Antimalware Doctor + more

[Jack&Jill]

Hello bob200 ,

Please post a new DDS log.

[bob200]

DDS (Ver_10-12-12.02) - NTFSx86
Run by Auser at 2:28:18.39 on Wed 12/29/2010
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2012.1628 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\DKabcoms.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\RTDCPL.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\Guardian.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\java.exe
C:\WINDOWS\system32\getmac.exe
C:\Documents and Settings\Auser\Desktop\dds.com

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.choiceadvantage.com/
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: WhiteSmoke Toolbar: {52794457-af6c-4c50-9def-f2e24f4c8889} - c:\program files\whitesmoketoolbar\whitesmoketoolbarX.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {52794457-af6c-4c50-9def-f2e24f4c8889} - c:\program files\whitesmoketoolbar\whitesmoketoolbarX.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\auser\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTDCPL.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\bam\mabm.exe" /runcleanupscript
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {7451D317-862C-45DA-8C28-1B21ADF95877} - hxxp://208.57.191.182/WebViewS.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {DCBF889B-422B-4AA0-9914-D5045A103758} - hxxp://208.57.191.182/WebRPB.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Notify: igfxcui - igfxdev.dll
Hosts: 127.0.0.1 www.spywareinfo.com

============= SERVICES / DRIVERS ===============

R2 dkab_device;dkab_device;c:\windows\system32\dkabcoms.exe -service --> c:\windows\system32\DKabcoms.exe -service [?]
R2 TheGuardianService;TheGuardian;c:\windows\system32\Guardian.exe [2010-11-18 57344]
R3 CmtlPort;Comtrol Serial Port;c:\windows\system32\drivers\rp2cport.sys [2009-11-9 112128]
R3 k57w2k;Broadcom NetLink (TM) Gigabit Ethernet;c:\windows\system32\drivers\k57xp32.sys [2010-2-23 209960]
R3 RcktPort;Comtrol RocketPort Infinity;c:\windows\system32\drivers\rp2.sys [2009-10-15 33792]
S0 cerc6;cerc6; [x]
S0 sshtrc;sshtrc; [x]
S0 xvrsxcb;xvrsxcb;c:\windows\system32\drivers\uvqhyj.sys --> c:\windows\system32\drivers\uvqhyj.sys [?]

=============== Created Last 30 ================

2010-12-29 09:31:47 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-29 09:31:43 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-29 09:31:43 -------- d-----w- c:\program files\bam
2010-12-29 09:22:14 -------- d-----w- c:\docume~1\auser\applic~1\Malwarebytes
2010-12-29 09:22:09 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-12-29 08:55:16 -------- d-----w- c:\docume~1\auser\applic~1\whitesmoketoolbar
2010-12-29 08:15:20 -------- d-----w- c:\program files\whitesmoketoolbar
2010-12-29 08:14:51 -------- d-----w- c:\windows\system32\%APPDATA%
2010-12-29 03:47:12 30000 ----a-w- c:\windows\system32\scyiks.dll
2010-12-29 03:47:12 30000 ----a-w- c:\windows\system32\mh8v69.dll
2010-12-29 03:46:49 -------- d-----w- c:\docume~1\auser\locals~1\applic~1\SanctionedMedia
2010-12-29 03:46:28 -------- d-----w- c:\docume~1\auser\applic~1\906E878B6DFFA6D3AC6CA83AC93BDF64
2010-12-21 12:47:55 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-12-21 12:47:55 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-12-21 12:47:54 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2010-12-21 12:47:54 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-12-21 12:47:53 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2010-12-21 12:47:47 -------- d-----w- c:\windows\Logs
2010-12-08 09:29:19 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-08 09:29:19 -------- d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-12-07 08:43:05 -------- d-----w- c:\program files\GRETECH
2010-12-06 08:06:19 -------- d-----w- c:\windows\system32\appmgmt
2010-12-05 08:06:01 -------- d-----w- c:\program files\common files\Blizzard Entertainment
2010-12-05 07:46:23 -------- d--h--w- c:\windows\system32\1039
2010-12-04 07:26:03 -------- d-----w- c:\docume~1\alluse~1\applic~1\Blizzard Entertainment

==================== Find3M ====================

2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-17 21:01:46 344064 ----a-w- c:\windows\system32\msvcr71.dll
2010-11-06 00:34:12 832512 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:34:11 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-11-06 00:34:11 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2010-11-06 00:34:11 17408 ----a-w- c:\windows\system32\corpol.dll
2010-11-03 12:25:53 389120 ----a-w- c:\windows\system32\html.iec
2010-10-28 13:13:22 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25:00 1853312 ----a-w- c:\windows\system32\win32k.sys

=================== ROOTKIT ====================

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: SAMSUNG_HD161GJ rev.1AC01122 -> Harddisk0\DR0 -> \Device\Ide\IdePort0 P0T0L0-3

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x89D64555]<<
_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x89d6a7b0]; MOV EAX, [0x89d6a82c]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x89D79AB8]
3 CLASSPNP[0xBA0E8FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> [0x89E1EC20]
\Driver\atapi[0x89E14030] -> IRP_MJ_CREATE -> 0x89D64555
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; MOV ES, AX; MOV DS, AX; MOV SI, 0x7c00; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; PUSH AX; PUSH 0x61c; RETF ; STI ; MOV CX, 0x4; MOV BP, 0x7be; CMP BYTE [BP+0x0], 0x0; }
detected disk devices:
\Device\Ide\IdeDeviceP0T0L0-3 -> \??\IDE#DiskSAMSUNG_HD161GJ_________________________1AC01122#5&125555f1&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
\Driver\atapi DriverStartIo -> 0x89D6439B
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !

============= FINISH: 2:29:13.70 ===============

[bob200]

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 2/23/2010 10:05:48 AM
System Uptime: 12/29/2010 2:24:27 AM (0 hours ago)

Motherboard: Dell Inc. | | 0HN7XN
Processor: Intel Pentium III Xeon processor | CPU | 2693/800mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 149 GiB total, 116.057 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 12/28/2010 7:57:36 PM - System Checkpoint

==== Installed Programs ======================

Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.4.1
Broadcom NetXtreme-I Netlink Driver and Management Installer
Comtrol Corporation
Dell Printer Software Uninstall
ERUNT 1.1j
Google Chrome
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Intel(R) Graphics Media Accelerator Driver
Java Auto Updater
Java(TM) 6 Update 22
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Standard for Students and Teachers
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB2416400)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Spybot - Search & Destroy
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7

==== Event Viewer Messages From Past Week ========

12/29/2010 12:59:53 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:37 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
12/29/2010 12:59:03 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
12/29/2010 12:59:00 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
12/29/2010 1:38:05 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume.
12/29/2010 1:08:44 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm
12/29/2010 1:00:04 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
12/28/2010 8:12:31 PM, error: Service Control Manager [7022] - The Server service hung on starting.
12/28/2010 8:12:31 PM, error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: After starting, the service hung in a start-pending state.
12/28/2010 7:47:45 PM, error: Service Control Manager [7000] - The Microsoft Kernel Acoustic Echo Canceller service failed to start due to the following error: A device attached to the system is not functioning.
12/27/2010 1:21:53 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer CA596-2 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{352F1033-F0A0-485B-9. The master browser is stopping or an election is being forced.

==== End Of File ===========================

[Jack&Jill]

Hello bob200 ,

The logs are the same as the previous. Maybe I did not word the instructions properly.

Please rerun DDS and post back a new DDS.txt.

[bob200]

Sorry about that. I did a new DDS scan but I must have copy-pasted the old log.

Im still switching back from normal mode to run the program and safe mode to post it.




DDS (Ver_10-12-12.02) - NTFSx86
Run by Auser at 6:47:00.29 on Sun 01/02/2011
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2012.1671 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
svchost.exe
C:\WINDOWS\system32\DKabcoms.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\Guardian.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\java.exe
C:\WINDOWS\system32\getmac.exe
C:\Documents and Settings\Auser\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.choiceadvantage.com/
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\auser\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [modset70700update.exe] c:\documents and settings\auser\application data\906e878b6dffa6d3ac6ca83ac93bdf64\modset70700update.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTDCPL.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\wee.exe" /runcleanupscript
mRun: [combofix] "c:\combofix\cf30113.cfxxe" /c "c:\combofix\C.bat"
mRunOnce: [combofix] "c:\combofix\cf30113.cfxxe" /c "c:\combofix\C.bat"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {7451D317-862C-45DA-8C28-1B21ADF95877} - hxxp://208.57.191.182/WebViewS.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {DCBF889B-422B-4AA0-9914-D5045A103758} - hxxp://208.57.191.182/WebRPB.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Notify: igfxcui - igfxdev.dll
Hosts: 127.0.0.1 www.spywareinfo.com

============= SERVICES / DRIVERS ===============

R2 dkab_device;dkab_device;c:\windows\system32\dkabcoms.exe -service --> c:\windows\system32\DKabcoms.exe -service [?]
R2 TheGuardianService;TheGuardian;c:\windows\system32\Guardian.exe [2010-11-18 57344]
R3 CmtlPort;Comtrol Serial Port;c:\windows\system32\drivers\rp2cport.sys [2009-11-9 112128]
R3 k57w2k;Broadcom NetLink (TM) Gigabit Ethernet;c:\windows\system32\drivers\k57xp32.sys [2010-2-23 209960]
R3 RcktPort;Comtrol RocketPort Infinity;c:\windows\system32\drivers\rp2.sys [2009-10-15 33792]
S0 cerc6;cerc6; [x]
S0 cjglq;cjglq;c:\windows\system32\drivers\vwkaailq.sys --> c:\windows\system32\drivers\vwkaailq.sys [?]
S0 sshtrc;sshtrc; [x]

=============== Created Last 30 ================

2011-01-02 12:37:35 17664 ----a-w- c:\windows\system32\drivers\sermouse.sys
2011-01-02 12:15:22 -------- d-sha-r- C:\cmdcons
2011-01-02 12:13:34 98816 ----a-w- c:\windows\sed.exe
2011-01-02 12:13:34 89088 ----a-w- c:\windows\MBR.exe
2011-01-02 12:13:34 256512 ----a-w- c:\windows\PEV.exe
2011-01-02 12:13:34 161792 ----a-w- c:\windows\SWREG.exe
2011-01-02 12:13:16 -------- d-s---w- C:\ComboFix
2011-01-02 08:20:38 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-02 08:20:35 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-02 08:20:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-01 07:45:04 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-01-01 07:45:01 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-01-01 07:45:01 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-01-01 07:43:57 35871 -c--a-w- c:\windows\system32\dllcache\wbfirdma.sys
2011-01-01 07:42:57 794399 -c--a-w- c:\windows\system32\dllcache\usr1806v.sys
2011-01-01 07:41:57 159232 -c--a-w- c:\windows\system32\dllcache\tridkbm.sys
2011-01-01 07:40:58 36640 -c--a-w- c:\windows\system32\dllcache\t2r4mini.sys
2011-01-01 07:39:56 61824 -c--a-w- c:\windows\system32\dllcache\speed.sys
2011-01-01 07:38:56 28160 -c--a-w- c:\windows\system32\dllcache\sm91w.dll
2011-01-01 07:37:57 6784 -c--a-w- c:\windows\system32\dllcache\serscan.sys
2011-01-01 07:36:58 166720 -c--a-w- c:\windows\system32\dllcache\s3m.sys
2011-01-01 07:35:58 45312 -c--a-w- c:\windows\system32\dllcache\ql12160.sys
2011-01-01 07:34:59 169984 -c--a-w- c:\windows\system32\dllcache\pcx500.sys
2011-01-01 07:33:58 198144 -c--a-w- c:\windows\system32\dllcache\nv3.sys
2011-01-01 07:32:58 7168 -c--a-w- c:\windows\system32\dllcache\mxport.dll
2011-01-01 07:31:57 47616 -c--a-w- c:\windows\system32\dllcache\memgrp.dll
2011-01-01 07:30:46 26624 -c--a-w- c:\windows\system32\dllcache\irstusb.sys
2011-01-01 07:29:59 91136 -c--a-w- c:\windows\system32\dllcache\icam4com.dll
2011-01-01 07:28:59 19456 -c--a-w- c:\windows\system32\dllcache\hr1w.dll
2011-01-01 07:27:57 92160 -c--a-w- c:\windows\system32\dllcache\fuusd.dll
2011-01-01 07:26:59 114944 -c--a-w- c:\windows\system32\dllcache\epstw2k.sys
2011-01-01 07:25:59 131156 -c--a-w- c:\windows\system32\dllcache\digidbp.dll
2011-01-01 07:24:59 27164 -c--a-w- c:\windows\system32\dllcache\ce3n5.sys
2011-01-01 07:23:59 36463 -c--a-w- c:\windows\system32\dllcache\ati1tuxx.sys
2010-12-31 07:50:53 81410 ----a-w- c:\docume~1\alluse~1\applic~1\wKWswWK6.exe
2010-12-30 09:07:52 -------- d-----w- c:\windows\system32\wbem\repository\FS
2010-12-30 09:07:52 -------- d-----w- c:\windows\system32\wbem\Repository
2010-12-30 09:07:39 -------- d-----w- c:\docume~1\auser\applic~1\906E878B6DFFA6D3AC6CA83AC93BDF64
2010-12-29 12:55:18 -------- d-----w- c:\windows\pss
2010-12-29 11:13:20 -------- d-----w- c:\docume~1\auser\applic~1\SUPERAntiSpyware.com
2010-12-29 11:02:20 -------- d-----w- c:\program files\SUPERAntiSpyware(2)
2010-12-29 09:31:43 -------- d-----w- c:\program files\bam
2010-12-29 09:22:14 -------- d-----w- c:\docume~1\auser\applic~1\Malwarebytes
2010-12-29 09:22:09 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-12-29 08:55:16 -------- d-----w- c:\docume~1\auser\applic~1\whitesmoketoolbar(2)
2010-12-29 08:15:20 -------- d-----w- c:\program files\whitesmoketoolbar(2)
2010-12-29 08:14:51 -------- d-----w- c:\windows\system32\%APPDATA%
2010-12-29 03:47:28 21284 ---h--w- c:\windows\winamp.exe
2010-12-29 03:47:26 21284 ---h--w- c:\windows\hexdump.exe
2010-12-29 03:47:21 21284 ---h--w- c:\windows\spoolsv.exe
2010-12-29 03:47:20 21284 ---h--w- c:\windows\taskmgr.exe
2010-12-29 03:47:12 30000 ----a-w- c:\windows\system32\mh8v69.dll
2010-12-29 03:46:49 -------- d-----w- c:\docume~1\auser\locals~1\applic~1\SanctionedMedia
2010-12-21 12:47:55 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-12-21 12:47:55 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-12-21 12:47:54 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2010-12-21 12:47:54 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-12-21 12:47:53 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2010-12-21 12:47:47 -------- d-----w- c:\windows\Logs
2010-12-08 09:29:19 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-12-08 09:29:19 -------- d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-12-07 08:43:05 -------- d-----w- c:\program files\GRETECH
2010-12-06 08:06:19 -------- d-----w- c:\windows\system32\appmgmt
2010-12-05 08:06:01 -------- d-----w- c:\program files\common files\Blizzard Entertainment
2010-12-05 07:46:23 -------- d--h--w- c:\windows\system32\1039
2010-12-04 07:26:03 -------- d-----w- c:\docume~1\alluse~1\applic~1\Blizzard Entertainment

==================== Find3M ====================

2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-17 21:01:46 344064 ----a-w- c:\windows\system32\msvcr71.dll
2010-11-06 00:34:12 832512 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:34:11 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-11-06 00:34:11 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2010-11-06 00:34:11 17408 ----a-w- c:\windows\system32\corpol.dll
2010-11-03 12:25:53 389120 ----a-w- c:\windows\system32\html.iec
2010-10-28 13:13:22 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25:00 1853312 ----a-w- c:\windows\system32\win32k.sys

=================== ROOTKIT ====================

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: SAMSUNG_HD161GJ rev.1AC01122 -> Harddisk0\DR0 -> \Device\Ide\IdePort0 P0T0L0-3

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x89D89555]<<
_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x89d8f7b0]; MOV EAX, [0x89d8f82c]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x89E14AB8]
3 CLASSPNP[0xBA0E8FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> [0x89D9E030]
\Driver\atapi[0x89E09F38] -> IRP_MJ_CREATE -> 0x89D89555
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; MOV ES, AX; MOV DS, AX; MOV SI, 0x7c00; MOV DI, 0x600; MOV CX, 0x200; CLD ; REP MOVSB ; PUSH AX; PUSH 0x61c; RETF ; STI ; MOV CX, 0x4; MOV BP, 0x7be; CMP BYTE [BP+0x0], 0x0; }
detected disk devices:
\Device\Ide\IdeDeviceP0T0L0-3 -> \??\IDE#DiskSAMSUNG_HD161GJ_________________________1AC01122#5&125555f1&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
\Driver\atapi DriverStartIo -> 0x89D8939B
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !

============= FINISH: 6:48:19.95 ===============

[bob200]

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 2/23/2010 10:05:48 AM
System Uptime: 1/2/2011 6:45:35 AM (0 hours ago)

Motherboard: Dell Inc. | | 0HN7XN
Processor: Intel Pentium III Xeon processor | CPU | 2693/800mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 149 GiB total, 114.915 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 12/28/2010 7:57:36 PM - System Checkpoint
RP2: 12/29/2010 3:19:02 PM - Restore Operation
RP3: 12/30/2010 1:07:08 AM - Restore Operation
RP4: 1/2/2011 4:13:52 AM - ComboFix created restore point

==== Installed Programs ======================

Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.4.1
Broadcom NetXtreme-I Netlink Driver and Management Installer
Comtrol Corporation
Dell Printer Software Uninstall
Google Chrome
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Intel(R) Graphics Media Accelerator Driver
Java Auto Updater
Java(TM) 6 Update 22
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Standard for Students and Teachers
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB2416400)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Spybot - Search & Destroy
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7

==== Event Viewer Messages From Past Week ========

12/31/2010 11:45:05 PM, information: Windows File Protection [64017] - Windows File Protection file scan completed successfully.
12/31/2010 11:44:19 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\winzm.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\winsp.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\winpy.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:17 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\winime.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:16 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wingb.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:16 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\winar30.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\drivers\weitekp9.sys could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:44:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\weitekp9.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\wamreg.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\wamps.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\wam.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:38 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\w3svc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:37 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\w3svapi.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:37 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\w3ctrs.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:37 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\w3ext.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:36 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\w32.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:29 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\voicesub.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:43:29 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\voicepad.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:42:45 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\uniime.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:42:44 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\unicdime.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:42:11 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\uihelper.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:42:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\tsprof.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:41:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\tools.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:41:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ime\tintlgnt\tmigrate.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:41:22 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\tintlgnt.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:41:21 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\thawbrkr.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:40:24 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\svcext.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:40:12 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\status.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:40:11 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\sspifilt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:40:10 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\ssinc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:40:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\srusbusd.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:37 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\softkey.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:33 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\snprfdll.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:33 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\snmptrap.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:32 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmpthrd.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:32 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmpstup.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmpsmir.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmpincl.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\snmpmib.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:30 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmpcl.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:30 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\snmp.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:29 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\smtpctrs.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:29 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\smtpsvc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:28 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\smtpapi.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:27 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmp\smimsgif.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:24 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmp\smierrsy.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:24 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmp\smierrsm.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:21 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wbem\snmp\smi2smir.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:09 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\smb6w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sma3w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:00 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm9aw.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:39:00 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm93w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:59 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm92w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:56 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm90w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm8dw.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm8cw.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm8aw.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm89w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm87w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm81w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\sm59w.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:38:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\simptcp.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:37:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\seos.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:37:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\seo.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:37:47 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\scripto.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\rwnh.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:49 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\rwia330.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:49 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\rwia001.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:47 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\rw330ext.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:47 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\rw001ext.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:34 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\rpcref.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:33 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\romanime.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:25 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\regtrace.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:25 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\register.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\drivers\ramdisk.sys could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:08 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\quser.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\quick.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:36:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\query.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\pwsdata.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:28 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\pmxviceo.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:28 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\pmxmcro.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:27 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\pmxgl.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:27 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ime\pintlgnt\pmigrate.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:27 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ime\pintlgnt\pintlphr.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\pintlgnt.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:26 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\chsime\applets\pintlcsd.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:26 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\chsime\applets\pintlcsa.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:22 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\phon.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:35:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\permchk.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:34:44 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\pagecnt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:34:43 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\shared\res\padrs804.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:34:43 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\shared\res\padrs412.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:34:43 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\shared\res\padrs411.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:34:42 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\shared\res\padrs404.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:33:51 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\ntfsdrv.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:33:45 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\nsepm.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:33:36 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\nextlink.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:50 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\multibox.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:46 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\mtstocom.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:32 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\msiregmv.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\msir3jp.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\com\migregdb.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\migisol.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\mga.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:32:00 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\metadata.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\mdsync.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\md5filt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:49 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\mailmsg.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:29 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\lprmon.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:28 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\lpdsvc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\lonsint.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:25 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\logscrpt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\lmmib2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\korwbrkr.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdurdu.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdth3.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdth2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdth1.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdth0.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdsyr2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:31:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdsyr1.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:59 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdlk41j.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:59 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdlk41a.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:58 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdintel.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:58 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdintam.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:58 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdinpun.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:58 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdinmar.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:57 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdinkan.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:57 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdinhin.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:57 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdinguj.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:56 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdindev.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:56 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdibm02.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdheb.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdfa.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbddiv2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbddiv1.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbdax2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbda3.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:51 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbda2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:51 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbda1.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:51 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbd106n.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:50 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\kbd101.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:50 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\jupiw.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:49 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iwrps.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:48 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iscomlog.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:48 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\isapips.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:39 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iprip.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:27 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\infoctrs.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\infocomm.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\inetinfo.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:25 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\imskf.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:24 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\shared\imlang.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:24 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\imskdic.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:23 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\imjputyc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:22 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\imjpdct.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.

[bob200]

12/31/2010 11:30:21 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\imjpcus.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:21 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\imjpcic.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\imjp81k.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\imjp81.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:20 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\shared\imepadsm.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:19 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\imekr61.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:19 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imkr6_1\imekrcic.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:19 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imkr6_1\applets\imekrmbx.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iissync.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iismui.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:17 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iislog.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:17 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iisfecnv.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:17 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iiscrmap.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:17 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iisclex4.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:16 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iischema.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:30:16 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iisadmin.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:29:39 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imkr6_1\applets\hwxkor.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:29:37 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imjp8_1\applets\hwxjpn.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:29:34 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\chtime\applets\hwxcht.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:29:32 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\httpodbc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:29:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\httpmib.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:29:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\httpext.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:30 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\hostmib.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:21 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\imkr6_1\dicts\hanjadic.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\gzip.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsxp32.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxswzrd.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsui.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxstiff.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxst30.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxssvc.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsst.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxssend.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsroute.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsres.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsperf.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsmon.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsext32.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsevent.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsdrv.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxscover.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxscomex.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxscom.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:00 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsclntr.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:00 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsclnt.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:28:00 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxscfgwz.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:59 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fxsapi.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\ftpsvc2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\ftpmib.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:54 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ftpctrs2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ftlx041e.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:45 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\flattemp.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:38 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\fcachdll.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:34 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\f3ahvoas.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:31 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\exstrace.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:30 PM, information: Windows File Protection [64020] - Windows File Protection scan found that the system file c:\windows\explorer.exe has a bad signature. This file was restored to the original version to maintain system stability. The file version of the system file is 0.0.0.1.
12/31/2010 11:27:30 PM, information: Windows File Protection [64004] - The protected system file c:\windows\explorer.exe could not be restored to its original, valid version. The file version of the bad file is 0.0.0.1 The specific error code is 0x800b0100 [No signature was present in the subject. ].
12/31/2010 11:27:27 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\evntwin.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\evntcmd.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:26 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\evntagnt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:25 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\esunid.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:22 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\esuimgd.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:27:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\esucmd.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:26:35 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\edb500.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:44 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\davcdata.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:44 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\dayi.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:21 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\cprofile.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\counters.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:18 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\convlog.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:17 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\controt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:16 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\compfilt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:08 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\cintlgnt.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ime\cintlgnt\cintime.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:06 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\chtime\applets\chtskf.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:06 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\chtime\applets\chtskdic.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\chtbrkr.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\chsbrkr.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:05 PM, information: Windows File Protection [64021] - The system file c:\windows\ime\chtime\applets\chtmbx.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\chgusr.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\chgport.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:03 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\chglogon.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:02 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\change.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:25:01 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\chajei.ime could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:24:49 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\c_iscii.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:24:48 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\c_is2022.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:24:48 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\c_g18030.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:24:33 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\browscap.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:24:19 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\authfilt.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\asptxn.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\asp.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:55 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\aspperf.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\aqueue.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:53 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\aqadmin.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:52 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\appconf.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:48 PM, information: Windows File Protection [64021] - The system file c:\windows\msagent\intl\agt0804.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:47 PM, information: Windows File Protection [64021] - The system file c:\windows\msagent\intl\agt0412.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:47 PM, information: Windows File Protection [64021] - The system file c:\windows\msagent\intl\agt0411.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:46 PM, information: Windows File Protection [64021] - The system file c:\windows\msagent\intl\agt040d.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:46 PM, information: Windows File Protection [64021] - The system file c:\windows\msagent\intl\agt0404.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:46 PM, information: Windows File Protection [64021] - The system file c:\windows\msagent\intl\agt0401.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:39 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\adrot.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:39 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\adsiisex.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:38 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\admxprox.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:37 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\admexs.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:23 PM, information: Windows File Protection [64004] - The protected system file c:\windows\system32\winlogon.exe could not be restored to its original, valid version. The file version of the bad file is 5.1.2600.5512 The specific error code is 0x800b0100 [No signature was present in the subject. ].
12/31/2010 11:23:22 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\wamregps.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:22 PM, information: Windows File Protection [64020] - Windows File Protection scan found that the system file c:\windows\system32\winlogon.exe has a bad signature. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
12/31/2010 11:23:21 PM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\bin\1033\tcptsat.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\staxmem.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:20 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\smtpsnap.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:19 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\smtpadm.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:08 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\logui.ocx could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\infoadmn.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:07 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\isatq.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\inetmgr.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\inetmgr.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iisui.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:06 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsloc.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\iisrstas.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iisrtl.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:05 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iisrstap.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iisreset.exe could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iismap.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\iisext.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:04 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\ftpsapi2.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:23:03 PM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\bin\1033\fpmmcsat.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:22:59 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\coadmin.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:22:59 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\cnfgprts.ocx could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:22:58 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\certwiz.ocx could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:22:58 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\certmap.ocx could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:22:56 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\adsiis.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/31/2010 11:22:56 PM, information: Windows File Protection [64021] - The system file c:\windows\system32\admwprox.dll could not be copied into the DLL cache. The specific error code is 0x800b0100 [No signature was present in the subject. ]. This file is necessary to maintain system stability.
12/30/2010 12:50:17 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
12/30/2010 12:18:51 AM, information: Windows File Protection [64004] - The protected system file explorer.exe could not be restored to its original, valid version. The file version of the bad file is 0.0.0.1 The specific error code is 0x00000426 [The service has not been started. ].
12/29/2010 8:26:09 AM, error: Service Control Manager [7022] - The Automatic Updates service hung on starting.
12/29/2010 6:59:37 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service winmgmt with arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}
12/29/2010 5:36:16 PM, error: Service Control Manager [7034] - The TheGuardian service terminated unexpectedly. It has done this 1 time(s).
12/29/2010 5:36:16 PM, error: Service Control Manager [7034] - The dkab_device service terminated unexpectedly. It has done this 1 time(s).
12/29/2010 4:44:58 AM, information: Windows File Protection [64018] - Windows File Protection file scan was cancelled by user interaction, user name is Auser.
12/29/2010 4:44:57 AM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\coadmin.dll could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:56 AM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\cnfgprts.ocx could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:55 AM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\bin\cfgwiz.exe could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:53 AM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\certwiz.ocx could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:51 AM, information: Windows File Protection [64021] - The system file c:\windows\system32\inetsrv\certmap.ocx could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:50 AM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\_vti_bin\_vti_aut\author.exe could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:48 AM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\isapi\_vti_aut\author.dll could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:46 AM, information: Windows File Protection [64021] - The system file c:\windows\system32\adsiis.dll could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:45 AM, information: Windows File Protection [64021] - The system file c:\windows\system32\admwprox.dll could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:43 AM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\_vti_bin\_vti_adm\admin.exe could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:39 AM, information: Windows File Protection [64021] - The system file c:\program files\common files\microsoft shared\web server extensions\40\isapi\_vti_adm\admin.dll could not be copied into the DLL cache. The specific error code is 0x000004c7 [The operation was canceled by the user. ]. This file is necessary to maintain system stability.
12/29/2010 4:44:14 AM, information: Windows File Protection [64016] - Windows File Protection file scan was started.
12/29/2010 4:24:26 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SASDIFSV SASKUTIL Tcpip
12/29/2010 3:46:23 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm SASDIFSV SASKUTIL
12/29/2010 3:45:05 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
12/29/2010 3:12:33 AM, error: Service Control Manager [7022] - The Server service hung on starting.
12/29/2010 3:12:33 AM, error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: After starting, the service hung in a start-pending state.
12/29/2010 2:34:44 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm
12/29/2010 12:59:53 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:53 AM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
12/29/2010 12:59:00 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
12/29/2010 1:38:05 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume2'. It has stopped monitoring the volume.
12/29/2010 1:04:34 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
12/29/2010 1:00:04 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
12/28/2010 7:47:45 PM, error: Service Control Manager [7000] - The Microsoft Kernel Acoustic Echo Canceller service failed to start due to the following error: A device attached to the system is not functioning.
12/27/2010 1:21:53 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer CA596-2 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{352F1033-F0A0-485B-9. The master browser is stopping or an election is being forced.

==== End Of File ===========================

[bob200]

I'm going to be leaving in a few minutes, going out of town for a couple days. I won't be back at this computer probably until tuesday night PST.

Thank you so much for the help so far, I hope this thread won't be closed. You can leave further instructions for me here and I'll get back as soon as possible or if you'd prefer I can post here when I'm back at the computer.

[Jack&Jill]

Hello bob200 ,

I'm going to be leaving in a few minutes, going out of town for a couple days. I won't be back at this computer probably until tuesday night PST.

Thanks for informing. No rush.

The Windows restore must have reactivated all the infections.

Please delete the copy of ComboFix that you have and download a fresh copy. Then run it and post back the log.

Link 1
Link 2

--------------------

I want you to update MBAM and run a scan.

• Open MBAM and click on the Update tab, then Check for Updates.
• When completed, go to back to the Scanner tab and select Perform full scan. Click Scan.
• Leave the default options as it is and click on Start Scan.
• If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process.
• When done, you will be prompted. Click OK, then click on Show Results.
• Check (tick) all items except items in the C:\System Volume Information folder and click on Remove Selected.
• After it has removed the items, a log in Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.

If asked to restart the computer, please do so. Failure to reboot will prevent MBAM from removing all the malware. If you receive an (Error Loading) error on reboot, please reboot a second time . It is normal for this error to occur once and does not need to be reported unless it returns on future reboots.

--------------------

Please post back:
1. the ComboFix log
2. MBAM report

[bob200]

I'm back. Thank you so much for your patience.

Going to try downloading a new combofix and mbam again. I had deleted and re-downloaded combofix a couple times already and they hadn't worked. If it still doesn't work, can I run it in safe mode?

Since I still only have website access in safe mode, could you specify if programs you want me to use can be used in safe mode or normal mode only? Thank you.

trying combo/mbam now...