Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Yoog replaced Google search in Firefox and EI.


  • This topic is locked This topic is locked
2 replies to this topic

#1 TickleMeElmo

TickleMeElmo

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:11:30 AM

Posted 17 February 2009 - 10:20 PM

For months I had my Google search replaced by Yoog in both my Firefox and IE. I tried restarting my computer in safe mode and deleting the Yoog file, but that failed.

DDS (Ver_09-02-01.01) - NTFSx86
Run by John at 20:51:56.21 on Tue 02/17/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_02
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.91 [GMT -6:00]

AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
c:\Toshiba\IVP\swupdate\swupdtmr.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\AIM6\aim6.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\RAMASST.exe
C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AIM6\anotify.exe
C:\Documents and Settings\John\Desktop\dds.scr

============== Pseudo HJT Report ===============

uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mWinlogon: Userinit=c:\windows\system32\userinit.exe
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_02\bin\ssv.dll
BHO: dcads: {b653619b-ea36-67a3-0299-a1be4592c351} - c:\windows\system32\nsjE.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
TB: &Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
uRun: [Aim6] "c:\program files\aim6\aim6.exe" /d locale=en-US ee://aol/imApp
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [sysrest32.exe] c:\windows\system32\sysrest32.exe
mRun: [Lexmark X1100 Series] "c:\program files\lexmark x1100 series\lxbkbmgr.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [vptray] c:\progra~1\symant~1\VPTray.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Ad-Watch] c:\program files\lavasoft\ad-aware\AAWTray.exe
dRun: [Picasa Media Detector] c:\program files\picasa2\PicasaMediaDetector.exe
mExplorerRun: [start] c:\program files\online video add-on\isfmntr.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_02\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} - hxxp://asp.mathxl.com/wizmodules/testgen/installers/TestGenXInstall.cab
DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} - hxxp://dl.tvunetworks.com/TVUAx.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scan8/oscan8.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1153434631546
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1153932282234
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: igfxcui - igfxdev.dll
Notify: NavLogon - c:\windows\system32\NavLogon.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
STS: {79cdca21-5055-4cae-b609-e1685ef55cf7} - No File
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\john\applic~1\mozilla\firefox\profiles\r03cs34l.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www2.yoog.com/search.php?q=
FF - prefs.js: browser.search.selectedEngine - Yoog Search
FF - prefs.js: keyword.URL - hxxp://www2.yoog.com/search.php?q=

---- FIREFOX POLICIES ----
FF - user.js: google.toolbar.linkdoctor.enabled - false
FF - user.js: browser.search.selectedEngine - Yoog Search
FF - user.js: keyword.URL - hxxp://www2.yoog.com/search.php?q=
FF - user.js: keyword.enabled - true
FF - user.js: browser.search.defaultenginename - Yoog Search
FF - user.js: browser.search.defaulturl - hxxp://www2.yoog.com/search.php?q=

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-2-4 64160]
R1 SAVRT;SAVRT;c:\program files\symantec antivirus\savrt.sys [2006-9-6 337592]
R1 SAVRTPEL;SAVRTPEL;c:\program files\symantec antivirus\Savrtpel.sys [2006-9-6 54968]
R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2006-7-19 192160]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2006-7-19 169632]
R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2008-10-28 156968]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-1-18 950096]
R2 Symantec AntiVirus;Symantec AntiVirus;c:\program files\symantec antivirus\Rtvscan.exe [2006-9-27 1813232]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2007-11-12 24652]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-1-10 99376]
R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20090206.007\naveng.sys [2009-2-6 89104]
R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20090206.007\navex15.sys [2009-2-6 876112]
S3 SavRoam;SAVRoam;c:\program files\symantec antivirus\SavRoam.exe [2006-9-27 116464]
S3 sysrest.sys;sysrest.sys;\??\c:\windows\system32\sysrest.sys --> c:\windows\system32\sysrest.sys [?]

=============== Created Last 30 ================

2009-02-14 15:25 <DIR> -cd----- C:\ViewSonic
2009-02-04 15:02 15,688 a------- c:\windows\system32\lsdelete.exe
2009-02-04 14:07 64,160 a------- c:\windows\system32\drivers\Lbd.sys
2009-02-04 14:00 <DIR> -cd-h--- c:\docume~1\alluse~1\applic~1\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-01-30 21:05 85,664 a------- c:\windows\system32\5b015c09-315d-d88d-c1c1-08dd11971084.exe
2009-01-29 09:54 671,232 a------- c:\windows\system32\nsjE.dll

==================== Find3M ====================

2009-01-05 16:25 85,154 a------- c:\windows\system32\cont_dcads-remove.exe
2008-12-20 17:15 826,368 a------- c:\windows\system32\wininet.dll
2007-12-09 16:24 33,960 a------- c:\docume~1\john\applic~1\GDIPFONTCACHEV1.DAT
2008-10-02 11:45 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008100220081003\index.dat

============= FINISH: 20:52:39.28 ===============


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-02-01.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/20/2006 2:55:49 PM
System Uptime: 2/17/2009 7:38:35 PM (1 hours ago)

Motherboard: TOSHIBA | | HAQAA
Processor: Genuine Intel® CPU T1350 @ 1.86GHz | U2E1 | 1861/mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 74 GiB total, 41.253 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Cisco Systems VPN Adapter
Device ID: ROOT\NET\0000
Manufacturer: Cisco Systems
Name: Cisco Systems VPN Adapter
PNP Device ID: ROOT\NET\0000
Service: CVirtA

==== System Restore Points ===================

RP138: 11/19/2008 11:48:22 AM - System Checkpoint
RP139: 11/20/2008 8:58:34 PM - System Checkpoint
RP140: 11/22/2008 1:09:58 PM - System Checkpoint
RP141: 11/23/2008 1:37:28 PM - System Checkpoint
RP142: 11/24/2008 7:20:22 PM - System Checkpoint
RP143: 11/25/2008 9:13:06 PM - System Checkpoint
RP144: 11/27/2008 12:38:39 AM - System Checkpoint
RP145: 11/28/2008 12:56:29 PM - System Checkpoint
RP146: 11/28/2008 5:25:50 PM - Shockwave Player
RP147: 11/28/2008 5:48:24 PM - Installed iTunes
RP148: 11/28/2008 5:56:19 PM - Shockwave Player
RP149: 11/30/2008 12:42:38 AM - System Checkpoint
RP150: 12/1/2008 1:48:17 AM - System Checkpoint
RP151: 12/2/2008 10:37:04 AM - System Checkpoint
RP152: 12/3/2008 3:46:07 PM - System Checkpoint
RP153: 12/5/2008 11:04:24 AM - System Checkpoint
RP154: 12/6/2008 6:54:54 PM - System Checkpoint
RP155: 12/7/2008 9:51:32 PM - System Checkpoint
RP156: 12/8/2008 10:55:17 PM - System Checkpoint
RP157: 12/9/2008 8:53:11 PM - Installed Ad-Aware
RP158: 12/10/2008 9:20:33 PM - System Checkpoint
RP159: 12/11/2008 9:49:41 PM - System Checkpoint
RP160: 12/12/2008 12:15:43 AM - Software Distribution Service 3.0
RP161: 12/13/2008 12:52:20 PM - System Checkpoint
RP162: 12/14/2008 1:54:51 PM - System Checkpoint
RP163: 12/15/2008 8:23:13 PM - System Checkpoint
RP164: 12/16/2008 11:30:28 PM - System Checkpoint
RP165: 12/18/2008 1:33:36 PM - System Checkpoint
RP166: 12/19/2008 1:08:08 AM - Software Distribution Service 3.0
RP167: 12/20/2008 2:54:12 PM - System Checkpoint
RP168: 12/21/2008 4:12:52 PM - System Checkpoint
RP169: 12/22/2008 5:53:28 PM - System Checkpoint
RP170: 12/23/2008 2:58:03 PM - Removed Ad-Aware
RP171: 12/24/2008 2:32:40 PM - Software Distribution Service 3.0
RP172: 12/25/2008 6:25:10 PM - System Checkpoint
RP173: 12/25/2008 9:56:11 PM - Installed Microsoft Office Enterprise 2007
RP174: 12/25/2008 9:49:24 PM - Printer Driver Send To Microsoft OneNote Driver Installed
RP175: 12/25/2008 10:12:11 PM - Configured Microsoft Office Enterprise 2007
RP176: 12/27/2008 3:00:40 AM - Software Distribution Service 3.0
RP177: 12/27/2008 5:33:06 PM - Installed Seagate Manager Installer
RP178: 12/27/2008 5:41:15 PM - Installed Seagate Manager Installer
RP179: 12/28/2008 8:27:22 PM - System Checkpoint
RP180: 12/29/2008 8:51:37 PM - System Checkpoint
RP181: 12/31/2008 1:23:48 AM - System Checkpoint
RP182: 1/1/2009 12:48:00 PM - System Checkpoint
RP183: 1/2/2009 6:12:09 PM - System Checkpoint
RP184: 1/4/2009 12:13:03 AM - System Checkpoint
RP185: 1/5/2009 1:55:18 PM - System Checkpoint
RP186: 1/6/2009 12:20:23 AM - Installed QuickTime
RP187: 1/7/2009 1:11:27 AM - System Checkpoint
RP188: 1/8/2009 2:22:44 AM - System Checkpoint
RP189: 1/9/2009 10:40:43 AM - System Checkpoint
RP190: 1/10/2009 9:23:35 AM - Installed Symantec AntiVirus
RP191: 1/10/2009 9:32:33 AM - Installed Cisco Systems VPN Client 5.0.03.0560
RP192: 1/10/2009 9:35:26 AM - Removed McAfee VirusScan Enterprise
RP193: 1/10/2009 3:07:04 PM - Installed Cisco Clean Access Agent.
RP194: 1/11/2009 10:27:03 PM - System Checkpoint
RP195: 1/13/2009 5:42:42 PM - Software Distribution Service 3.0
RP196: 1/14/2009 5:22:26 PM - Software Distribution Service 3.0
RP197: 1/14/2009 9:38:47 PM - Removed Adobe Reader 8.1.3
RP198: 1/14/2009 9:40:01 PM - Installed Adobe Reader 9.
RP199: 1/16/2009 9:22:28 AM - System Checkpoint
RP200: 1/17/2009 5:20:40 PM - System Checkpoint
RP201: 1/18/2009 10:57:03 PM - System Checkpoint
RP202: 1/19/2009 11:46:13 PM - System Checkpoint
RP203: 1/21/2009 2:27:36 PM - System Checkpoint
RP204: 1/22/2009 9:46:51 PM - System Checkpoint
RP205: 1/23/2009 10:08:22 PM - System Checkpoint
RP206: 1/26/2009 12:46:02 PM - System Checkpoint
RP207: 1/28/2009 10:15:05 AM - System Checkpoint
RP208: 1/29/2009 4:47:02 PM - System Checkpoint
RP209: 1/30/2009 9:28:26 PM - System Checkpoint
RP210: 1/31/2009 9:44:00 PM - System Checkpoint
RP211: 2/1/2009 11:51:20 PM - System Checkpoint
RP212: 2/3/2009 9:35:22 AM - System Checkpoint
RP213: 2/4/2009 3:02:46 PM - Ad-Aware Checkpoint
RP214: 2/5/2009 9:20:39 PM - System Checkpoint
RP215: 2/6/2009 10:58:05 PM - System Checkpoint
RP216: 2/7/2009 11:06:16 PM - System Checkpoint
RP217: 2/9/2009 2:17:02 AM - System Checkpoint
RP218: 2/10/2009 1:01:36 PM - Software Distribution Service 3.0
RP219: 2/12/2009 2:49:11 AM - System Checkpoint
RP220: 2/13/2009 3:23:21 PM - System Checkpoint
RP221: 2/14/2009 3:25:31 PM - Installed ViewSonic Monitor Drivers
RP222: 2/15/2009 5:25:42 PM - System Checkpoint
RP223: 2/17/2009 1:00:54 PM - System Checkpoint

==== Installed Programs ======================

µTorrent
2007 Microsoft Office Suite Service Pack 1 (SP1)
Ad-Aware
Ad-Aware SE Personal
Adobe AIR
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Reader 9
Adobe Shockwave Player 11
AIM 6
ALPS Touch Pad Driver
Any Video Converter 2.7.0
AOL Coach Version 2.0(Build:20041026.5 en)
Apple Mobile Device Support
Apple Software Update
Avenue Q Screensaver 1.0
BitTorrent
Bonjour
Bonjour Core for Windows
Browser Optimizer Dcads
CCleaner (remove only)
CD/DVD Drive Acoustic Silencer
Cisco Clean Access Agent
Cisco Systems VPN Client 5.0.03.0560
Contextual Tool Dcads
Diskeeper Lite
DNA
DVD-RAM Driver
DVD Flick
FlowCharts&More Express
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows Media Format SDK (KB910998)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Intel® Graphics Media Accelerator Driver
Intel® PRO Network Connections Drivers
Intel® PROSet/Wireless Software
InterVideo WinDVD for TOSHIBA
IrfanView (remove only)
iTunes
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 4
Java™ 6 Update 2
Lexmark X1100 Series
LiveUpdate 3.1 (Symantec Corporation)
Macromedia Flash Player 8
mCore
mDrWiFi
mHelp
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office XP Professional with FrontPage
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Works
mIWA
mLogView
mMHouse
Mozilla Firefox (2.0.0.20)
mPfMgr
mPfWiz
mProSafe
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
mWlsSafe
mXML
mZConfig
Office 2003 Trial Assistant
Picasa 2
QuickTime
RealPlayer
Realtek High Definition Audio Driver
sat_screensaver_30mb
SD Secure Module
Seagate Manager Installer
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB958439)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB958437)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB960715)
SMSC IrCC V5.1.3600.5 SP2
Sonic DLA
Sonic RecordNow!
Spybot - Search & Destroy 1.4
Symantec AntiVirus
Texas Instruments PCIxx21/x515/xx12 drivers.
TIPCI
TOSHIBA Accessibility
TOSHIBA ConfigFree
TOSHIBA Controls
TOSHIBA Fn-esse
TOSHIBA Hardware Setup
TOSHIBA Hotkey Utility
TOSHIBA PC Diagnostic Tool
TOSHIBA Power Saver
TOSHIBA SD Memory Card Format
TOSHIBA Software Modem
TOSHIBA Software Upgrades
TOSHIBA Speech System Applications
TOSHIBA Speech System SR Engine(U.S.) Version1.0
TOSHIBA Speech System TTS Engine(U.S.) Version1.0
TOSHIBA Supervisor Password
Toshiba Tbiosdrv Driver
TOSHIBA Virtual Sound
TOSHIBA Zooming Utility
Touch and Launch
TouchPad On/Off Utility
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb959634)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Utility Common Driver
VideoLAN VLC media player 0.8.6c
Viewpoint Manager (Remove Only)
Viewpoint Media Player
ViewSonic Monitor Drivers
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Winamp (remove only)
Windows Defender Signatures
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows XP Service Pack 3
WinRAR archiver

==== Event Viewer Messages From Past Week ========

2/10/2009 1:48:22 PM, error: Dhcp [1002] - The IP address lease 139.67.76.184 for the Network Card with network address 001302737BAC has been denied by the DHCP server 139.67.60.247 (The DHCP Server sent a DHCPNACK message).
2/11/2009 9:23:11 AM, error: Dhcp [1002] - The IP address lease 0.0.0.0 for the Network Card with network address 001302737BAC has been denied by the DHCP server 1.1.1.1 (The DHCP Server sent a DHCPNACK message).
2/11/2009 9:40:14 AM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 001302737BAC. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
2/15/2009 8:53:53 PM, error: Dhcp [1002] - The IP address lease 139.67.76.37 for the Network Card with network address 001302737BAC has been denied by the DHCP server 139.67.60.247 (The DHCP Server sent a DHCPNACK message).
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The Fax service depends on the Print Spooler service which failed to start because of the following error: The dependency service or group failed to start.
2/16/2009 10:10:22 PM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
2/16/2009 10:10:22 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD eeCtrl Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SAVRT SAVRTPEL SPBBCDrv SYMTDI Tcpip TPwSav
2/16/2009 10:10:38 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
2/16/2009 10:10:58 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
2/16/2009 10:13:38 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
2/16/2009 10:47:13 PM, error: Dhcp [1002] - The IP address lease 139.67.76.53 for the Network Card with network address 001302737BAC has been denied by the DHCP server 139.67.60.247 (The DHCP Server sent a DHCPNACK message).
2/16/2009 10:47:20 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Cisco Systems, Inc. VPN Service service to connect.
2/16/2009 10:47:20 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Symantec AntiVirus Definition Watcher service to connect.
2/16/2009 10:47:21 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Diskeeper service to connect.
2/16/2009 10:47:21 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Swupdtmr service to connect.
2/16/2009 10:47:21 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Symantec AntiVirus service to connect.
2/16/2009 10:47:21 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Viewpoint Manager Service service to connect.
2/16/2009 10:47:21 PM, error: Service Control Manager [7000] - The Viewpoint Manager Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
2/16/2009 10:55:49 PM, error: Dhcp [1002] - The IP address lease 139.67.76.24 for the Network Card with network address 001302737BAC has been denied by the DHCP server 139.67.60.247 (The DHCP Server sent a DHCPNACK message).
2/16/2009 10:57:55 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the WZCSVC service.
2/16/2009 10:57:55 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the ShellHWDetection service.

==== End Of File ===========================

Edited by TickleMeElmo, 17 February 2009 - 10:27 PM.


BC AdBot (Login to Remove)

 


#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:07:30 PM

Posted 18 February 2009 - 05:33 AM

Hi,

Uninstall the following programs via software > add & remove programs:

Browser Optimizer Dcads
Contextual Tool Dcads
Viewpoint Manager (Remove Only)
Viewpoint Media Player

Reboot afterwards.

After reboot, * Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post the log from ComboFix in your next reply.

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix..This because Security Software may see some components ComboFix uses (prep.com for example) as suspicious and blocks the tool, or even deletes it. Please visit HERE if you don't know how.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:07:30 PM

Posted 24 February 2009 - 08:38 AM

Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users