Microsoft Error When Trying To Open Hard Drives [Archive]

View Full Version : Microsoft Error When Trying To Open Hard Drives

x__Beau

2009-02-21, 03:17

Whenever I try to go into my hard drives via My Computer I get this Microsoft Error message

"S-2-3-75-100011548-100031460-100001067-8193.com has encountered a problem"

My files are still intact and i can still access both hard drives through the explore window

My internet explorer now will not open and i have had trouble updating my AVG and Windows Defender because of it

I ran HiJackThis and this is what came back
------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:03:23 PM, on 21/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\OptusNet DSL Internet\DSC.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
C:\Program Files\Nero\Nero8\InCD\InCD.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\cssrss.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Documents and Settings\The Currans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
G:\Beau\Programs\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://optuszoo.ninemsn.com.au/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Live TV Toolbar - {b69a9db4-d0a1-4722-b56b-f20757a29cdf} - C:\Program Files\Live_TV\tbLive.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\csrss.exe
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Live TV Toolbar - {b69a9db4-d0a1-4722-b56b-f20757a29cdf} - C:\Program Files\Live_TV\tbLive.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: TorrentSeek Toolbar - {6bcb43af-a20f-4996-8860-48f511a222db} - C:\Program Files\TorrentSeek\tbTorr.dll
O3 - Toolbar: Live TV Toolbar - {b69a9db4-d0a1-4722-b56b-f20757a29cdf} - C:\Program Files\Live_TV\tbLive.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Desktop Service Centre] C:\Program Files\OptusNet DSL Internet\DSC.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero8\InCD\InCD.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [JuniorEngineCheck] "G:\Dylaan's Folder\JuniorEngineCheck" /DeleteKey
O4 - HKLM\..\Run: [nyfiby] C:\WINDOWS\system32\konnyp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Power-Antivirus-2009] C:\Program Files\Power-Antivirus-2009\Power-Antivirus-2009.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\The Currans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCman000
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C49134CC-B5EF-458C-A442-E8DFE7B4645F} (YYGInstantPlay Control) - http://www.yoyogames.com/downloads/activex/YoYo.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{BAF9D5E2-97CA-40DF-B3F4-CFAB8F13B0C4}: NameServer = 85.255.112.39,85.255.112.40
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.39,85.255.112.40
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.39,85.255.112.40
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Ati HotKey Poller (an2yace1lyazyf) - Unknown owner - C:\WINDOWS\system32\konnyp.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: npkcmsvc - Unknown owner - C:\Nexon\Mabinogi\npkcmsvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

--
End of file - 14725 bytes"

If someone could please help me get rid of this it would be greatly appreciated

Blade81

2009-02-22, 15:04

Hi

IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

BitComet
TorrentSeek

I'd like you to read this thread (http://forums.spybot.info/showthread.php?t=282).

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).

Delete these folders afterwards:

C:\Program Files\BitComet
C:\Program Files\TorrentSeek

Empty Recycle Bin.

After that:

Download DDS and save it to your desktop from here (http://www.techsupportforum.com/sectools/sUBs/dds) or here (http://download.bleepingcomputer.com/sUBs/dds.scr) or here (http://www.forospyware.com/sUBs/dds).
Disable any script blocker, and then double click dds.scr to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

x__Beau

2009-02-27, 08:47

Hi

Sorry for the lengthy reply
Here are the DDS files
___________________________________________________________

DDS (Ver_09-02-01.01) - NTFSx86
Run by The Currans at 18:44:22.45 on Fri 27/02/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1058 [GMT 11:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\OptusNet DSL Internet\DSC.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
C:\Program Files\Nero\Nero8\InCD\InCD.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\cssrss.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Documents and Settings\The Currans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Orbitdownloader\Grab.exe
C:\WINDOWS\system32\wuauclt.exe
G:\Beau\Programs\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://optuszoo.ninemsn.com.au/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
mSearchAssistant =
uURLSearchHooks: Live TV Toolbar: {b69a9db4-d0a1-4722-b56b-f20757a29cdf} - c:\program files\live_tv\tbLive.dll
uURLSearchHooks: SearchSettings Class: {e312764e-7706-43f1-8dab-fcdd2b1e416d} - c:\program files\search settings\kb127\SearchSettings.dll
mWinlogon: Shell=Explorer.exe c:\windows\config\csrss.exe
BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\program files\orbitdownloader\orbitcth.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
BHO: Live TV Toolbar: {b69a9db4-d0a1-4722-b56b-f20757a29cdf} - c:\program files\live_tv\tbLive.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: SearchSettings Class: {e312764e-7706-43f1-8dab-fcdd2b1e416d} - c:\program files\search settings\kb127\SearchSettings.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Live TV Toolbar: {b69a9db4-d0a1-4722-b56b-f20757a29cdf} - c:\program files\live_tv\tbLive.dll
TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - c:\program files\orbitdownloader\GrabPro.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
TB: {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
EB: {cba30743-c95b-4838-89c1-c9d784689d34} - Enterra Download Manager
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
uRun: [Google Update] "c:\documents and settings\the currans\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [High Definition Audio Property Page Shortcut] HDAShCut.exe
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [SoundMAX] "c:\program files\analog devices\soundmax\Smax4.exe" /tray
mRun: [RegistryMechanic]
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [HP Component Manager] "c:\program files\hp\hpcoretech\hpcmpmgr.exe"
mRun: [Desktop Service Centre] c:\program files\optusnet dsl internet\DSC.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [NeroFilterCheck] c:\program files\common files\nero\lib\NeroCheck.exe
mRun: [SecurDisc] c:\program files\nero\nero8\incd\NBHGui.exe
mRun: [InCD] c:\program files\nero\nero8\incd\InCD.exe
mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe"
mRun: [PCSuiteTrayApplication] c:\progra~1\nokia\nokiap~1\LAUNCH~1.EXE -startup
mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop album starter edition\3.0\apps\apdproxy.exe"
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [SearchSettings] c:\program files\search settings\SearchSettings.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRun: [MySpaceIM] c:\program files\myspace\im\MySpaceIM.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpimag~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\orbit.lnk - c:\program files\orbitdownloader\orbitdm.exe
IE: &Download by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/204
IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCman000
IE: Do&wnload selected by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
DPF: {BD393C14-72AD-4790-A095-76522973D6B8} - hxxp://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {C49134CC-B5EF-458C-A442-E8DFE7B4645F} - hxxp://www.yoyogames.com/downloads/activex/YoYo.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - c:\program files\hp\hpcoretech\comp\hpuiprot.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\thecur~1\applic~1\mozilla\firefox\profiles\gvfp8g90.default\
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - component: c:\documents and settings\the currans\application data\mozilla\firefox\profiles\gvfp8g90.default\extensions\{b042753d-f57e-4e8e-a01b-7379a6d4cefb}\components\IBitCometExtension.dll
FF - plugin: c:\documents and settings\the currans\local settings\application data\google\update\1.2.141.5\npGoogleOneClick7.dll
FF - plugin: c:\program files\common-use signing interface\bin\npCsiPlugin.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npyaxmpb.dll

============= SERVICES / DRIVERS ===============

R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [2008-7-7 39472]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-7-7 325128]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2008-7-7 27656]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2008-7-7 107272]
R2 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-5-12 611664]
R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe [2008-7-7 903960]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2008-7-7 298264]
R2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\nero\nero8\incd\NBHRegInCDSrv.exe [2008-2-28 53032]
R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
R3 glauiad;D-Link DSL-302G Modem;c:\windows\system32\drivers\glauiad.sys [2008-7-7 29603]
S2 an2yace1lyazyf;Ati HotKey Poller;c:\windows\system32\konnyp.exe --> c:\windows\system32\konnyp.exe [?]
S3 IlvMoneyDRIVER53;IlvMoneyDRIVER53;\??\g:\dylaan's folder\ilvmoney.sys --> g:\dylaan's folder\IlvMoney.sys [?]
S3 XDva189;XDva189;\??\c:\windows\system32\xdva189.sys --> c:\windows\system32\XDva189.sys [?]

=============== Created Last 30 ================

2009-02-27 17:59 5,152 a------- c:\windows\system32\nH1pQC.syz
2009-02-27 17:56 5,152 a------- c:\windows\system32\cWb3R5.syz
2009-02-27 17:09 5,152 a------- c:\windows\system32\hTO06N.syz
2009-02-27 17:07 5,152 a------- c:\windows\system32\w7JKPk.syz
2009-02-27 17:05 5,152 a------- c:\windows\system32\zBngPt.syz
2009-02-27 16:41 5,152 a------- c:\windows\system32\xzRM3h.syz
2009-02-27 16:00 5,152 a------- c:\windows\system32\VT53aV.syz
2009-02-27 15:57 5,152 a------- c:\windows\system32\ff5UOZ.syz
2009-02-27 15:49 5,152 a------- c:\windows\system32\IYZwF6.syz
2009-02-27 15:45 5,152 a------- c:\windows\system32\p0jSpT.syz
2009-02-26 20:48 5,152 a------- c:\windows\system32\QHgiwI.syz
2009-02-26 20:04 5,152 a------- c:\windows\system32\QYH66m.syz
2009-02-26 19:56 5,152 a------- c:\windows\system32\eaYosm.syz
2009-02-26 19:53 5,152 a------- c:\windows\system32\DUo3es.syz
2009-02-26 19:50 5,152 a------- c:\windows\system32\1ar5eI.syz
2009-02-26 18:36 5,152 a------- c:\windows\system32\Hx1s0I.syz
2009-02-26 18:34 5,152 a------- c:\windows\system32\D9SZvh.syz
2009-02-26 16:25 5,152 a------- c:\windows\system32\gSFg18.syz
2009-02-25 21:57 5,152 a------- c:\windows\system32\JqGXpj.syz
2009-02-25 16:32 5,152 a------- c:\windows\system32\Pbl8Gi.syz
2009-02-25 16:18 5,152 a------- c:\windows\system32\jqIugQ.syz
2009-02-25 15:58 5,152 a------- c:\windows\system32\dwrKvH.syz
2009-02-25 15:46 5,152 a------- c:\windows\system32\IET2Th.syz
2009-02-25 15:44 5,152 a------- c:\windows\system32\AXsQXt.syz
2009-02-25 14:38 5,152 a------- c:\windows\system32\IGw7vY.syz
2009-02-25 14:35 5,152 a------- c:\windows\system32\4mZzIR.syz
2009-02-25 11:24 5,152 a------- c:\windows\system32\Y8Nepm.syz
2009-02-25 11:20 5,152 a------- c:\windows\system32\EAUl02.syz
2009-02-24 21:20 5,152 a------- c:\windows\system32\PQjRdI.syz
2009-02-24 21:14 5,152 a------- c:\windows\system32\5QCUz2.syz
2009-02-24 17:59 5,152 a------- c:\windows\system32\sqDtQH.syz
2009-02-24 17:40 5,152 a------- c:\windows\system32\9d3Hqa.syz
2009-02-24 17:25 5,152 a------- c:\windows\system32\QrHQ0A.syz
2009-02-24 17:07 5,152 a------- c:\windows\system32\f3zIKg.syz
2009-02-23 16:52 5,152 a------- c:\windows\system32\XrvDZc.syz
2009-02-23 16:49 5,152 a------- c:\windows\system32\H2fVeG.syz
2009-02-23 16:47 5,152 a------- c:\windows\system32\mMrz89.syz
2009-02-23 16:45 5,152 a------- c:\windows\system32\3SKh0y.syz
2009-02-23 15:55 5,152 a------- c:\windows\system32\SkUsmQ.syz
2009-02-23 15:49 5,152 a------- c:\windows\system32\Curmeq.syz
2009-02-22 17:09 5,152 a------- c:\windows\system32\6kRJ9k.syz
2009-02-22 13:06 5,152 a------- c:\windows\system32\7WgU5g.syz
2009-02-22 12:16 5,152 a------- c:\windows\system32\d8p8bA.syz
2009-02-22 12:10 5,152 a------- c:\windows\system32\0jJhtk.syz
2009-02-22 11:04 5,152 a------- c:\windows\system32\Noqr3D.syz
2009-02-22 10:57 5,152 a------- c:\windows\system32\0Bqsjb.syz
2009-02-21 21:14 5,152 a------- c:\windows\system32\sRdHcJ.syz
2009-02-21 14:59 5,152 a------- c:\windows\system32\2VSG00.syz
2009-02-21 12:30 5,152 a------- c:\windows\system32\mlcY6J.syz
2009-02-21 12:28 5,152 a------- c:\windows\system32\LzzZtC.syz
2009-02-21 07:04 5,152 a------- c:\windows\system32\qCRa2q.syz
2009-02-20 22:21 5,152 a------- c:\windows\system32\sCoTIt.syz
2009-02-20 22:15 5,152 a------- c:\windows\system32\3Pwjlu.syz
2009-02-20 22:12 5,152 a------- c:\windows\system32\B6aH8R.syz
2009-02-20 22:08 5,152 a------- c:\windows\system32\2Z3kcs.syz
2009-02-20 21:05 5,152 a------- c:\windows\system32\HggtTo.syz
2009-02-20 21:00 5,152 a------- c:\windows\system32\qMAZYN.syz
2009-02-20 20:04 5,152 a------- c:\windows\system32\ajtgS5.syz
2009-02-20 19:28 5,152 a------- c:\windows\system32\XRxrWY.syz
2009-02-20 18:59 <DIR> --d----- c:\program files\Cool MP3 Splitter
2009-02-20 18:58 300 ---shr-- C:\autorun.inf
2009-02-20 16:20 5,152 a------- c:\windows\system32\negQ5G.syz
2009-02-20 15:35 5,152 a------- c:\windows\system32\XwRa2J.syz
2009-02-19 15:53 5,152 a------- c:\windows\system32\h0oCXx.syz
2009-02-18 21:15 5,152 a------- c:\windows\system32\nUW1yq.syz
2009-02-18 21:13 <DIR> --d----- c:\program files\Microsoft Office Outlook Connector
2009-02-18 14:55 5,152 a------- c:\windows\system32\CSx3SV.syz
2009-02-18 14:10 5,152 a------- c:\windows\system32\hai96L.syz
2009-02-18 08:22 5,152 a------- c:\windows\system32\XxAfjn.syz
2009-02-18 07:18 5,152 a------- c:\windows\system32\fdNNnu.syz
2009-02-17 15:53 5,152 a------- c:\windows\system32\4k7Ote.syz
2009-02-16 15:40 5,152 a------- c:\windows\system32\FA7B2z.syz
2009-02-15 22:29 5,152 a------- c:\windows\system32\PADPou.syz
2009-02-15 10:59 5,152 a------- c:\windows\system32\g68HEV.syz
2009-02-14 21:20 5,152 a------- c:\windows\system32\oUsnIk.syz
2009-02-14 17:50 5,152 a------- c:\windows\system32\CrOV2n.syz
2009-02-14 09:47 5,152 a------- c:\windows\system32\nXuNeH.syz
2009-02-13 16:01 5,152 a------- c:\windows\system32\4mWCut.syz
2009-02-12 15:52 5,152 a------- c:\windows\system32\N9j2Ok.syz
2009-02-11 22:59 <DIR> --d----- C:\NoLopBackups
2009-02-11 22:57 106 a------- C:\delete.bat
2009-02-11 21:17 <DIR> --d----- c:\docume~1\thecur~1\applic~1\NCH Software
2009-02-11 20:51 <DIR> --d----- c:\program files\NCH Software
2009-02-11 20:41 <DIR> --d----- c:\windows\speech
2009-02-11 15:44 5,152 a------- c:\windows\system32\5Wyz6M.syz
2009-02-11 15:24 5,152 a------- c:\windows\system32\jFZagR.syz
2009-02-11 15:07 5,152 a------- c:\windows\system32\xKvRfO.syz
2009-02-11 10:50 5,152 a------- c:\windows\system32\ACYsUT.syz
2009-02-10 15:36 5,152 a------- c:\windows\system32\MVGt8V.syz
2009-02-09 22:33 5,152 a------- c:\windows\system32\Q7uBBK.syz
2009-02-09 15:48 <DIR> --d----- c:\docume~1\alluse~1\applic~1\MPEG ELSE ONE VIEW
2009-02-09 15:39 5,152 a------- c:\windows\system32\oTfkdc.syz
2009-02-08 11:29 5,152 a------- c:\windows\system32\ScjrFs.syz
2009-02-08 01:26 5,152 a------- c:\windows\system32\PQidWV.syz
2009-02-08 01:26 34,304 a------- c:\windows\update.exe
2009-02-08 01:26 594 a------- c:\windows\apsou.vbs
2009-02-06 18:52 49,504 a------- c:\windows\system32\sirenacm.dll
2009-01-31 20:59 <DIR> --d----- c:\program files\Microsoft
2009-01-31 20:59 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-01-31 20:55 <DIR> --d----- c:\program files\common files\Windows Live
2009-01-31 20:25 <DIR> --d----- c:\documents and settings\the currans\Tracing

==================== Find3M ====================

2009-02-01 20:27 325,128 a------- c:\windows\system32\drivers\avgldx86.sys
2009-02-01 20:27 10,520 a------- c:\windows\system32\avgrsstx.dll
2009-02-01 20:27 107,272 a------- c:\windows\system32\drivers\avgtdix.sys
2008-12-22 14:09 12,288 a------- c:\windows\impborl.dll
2008-12-21 10:15 826,368 a------- c:\windows\system32\wininet.dll
2008-12-12 15:00 410,984 -------- c:\windows\system32\deploytk.dll
2008-12-11 11:33 200,704 a------- c:\windows\system32\dtu100.dll
2008-12-11 11:33 86,016 a------- c:\windows\system32\dpl100.dll
2008-12-09 13:28 593,920 a------- c:\windows\system32\dpuGUI11.dll
2008-12-09 13:28 344,064 a------- c:\windows\system32\dpus11.dll
2008-12-09 13:28 294,912 a------- c:\windows\system32\dpu11.dll
2008-12-09 13:28 57,344 a------- c:\windows\system32\dpv11.dll
2008-12-01 18:28 142,708 a------- c:\windows\pchealth\helpctr\config\cache\Personal_32_1033.dat
2008-07-08 16:46 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008070820080709\index.dat

============= FINISH: 18:44:39.73 ===============

____________________________________________________________

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-02-01.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 7/07/2008 4:15:53 PM
System Uptime: 27/02/2009 5:58:36 PM (1 hours ago)

Motherboard: ASUSTeK Computer INC. | | P5NSLI
Processor: Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz | Socket 775 | 2400/266mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 149 GiB total, 93.789 GiB free.
D: is CDROM ()
E: is CDROM ()
G: is FIXED (NTFS) - 466 GiB total, 109.776 GiB free.

==== Disabled Device Manager Items =============

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller
Device ID: PCI\VEN_11AB&DEV_4320&SUBSYS_811A1043&REV_13\4&DC268A3&0&6080
Manufacturer: Marvell
Name: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller
PNP Device ID: PCI\VEN_11AB&DEV_4320&SUBSYS_811A1043&REV_13\4&DC268A3&0&6080
Service: yukonwxp

==== System Restore Points ===================

RP149: 23/11/2008 9:42:33 AM - System Checkpoint
RP150: 24/11/2008 6:29:38 PM - System Checkpoint
RP151: 26/11/2008 2:25:00 PM - System Checkpoint
RP152: 27/11/2008 7:06:16 PM - System Checkpoint
RP153: 28/11/2008 10:18:06 AM - Avg8 Update
RP154: 30/11/2008 5:30:25 PM - Installed Project64 1.6
RP155: 1/12/2008 5:58:52 PM - System Checkpoint
RP156: 2/12/2008 7:21:23 PM - System Checkpoint
RP157: 3/12/2008 7:22:18 PM - System Checkpoint
RP158: 5/12/2008 7:40:38 PM - System Checkpoint
RP159: 6/12/2008 7:59:17 PM - System Checkpoint
RP160: 8/12/2008 9:21:58 PM - System Checkpoint
RP161: 10/12/2008 11:55:39 AM - System Checkpoint
RP162: 11/12/2008 1:54:02 PM - System Checkpoint
RP163: 11/12/2008 9:56:47 PM - Software Distribution Service 3.0
RP164: 12/12/2008 3:00:14 PM - Installed Java(TM) 6 Update 11
RP165: 13/12/2008 9:03:47 AM - Avg8 Update
RP166: 14/12/2008 9:22:54 PM - Installed RollerCoaster Tycoon 2
RP167: 15/12/2008 5:24:07 PM - Update to an unsigned driver
RP168: 17/12/2008 12:12:59 PM - System Checkpoint
RP169: 18/12/2008 2:13:32 PM - Software Distribution Service 3.0
RP170: 19/12/2008 5:01:24 PM - System Checkpoint
RP171: 20/12/2008 6:20:56 PM - System Checkpoint
RP172: 21/12/2008 6:43:33 PM - System Checkpoint
RP173: 22/12/2008 2:03:19 PM - Installed The Incredibles Demo
RP174: 23/12/2008 6:07:45 PM - System Checkpoint
RP175: 25/12/2008 8:02:15 AM - System Checkpoint
RP176: 4/01/2009 3:00:47 AM - System Checkpoint
RP177: 5/01/2009 1:27:17 PM - System Checkpoint
RP178: 6/01/2009 7:39:09 PM - System Checkpoint
RP179: 8/01/2009 8:54:03 AM - System Checkpoint
RP180: 8/01/2009 9:35:48 PM - Installed Pivot Stickfigure Animator
RP181: 8/01/2009 9:41:37 PM - Removed Pivot Stickfigure Animator
RP182: 9/01/2009 10:48:19 PM - System Checkpoint
RP183: 12/01/2009 7:14:03 PM - System Checkpoint
RP184: 14/01/2009 11:10:46 AM - System Checkpoint
RP185: 14/01/2009 2:27:05 PM - Software Distribution Service 3.0
RP186: 15/01/2009 2:48:59 PM - System Checkpoint
RP187: 16/01/2009 11:24:02 AM - Software Distribution Service 3.0
RP188: 14/01/2007 5:55:19 PM - System Checkpoint
RP189: 18/01/2009 10:14:16 PM - System Checkpoint
RP190: 20/01/2009 10:03:54 AM - System Checkpoint
RP191: 22/01/2009 8:48:27 AM - System Checkpoint
RP192: 23/01/2009 10:23:14 AM - System Checkpoint
RP193: 25/01/2009 2:04:17 PM - System Checkpoint
RP194: 29/01/2009 11:04:31 PM - System Checkpoint
RP195: 31/01/2009 12:40:18 PM - System Checkpoint
RP196: 31/01/2009 8:24:07 PM - Installed Windows Live Messenger
RP197: 31/01/2009 9:05:21 PM - Removed Windows Live Messenger
RP198: 1/02/2009 8:21:50 PM - Avg8 Update
RP199: 1/02/2009 8:27:21 PM - Avg8 Update
RP200: 3/02/2009 8:46:34 PM - System Checkpoint
RP201: 4/02/2009 10:18:40 PM - System Checkpoint
RP202: 6/02/2009 5:20:05 PM - System Checkpoint
RP203: 7/02/2009 8:01:31 PM - System Checkpoint
RP204: 8/02/2009 10:33:08 PM - System Checkpoint
RP205: 10/02/2009 8:38:39 PM - System Checkpoint
RP206: 11/02/2009 3:10:25 PM - Avg8 Update
RP207: 12/02/2009 7:29:42 PM - System Checkpoint
RP208: 12/02/2009 10:59:18 PM - Software Distribution Service 3.0
RP209: 13/02/2009 10:59:08 PM - Software Distribution Service 3.0
RP210: 14/02/2009 9:50:57 AM - Avg8 Update
RP211: 14/02/2009 12:01:05 PM - Shockwave Player
RP212: 14/02/2009 8:42:33 PM - Installed Windows Movie Maker 2.0
RP213: 17/02/2009 4:41:59 PM - System Checkpoint
RP214: 18/02/2009 5:12:58 PM - System Checkpoint
RP215: 18/02/2009 9:27:47 PM - Software Distribution Service 3.0
RP216: 19/02/2009 9:58:50 PM - System Checkpoint

==== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 1 (SP1)
2600
2600_Help
2600Trb
AAC Decoder
Abe's Oddysee
Acoustica MP3 To Wave Converter PLUS
Ad-Aware
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player Plugin
Adobe Reader 8.1.3
Adobe Shockwave Player 11
Adobe® Photoshop® Album Starter Edition 3.0
Age of Empires III
AiO_Scan
AiOSoftware
Apple Mobile Device Support
Apple Software Update
AutoUpdate
AVG Free 8.0
Bonjour
BufferChm
Children's Encyclopedia
Choice Guard
Common-Use Signing Interface
Copy
CreativeProjects
CreativeProjectsTemplates
CSI Management Utility
CueTour
D-Link DSL-302G USB Driver
D-Link VGA Webcam
Destinations
Director
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Version Checker
DivX Web Player
DNA
DocProc
DocumentViewer
Doom 3
DOOM 3: Resurrection of Evil
DVD Shrink 3.2
Fax
ffdshow (remove only)
Free Ipod Video Converter V 2.6
Game Maker 7.0
Google Chrome
Google Toolbar for Internet Explorer
GunboundWC
H.264 Decoder
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
HP Diagnostic Assistant
HP Image Zone 4.2
HP PSC & OfficeJet 4.2
HP Software Update
HP Unload DLL Patch
HPSystemDiagnostics
Impossible Creatures
InstantShare
iTunes
Java(TM) 6 Update 11
Java(TM) 6 Update 2
Java(TM) 6 Update 5
Java(TM) 6 Update 7
JumpStart Animal Adventures
JumpStart Artist
JumpStart Explorers
LimeWire PRO 4.14.8
Live TV Toolbar
Magic Video Converter Trial Version (English) 8.0.2.18
MapleStory
Marvell Miniport Driver
Messenger Plus! Live
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft IntelliPoint 6.2
Microsoft IntelliType Pro 6.2
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
MicroWorlds Web Player
MKV Splitter
MobileMe Control Panel
Mozilla Firefox (3.0.6)
MSVCRT
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MySpaceIM
Nero 8
neroxml
Netscape Navigator (9.0b3)
Nokia Connectivity Cable Driver
Nokia Lifeblog 2.1
Nokia MTP driver
Nokia N73 highlights
Nokia Nseries Skin for Microsoft Windows Media Player
Nokia PC Connectivity Solution
Nokia PC Suite
Nokia themes for your device
NVIDIA Drivers
OptusNet DSL
Orbit Downloader
Outspark Launcher
Overland
Paragon Partition Manager 9.0 Professional
PhotoGallery
PrintScreen
ProductContext
Project64 1.6
QFolder
QuickProjects
QuickTime
Readme
Registry Mechanic 7.0
RollerCoaster Tycoon 2
Safari
Scan
Search Settings 1.2
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB958439)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB958437)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB960715)
Segoe UI
SkinsHP1
SoundMAX
The Incredibles Demo
TrayApp
Unload
Update for Microsoft Office Outlook 2007 (KB952142)
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb959634)
Update for Windows XP (KB942763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
VC80CRTRedist - 8.0.50727.762
Web Services Accelerator v1.0
WebFldrs XP
WebReg
Windows Defender
Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
Windows Internet Explorer 7
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
Windows Movie Maker 2.0
Windows XP Service Pack 3
WinRAR archiver
Xfire (remove only)
Xvid 1.1.3 final uninstall
Your Small Business Tax Calendar

==== Event Viewer Messages From Past Week ========

22/02/2009 11:35:16 AM, error: Dhcp [1002] - The IP address lease 10.1.1.6 for the Network Card with network address 000F3DA55690 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
20/02/2009 10:51:52 PM, error: Dhcp [1002] - The IP address lease 10.1.1.5 for the Network Card with network address 000F3DA55690 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
20/02/2009 7:59:09 PM, error: Dhcp [1002] - The IP address lease 10.1.1.4 for the Network Card with network address 000F3DA55690 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
26/02/2009 4:26:17 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

==== End Of File ===========================

Thanks for your time

Blade81

2009-02-27, 16:46

Hi

Uninstall thru add/remove programs:
DNA
LimeWire
Messenger Plus! Live <-- seems to be installed with sponsors

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link (http://www.bleepingcomputer.com/forums/topic114351.html)
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds.txt log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Blade81

2009-03-05, 20:15

Due to inactivity, this thread will now be closed.

Note:If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than four days since your last response and you need the thread re-opened, please send me or MOD a private message (pm). A valid, working link to the closed topic is required.