0750 0800 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
09:59:07.0765 0800 MSPQM - ok
09:59:07.0812 0800 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
09:59:07.0812 0800 mssmbios - ok
09:59:07.0828 0800 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
09:59:07.0859 0800 Mup - ok
09:59:07.0921 0800 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
09:59:07.0984 0800 napagent - ok
09:59:08.0015 0800 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
09:59:08.0062 0800 NDIS - ok
09:59:08.0093 0800 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:59:08.0109 0800 NdisTapi - ok
09:59:08.0125 0800 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:59:08.0140 0800 Ndisuio - ok
09:59:08.0156 0800 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:59:08.0218 0800 NdisWan - ok
09:59:08.0265 0800 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys
09:59:08.0296 0800 NDProxy - ok
09:59:08.0343 0800 NeroCd2k (58b29812b8d23501d15d85dd72eacb34) C:\WINDOWS\system32\drivers\NeroCd2k.sys
09:59:08.0375 0800 NeroCd2k - ok
09:59:08.0421 0800 Net Driver HPZ12 (510c138564486ff926a3f773205c63d1) C:\WINDOWS\system32\HPZinw12.dll
09:59:08.0437 0800 Net Driver HPZ12 - ok
09:59:08.0453 0800 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
09:59:08.0484 0800 NetBIOS - ok
09:59:08.0500 0800 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
09:59:08.0562 0800 NetBT - ok
09:59:08.0593 0800 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
09:59:08.0656 0800 NetDDE - ok
09:59:08.0671 0800 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
09:59:08.0671 0800 NetDDEdsdm - ok
09:59:08.0718 0800 Netlogon (84885f9b82f4d55c6146ebf6065d75d2) C:\WINDOWS\system32\lsass.exe
09:59:08.0718 0800 Netlogon - ok
09:59:08.0765 0800 Netman (36739b39267914ba69ad0610a0299732) C:\WINDOWS\System32\netman.dll
09:59:08.0765 0800 Netman - ok
09:59:08.0906 0800 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:59:08.0906 0800 NetTcpPortSharing - ok
09:59:08.0921 0800 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
09:59:08.0937 0800 NIC1394 - ok
09:59:08.0968 0800 Nla (097722f235a1fb698bf9234e01b52637) C:\WINDOWS\System32\mswsock.dll
09:59:08.0984 0800 Nla - ok
09:59:09.0000 0800 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
09:59:09.0031 0800 Npfs - ok
09:59:09.0046 0800 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
09:59:09.0078 0800 Ntfs - ok
09:59:09.0093 0800 NtLmSsp (84885f9b82f4d55c6146ebf6065d75d2) C:\WINDOWS\system32\lsass.exe
09:59:09.0093 0800 NtLmSsp - ok
09:59:09.0156 0800 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
09:59:09.0203 0800 NtmsSvc - ok
09:59:09.0250 0800 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
09:59:09.0250 0800 Null - ok
09:59:09.0265 0800 nvatabus (52b64661469fa11e51c006099b251fa7) C:\WINDOWS\system32\DRIVERS\nvatabus.sys
09:59:09.0281 0800 nvatabus - ok
09:59:09.0312 0800 NVENETFD (2f4ca0052a50d122b9f0a2efa52dfa67) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
09:59:09.0312 0800 NVENETFD - ok
09:59:09.0328 0800 nvnetbus (197779dde275445ab253667832120ea7) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
09:59:09.0328 0800 nvnetbus - ok
09:59:09.0359 0800 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
09:59:09.0359 0800 NwlnkFlt - ok
09:59:09.0375 0800 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
09:59:09.0375 0800 NwlnkFwd - ok
09:59:09.0484 0800 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
09:59:09.0484 0800 odserv - ok
09:59:09.0531 0800 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
09:59:09.0531 0800 ohci1394 - ok
09:59:09.0578 0800 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
09:59:09.0578 0800 ose - ok
09:59:09.0625 0800 ossrv (c52548b920482db03af8b49babd9fc48) C:\WINDOWS\system32\drivers\ctoss2k.sys
09:59:09.0625 0800 ossrv - ok
09:59:09.0656 0800 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\drivers\Parport.sys
09:59:09.0656 0800 Parport - ok
09:59:09.0671 0800 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
09:59:09.0703 0800 PartMgr - ok
09:59:09.0718 0800 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
09:59:09.0718 0800 ParVdm - ok
09:59:09.0734 0800 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
09:59:09.0781 0800 PCI - ok
09:59:09.0796 0800 PCIDump - ok
09:59:09.0812 0800 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
09:59:09.0812 0800 PCIIde - ok
09:59:09.0859 0800 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
09:59:09.0890 0800 Pcmcia - ok
09:59:09.0906 0800 PDCOMP - ok
09:59:09.0921 0800 PDFRAME - ok
09:59:10.0078 0800 PDMWorks Workgroup Server (13b757ff90ef344112b2bee1c28b5960) C:\Program Files\SolidWorks Corp\SolidWorks Workgroup PDM\Vault\pdmwService.exe
09:59:10.0187 0800 PDMWorks Workgroup Server - ok
09:59:10.0296 0800 PDRELI - ok
09:59:10.0312 0800 PDRFRAME - ok
09:59:10.0343 0800 perc2 - ok
09:59:10.0359 0800 perc2hib - ok
09:59:10.0437 0800 PlugPlay (0e776ed5f7cc9f94299e70461b7b8185) C:\WINDOWS\system32\services.exe
09:59:10.0453 0800 PlugPlay - ok
09:59:10.0484 0800 Pml Driver HPZ12 (37e5e8ffbad35605daeec3224ea0e465) C:\WINDOWS\system32\HPZipm12.dll
09:59:10.0500 0800 Pml Driver HPZ12 - ok
09:59:10.0531 0800 PolicyAgent (84885f9b82f4d55c6146ebf6065d75d2) C:\WINDOWS\system32\lsass.exe
09:59:10.0531 0800 PolicyAgent - ok
09:59:10.0562 0800 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
09:59:10.0593 0800 PptpMiniport - ok
09:59:10.0609 0800 ProtectedStorage (84885f9b82f4d55c6146ebf6065d75d2) C:\WINDOWS\system32\lsass.exe
09:59:10.0609 0800 ProtectedStorage - ok
09:59:10.0640 0800 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
09:59:10.0687 0800 PSched - ok
09:59:10.0703 0800 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
09:59:10.0703 0800 Ptilink - ok
09:59:10.0750 0800 PxHelp20 (7c81ae3c9b82ba2da437ed4d31bc56cf) C:\WINDOWS\system32\Drivers\PxHelp20.sys
09:59:10.0765 0800 PxHelp20 - ok
09:59:10.0781 0800 ql1080 - ok
09:59:10.0796 0800 Ql10wnt - ok
09:59:10.0812 0800 ql12160 - ok
09:59:10.0843 0800 ql1240 - ok
09:59:10.0859 0800 ql1280 - ok
09:59:10.0890 0800 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
09:59:10.0890 0800 RasAcd - ok
09:59:10.0921 0800 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
09:59:10.0953 0800 RasAuto - ok
09:59:10.0984 0800 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
09:59:11.0015 0800 Rasl2tp - ok
09:59:11.0062 0800 RasMan (49b5eed5fb89d39456a2f616ccd8ba5d) C:\WINDOWS\System32\rasmans.dll
09:59:11.0062 0800 RasMan - ok
09:59:11.0093 0800 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
09:59:11.0125 0800 RasPppoe - ok
09:59:11.0125 0800 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
09:59:11.0125 0800 Raspti - ok
09:59:11.0171 0800 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
09:59:11.0171 0800 Rdbss - ok
09:59:11.0187 0800 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
09:59:11.0187 0800 RDPCDD - ok
09:59:11.0234 0800 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
09:59:11.0234 0800 rdpdr - ok
09:59:11.0265 0800 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
09:59:11.0265 0800 RDPWD - ok
09:59:11.0296 0800 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
09:59:11.0359 0800 RDSessMgr - ok
09:59:11.0390 0800 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
09:59:11.0437 0800 redbook - ok
09:59:11.0484 0800 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
09:59:11.0515 0800 RemoteAccess - ok
09:59:11.0562 0800 RemoteRegistry (3151427db7d87107d1c5be58fac53960) C:\WINDOWS\system32\regsvc.dll
09:59:11.0562 0800 RemoteRegistry - ok
09:59:11.0593 0800 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\system32\locator.exe
09:59:11.0625 0800 RpcLocator - ok
09:59:11.0671 0800 RpcSs (01095febf33beea00c2a0730b9b3ec28) C:\WINDOWS\System32\rpcss.dll
09:59:11.0687 0800 RpcSs - ok
09:59:11.0718 0800 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\system32\rsvp.exe
09:59:11.0718 0800 RSVP - ok
09:59:11.0750 0800 SamSs (84885f9b82f4d55c6146ebf6065d75d2) C:\WINDOWS\system32\lsass.exe
09:59:11.0750 0800 SamSs - ok
09:59:11.0859 0800 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
09:59:11.0859 0800 SASDIFSV - ok
09:59:11.0890 0800 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
09:59:11.0890 0800 SASKUTIL - ok
09:59:11.0921 0800 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
09:59:11.0984 0800 SCardSvr - ok
09:59:12.0015 0800 Schedule (92360854316611f6cc471612213c3d92) C:\WINDOWS\system32\schedsvc.dll
09:59:12.0046 0800 Schedule - ok
09:59:12.0109 0800 SeaPort (4a5809a1d796e2675ac0332bf7b0cb11) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
09:59:12.0125 0800 SeaPort - ok
09:59:12.0187 0800 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
09:59:12.0203 0800 Secdrv - ok
09:59:12.0218 0800 seclogon (b1e0ce09895376871746f36dc5773b4f) C:\WINDOWS\System32\seclogon.dll
09:59:12.0234 0800 seclogon - ok
09:59:12.0234 0800 SENS (dfd9870cf39c791d86c4c209da9fa919) C:\WINDOWS\system32\sens.dll
09:59:12.0250 0800 SENS - ok
09:59:12.0281 0800 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
09:59:12.0312 0800 serenum - ok
09:59:12.0359 0800 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
09:59:12.0421 0800 Serial - ok
09:59:12.0468 0800 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
09:59:12.0500 0800 Sfloppy - ok
09:59:12.0562 0800 SharedAccess (36cc8c01b5e50163037bef56cb96deff) C:\WINDOWS\System32\ipnathlp.dll
09:59:12.0578 0800 SharedAccess - ok
09:59:12.0609 0800 ShellHWDetection (6815def9b810aefac107eeaf72da6f82) C:\WINDOWS\System32\shsvcs.dll
09:59:12.0625 0800 ShellHWDetection - ok
09:59:12.0625 0800 Simbad - ok
09:59:12.0734 0800 SolidWorks Licensing Service (4945020bc094c322571184a6e8056b3a) C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
09:59:19.0406 0800 SolidWorks Licensing Service - ok
09:59:19.0406 0800 Sparrow - ok
09:59:19.0437 0800 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
09:59:19.0437 0800 splitter - ok
09:59:19.0484 0800 Spooler (da81ec57acd4cdc3d4c51cf3d409af9f) C:\WINDOWS\system32\spoolsv.exe
09:59:19.0484 0800 Spooler - ok
09:59:19.0531 0800 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
09:59:19.0578 0800 sr - ok
09:59:19.0609 0800 srservice (92bdf74f12d6cbec43c94d4b7f804838) C:\WINDOWS\system32\srsvc.dll
09:59:19.0625 0800 srservice - ok
09:59:19.0640 0800 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys
09:59:19.0640 0800 Srv - ok
09:59:19.0656 0800 SSDPSRV (4b8d61792f7175bed48859cc18ce4e38) C:\WINDOWS\System32\ssdpsrv.dll
09:59:19.0656 0800 SSDPSRV - ok
09:59:19.0671 0800 stisvc (b6763f8534ac547cf1af98afdff2edc8) C:\WINDOWS\system32\wiaservc.dll
09:59:19.0687 0800 stisvc - ok
09:59:19.0703 0800 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
09:59:19.0718 0800 swenum - ok
09:59:19.0750 0800 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
09:59:19.0750 0800 swmidi - ok
09:59:19.0765 0800 SwPrv - ok
09:59:19.0796 0800 symc810 - ok
09:59:19.0812 0800 symc8xx - ok
09:59:19.0828 0800 sym_hi - ok
09:59:19.0859 0800 sym_u3 - ok
09:59:19.0906 0800 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
09:59:19.0906 0800 sysaudio - ok
09:59:19.0937 0800 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
09:59:20.0000 0800 SysmonLog - ok
09:59:20.0062 0800 TapiSrv (fb78839b36025aa286a51289ed28b73e) C:\WINDOWS\System32\tapisrv.dll
09:59:20.0062 0800 TapiSrv - ok
09:59:20.0093 0800 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys
09:59:20.0140 0800 Tcpip - ok
09:59:20.0171 0800 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
09:59:20.0171 0800 TDPIPE - ok
09:59:20.0203 0800 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
09:59:20.0203 0800 TDTCP - ok
09:59:20.0234 0800 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
09:59:20.0234 0800 TermDD - ok
09:59:20.0265 0800 TermService (c29a5286e64d97385178452d5f307b98) C:\WINDOWS\System32\termsrv.dll
09:59:20.0265 0800 TermService - ok
09:59:20.0312 0800 TfFsMon (95746e5b1473432f3d9458940dba6e3a) C:\WINDOWS\system32\drivers\TfFsMon.sys
09:59:20.0312 0800 TfFsMon - ok
09:59:20.0312 0800 TfKbMon - ok
09:59:20.0359 0800 TfNetMon (02ffdd873e31c5c2d57ca87d11ec36af) C:\WINDOWS\system32\drivers\TfNetMon.sys
09:59:20.0359 0800 TfNetMon - ok
09:59:20.0375 0800 TfSysMon (f8bd92251ab439383c051ce907d78cce) C:\WINDOWS\system32\drivers\TfSysMon.sys
09:59:20.0375 0800 TfSysMon - ok
09:59:20.0406 0800 Themes (6815def9b810aefac107eeaf72da6f82) C:\WINDOWS\System32\shsvcs.dll
09:59:20.0406 0800 Themes - ok
09:59:20.0484 0800 ThreatFire - ok
09:59:20.0531 0800 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:\WINDOWS\system32\tlntsvr.exe
09:59:20.0578 0800 TlntSvr - ok
09:59:20.0593 0800 TosIde - ok
09:59:20.0625 0800 TrkWks (6d9ac544b30f96c57f8206566c1fb6a1) C:\WINDOWS\system32\trkwks.dll
09:59:20.0640 0800 TrkWks - ok
09:59:20.0671 0800 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
09:59:20.0718 0800 Udfs - ok
09:59:20.0734 0800 ultra - ok
09:59:20.0796 0800 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
09:59:20.0812 0800 Update - ok
09:59:20.0843 0800 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
09:59:20.0890 0800 upnphost - ok
09:59:20.0921 0800 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
09:59:20.0984 0800 UPS - ok
09:59:21.0046 0800 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
09:59:21.0078 0800 usbccgp - ok
09:59:21.0109 0800 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
09:59:21.0140 0800 usbehci - ok
09:59:21.0156 0800 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
09:59:21.0187 0800 usbhub - ok
09:59:21.0203 0800 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
09:59:21.0234 0800 usbohci - ok
09:59:21.0265 0800 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
09:59:21.0296 0800 usbprint - ok
09:59:21.0312 0800 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
09:59:21.0328 0800 usbscan - ok
09:59:21.0359 0800 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
09:59:21.0359 0800 USBSTOR - ok
09:59:21.0406 0800 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
09:59:21.0421 0800 VgaSave - ok
09:59:21.0437 0800 ViaIde - ok
09:59:21.0484 0800 Viewpoint Manager Service (5f974fde801c73952770736becde11e7) C:\Program Files\Viewpoint\Common\ViewpointService.exe
09:59:21.0484 0800 Viewpoint Manager Service - ok
09:59:21.0515 0800 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
09:59:21.0546 0800 VolSnap - ok
09:59:21.0593 0800 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
09:59:21.0640 0800 VSS - ok
09:59:21.0718 0800 W32Time (2b281958f5d0cf99ed626e3ef39d5c8d) C:\WINDOWS\system32\w32time.dll
09:59:21.0718 0800 W32Time - ok
09:59:21.0750 0800 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
09:59:21.0781 0800 Wanarp - ok
09:59:21.0796 0800 WDICA - ok
09:59:21.0828 0800 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
09:59:21.0828 0800 wdmaud - ok
09:59:21.0843 0800 WebClient (265f534ef76832435afbf771ec97176d) C:\WINDOWS\System32\webclnt.dll
09:59:21.0859 0800 WebClient - ok
09:59:21.0953 0800 winmgmt (f399242a80c4066fd155efa4cf96658e) C:\WINDOWS\system32\wbem\WMIsvc.dll
09:59:21.0953 0800 winmgmt - ok
09:59:22.0109 0800 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
09:59:22.0156 0800 wlidsvc - ok
09:59:22.0281 0800 WmdmPmSN (482069cda24aa0e94b1351e30eb3d01f) C:\WINDOWS\system32\MsPMSNSv.dll
09:59:22.0312 0800 WmdmPmSN - ok
09:59:22.0359 0800 Wmi (bab489a5fe26f2d0c910cf7af7e4cf92) C:\WINDOWS\System32\advapi32.dll
09:59:22.0375 0800 Wmi - ok
09:59:22.0421 0800 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\system32\wbem\wmiapsrv.exe
09:59:22.0500 0800 WmiApSrv - ok
09:59:22.0562 0800 wscsvc (4d59daa66c60858cdf4f67a900f42d4a) C:\WINDOWS\system32\wscsvc.dll
09:59:22.0578 0800 wscsvc - ok
09:59:22.0578 0800 wuauserv (13d72740963cba12d9ff76a7f218bcd8) C:\WINDOWS\system32\wuauserv.dll
09:59:22.0593 0800 wuauserv - ok
09:59:22.0640 0800 WZCSVC (247520eded53a08ae89ea4fae04f54d8) C:\WINDOWS\System32\wzcsvc.dll
09:59:22.0687 0800 WZCSVC - ok
09:59:22.0718 0800 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
09:59:22.0765 0800 xmlprov - ok
09:59:22.0828 0800 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
09:59:23.0234 0800 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
09:59:23.0234 0800 \Device\Harddisk0\DR0 - detected TDSS File System (1)
09:59:23.0250 0800 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk1\DR3
09:59:23.0375 0800 \Device\Harddisk1\DR3 - ok
09:59:23.0390 0800 Boot (0x1200) (33ab3770fa764968296483b1d9609dd4) \Device\Harddisk0\DR0\Partition0
09:59:23.0390 0800 \Device\Harddisk0\DR0\Partition0 - ok
09:59:23.0406 0800 Boot (0x1200) (82790752afde84fd345e98a887fa038e) \Device\Harddisk1\DR3\Partition0
09:59:23.0406 0800 \Device\Harddisk1\DR3\Partition0 - ok
09:59:23.0406 0800 ============================================================
09:59:23.0406 0800 Scan finished
09:59:23.0406 0800 ============================================================
09:59:23.0453 2868 Detected object count: 1
09:59:23.0453 2868 Actual detected object count: 1

For the second download, FSS, it brought me to an Internet page which I can't open on the infected computer.

Back to top

#6 narenxp

Forum Addict

BC Advisor
16,365 posts

Gender:Male
Location:India

Posted 03 August 2012 - 01:03 PM

For the second download, FSS, it brought me to an Internet page which I can't open on the infected computer.

Copy the tool to infected PC

Back to top

#7 Kayte

Member

Members
19 posts

Gender:Female

Posted 03 August 2012 - 10:20 PM

alrighty, here's the FSS log (:

Farbar Service Scanner Version: 04-08-2012 01
Ran by Amy (administrator) on 03-08-2012 at 20:15:45
Running from "F:\"
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Attempt to access Google.com returned error: Other errors
Yahoo IP is accessible.
Attempt to access Yahoo.com returned error: Other errors

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Security Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll
[2004-08-10 04:00] - [2008-02-19 22:32] - 0045568 ____N (Microsoft Corporation) AAC8FFBFD61E784FA3BAC851D4A0BD5F

C:\WINDOWS\system32\ipnathlp.dll
[2004-08-10 04:00] - [2004-08-10 04:00] - 0331264 ____N (Microsoft Corporation) 36CC8C01B5E50163037BEF56CB96DEFF

C:\WINDOWS\system32\netman.dll
[2004-08-10 04:00] - [2005-08-22 11:29] - 0197632 ____N (Microsoft Corporation) 36739B39267914BA69AD0610A0299732

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2007-11-03 19:19] - [2004-08-10 04:00] - 0144896 ____N (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

C:\WINDOWS\system32\srsvc.dll
[2007-11-03 19:22] - [2004-08-10 04:00] - 0170496 ____N (Microsoft Corporation) 92BDF74F12D6CBEC43C94D4B7F804838

C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll
[2004-08-10 04:00] - [2004-08-10 04:00] - 0081408 ____N (Microsoft Corporation) 4D59DAA66C60858CDF4F67A900F42D4A

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2007-11-03 19:19] - [2004-08-10 04:00] - 0144896 ____N (Microsoft Corporation) F399242A80C4066FD155EFA4CF96658E

C:\WINDOWS\system32\wuauserv.dll
[2007-11-03 19:22] - [2004-08-10 04:00] - 0006656 ____N (Microsoft Corporation) 13D72740963CBA12D9FF76A7F218BCD8

C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll
[2004-08-10 04:00] - [2008-07-07 13:32] - 0253952 ____N (Microsoft Corporation) 60D1A6342238378BFB7545C81EE3606C

C:\WINDOWS\system32\cryptsvc.dll
[2004-08-10 04:00] - [2004-08-10 04:00] - 0060416 ____N (Microsoft Corporation) 10654F9DDCEA9C46CFB77554231BE73B

C:\WINDOWS\system32\svchost.exe
[2004-08-10 04:00] - [2004-08-10 04:00] - 0014336 ____N (Microsoft Corporation) 8F078AE4ED187AAABC0A305146DE6716

C:\WINDOWS\system32\rpcss.dll
[2004-08-10 04:00] - [2009-02-09 03:20] - 0399360 ____N (Microsoft Corporation) 01095FEBF33BEEA00C2A0730B9B3EC28

C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
Gpc(3) IPSec(5) NetBT(6) PSched(7) Tcpip(4)
0x0900000005000000010000000200000003000000040000005A000000080000000600000007000000
IpSec Tag value is correct.

**** End of log ****

Back to top

#8 narenxp

Forum Addict

BC Advisor
16,365 posts

Gender:Male
Location:India

Posted 04 August 2012 - 05:38 AM

Download

Winsock fix

Launch it ,Click on FIX

Restart your PC after it gets completed

Check your browser.If that doesnt work try this

PLEASE create a restore point before trying this

Please copy the entire contents of the codebox below into Notepad:

REGEDIT4

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winsock]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2]

Open a notepad ,copy the script,save it as

Filename:winsock.reg
save as type:All files

Launch it and click YES to add it to registry

After that, Reboot your computer.

After the restart,

Go to Network Connections
Right click on your normal connection icon, and choose Properties
Click the Install button
Choose Protocol then click Add
Click Have disk
In the drop down box, type in: C:\WINDOWS\INF and click OK
In the next dialog, click Internet Protocol (TCP/IP) then click OK
Click Close to leave the properties box

After that, restart your computer and see if you can browse now.

Good luck

Back to top

#9 Kayte

Member

Members
19 posts

Gender:Female

Posted 04 August 2012 - 02:13 PM

Thank you (:

I'm currently downloading winsock fix, but I'm also finding out that I have Adware Tracking Cookies. What are these cookies? How harmful are they?

Back to top

#10 Kayte

Member

Members
19 posts

Gender:Female

Posted 05 August 2012 - 04:05 PM

Alrighty, no luck with Winsock fix

I will try the second option. But first, how do i create a restore point?

Thank you for helping me this much so far

Back to top

#11 narenxp

Forum Addict

BC Advisor
16,365 posts

Gender:Male
Location:India

Posted 05 August 2012 - 04:06 PM

ignore creating restore point ,continue with fix,Also

Download

mini toolbox

Checkmark following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs

Click Go and post the result.

Edited by narenxp, 05 August 2012 - 04:08 PM.

Back to top

#12 Kayte

Member

Members
19 posts

Gender:Female

Posted 05 August 2012 - 10:22 PM

Results for MiniToolBox

MiniToolBox by Farbar Version: 23-07-2012
Ran by Amy (administrator) on 05-08-2012 at 20:13:40
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

1394 Net Adapter = 1394 Connection (Connected)
1394 Net Adapter = 1394 Connection 2 (Connected)
NVIDIA nForce Networking Controller = Local Area Connection (Connected)

# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip

# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp

popd
# End of interface IP configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : my_baby

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Broadcast

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : gateway.2wire.net

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : gateway.2wire.net

Description . . . . . . . . . . . : NVIDIA nForce Networking Controller

Physical Address. . . . . . . . . : 00-14-22-3F-47-2E

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.1.65

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.254

DHCP Server . . . . . . . . . . . : 192.168.1.254

DNS Servers . . . . . . . . . . . : 192.168.1.254

Lease Obtained. . . . . . . . . . : Sunday, August 05, 2012 7:36:12 PM

Lease Expires . . . . . . . . . . : Monday, August 06, 2012 7:36:12 PM

Server: home
Address: 192.168.1.254

Name: google.com
Addresses: 74.125.224.161, 74.125.224.162, 74.125.224.163, 74.125.224.164
74.125.224.165, 74.125.224.166, 74.125.224.167, 74.125.224.168, 74.125.224.169
74.125.224.174, 74.125.224.160

Ping request could not find host google.com. Please check the name and try again.

Server: home
Address: 192.168.1.254

Name: yahoo.com
Addresses: 98.139.183.24, 209.191.122.70, 72.30.38.140

Ping request could not find host yahoo.com. Please check the name and try again.

Server: home
Address: 192.168.1.254

DNS request timed out.
timeout was 2 seconds.
Ping request could not find host bleepingcomputer.com. Please check the name and try again.

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 14 22 3f 47 2e ...... NVIDIA nForce Networking Controller
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.254 192.168.1.65 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.65 192.168.1.65 20
192.168.1.65 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.1.255 255.255.255.255 192.168.1.65 192.168.1.65 20
224.0.0.0 240.0.0.0 192.168.1.65 192.168.1.65 20
255.255.255.255 255.255.255.255 192.168.1.65 192.168.1.65 1
Default Gateway: 192.168.1.254
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 04 C:\Windows\System32\nwprovau.dll [142336] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (08/05/2012 10:28:02 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

Error: (08/05/2012 10:27:59 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The server name or address could not be resolved

Error: (08/03/2012 09:24:42 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

Error: (08/03/2012 09:24:41 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The server name or address could not be resolved

Error: (08/03/2012 09:58:29 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

Error: (08/03/2012 09:58:29 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This network connection does not exist.

Error: (08/03/2012 09:58:29 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: The server name or address could not be resolved

Error: (07/15/2012 07:42:37 PM) (Source: Application Hang) (User: )
Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (07/15/2012 07:42:37 PM) (Source: Application Hang) (User: )
Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (07/14/2012 07:54:29 PM) (Source: Application Hang) (User: )
Description: Hanging application chrome.exe, version 20.0.1132.47, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

System errors:
=============
Error: (08/05/2012 07:51:28 PM) (Source: W32Time) (User: )
Description: The time provider NtpClient is configured to acquire time from one or more
time sources, however none of the sources are currently accessible.
No attempt to contact a source will be made for 30 minutes.
NtpClient has no source of accurate time.

Error: (08/05/2012 07:51:28 PM) (Source: W32Time) (User: )
Description: Time Provider NtpClient: An error occurred during DNS lookup of the manually
configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 30
minutes.
The error was: A socket operation was attempted to an unreachable host. (0x80072751)

Error: (08/05/2012 07:51:26 PM) (Source: Microsoft Antimalware) (User: )
Description: %MY_BABY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %MY_BABY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %MY_BABY602

Update Type: %MY_BABY604

User: MY_BABY\Amy

Current Engine Version: %MY_BABY605

Previous Engine Version: %MY_BABY606

Error code: %MY_BABY607

Error description: %MY_BABY608

Error: (08/05/2012 07:51:26 PM) (Source: Microsoft Antimalware) (User: )
Description: %MY_BABY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %MY_BABY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %MY_BABY602

Update Type: %MY_BABY604

User: MY_BABY\Amy

Current Engine Version: %MY_BABY605

Previous Engine Version: %MY_BABY606

Error code: %MY_BABY607

Error description: %MY_BABY608

Error: (08/05/2012 07:51:26 PM) (Source: Microsoft Antimalware) (User: )
Description: %MY_BABY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %MY_BABY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %MY_BABY602

Update Type: %MY_BABY604

User: MY_BABY\Amy

Current Engine Version: %MY_BABY605

Previous Engine Version: %MY_BABY606

Error code: %MY_BABY607

Error description: %MY_BABY608

Error: (08/05/2012 07:51:26 PM) (Source: Microsoft Antimalware) (User: )
Description: %MY_BABY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %MY_BABY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %MY_BABY602

Update Type: %MY_BABY604

User: MY_BABY\Amy

Current Engine Version: %MY_BABY605

Previous Engine Version: %MY_BABY606

Error code: %MY_BABY607

Error description: %MY_BABY608

Error: (08/05/2012 07:51:24 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %NT AUTHORITY59

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\SYSTEM

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Error: (08/05/2012 07:46:48 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %NT AUTHORITY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\NETWORK SERVICE

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Error: (08/05/2012 07:46:48 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %NT AUTHORITY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\NETWORK SERVICE

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Error: (08/05/2012 07:46:48 PM) (Source: Microsoft Antimalware) (User: )
Description: %NT AUTHORITY60 has encountered an error trying to update signatures.

New Signature Version:

Previous Signature Version: 1.129.1535.0

Update Source: %NT AUTHORITY51

Update Stage: 4.0.1526.00

Source Path: 4.0.1526.01

Signature Type: %NT AUTHORITY602

Update Type: %NT AUTHORITY604

User: NT AUTHORITY\NETWORK SERVICE

Current Engine Version: %NT AUTHORITY605

Previous Engine Version: %NT AUTHORITY606

Error code: %NT AUTHORITY607

Error description: %NT AUTHORITY608

Microsoft Office Sessions:
=========================

=========================== Installed Programs ============================

32 Bit HP CIO Components Installer (Version: 6.1.1)
Adobe AIR (Version: 2.5.1.17730)
Adobe Flash Player 11 ActiveX (Version: 11.3.300.265)
Adobe Photoshop 7.0 (Version: 7.0)
Adobe Reader X (10.1.3) (Version: 10.1.3)
Adobe Shockwave Player (Version: 11)
AIM 7
Aim Plugin for QQ Games
AIM Toolbar
AIMTunes
AOL Instant Messenger
Audition (Version: 01.18.00.us)
Bejeweled 2 Deluxe 1.0
BufferChm (Version: 140.0.212.000)
Canon iP1700 User Registration
Canon My Printer
Canon Utilities Easy-PhotoPrint
Conduit Engine (Version: )
Copy (Version: 140.0.212.000)
Coupon Printer for Windows (Version: 5.0.0.0)
Creative MediaSource
Dell CinePlayer (Version: 3.0)
Dell Resource CD (Version: 1.00.0000)
Destinations (Version: 140.0.77.000)
DeviceDiscovery (Version: 140.0.212.000)
DJ_AIO_05_F4400_Software_Min (Version: 140.0.690.000)
DNA (Version: 2.2.2 (13666))
Easy-WebPrint
Elf 1.12 Toolbar (Version: 6.2.7.3)
Elf 1.15 Toolbar (Version: 6.2.7.3)
ESPNMotion (Version: 2.1.6.0011)
F4400 (Version: 140.0.696.000)
Free Realms Installer (Version: 1.0.3.110)
GemMaster Mystic
Google Chrome (Version: 20.0.1132.47)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.3.2710.138)
Google Update Helper (Version: 1.3.21.99)
GPBaseService2 (Version: 140.0.211.000)
HP Customer Participation Program 14.0 (Version: 14.0)
HP Deskjet F4400 Printer Driver Software 14.0 Rel. 5 (Version: 14.0)
HP Imaging Device Functions 14.0 (Version: 14.0)
HP Photo Creations (Version: 1.0.0.2024)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Solution Center 14.0 (Version: 14.0)
HP Update (Version: 5.002.002.002)
HPProductAssistant (Version: 140.0.212.000)
HPSSupply (Version: 140.0.211.000)
Java Auto Updater (Version: 2.0.2.4)
Java™ 6 Update 2 (Version: 1.6.0.20)
Java™ 6 Update 23 (Version: 6.0.230)
LEGO MINDSTORMS NXT Driver (Version: 1.16.769)
LimeWire 4.14.10 (Version: 4.14.10)
Mabinogi
MarketResearch (Version: 140.0.212.000)
Microsoft .NET Framework 1.0 Hotfix (KB930494)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Default Manager (Version: 2.1.54.0)
Microsoft Expression Blend 2 (Version: 2.0.1523.0)
Microsoft Expression Design 2 (Version: 5.0.1379.0)
Microsoft Expression Encoder 2 (Version: 2.0.1406.0)
Microsoft Expression Media 2 SP2 (Version: 2.0.2096.0)
Microsoft Expression Studio 2 (Version: 2.0.133.0)
Microsoft Expression Web 2 (Version: 12.0.4518.1084)
Microsoft Expression Web 2 MUI (English) (Version: 12.0.4518.1084)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office XP Professional with FrontPage (Version: 10.0.6626.0)
Microsoft Search Enhancement Pack (Version: 3.0.126.0)
Microsoft Security Client (Version: 4.0.1526.0)
Microsoft Security Essentials (Version: 4.0.1526.0)
Microsoft Software Update for Web Folders (English) 12 (Version: 12.0.6612.1000)
Microsoft UI Engine (Version: 4.0.0318.1)
Microsoft VC9 runtime libraries (Version: 1.0.0)
Microsoft Visual C Runtime (Version: 8.0.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
MSN Toolbar (Version: 4.0.0401.0)
MSN Toolbar Platform (Version: 4.0.0401.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 6 Service Pack 2 (KB973686) (Version: 6.20.2003.0)
Nero - Burning Rom (Version: 5.5.3.0)
NVIDIA Drivers
Otto
QQ Bubble Arena
QQ Games (Version: 2.0.102.40)
QQ Hearts
QQ Match Master
QQ Pool
QQ Treasure Hunter
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealPlayer (Version: 15.0.4)
Realtek AC'97 Audio (Version: 5.12)
RealUpgrade 1.1 (Version: 1.1.0)
Roxio DLA (Version: 5.2.0)
Roxio MyDVD LE (Version: 6.1.6)
Roxio RecordNow Audio (Version: 2.0.4)
Roxio RecordNow Copy (Version: 2.0.4)
Roxio RecordNow Data (Version: 2.0.4)
Scan (Version: 140.0.80.000)
Shop for HP Supplies (Version: 14.0)
Sierra Utilities
SmartWebPrinting (Version: 140.0.186.000)
SolidWorks 2012 SP01 (Version: 20.1.0.80)
SolidWorks eDrawings 2012 SP01 (Version: 12.1.130)
SolidWorks Explorer 2012 SP01 (Version: 20.10.80)
SolidWorks Workgroup PDM Server 2011 SP02 (Version: 19.20.49)
SolutionCenter (Version: 140.0.213.000)
Sonic Encoders (Version: 1.00)
Sound Blaster Audigy 2 ZS
Status (Version: 140.0.212.000)
SUPERAntiSpyware (Version: 4.50.1002)
The Weather Channel Desktop 6
ThreatFire
Toolbox (Version: 140.0.428.000)
TrayApp (Version: 140.0.212.000)
TypingMaster Pro (Version: 7.00)
Update for 2007 Microsoft Office System (KB2284654)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft Expression Web 2 (KB957827)
Update for Microsoft Office 2007 System (KB2539530)
Update for Windows Internet Explorer 7 (KB976749) (Version: 1)
Update for Windows Internet Explorer 8 (KB975364) (Version: 1)
Update for Windows Internet Explorer 8 (KB976662) (Version: 1)
Update for Windows Internet Explorer 8 (KB980182) (Version: 1)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB894391) (Version: 1)
Update for Windows XP (KB898461) (Version: 1)
Update for Windows XP (KB900485) (Version: 2)
Update for Windows XP (KB904942) (Version: 2)
Update for Windows XP (KB908531) (Version: 2)
Update for Windows XP (KB910437) (Version: 1)
Update for Windows XP (KB911280) (Version: 2)
Update for Windows XP (KB914882) (Version: 1)
Update for Windows XP (KB916595) (Version: 1)
Update for Windows XP (KB920872) (Version: 1)
Update for Windows XP (KB922582) (Version: 1)
Update for Windows XP (KB925720) (Version: 1)
Update for Windows XP (KB927891) (Version: 3)
Update for Windows XP (KB930916) (Version: 1)
Update for Windows XP (KB932823-v3) (Version: 3)
Update for Windows XP (KB933360) (Version: 1)
Update for Windows XP (KB936357) (Version: 1)
Update for Windows XP (KB938828) (Version: 1)
Update for Windows XP (KB942763) (Version: 1)
Update for Windows XP (KB942840) (Version: 1)
Update for Windows XP (KB951072-v2) (Version: 2)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB955839) (Version: 1)
Update for Windows XP (KB967715) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971737) (Version: 1)
Update for Windows XP (KB973687) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
Update Rollup 2 for Windows XP Media Center Edition 2005
Viewpoint Media Player
WebFldrs XP (Version: 9.50.7523)
WebReg (Version: 140.0.212.017)
Windows Imaging Component (Version: 3.0.0.0)
Windows Installer 3.1 (KB893803) (Version: 3.1)
Windows Internet Explorer 7 (Version: 20070813.185237)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Media Format 11 runtime
Windows XP Hotfix - KB873339 (Version: 20041117.092459)
Windows XP Hotfix - KB885835 (Version: 20041027.181713)
Windows XP Hotfix - KB885836 (Version: 20041028.173203)
Windows XP Hotfix - KB885884 (Version: 20040924.025457)
Windows XP Hotfix - KB886185 (Version: 20041021.090540)
Windows XP Hotfix - KB887472 (Version: 20041014.162858)
Windows XP Hotfix - KB888302 (Version: 20041207.111426)
Windows XP Hotfix - KB890859 (Version: 1)
Windows XP Hotfix - KB891781 (Version: 20050110.165439)
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB2619340
Windows XP Media Center Edition 2005 KB2628259
Windows XP Media Center Edition 2005 KB908250
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3 (Version: 20080414.031525)
XML Paper Specification Shared Components Pack 1.0
Yahoo! BrowserPlus 2.8.1
Yahoo! Toolbar

**** End of log ****