Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Possible Hijacking


  • This topic is locked This topic is locked
2 replies to this topic

#1 Maslows

Maslows

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:04:33 PM

Posted 16 December 2008 - 06:48 PM

I just did a fresh install of Vista Premium, I formatted the drives at least 5 times before I installed
Installed Apps: SUPERAntiSpyware, ZONE Alarm Firewall, Kaspersky Internet Security, Firefox 3.04
My internet connection keeps dropping repeadedly, my packets sent VS packets received differ vastly
I am using a Linksys 150N Router with wireless turned off
I became weary when I tried to access my EBAY account & the page kept taking me to the login page
HIJACK This LOG

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:13:47 PM, on 12/16/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\CheckPoint\ZAForceField\ISWMGR.exe
C:\Program Files\CheckPoint\ZAForceField\ISWMGR.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: ForceField Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O3 - Toolbar: ForceField Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /start_mode="auto"
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O13 - Gopher Prefix:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ForceField IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

--
End of file - 3803 bytes

DDS


DDS (Version 1.1.0) - NTFSx86
Run by Oni-Mashou at 18:47:05.22 on Tue 12/16/2008
Internet Explorer: 7.0.6000.16386
Microsoft® Windows Vista™ Starter 6.0.6000.0.1252.1.1033.18.1918.1117 [GMT -5:00]

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\CheckPoint\ZAForceField\ISWMGR.exe
C:\Program Files\CheckPoint\ZAForceField\ISWMGR.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\ONI-MA~1\AppData\Local\Temp\IswTmp\DwlRun\dds.scr

============== Pseudo HJT Report ===============

BHO: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll
BHO: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - c:\program files\checkpoint\zaforcefield\trustchecker\bin\TrustCheckerIEPlugin.dll
TB: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - c:\program files\checkpoint\zaforcefield\trustchecker\bin\TrustCheckerIEPlugin.dll
uRun: [EasyLinkAdvisor] "c:\program files\linksys easylink advisor\LinksysAgent.exe" /startup
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Skytel] Skytel.exe
mRun: [ISW] "c:\program files\checkpoint\zaforcefield\ForceField.exe" /start_mode="auto"
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe"
uPolicies-explorer: NoDFSTab = 1 (0x1)
dPolicies-explorer: NoDFSTab = 1 (0x1)
IE: {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - {85E0B171-04FA-11D1-B7DA-00A0C90348D6} - c:\program files\kaspersky lab\kaspersky internet security 2009\SCIEPlgn.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd.dll,c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll,c:\progra~1\kasper~1\kasper~1\adialhk.dll,c:\progra~1\kasper~1\kasper~1\kloehk.dll
SEH: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\oni-ma~1\appdata\roaming\mozilla\firefox\profiles\zh7qqikh.default\

ATTENTION: FIREFOX POLICES IS IN FORCE
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000

============= SERVICES / DRIVERS ===============

R1 BIOS;BIOS;\??\c:\windows\system32\drivers\BIOS.sys [2008-12-16 13696]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2008-7-9 20496]
R1 SASDIFSV;SASDIFSV;\??\c:\program files\superantispyware\SASDIFSV.SYS [2008-12-4 8944]
R1 SASKUTIL;SASKUTIL;\??\c:\program files\superantispyware\SASKUTIL.sys [2008-12-4 55024]
R2 ISWKL;ForceField ISWKL;\??\c:\program files\checkpoint\zaforcefield\ISWKL.sys [2008-11-13 17064]
R2 IswSvc;ForceField IswSvc;"c:\program files\checkpoint\zaforcefield\IswSvc.exe" [2008-11-13 375976]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2008-12-16 603904]
R3 SASENUM;SASENUM;\??\c:\program files\superantispyware\SASENUM.SYS [2008-12-4 7408]
S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-1-29 32784]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2006-11-2 167936]
S3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [2008-3-13 26640]

=============== Created Last 30 ================

2008-12-16 18:35 96,976 a------- c:\windows\system32\drivers\klin.dat
2008-12-16 18:35 87,855 a------- c:\windows\system32\drivers\klick.dat
2008-12-16 18:34 90,144 a--sh--- c:\windows\system32\drivers\fidbox2.dat
2008-12-16 18:34 32 a--sh--- c:\windows\system32\drivers\fidbox2.idx
2008-12-16 18:34 32 a--sh--- c:\windows\system32\drivers\fidbox.idx
2008-12-16 18:34 32 a--sh--- c:\windows\system32\drivers\fidbox.dat
2008-12-16 18:34 <DIR> --d----- c:\programdata\Kaspersky Lab
2008-12-16 18:34 <DIR> --d----- c:\program files\Kaspersky Lab
2008-12-16 18:34 <DIR> --d----- c:\progra~2\Kaspersky Lab
2008-12-16 18:27 <DIR> --d----- c:\programdata\Kaspersky Lab Setup Files
2008-12-16 18:27 <DIR> --d----- c:\progra~2\Kaspersky Lab Setup Files
2008-12-16 18:13 <DIR> --d----- c:\program files\Trend Micro
2008-12-16 18:07 <DIR> --d----- c:\users\oni-ma~1\appdata\roaming\#ISW.FS#
2008-12-16 18:06 <DIR> --d----- c:\users\oni-ma~1\appdata\roaming\CheckPoint
2008-12-16 18:06 224 a------- c:\windows\system32\lkfl.dat
2008-12-16 18:06 128 a------- c:\windows\system32\pdfl.dat
2008-12-16 18:06 80 a------- c:\windows\system32\ibfl.dat
2008-12-16 18:05 <DIR> --d----- c:\program files\CheckPoint
2008-12-16 18:02 <DIR> --d----- c:\program files\uTorrent
2008-12-16 18:02 <DIR> --d----- c:\users\oni-ma~1\appdata\roaming\uTorrent
2008-12-16 16:12 603,904 a------- c:\windows\system32\TUProgSt.exe
2008-12-16 16:12 27,904 a------- c:\windows\system32\uxtuneup.dll
2008-12-16 16:12 17,152 a------- c:\windows\system32\authuitu.dll
2008-12-16 16:12 360,192 a------- c:\windows\system32\TuneUpDefragService.exe
2008-12-16 16:12 <DIR> --d----- c:\users\oni-ma~1\appdata\roaming\TuneUp Software
2008-12-16 16:11 <DIR> --d----- c:\programdata\TuneUp Software
2008-12-16 16:11 <DIR> --d----- c:\program files\TuneUp Utilities 2009
2008-12-16 16:11 <DIR> --d----- c:\progra~2\TuneUp Software
2008-12-16 16:11 <DIR> --dsh--- c:\programdata\{55A29068-F2CE-456C-9148-C869879E2357}
2008-12-16 16:11 <DIR> --dsh--- c:\progra~2\{55A29068-F2CE-456C-9148-C869879E2357}
2008-12-16 16:01 <DIR> --d----- c:\programdata\SUPERAntiSpyware.com
2008-12-16 16:01 <DIR> --d----- c:\progra~2\SUPERAntiSpyware.com
2008-12-16 16:00 <DIR> --d----- c:\users\oni-ma~1\appdata\roaming\SUPERAntiSpyware.com
2008-12-16 16:00 <DIR> --d----- c:\program files\SUPERAntiSpyware
2008-12-16 16:00 <DIR> --d----- c:\program files\common files\Wise Installation Wizard
2008-12-16 15:59 217,272 a------- c:\windows\system32\drivers\netio.sys
2008-12-16 15:59 167,424 a------- c:\windows\system32\tcpipcfg.dll
2008-12-16 15:59 22,016 a------- c:\windows\system32\netiougc.exe
2008-12-16 15:59 803,840 a------- c:\windows\system32\drivers\tcpip.sys
2008-12-16 15:58 <DIR> --d----- c:\windows\system32\ZoneLabs
2008-12-16 15:57 <DIR> --d----- c:\programdata\CheckPoint
2008-12-16 15:57 <DIR> --d----- c:\progra~2\CheckPoint
2008-12-16 15:57 <DIR> --d----- c:\windows\Internet Logs
2008-12-16 15:05 1,524,736 a------- c:\windows\system32\wucltux.dll
2008-12-16 15:05 83,456 a------- c:\windows\system32\wudriver.dll
2008-12-16 15:04 162,064 a------- c:\windows\system32\wuwebv.dll
2008-12-16 15:04 31,232 a------- c:\windows\system32\wuapp.exe
2008-12-16 15:00 <DIR> a-d-h--- c:\programdata\GTek
2008-12-16 15:00 <DIR> --dsh--- c:\windows\Installer
2008-12-16 15:00 <DIR> --d----- c:\program files\Linksys EasyLink Advisor
2008-12-16 13:42 <DIR> --d----- c:\windows\Panther
2008-12-16 11:36 <DIR> --d----- c:\program files\Realtek
2008-12-16 11:35 520,192 a------- c:\windows\RtlExUpd.dll
2008-12-16 11:35 315,392 a------- c:\windows\HideWin.exe
2008-12-16 11:33 3,903 a------- c:\windows\system32\nvnrm.nvu
2008-12-16 11:33 356,352 a------- c:\windows\system32\nvusmb.exe
2008-12-16 11:33 1,864 a------- c:\windows\system32\nvsmb.nvu
2008-12-16 11:32 356,352 a------- c:\windows\system32\NVUNINST.EXE
2008-12-16 11:31 13,696 a----r-- c:\windows\system32\drivers\BIOS.sys
2008-12-16 11:08 <DIR> --d----- c:\users\Oni-Mashou

==================== Find3M ====================

2008-12-16 18:34 86,016 a------- c:\windows\inf\infstor.dat
2008-12-16 18:34 51,200 a------- c:\windows\inf\infpub.dat
2008-12-16 18:34 86,016 a------- c:\windows\inf\infstrng.dat
2008-12-16 11:55 319,456 a------- c:\windows\DIFxAPI.dll
2008-11-11 20:00 218,376 a------- c:\windows\system32\klogon.dll
2008-11-11 19:58 25,601 a------- c:\windows\system32\drivers\klopp.dat
2006-11-02 07:50 174 a--sh--- c:\program files\desktop.ini
2006-11-02 07:40 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 07:40 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 07:40 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 07:40 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 05:32 665,600 a------- c:\windows\inf\drvindex.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 18:47:25.89 ===============



UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Version 1.0)

Microsoft® Windows Vista™ Starter
Boot Device: \Device\HarddiskVolume1
Install Date: 12/16/2008 1:47:27 PM
System Uptime: 12/16/2008 4:15:03 PM (2 hours ago)

Motherboard: BIOSTAR Group | | N61PA-M2S
Processor: AMD Athlon™ Processor LE-1600 | Socket M2 | 2200/240mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 19 GiB total, 6.518 GiB free.
D: is FIXED (NTFS) - 37 GiB total, 37.167 GiB free.
E: is CDROM (CDFS)

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP2: 12/16/2008 11:32:59 AM - Device Driver Package Install: NVIDIA System devices
RP3: 12/16/2008 11:33:16 AM - Device Driver Package Install: NVIDIA Network adapters
RP4: 12/16/2008 11:33:33 AM - Device Driver Package Install: NVIDIA Corporation Storage controllers
RP6: 12/16/2008 11:35:57 AM - Installed Realtek High Definition Audio Driver
RP7: 12/16/2008 11:36:32 AM - Device Driver Package Install: Realtek Semiconductor Corp. Sound, video and game controllers
RP9: 12/16/2008 11:55:06 AM - Installed Realtek High Definition Audio Driver
RP10: 12/16/2008 3:00:05 PM - Device Driver Package Install: Linksys EasyLink Advisor Network Protocol
RP11: 12/16/2008 3:00:19 PM - Device Driver Package Install: Cisco-Linksys LLC System devices
RP12: 12/16/2008 3:04:33 PM - Windows Update
RP13: 12/16/2008 3:57:51 PM - Installed Opera 9.63
RP14: 12/16/2008 3:58:26 PM - Device Driver Package Install: Zone Labs, a Check Point company Network Service
RP15: 12/16/2008 3:59:19 PM - Windows Update
RP16: 12/16/2008 4:00:24 PM - Installed SUPERAntiSpyware Free Edition
RP17: 12/16/2008 4:11:35 PM - Installed TuneUp Utilities 2009
RP18: 12/16/2008 6:33:34 PM - Installed Kaspersky Internet Security 2009.

==== Installed Programs ======================

µTorrent
Drivers Install For Linksys Easylink Advisor
HijackThis 2.0.2
Kaspersky Internet Security 2009
Linksys EasyLink Advisor 1.6 (0032)
Macromedia Flash Player 8
Mozilla Firefox (3.0.4)
NVIDIA Drivers
Opera 9.63
Realtek High Definition Audio Driver
SUPERAntiSpyware Free Edition
TuneUp Utilities 2009
VC 9.0 Runtime
ZoneAlarm ForceField

==== Event Viewer Messages From Past Week ========

12/16/2008 1:45:35 PM, Error: ACPI [6] - IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot 9, function 0. Please contact your system vendor for technical assistance.
12/16/2008 1:45:36 PM, Error: ACPI [6] - IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot 11, function 0. Please contact your system vendor for technical assistance.
12/16/2008 1:45:37 PM, Error: ACPI [6] - IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot 12, function 0. Please contact your system vendor for technical assistance.
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package WUClient-SelfUpdate-Aux (Feature Pack) into Install Requested(Install Requested) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-Neutral from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-en-US-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-ja-JP-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-ar-sa-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-zh-CN-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-zh-TW-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-cs-CZ-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-da-DK-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-de-DE-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-el-GR-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-es-ES-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-fi-FI-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-fr-FR-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-he-IL-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-hu-HU-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-it-IT-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-ko-KR-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-nl-NL-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-nb-NO-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-pl-PL-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-pt-BR-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-pt-PT-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-ru-RU-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-sv-SE-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-tr-TR-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-bg-BG-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-hr-HR-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-et-EE-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-lv-LV-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-lt-LT-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-ro-RO-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-sr-Latn-CS-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-sk-SK-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-sl-SI-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-th-TH-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-uk-UA-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:51 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-zh-HK-LP-Toplevel from package WUClient-SelfUpdate-Aux(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-Package (Update) into Install Requested(Install Requested) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update AuxComp from package WindowsUpdateClient-SelfUpdate-Aux-Package(Update) into Staged(Staged) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package (Update) into Install Requested(Install Requested) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update Aux from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package(Update) into Staged(Staged) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US (Language Pack) into Install Requested(Install Requested) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package WUClient-SelfUpdate-Aux-Package-en-US-MiniLP (Feature Pack) into Install Requested(Install Requested) state
12/16/2008 3:06:52 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-en-US-LP from package WUClient-SelfUpdate-Aux-Package-en-US-MiniLP(Feature Pack) into Staged(Staged) state
12/16/2008 3:06:53 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-Package (Language Pack) into Install Requested(Install Requested) state
12/16/2008 3:06:53 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update AuxResourcesLP from package WindowsUpdateClient-SelfUpdate-Aux-Package(Language Pack) into Staged(Staged) state
12/16/2008 3:06:53 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update Aux from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US(Language Pack) into Staged(Staged) state
12/16/2008 3:28:10 PM, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.1.100 for the Network Card with network address 00E04D887E87 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
12/16/2008 3:58:56 PM, Error: Service Control Manager [7030] - The TrueVector Internet Monitor service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
12/16/2008 4:12:14 PM, Error: Service Control Manager [7000] - The TuneUp Theme Extension service failed to start due to the following error: The executable program that this service is configured to run in does not implement the service.
12/16/2008 6:06:14 PM, Error: Service Control Manager [7030] - The ForceField IswSvc service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

==== End Of File ===========================

BC AdBot (Login to Remove)

 


#2 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Staff Emeritus
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the &quot;Logic Free Zone&quot;, in Md, USA
  • Local time:05:33 PM

Posted 25 December 2008 - 06:30 PM

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are

trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but

sometimes it takes just a little longer to get to every request for help.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform

the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description

of your problem, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in

working order clean and free of malware.


Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results, click no to the Optional_Scan
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool,

disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

R,
K
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)

#3 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Staff Emeritus
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the &quot;Logic Free Zone&quot;, in Md, USA
  • Local time:05:33 PM

Posted 02 January 2009 - 07:46 PM

Due to the lack of feedback, this Topic is now closed.

If you still have problems, please Start a new topic.

R,
K
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users