PDA

View Full Version : DDS LOG: Trying to figure out problem!



ashskie
2010-05-10, 14:02
I don't know WHAT is wrong?


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\System32\GEARSec.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\system32\mgabg.exe
C:\Program Files\Motorola\MotoConnectService\MotoConnectService.exe
C:\Program Files\Motorola\Moto Helper Service\MotoHelper.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Motorola\MotoConnectService\MotoConnect.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Lynn\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://my.yahoo.com/
mDefault_Search_URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=20008&gct=&gc=1&q=
uSearchURL,(Default) = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=20008&gct=&gc=1&q=%s
uURLSearchHooks: H - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [Aim6]
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-system: EnableLUA = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} -
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 93.188.162.43,93.188.166.111
TCP: {4EFB2B59-D087-4983-9E72-230BA9CF3803} = 93.188.162.43,93.188.166.111
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\lynn\applic~1\mozilla\firefox\profiles\e6whwqk2.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=
FF - prefs.js: browser.search.selectedEngine - Fast Browser Search
FF - prefs.js: browser.startup.homepage - hxxp://my.yahoo.com/
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npmidas.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R0 PQV2i;PQV2i;c:\windows\system32\drivers\PQV2i.sys [2003-9-12 132899]
R0 PzWDM;PzWDM;c:\windows\system32\drivers\PzWDM.sys [2009-7-27 15172]
R0 sonyhcb;Sony Digital Imaging Base;c:\windows\system32\drivers\sonyhcb.sys [2009-8-7 6097]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-7-8 335240]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-7-8 27784]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-7-8 108552]
R1 PQIMount;PQIMount;c:\windows\system32\drivers\PQIMount.sys [2003-9-12 46810]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe [2009-7-8 908056]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-7-8 297752]
R2 MotoConnect Service;MotoConnect Service;c:\program files\motorola\motoconnectservice\MotoConnectService.exe [2010-4-21 91392]
R2 MotoHelper.exe;Motorola Helper;c:\program files\motorola\moto helper service\MotoHelper.exe [2010-1-5 6656]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2009-9-20 24652]
S3 EzInstall;EzInstall;\??\d:\ezinstall\ezinstall.sys --> d:\ezinstall\EzInstall.sys [?]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [2010-1-12 19712]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [2010-1-12 8320]
S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\drivers\motodrv.sys [2010-4-21 42752]
S3 motport;Motorola USB Diagnostic Port;c:\windows\system32\drivers\motport.sys [2010-1-12 23936]
S3 sonyhcs;Sony Digital Imaging Video;c:\windows\system32\drivers\sonyhcs.sys [2009-8-7 299923]
S3 TTDec;ATI WDM Teletext Decoder (Microsoft Corporation);c:\windows\system32\drivers\atinttxx.sys [2009-7-7 13824]

=============== Created Last 30 ================

2010-05-10 02:45:52 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-06 00:35:21 0 d-----w- c:\docume~1\lynn\applic~1\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-05-03 05:19:17 0 d-----w- c:\docume~1\alluse~1\applic~1\PopCap Games
2010-05-03 05:19:00 24 ----a-w- c:\windows\popcinfot.dat
2010-05-03 05:19:00 0 ----a-w- c:\windows\popcreg.dat
2010-04-29 20:35:30 0 d--h--w- C:\$AVG8.VAULT$
2010-04-29 11:13:23 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-04-21 06:01:05 42752 ----a-w- c:\windows\system32\drivers\motodrv.sys
2010-04-19 21:10:46 5632 ----a-w- c:\windows\system32\ptpusb.dll
2010-04-19 21:10:45 159232 ----a-w- c:\windows\system32\ptpusd.dll
2010-04-19 21:10:44 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-04-19 21:10:44 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

==================== Find3M ====================

2009-07-29 02:52:36 12688199 -c--a-w- c:\program files\TDA1_1.6.34.89_install.zip
2009-07-28 03:02:24 5998111 ----a-w- c:\program files\Ones_setup.zip
2009-07-28 01:21:48 3533556 ----a-w- c:\program files\SetupAnyDVD6411.zip
2008-04-11 05:03:34 18318 ----a-w- c:\program files\RESURRECTiON.nfo
2008-04-11 04:28:58 2403584 ----a-w- c:\program files\SetupAnyDVD6411.exe
2006-03-24 20:35:00 6133956 ----a-w- c:\program files\Ones_setup.exe
2005-12-28 02:12:16 13134840 ----a-w- c:\program files\TDA1_1.6.34.89_install.exe

============= FINISH: 6:57:18.73 ===============

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 7/7/2009 9:55:13 PM
System Uptime: 5/7/2010 10:37:21 PM (56 hours ago)

Motherboard: AOpen | | i855GMEm-LFS
Processor: Intel(R) Pentium(R) M processor 2.00GHz | Socket 479 | 2201/110mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 186 GiB total, 168.661 GiB free.
D: is FIXED (NTFS) - 233 GiB total, 100.119 GiB free.
E: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Marvell Yukon Gigabit Ethernet 10/100/1000Base-T Adapter, Copper RJ-45
Device ID: PCI\VEN_11AB&DEV_4320&SUBSYS_0540A0A0&REV_13\4&314156F5&0&08F0
Manufacturer: Marvell
Name: Marvell Yukon Gigabit Ethernet 10/100/1000Base-T Adapter, Copper RJ-45 #2
PNP Device ID: PCI\VEN_11AB&DEV_4320&SUBSYS_0540A0A0&REV_13\4&314156F5&0&08F0
Service: yukonwxp

==== System Restore Points ===================

RP238: 2/9/2010 3:05:14 PM - System Checkpoint
RP239: 2/10/2010 3:37:10 PM - System Checkpoint
RP240: 2/11/2010 3:38:15 PM - System Checkpoint
RP241: 2/12/2010 3:50:15 PM - System Checkpoint
RP242: 2/13/2010 3:52:37 PM - System Checkpoint
RP243: 2/14/2010 4:39:59 PM - System Checkpoint
RP244: 2/15/2010 6:01:05 PM - System Checkpoint
RP245: 2/16/2010 6:42:53 PM - System Checkpoint
RP246: 2/17/2010 7:42:53 PM - System Checkpoint
RP247: 2/18/2010 8:43:58 PM - System Checkpoint
RP248: 2/19/2010 9:42:53 PM - System Checkpoint
RP249: 2/20/2010 10:42:53 PM - System Checkpoint
RP250: 2/21/2010 11:42:53 PM - System Checkpoint
RP251: 2/22/2010 11:43:58 PM - System Checkpoint
RP252: 2/24/2010 12:54:17 AM - System Checkpoint
RP253: 2/25/2010 12:58:24 AM - System Checkpoint
RP254: 2/26/2010 1:42:50 AM - System Checkpoint
RP255: 2/27/2010 2:14:38 AM - System Checkpoint
RP256: 2/28/2010 3:30:28 AM - System Checkpoint
RP257: 3/1/2010 3:44:48 AM - System Checkpoint
RP258: 3/2/2010 4:44:47 AM - System Checkpoint
RP259: 3/3/2010 4:44:54 AM - System Checkpoint
RP260: 3/4/2010 5:44:54 AM - System Checkpoint
RP261: 3/5/2010 6:44:55 AM - System Checkpoint
RP262: 3/6/2010 7:44:55 AM - System Checkpoint
RP263: 3/7/2010 8:44:55 AM - System Checkpoint
RP264: 3/8/2010 9:33:10 AM - System Checkpoint
RP265: 3/9/2010 8:57:40 AM - Avg8 Update
RP266: 3/10/2010 9:33:14 AM - System Checkpoint
RP267: 3/11/2010 10:33:14 AM - System Checkpoint
RP268: 3/12/2010 12:01:40 PM - System Checkpoint
RP269: 3/13/2010 12:18:49 PM - System Checkpoint
RP270: 3/14/2010 12:32:40 PM - System Checkpoint
RP271: 3/15/2010 1:32:42 PM - System Checkpoint
RP272: 3/16/2010 1:36:23 PM - System Checkpoint
RP273: 3/17/2010 2:32:42 PM - System Checkpoint
RP274: 3/18/2010 3:03:14 PM - System Checkpoint
RP275: 3/19/2010 8:37:06 AM - Avg8 Update
RP276: 3/19/2010 8:37:41 AM - Avg8 Update
RP277: 3/20/2010 8:57:07 AM - System Checkpoint
RP278: 3/21/2010 9:57:07 AM - System Checkpoint
RP279: 3/22/2010 11:09:08 AM - System Checkpoint
RP280: 3/23/2010 11:58:23 AM - System Checkpoint
RP281: 3/24/2010 12:57:11 PM - System Checkpoint
RP282: 3/25/2010 2:21:00 PM - System Checkpoint
RP283: 3/26/2010 4:00:06 PM - System Checkpoint
RP284: 3/27/2010 4:03:31 PM - System Checkpoint
RP285: 3/28/2010 4:10:03 PM - System Checkpoint
RP286: 3/29/2010 5:13:42 PM - System Checkpoint
RP287: 3/30/2010 6:24:07 PM - System Checkpoint
RP288: 3/31/2010 7:10:11 PM - System Checkpoint
RP289: 4/1/2010 8:10:11 PM - System Checkpoint
RP290: 4/2/2010 8:52:56 PM - System Checkpoint
RP291: 4/3/2010 11:43:49 PM - System Checkpoint
RP292: 4/5/2010 12:35:15 AM - System Checkpoint
RP293: 4/6/2010 12:48:53 AM - System Checkpoint
RP294: 4/7/2010 1:02:21 AM - System Checkpoint
RP295: 4/8/2010 1:35:15 AM - System Checkpoint
RP296: 4/9/2010 1:35:25 AM - System Checkpoint
RP297: 4/10/2010 1:49:36 AM - System Checkpoint
RP298: 4/11/2010 1:53:02 AM - System Checkpoint
RP299: 4/12/2010 2:35:25 AM - System Checkpoint
RP300: 4/13/2010 3:35:25 AM - System Checkpoint
RP301: 4/14/2010 4:35:25 AM - System Checkpoint
RP302: 4/15/2010 5:04:27 AM - System Checkpoint
RP303: 4/16/2010 6:04:27 AM - System Checkpoint
RP304: 4/17/2010 7:04:27 AM - System Checkpoint
RP305: 4/18/2010 8:04:27 AM - System Checkpoint
RP306: 4/19/2010 9:04:27 AM - System Checkpoint
RP307: 4/20/2010 10:04:27 AM - System Checkpoint
RP308: 4/21/2010 1:00:16 AM - Installed Motorola Driver Installation 4.5.0
RP309: 4/21/2010 1:01:12 AM - Installed Moto Helper Service
RP310: 4/21/2010 1:01:26 AM - Installed Mototools Software Update
RP311: 4/21/2010 1:01:36 AM - Installed Motorola Diagnostics
RP312: 4/21/2010 1:01:58 AM - Installed MotoConnect
RP313: 4/21/2010 1:02:59 AM - Installed Motorola Software and Diagnostics
RP314: 4/22/2010 1:04:41 AM - System Checkpoint
RP315: 4/23/2010 1:05:46 AM - System Checkpoint
RP316: 4/24/2010 2:04:42 AM - System Checkpoint
RP317: 4/25/2010 5:15:58 PM - System Checkpoint
RP318: 4/26/2010 5:58:14 PM - System Checkpoint
RP319: 4/27/2010 7:56:00 PM - System Checkpoint
RP320: 4/28/2010 7:57:21 PM - System Checkpoint
RP321: 4/29/2010 8:03:43 PM - System Checkpoint
RP322: 4/30/2010 8:38:13 PM - System Checkpoint
RP323: 5/1/2010 9:38:13 PM - System Checkpoint
RP324: 5/3/2010 12:56:23 AM - System Checkpoint
RP325: 5/4/2010 1:27:12 AM - System Checkpoint
RP326: 5/5/2010 2:27:12 AM - System Checkpoint
RP327: 5/6/2010 2:45:08 AM - System Checkpoint
RP328: 5/7/2010 3:45:09 AM - System Checkpoint
RP329: 5/8/2010 4:42:26 AM - System Checkpoint
RP330: 5/9/2010 5:42:27 AM - System Checkpoint
RP331: 5/9/2010 5:32:54 PM - Removed Skype™ Beta 4.2
RP332: 5/9/2010 9:45:56 PM - Installed Java(TM) 6 Update 20
RP333: 5/9/2010 9:46:29 PM - Removed Microsoft Office Professional 2007 Trial

==== Installed Programs ======================

7-Zip 4.65
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3.2
AnyDVD
Apple Application Support
Apple Software Update
AVG Free 8.5
BufferChm
D2400
D2400_Help
DeviceDiscovery
DeviceManagementQFolder
dj_sf_ProductContext
dj_sf_software
dj_sf_software_req
HP Deskjet Printer Driver Software 9.0
HP Imaging Device Functions 9.0
HP Update
Java Auto Updater
Java(TM) 6 Update 20
king.com (remove only)
LimeWire 5.1.4
Marvell Miniport Driver
Memorex exPressit Label Design Studio
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft .NET Framework 2.0
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft VC9 runtime libraries
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Moto Helper Service
MotoConnect
Motorola Diagnostics
Motorola Driver Installation 4.5.0
Motorola Software and Diagnostics
Mototools Software Update
Mozilla Firefox (3.6.3)
NVIDIA Drivers
ONES (E)
PanoStandAlone
PowerQuest Drive Image 7.0
QuickTime
Realtek AC'97 Audio
Sony USB Driver
Spybot - Search & Destroy
Status
Toolbox
TrayApp
TweakNow PowerPack Professional
UnloadSupport
Video Card Stability Test
Viewpoint Media Player
WebFldrs XP
WebReg
Windows XP Service Pack 3
WinZip 14.0
Yahoo! Messenger
Yahoo! Software Update

==== Event Viewer Messages From Past Week ========

5/10/2010 6:56:59 AM, error: Service Control Manager [7016] - The GEARSecurity service has reported an invalid current state 0.

==== End Of File ===========================

Blade81
2010-05-14, 22:10
IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

LimeWire


I'd like you to read this thread (http://forums.spybot.info/showthread.php?t=282).

Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully first.

Please continue as follows:


Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link (http://www.bleepingcomputer.com/forums/topic114351.html)
Remember to re-enable them afterwards.


Click Yes to allow ComboFix to continue scanning for malware.


When the tool is finished, it will produce a report for you.

Please include contents of the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Blade81
2010-05-22, 17:25
Due to inactivity, this thread will now be closed.

Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.