Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Got hit with a virus/malware and not sure how to completely remove it


  • This topic is locked This topic is locked
3 replies to this topic

#1 J-Dogg

J-Dogg

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:28 PM

Posted 04 February 2013 - 04:50 PM

DDS:
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702
Run by Jason at 16:43:23 on 2013-02-04
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1118 [GMT -5:00]
.
AV: Avira Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ================
.
F:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Avira\AntiVir Desktop\sched.exe
F:\WINDOWS\Explorer.EXE
D:\SASCORE.EXE
D:\Program Files\Avira\AntiVir Desktop\avguard.exe
D:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
D:\Program Files\TeamViewer\Version8\TeamViewer.exe
D:\Program Files\Avira\AntiVir Desktop\avgnt.exe
F:\Program Files\Google\Google Talk\googletalk.exe
D:\SUPERAntiSpyware.exe
D:\Program Files\TeamViewer\Version8\tv_w32.exe
D:\Program Files\Avira\AntiVir Desktop\avshadow.exe
F:\WINDOWS\System32\alg.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\Documents and Settings\Jason\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
F:\Program Files\Google\Chrome\Application\chrome.exe
D:\Program Files\Cobian Backup 11\cbService.exe
D:\Program Files\Cobian Backup 11\cbInterface.exe
F:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
F:\WINDOWS\system32\msiexec.exe
F:\WINDOWS\system32\wbem\wmiprvse.exe
F:\WINDOWS\System32\svchost.exe -k netsvcs
F:\WINDOWS\system32\svchost.exe -k NetworkService
F:\WINDOWS\system32\svchost.exe -k LocalService
F:\WINDOWS\system32\svchost.exe -k LocalService
F:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uSearch Bar = hxxp://www.google.com/ie
uSearch Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
uRun: [SUPERAntiSpyware] D:\SUPERAntiSpyware.exe
mRun: [avgnt] "d:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [googletalk] f:\program files\google\google talk\googletalk.exe /autostart
mRun: [Cobian Backup 11 interface] "d:\program files\cobian backup 11\cbInterface.exe" -service
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
uPolicies-Explorer: NoDriveTypeAutoRun = dword:255
uPolicies-Explorer: ForceClassicControlPanel = dword:1
uPolicies-Explorer: NoSMHelp = dword:1
mPolicies-System: DisableCAD = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-Explorer: ForceClassicControlPanel = dword:1
mPolicies-Explorer: NoSMHelp = dword:1
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - f:\program files\messenger\msmsgs.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1359930796665
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1359931881118
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{AB3D0287-C96F-4AA9-B14E-2AD25F6DF522} : DHCPNameServer = 192.168.1.1
Notify: igfxcui - igfxdev.dll
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\SASSEH.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "f:\program files\google\chrome\application\24.0.1312.57\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
Hosts: 127.0.0.1 www.spywareinfo.com
.
============= SERVICES / DRIVERS ===============
.
R1 A2DDA;A2 Direct Disk Access Support Driver;d:\downloads\emsisoftemergencykit\run\a2ddax86.sys [2013-2-4 17904]
R1 avkmgr;avkmgr;f:\windows\system32\drivers\avkmgr.sys [2013-2-3 36552]
R1 SASDIFSV;SASDIFSV;D:\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;D:\SASKUTIL.SYS [2011-7-12 67664]
R1 SBRE;SBRE;f:\windows\system32\drivers\SBREDrv.sys [2013-2-4 101112]
R2 avgntflt;avgntflt;f:\windows\system32\drivers\avgntflt.sys [2013-2-3 83944]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;f:\windows\system32\drivers\RTL8192su.sys [2013-2-3 606440]
S3 mbamchameleon;mbamchameleon;f:\windows\system32\drivers\mbamchameleon.sys [2013-2-4 35144]
.
=============== Created Last 30 ================
.
2013-02-04 21:35:17 25992 ----a-w- f:\windows\system32\pgdfgsvc.exe
2013-02-04 20:33:24 726528 ----a-w- f:\windows\system32\SETEF.tmp
2013-02-04 20:31:09 275696 ----a-w- f:\windows\system32\mucltui.dll
2013-02-04 20:31:09 17136 ----a-w- f:\windows\system32\mucltui.dll.mui
2013-02-04 18:11:28 -------- d-sh--w- f:\documents and settings\jason\IECompatCache
2013-02-04 18:10:59 -------- d-sh--w- f:\documents and settings\jason\PrivacIE
2013-02-04 18:02:28 -------- d-sh--w- f:\documents and settings\jason\IETldCache
2013-02-04 16:54:38 521728 -c----w- f:\windows\system32\dllcache\jsdbgui.dll
2013-02-04 16:54:05 6144 -c----w- f:\windows\system32\dllcache\iecompat.dll
2013-02-04 16:53:40 -------- d-----w- f:\windows\ie8updates
2013-02-04 16:53:35 743424 -c----w- f:\windows\system32\dllcache\iedvtool.dll
2013-02-04 16:53:35 630272 -c----w- f:\windows\system32\dllcache\msfeeds.dll
2013-02-04 16:53:35 55296 -c----w- f:\windows\system32\dllcache\msfeedsbs.dll
2013-02-04 16:53:35 247808 -c----w- f:\windows\system32\dllcache\ieproxy.dll
2013-02-04 16:53:35 2000384 -c----w- f:\windows\system32\dllcache\iertutil.dll
2013-02-04 16:53:35 12800 -c----w- f:\windows\system32\dllcache\xpshims.dll
2013-02-04 16:53:35 11111424 -c----w- f:\windows\system32\dllcache\ieframe.dll
2013-02-04 16:52:19 -------- dc-h--w- f:\windows\ie8
2013-02-04 08:33:20 -------- d-----w- f:\documents and settings\jason\application data\Malwarebytes
2013-02-04 08:32:59 21104 ----a-w- f:\windows\system32\drivers\mbam.sys
2013-02-04 07:59:19 35144 ----a-w- f:\windows\system32\drivers\mbamchameleon.sys
2013-02-04 07:59:19 -------- d-----w- f:\documents and settings\all users\application data\Malwarebytes
2013-02-04 07:55:48 42864 ----a-w- f:\windows\system32\sbbd.exe
2013-02-04 07:55:48 101112 ----a-w- f:\windows\system32\drivers\SBREDrv.sys
2013-02-04 07:15:51 -------- d-----w- f:\program files\CCleaner
2013-02-04 07:10:59 -------- d-----w- f:\documents and settings\all users\application data\Spybot - Search & Destroy
2013-02-04 07:04:03 -------- d-----w- f:\documents and settings\jason\application data\SUPERAntiSpyware.com
2013-02-04 07:03:46 -------- d-----w- f:\documents and settings\all users\application data\SUPERAntiSpyware.com
2013-02-04 03:13:35 456320 -c----w- f:\windows\system32\dllcache\mrxsmb.sys
2013-02-04 00:30:53 3072 -c----w- f:\windows\system32\dllcache\iacenc.dll
2013-02-04 00:30:53 3072 ------w- f:\windows\system32\iacenc.dll
2013-02-04 00:26:43 -------- d-----w- f:\windows\system32\wbem\repository\FS
2013-02-04 00:26:43 -------- d-----w- f:\windows\system32\wbem\AutoRecover
2013-02-04 00:26:40 -------- d-----w- f:\windows\system32\wbem\Performance
2013-02-04 00:25:56 33792 ----a-w- f:\program files\messenger\custsat.dll
2013-02-04 00:07:31 -------- d-----w- f:\documents and settings\jason\application data\Avira
2013-02-04 00:00:48 83944 ----a-w- f:\windows\system32\drivers\avgntflt.sys
2013-02-04 00:00:48 36552 ----a-w- f:\windows\system32\drivers\avkmgr.sys
2013-02-04 00:00:41 -------- d-----w- f:\documents and settings\all users\application data\Avira
2013-02-03 23:54:03 -------- d-----w- f:\windows\system32\ReinstallBackups
2013-02-03 23:51:49 2192896 -c----w- f:\windows\system32\dllcache\ntoskrnl.exe
2013-02-03 23:51:49 2148864 -c----w- f:\windows\system32\dllcache\ntkrnlmp.exe
2013-02-03 23:51:48 2069632 -c----w- f:\windows\system32\dllcache\ntkrnlpa.exe
2013-02-03 23:51:48 2027520 -c----w- f:\windows\system32\dllcache\ntkrpamp.exe
2013-02-03 23:50:10 5120 ----a-w- f:\windows\system32\xpsp4res.dll
2013-02-03 23:26:21 -------- d-----w- f:\documents and settings\jason\application data\TeamViewer
2013-02-03 23:00:11 272128 -c----w- f:\windows\system32\dllcache\bthport.sys
2013-02-03 23:00:11 272128 ------w- f:\windows\system32\drivers\bthport.sys
2013-02-03 22:55:39 26144 ----a-w- f:\windows\system32\spupdsvc.exe
2013-02-03 22:55:39 -------- d-----w- f:\windows\system32\PreInstall
2013-02-03 22:55:37 -------- d--h--w- f:\windows\$hf_mig$
2013-02-03 22:52:32 -------- d-----w- f:\documents and settings\jason\local settings\application data\Google
2013-02-03 22:51:25 139264 ----a-w- f:\windows\system32\igfxres.dll
2013-02-03 22:33:14 -------- d-s---w- f:\documents and settings\jason\UserData
2013-02-03 22:31:07 -------- d-----w- f:\windows\system32\SoftwareDistribution
2013-02-03 22:29:24 606440 ----a-r- f:\windows\system32\drivers\RTL8192su.sys
2013-02-03 22:19:56 -------- d-----w- f:\windows\pss
2013-02-03 22:17:11 -------- d-----w- f:\documents and settings\jason\local settings\application data\ApplicationHistory
2013-02-03 22:16:13 -------- d-----w- f:\windows\system32\URTTemp
.
==================== Find3M ====================
.
2013-02-01 23:29:48 4763008 ----a-w- F:\SUPERANTISPYWARE.EXE
2013-01-30 11:22:09 1049088 ----a-w- f:\program files\winimage.exe
2013-01-30 11:22:01 1054720 ----a-w- f:\program files\WebCam10.exe
2013-01-30 11:12:29 311296 ----a-w- f:\program files\LogiMailApp.exe
2013-01-30 11:06:15 294912 ----a-w- f:\program files\ATWizard.exe
2012-12-16 12:23:59 290560 ----a-w- f:\windows\system32\atmfd.dll
2012-11-13 01:25:12 1866368 ----a-w- f:\windows\system32\win32k.sys
2007-03-06 23:01:40 206360 ----a-w- f:\program files\ATWizardRes.dll
2007-03-06 23:01:40 1119768 ----a-w- f:\program files\LAppRes.DLL
2007-03-06 22:58:04 204824 ----a-w- f:\program files\VideoControl.dll
2007-03-06 22:57:18 79384 ----a-w- f:\program files\LogiMail.dll
2007-03-06 22:57:08 366104 ----a-w- f:\program files\IPPJPEG.dll
2007-03-06 22:56:56 280088 ----a-w- f:\program files\EFVal.dll
2005-10-16 11:00:00 356 -c--a-w- f:\program files\filedisk.reg
2005-10-16 11:00:00 12928 -c--a-w- f:\program files\filedisk.sys
2001-09-06 02:00:58 1700352 ----a-w- f:\program files\gdiplus.dll
.
============= FINISH: 16:45:20.03 ===============


ATTACH:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume3
Install Date: 2/3/2013 1:58:02 PM
System Uptime: 2/4/2013 1:02:06 PM (3 hours ago)
.
Motherboard: Dell Inc. | | 0JC474
Processor: Intel® Pentium® 4 CPU 2.80GHz | Microprocessor | 2793/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 1034 GiB total, 989.005 GiB free.
D: is FIXED (NTFS) - 1397 GiB total, 352.15 GiB free.
F: is FIXED (NTFS) - 30 GiB total, 20.093 GiB free.
G: is CDROM ()
H: is CDROM ()
S: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP26: 2/4/2013 1:24:03 AM - Software Distribution Service 3.0
RP27: 2/4/2013 11:42:58 AM - Software Distribution Service 3.0
RP28: 2/4/2013 4:06:09 PM - Software Distribution Service 3.0
RP29: 2/4/2013 4:41:29 PM - Installed Microsoft Fix it 50043
.
==== Installed Programs ======================
.
Avira Free Antivirus
Cobian Backup 11 Gravity
Google Chrome
Google Talk (remove only)
Google Talk Plugin
Google Update Helper
Intel® Graphics Media Accelerator Driver
Intel® PRO Network Connections Drivers
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2742597)
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB2761465)
Security Update for Windows Internet Explorer 8 (KB2799329)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB982132)
Sonic Encoders
SUPERAntiSpyware
TeamViewer 8
Update for Windows Internet Explorer 8 (KB2598845)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
VLC media player 2.0.5
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
.
==== Event Viewer Messages From Past Week ========
.
2/3/2013 7:26:54 PM, error: Service Control Manager [7003] - The Windows Firewall/Internet Connection Sharing (ICS) service depends on the following nonexistent service: WinMgmt
2/3/2013 7:26:54 PM, error: Service Control Manager [7003] - The System Event Notification service depends on the following nonexistent service: EventSystem
2/3/2013 7:26:54 PM, error: Service Control Manager [7003] - The Security Center service depends on the following nonexistent service: WinMgmt
2/3/2013 7:26:35 PM, information: Windows File Protection [64004] - The protected system file mtstocom.exe could not be restored to its original, valid version. The file version of the bad file is unknown The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:26:01 PM, information: Windows File Protection [64004] - The protected system file write.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:45 PM, information: Windows File Protection [64004] - The protected system file winchat.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:45 PM, information: Windows File Protection [64004] - The protected system file sndvol32.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:45 PM, information: Windows File Protection [64004] - The protected system file htrn_jis.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:45 PM, information: Windows File Protection [64004] - The protected system file avwav.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:45 PM, information: Windows File Protection [64004] - The protected system file avtapi.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:45 PM, information: Windows File Protection [64004] - The protected system file avmeter.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:24 PM, information: Windows File Protection [64004] - The protected system file wmi2xml.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:24 PM, information: Windows File Protection [64004] - The protected system file mtsadmin.tlb could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.42 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:24 PM, information: Windows File Protection [64004] - The protected system file getuname.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:24 PM, information: Windows File Protection [64004] - The protected system file charmap.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:24 PM, information: Windows File Protection [64004] - The protected system file calc.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file wmitimep.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file wmipicmp.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file wmimsg.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file winmgmtr.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file winmgmt.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file wbemdisp.tlb could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file wbemads.tlb could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file wbemads.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file updprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file unsecapp.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file trnsprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file tmplprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file smtpcons.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file msiprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file fwdprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:25:12 PM, information: Windows File Protection [64004] - The protected system file dsprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.0 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file wordpad.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file sndrec32.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file mtxoci.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file mspaint.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file msdtcuiu.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file msdtcprx.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file mplay32.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file dialer.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file clipbrd.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file accwiz.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:55 PM, information: Windows File Protection [64004] - The protected system file access.cpl could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:44 PM, information: Windows File Protection [64004] - The protected system file xolehlp.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:44 PM, information: Windows File Protection [64004] - The protected system file msdtctm.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:44 PM, information: Windows File Protection [64004] - The protected system file msdtclog.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:44 PM, information: Windows File Protection [64004] - The protected system file msdtc.exe could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file mtxlegih.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file mtxex.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file mtxdm.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file migregdb.exe could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file dcomcnfg.exe could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file comrereg.exe could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:43 PM, information: Windows File Protection [64004] - The protected system file comrepl.exe could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:41 PM, information: Windows File Protection [64004] - The protected system file comadmin.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:40 PM, information: Windows File Protection [64004] - The protected system file stclient.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:40 PM, information: Windows File Protection [64004] - The protected system file comrepl.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:40 PM, information: Windows File Protection [64004] - The protected system file comaddin.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:39 PM, information: Windows File Protection [64004] - The protected system file clbcatex.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:39 PM, information: Windows File Protection [64004] - The protected system file catsrvps.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:35 PM, information: Windows File Protection [64004] - The protected system file comuid.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:34 PM, information: Windows File Protection [64004] - The protected system file comsnap.dll could not be restored to its original, valid version. The file version of the bad file is 2001.12.4414.700 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiutils.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmisvc.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmipsess.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiprvse.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiprvsd.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmipjobj.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmipiprt.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmipdskq.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmipcima.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmidcprv.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmicookr.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmic.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiapsrv.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiaprpl.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiapres.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wmiadap.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wbemupgd.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:30 PM, information: Windows File Protection [64004] - The protected system file wbemtest.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:24 PM, information: Windows File Protection [64004] - The protected system file wbemsvc.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:24 PM, information: Windows File Protection [64004] - The protected system file wbemprox.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:23 PM, information: Windows File Protection [64004] - The protected system file wbemess.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:23 PM, information: Windows File Protection [64004] - The protected system file wbemdisp.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:23 PM, information: Windows File Protection [64004] - The protected system file wbemcore.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:23 PM, information: Windows File Protection [64004] - The protected system file wbemcons.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:23 PM, information: Windows File Protection [64004] - The protected system file wbemcomn.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:22 PM, information: Windows File Protection [64004] - The protected system file wbemcntl.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:22 PM, information: Windows File Protection [64004] - The protected system file viewprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:21 PM, information: Windows File Protection [64004] - The protected system file stdprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:21 PM, information: Windows File Protection [64004] - The protected system file scrcons.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:21 PM, information: Windows File Protection [64004] - The protected system file repdrvfs.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:20 PM, information: Windows File Protection [64004] - The protected system file provthrd.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:20 PM, information: Windows File Protection [64004] - The protected system file policman.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:19 PM, information: Windows File Protection [64004] - The protected system file ntevt.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:19 PM, information: Windows File Protection [64004] - The protected system file ncprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:19 PM, information: Windows File Protection [64004] - The protected system file mofd.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:19 PM, information: Windows File Protection [64004] - The protected system file mofcomp.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:18 PM, information: Windows File Protection [64004] - The protected system file krnlprov.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:16 PM, information: Windows File Protection [64004] - The protected system file fastprox.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:16 PM, information: Windows File Protection [64004] - The protected system file esscli.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:16 PM, information: Windows File Protection [64004] - The protected system file cimwin32.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:15 PM, information: Windows File Protection [64004] - The protected system file servdeps.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:15 PM, information: Windows File Protection [64004] - The protected system file mmfutil.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:14 PM, information: Windows File Protection [64004] - The protected system file licwmi.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:24:14 PM, information: Windows File Protection [64004] - The protected system file cmprops.dll could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x00000490 [Element not found. ].
2/3/2013 7:05:02 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2508429).
2/3/2013 7:04:34 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2485663).
2/3/2013 7:04:34 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2481109).
2/3/2013 7:04:28 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Update for Windows XP (KB971029).
2/3/2013 7:04:28 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2479943).
2/3/2013 7:04:22 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2393802).
2/3/2013 7:04:15 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2483185).
2/3/2013 7:04:15 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2478960).
2/3/2013 7:04:09 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2478971).
2/3/2013 7:04:04 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2419632).
2/3/2013 7:04:00 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2440591).
2/3/2013 7:03:55 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2443105).
2/3/2013 7:03:48 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2423089).
2/3/2013 7:03:48 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2360937).
2/3/2013 7:03:43 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB982132).
2/3/2013 7:03:39 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2387149).
2/3/2013 7:03:32 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f02b: Security Update for Windows XP (KB2378111).
2/3/2013 7:03:25 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB979687).
2/3/2013 7:03:25 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2296011).
2/3/2013 7:03:06 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB981322).
2/3/2013 7:03:06 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2347290).
2/3/2013 7:03:00 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB982665).
2/3/2013 7:03:00 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB981997).
2/3/2013 7:02:54 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2229593).
2/3/2013 7:02:54 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB2115168).
2/3/2013 7:02:48 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f02b: Security Update for Windows Media Format Runtime 9, 9.5 & 11 for Windows XP SP3 (KB978695).
2/3/2013 7:02:48 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB979482).
2/3/2013 7:02:43 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB978542).
2/3/2013 7:02:43 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB978338).
2/3/2013 7:02:21 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB977816).
2/3/2013 7:02:16 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB978706).
2/3/2013 7:02:16 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB977914).
2/3/2013 7:02:09 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB975560).
2/3/2013 7:02:02 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB975713).
2/3/2013 7:01:54 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Update for Windows XP (KB971513).
2/3/2013 7:01:48 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB974392).
2/3/2013 7:01:48 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB973904).
2/3/2013 7:01:44 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f02b: Security Update for Windows XP Service Pack 3 (KB952069).
2/3/2013 7:01:44 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB974318).
2/3/2013 7:01:40 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Update for Windows XP (KB968389).
2/3/2013 7:01:40 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB969059).
2/3/2013 7:01:36 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB974571).
2/3/2013 7:01:36 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB974112).
2/3/2013 7:01:31 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB975025).
2/3/2013 7:01:25 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB971657).
2/3/2013 7:01:25 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB956844).
2/3/2013 7:01:19 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB973815).
2/3/2013 7:01:19 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB960859).
2/3/2013 7:01:11 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB956744).
2/3/2013 7:01:06 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f02b: Security Update for Windows XP Service Pack 3 (KB973540).
2/3/2013 7:01:00 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070070: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 3.5 Family Update (KB951847) x86.
2/3/2013 6:59:30 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f02b: Security Update for Windows XP (KB952004).
2/3/2013 6:59:30 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB956572).
2/3/2013 6:59:25 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f02b: Security Update for Windows XP (KB923561).
2/3/2013 6:54:11 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB956802).
2/3/2013 6:54:06 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Update for Windows XP (KB952287).
2/3/2013 6:54:01 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB952954).
2/3/2013 6:54:01 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB950974).
2/3/2013 6:54:01 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB946648).
2/3/2013 6:53:56 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Update for Windows XP (KB951978).
2/3/2013 6:53:56 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB951376).
2/3/2013 6:53:56 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x8007f003: Security Update for Windows XP (KB950762).
2/3/2013 6:53:56 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070070: Windows Search 4.0 for Windows XP (KB940157).
2/3/2013 6:53:44 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070070: Security Update for Flash Player (KB923789).
2/3/2013 2:06:23 PM, error: atapi [9] - The device, \Device\Ide\IdePort1, did not respond within the timeout period.
2/3/2013 2:05:22 PM, error: atapi [11] - The driver detected a controller error on \Device\Ide\IdePort1.
2/3/2013 1:58:17 PM, error: Setup [60055] - Windows Setup encountered non-fatal errors during installation. Please check the setuperr.log found in your Windows directory for more information.
.
==== End Of File ===========================


any assistance available would be greatly appreciated (yes I KNOW and realize having my boot drive as F: can cause problems but I will resolve that after this is taken care of)

BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,521 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:28 PM

Posted 06 February 2013 - 10:07 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

Please download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

  • Disable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • Close any open browsers, and all other programs working. Make sure you save your file if working on a document.
  • Do not install any other programs until this if fixed.[/b]
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
  • Some Rookit infection may damage your boot sector. The Windows Recovery Console may be needed to restore it. Do not bypass this installation. You may regret it.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Note: If you have difficulty properly disabling your protection programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.html

Do not mouse click ComboFix's window while it's running. That may cause it to stall

Note: If after running ComboFix you get this error message "Illegal operation attempted on a registry key that has been marked for deletion." when attempting to run a program all you need to do is restart the computer to reset the registry.
===

Third party programs if not up to date can be the cause of infiltration an infection.

Please run this security check for my review.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Search.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).

Please post the logs and let me know if the problem persists.

#3 nasdaq

nasdaq

  • Malware Response Team
  • 40,521 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:28 PM

Posted 12 February 2013 - 10:40 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,521 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:28 PM

Posted 12 February 2013 - 10:43 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users