reposted per instructions

[jheff]

please see attached logs -- our original post was closed b/c of a delay in responding.


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-11-27.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 9/25/2005 5:25:59 PM
System Uptime: 11/29/2010 9:50:12 AM (78 hours ago)

Motherboard: ASUSTeK Computer INC. | | Goldfish3
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | CPU 1 | 3000/200mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 127 GiB total, 92.007 GiB free.
D: is FIXED (FAT32) - 60 GiB total, 54.341 GiB free.
E: is CDROM (CDFS)
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable
K: is FIXED (NTFS) - 112 GiB total, 107.987 GiB free.

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1763: 7/13/2010 4:06:35 PM - System Checkpoint
RP1764: 7/14/2010 3:00:43 AM - Software Distribution Service 3.0
RP1765: 7/15/2010 3:57:41 AM - System Checkpoint
RP1766: 7/16/2010 4:57:41 AM - System Checkpoint
RP1767: 7/17/2010 4:58:48 AM - System Checkpoint
RP1768: 7/18/2010 5:57:41 AM - System Checkpoint
RP1769: 7/19/2010 6:57:43 AM - System Checkpoint
RP1770: 7/20/2010 7:57:42 AM - System Checkpoint
RP1771: 7/21/2010 9:02:34 AM - System Checkpoint
RP1772: 7/22/2010 9:07:34 AM - System Checkpoint
RP1773: 7/23/2010 10:03:51 AM - System Checkpoint
RP1774: 7/24/2010 11:03:51 AM - System Checkpoint
RP1775: 7/25/2010 12:03:51 PM - System Checkpoint
RP1776: 7/26/2010 12:15:50 PM - System Checkpoint
RP1777: 7/27/2010 1:14:56 PM - System Checkpoint
RP1778: 7/28/2010 2:03:51 PM - System Checkpoint
RP1779: 7/29/2010 2:13:58 PM - System Checkpoint
RP1780: 7/30/2010 3:03:53 PM - System Checkpoint
RP1781: 7/31/2010 4:03:51 PM - System Checkpoint
RP1782: 8/1/2010 5:03:51 PM - System Checkpoint
RP1783: 8/2/2010 5:23:58 PM - System Checkpoint
RP1784: 8/3/2010 3:00:20 AM - Software Distribution Service 3.0
RP1785: 8/4/2010 3:24:00 AM - System Checkpoint
RP1786: 8/5/2010 3:25:03 AM - System Checkpoint
RP1787: 8/6/2010 4:23:58 AM - System Checkpoint
RP1788: 8/7/2010 5:24:00 AM - System Checkpoint
RP1789: 8/8/2010 6:23:58 AM - System Checkpoint
RP1790: 8/9/2010 7:23:59 AM - System Checkpoint
RP1791: 8/10/2010 8:23:59 AM - System Checkpoint
RP1792: 8/11/2010 8:25:01 AM - System Checkpoint
RP1793: 8/12/2010 9:25:01 AM - System Checkpoint
RP1794: 8/13/2010 3:01:53 AM - Software Distribution Service 3.0
RP1795: 8/14/2010 3:46:09 AM - System Checkpoint
RP1796: 8/15/2010 4:00:05 AM - System Checkpoint
RP1797: 8/16/2010 5:00:03 AM - System Checkpoint
RP1798: 8/17/2010 5:01:10 AM - System Checkpoint
RP1799: 8/18/2010 6:00:03 AM - System Checkpoint
RP1800: 8/19/2010 7:00:03 AM - System Checkpoint
RP1801: 8/20/2010 8:00:05 AM - System Checkpoint
RP1802: 8/21/2010 9:09:50 AM - System Checkpoint
RP1803: 8/22/2010 10:00:26 AM - System Checkpoint
RP1804: 8/23/2010 11:00:25 AM - System Checkpoint
RP1805: 8/24/2010 12:10:11 PM - System Checkpoint
RP1806: 8/25/2010 1:01:29 PM - System Checkpoint
RP1807: 8/26/2010 1:39:21 PM - Installed Xerox Phaser 6128MFP Scanner Driver
RP1808: 8/26/2010 1:47:25 PM - Installed Xerox Phaser 6128MFP Utilities
RP1809: 8/26/2010 1:48:48 PM - Installed Xerox Phaser 6128MFP Scanner Driver
RP1810: 8/27/2010 2:34:56 PM - System Checkpoint
RP1811: 8/28/2010 3:34:56 PM - System Checkpoint
RP1812: 8/29/2010 4:34:54 PM - System Checkpoint
RP1813: 8/30/2010 5:34:54 PM - System Checkpoint
RP1814: 8/31/2010 6:43:53 PM - System Checkpoint
RP1815: 9/1/2010 7:34:52 PM - System Checkpoint
RP1816: 9/2/2010 7:35:58 PM - System Checkpoint
RP1817: 9/3/2010 8:34:59 PM - System Checkpoint
RP1818: 9/4/2010 8:36:02 PM - System Checkpoint
RP1819: 9/5/2010 9:34:56 PM - System Checkpoint
RP1820: 9/6/2010 10:35:56 PM - System Checkpoint
RP1821: 9/7/2010 11:34:54 PM - System Checkpoint
RP1822: 9/9/2010 12:34:49 AM - System Checkpoint
RP1823: 9/10/2010 1:34:49 AM - System Checkpoint
RP1824: 9/11/2010 2:34:50 AM - System Checkpoint
RP1825: 9/12/2010 2:46:49 AM - System Checkpoint
RP1826: 9/13/2010 3:34:48 AM - System Checkpoint
RP1827: 9/14/2010 4:34:50 AM - System Checkpoint
RP1828: 9/15/2010 5:34:48 AM - System Checkpoint
RP1829: 9/16/2010 3:00:40 AM - Software Distribution Service 3.0
RP1830: 9/17/2010 3:18:09 AM - System Checkpoint
RP1831: 9/18/2010 4:18:09 AM - System Checkpoint
RP1832: 9/19/2010 5:18:08 AM - System Checkpoint
RP1833: 9/20/2010 6:18:08 AM - System Checkpoint
RP1834: 9/21/2010 7:18:07 AM - System Checkpoint
RP1835: 9/22/2010 8:18:08 AM - System Checkpoint
RP1836: 9/23/2010 9:18:09 AM - System Checkpoint
RP1837: 9/24/2010 9:19:09 AM - System Checkpoint
RP1838: 9/25/2010 10:19:09 AM - System Checkpoint
RP1839: 9/26/2010 11:19:09 AM - System Checkpoint
RP1840: 9/27/2010 12:18:04 PM - System Checkpoint
RP1841: 9/28/2010 1:19:09 PM - System Checkpoint
RP1842: 9/29/2010 3:00:17 AM - Software Distribution Service 3.0
RP1843: 9/30/2010 3:18:04 AM - System Checkpoint
RP1844: 10/1/2010 3:20:56 AM - System Checkpoint
RP1845: 10/2/2010 4:09:44 AM - System Checkpoint
RP1846: 10/3/2010 5:09:46 AM - System Checkpoint
RP1847: 10/4/2010 5:14:00 AM - System Checkpoint
RP1848: 10/5/2010 6:09:42 AM - System Checkpoint
RP1849: 10/6/2010 3:00:18 AM - Software Distribution Service 3.0
RP1850: 10/7/2010 3:09:42 AM - System Checkpoint
RP1851: 10/8/2010 3:58:33 AM - System Checkpoint
RP1852: 10/9/2010 4:58:32 AM - System Checkpoint
RP1853: 10/10/2010 5:58:32 AM - System Checkpoint
RP1854: 10/11/2010 6:58:32 AM - System Checkpoint
RP1855: 10/12/2010 7:58:32 AM - System Checkpoint
RP1856: 10/13/2010 8:59:37 AM - System Checkpoint
RP1857: 10/14/2010 9:58:32 AM - System Checkpoint
RP1858: 10/15/2010 3:00:41 AM - Software Distribution Service 3.0
RP1859: 10/16/2010 3:34:25 AM - System Checkpoint
RP1860: 10/17/2010 3:36:30 AM - System Checkpoint
RP1861: 10/18/2010 3:38:57 AM - System Checkpoint
RP1862: 10/19/2010 4:38:59 AM - System Checkpoint
RP1863: 10/20/2010 5:38:58 AM - System Checkpoint
RP1864: 10/21/2010 6:38:57 AM - System Checkpoint
RP1865: 10/22/2010 7:38:57 AM - System Checkpoint
RP1866: 10/23/2010 8:10:09 AM - System Checkpoint
RP1867: 10/24/2010 9:10:11 AM - System Checkpoint
RP1868: 10/25/2010 10:10:09 AM - System Checkpoint
RP1869: 10/26/2010 11:10:10 AM - System Checkpoint
RP1870: 10/27/2010 12:10:09 PM - System Checkpoint
RP1871: 10/28/2010 1:10:10 PM - System Checkpoint
RP1872: 10/29/2010 2:10:10 PM - System Checkpoint
RP1873: 10/30/2010 3:11:18 PM - System Checkpoint
RP1874: 10/31/2010 4:10:11 PM - System Checkpoint
RP1875: 11/1/2010 5:11:18 PM - System Checkpoint
RP1876: 11/2/2010 6:18:52 PM - System Checkpoint
RP1877: 11/3/2010 7:10:11 PM - System Checkpoint
RP1878: 11/4/2010 8:02:10 PM - System Checkpoint
RP1879: 11/5/2010 9:02:10 PM - System Checkpoint
RP1880: 11/6/2010 9:24:52 PM - System Checkpoint
RP1881: 11/7/2010 10:02:08 PM - System Checkpoint
RP1882: 11/8/2010 11:02:10 PM - System Checkpoint
RP1883: 11/10/2010 12:09:46 AM - System Checkpoint
RP1884: 11/10/2010 3:00:43 AM - Software Distribution Service 3.0
RP1885: 11/11/2010 3:03:10 AM - System Checkpoint
RP1886: 11/12/2010 4:02:04 AM - System Checkpoint
RP1887: 11/13/2010 5:02:07 AM - System Checkpoint
RP1888: 11/14/2010 6:08:57 AM - System Checkpoint
RP1889: 11/15/2010 7:02:12 AM - System Checkpoint
RP1890: 11/16/2010 7:03:40 AM - System Checkpoint
RP1891: 11/17/2010 8:14:05 AM - System Checkpoint
RP1892: 11/18/2010 5:26:18 PM - System Checkpoint
RP1893: 11/19/2010 5:40:12 PM - System Checkpoint
RP1894: 11/20/2010 6:40:11 PM - System Checkpoint
RP1895: 11/21/2010 6:41:19 PM - System Checkpoint
RP1896: 11/22/2010 7:40:12 PM - System Checkpoint
RP1897: 11/23/2010 8:40:12 PM - System Checkpoint
RP1898: 11/24/2010 9:40:12 PM - System Checkpoint
RP1899: 11/25/2010 10:40:08 PM - System Checkpoint
RP1900: 11/26/2010 11:40:10 PM - System Checkpoint
RP1901: 11/28/2010 12:40:10 AM - System Checkpoint
RP1902: 11/29/2010 1:40:10 AM - System Checkpoint
RP1903: 11/30/2010 1:41:40 AM - System Checkpoint
RP1904: 12/1/2010 2:41:40 AM - System Checkpoint
RP1905: 12/2/2010 3:41:40 AM - System Checkpoint

==== Installed Programs ======================

6200
6200_Help
6200Trb
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3.4
Adobe® Photoshop® Album Starter Edition 3.2
Agere Systems PCI Soft Modem
AiO_Scan
AiOSoftware
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ATI Display Driver
Beyond Compare Version 2.5.2
Blackhawk Striker 2 from Hewlett-Packard Desktops (remove only)
Blasterball 2 from Hewlett-Packard Desktops (remove only)
Blasterball 2 Remix from Hewlett-Packard Desktops (remove only)
Bonjour
Bounce Symphony from Hewlett-Packard Desktops (remove only)
BufferChm
CameraDrivers
Canon iP4200
Canon Setup Utility 2.0
Canon Utilities Easy-PhotoPrint
ccCommon
Copy
CP_AtenaShokunin1Config
cp_dwSharkTaleAlbums1
cp_dwSharkTaleCards1
cp_dwShrek2Albums1
cp_dwShrek2Cards1
CP_PLSBusinessFlyers
CreativeProjects
CreativeProjectsTemplates
Crystal Maze from Hewlett-Packard Desktops (remove only)
CueTour
Destinations
Director
DocProc
DocumentViewer
Easy-WebPrint
Easy Internet Sign-up
ERUNT 1.1j
Fax
Google Desktop
Google Earth
Google Toolbar for Internet Explorer
GoToMeeting 4.5.0.457
Help and Support Additions
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Deskjet Preloaded Printer Drivers
HP Image Zone 4.7
HP Image Zone Plus 4.5.3
HP Organize
HP Photosmart Cameras 4.0
HP Product Assistant
HP PSC & OfficeJet 4.7
HP Software Update
HPIZplus450
HpSdpAppCoreApp
InstantShare
Intel(R) Graphics Media Accelerator Driver
Intel(R) Integrated Performance Primitives RTI 3.0
IntelliMover Data Transfer Demo
InterVideo DiscLabel
InterVideo WinDVD Creator
InterVideo WinDVD Player
iTunes
J2SE Runtime Environment 5.0 Update 6
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 3
Java(TM) SE Runtime Environment 6 Update 1
KBD
Keyboard Status LED
LiveReg (Symantec Corporation)
LiveUpdate 3.0 (Symantec Corporation)
LS_HSI
Macromedia Shockwave Player
Maxtor Backup
Maxtor Encryption
Maxtor OneTouch III
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Easy Assist
Microsoft Encarta Premium 2006 DVD
Microsoft IntelliPoint 6.1
Microsoft IntelliType Pro 6.1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office Outlook Connector
Microsoft Office Professional Edition 2003
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Works
Mozilla Firefox (3.0.4)
MSRedist
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee autoProducer 3.5 magicMoments - HPD
Norton 360
Norton SystemWorks
Norton SystemWorks 2005
Norton SystemWorks 2005 (Symantec Corporation)
Norton Utilities
NSW_DRM_COLLECTION
OGA Notifier 2.0.0048.0
Orbital from Hewlett-Packard Desktops (remove only)
Overball from Hewlett-Packard Desktops (remove only)
PanoStandAlone
PC-Doctor for Windows
PhotoGallery
Photosmart 320,370,7400,8100,8400 Series
Picasa 3
Polar Bowler from Hewlett-Packard Desktops (remove only)
Polar Golfer from Hewlett-Packard Desktops (remove only)
PrimoPDF -- by Nitro PDF Software
PrintScreen
ProductContext
PS2
PSPrinters06
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QFolder
QuickProjects
QuickTime
Readme
RealPlayer
Road Ready Streetwise from Hewlett-Packard Desktops (remove only)
Rosetta Stone V3
Scan
SD-JukeboxV4
SD Viewer (D-snap)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB2183461)
Security Update for Windows Internet Explorer 7 (KB2360131)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 7 (KB978207)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Shrek 2 Ogre Bowler from Hewlett-Packard Desktops (remove only)
SkinsHP1
Sonic Express Labeler
Sonic RecordNow!
Spelling Dictionaries Support For Adobe Reader 9
SpySubtract
Super Granny from Hewlett-Packard Desktops (remove only)
Symantec SCSSDist MSI
Tradewinds from Hewlett-Packard Desktops (remove only)
TrayApp
Unload
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 7 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Updates from HP
WebFldrs XP
WebReg
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage v1.3.0254.0
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WordPerfect Lightning
WordPerfect Lightning - EN
WordPerfect Lightning - IPM
WordPerfect Lightning - Messages
WordPerfect Lightning - MSOM
WordPerfect Office X4
WordPerfect Office X4 - Common
WordPerfect Office X4 - Content
WordPerfect Office X4 - EN
WordPerfect Office X4 - Filters
WordPerfect Office X4 - Graphics
WordPerfect Office X4 - ICA
WordPerfect Office X4 - IPM
WordPerfect Office X4 - IPM EN
WordPerfect Office X4 - MAIL
WordPerfect Office X4 - Migration Manager
WordPerfect Office X4 - PerfectExperts
WordPerfect Office X4 - PR
WordPerfect Office X4 - QP
WordPerfect Office X4 - Skins
WordPerfect Office X4 - System
WordPerfect Office X4 - WP
Xerox Phaser 6128MFP Scanner Driver
Xerox Phaser 6128MFP Utilities Ver.1.0.0.0
Yahoo! BrowserPlus

==== Event Viewer Messages From Past Week ========

11/29/2010 9:58:19 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the LiveUpdate service to connect.
11/29/2010 9:58:19 AM, error: Service Control Manager [7000] - The LiveUpdate service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/29/2010 9:58:18 AM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service LiveUpdate with arguments "" in order to run the server: {03E0E6C2-363B-11D3-B536-00902771A435}
11/29/2010 9:51:42 AM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .
11/29/2010 9:51:42 AM, error: SideBySide [59] - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL. Reference error message: The operation completed successfully. .
11/29/2010 9:51:42 AM, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.

==== End Of File ===========================

[jheff]

OK, I don't get it. You "apologize for the delay" in responding to my first post, and then close the thread when I don't answer within 3 days, instructing me to rescan and repost, which I do, and now it's been how long and you're not responding?

And to top it all off, you're gonna spank me for daring to ask!

What's a guy got to do?
---------------------------------------
http://forums.spybot.info/showthread.php?p=389713#post389713

Posted in Waiting Room 12-13-10 afternoon. (Removed link as received response)

[ken545]

:snwelcome:


Please read Before You Post (http://forums.spybot.info/showthread.php?t=288)
While best efforts are made to assist in removing infections safely, unexpected stuff can happen. It is advisable that you back up your important data before starting any clean up procedure. Neither Safer Networking Forums nor the Analyst providing the advice may be held responsible for any loss.

Until we deem your system clean I am going to ask you not to install or uninstall any software or hardware except for the programs we may run.

Sorry for the confusion, the forums can be a bit overwhelming if your not used to them.

I need you to post a DDS log please, I need to see the original log, not the Attach

Download DDS to your desktop from one of the links below:

Link 1 (http://download.bleepingcomputer.com/sUBs/dds.scr)
Link 2 (http://download.bleepingcomputer.com/sUBs/dds.com)


Double click the tool to run it.
A black Screen will open, just read the contents and do nothing.
When the tool finishes, it will open 2 reports, DDS.txt and attach.txt
Copy/Paste the contents of 'DDS.txt' into your post.
'attach.txt' should be zipped using Windows native zip utility and attached to your post. Compress and uncompress files (zip files) (http://windows.microsoft.com/en-us/windows-vista/Compress-and-uncompress-files-zip-files)

[ken545]

Jeff, I have responded to your post and you never replied back. Do you still need help with your issues ?

[jheff]

As requested, please see DDS log below:

thx for your attention.
====================================
====================================

DDS (Ver_10-12-12.02) - NTFSx86
Run by HP_Owner at 15:31:07.79 on Mon 12/20/2010
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1015.296 [GMT -5:00]

AV: Norton 360 *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *Enabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Maxtor\ManagerApp\Onetouch.exe
C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe
C:\WINDOWS\KBStatusLED.exe
C:\WINDOWS\KBStatusLED.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Xerox\Phaser 6128MFP\Address Book Editor\Launcher_6128mfp.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft Encarta\Encarta Premium DVD 2006\EDICT.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Bonjour\mDNSResponder.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\sdpasvc.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\HP_Owner\Desktop\malware issues\dds.com

============== Pseudo HJT Report ===============

uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\3.8.0.41\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\3.8.0.41\IPSBHO.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
BHO: Encarta Web Companion Helper Object: {955be0b8-bc85-4caf-856e-8e0d8b610560} - c:\program files\common files\microsoft shared\encarta web companion\ENCWCBAR.DLL
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.0.1225.9868\swg.dll
TB: HP view: {b2847e28-5d7d-4deb-8b67-05d28bcf79f5} - c:\program files\hp\digital imaging\bin\HPDTLK02.dll
TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll
TB: Encarta Web Companion: {147d6308-0614-4112-89b1-31402f9b82c4} - c:\program files\common files\microsoft shared\encarta web companion\ENCWCBAR.DLL
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\3.8.0.41\coIEPlg.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} -
uRun: [E06AXLRD_1083468] "c:\program files\microsoft encarta\encarta premium dvd 2006\EDICT.EXE" -m
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [QuickFinder Scheduler] "c:\program files\corel\wordperfect office x4\programs\QFSCHD140.EXE"
mRun: [MaxtorOneTouch] c:\program files\maxtor\managerapp\Onetouch.exe
mRun: [<NO NAME>]
mRun: [mxomssmenu] "c:\program files\maxtor\onetouch status\maxmenumgr.exe"
mRun: [KBStatusLED1] c:\windows\KBStatusLED.exe
mRun: [KBStatusLED] c:\windows\KBStatusLED.exe
mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop album starter edition\3.2\apps\apdproxy.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Xerox Phaser 6128MFP Launcher] "c:\program files\xerox\phaser 6128mfp\address book editor\Launcher_6128mfp.exe" /s
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
StartupFolder: c:\docume~1\hp_owner\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Copy to &Lightning Note - c:\program files\corel\wordperfect lightning\programs\WPLightningCopyToNote.hta
IE: Open with WordPerfect - c:\program files\corel\wordperfect office x4\programs\WPLauncher.hta
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL
IE: {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - {552781AF-37E4-4FEE-920A-CED9E648EADD} - c:\program files\common files\microsoft shared\encarta search bar\ENCSBAR.DLL
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc3.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1174689477547
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: {5F6385DC-A65A-4C7B-B959-610D16EBCC6A} = 192.168.0.1,4.2.2.1
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton 360\engine\3.8.0.41\CoIEPlg.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: igfxcui - igfxsrvc.dll
AppInit_DLLs: c:\progra~1\google\google~2\GOEC62~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {FA010552-4A27-4cb1-A1BB-3E2D697F1639} - No File

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\hp_owner\applic~1\mozilla\firefox\profiles\iou0dbdk.default\
FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\coffplgn\components\coFFPlgn.dll
FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\ipsffplgn\components\IPSFFPl.dll
FF - plugin: c:\documents and settings\hp_owner\local settings\application data\yahoo!\browserplus\2.4.21\plugins\npybrowserplus_2.4.21.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Norton Toolbar: {7BA52691-1876-45ce-9EE6-54BCB3B04BBC} - c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\coFFPlgn

============= SERVICES / DRIVERS ===============

R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0308000.029\SymEFA.sys [2010-1-27 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\n360\0308000.029\BHDrvx86.sys [2010-1-27 259632]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0308000.029\cchpx86.sys [2010-1-27 482432]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20101215.001\IDSXpx86.sys [2010-12-16 341944]
R2 Audsub3;Audsub3;c:\windows\system32\drivers\Audsub3.sys [2005-9-25 2785]
R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\CCEVTMGR.EXE [2004-8-27 198248]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\CCSETMGR.EXE [2004-8-27 181864]
R2 N360;Norton 360;c:\program files\norton 360\engine\3.8.0.41\ccSvcHst.exe [2010-1-27 117640]
R2 NProtectService;Norton Unerase Protection;c:\progra~1\norton~2\norton~1\NPROTECT.EXE [2005-1-24 95824]
R2 SDPASVC;SDPAUMS server service;c:\windows\system32\sdpasvc.exe -service --> c:\windows\system32\sdpasvc.exe -service [?]
R2 Symantec Core LC;Symantec Core LC;c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2005-12-25 822424]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-9-16 102448]
R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20101220.002\NAVENG.SYS [2010-12-20 86008]
R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20101220.002\NAVEX15.SYS [2010-12-20 1360760]
S3 ccPwdSvc;Symantec Password Validation;c:\program files\common files\symantec shared\CCPWDSVC.EXE [2004-8-27 79464]

=============== Created Last 30 ================

2010-12-14 22:05:53 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-14 22:05:02 45568 -c----w- c:\windows\system32\dllcache\wab.exe

==================== Find3M ====================

2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-06 00:34:12 832512 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:34:11 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-11-06 00:34:11 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2010-11-06 00:34:11 17408 ----a-w- c:\windows\system32\corpol.dll
2010-11-03 12:25:53 389120 ----a-w- c:\windows\system32\html.iec
2010-10-28 13:13:22 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25:00 1853312 ----a-w- c:\windows\system32\win32k.sys

============= FINISH: 15:32:31.15 ===============

[ken545]

Hi,

Well where finally on the same page :bigthumb: Most forums can be a bit confusing if your not used to them. We get so busy on this forum with so many posters that if there is no reply in 3 days we close the thread. If your going to be away for a time and cant respond to the instructions just post back and let me know and I will keep this thread open for you.

I am not looking at anything malicious on your DDS log, your DNS may need to be reset. What are you experiencing that makes you think your infected, are you getting redirected or pop up windows you dont want.



Please download Malwarebytes from Here (http://www.malwarebytes.org/mbam-download.php) or Here (http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html)


Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
http://i24.photobucket.com/albums/c30/ken545/MBAMCapture.jpg
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Post the report please

[ken545]

Due to inactivity, this thread will now be closed.