Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Re-directed to other websites when using Firefox/System Restore error/BSOD and RootRepeal freeze problems (and more..)


  • This topic is locked This topic is locked
26 replies to this topic

#1 Kinglit

Kinglit

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 18 November 2009 - 07:07 PM

As I am typing this, I am using my laptop, as I am unable to use my desktop (for obvious reasons):


My problem (it's the huytebesy4ko.net problem everyone here seems to have) started last night around 10 PM . Firefox froze so I used Task manager, and went to the processes tab to discover a tmp file (with a numbered name like 7474. tmp or something) taking up a lot of the memory usage. Sensing immediately that it was spyware/malware, I downloaded Killbox to delete the files (I went in the Temp folder to discover another four digit name tmp file). After deleting them, I tried Firefox again to see if the problem was solved. It wasn't.


Cut to today, I try to use system restore. It goes as far to load up and restart, but after it loads up to the desktop it tells me that system restore didn't complete. I've tried this at least three times today, the third time I tried it (in safe mode), it said the restore point was damaged or was deleted. After that, I find this site, and follow the steps preparation guide. I was able to make DDS and Attach file, but when I tried to make an Ark file using RootRepeal, it gave me a BSOD "IRQ LESS OR EQUAL" error. The second time, I tried to run it in safe mode, and it froze the computer. As it loads back to the desktop, it gives me a "rundll32 has stopped working" error.





DDS (Ver_09-10-26.01) - NTFSx86
Run by trace at 16:11:15.65 on Wed 11/18/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vistaâ„¢ Ultimate 6.0.6001.1.1252.1.1033.18.1918.871 [GMT -5:00]

AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\trace\Program Files\DNA\btdna.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Remote\remoterm.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\hp\kbd\kbd.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\wuauclt.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Windows\system32\Taskmgr.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\System32\notepad.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
H:\dds.scr

============== Pseudo HJT Report ===============

uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
uStart Page = hxxp://my.freeze.com/?AcquisitionID=f9b6139b-4799-4474-be62-00140a69ffd5&s=&ipc=
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: NetAssistantBHO Class: {e38fa08e-f56a-4169-abf5-5c71e3c153a1} - c:\program files\my.freeze.com toolbar\NetAssistant.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: PCCBHO.CPCCBHO: {22fc6ce8-7d47-479f-b74a-bfbb04adb9af} - c:\program files\winferno\pc confidential\PCCBHO.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Smart-Shopper: {4a7c84e2-e95c-43c6-8dd3-03abcd0eb60e} - c:\program files\smart-shopper\bin\2.5.1\Smrt-Shpr.dll
BHO: NCO 2.0 IE BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\common files\symantec shared\coshared\browser\2.5\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\progra~1\common~1\symant~1\ids\IPSBHO.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: NetAssistantBHO Class: {e38fa08e-f56a-4169-abf5-5c71e3c153a1} - c:\program files\my.freeze.com toolbar\NetAssistant.dll
BHO: XBTBPos00 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\my.freeze.com toolbar\freeze_us.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: Show Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\common files\symantec shared\coshared\browser\2.5\CoIEPlg.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
TB: My.Freeze.com Toolbar: {d0523bb4-21e7-11dd-9ab7-415b56d89593} - c:\program files\my.freeze.com toolbar\freeze_us.dll
TB: Veoh Web Player Video Finder: {0fbb9689-d3d7-4f7a-a2e2-585b10099bfc} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll
EB: SmartShopper: {8bcb5337-ec01-4e38-840c-a964f174255b} - c:\program files\smart-shopper\bin\2.5.1\Smrt-Shpr.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
uRun: [BitTorrent DNA] "c:\users\trace\program files\dna\btdna.exe"
uRun: [HPAdvisor] c:\program files\hewlett-packard\hp advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY
uRun: [VeohPlugin] "c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe"
uRun: [Weather] c:\program files\aws\weatherbug\Weather.exe 1
uRun: [PMCRemote] c:\program files\pinnacle\shared files\programs\remote\Remoterm.exe
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [calc] rundll32.exe c:\users\trace\ntuser.dll,_IWMPEvents@0
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [DPService] "c:\program files\hp\dvdplay\DPService.exe"
mRun: [HP Health Check Scheduler] c:\program files\hewlett-packard\hp health check\HPHC_Scheduler.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [KBD] c:\hp\kbd\KbdStub.EXE
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_01\bin\jusched.exe"
mRun: [Monitor] c:\windows\pixart\pac207\Monitor.exe
mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\users\trace\appdata\roaming\microsoft\windows\start menu\programs\startup\scandisk.dll
StartupFolder: c:\users\trace\appdata\roaming\micros~1\windows\startm~1\programs\startup\scandisk.lnk - c:\windows\system32\rundll32.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\microt~1.lnk - c:\program files\microtek\scanwizard 5\ScannerFinder.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - c:\program files\winferno\pc confidential\PCConfidential.exe
IE: {925DAB62-F9AC-4221-806A-057BFB1014AA} - c:\program files\winferno\pc confidential\PCConfidential.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - {6FAC4823-815E-4361-836E-46D65ED2550B} - c:\program files\smart-shopper\bin\2.5.1\Smrt-Shpr.dll
IE: {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - {4CF088BD-BE95-40a5-BE9B-677F8683EDEA} - c:\program files\smart-shopper\bin\2.5.1\Smrt-Shpr.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\trace\appdata\roaming\mozilla\firefox\profiles\3kafcqd4.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - component: c:\program files\mozilla firefox\components\coFFPlgn.dll
FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\users\trace\appdata\local\yahoo!\browserplus\2.4.17\plugins\npybrowserplus_2.4.17.dll
FF - plugin: c:\users\trace\appdata\roaming\mozilla\firefox\profiles\3kafcqd4.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp071303000006.dll
FF - plugin: c:\users\trace\program files\dna\plugins\npbtdna.dll

---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, false);
============= SERVICES / DRIVERS ===============

R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\symantec\defini~1\symcdata\ipsdefs\20090120.002\IDSvix86.sys [2009-1-22 270384]
R2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\common files\symantec shared\CCSVCHST.EXE [2008-2-6 149352]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2008-12-1 99376]
R3 HSXHWBS3;HSXHWBS3;c:\windows\system32\drivers\HSXHWBS3.sys [2008-12-9 207360]
R3 PAC207;SoC PC-Camera;c:\windows\system32\drivers\PFC027.SYS [2006-12-5 507136]
R3 SYMNDISV;SYMNDISV;c:\windows\system32\drivers\symndisv.sys [2009-2-19 41008]
S2 gupdate1c9976ea5c9c3b0;Google Update Service (gupdate1c9976ea5c9c3b0);c:\program files\google\update\GoogleUpdate.exe [2009-2-25 133104]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2008-1-12 23888]
S4 nvrd32;NVIDIA nForce RAID Driver;c:\windows\system32\drivers\nvrd32.sys [2008-8-25 133152]

=============== Created Last 30 ================

2009-11-18 20:33:40 0 d-----w- c:\program files\Trend Micro
2009-11-18 05:39:29 0 d-----w- C:\!KillBox
2009-11-12 00:53:36 2035712 ----a-w- c:\windows\system32\win32k.sys
2009-11-12 00:53:33 351232 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-01 01:28:45 0 d-----w- c:\program files\iPod
2009-11-01 01:28:39 0 d-----w- c:\program files\iTunes

==================== Find3M ====================

2009-11-03 01:42:06 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-03 22:12:14 51200 ----a-w- c:\windows\inf\infpub.dat
2009-10-03 22:12:14 143360 ----a-w- c:\windows\inf\infstrng.dat
2009-10-03 22:12:13 86016 ----a-w- c:\windows\inf\infstor.dat
2009-09-24 04:32:33 33533 ----a-w- c:\windows\system32\CoreVorbis-uninstall.exe
2008-06-12 00:03:42 665600 ----a-w- c:\windows\inf\drvindex.dat
2008-01-21 02:41:56 174 --sha-w- c:\program files\desktop.ini
2006-11-02 12:40:37 30674 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:40:37 30674 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:40:37 287440 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:40:37 287440 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-01-02 14:55:54 16384 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2009-01-02 14:55:54 32768 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-01-02 14:55:54 16384 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\cookies\index.dat
2009-05-08 01:21:40 16384 --sha-w- c:\windows\temp\cookies\index.dat
2009-05-08 01:21:40 16384 --sha-w- c:\windows\temp\history\history.ie5\index.dat
2009-05-08 01:21:40 32768 --sha-w- c:\windows\temp\temporary internet files\content.ie5\index.dat
2008-04-09 23:35:35 8192 --sha-w- c:\windows\users\default\NTUSER.DAT

============= FINISH: 16:12:21.58 ===============

Attached Files


Edited by Kinglit, 18 November 2009 - 07:19 PM.


BC AdBot (Login to Remove)

 


#2 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 26 November 2009 - 03:08 AM

Hi,

Sorry for delayed response. Forums have been really busy. If you still need help with this do following, please.


Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop. Post them back to your topic.
Download GMER here by clicking download exe -button and then saving it your desktop:
  • Double-click .exe that you downloaded
  • Click rootkit-tab and then scan.
  • Don't check
    Show All
    box while scanning in progress!
  • When scanning is ready, click Copy.
  • This copies log to clipboard
  • Post log in your reply.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#3 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 26 November 2009 - 09:01 PM

Do you want me to attach the same DDS and Attach file?






GMER 1.0.15.15252 - http://www.gmer.net
Rootkit scan 2009-11-26 20:46:50
Windows 6.0.6001 Service Pack 1
Running: rtq3l92s.exe; Driver: C:\Users\trace\AppData\Local\Temp\uwlcipog.sys


---- System - GMER 1.0.15 ----

INT 0x51 ? 83B9ABF8
INT 0x62 ? 850F8BF8
INT 0x72 ? 850F8BF8
INT 0x82 ? 83B99BF8
INT 0x92 ? 83B9ABF8

---- Kernel code sections - GMER 1.0.15 ----

? System32\Drivers\spwy.sys The system cannot find the path specified. !
.text USBPORT.SYS!DllUnload 87AB346F 5 Bytes JMP 850F81D8
.text aujn8k9s.SYS 87B09000 22 Bytes [26, 92, C0, 81, 10, 91, C0, ...]
.text aujn8k9s.SYS 87B09017 181 Bytes [00, 32, 37, 6E, 82, 3D, 35, ...]
.text aujn8k9s.SYS 87B090CE 10 Bytes [00, 00, 00, 00, 00, 00, 02, ...]
.text aujn8k9s.SYS 87B090DA 12 Bytes [00, 00, 02, 00, 00, 00, 24, ...]
.text aujn8k9s.SYS 87B090E7 714 Bytes [00, F0, 0E, 00, 00, 00, 00, ...]
.text ...

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT \SystemRoot\System32\Drivers\SCSIPORT.SYS[ntoskrnl.exe!DbgBreakPoint] 83B982D8
IAT \SystemRoot\system32\drivers\pci.sys[ntoskrnl.exe!IoDetachDevice] [82609C4C] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack] [82609CA0] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortUchar] [825D96D6] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUchar] [825D9042] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortBufferUshort] [825D9800] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUshort] [825D90C0] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortBufferUshort] [825D913E] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\drivers\ataport.SYS[ntoskrnl.exe!DbgBreakPoint] 83B9A2D8
IAT \SystemRoot\system32\drivers\storport.sys[ntoskrnl.exe!DbgBreakPoint] 83B992D8
IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [825E8E9C] \SystemRoot\System32\Drivers\spwy.sys
IAT \SystemRoot\system32\DRIVERS\USBPORT.SYS[ntoskrnl.exe!DbgBreakPoint] 850F82D8
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortNotification] CC358B04
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortWritePortUchar] 8387B2EF
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortWritePortUlong] 458B38C6
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortGetPhysicalAddress] A5A5A514
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortConvertPhysicalAddressToUlong] 100D8BA5
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortGetScatterGatherList] 5F87B2C0
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortReadPortUchar] 30810889
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortStallExecution] 54771129
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortGetParentBusType] 10C25D5E
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortRequestCallback] [8B55CC00] \SystemRoot\System32\drivers\VIDEOPRT.SYS (Video Port Driver/Microsoft Corporation)
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortWritePortBufferUshort] 084D8BEC
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortGetUnCachedExtension] 0CF0918B
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortCompleteRequest] 458B0000
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortMoveMemory] 8B108910
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortCompleteAllActiveRequests] 000CF491
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortReleaseRequestSenseIrb] 04508900
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortBuildRequestSenseIrb] 053C7980
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortReadPortUshort] 560C558B
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortReadPortBufferUshort] C6127557
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortInitialize] B18D0502
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortGetDeviceBase] 00000CF8
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[ataport.SYS!AtaPortDeviceStateChange] A508788D
IAT \SystemRoot\System32\Drivers\aujn8k9s.SYS[NTOSKRNL.exe!KeTickCount] 8B118920

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 8497F1F8
Device \FileSystem\fastfat \FatCdrom 856B81F8
Device \Driver\volmgr \Device\VolMgrControl 8497B1F8
Device \Driver\sptd \Device\1598066160 spwy.sys
Device \Driver\usbohci \Device\USBPDO-0 851801F8
Device \Driver\usbehci \Device\USBPDO-1 851811F8
Device \Driver\PCI_PNP0154 \Device\00000056 spwy.sys
Device \Driver\PCI_PNP0154 \Device\00000056 spwy.sys
Device \Driver\nvstor32 \Device\00000063 8497E1F8
Device \Driver\volmgr \Device\HarddiskVolume1 8497B1F8

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device \Driver\nvstor32 \Device\00000064 8497E1F8
Device \Driver\volmgr \Device\HarddiskVolume2 8497B1F8

AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device \Driver\cdrom \Device\CdRom0 851B9500
Device \Driver\volmgr \Device\HarddiskVolume3 8497B1F8

AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device \Driver\cdrom \Device\CdRom1 851B9500
Device \Driver\atapi \Device\Ide\IdePort0 8497D1F8
Device \Driver\atapi \Device\Ide\IdePort1 8497D1F8
Device \Driver\volmgr \Device\HarddiskVolume4 8497B1F8

AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device \Driver\USBSTOR \Device\00000075 8519E1F8
Device \Driver\USBSTOR \Device\00000077 8519E1F8
Device \Driver\nvstor32 \Device\RaidPort0 8497E1F8
Device \Driver\iScsiPrt \Device\RaidPort1 851BD1F8
Device \Driver\usbohci \Device\USBFDO-0 851801F8
Device \Driver\USBSTOR \Device\0000007a 8519E1F8
Device \Driver\usbehci \Device\USBFDO-1 851811F8
Device \Driver\USBSTOR \Device\0000007b 8519E1F8
Device \Driver\aujn8k9s \Device\Scsi\aujn8k9s1 851BF1F8
Device \Driver\aujn8k9s \Device\Scsi\aujn8k9s1Port4Path0Target0Lun0 851BF1F8
Device \FileSystem\fastfat \Fat 856B81F8

AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \FileSystem\cdfs \Cdfs 8579B500

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 2
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7C 0x9B 0x4B 0x64 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x45 0x11 0x36 0xEB ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xCD 0xBA 0x95 0x41 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7C 0x9B 0x4B 0x64 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x45 0x11 0x36 0xEB ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xCD 0xBA 0x95 0x41 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ...
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x6A 0x9C 0xD6 0x61 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0xFF 0x7C 0x85 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x3E 0x1E 0x9E 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xE9 0x02 0x6C 0xFA ...
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xB0 0x18 0xED 0xA7 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0x97 0x20 0x4E 0x9A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0x01 0x3A 0x48 0xFC ...
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0xB1 0xCD 0x45 0x5A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0x2A 0xB7 0xCC 0xB5 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0x6C 0x43 0x2D 0x1E ...

---- EOF - GMER 1.0.15 ----

Attached Files



#4 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 27 November 2009 - 12:55 AM

Hi,

I have to ask you to temporarily uninstall Alcohol 120 and Daemon tools. Also, download SPTD setup file and execute it. In dialog that appears press "Uninstall" button and then SPTD will remove itself from your Windows installation.


After those are uninstalled, run GMER again and post back its log.


Do you want me to attach the same DDS and Attach file?

I usually prefer seeing log contents posted in reply as text if those are not too long :(

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#5 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 27 November 2009 - 02:32 AM

When GMER first started scanning, this appeared:

Posted Image


Then it gave me a "____ has a encountered a problem and must close" box, when I tried to run it again a gave me a BSOD and restarted on itself.

I am running all of this on Safe Mode.



EDIT: Done:


GMER 1.0.15.15252 - http://www.gmer.net
Rootkit scan 2009-11-27 03:32:20
Windows 6.0.6001 Service Pack 1
Running: rtq3l92s.exe; Driver: C:\Users\trace\AppData\Local\Temp\uwlcipog.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7C 0x9B 0x4B 0x64 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7C 0x9B 0x4B 0x64 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x45 0x11 0x36 0xEB ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xCD 0xBA 0x95 0x41 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ...
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x6A 0x9C 0xD6 0x61 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0xFF 0x7C 0x85 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x3E 0x1E 0x9E 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xE9 0x02 0x6C 0xFA ...
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xB0 0x18 0xED 0xA7 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0x97 0x20 0x4E 0x9A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0x01 0x3A 0x48 0xFC ...
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0xB1 0xCD 0x45 0x5A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0x2A 0xB7 0xCC 0xB5 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0x6C 0x43 0x2D 0x1E ...

---- EOF - GMER 1.0.15 ----

Edited by Kinglit, 27 November 2009 - 03:35 AM.


#6 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 27 November 2009 - 04:25 AM

Good. Let's continue.

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully first.


Please continue as follows:
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
    Remember to re-enable them afterwards.

  • Click Yes to allow ComboFix to continue scanning for malware.
When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log.


A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#7 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 27 November 2009 - 12:54 PM

Here's the combofix log:


ComboFix 09-11-26.02 - trace 11/27/2009 12:27.1.2 - x86 MINIMAL
Microsoft® Windows Vistaâ„¢ Ultimate 6.0.6001.1.1252.1.1033.18.1918.1524 [GMT -5:00]
Running from: c:\users\trace\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3742446838-2658559352-3209247587-500
c:\$recycle.bin\S-1-5-21-889684394-3566908023-1206495480-500
c:\program files\Smart-Shopper
c:\program files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
c:\program files\Smart-Shopper\Uninst.exe
c:\users\trace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.dll
c:\users\trace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.lnk
c:\users\trace\ntuser.dll
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

.
((((((((((((((((((((((((( Files Created from 2009-10-27 to 2009-11-27 )))))))))))))))))))))))))))))))
.

2009-11-27 17:24 . 2009-11-27 17:25 49152 d-----w- C:\32788R22FWJFW
2009-11-21 03:45 . 2009-11-21 03:45 439816 ----a-w- c:\users\trace\AppData\Roaming\Real\Update\setup3.09\setup.exe
2009-11-20 17:50 . 2009-11-20 17:50 680 ----a-w- c:\users\trace\AppData\Local\d3d9caps.dat
2009-11-18 20:33 . 2009-11-18 20:33 -------- d-----w- c:\program files\Trend Micro
2009-11-18 05:39 . 2009-11-18 05:42 -------- d-----w- C:\!KillBox
2009-11-16 00:29 . 2009-11-16 00:28 36864 ----a-w- c:\programdata\TEMP\{DCCAD079-F92C-44DA-B258-624FC6517A5A}\PostBuild.exe
2009-11-15 01:13 . 2009-11-15 01:13 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
2009-11-12 00:53 . 2009-08-14 13:53 2035712 ----a-w- c:\windows\system32\win32k.sys
2009-11-12 00:53 . 2009-08-10 13:05 351232 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-01 01:28 . 2009-11-01 01:28 -------- d-----w- c:\program files\iPod
2009-11-01 01:28 . 2009-11-01 01:29 4096 d-----w- c:\program files\iTunes
2009-11-01 01:23 . 2009-11-01 01:23 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-27 17:22 . 2008-08-25 13:31 24576 d-----w- c:\program files\Common Files\Symantec Shared
2009-11-27 17:20 . 2008-08-25 13:31 4096 d-----w- c:\programdata\Symantec
2009-11-27 17:11 . 2008-12-01 16:55 4096 d-----w- c:\users\trace\AppData\Roaming\DNA
2009-11-26 17:53 . 2009-01-22 17:04 4096 d-----w- c:\programdata\Google Updater
2009-11-18 19:17 . 2008-12-01 08:31 20480 d-----w- c:\programdata\Microsoft Help
2009-11-18 19:17 . 2009-05-08 18:25 8192 d-----w- c:\program files\Safari
2009-11-18 19:17 . 2008-11-30 11:44 32768 d-----w- c:\program files\Microsoft Works
2009-11-06 09:54 . 2008-12-01 16:55 20480 d-----w- c:\users\trace\AppData\Roaming\BitTorrent
2009-11-03 01:42 . 2009-10-02 21:23 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-02 09:41 . 2009-01-16 01:50 4096 d-----w- c:\users\trace\AppData\Roaming\Apple Computer
2009-11-01 01:28 . 2009-01-16 01:45 -------- d-----w- c:\program files\Common Files\Apple
2009-10-23 05:14 . 2008-08-25 12:58 4096 d-----w- c:\program files\Hewlett-Packard
2009-10-03 23:18 . 2009-10-03 23:18 -------- d-----w- c:\users\trace\AppData\Roaming\IrfanView
2009-10-03 23:18 . 2009-10-03 23:18 4096 d-----w- c:\program files\IrfanView
2009-10-03 23:03 . 2009-10-03 23:03 4096 d-----w- c:\program files\Easy Graphic Converter
2009-10-03 22:06 . 2008-08-25 12:55 4096 d--h--w- c:\program files\InstallShield Installation Information
2009-10-03 22:06 . 2009-10-03 22:06 -------- d-----w- c:\program files\Microtek
2009-09-24 04:32 . 2009-09-24 04:32 33533 ----a-w- c:\windows\system32\CoreVorbis-uninstall.exe
2009-08-29 20:45 . 2009-08-29 20:45 488960 ----a-w- c:\users\trace\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\pmv302-0811070-0-main.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2008-04-09 23:35 . 2008-04-09 23:35 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}"= "c:\program files\My.Freeze.com Toolbar\NetAssistant.dll" [2008-11-27 253048]

[HKEY_CLASSES_ROOT\clsid\{e38fa08e-f56a-4169-abf5-5c71e3c153a1}]
[HKEY_CLASSES_ROOT\NetAssistant.NetAssistantBHO.1]
[HKEY_CLASSES_ROOT\TypeLib\{1E8FC16F-4C51-49C4-BC9B-4FC24BDDCEE7}]
[HKEY_CLASSES_ROOT\NetAssistant.NetAssistantBHO]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-09-30 01:24 325000 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}]
2008-11-27 03:40 253048 ----a-w- c:\program files\My.Freeze.com Toolbar\NetAssistant.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-30 325000]
"{D0523BB4-21E7-11DD-9AB7-415B56D89593}"= "c:\program files\My.Freeze.com Toolbar\freeze_us.dll" [2008-11-27 1916024]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CLASSES_ROOT\clsid\{d0523bb4-21e7-11dd-9ab7-415b56d89593}]
[HKEY_CLASSES_ROOT\TBSB00001.TBSB00001.3]
[HKEY_CLASSES_ROOT\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKEY_CLASSES_ROOT\TBSB00001.TBSB00001]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D0523BB4-21E7-11DD-9AB7-415B56D89593}"= "c:\program files\My.Freeze.com Toolbar\freeze_us.dll" [2008-11-27 1916024]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-30 325000]

[HKEY_CLASSES_ROOT\clsid\{d0523bb4-21e7-11dd-9ab7-415b56d89593}]
[HKEY_CLASSES_ROOT\TBSB00001.TBSB00001.3]
[HKEY_CLASSES_ROOT\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKEY_CLASSES_ROOT\TBSB00001.TBSB00001]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW" [X]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"BitTorrent DNA"="c:\users\trace\Program Files\DNA\btdna.exe" [2009-10-07 323392]
"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2009-05-19 3561720]
"Weather"="c:\program files\AWS\WeatherBug\Weather.exe" [2007-08-29 1347584]
"PMCRemote"="c:\program files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe" [2008-09-05 226576]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-03-18 4363504]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2008-01-21 2153472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-22 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-22 92704]
"DPService"="c:\program files\HP\DVDPlay\DPService.exe" [2008-06-12 90112]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-02 75008]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2007-04-18 65536]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2007-08-31 1037736]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_01\bin\jusched.exe" [2007-04-07 132760]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.exe" [2006-11-03 319488]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-09-12 36352]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-02-25 198160]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-10-29 141600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Microtek Scanner Finder.lnk - c:\program files\Microtek\ScanWizard 5\ScannerFinder.exe [2009-10-3 344064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\rootrepeal.sys]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

S2 gupdate1c9976ea5c9c3b0;Google Update Service (gupdate1c9976ea5c9c3b0);c:\program files\Google\Update\GoogleUpdate.exe [2/25/2009 12:29 PM 133104]
S3 HSXHWBS3;HSXHWBS3;c:\windows\System32\drivers\HSXHWBS3.sys [12/9/2008 12:09 AM 207360]
S3 PAC207;SoC PC-Camera;c:\windows\System32\drivers\PFC027.SYS [12/5/2006 2:34 PM 507136]
S3 vaxscsi;vaxscsi;c:\windows\System32\drivers\vaxscsi.sys [7/1/2009 8:58 PM 223128]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - ECACHE
*Deregistered* - CO_Mon
*Deregistered* - eeCtrl
*Deregistered* - EraserUtilRebootDrv
*Deregistered* - IDSvix86
*Deregistered* - SYMTDI
.
Contents of the 'Scheduled Tasks' folder

2009-11-27 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-01-22 14:42]

2009-11-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-25 17:29]

2009-11-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-25 17:29]

2009-11-05 c:\windows\Tasks\HPCeeScheduleFortrace.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2008-08-25 03:03]

2009-11-27 c:\windows\Tasks\PCConfidential.job
- c:\program files\Winferno\PC Confidential\PCConfidential.exe [2008-12-22 22:10]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://my.freeze.com/?AcquisitionID=f9b6139b-4799-4474-be62-00140a69ffd5&s=&ipc=
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
FF - ProfilePath - c:\users\trace\AppData\Roaming\Mozilla\Firefox\Profiles\3kafcqd4.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\users\trace\AppData\Local\Yahoo!\BrowserPlus\2.4.17\Plugins\npybrowserplus_2.4.17.dll
FF - plugin: c:\users\trace\AppData\Roaming\Mozilla\Firefox\Profiles\3kafcqd4.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071303000006.dll
FF - plugin: c:\users\trace\Program Files\DNA\plugins\npbtdna.dll

---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, false);.
- - - - ORPHANS REMOVED - - - -

HKLM-RunOnce-isDeleteMe - c:\users\trace\AppData\Local\Temp\isDel.bat
HKLM-RunOnce-<NO NAME> - (no file)
AddRemove-Activation Assistant for the 2007 Microsoft Office suites - c:\programdata\{B3C2C1CD-6B77-4A96-B670-F734AC2A1CBC}\Microsoft Office Activation Assistant.exe REMOVE=TRUE MODIFY=FALSE
AddRemove-NVIDIA Drivers - c:\windows\system32\nvuninst.exe UninstallGUI
AddRemove-RealJukebox 1.0 - c:\program files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
AddRemove-RealPlayer 6.0 - c:\program files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
AddRemove-Smart-Shopper - c:\program files\Smart-Shopper\Uninst.exe
AddRemove-{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA} - c:\program files\InstallShield Installation Information\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\Setup.exeUNINSTALL



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-27 12:34
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2009-11-27 12:36
ComboFix-quarantined-files.txt 2009-11-27 17:36

Pre-Run: 67,836,350,464 bytes free
Post-Run: 68,878,143,488 bytes free

- - End Of File - - 585AAA04DBAD1D993D447F9DBF7B63E2




Also when I ran combofix, it said access denied, and then said something about Administrator privileges. It ran anyway.
Now I have a problem. When I click on dds to make a new dds log (and an attach file too?), it tells me that an illegal operation attempted on registry key that has been marked for deletion. Should I try to run it again and use the "run as administrator" option?

Edited by Kinglit, 27 November 2009 - 01:01 PM.


#8 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 27 November 2009 - 01:06 PM

When I click on dds to make a new dds log (and an attach file too?), it tells me that an illegal operation attempted on registry key that has been marked for deletion. Should I try to run it again and use the "run as administrator" option?

Hi,

Please reboot and try to create dds logs after that.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#9 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 27 November 2009 - 01:19 PM

Alright, I got it:


DDS (Ver_09-10-26.01) - NTFSx86 MINIMAL
Run by trace at 13:14:46.51 on Fri 11/27/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.1.1033.18.1918.1560 [GMT -5:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
C:\Windows\system32\DllHost.exe
C:\Users\trace\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://my.freeze.com/?AcquisitionID=f9b6139b-4799-4474-be62-00140a69ffd5&s=&ipc=
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: NetAssistantBHO Class: {e38fa08e-f56a-4169-abf5-5c71e3c153a1} - c:\program files\my.freeze.com toolbar\NetAssistant.dll
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: NetAssistantBHO Class: {e38fa08e-f56a-4169-abf5-5c71e3c153a1} - c:\program files\my.freeze.com toolbar\NetAssistant.dll
BHO: XBTBPos00 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\my.freeze.com toolbar\freeze_us.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
TB: My.Freeze.com Toolbar: {d0523bb4-21e7-11dd-9ab7-415b56d89593} - c:\program files\my.freeze.com toolbar\freeze_us.dll
TB: Veoh Web Player Video Finder: {0fbb9689-d3d7-4f7a-a2e2-585b10099bfc} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
uRun: [BitTorrent DNA] "c:\users\trace\program files\dna\btdna.exe"
uRun: [HPAdvisor] c:\program files\hewlett-packard\hp advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY
uRun: [VeohPlugin] "c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe"
uRun: [Weather] c:\program files\aws\weatherbug\Weather.exe 1
uRun: [PMCRemote] c:\program files\pinnacle\shared files\programs\remote\Remoterm.exe
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [DPService] "c:\program files\hp\dvdplay\DPService.exe"
mRun: [HP Health Check Scheduler] c:\program files\hewlett-packard\hp health check\HPHC_Scheduler.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [KBD] c:\hp\kbd\KbdStub.EXE
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_01\bin\jusched.exe"
mRun: [Monitor] c:\windows\pixart\pac207\Monitor.exe
mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRunOnce: [<NO NAME>]
mRunOnce: [GrpConv] grpconv -o
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\microt~1.lnk - c:\program files\microtek\scanwizard 5\ScannerFinder.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {53F6FCCD-9E22-4d71-86EA-6E43136192AB}
IE: {925DAB62-F9AC-4221-806A-057BFB1014AA}
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\trace\appdata\roaming\mozilla\firefox\profiles\3kafcqd4.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\users\trace\appdata\local\yahoo!\browserplus\2.4.17\plugins\npybrowserplus_2.4.17.dll
FF - plugin: c:\users\trace\appdata\roaming\mozilla\firefox\profiles\3kafcqd4.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp071303000006.dll
FF - plugin: c:\users\trace\program files\dna\plugins\npbtdna.dll

---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, false);
============= SERVICES / DRIVERS ===============

S2 gupdate1c9976ea5c9c3b0;Google Update Service (gupdate1c9976ea5c9c3b0);c:\program files\google\update\GoogleUpdate.exe [2009-2-25 133104]
S3 HSXHWBS3;HSXHWBS3;c:\windows\system32\drivers\HSXHWBS3.sys [2008-12-9 207360]
S3 PAC207;SoC PC-Camera;c:\windows\system32\drivers\PFC027.SYS [2006-12-5 507136]
S4 nvrd32;NVIDIA nForce RAID Driver;c:\windows\system32\drivers\nvrd32.sys [2008-8-25 133152]

=============== Created Last 30 ================

2009-11-27 17:25:49 98816 ----a-w- c:\windows\sed.exe
2009-11-27 17:25:49 77312 ----a-w- c:\windows\MBR.exe
2009-11-27 17:25:49 260608 ----a-w- c:\windows\PEV.exe
2009-11-27 17:25:49 161792 ----a-w- c:\windows\SWREG.exe
2009-11-26 18:33:43 714240 ----a-w- c:\windows\system32\timedate.cpl
2009-11-21 03:45:09 0 d-----w- c:\programdata\Real
2009-11-18 20:33:40 0 d-----w- c:\program files\Trend Micro
2009-11-18 05:39:29 0 d-----w- C:\!KillBox
2009-11-12 00:53:36 2035712 ----a-w- c:\windows\system32\win32k.sys
2009-11-12 00:53:33 351232 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-01 01:28:45 0 d-----w- c:\program files\iPod
2009-11-01 01:28:39 0 d-----w- c:\program files\iTunes

==================== Find3M ====================

2009-11-27 17:19:55 86016 ----a-w- c:\windows\inf\infstor.dat
2009-11-27 17:19:55 51200 ----a-w- c:\windows\inf\infpub.dat
2009-11-27 17:19:55 143360 ----a-w- c:\windows\inf\infstrng.dat
2009-11-03 01:42:06 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-09-24 04:32:33 33533 ----a-w- c:\windows\system32\CoreVorbis-uninstall.exe
2008-06-12 00:03:42 665600 ----a-w- c:\windows\inf\drvindex.dat
2008-01-21 02:41:56 174 --sha-w- c:\program files\desktop.ini
2006-11-02 12:40:37 30674 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:40:37 30674 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:40:37 287440 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:40:37 287440 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-01-02 14:55:54 16384 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2009-01-02 14:55:54 32768 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-01-02 14:55:54 16384 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\cookies\index.dat
2008-04-09 23:35:35 8192 --sha-w- c:\windows\users\default\NTUSER.DAT

============= FINISH: 13:16:13.07 ===============

Attached Files



#10 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 27 November 2009 - 03:04 PM

Hi again,


BitTornado
BitTorrent
DNA
MakeTorrent


Above listed ones are P2P file sharing programs. P2P downloads are nowadays one of those things that most likely bring infection into the system. My recommendation is to uninstall these (and other if present) P2P file sharing programs.



Uninstall these toolbars if not installed on purpose:
Ask Toolbar
My.Freeze.com Toolbar




Uninstall old Adobe Reader versions and get the latest one (9.2) here or get Foxit Reader here. Make sure you don't install toolbar if choose Foxit Reader! You may also check free readers introduced here.

Check here to see if your Flash is up-to-date (do it separately with each of your browsers). If not, uninstall vulnerable versions by following instructions here. Fresh version can be obtained here.


Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update to the latest version...

Updating Java:
  • Download the latest version of Java Runtime Environment (JRE) 6 Update 17.
  • Click the
    Download
    button to the right.
  • Select Windows on platform combobox and check the box that says:
    Accept License Agreement. Click continue.
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6u17-windows-i586-p.exe to install the newest version. Uncheck Carbonite online backup trial if it's offered there.


Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it

Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Java Cache

*The other boxes are optional*
Then click the Empty Selected button.

If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

If you use Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Click Exit on the Main menu to close the program.


Please run an online scan with Kaspersky Online Scanner as instructed in the screenshot here.


Post back its report, a fresh dds.txt log and GMER log. Is redirecting still occuring? If it is do both Firefox and Internet Explorer redirect?

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#11 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 28 November 2009 - 12:16 PM

Here's the KAS report:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Saturday, November 28, 2009
Operating system: Microsoft Windows Vista Ultimate Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Saturday, November 28, 2009 05:47:59
Records in database: 3303431
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
G:\

Scan statistics:
Objects scanned: 160165
Threats found: 11
Infected objects found: 19
Suspicious objects found: 0
Scan duration: 03:47:55


File name / Threat / Threats count
C:\!KillBox\681A.tmp Infected: Packed.Win32.TDSS.aa 1
C:\!KillBox\794A.tmp Infected: Packed.Win32.Krap.ag 1
C:\!KillBox\794A.tmp( 1) Infected: Packed.Win32.Krap.ag 1
C:\Program Files\RealVNC\VNC4\vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ad 1
C:\Program Files\RealVNC\VNC4\winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ad 1
C:\Program Files\Seekeen\skopt.exe Infected: not-a-virus:AdWare.Win32.OneStep.frg 1
C:\Qoobox\Quarantine\C\Users\trace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scandisk.dll.vir Infected: Packed.Win32.Krap.ah 1
C:\Qoobox\Quarantine\C\Users\trace\ntuser.dll.vir Infected: Packed.Win32.Krap.ah 1
C:\Users\trace\AppData\Local\VirtualStore\Windows\System32\net.net Infected: Trojan-Clicker.Win32.VBiframe.vs 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\78fcee10-50666ea1 Infected: Trojan-Downloader.Java.OpenConnection.at 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\41ddd8e2-43a2e2d9 Infected: Packed.Win32.Krap.ah 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\38c12a4-3bdb3233 Infected: Packed.Win32.TDSS.y 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\38c12a4-60829882 Infected: Trojan-Downloader.Java.OpenStream.ad 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\6eca6864-454adc34 Infected: Trojan-Downloader.Java.Agent.ab 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\6b800f31-7e00e7ed Infected: Trojan-Downloader.Java.OpenConnection.at 1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\25e72a3d-227d9a1f Infected: Packed.Win32.TDSS.aa 1
C:\Users\trace\Downloads\FU-Setup_LE.exe Infected: not-a-virus:AdWare.Win32.Rabio.lp 1
C:\Users\trace\Downloads\vnc-4_1_3-x86_win32.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.ad 2

Selected area has been scanned.




The Attach fiile:


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-10-26.01)

Microsoft® Windows Vista™ Ultimate
Boot Device: \Device\HarddiskVolume1
Install Date: 12/9/2008 12:52:50 AM
System Uptime: 11/27/2009 6:11:24 PM (11 hours ago)

Motherboard: OEM_MB | | IVY8
Processor: AMD Sempron™ Dual Core Processor 2200 | Socket AM2 | 2000/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 138 GiB total, 55.364 GiB free.
D: is FIXED (NTFS) - 11 GiB total, 1.506 GiB free.
E: is CDROM ()
G: is Removable

==== Disabled Device Manager Items =============

Class GUID: {4d36e96f-e325-11ce-bfc1-08002be10318}
Description: Microsoft PS/2 Port Mouse (IntelliPoint)
Device ID: ACPI\PNP0F13\4&309534F1&0
Manufacturer: Microsoft
Name: Microsoft PS/2 Port Mouse (IntelliPoint)
PNP Device ID: ACPI\PNP0F13\4&309534F1&0
Service: i8042prt

==== System Restore Points ===================

RP598: 11/24/2009 2:58:11 AM - Windows Update
RP599: 11/26/2009 12:55:08 PM - Windows Update
RP600: 11/26/2009 1:23:37 PM - Windows Update
RP601: 11/27/2009 10:25:27 AM - Windows Update
RP602: 11/27/2009 5:43:16 PM - Removed Adobe Reader 8.1.6
RP603: 11/27/2009 5:57:44 PM - Removed Java™ SE Runtime Environment 6 Update 1
RP604: 11/27/2009 6:00:34 PM - Installed Java™ SE Development Kit 6 Update 17
RP605: 11/27/2009 6:02:55 PM - Installed Java™ 6 Update 17
RP606: 11/28/2009 3:00:23 AM - Windows Update

==== Installed Programs ======================

AAC Decoder
AC3Filter (remove only)
Activation Assistant for the 2007 Microsoft Office suites
Adobe Flash Player 10 Plugin
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft VideoImpression 2
AutoUpdate
Bonjour
Camera Driver
Cards_Calendar_OrderGift_DoMorePlugout
Compatibility Pack for the 2007 Office system
CoreVorbis Audio Decoder (remove only)
CyberLink DVD Suite Deluxe
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Version Checker
DivX Web Player
DVD Decrypter (Remove Only)
DVD Play
DVDx
Easy Graphic Converter 1.2
Enhanced Multimedia Keyboard Solution
FairUse Wizard 2
Google Chrome
Google Earth
Google Update Helper
Google Updater
H.264 Decoder
Haali Media Splitter
Hardware Diagnostic Tools
Hewlett-Packard Active Check for Health Check
Hewlett-Packard Asset Agent for Health Check
HijackThis 2.0.2
HP Active Support Library
HP Advisor
HP Customer Experience Enhancements
HP Customer Feedback
HP Demo
HP Photosmart Essential 2.5
HP Photosmart Essential 3.0
HP Picasso Media Center Add-In
HP Recovery Manager RSS
HP Update
HPPhotoSmartPhotobookWebPack1
HPTCSSetup
InFlac 1.1.1
IrfanView (remove only)
iTunes
Java DB 10.4.2.1
Java™ 6 Update 17
Java™ SE Development Kit 6 Update 17
LabelPrint
Lernout & Hauspie TruVoice American English TTS Engine
LightScribe System Software
LightScribeTemplateLabeler
Matroska Pack
Microsoft Application Error Reporting
Microsoft IntelliPoint 6.2
Microsoft MSDN 2005 Express Edition - ENU
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office Home and Student 2007 Trial
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft Visual Basic 2005 Express Edition - ENU
Microsoft Visual Basic 2005 Express Edition - ENU Service Pack 1 (KB926747)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Works
MKV Splitter
MobileMe Control Panel
Movavi Video Converter 7
Mozilla Firefox (3.0.15)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
muvee autoProducer 6.1
My HP Games
Nightwing's Diamond/Pearl Stat Calculator
NSIS Mixxx
Octoshape add-in for Adobe Flash Player
PCIe Soft Data Fax Modem with SmartCP
Power2Go
PowerDirector
PSSWCORE
Python 2.5.2
QuickTime
Realtek High Definition Audio Driver
Rhapsody
Rhapsody MP3 Download Manager
Safari
ScanWizard 5
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB973704)
Security Update for Microsoft Office Excel 2007 (KB973593)
Security Update for Microsoft Office Outlook 2007 (KB972363)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB969693)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Seekeen 1.0 build 132
Sony Vegas Pro 8.0
SPORE Creature Creator Trial Edition
Super DVD Creator 9.25.0
TestOut Navigator (Stand-Alone Version)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 (KB974561)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Microsoft Visual Basic 2005 Express Edition - ENU (KB932232)
Update for Outlook 2007 Junk Email Filter (kb975960)
VC80CRTRedist - 8.0.50727.762
Veoh Web Player
VideoToolkit01
VNC Free Edition 4.1.3
WeatherBug
Winamp
Windows Media Player Firefox Plugin
Windows Movie Maker 2.6
WinRAR archiver
Xvid 1.2.2 final uninstall
Yahoo! BrowserPlus
Yahoo! Messenger
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

11/27/2009 2:25:29 AM, Error: EventLog [6008] - The previous system shutdown at 2:23:18 AM on 11/27/2009 was unexpected.
11/27/2009 10:37:02 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80073712: Update for Windows Vista (KB976098).
11/27/2009 10:35:39 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB976098 (Update) into Resolving(Resolving) state
11/27/2009 10:35:39 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB976098 (Update) into Absent(Absent) state
11/27/2009 10:27:35 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958483 (Update) into Resolving(Resolving) state
11/27/2009 10:27:35 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958483 (Update) into Absent(Absent) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-42_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-41_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-40_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-4_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-39_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-38_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-37_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-36_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-35_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-34_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-33_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-32_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-31_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-3_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-284_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-283_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-282_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-281_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-280_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-279_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-278_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-277_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-276_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-275_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-274_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-273_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-246_neutral_GDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:27:24 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958483-245_neutral_LDR from package KB958483(Update) into Resolving(Resolving) state
11/27/2009 10:26:02 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958481 (Update) into Resolving(Resolving) state
11/27/2009 10:26:02 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958481 (Update) into Absent(Absent) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-9_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-8_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-752_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-751_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-750_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-749_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-748_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-747_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-746_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-745_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-704_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-703_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-702_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-701_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-700_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-7_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-699_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-698_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-697_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-696_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-695_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-694_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-693_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-692_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-691_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-690_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-689_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-688_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-687_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-66_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-65_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-64_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-63_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-62_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-61_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-60_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-6_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-59_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-5_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-4_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-3_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-2_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-18_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-17_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-16_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-15_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-14_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-13_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-12_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-11_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-10_neutral_GDR from package KB958481(Update) into Resolving(Resolving) state
11/27/2009 10:25:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958481-1_neutral_LDR from package KB958481(Update) into Resolving(Resolving) state
11/26/2009 8:18:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
11/26/2009 8:01:47 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
11/26/2009 8:01:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
11/26/2009 8:01:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
11/26/2009 8:01:12 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
11/26/2009 8:01:10 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
11/26/2009 8:00:58 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
11/26/2009 7:57:45 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD CSC DfsC eeCtrl NetBIOS netbt nsiproxy PSched RasAcd rdbss Smb SPBBCDrv spldr SRTSP SRTSPX SymIM SYMTDI tdx Wanarpv6
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The WebDav Client Redirector Driver service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The WebClient service depends on the WebDav Client Redirector Driver service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service service which failed to start because of the following error: A device attached to the system is not functioning.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancilliary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
11/26/2009 7:57:45 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
11/26/2009 7:56:29 PM, Error: Microsoft-Windows-TerminalServices-LocalSessionManager [1048] - Terminal Service start failed. The relevant status code was This service cannot be started in Safe Mode .
11/26/2009 7:56:28 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service TermService with arguments "" in order to run the server: {F9A874B6-F8A8-4D73-B5A8-AB610816828B}
11/26/2009 7:50:14 PM, Error: BROWSER [8007] - The browser was unable to update the service status bits. The data is the error.
11/26/2009 12:50:50 PM, Error: Server [2505] - The server could not bind to the transport \Device\NetBT_Tcpip_{1C517DEB-59CF-4806-A1BA-A71265252F3D} because another computer on the network has the same name. The server could not start.
11/26/2009 12:50:23 PM, Error: EventLog [6008] - The previous system shutdown at 3:09:06 AM on 11/24/2009 was unexpected.
11/26/2009 1:37:13 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973687 (Update) into Resolving(Resolving) state
11/26/2009 1:37:13 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973687 (Update) into Absent(Absent) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-4_neutral_GDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-34_neutral_GDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-33_neutral_LDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-32_neutral_GDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-31_neutral_LDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-3_neutral_LDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-2_neutral_GDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-19_neutral_GDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-18_neutral_LDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-17_neutral_GDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-16_neutral_LDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:37:09 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973687-1_neutral_LDR from package KB973687(Update) into Resolving(Resolving) state
11/26/2009 1:35:04 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB968816 (Security Update) into Resolving(Resolving) state
11/26/2009 1:35:04 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB968816 (Security Update) into Absent(Absent) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-4_neutral_GDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-3_neutral_LDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-28_neutral_GDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-27_neutral_LDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-26_neutral_GDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-25_neutral_LDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-2_neutral_GDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-16_neutral_GDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-15_neutral_LDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-14_neutral_GDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-13_neutral_LDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:34:57 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 968816-1_neutral_LDR from package KB968816(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:10 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958623 (Security Update) into Resolving(Resolving) state
11/26/2009 1:31:10 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958623 (Security Update) into Absent(Absent) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-87_neutral_LDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-86_neutral_LDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-5_neutral_GDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-4_neutral_LDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-27_neutral_LDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-26_neutral_LDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:31:03 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958623-13_neutral_GDR from package KB958623(Security Update) into Resolving(Resolving) state
11/26/2009 1:21:00 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974455 (Security Update) into Resolving(Resolving) state
11/26/2009 1:21:00 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974455 (Security Update) into Absent(Absent) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-9_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-86_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-85_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-84_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-83_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-82_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-81_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-80_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-8_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-79_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-78_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-77_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-37_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-36_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-35_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-34_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-33_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-32_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-31_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-30_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-29_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-28_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-27_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-26_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-25_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-24_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-23_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-22_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-21_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-20_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-19_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-18_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-17_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-16_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-159_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-158_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-157_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-156_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-155_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-154_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-153_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-152_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-151_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-150_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-15_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-149_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-148_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-147_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-146_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-145_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-144_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-143_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-142_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-141_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-140_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-14_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-139_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-138_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-137_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-136_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-135_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-134_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-133_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-132_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-131_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-130_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-13_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-129_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-128_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-127_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-126_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-125_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-124_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-123_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-122_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-121_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-120_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-12_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-119_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-118_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-117_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-116_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-115_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-114_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-113_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-112_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-111_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-110_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-11_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-109_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-108_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-107_neutral_GDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-106_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:59 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974455-10_neutral_LDR from package KB974455(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:37 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB960225 (Security Update) into Resolving(Resolving) state
11/26/2009 1:20:37 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB960225 (Security Update) into Absent(Absent) state
11/26/2009 1:20:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 960225-5_neutral_GDR from package KB960225(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 960225-4_neutral_LDR from package KB960225(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 960225-14_neutral_GDR from package KB960225(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 960225-13_neutral_LDR from package KB960225(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971486-5_neutral_GDR from package KB971486(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971486-4_neutral_LDR from package KB971486(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971486-23_neutral_GDR from package KB971486(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971486-22_neutral_LDR from package KB971486(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971486-14_neutral_GDR from package KB971486(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971486-13_neutral_LDR from package KB971486(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB971486 (Security Update) into Resolving(Resolving) state
11/26/2009 1:20:29 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB971486 (Security Update) into Absent(Absent) state
11/26/2009 1:20:21 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB971961 (Security Update) into Resolving(Resolving) state
11/26/2009 1:20:21 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB971961 (Security Update) into Absent(Absent) state
11/26/2009 1:20:20 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971961-20_neutral_GDR from package KB971961(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:20 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971961-2_neutral_GDR from package KB971961(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:20 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971961-19_neutral_LDR from package KB971961(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:20 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971961-11_neutral_GDR from package KB971961(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:20 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971961-10_neutral_LDR from package KB971961(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:20 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 971961-1_neutral_LDR from package KB971961(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:13 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958687 (Security Update) into Resolving(Resolving) state
11/26/2009 1:20:13 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958687 (Security Update) into Absent(Absent) state
11/26/2009 1:20:11 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958687-2_neutral_GDR from package KB958687(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:11 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958687-11_neutral_GDR from package KB958687(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:11 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958687-10_neutral_LDR from package KB958687(Security Update) into Resolving(Resolving) state
11/26/2009 1:20:11 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958687-1_neutral_LDR from package KB958687(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:57 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB952004 (Security Update) into Resolving(Resolving) state
11/26/2009 1:19:57 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB952004 (Security Update) into Absent(Absent) state
11/26/2009 1:19:56 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952004-2_neutral_GDR from package KB952004(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:56 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952004-11_neutral_GDR from package KB952004(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:56 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952004-10_neutral_LDR from package KB952004(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:56 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952004-1_neutral_LDR from package KB952004(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:40 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB956744 (Security Update) into Resolving(Resolving) state
11/26/2009 1:19:40 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB956744 (Security Update) into Absent(Absent) state
11/26/2009 1:19:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956744-8_neutral_GDR from package KB956744(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956744-7_neutral_LDR from package KB956744(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956744-2_neutral_GDR from package KB956744(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956744-14_neutral_GDR from package KB956744(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956744-13_neutral_LDR from package KB956744(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956744-1_neutral_LDR from package KB956744(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:28 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973507 (Security Update) into Resolving(Resolving) state
11/26/2009 1:19:28 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973507 (Security Update) into Absent(Absent) state
11/26/2009 1:19:23 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973507-5_neutral_GDR from package KB973507(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:23 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973507-4_neutral_LDR from package KB973507(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:23 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973507-23_neutral_GDR from package KB973507(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:23 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973507-22_neutral_LDR from package KB973507(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:23 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973507-14_neutral_GDR from package KB973507(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:23 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973507-13_neutral_LDR from package KB973507(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:14 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB956572 (Security Update) into Resolving(Resolving) state
11/26/2009 1:19:14 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB956572 (Security Update) into Absent(Absent) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-59_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-58_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-57_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-56_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-55_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-54_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-53_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-52_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-51_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-50_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-49_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-48_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-21_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-20_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-19_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-18_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-17_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-16_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-15_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-14_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-13_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-12_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-11_neutral_GDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:19:10 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956572-10_neutral_LDR from package KB956572(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:58 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973540 (Security Update) into Resolving(Resolving) state
11/26/2009 1:18:58 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973540 (Security Update) into Absent(Absent) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-4_neutral_GDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-3_neutral_LDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-26_neutral_GDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-25_neutral_LDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-24_neutral_GDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-23_neutral_LDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-2_neutral_GDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-14_neutral_GDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-13_neutral_LDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-12_neutral_GDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-11_neutral_LDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:54 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973540-1_neutral_LDR from package KB973540(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:47 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB970710 (Security Update) into Resolving(Resolving) state
11/26/2009 1:18:47 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB970710 (Security Update) into Absent(Absent) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-4_neutral_GDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-3_neutral_LDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-28_neutral_GDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-27_neutral_LDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-26_neutral_GDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-25_neutral_LDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-2_neutral_GDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-16_neutral_GDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-15_neutral_LDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-14_neutral_GDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-13_neutral_LDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:40 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970710-1_neutral_LDR from package KB970710(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:32 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB961501 (Security Update) into Resolving(Resolving) state
11/26/2009 1:18:32 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB961501 (Security Update) into Absent(Absent) state
11/26/2009 1:18:26 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961501-20_neutral_GDR from package KB961501(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:26 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961501-2_neutral_GDR from package KB961501(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:26 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961501-19_neutral_LDR from package KB961501(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:26 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961501-11_neutral_GDR from package KB961501(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:26 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961501-10_neutral_LDR from package KB961501(Security Update) into Resolving(Resolving) state
11/26/2009 1:18:26 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961501-1_neutral_LDR from package KB961501(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:56 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB956802 (Security Update) into Resolving(Resolving) state
11/26/2009 1:17:56 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB956802 (Security Update) into Absent(Absent) state
11/26/2009 1:17:49 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956802-5_neutral_GDR from package KB956802(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:49 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956802-4_neutral_LDR from package KB956802(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:49 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956802-14_neutral_GDR from package KB956802(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:49 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 956802-13_neutral_LDR from package KB956802(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958624-8_neutral_GDR from package KB958624(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958624-7_neutral_LDR from package KB958624(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958624-2_neutral_GDR from package KB958624(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:36 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 958624-1_neutral_LDR from package KB958624(Security Update) into Resolving(Resolving) state
11/26/2009 1:17:36 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958624 (Security Update) into Resolving(Resolving) state
11/26/2009 1:17:36 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB958624 (Security Update) into Absent(Absent) state
11/26/2009 1:02:32 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB967723 (Security Update) into Resolving(Resolving) state
11/26/2009 1:02:32 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB967723 (Security Update) into Absent(Absent) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-99_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-98_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-97_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-776_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-775_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-774_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-773_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-772_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-771_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-770_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-769_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-642_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-641_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-640_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-639_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-638_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-637_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-636_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-635_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-239_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-238_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-237_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-236_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-235_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-234_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-233_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-232_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-231_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1356_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1355_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1354_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1353_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1352_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1351_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1224_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1223_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1222_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1221_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1220_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1219_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1218_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-1217_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-104_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-103_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-102_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-101_neutral_GDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:02:28 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 967723-100_neutral_LDR from package KB967723(Security Update) into Resolving(Resolving) state
11/26/2009 1:01:24 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974306 (Update) into Resolving(Resolving) state
11/26/2009 1:01:24 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974306 (Update) into Absent(Absent) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-99_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-98_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-97_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-96_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-95_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-94_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-93_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-92_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-91_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-90_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-9_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-89_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-88_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-87_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-86_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-85_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-84_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-83_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-82_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-81_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-80_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-8_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-79_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-78_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-77_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-76_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-75_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-74_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-73_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-72_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-71_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-70_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-7_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-69_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-68_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-67_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-66_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-65_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-64_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-61_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-60_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-6_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-59_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-58_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-57_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-56_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-55_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-54_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-53_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-52_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-51_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-50_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-5_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-49_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-48_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-47_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-46_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-45_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-44_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-40_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-4_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-39_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-38_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-37_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-36_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-35_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-34_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-33_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-32_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-31_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-30_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-3_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-29_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-28_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-27_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-26_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-25_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-24_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-23_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-22_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-21_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-20_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-2_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-19_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-18_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-17_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-16_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-15_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-14_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-13_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-12_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-11_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-10_neutral_GDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:01:21 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974306-1_neutral_LDR from package KB974306(Update) into Resolving(Resolving) state
11/26/2009 1:00:25 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB975467 (Security Update) into Resolving(Resolving) state
11/26/2009 1:00:25 PM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB975467 (Security Update) into Absent(Absent) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-5_neutral_GDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-4_neutral_LDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-38_neutral_GDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-37_neutral_LDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-18_neutral_GDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-17_neutral_LDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-16_neutral_LDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-15_neutral_GDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-14_neutral_LDR from package KB975467(Security Update) into Resolving(Resolving) state
11/26/2009 1:00:14 PM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975467-13_neutral_LDR from package KB975467(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:46 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB961371 (Security Update) into Resolving(Resolving) state
11/24/2009 3:08:46 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB961371 (Security Update) into Absent(Absent) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-7_neutral_GDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-6_neutral_LDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-5_neutral_GDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-4_neutral_LDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-35_neutral_GDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-34_neutral_LDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-33_neutral_GDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-32_neutral_LDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-20_neutral_GDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-19_neutral_LDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-18_neutral_GDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 961371-17_neutral_LDR from package KB961371(Security Update) into Resolving(Resolving) state
11/24/2009 3:08:19 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB957321 (Update) into Resolving(Resolving) state
11/24/2009 3:08:19 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB957321 (Update) into Absent(Absent) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-6_neutral_GDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-5_neutral_LDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-4_neutral_GDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-3_neutral_LDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-23_neutral_GDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-22_neutral_LDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-21_neutral_GDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-20_neutral_LDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-2_neutral_GDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-19_neutral_GDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-18_neutral_LDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:08:10 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 957321-1_neutral_LDR from package KB957321(Update) into Resolving(Resolving) state
11/24/2009 3:07:59 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB972036 (Update) into Resolving(Resolving) state
11/24/2009 3:07:59 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB972036 (Update) into Absent(Absent) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-9_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-86_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-85_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-84_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-83_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-82_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-81_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-80_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-8_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-79_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-78_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-77_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-76_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-75_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-74_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-73_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-72_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-71_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-7_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-6_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-50_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-5_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-49_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-48_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-47_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-46_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-45_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-44_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-43_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-42_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-41_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-40_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-4_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-39_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-38_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-37_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-36_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-35_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-3_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-2_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-16_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-15_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-14_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-13_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-12_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-11_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-10_neutral_GDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:53 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972036-1_neutral_LDR from package KB972036(Update) into Resolving(Resolving) state
11/24/2009 3:07:27 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB959426 (Security Update) into Resolving(Resolving) state
11/24/2009 3:07:27 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB959426 (Security Update) into Absent(Absent) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-9_neutral_GDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-8_neutral_LDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-7_neutral_GDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-6_neutral_LDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-30_neutral_GDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-29_neutral_LDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-28_neutral_GDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-27_neutral_LDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-26_neutral_GDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-25_neutral_LDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-11_neutral_GDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 3:07:20 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959426-10_neutral_LDR from package KB959426(Security Update) into Resolving(Resolving) state
11/24/2009 2:59:43 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft Software Shadow Copy Provider service to connect.
11/24/2009 2:59:43 AM, Error: Service Control Manager [7000] - The Microsoft Software Shadow Copy Provider service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/24/2009 2:59:43 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service swprv with arguments "" in order to run the server: {65EE1DBA-8FF4-4A58-AC1C-3470EE2F376A}
11/22/2009 12:22:39 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB952069 (Security Update) into Resolving(Resolving) state
11/22/2009 12:22:39 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB952069 (Security Update) into Absent(Absent) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-8_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-7_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-6_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-5_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-4_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-3_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-28_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-27_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-26_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-25_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-24_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-23_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-22_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-21_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-2_neutral_GDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:36 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 952069-1_neutral_LDR from package KB952069(Security Update) into Resolving(Resolving) state
11/22/2009 12:22:15 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB905866 (Update) into Resolving(Resolving) state
11/22/2009 12:22:15 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB905866 (Update) into Absent(Absent) state
11/22/2009 12:21:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 905866-8_neutral_GDR from package KB905866(Update) into Resolving(Resolving) state
11/22/2009 12:21:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 905866-7_neutral_LDR from package KB905866(Update) into Resolving(Resolving) state
11/22/2009 12:21:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 905866-2_neutral_GDR from package KB905866(Update) into Resolving(Resolving) state
11/22/2009 12:21:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 905866-14_neutral_GDR from package KB905866(Update) into Resolving(Resolving) state
11/22/2009 12:21:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 905866-13_neutral_LDR from package KB905866(Update) into Resolving(Resolving) state
11/22/2009 12:21:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 905866-1_neutral_LDR from package KB905866(Update) into Resolving(Resolving) state
11/22/2009 12:21:47 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974571 (Security Update) into Resolving(Resolving) state
11/22/2009 12:21:47 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974571 (Security Update) into Absent(Absent) state
11/22/2009 12:21:41 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974571-5_neutral_GDR from package KB974571(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:41 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974571-4_neutral_LDR from package KB974571(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:41 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974571-23_neutral_GDR from package KB974571(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:41 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974571-22_neutral_LDR from package KB974571(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:41 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974571-14_neutral_GDR from package KB974571(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:41 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974571-13_neutral_LDR from package KB974571(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:32 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB959130 (Update) into Resolving(Resolving) state
11/22/2009 12:21:32 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB959130 (Update) into Absent(Absent) state
11/22/2009 12:21:28 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959130-8_neutral_GDR from package KB959130(Update) into Resolving(Resolving) state
11/22/2009 12:21:28 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959130-7_neutral_LDR from package KB959130(Update) into Resolving(Resolving) state
11/22/2009 12:21:28 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959130-2_neutral_GDR from package KB959130(Update) into Resolving(Resolving) state
11/22/2009 12:21:28 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 959130-1_neutral_LDR from package KB959130(Update) into Resolving(Resolving) state
11/22/2009 12:21:19 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB970238 (Security Update) into Resolving(Resolving) state
11/22/2009 12:21:19 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB970238 (Security Update) into Absent(Absent) state
11/22/2009 12:21:13 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970238-5_neutral_GDR from package KB970238(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:13 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970238-4_neutral_LDR from package KB970238(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:13 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970238-23_neutral_GDR from package KB970238(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:13 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970238-22_neutral_LDR from package KB970238(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:13 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970238-14_neutral_GDR from package KB970238(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:13 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970238-13_neutral_LDR from package KB970238(Security Update) into Resolving(Resolving) state
11/22/2009 12:21:02 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB975517 (Security Update) into Resolving(Resolving) state
11/22/2009 12:21:02 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB975517 (Security Update) into Absent(Absent) state
11/22/2009 12:20:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975517-20_neutral_GDR from package KB975517(Security Update) into Resolving(Resolving) state
11/22/2009 12:20:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975517-2_neutral_GDR from package KB975517(Security Update) into Resolving(Resolving) state
11/22/2009 12:20:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975517-19_neutral_LDR from package KB975517(Security Update) into Resolving(Resolving) state
11/22/2009 12:20:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975517-11_neutral_GDR from package KB975517(Security Update) into Resolving(Resolving) state
11/22/2009 12:20:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975517-10_neutral_LDR from package KB975517(Security Update) into Resolving(Resolving) state
11/22/2009 12:20:57 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 975517-1_neutral_LDR from package KB975517(Security Update) into Resolving(Resolving) state
11/22/2009 12:20:42 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB955430 (Update) into Resolving(Resolving) state
11/22/2009 12:20:42 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB955430 (Update) into Absent(Absent) state
11/22/2009 12:20:37 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 955430-1_neutral_GDR from package KB955430(Update) into Resolving(Resolving) state
11/22/2009 12:20:19 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB972145 (Update) into Resolving(Resolving) state
11/22/2009 12:20:19 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB972145 (Update) into Absent(Absent) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-84_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-83_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-82_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-81_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-620_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-619_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-618_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-617_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-564_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-563_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-562_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-561_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-28_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-27_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-26_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-25_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1158_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1157_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1156_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1155_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1102_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1101_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1100_neutral_GDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:20:15 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 972145-1099_neutral_LDR from package KB972145(Update) into Resolving(Resolving) state
11/22/2009 12:19:11 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973768 (Update) into Resolving(Resolving) state
11/22/2009 12:19:11 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973768 (Update) into Absent(Absent) state
11/22/2009 12:19:07 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973768-8_neutral_GDR from package KB973768(Update) into Resolving(Resolving) state
11/22/2009 12:19:07 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973768-7_neutral_LDR from package KB973768(Update) into Resolving(Resolving) state
11/22/2009 12:19:07 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973768-5_neutral_GDR from package KB973768(Update) into Resolving(Resolving) state
11/22/2009 12:19:07 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973768-4_neutral_LDR from package KB973768(Update) into Resolving(Resolving) state
11/22/2009 12:19:07 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973768-2_neutral_GDR from package KB973768(Update) into Resolving(Resolving) state
11/22/2009 12:19:07 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973768-1_neutral_LDR from package KB973768(Update) into Resolving(Resolving) state
11/21/2009 3:05:19 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80073712: Update for Windows Vista (KB970653).
11/21/2009 3:04:11 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB970653 (Update) into Resolving(Resolving) state
11/21/2009 3:04:11 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB970653 (Update) into Absent(Absent) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-694_neutral_GDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-693_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-692_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-607_neutral_GDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-606_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-605_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-253_neutral_GDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-252_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-251_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-166_neutral_GDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-165_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-164_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-1132_neutral_GDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-1131_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-1130_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-1045_neutral_GDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-1044_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:03:58 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 970653-1043_neutral_LDR from package KB970653(Update) into Resolving(Resolving) state
11/21/2009 3:02:44 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80073712: Microsoft .NET Framework 2.0 Service Pack 1 Security Update for Windows Vista Service Pack 1 and Windows Server 2008 (KB974291).
11/21/2009 3:02:38 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974291 (Security Update) into Resolving(Resolving) state
11/21/2009 3:02:38 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB974291 (Security Update) into Absent(Absent) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-9_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-8_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-7_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-6_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-5_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-4_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-3_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-20_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-2_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-19_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-18_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-17_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-16_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-15_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-14_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-13_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-12_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-11_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-10_neutral_GDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:02:02 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 974291-1_neutral_LDR from package KB974291(Security Update) into Resolving(Resolving) state
11/21/2009 3:01:03 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80073712: Cumulative Security Update for ActiveX Killbits for Windows Vista (KB973525).
11/21/2009 3:00:58 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973525 (Security Update) into Resolving(Resolving) state
11/21/2009 3:00:58 AM, Error: Microsoft-Windows-Servicing [4375] - Windows Servicing failed to complete the process of setting package KB973525 (Security Update) into Absent(Absent) state
11/21/2009 3:00:54 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973525-8_neutral_GDR from package KB973525(Security Update) into Resolving(Resolving) state
11/21/2009 3:00:54 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973525-7_neutral_LDR from package KB973525(Security Update) into Resolving(Resolving) state
11/21/2009 3:00:54 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973525-2_neutral_GDR from package KB973525(Security Update) into Resolving(Resolving) state
11/21/2009 3:00:54 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973525-17_neutral_GDR from package KB973525(Security Update) into Resolving(Resolving) state
11/21/2009 3:00:54 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973525-16_neutral_LDR from package KB973525(Security Update) into Resolving(Resolving) state
11/21/2009 3:00:54 AM, Error: Microsoft-Windows-Servicing [4385] - Windows Servicing failed to complete the process of changing update 973525-1_neutral_LDR from package KB973525(Security Update) into Resolving(Resolving) state
11/21/2009 11:48:54 AM, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
11/21/2009 11:48:54 AM, Error: Service Control Manager [7000] - The MCSTRM service failed to start due to the following error: The system cannot find the file specified.
11/21/2009 11:48:54 AM, Error: Service Control Manager [7000] - The ASPI32 service failed to start due to the following error: The system cannot find the file specified.

==== End Of File ===========================





And the GMER file:

GMER 1.0.15.15252 - http://www.gmer.net
Rootkit scan 2009-11-28 12:11:17
Windows 6.0.6001 Service Pack 1
Running: rtq3l92s.exe; Driver: C:\Users\trace\AppData\Local\Temp\uwlcipog.sys


---- Kernel code sections - GMER 1.0.15 ----

.text C:\Windows\system32\DRIVERS\nvlddmkm.sys section is writeable [0x8B806340, 0x3DA8C7, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe[3556] kernel32.dll!SetUnhandledExceptionFilter 77176E2D 5 Bytes [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4}

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\USER32.dll [GDI32.dll!GetStockObject] [6113909F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [GDI32.dll!GetStockObject] [6113909F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!GetSysColor] [61138FE2] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DefWindowProcW] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DefWindowProcA] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [GDI32.dll!GetStockObject] [6113909F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [61138FA4] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [61138F66] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSysColorBrush] [611390A5] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSysColor] [61138FE2] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [USER32.dll!DefWindowProcW] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[4552] @ C:\Windows\system32\SHELL32.dll [USER32.dll!AnimateWindow] [611390DD] C:\Program Files\Yahoo!\Messenger\yui.dll

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume5 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7C 0x9B 0x4B 0x64 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x7C 0x9B 0x4B 0x64 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ...
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x6A 0x9C 0xD6 0x61 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0xFF 0x7C 0x85 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x3E 0x1E 0x9E 0xE0 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xE9 0x02 0x6C 0xFA ...
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xB0 0x18 0xED 0xA7 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0x97 0x20 0x4E 0x9A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0x01 0x3A 0x48 0xFC ...
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0xB1 0xCD 0x45 0x5A ...
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0x2A 0xB7 0xCC 0xB5 ...
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\Windows\system32\OLE32.DLL
Reg HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0x6C 0x43 0x2D 0x1E ...

---- EOF - GMER 1.0.15 ----






The redirection problem seems to be solved, but is there anyway I can check to see if system restore is working again?

Attached Files


Edited by Kinglit, 28 November 2009 - 12:21 PM.


#12 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 28 November 2009 - 12:50 PM

Hi,

Uninstall Seekeen


Show hidden files
-----------------
1. Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
2. Click the View tab.
3. Under Advanced settings, click Show hidden files and folders, and then click OK.


Delete following files:
C:\Users\trace\AppData\Local\VirtualStore\Windows\System32\net.net
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\78fcee10-50666ea1
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\41ddd8e2-43a2e2d9
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\38c12a4-3bdb3233
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\38c12a4-60829882
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\6eca6864-454adc34
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\6b800f31-7e00e7ed
C:\Users\trace\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\25e72a3d-227d9a1f
C:\Users\trace\Downloads\FU-Setup_LE.exe

and folders:
C:\!KillBox
C:\Program Files\Seekeen


but is there anyway I can check to see if system restore is working again?

attach.txt shows that system restore points have been successfully created recently. That indicates at least point creation functionality is now working. I'll give instructions for system restore resetting and other final things after you've done the things instructed above in this post first.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#13 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 28 November 2009 - 01:55 PM

I don't see the seekeen folder in Program files. I uninstalled it though.

Edited by Kinglit, 28 November 2009 - 02:02 PM.


#14 Blade81

Blade81

    Bleepin' Rocker


  • Malware Response Team
  • 6,465 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Finland
  • Local time:08:25 PM

Posted 28 November 2009 - 02:12 PM

Hi,

Yes, uninstaller normally takes care of the installation folder too. Just wanted to make sure it did so in this case too :(

Here's the final set of instructions in case there're no other issues left.


THESE STEPS ARE VERY IMPORTANT

Let's reset system restore
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: You will lose all previous restore points which are likely to be infected. Please note you need Administrator Access to do clean the restore points.

A To disable the System Restore feature:

1. Click on the Start button.
2. Hover over the Computer option, right click on it and then click Properties.
3. On the left hand side, click Advanced Settings.
4. If asked to permit the action, click on Allow.
5. Click on the System Protection tab.
6. Uncheck any checkboxes listed for your hard drives.
7. Press OK.


B. Reboot.

C Turn ON System Restore.
Follow the steps like you did when disabling system restore but on step 6. check any checkboxes listed for your hard drives.



We need to re hide system files. To do so, please follow the steps below:
  • Double-click My Computer.
  • Click the Tools menu, and then click Folder Options.
  • Click the View tab.
  • Put a check by
    Hide file extensions for known file types.
  • Under the
    Hidden files
    folder, select
    Show hidden files and folders.
  • Check
    Hide protected operating system files.
  • Click Apply, and then click OK.
Now lets uninstall ComboFix:
  • Click START then RUN
  • Now copy-paste Combofix /uninstall in the runbox and click OK
DDS and GMER can be deleted manually.


UPDATING WINDOWS AND INTERNET EXPLORER

IMPORTANT: You Need to Update Windows and Internet Explorer to protect your computer from the malware that is around on the Internet. Please go to the windows update site to get the critical updates.

If you are running Microsoft Office, or any portion thereof, go to the Microsoft's Office Update site and make sure you have at least all the critical updates installed (Free) Microsoft Office Update.

Make your Internet Explorer more secure

This can be done by following these simple instructions:
From within Internet Explorer click on the Tools menu and then click on Options.
Click once on the Security tab
Click once on the Internet icon so it becomes highlighted.
Click once on the Custom Level button.
Change the Download signed ActiveX controls to Prompt
Change the Download unsigned ActiveX controls to Disable
Change the Initialize and script ActiveX controls not marked as safe to Disable
Change the Installation of desktop items to Prompt
Change the Launching programs and files in an IFRAME to Prompt
Change the Navigate sub-frames across different domains to Prompt
When all these settings have been made, click on the OK button.
If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.



The following are recommended third party programs that are designed to keep your computer clean. A link as well as a brief description is included with each item.
  • hosts file:
  • Every version of windows has a hosts file as part of them.
  • In a very basic sense, they are used to locate webpages.
  • We can customize a hosts file so that it blocks certain webpages.
  • However, it can slow down certain computers.
  • This is why using a hosts file is optional!!
Download it here. Make sure you read the instructions on how to install the hosts file. There is a good tutorial here
If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
  • Click the start button (at the lower left hand corner of your screen)
  • Click run
  • In the dialog box, type services.msc
  • hit enter, then locate dns client
  • Highlight it, then double-click it.
  • On the dropdown box, change the setting from automatic to manual.
  • Click ok
Just a final reminder for you. I am trying to stress these two points.
UPDATE UPDATE UPDATE!!! Make sure you do this about every 1-2 weeks.
Make sure all of your security programs are up to date.
Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.


Once again, please post and tell me how things are going with your system... problems etc.

Have a great day,
Blade :(

Edited by Blade81, 28 November 2009 - 02:12 PM.

Microsoft Windows Insider MVP 2016-2017

Microsoft MVP Consumer Security 2008-2015
UNITE member since 2006
unite_blue.png

Provided malware removal related instructions are meant to be used in the correspondent user's case only. If you have similar symptoms create own topic instead of following instructions given to some other, please.


#15 Kinglit

Kinglit
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Local time:12:25 PM

Posted 28 November 2009 - 02:22 PM

I forgot to mention. I'm still getting this:

Posted Image


EDIT: I'm typing in Combofix/uninstall, and now it's saying windows can't find combofix.





Thanks for the help so far. It's really worked! :(

Edited by Kinglit, 28 November 2009 - 06:12 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users