Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Something is really wrong -can't figure out what!


  • Please log in to reply
3 replies to this topic

#1 BADC

BADC

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:14 AM

Posted 23 October 2014 - 01:49 AM

I'm pretty sure that my computer has a virus but when I run a Certainantispyware it just removes the adware.  I've scanned my computer with other security programs but they don't seem to ever find anything.  My computer is SO slow, that I have to scan with a Certainantispyware before I can even get online to check my email or else I'd be sitting and waiting for it to load for what seems like a lifetime!!  And then I have to periodically stop doing whatever I'm trying to do to scan or else it will completely freeze up and crash!  I've defragmented, performed disk clean-up, and deleted all my cookies and browsing history.  I don't know what else I can do.  I'm running Windows XP on my little Acer Aspire One.  I'm not sure what info about my computer that you would need...   ANY help would be GREATLY appreciated!!!



BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:06:14 AM

Posted 23 October 2014 - 07:02 PM

Welcome aboard p22002758.gif

 

p22002970.gif Download Security Check from here or here and save it to your Desktop.

  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run

p22002970.gif Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.


p22002970.gif Please download MiniToolBox and run it.

Checkmark following boxes:
  • Report IE Proxy Settings
  • Report FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Devices (do NOT change any settings here)
  • List Users, Partitions and Memory size
  • List Restore Points

Click Go and post the result.

p22002970.gif Please download Malwarebytes Anti-Malware to your desktop.
NOTE. If you already have MBAM 2.0 installed scroll down.

  • Double-click mb3-setup-1878.1878-3.5.1.2522.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:

    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.

  • Click Finish.
  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.



If you already have MBAM 2.0 installed:

  • On the Dashboard, click the 'Update Now >>' link
  • After the update completes, click the 'Scan Now >>' button.
  • Or, on the Dashboard, click the Scan Now >> button.
  • If an update is available, click the Update Now button.
  • A Threat Scan will begin.
  • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
  • In most cases, a restart will be required.
  • Wait for the prompt to restart the computer to appear, then click on Yes.


How to get logs:
(Export log to save as txt)


  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the Scan Log which shows the Date and time of the scan just performed.
  • Click 'Export'.
  • Click 'Text file (*.txt)'
  • In the Save File dialog box which appears, click on Desktop.
  • In the File name: box type a name for your scan log.
  • A message box named 'File Saved' should appear stating "Your file has been successfully exported".
  • Click Ok
  • Attach that saved log to your next reply.



(Copy to clipboard for pasting into forum replies or tickets)

  • After the restart once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply.


p22002970.gifDownload 51a5f31352b88-icon_MBAR.pngMalwarebytes Anti-Rootkit to your desktop.
  • Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
  • Double click on downloaded file. OK self extracting prompt.
  • MBAR will start. Click "Next" to continue.
  • Click in the following screen "Update" to obtain the latest malware definitions.
  • Once the update is complete select "Next" and click "Scan".
  • When the scan is finished and no malware has been found select "Exit".
  • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
  • Open the MBAR folder located on your Desktop and paste the content of the following files in your next reply:
  • "mbar-log-{date} (xx-xx-xx).txt"
  • "system-log.txt"



p22002970.gif Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • Do not reboot until instructed.
  • If the tool does not run from any of the links provided, please let me know.


If normal mode still doesn't work, run the tool from safe mode.

When the scan is done Notepad will open with rKill log.
Post it in your next reply.

NOTE. rKill.txt log will also be present on your desktop.

NOTE Do NOT wrap your logs in "quote" or "code" brackets.
Do NOT use spoilers.
Do NOT edit your reply to post additional logs. Create new reply. I'll not get any email notifications about edits so I won't know you posted something new.


My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 


#3 BADC

BADC
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:14 AM

Posted 26 October 2014 - 02:33 AM

Thank you, Broni, for replying so fast!  Here are the results of my scan:

 

 

 

Security Check Results:

Results of screen317's Security Check version 0.99.89  
 Windows XP Service Pack 3 x86   
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
 ZoneAlarm LTD Toolbar    
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 SUPERAntiSpyware     
 Java 7 Update 67  
 Java™ 6 Update 3  
 Adobe Flash Player 15.0.0.152  
 Adobe Reader XI  
 Google Chrome 36.0.1985.125  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:: 5% 
````````````````````End of Log`````````````````````` 
 
FSS Results:
 

Farbar Service Scanner Version: 21-07-2014
Ran by staples1321 (administrator) on 25-10-2014 at 00:53:34
Running from "C:\Documents and Settings\staples1321\Desktop"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************
 
Internet Services:
============
 
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
 
 
Windows Firewall:
=============
 
Firewall Disabled Policy: 
==================
 
 
System Restore:
============
 
System Restore Disabled Policy: 
========================
 
 
Security Center:
============
 
 
Windows Update:
============
 
Windows Autoupdate Disabled Policy: 
============================
 
 
Other Services:
==============
 
 
File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\afd.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\netbt.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\tcpip.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\ipsec.sys => File is digitally signed
C:\WINDOWS\system32\dnsrslvr.dll => File is digitally signed
C:\WINDOWS\system32\ipnathlp.dll => File is digitally signed
C:\WINDOWS\system32\netman.dll => File is digitally signed
C:\WINDOWS\system32\wbem\WMIsvc.dll => File is digitally signed
C:\WINDOWS\system32\srsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\sr.sys => File is digitally signed
C:\WINDOWS\system32\wscsvc.dll => File is digitally signed
C:\WINDOWS\system32\wbem\WMIsvc.dll => File is digitally signed
C:\WINDOWS\system32\wuauserv.dll => File is digitally signed
C:\WINDOWS\system32\qmgr.dll => File is digitally signed
C:\WINDOWS\system32\es.dll => File is digitally signed
C:\WINDOWS\system32\cryptsvc.dll => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
 
Extra List:
=======
AegisP(15) Gpc(6) IPSec(4) NetBT(5) NwlnkIpx(11) NwlnkNb(12) PSched(7) Tcpip(3) Tcpip6(10) 
0x0C000000040000000100000002000000030000000E000000080000000500000006000000070000000A0000000B0000000F000000
IpSec Tag value is correct.
 
**** End of log ****
 
Mini Toolbox Results:
 
MiniToolBox by Farbar  Version: 21-07-2014
Ran by staples1321 (administrator) on 25-10-2014 at 00:58:02
Running from "C:\Documents and Settings\staples1321\Desktop"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************
 
========================= IE Proxy Settings: ============================== 
 
Proxy is not enabled.
No Proxy Server is set.
========================= Hosts content: =================================
 
 
127.0.0.1       localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
 
There are 15361 more lines starting with "127.0.0.1"
 
========================= IP Configuration: ================================
 
Broadcom 802.11g Network Adapter = Wireless Network Connection (Connected)
Atheros AR8132 PCI-E Fast Ethernet Controller = Local Area Connection (Media disconnected)
 
 
# ---------------------------------- 
# Interface IP Configuration         
# ---------------------------------- 
pushd interface ip
 
Error obtaining configuration for interface Local Area Connection.
 
Error obtaining configuration for interface Wireless Network Connection.
 
 
 
popd
# End of interface IP configuration
 
 
Windows IP Configuration        Host Name . . . . . . . . . . . . : acer-399b23ec8f        Primary Dns Suffix  . . . . . . . :         Node Type . . . . . . . . . . . . : Broadcast        IP Routing Enabled. . . . . . . . : No        WINS Proxy Enabled. . . . . . . . : No        DNS Suffix Search List. . . . . . : hsd1.ca.comcast.net.Ethernet adapter Local Area Connection:        Media State . . . . . . . . . . . : Media disconnected        Description . . . . . . . . . . . : Atheros AR8132 PCI-E Fast Ethernet Controller        Physical Address. . . . . . . . . : 00-26-22-20-31-90Ethernet adapter Wireless Network Connection:        Connection-specific DNS Suffix  . : hsd1.ca.comcast.net.        Description . . . . . . . . . . . : Broadcom 802.11g Network Adapter        Physical Address. . . . . . . . . : 52-25-26-00-2E-62        Dhcp Enabled. . . . . . . . . . . : Yes        Autoconfiguration Enabled . . . . : Yes        IP Address. . . . . . . . . . . . : 10.0.0.12        Subnet Mask . . . . . . . . . . . : 255.255.255.0        IP Address. . . . . . . . . . . . : 2601:9:4c80:1be:9cb9:cf05:123c:1fc0        IP Address. . . . . . . . . . . . : 2601:9:4c80:1be:5025:26ff:fe00:2e62        IP Address. . . . . . . . . . . . : fe80::5025:26ff:fe00:2e62%5        Default Gateway . . . . . . . . . : 10.0.0.1                                            fe80::2273:55ff:fefb:7db1%5        DHCP Server . . . . . . . . . . . : 10.0.0.1        DNS Servers . . . . . . . . . . . : 75.75.75.75                                            75.75.76.76                                            fec0:0:0:ffff::1%2                                            fec0:0:0:ffff::2%2                                            fec0:0:0:ffff::3%2        Lease Obtained. . . . . . . . . . : Friday, October 24, 2014 10:44:16 PM        Lease Expires . . . . . . . . . . : Friday, October 31, 2014 10:44:16 PMTunnel adapter Teredo Tunneling Pseudo-Interface:        Connection-specific DNS Suffix  . :         Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface        Physical Address. . . . . . . . . : 00-00-FB-F8-E7-FB-AC-8E        Dhcp Enabled. . . . . . . . . . . : No        IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%6        Default Gateway . . . . . . . . . :         NetBIOS over Tcpip. . . . . . . . : DisabledTunnel adapter Automatic Tunneling Pseudo-Interface:        Connection-specific DNS Suffix  . : hsd1.ca.comcast.net.        Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface        Physical Address. . . . . . . . . : 0A-00-00-0C        Dhcp Enabled. . . . . . . . . . . : No        IP Address. . . . . . . . . . . . : fe80::5efe:10.0.0.12%2        Default Gateway . . . . . . . . . :         DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%2                                            fec0:0:0:ffff::2%2                                            fec0:0:0:ffff::3%2        NetBIOS over Tcpip. . . . . . . . : DisabledServer:  cdns01.comcast.net
Address:  75.75.75.75
 
Name:    google.com
Addresses:  74.125.239.129, 74.125.239.136, 74.125.239.130, 74.125.239.137
 74.125.239.142, 74.125.239.128, 74.125.239.134, 74.125.239.135, 74.125.239.133
 74.125.239.132, 74.125.239.131
 
Pinging google.com [2607:f8b0:4005:800::1008] with 32 bytes of data:Reply from 2607:f8b0:4005:800::1008: time=21ms Reply from 2607:f8b0:4005:800::1008: time=18ms Ping statistics for 2607:f8b0:4005:800::1008:    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:    Minimum = 18ms, Maximum = 21ms, Average = 19msServer:  cdns01.comcast.net
Address:  75.75.75.75
 
Name:    yahoo.com
Addresses:  98.139.183.24, 206.190.36.45, 98.138.253.109
 
Pinging yahoo.com [98.139.183.24] with 32 bytes of data:Reply from 98.139.183.24: bytes=32 time=97ms TTL=48Reply from 98.139.183.24: bytes=32 time=92ms TTL=48Ping statistics for 98.139.183.24:    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:    Minimum = 92ms, Maximum = 97ms, Average = 94msPinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32 time=2ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Ping statistics for 127.0.0.1:    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),Approximate round trip times in milli-seconds:    Minimum = 0ms, Maximum = 2ms, Average = 1ms===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 26 22 20 31 90 ...... Atheros AR8132 PCI-E Fast Ethernet Controller - Packet Scheduler Miniport
0x3 ...52 25 26 00 2e 62 ...... Broadcom 802.11g Network Adapter - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         10.0.0.1       10.0.0.12  25
         10.0.0.0    255.255.255.0        10.0.0.12       10.0.0.12  25
        10.0.0.12  255.255.255.255        127.0.0.1       127.0.0.1  25
   10.255.255.255  255.255.255.255        10.0.0.12       10.0.0.12  25
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1  1
        224.0.0.0        240.0.0.0        10.0.0.12       10.0.0.12  25
  255.255.255.255  255.255.255.255        10.0.0.12       10.0.0.12  1
  255.255.255.255  255.255.255.255        10.0.0.12               2  1
Default Gateway:          10.0.0.1
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================
 
Catalog5 01 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\system32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\system32\nwprovau.dll [142336] (Microsoft Corporation)
Catalog5 05 C:\WINDOWS\system32\pnrpnsp.dll [58880] (Microsoft Corporation)
ATTENTION: The LibraryPath should be "%SystemRoot%\system32\pnrpnsp.dll"
 
Catalog5 06 C:\WINDOWS\system32\pnrpnsp.dll [58880] (Microsoft Corporation)
ATTENTION: The LibraryPath should be "%SystemRoot%\system32\pnrpnsp.dll"
 
Catalog9 01 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 15 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 16 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 17 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 18 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 19 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 20 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 21 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 22 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 23 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 24 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 25 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 26 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 27 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 28 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 29 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 30 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 31 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 32 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 33 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 34 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 35 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 36 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 37 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 38 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 39 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 40 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 41 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 42 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 43 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 44 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 45 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 46 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 47 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 48 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 49 C:\WINDOWS\system32\mswsock.dll [245248] (Microsoft Corporation)
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (10/24/2014 10:50:24 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 10:45:33 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 10:45:30 PM) (Source: MatSvc) (User: )
Description: The scheduled MATS task encountered a failure when collecting configuration data. hr=0xC004F00E
.
 
Error: (10/24/2014 10:45:29 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 09:55:30 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 09:51:49 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 09:51:47 PM) (Source: MatSvc) (User: )
Description: The scheduled MATS task encountered a failure when collecting configuration data. hr=0xC004F00E
.
 
Error: (10/24/2014 09:51:46 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 09:50:33 PM) (Source: MatSvc) (User: )
Description: The MATS service encountered a web service failure. hr=0x80072EFE
 
Error: (10/24/2014 09:50:30 PM) (Source: MatSvc) (User: )
Description: The scheduled MATS task encountered a failure when collecting configuration data. hr=0xC004F00E
.
 
 
System errors:
=============
Error: (10/24/2014 11:49:31 PM) (Source: Service Control Manager) (User: )
Description: The LexBce Server service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/24/2014 09:51:41 PM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for a transaction response from the MBAMService service.
 
Error: (10/24/2014 03:36:19 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load: 
abp480n5
adpu160m
agp440
agpCPQ
Aha154x
aic78u2
aic78xx
AliIde
alim1541
amdagp
amsint
asc
asc3350p
asc3550
atapi
cbidf
cd20xrnt
CmdIde
Cpqarray
dac2w2k
dac960nt
dpti2o
hpn
i2omp
ini910u
IntelIde
mraid35x
PCIIde
perc2
perc2hib
ql1080
Ql10wnt
ql12160
ql1240
ql1280
sisagp
Sparrow
symc810
symc8xx
sym_hi
sym_u3
TosIde
ultra
viaagp
ViaIde
 
Error: (10/24/2014 11:03:03 AM) (Source: Service Control Manager) (User: )
Description: The Search Protect Service service failed to start due to the following error: 
%%3
 
Error: (10/24/2014 02:49:49 AM) (Source: Service Control Manager) (User: )
Description: The Search Protect Service service failed to start due to the following error: 
%%3
 
Error: (10/24/2014 02:34:44 AM) (Source: Service Control Manager) (User: )
Description: The Adobe Flash Player Update Service service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/24/2014 02:34:37 AM) (Source: Service Control Manager) (User: )
Description: The Java Quick Starter service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/24/2014 02:34:24 AM) (Source: Service Control Manager) (User: )
Description: The Intel® Matrix Storage Event Monitor service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/24/2014 02:33:07 AM) (Source: Service Control Manager) (User: )
Description: The Simple TCP/IP Services service terminated unexpectedly.  It has done this 1 time(s).
 
Error: (10/24/2014 02:32:46 AM) (Source: Service Control Manager) (User: )
Description: The Yet Another Media Meta Manager service terminated unexpectedly.  It has done this 1 time(s).
 
 
Microsoft Office Sessions:
=========================
Error: (10/29/2009 04:21:58 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 87857 seconds with 60 seconds of active time.  This session ended with a crash.
 
 
 
=========================== Installed Programs ============================
7-Zip 9.20 (HKLM\...\7-Zip) (Version:  - )
Acer Crystal Eye webcam Ver:1.1.81.402 (HKLM\...\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}) (Version: 1.1.81.402 - Chicony Electronics Co.,Ltd.)
Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.00.3010 - Acer Incorporated)
Acer VCM (HKLM\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.00.3009 - Acer Incorporated)
Acrobat.com (HKLM\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
Adobe AIR (Version: 1.0.8.4990 - Adobe Systems Inc.) Hidden
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.16 - Atheros Communications Inc.)
Audacity 2.0 (HKLM\...\Audacity_is1) (Version:  - Audacity Team)
Azada &reg; (HKLM\...\BFG-Azada) (Version:  - )
BCL easyConverter Desktop 3 (Word Version) (HKLM\...\{8C5845B5-729F-40E3-A945-4454E67F65F4}) (Version: 3.0.18 - BCL Technologies)
Best Buy pc app (Version: 3.2.2.0 - Best Buy) Hidden
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 3.0.1.60 - )
calibre (HKLM\...\{5BE337EE-3815-4E5A-993D-B8C2546B69CF}) (Version: 1.0.0 - Kovid Goyal)
Canon iP1600 (HKLM\...\CANONBJ_Deinstall_CNMCP75.DLL) (Version:  - )
Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.2.0 - Canon Inc.)
Canon PIXMA iP1500 (HKLM\...\CANONBJ_Deinstall_CNMCP5y.DLL) (Version:  - )
Canon ScanGear Toolbox CS 2.2 (HKLM\...\Canon ScanGear Toolbox CS) (Version:  - )
Choice Guard (Version: 1.2.87.0 - Microsoft Corporation) Hidden
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Doxillion Document Converter (HKLM\...\Doxillion) (Version:  - NCH Software)
EPSON XP-400 Series Printer Uninstall (HKLM\...\EPSON XP-400 Series) (Version:  - SEIKO EPSON Corporation)
Express Burn Disc Burning Software (HKLM\...\ExpressBurn) (Version: 4.72 - NCH Software)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 5.3.1.606 - Foxit Corporation)
FoxTab PDF Converter (HKCU\...\FoxTab PDF Converter) (Version:  - )
Free RAR Extract Frog (HKLM\...\Free RAR Extract Frog) (Version: 2.70 - Philipp Winterberg)
FreshVideoDownloader (HKLM\...\FreshDevices - FreshVideoDownloader_is1) (Version:  - )
FreshView (HKLM\...\FreshDevices - FreshView_is1) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden
Gravely Silent: House of Deadlock (HKLM\...\BFG-Gravely Silent - House of Deadlock) (Version:  - )
Hidden Expedition Devils Triangle (HKLM\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-118464810}) (Version:  - Oberon Media)
I.R.I.S. OCR (HKLM\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IC-Viewer 2012 (x86) (HKLM\...\{A2F8C7DD-4C9B-4130-89CD-4866DB044539}) (Version: 14.1.0.10787 - IronCAD)
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - )
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Internet Explorer (Enable DEP) (HKLM\...\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb) (Version:  - )
IZArc 4.1.2 (HKLM\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.1.2 - Ivan Zahariev)
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden
Java™ 6 Update 3 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160030}) (Version: 1.6.0.30 - Sun Microsystems, Inc.)
Junk Mail filter update (Version: 14.0.8064.206 - Microsoft Corporation) Hidden
K-Lite Mega Codec Pack 9.6.0 (HKLM\...\KLiteCodecPack_is1) (Version: 9.6.0 - )
Launch Manager (HKLM\...\LManager) (Version: 2.0.07 - Acer Inc.)
Lexmark Z600 Series (HKLM\...\Lexmark Z600 Series) (Version:  - )
LG United Mobile Drivers (HKLM\...\{55031CEF-CE75-4A5C-8DEA-60577820529B}) (Version: 3.10.1.0 - LG Electronics)
Life Quest&reg; (HKLM\...\BFG-Life Quest) (Version:  - )
LightScribe System Software (HKLM\...\{7F10292C-A190-4176-A665-A1ED3478DF86}) (Version: 1.18.3.2 - LightScribe)
Luxor (HKLM\...\Luxor) (Version:  - GameHouse, Inc.)
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Automated Troubleshooting Services Shim (HKLM\...\{c9920352-04e6-469d-bab8-e2b9c7c75415}.sdb) (Version:  - )
Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
Microsoft Fix it Center (HKLM\...\{B7588D45-AFDC-4C93-9E2E-A100F3554B64}) (Version: 1.0.0090 - Microsoft Corporation)
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 (Version:  - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Software Update for Web Folders  (English) 12 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{67E03279-F703-408F-B4BF-46B5FC8D70CD}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Miro (HKLM\...\Miro) (Version: 5.0 - Participatory Culture Foundation)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Open It! (HKLM\...\OpenIt Open It!) (Version: 1.1.1 - OpenIt)
OXPDFtoJpeg version 2.2.2.24 (HKLM\...\{B311B1FF-91B6-46A6-A290-4B1E51DFD745}_is1) (Version: 2.2.2.24 - OXPDF, Inc.)
Paint.NET v3.5.8 (HKLM\...\{9CF4A37B-A8C4-44D7-8C53-13B9D9594BB2}) (Version: 3.58.0 - dotPDN LLC)
PANTECH USB Modem V2 (HKLM\...\{1C336D20-A089-4818-9C56-96AD81BF5A11}) (Version: 1.2.2793.719 - PANTECH CO.,LTD)
PDFViewerLauncher (HKLM\...\{55192263-EF7B-4103-A5B1-5148EB41C24F}) (Version: 12.0.9501 - IronCAD)
PhotoStage Slideshow Producer (HKLM\...\PhotoStage) (Version: 2.52 - NCH Software)
Pixillion Image Converter (HKLM\...\Pixillion) (Version:  - NCH Software)
Prism Video File Converter (HKLM\...\Prism) (Version:  - NCH Software)
QuickTime (HKLM\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.2 - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.6914 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Segoe UI (Version: 14.0.4327.805 - Microsoft Corp) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1102 - SUPERAntiSpyware.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.2.2.0 - Synaptics Incorporated)
System Requirements Lab (HKLM\...\{9E1BAB75-EB78-440D-94C0-A3857BE2E733}) (Version: 4.1.71.0 - Husdawg, LLC)
System Requirements Lab for Intel (HKLM\...\{4B4E8814-F682-4197-8F4B-E9FFC6F08977}) (Version: 4.3.13.0 - Husdawg, LLC)
Twisted Lands: Insomniac Collector's Edition (HKLM\...\BFG-Twisted Lands - Insomniac Collector's Edition) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2141007) (HKLM\...\KB2141007) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2607712) (HKLM\...\KB2607712) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2616676) (HKLM\...\KB2616676) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)
Update for Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB951072-v2) (HKLM\...\KB951072-v2) (Version: 2 - Microsoft Corporation)
Update for Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden
Update for Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB955839) (HKLM\...\KB955839) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB961503) (HKLM\...\KB961503) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)
Update for Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
Update for Zip Opener (HKCU\...\DSite) (Version:  - )
USB2.0 Card Reader Software (HKLM\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.0.6000.81 - Realtek Semiconductor Corp.)
VS10RuntimeWin32 (Version: 1.0.0 - immunet) Hidden
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Format 11 runtime (Version:  - Microsoft Corporation) Hidden
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows Media Player 11 (Version:  - Microsoft Corporation) Hidden
Windows PowerShell™ 1.0 (HKLM\...\KB926139-v2) (Version: 2 - Microsoft Corporation)
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team)
Yammm (HKLM\...\{F70361A6-021E-4FAB-AA2F-B8FCBB4432F8}) (Version: 1.2.100 - Michael Welter)
Zip Opener Packages (HKCU\...\Zip Opener Packages) (Version:  - )
ZoneAlarm LTD Toolbar (HKLM\...\ZoneAlarm LTD Toolbar) (Version:  - Check Point Software Technologies)
Zuma Deluxe (HKLM\...\Zuma Deluxe) (Version:  - PopCap Games)
Zuma Deluxe RA (HKLM\...\Zuma Deluxe RA) (Version:  - )
 
========================= Devices: ================================
 
 
========================= Memory info: ===================================
 
Percentage of memory in use: 65%
Total physical RAM: 1013.87 MB
Available physical RAM: 352.42 MB
Total Pagefile: 2437.06 MB
Available Pagefile: 1238.21 MB
Total Virtual: 2047.88 MB
Available Virtual: 1981.04 MB
 
========================= Partitions: =====================================
 
1 Drive c: (ACER) (Fixed) (Total:139.04 GB) (Free:60.87 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\ACER-399B23EC8F
 
Administrator            Bad C                    Guest                    
HelpAssistant            staples1321              SUPPORT_388945a0         
 
========================= Restore Points ==================================
 
28-07-2014 09:21:31 Installed Java 7 Update 65
31-07-2014 21:24:36 Software Distribution Service 3.0
31-07-2014 23:36:26 Installed Driver Support.
31-07-2014 23:43:11 Revo Uninstaller's restore point - Driver Support
31-07-2014 23:44:12 Removed Driver Support.
06-08-2014 22:20:48 Revo Uninstaller's restore point - Dynomite 2.01
06-08-2014 22:27:56 Revo Uninstaller's restore point - Constant Guard Protection Suite
07-08-2014 00:56:12 Revo Uninstaller's restore point - Home Sweet Home
07-08-2014 01:03:26 Revo Uninstaller's restore point - Trade Mania
07-08-2014 01:12:30 Revo Uninstaller's restore point - SUPERAntiSpyware
09-08-2014 08:54:01 Removed Java 7 Update 21
09-08-2014 08:54:41 Installed Java 7 Update 67
11-08-2014 18:05:59 System Checkpoint
12-08-2014 18:32:19 System Checkpoint
14-08-2014 00:28:46 System Checkpoint
14-08-2014 22:38:50 Revo Uninstaller's restore point - Google Chrome
15-08-2014 20:38:00 Software Distribution Service 3.0
17-08-2014 01:07:27 System Checkpoint
22-08-2014 08:18:26 Printer Driver Lexmark Z600 Series Installed
24-08-2014 08:14:12 System Checkpoint
25-08-2014 09:10:11 System Checkpoint
05-09-2014 18:45:34 System Checkpoint
06-09-2014 22:37:24 Removed Java 7 Update 67
06-09-2014 22:39:27 Installed Java 7 Update 67
14-09-2014 07:28:39 Revo Uninstaller's restore point - Constant Guard Protection Suite
16-09-2014 02:43:47 Software Distribution Service 3.0
17-09-2014 15:38:19 Revo Uninstaller's restore point - Secunia PSI (3.0.0.9016)
25-09-2014 22:16:48 System Checkpoint
30-09-2014 19:25:52 System Checkpoint
01-10-2014 08:43:25 Before Windows 8 Upgrade
01-10-2014 21:41:49 Revo Uninstaller's restore point - Immunet 3
04-10-2014 01:32:03 Restore Operation
04-10-2014 03:50:34 Restore Operation
10-10-2014 09:23:40 Removed LG United Mobile Drivers.
10-10-2014 09:25:18 Installed LG United Mobile Drivers.
13-10-2014 13:42:33 System Checkpoint
16-10-2014 10:11:48 Software Distribution Service 3.0
22-10-2014 19:29:28 System Checkpoint
22-10-2014 20:29:28 Revo Uninstaller's restore point - CinPlus-2.5cdTube HDV22.10
22-10-2014 20:46:23 Revo Uninstaller's restore point - TornTV
24-10-2014 09:27:19 Revo Uninstaller's restore point - ZoneAlarm Free Antivirus + Firewall
24-10-2014 18:59:02 Revo Uninstaller's restore point - HP Officejet Pro 8600 Basic Device Software
 
**** End of log ****
 
MBAM Results:
 

Malwarebytes Anti-Malware
www.malwarebytes.org
 
RKill Results:
 

Rkill 2.6.8 by Lawrence Abrams (Grinler)
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 
Program started at: 10/25/2014 11:58:30 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * No malware processes found to kill.
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * Reparse Point/Junctions Found (Most likely legitimate)!
 
     * C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir]
 
Checking Windows Service Integrity: 
 
 * No issues found.
 
Searching for Missing Digital Signatures: 
 
 * No issues found.
 
Checking HOSTS File: 
 
 * HOSTS file entries found: 
 
  127.0.0.1       localhost
  127.0.0.1 www.007guard.com
  127.0.0.1 007guard.com
  127.0.0.1 008i.com
  127.0.0.1 www.008k.com
  127.0.0.1 008k.com
  127.0.0.1 www.00hq.com
  127.0.0.1 00hq.com
  127.0.0.1 010402.com
  127.0.0.1 www.032439.com
  127.0.0.1 032439.com
  127.0.0.1 www.0scan.com
  127.0.0.1 0scan.com
  127.0.0.1 1000gratisproben.com
  127.0.0.1 www.1000gratisproben.com
  127.0.0.1 1001namen.com
  127.0.0.1 www.1001namen.com
  127.0.0.1 100888290cs.com
  127.0.0.1 www.100888290cs.com
  127.0.0.1 www.100sexlinks.com
 
  20 out of 15381 HOSTS entries shown.
  Please review HOSTS file for further entries.
 
Program finished at: 10/25/2014 12:00:38 PM
Execution time: 0 hours(s), 2 minute(s), and 8 seconds(s)
 
 
 
 
So, I really hope that I did that correctly.  Oh yes, one more thing...I ran a Certainantispyware just a few minutes ago and there were 17 threats that said this (they were all the same except for the last 2 or 3 numbers right before the .EXE):
 
Trojan.Agent/Gen-Nullo[Short]
C:\SYSTEM VOLUME INFORMATION\_RESTORE{577E2158-88B0-493A-BDB5-E2EE0FE6AC39}\RP1102\A0370289.EXE
 

It's strange cause every time I've scanned with Certainantispyware it's only picked up on the adware.  Thank you very much for your help!



#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:06:14 AM

Posted 26 October 2014 - 07:33 PM

p22002970.gif I'm not sure what Certainantispyware is. Do you have any link to their webpage?

 

p22002970.gif You're not running any AV program.

Install ONE of these:

- Avast! free antivirus: http://www.avast.com/eng/download-avast-home.html

- free Microsoft Security Essentials: http://windows.microsoft.com/en-GB/windows/products/security-essentials
Note for Windows 8 users: Microsoft Security Essentials comes preinstalled and renamed as Windows Defender.
You can keep it or you have to disable it before installing another AV program.  How to...

- free Comodo Antivirus: http://www.comodo.com/home/internet-security/antivirus.php

Update, run full scan, report on any findings.
 

p22002970.gif MBAM and MBAR logs are missing.


My Website

My help doesn't cost a penny, but if you'd like to consider a donation, click DONATE

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users