BleepingComputer.com: DDS.txt and Attach.txt

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_24
Run by Melody at 15:49:29 on 2012-01-07
Microsoft Windows 7 Starter 6.1.7600.0.1252.1.1033.18.1015.384 [GMT -8:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
AV: avast! antivirus *Disabled/Outdated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! antivirus *Disabled/Outdated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\System32\AsusService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdController.exe
C:\Program Files\RosettaStoneLtdServices\RosettaStoneLtdServer.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uSearch Bar = Preserve
mSearchAssistant = hxxp://start.facemoods.com/?a=mtz&s={searchTerms}&f=4
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: {99079a25-328f-4bd4-be04-00955acaa0a7} - No File
BHO: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
BHO: ASUS Windows 7 Starter Helper: {d381ff29-7cfb-4d4e-b92a-c4eddc696614} - c:\program files\asus\systemsetting\StarterHelper.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
TB: {99079a25-328f-4bd4-be04-00955acaa0a7} - No File
TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
TB: {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
TB: {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File
TB: {B2DE56E2-907A-4080-AE06-5C2A7BD4364E} - No File
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe"
mRun: [NWEReboot]
mRun: [avast!] "c:\program files\alwil software\avast4\ashDisp.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Handy Password: Clear Fields - c:\program files\handy password\handypasswordtoolbar.dll/menu_clear.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
Trusted Zone: gamecolony.com
Trusted Zone: gamecolony.com\secure
Trusted Zone: gamecolony.com\secure2
Trusted Zone: gamecolony.com\www
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://www.pcpitstop.com/betapit/PCPitStop.CAB
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {61900274-3323-4446-BDCD-91548D32AF1B} - hxxp://www.worldwinner.com/games/v56/spidersolitaire/spidersolitaire.cab
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {72376E32-8AF2-473F-BE32-E5D0F39C865D} - hxxp://www.cyberlink.com/prog/win7/js/UpdateAdvisor.cab
DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} - hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
DPF: {B2F0618A-7C27-4900-B8D6-61D39B91FD81} - hxxp://www.gamecolony.com/gcatl.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 0.0.0.0
TCP: Interfaces\{85AEFB2F-5143-42BD-8856-FE915461E067} : DhcpNameServer = 75.75.75.75 75.75.76.76 0.0.0.0
TCP: Interfaces\{85AEFB2F-5143-42BD-8856-FE915461E067}\0484F6D65613642463 : DhcpNameServer = 8.8.8.8
TCP: Interfaces\{85AEFB2F-5143-42BD-8856-FE915461E067}\1405D2130303E4 : DhcpNameServer = 68.87.76.182 68.87.78.134
TCP: Interfaces\{85AEFB2F-5143-42BD-8856-FE915461E067}\2375942554736383 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{85AEFB2F-5143-42BD-8856-FE915461E067}\76F676F696E666C696768647 : DhcpNameServer = 172.19.134.2
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs:
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\melody\appdata\roaming\mozilla\firefox\profiles\9zavn0is.default\
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com
FF - prefs.js: keyword.URL - hxxp://ori.startnow.com/s/?src=addrbar&provider=bing&provider_name=bing&provider_code=Z114&partner_id=334&product_id=714&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.1.0&install_country=US&install_date=20110717&user_guid=3C102E2E000D4CCAB98C5C192CB392E4&machine_id=1710c7e08dacdfac4a588cd7d5cc7724&browser=FF&os=win&os_version=6.1-x86-SP0&q=
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\5.0.61118.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\worldwinner.com, inc\worldwinner games\npwwload.dll
.
============= SERVICES / DRIVERS ===============
.
R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [2011-12-25 39472]
R1 AsUpIO;AsUpIO;c:\windows\system32\drivers\AsUpIO.sys [2011-1-6 11832]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2011-11-7 114768]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 165648]
R1 MpKsla0e23137;MpKsla0e23137;c:\programdata\microsoft\microsoft antimalware\definition updates\{c16cdc76-16c5-4a45-bfbd-aa739207bf41}\MpKsla0e23137.sys [2012-1-7 29904]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 48128]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
R2 AsusService;Asus Launcher Service;c:\windows\system32\AsusService.exe [2011-1-4 219136]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-11-7 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-11-7 53328]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-8-1 211216]
R2 RosettaStoneLtdController;RosettaStoneLtdController;c:\program files\rosettastoneltdservices\RosettaStoneLtdController.exe [2008-9-16 352312]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2011-8-1 1153368]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\drivers\L1C62x86.sys [2011-1-4 51712]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-8-1 19096]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2011-4-18 43392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2011-4-27 65024]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\antimalware\NisSrv.exe [2011-4-27 208944]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-13 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S4 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2011-12-3 138680]
S4 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2011-12-3 254040]
S4 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2011-12-3 352920]
S4 OberonGameConsoleService;Oberon Media Game Console service;c:\program files\asus\game park\gameconsole\OberonGameConsoleService.exe [2011-1-4 44312]
.
=============== Created Last 30 ================
.
2012-01-07 13:52:30 29904 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{c16cdc76-16c5-4a45-bfbd-aa739207bf41}\MpKsla0e23137.sys
2012-01-07 13:52:23 56200 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{c16cdc76-16c5-4a45-bfbd-aa739207bf41}\offreg.dll
2012-01-06 19:43:53 6823496 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{c16cdc76-16c5-4a45-bfbd-aa739207bf41}\mpengine.dll
2012-01-05 03:24:09 -------- d-----w- C:\BURN
2012-01-04 18:29:05 -------- d-----w- c:\program files\CrazyLuckCasino
2012-01-03 23:46:38 77312 ----a-w- c:\windows\system32\ztvunace26.dll
2012-01-03 23:46:38 75264 ----a-w- c:\windows\system32\unacev2.dll
2012-01-03 23:46:38 69632 ----a-w- c:\windows\system32\ztvcabinet.dll
2012-01-03 23:46:38 162304 ----a-w- c:\windows\system32\ztvunrar36.dll
2012-01-03 23:46:37 153088 ----a-w- c:\windows\system32\UNRAR3.dll
2012-01-03 23:45:51 -------- d-----w- c:\users\melody\appdata\roaming\Simply Super Software
2012-01-03 23:45:51 -------- d-----w- c:\programdata\Simply Super Software
2012-01-03 23:45:51 -------- d-----w- c:\program files\Trojan Remover
2012-01-03 12:50:16 -------- d-----w- c:\program files\GameColony
2011-12-25 12:30:32 32080 ----a-w- c:\windows\system32\drivers\UimBus.sys
2011-12-25 12:30:32 131672 ----a-w- c:\windows\system32\drivers\Uim_IM.sys
2011-12-25 12:30:32 11568 ----a-w- c:\windows\system32\drivers\UimFIO.sys
2011-12-25 12:28:56 39472 ----a-w- c:\windows\system32\drivers\hotcore3.sys
2011-12-25 12:28:55 247560 ----a-w- c:\windows\system32\prgiso.dll
2011-12-25 12:28:51 4244744 ----a-w- c:\windows\system32\qtp-mt334.dll
2011-12-25 12:27:34 -------- d-----w- c:\program files\Paragon Software
2011-12-24 19:33:56 -------- d-----w- C:\000
2011-12-24 12:19:49 -------- d-----w- c:\program files\Palace of Chance
2011-12-24 11:47:36 -------- d-----w- c:\program files\GoldenCherryCasino
2011-12-20 14:54:42 703824 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\nisbackup\gapaengine.dll
2011-12-20 14:54:32 703824 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{ba1c6276-1537-4025-b5c1-e21fa07be0b2}\gapaengine.dll
2011-12-20 14:54:27 6823496 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2011-12-17 13:03:08 -------- d-----w- c:\windows\pss
2011-12-17 05:17:02 -------- d-----w- c:\program files\Dirprint
2011-12-17 00:58:03 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-12-17 00:47:16 -------- d-----w- c:\program files\Microsoft Security Client
2011-12-17 00:46:48 240008 ----a-w- c:\windows\system32\drivers\netio.sys
2011-12-17 00:29:59 -------- d-----w- c:\users\melody\appdata\roaming\Systweak
2011-12-17 00:29:53 17280 ----a-w- c:\windows\system32\roboot.exe
2011-12-16 15:42:26 -------- d-----w- c:\windows\system32\drivers\n360\0501000.01D
2011-12-16 13:17:14 -------- d-----w- c:\users\melody\appdata\local\Opera
2011-12-16 11:55:06 -------- d-----w- c:\program files\common files\Symantec Shared
2011-12-16 11:54:04 -------- d-----w- c:\windows\system32\drivers\N360
2011-12-16 11:54:02 -------- d-----w- c:\program files\Norton Security Suite
2011-12-16 11:53:28 -------- d-----w- c:\programdata\NortonInstaller
2011-12-16 11:53:28 -------- d-----w- c:\program files\NortonInstaller
2011-12-16 11:52:31 -------- d-----w- c:\programdata\Norton
2011-12-16 09:48:31 -------- d-----w- c:\programdata\Alwil Software
2011-12-16 09:04:52 -------- d--h--w- c:\programdata\Common Files
2011-12-16 09:02:56 -------- d-----w- c:\programdata\AVG10
2011-12-16 08:59:05 -------- d-----w- c:\programdata\MFAData
2011-12-15 13:20:48 -------- d--h--w- c:\users\melody\appdata\roaming\Blippy Games
2011-12-15 06:34:21 -------- d-----w- c:\windows\PCHEALTH
2011-12-15 06:30:00 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2011-12-15 06:29:03 -------- d-----w- c:\windows\SHELLNEW
2011-12-14 22:32:21 -------- d-----w- c:\program files\Lucky18 Casino
2011-12-14 20:17:50 -------- d-----w- c:\program files\Cool Cat Casino
2011-12-14 19:37:58 -------- d-----w- c:\program files\Slotastic
2011-12-11 14:19:31 -------- d-----w- c:\users\melody\appdata\roaming\DeskAlerts_{53EA34A2-5031-4407-BC90-EDD40D1AA563}
2011-12-11 14:19:29 -------- d-----w- c:\program files\EPlayersCard
2011-12-11 14:18:59 1249758 ----a-w- c:\users\melody\appdata\roaming\asg_alerts.exe
2011-12-11 14:17:46 -------- d-----w- C:\Microgaming
2011-12-11 10:47:13 -------- d-----w- c:\program files\RoyalAceCasino.com
2011-12-11 09:50:38 -------- d-----w- c:\program files\Silver Oak Casino
2011-12-11 08:05:05 -------- d-----w- c:\program files\Slots of Vegas
.
==================== Find3M ====================
.
2011-11-29 05:46:06 34308 ----a-w- c:\programdata\mazuki.dll
2011-11-28 21:36:32 249856 ------w- c:\windows\Setup1.exe
2011-11-28 21:36:30 73216 ----a-w- c:\windows\ST6UNST.EXE
2011-11-17 09:46:14 41 ----a-w- c:\windows\system32\vfolx32n.dll
2011-10-26 17:38:42 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
============= FINISH: 15:51:32.48 ==
Couldn't upload the RAR file for attach.txt so here it is..................

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Starter
Boot Device: \Device\HarddiskVolume1
Install Date: 1/4/2011 12:55:56 PM
System Uptime: 1/7/2012 5:51:53 AM (10 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | 1005HA
Processor: Intel® Atom™ CPU N270 @ 1.60GHz | PBGA 437 | 800/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 139 GiB total, 28.961 GiB free.
D: is FIXED (FAT32) - 10 GiB total, 0.043 GiB free.
E: is FIXED (NTFS) - 0 GiB total, 0.001 GiB free.
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKslcd2b4996
Device ID: ROOT\LEGACY_MPKSLCD2B4996\0000
Manufacturer:
Name: MpKslcd2b4996
PNP Device ID: ROOT\LEGACY_MPKSLCD2B4996\0000
Service: MpKslcd2b4996
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl04eaa921
Device ID: ROOT\LEGACY_MPKSL04EAA921\0000
Manufacturer:
Name: MpKsl04eaa921
PNP Device ID: ROOT\LEGACY_MPKSL04EAA921\0000
Service: MpKsl04eaa921
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl281f7b01
Device ID: ROOT\LEGACY_MPKSL281F7B01\0000
Manufacturer:
Name: MpKsl281f7b01
PNP Device ID: ROOT\LEGACY_MPKSL281F7B01\0000
Service: MpKsl281f7b01
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsle57d4a13
Device ID: ROOT\LEGACY_MPKSLE57D4A13\0000
Manufacturer:
Name: MpKsle57d4a13
PNP Device ID: ROOT\LEGACY_MPKSLE57D4A13\0000
Service: MpKsle57d4a13
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl3a057831
Device ID: ROOT\LEGACY_MPKSL3A057831\0000
Manufacturer:
Name: MpKsl3a057831
PNP Device ID: ROOT\LEGACY_MPKSL3A057831\0000
Service: MpKsl3a057831
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl52b6d95c
Device ID: ROOT\LEGACY_MPKSL52B6D95C\0000
Manufacturer:
Name: MpKsl52b6d95c
PNP Device ID: ROOT\LEGACY_MPKSL52B6D95C\0000
Service: MpKsl52b6d95c
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl7e6ec2d1
Device ID: ROOT\LEGACY_MPKSL7E6EC2D1\0000
Manufacturer:
Name: MpKsl7e6ec2d1
PNP Device ID: ROOT\LEGACY_MPKSL7E6EC2D1\0000
Service: MpKsl7e6ec2d1
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl85064514
Device ID: ROOT\LEGACY_MPKSL85064514\0000
Manufacturer:
Name: MpKsl85064514
PNP Device ID: ROOT\LEGACY_MPKSL85064514\0000
Service: MpKsl85064514
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl852c490b
Device ID: ROOT\LEGACY_MPKSL852C490B\0000
Manufacturer:
Name: MpKsl852c490b
PNP Device ID: ROOT\LEGACY_MPKSL852C490B\0000
Service: MpKsl852c490b
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl85479b6b
Device ID: ROOT\LEGACY_MPKSL85479B6B\0000
Manufacturer:
Name: MpKsl85479b6b
PNP Device ID: ROOT\LEGACY_MPKSL85479B6B\0000
Service: MpKsl85479b6b
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl88c4ac9f
Device ID: ROOT\LEGACY_MPKSL88C4AC9F\0000
Manufacturer:
Name: MpKsl88c4ac9f
PNP Device ID: ROOT\LEGACY_MPKSL88C4AC9F\0000
Service: MpKsl88c4ac9f
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl9babdec2
Device ID: ROOT\LEGACY_MPKSL9BABDEC2\0000
Manufacturer:
Name: MpKsl9babdec2
PNP Device ID: ROOT\LEGACY_MPKSL9BABDEC2\0000
Service: MpKsl9babdec2
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsla654aa4d
Device ID: ROOT\LEGACY_MPKSLA654AA4D\0000
Manufacturer:
Name: MpKsla654aa4d
PNP Device ID: ROOT\LEGACY_MPKSLA654AA4D\0000
Service: MpKsla654aa4d
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsla77cae49
Device ID: ROOT\LEGACY_MPKSLA77CAE49\0000
Manufacturer:
Name: MpKsla77cae49
PNP Device ID: ROOT\LEGACY_MPKSLA77CAE49\0000
Service: MpKsla77cae49
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKslcb610c01
Device ID: ROOT\LEGACY_MPKSLCB610C01\0000
Manufacturer:
Name: MpKslcb610c01
PNP Device ID: ROOT\LEGACY_MPKSLCB610C01\0000
Service: MpKslcb610c01
.
==== System Restore Points ===================
.
RP210: 1/4/2012 3:33:01 AM - Windows Update
RP211: 1/5/2012 9:04:56 AM - Windows Update
RP212: 1/6/2012 11:42:44 AM - Windows Update
.
==== Installed Programs ======================
.
µTorrent
2007 Microsoft Office Suite Service Pack 2 (SP2)
3D Ten Thousand
ACDSee Pro 3
Acrobat.com
Ad-aware 6 Professional
Adobe AIR
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.1)
Adobe Shockwave Player 11.5
Alien Eggs 1.23
Ancient Seal
Ancient Trijong
AnyPic Image Resizer Pro 1.3.0
Apple Application Support
Apple Software Update
ASUSUpdate for Eee PC
Atheros Client Installation Program
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver
avast! Antivirus
BSPlayer
Bubble Puzzle '97
BufferChm
CaribbeanGold Casino
Chainz
Classic Menu for Office
Cole2k Media - Codec Pack (Advanced) 7.9.5
Cool Cat Casino
Crazy Luck Casino
D4300
DeviceDiscovery
Directory Printer 3.73
DJ_SF_03_D4300_Software_Min
Docker Sokoban
Dynomite Deluxe 2.71
E-Cam
Eee Docking 3.6.0
EeeSplendid
EPlayersCard
ffdshow [rev 2527] [2008-12-19]
FontResizer
Freecorder
Game Park Console
GameColony Gin Rummy for Windows
Gems 3D Puzzle Game
Golden Cherry Casino
GPBaseService2
HighRoller (remove only)
Hotkey Service
Hoyle Board Games 2005
Hoyle Card Games 2007
Hoyle Casino 2006 (remove only)
Hoyle Puzzle Games 2007
HP Customer Participation Program 13.0
HP Deskjet D4300 Printer Driver Software 13.0 Rel. 3
HP Imaging Device Functions 13.0
HP Photosmart Essential 3.5
HP Smart Web Printing 4.51
HP Solution Center 13.0
HP Update
HPPhotoGadget
HPPhotoSmartDiscLabelContent1
HPPhotosmartEssential
HPProductAssistant
Intel® Graphics Media Accelerator Driver
Java Auto Updater
Java™ 6 Update 24
Kyodai
Lucky18 Casino
MadCaps
Malwarebytes' Anti-Malware
MarketResearch
MaxiLaoder
Media Player Classic - Home Cinema v1.4.2499.0
Microsoft .NET Framework 4 Client Profile
Microsoft Antimalware
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Mind Your Marbles
Mozilla Firefox 8.0 (x86 en-US)
ODF Add-in for Microsoft Office
OOBERegBackup
Orbz
Palace of Chance
Paragon Drive Backup 8.51 Professional Trial
Paragon Partition Manager 9.0 Professional
PowerChips (remove only)
PowerISO
Qbeez
QuickTime
Real Vegas Online
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.1
Registry Easy v5.6
RocketBowl Plus
Rosetta Stone Ltd Services
Rosetta Stone Version 3
RoyalAceCasino.com
Saints & Sinners Bingo
Saints & Sinners Bowling
Saturn Bingo
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB969679)
Security Update for Microsoft Office Excel 2007 (KB969682)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB969693)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office Word 2007 (KB969604)
Silver Oak Casino
Slotastic
Slots Inferno
Slots of Vegas
SmartWebPrinting
Snood 4
SolSuite 2011 v11.0
SolutionCenter
SpiteNET: Spite and Malice v.9.5
Spybot - Search & Destroy
Status
Super Hybrid Engine
Synaptics Pointing Device Driver
SystemSetting
Three Thirteen
Three Thirteen (C:\Games\ThreeThirteen\)
Toolbox
TrayApp
Trojan Remover 6.6.1
UltraISO Premium V8.62
UnloadSupport
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office Outlook 2007 (KB969907)
Update for Outlook 2007 Junk Email Filter (kb973514)
WebReg
Windows 7 Codec Pack 2.7.0
Windows Essentials Media Codec Pack 3.6 [32-Bit]
WinRAR 4.00 beta 4 (32-bit)
WorldWinner Games
Yahtzee (remove only)
.
==== Event Viewer Messages From Past Week ========
.
12/31/2011 9:03:21 PM, Error: volsnap [35] - The shadow copies of volume C: were aborted because the shadow copy storage failed to grow.
1/7/2012 5:52:32 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: cdrom PxHelp20
1/7/2012 3:24:26 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer GENE-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{85AEFB2F-5143-42BD-8856-FE915461E0. The master browser is stopping or an election is being forced.
1/5/2012 8:53:54 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.
1/5/2012 5:13:30 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer MRSMOODY that believes that it is the master browser for the domain on transport NetBT_Tcpip_{85AEFB2F-5143-42BD-8856-FE915461E. The master browser is stopping or an election is being forced.
1/5/2012 3:32:15 AM, Error: Ntfs [137] - The default transaction resource manager on volume G: encountered a non-retryable error and could not start. The data contains the error code.
1/5/2012 3:30:23 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR2.
1/5/2012 2:35:54 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR3.
1/4/2012 8:17:16 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
1/4/2012 12:56:14 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer MICHAELS_LAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{85AEFB2F-5143-42BD-8856-FE. The master browser is stopping or an election is being forced.
1/3/2012 9:20:17 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} and APPID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} to the user Melodys-PC\Melody SID (S-1-5-21-856110450-3313918794-2675066127-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
1/3/2012 6:17:42 AM, Error: bowser [8003] - The master browser has received a server announcement from the computer SUSIE-HP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{85AEFB2F-5143-42BD-8856-FE915461E. The master browser is stopping or an election is being forced.
1/2/2012 5:12:39 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
.
==== End Of File ===========================

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems.

Somethings to remember while we are working together.

• Do not run any other tool untill instructed to do so!
  
• please Do not Attach logs or put in code boxes.
  
• Tell me about any problems that have occurred during the fix.
  
• Tell me of any other symptoms you may be having as these can help also.
  
• Do not run anything while running a fix.
  
• Do not run any other tool untill instructed to do so!

Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.

Link 1
Link 2
Link 3

1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

In your next post I need the following


• Log from Combofix
  
• let me know of any problems you may have had
  
• How is the computer doing now?

Gringo

Hello

48 Hour bump

It has been more than 48 hours since my last post.

• do you still need help with this?
  
• do you need more time?
  
• are you having problems following my instructions?
  
• if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.