dunno what i got
ok, im pretty sure i had ave.exe. i was getting a pop up that said windows XP protector, and ran a false scan saying that i was covered in bad. i also have something called just-in-time debugger popping up, which i understand is just a bad program - i tried to un-click something in internet options to get it to stop and it hasn't so i don't know what that is. i followed the steps you were giving someone else AFTER i installed/ran erunt, hijak this, all the stuff in the before you post section. nothings fixed. so i probably screwed up more stuff but i was trying not to waste your time.
i tried to post this from the infected computer last night, but even when i could get to the forums through the re-directs, it wouldn't let me post anything. i'm posting this on another computer. i tried to downlaod combo-fix, in case you wanted me to use it, but i cant seem to. best i can figure is to down load anything you need here onto a jump drive then upload it there and try it and ferry things back and forth. so this is as of last night.
ran spybot. no infections found
ran AVG slow scan - have that set to run every night. found something, said it deleted it, but it said no infections found, so think it only found tracking cookies. nothing went away.
so i came to here, found a guy that said he also had ave.exe, whihc i kept seeing in my processes box.
so, i ran erunt.
then i ran hijackthis
then i downloaded malwarebytes...it woundn't start. so i down loaded rkill, and ran it
malwarebytes then ran, found infections, asked for a restart. ive follwed this procedure several times. no worky.
so last night i re-ran hijack this - log as follows. ran dds, log as follows. i had to email the logs to myself because it wouldn't let me post them - kept saying cant display this page.
i get alot of re-directs, false scan anti virus pop-up crap, etc.
thank-you in advance!!
heres the hijackthis log;
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:27:52 PM, on 4/27/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17023)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\vVX3000.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\VS7JIT.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\matt.FLUXCAPACITER\Local Settings\Temporary Internet Files\Content.IE5\FA6IVD0Q\dds[1].scr
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Documents and Settings\matt.FLUXCAPACITER\Local Settings\Temp\3.tmp\edS.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SpybotSnD] "C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SPYBOTSD.EXE" /autofix /autoclose
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-602162358-117609710-839522115-1007\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User 'Amys Place')
O4 - HKUS\S-1-5-21-602162358-117609710-839522115-1007\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Amys Place')
O4 - S-1-5-21-602162358-117609710-839522115-1007 Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (User 'Amys Place')
O4 - S-1-5-21-602162358-117609710-839522115-1007 User Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (User 'Amys Place')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\matt.FLUXCAPACITER\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1145086499562
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.co...p/PhtPkMSN.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: dlcc_device - - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
--
End of file - 7746 bytes
heres the DDS log;
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-03-17.01)
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 3/30/2006 2:37:19 PM
System Uptime: 4/27/2010 7:52:41 PM (1 hours ago)
Motherboard: Dell Inc. | | 0JC474
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz | Microprocessor | 2793/800mhz
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 70 GiB total, 36.416 GiB free.
D: is CDROM (CDFS)
==== Disabled Device Manager Items =============
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Cisco Systems VPN Adapter
Device ID: ROOT\NET\0000
Manufacturer: Cisco Systems
Name: Cisco Systems VPN Adapter
PNP Device ID: ROOT\NET\0000
Service: CVirtA
==== System Restore Points ===================
RP1479: 1/26/2010 5:29:46 AM - System Checkpoint
RP1480: 1/27/2010 6:29:10 AM - System Checkpoint
RP1481: 1/27/2010 8:14:06 AM - Software Distribution Service 3.0
RP1482: 1/28/2010 9:04:43 AM - System Checkpoint
RP1483: 1/29/2010 12:25:09 AM - Software Distribution Service 3.0
RP1484: 1/30/2010 1:40:16 AM - System Checkpoint
RP1485: 1/30/2010 11:02:40 AM - Removed Apple Mobile Device Support
RP1486: 1/31/2010 11:13:26 AM - System Checkpoint
RP1487: 2/1/2010 10:06:15 AM - Software Distribution Service 3.0
RP1488: 2/2/2010 11:40:34 AM - System Checkpoint
RP1489: 2/3/2010 9:53:45 AM - Avg8 Update
RP1490: 2/4/2010 10:09:22 AM - System Checkpoint
RP1491: 2/4/2010 3:19:27 PM - Software Distribution Service 3.0
RP1492: 2/5/2010 4:09:25 PM - System Checkpoint
RP1493: 2/6/2010 6:04:54 PM - System Checkpoint
RP1494: 2/7/2010 6:46:21 PM - System Checkpoint
RP1495: 2/8/2010 4:34:03 PM - Software Distribution Service 3.0
RP1496: 2/9/2010 5:16:02 PM - System Checkpoint
RP1497: 2/10/2010 3:00:53 AM - Software Distribution Service 3.0
RP1498: 2/11/2010 3:18:53 AM - System Checkpoint
RP1499: 2/12/2010 12:08:41 AM - Software Distribution Service 3.0
RP1500: 2/13/2010 1:06:51 AM - System Checkpoint
RP1501: 2/14/2010 1:37:53 AM - System Checkpoint
RP1502: 2/15/2010 2:23:50 AM - System Checkpoint
RP1503: 2/15/2010 11:13:25 AM - Software Distribution Service 3.0
RP1504: 2/16/2010 11:31:16 AM - System Checkpoint
RP1505: 2/17/2010 12:15:52 PM - System Checkpoint
RP1506: 2/18/2010 12:20:29 PM - System Checkpoint
RP1507: 2/18/2010 3:40:49 PM - Software Distribution Service 3.0
RP1508: 2/19/2010 4:20:27 PM - System Checkpoint
RP1509: 2/20/2010 4:21:35 PM - System Checkpoint
RP1510: 2/21/2010 4:41:47 PM - System Checkpoint
RP1511: 2/22/2010 5:41:47 PM - System Checkpoint
RP1512: 2/23/2010 8:41:45 AM - Software Distribution Service 3.0
RP1513: 2/24/2010 9:16:50 AM - System Checkpoint
RP1514: 2/25/2010 1:47:37 AM - Software Distribution Service 3.0
RP1515: 2/25/2010 3:00:37 AM - Software Distribution Service 3.0
RP1516: 2/25/2010 11:31:48 PM - Software Distribution Service 3.0
RP1517: 2/27/2010 12:16:50 AM - System Checkpoint
RP1518: 2/28/2010 11:52:40 AM - System Checkpoint
RP1519: 3/1/2010 8:13:00 AM - Software Distribution Service 3.0
RP1520: 3/2/2010 10:31:18 AM - System Checkpoint
RP1521: 3/3/2010 11:08:28 AM - System Checkpoint
RP1522: 3/4/2010 2:57:50 PM - Software Distribution Service 3.0
RP1523: 3/5/2010 3:39:38 PM - System Checkpoint
RP1524: 3/6/2010 7:31:44 PM - System Checkpoint
RP1525: 3/7/2010 10:39:34 PM - System Checkpoint
RP1526: 3/8/2010 6:36:52 PM - Software Distribution Service 3.0
RP1527: 3/9/2010 8:11:19 AM - Avg8 Update
RP1528: 3/10/2010 8:57:49 AM - System Checkpoint
RP1529: 3/11/2010 3:00:55 AM - Software Distribution Service 3.0
RP1530: 3/11/2010 10:54:17 AM - Software Distribution Service 3.0
RP1531: 3/12/2010 12:15:00 PM - System Checkpoint
RP1532: 3/13/2010 2:14:49 PM - System Checkpoint
RP1533: 3/14/2010 10:35:36 PM - System Checkpoint
RP1534: 3/15/2010 6:11:13 PM - Software Distribution Service 3.0
RP1535: 3/18/2010 2:34:54 AM - System Checkpoint
RP1536: 3/18/2010 9:51:43 PM - Avg8 Update
RP1537: 3/18/2010 9:57:13 PM - Avg8 Update
RP1538: 3/18/2010 10:26:54 PM - Software Distribution Service 3.0
RP1539: 3/19/2010 9:42:16 AM - Avg8 Update
RP1540: 3/19/2010 9:42:37 AM - Avg8 Update
RP1541: 3/20/2010 4:39:43 PM - System Checkpoint
RP1542: 3/22/2010 2:05:03 PM - Software Distribution Service 3.0
RP1543: 3/23/2010 3:33:59 PM - System Checkpoint
RP1544: 3/24/2010 4:02:49 PM - System Checkpoint
RP1545: 3/25/2010 5:03:55 PM - System Checkpoint
RP1546: 3/25/2010 9:08:54 PM - Software Distribution Service 3.0
RP1547: 3/27/2010 5:56:22 PM - System Checkpoint
RP1548: 3/28/2010 6:04:01 PM - System Checkpoint
RP1549: 3/29/2010 6:12:20 PM - Software Distribution Service 3.0
RP1550: 3/30/2010 9:14:05 PM - System Checkpoint
RP1551: 3/31/2010 10:20:19 AM - Software Distribution Service 3.0
RP1552: 4/1/2010 9:52:27 AM - Software Distribution Service 3.0
RP1553: 4/2/2010 11:12:14 AM - System Checkpoint
RP1554: 4/4/2010 1:59:47 AM - System Checkpoint
RP1555: 4/7/2010 7:16:29 PM - Software Distribution Service 3.0
RP1556: 4/8/2010 6:32:03 PM - Software Distribution Service 3.0
RP1557: 4/9/2010 7:42:31 PM - System Checkpoint
RP1558: 4/10/2010 9:30:59 PM - System Checkpoint
RP1559: 4/12/2010 5:31:01 AM - System Checkpoint
RP1560: 4/12/2010 9:37:52 AM - Software Distribution Service 3.0
RP1561: 4/13/2010 11:19:29 AM - System Checkpoint
RP1562: 4/14/2010 3:01:22 AM - Software Distribution Service 3.0
RP1563: 4/15/2010 3:14:12 AM - System Checkpoint
RP1564: 4/15/2010 2:49:40 PM - Software Distribution Service 3.0
RP1565: 4/16/2010 4:27:59 PM - System Checkpoint
RP1566: 4/17/2010 5:03:10 PM - System Checkpoint
RP1567: 4/19/2010 12:09:56 AM - System Checkpoint
RP1568: 4/19/2010 5:17:51 PM - Software Distribution Service 3.0
RP1569: 4/20/2010 6:25:08 PM - System Checkpoint
RP1570: 4/21/2010 8:20:11 PM - System Checkpoint
RP1571: 4/22/2010 11:11:58 PM - Software Distribution Service 3.0
RP1572: 4/24/2010 8:53:28 PM - System Checkpoint
RP1573: 4/25/2010 8:58:39 PM - System Checkpoint
==== Installed Programs ======================
ABBYY FineReader 6.0 Sprint
Ad-Aware
Adobe ExtendScript Toolkit 2
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Photoshop CS3
Adobe Reader 7.1.0
Adobe Setup
Adobe® Photoshop® Album Starter Edition 3.0.1
Apple Mobile Device Support
Apple Software Update
AutoUpdate
AVG 8.5
Bonjour
CCleaner
Conexant D850 56K V.9x DFVc Modem
Critical Update for Windows Media Player 11 (KB959772)
Dell Driver Reset Tool
Dell Photo AIO Printer 924
DivX Codec
DivX Converter
DivX Player
DivX Web Player
High Definition Audio Driver Package - KB835221
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Intel(R) Graphics Media Accelerator Driver
Intel(R) PRO Network Connections Drivers
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Jasc Paint Shop Photo Album 5
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) SE Runtime Environment 6 Update 1
jv16 PowerTools 2008
kSolo Recorder
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Modem Helper
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser (KB933579)
Netflix Movie Viewer
NETGEAR RangeMax(TM) Wireless USB 2.0 Adapter WPN111
Photo Viewer 2.3
Picture Package Music Transfer
QuickTime
RealPlayer
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB981349)
SigmaTel Audio
Sony Picture Utility
Spybot - Search & Destroy
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Viewpoint Media Player
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VPN Client
WebFldrs XP
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Internet Explorer 7
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation
Windows XP Service Pack 3
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
==== Event Viewer Messages From Past Week ========
4/27/2010 6:47:36 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 3 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/27/2010 6:43:18 PM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/27/2010 6:26:18 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the dlcc_device service to connect.
4/27/2010 6:26:18 PM, error: Service Control Manager [7000] - The dlcc_device service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
4/27/2010 6:25:58 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service dlcc_device with arguments "" in order to run the server: {323CE21C-A448-40AA-BA74-7FCF1E441069}
4/26/2010 10:19:31 PM, error: Dhcp [1002] - The IP address lease 99.143.212.167 for the Network Card with network address 001320B44EF9 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
4/25/2010 7:16:06 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: IntelIde Lbd
4/24/2010 9:47:46 AM, error: Ftdisk [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
4/24/2010 9:47:46 AM, error: Ftdisk [45] - The system could not sucessfully load the crash dump driver.
4/24/2010 9:47:40 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Lbd
4/24/2010 5:40:28 PM, error: Dhcp [1002] - The IP address lease 192.168.1.64 for the Network Card with network address 001320B44EF9 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
4/24/2010 5:26:07 PM, error: DCOM [10000] - Unable to start a DCOM Server: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}. The error: "%2" Happened while starting this command: C:\WINDOWS\system32\igfxsrvc.exe -Embedding
4/24/2010 10:11:52 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
4/23/2010 8:01:53 PM, error: Service Control Manager [7031] - The Windows Defender service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.
==== End Of File ===========================
oh and also- im not totally retarded, but please really really make your directions clear. i suck at this computer stuff- obviously. thanks!
========================
Edit
Originally Posted by savgbst1
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)Note that all instructions given are customized for that member's computer only, the tools used may cause damage if run on a machine with different specs/infections. Please do not take fixes given to another user and apply to your own machine.
uh...ok youve encountered the end of my understanding of computer stuff. sorry youre stuck with the moron! if you can tell me in potato head language precisely how to get you what youre looking for when im home tonight ill do it - i mostly have to talk to you from work, its my home comp thats messed up and it re-directs so much its hard to get to you! thanks for your help, and sorry again youre stuck with the guy who knows nothin. 
Let's see DDS log creation steps again.