Hello, today is 6-15-2011 and below is the story of my problem that began just over 4 weeks ago.
May 2011
My wife's computer is infected with that horrible XP Security Alert 2011. What a mess! I have tried a dozen steps and still it appears. I think it is reincarnating itself!
Malwarebytes has been deactivated some how, and for some reason!!?? But not by me or my wife!?
After several attempts I was able to install and run scans with AVast. and with Stopzilla, and with SuperAnti Spyware. they each find viruses, sometimes 8 then 12 then16 then 25 etc! each has quarantined the found viruses. {They are still quarantined, as i do not know how to tell the software to destroy the viruses..any suggestions please? }
yet, Still XP security alert 2011 rears up!
I have been battling this for more than 4 weeks, I am tired now, I am about to throw in the towel, and throw the computer to the curb!! I need your help please.. please.
I was able to down load: R Kill, and ran it.....not sure of the results as the software appeared, i think it ran, and then disappeared...????
I attempted to re-install Malwarebyts, the installation starts but is suddenly stopped for some unknown reason and the software aborts???? I had Malwarbytes loaded onto the computer before the infection happened, it never found any viruses and I kept it updated. ...odd ???? Now Malwarebytes will not function???
I cannot access the internet now???! So i cannot install ERUNT.
I have tried a dozen times to install spybot, yet cannot complete the download because suddenly XP security alert pops up and changes the browsing page! and so I cannot get to a web page to download spybot. Plus, I can no longer go to any web page!!!!!............not even in safe mode.
This all started when my wife ordered a nursing blouse for work on line. the blouse arrived and so did the security alert! I can ask her what site it was if that would help.
Since that event, we can not see anything in my documents. all the folders and doc. are not there and the folder reads empty. there were at least 15 folders before this XP security alert showed up. there is no internet explorer icon and no other icons are displayed on the desk top. I can only access the internet by going threw the update pages of the anti virus software on my computer such as avast or superspyware. and then, security alert 2011 begins to redirect me!! and I am cut off from the internet!!! I am so mad! I want to get back at the creator of this security alert! why can't they be stopped?
I am using a Belkin wireless router. I am in my home. How did this and other viruses get past my router I wonder? any suggestions on that ?
Her computer is using internet explorer. I tried installing Firefox, but the installation was mysteriously stopped for some unknown reason????
The infected computer is a HP Pavilion, with 512 MB of Ram and using Windows XP home edition. Computer is at least 5-7 years old. it is using 32 bit technology.
Tonight, I scanned the computer with Avast and as it began to quarantine found viruses...the computer went into soft reboot and when I realized it I quickly pressed F8 to go to safe mode. I was successful! However, I still cannot access the internet???!!! I was able to install Fire Fox as the new browser. I was not able to do that when out of 'safe mode'.
Avast is available but not Malwarebytes, and Malwarebytes will still not install , it begins, and then suddenly stops and says "I need to contact the site owner, as a problem has occurred." I believe I can access log files. i think.
OK,.... Today is June 15 2011. I have made some progress. I was able to install and run Avast but not Malwarebytes. Yet I think Malwarebytes is still in the operating system but will not start, for some reason. I was also able to install and run Super AntiSpyware. I was able finally to install Fire fox after I ran Avast several times and Super Anti Spy ware several times. After that I was able to install and run: Smart Defrag and Glary utilities and CCleaner. Both anti spyware programs have found different, yet many, infections. I have them safely held in virus chest and I have logs available from both.
We still are not able to access most documents and folders we created before the infection. Still experiencing several viruses attempting to do harm but Avast has stopped them and put them into the virus chest. same action has been observed with Super Anti Spyware.
Every time the computer boots up or we start the process of surfing the web, Avast finds and stops malware! ..that is crazy! and scary!
Windows firewall keeps being turned off some how...all by itself! ...why?
We are still experiencing having several pop up warnings appear on the monitor and movie adds playing suddenly while we search the web for something unrelated to any movie...weird?
I am hoping you can instruct me on when I should empty the virus vaults...I am not 100% comfortable doing so and not definitely sure just how to do so.
I have several screen prints I made of the many pop ups that appear on the monitor screen, I saved them in paint so that i could share them with the tech that helps me.
tonight I was able to finally install and run Erunt and DDS.
below is the DDS reports.
Presently this computer will not allow me to compress or, uncompress files.
just so you know, Concerning restore points, I personally wouldn't trust any restore point after April 20, 2011 because shortly after that is when the problems with the computer began.
I patiently await your replies, and instructions. I realize your busy, and probably swapped with requests for help. I praise this team for all your efforts!
Sincerely Thanking you in advance, and i really mean thank you!
Flywelder, { David}
.
DDS (Ver_2011-06-12.02) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Biomed at 21:42:29 on 2011-06-15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1527.770 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Secunia\PSI\PSIA.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\AGRSMMSG.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Java\jre1.5.0\bin\jucheck.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = https://login.live.com/login.srf?wa...x&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1
uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uWindow Title = Road Runner High Speed Online
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyServer = proxy01:8080
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: HP view: {b2847e28-5d7d-4deb-8b67-05d28bcf79f5} - c:\program files\hp\digital imaging\bin\HPDTLK02.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [ccleaner] "c:\program files\ccleaner\CCleaner.exe" /AUTO
mRun: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [thirdintel] c:\hp\bin\cloaker.exe c:\hp\bin\intel_tweak\intel_tweak3.cmd
mRun: [HPHmon06] c:\windows\system32\hphmon06.exe
mRun: [Client Access Service] "c:\program files\ibm\client access\cwbsvstr.exe"
mRun: [KBD] c:\hp\kbd\KBD.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
StartupFolder: c:\docume~1\biomed\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\biomed\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\docume~1\biomed\startm~1\programs\startup\wkcalrem.lnk - c:\program files\common files\microsoft shared\works shared\WkCalRem.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL
DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} - hxxps://lowes.2020.net/Core/Player/2020PlayerAX_Win32.cab
DPF: {23A2712A-7A4F-4D0C-822C-D7BA9974447B} - hxxps://registration.rr.com/RegHelper.cab
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://harvestdatasystems.webex.com/client/T23L/support/ieatgpc.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E6ACF817-0A85-4EBE-9F0A-096C6488CFEA} - hxxp://na.ntrsupport.com/inquiero/mod/setup/ntractivex118_24.cab
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{A7859C65-4D00-4730-B8E4-BD16EE5AEDB2} : DhcpNameServer = 192.168.2.1
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxsrvc.dll
Notify: TPSvc - TPSvc.dll
SEH: {FA010552-4A27-4cb1-A1BB-3E2D697F1639} - No File
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\biomed\application data\mozilla\firefox\profiles\s3grf6ae.default\
FF - prefs.js: browser.startup.homepage - hxxp://cozicentral.cozi.com/
FF - prefs.js: network.proxy.ftp - proxy01
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.http - proxy01
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - proxy01
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - proxy01
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-5-27 13496]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-5-8 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-5-8 307928]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-5-8 19544]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-5-8 42184]
R2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\belkin\belkin usb print and storage center\BkBackupScheduler.exe [2011-3-6 152064]
R2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\belkin\belkin usb print and storage center\Bkapcs.exe [2011-3-6 49152]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-4-19 993848]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-4-19 399416]
R2 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2011-3-6 246936]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
.
=============== Created Last 30 ================
.
2011-06-02 02:19:55 -------- d-----w- c:\documents and settings\biomed\application data\OpenOffice.org
2011-06-02 02:18:09 -------- d-----w- c:\program files\OpenOffice.org 3
2011-05-27 04:14:53 13496 ---ha-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2011-05-26 03:07:41 -------- d-----w- c:\program files\Glarysoft
.
==================== Find3M ====================
.
2011-06-12 23:10:08 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-01 17:14:27 0 ---ha-w- c:\windows\Pjepocu.bin
2011-05-10 12:10:59 40112 ----a-w- c:\windows\avastSS.scr
2011-05-10 12:03:54 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-07 02:22:56 917504 ----a-w- c:\windows\system32\FLASH.OCX
.
============= FINISH: 21:44:09.51 ===============
Below is the Attach. txt report
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-12.02)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 8/1/2005 8:25:00 AM
System Uptime: 6/15/2011 7:56:25 PM (2 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | Goldfish3
Processor: Intel(R) Pentium(R) 4 CPU 2.93GHz | CPU 1 | 2932/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 142 GiB total, 123.175 GiB free.
D: is FIXED (FAT32) - 7 GiB total, 1.244 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is CDROM (CDFS)
K: is Removable
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\3FB4A311D800
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\3FB4A311D800
Service: NIC1394
.
==== System Restore Points ===================
.
RP1868: 3/18/2011 5:01:08 AM - System Checkpoint
RP1869: 3/19/2011 6:01:08 AM - System Checkpoint
RP1870: 3/20/2011 7:13:08 AM - System Checkpoint
RP1871: 3/21/2011 8:13:08 AM - System Checkpoint
RP1872: 3/22/2011 9:13:09 AM - System Checkpoint
RP1873: 3/23/2011 9:16:17 AM - System Checkpoint
RP1874: 3/24/2011 9:57:36 AM - System Checkpoint
RP1875: 3/25/2011 10:57:35 AM - System Checkpoint
RP1876: 3/26/2011 11:14:24 AM - System Checkpoint
RP1877: 3/27/2011 12:15:40 PM - System Checkpoint
RP1878: 3/28/2011 3:00:13 AM - Software Distribution Service 3.0
RP1879: 3/29/2011 3:57:35 AM - System Checkpoint
RP1880: 3/30/2011 4:57:35 AM - System Checkpoint
RP1881: 3/31/2011 5:57:35 AM - System Checkpoint
RP1882: 4/1/2011 6:57:36 AM - System Checkpoint
RP1883: 4/2/2011 7:57:35 AM - System Checkpoint
RP1884: 4/3/2011 8:57:35 AM - System Checkpoint
RP1885: 4/4/2011 8:59:23 AM - System Checkpoint
RP1886: 4/5/2011 9:57:35 AM - System Checkpoint
RP1887: 4/6/2011 2:05:44 PM - System Checkpoint
RP1888: 4/7/2011 2:45:20 PM - System Checkpoint
RP1889: 4/8/2011 5:25:31 PM - System Checkpoint
RP1890: 4/9/2011 5:45:20 PM - System Checkpoint
RP1891: 4/10/2011 6:45:20 PM - System Checkpoint
RP1892: 4/11/2011 7:49:26 PM - System Checkpoint
RP1893: 4/12/2011 8:45:20 PM - System Checkpoint
RP1894: 4/13/2011 8:47:36 PM - System Checkpoint
RP1895: 4/14/2011 9:47:01 PM - System Checkpoint
RP1896: 4/15/2011 10:45:20 PM - System Checkpoint
RP1897: 4/16/2011 11:45:20 PM - System Checkpoint
RP1898: 4/18/2011 12:45:20 AM - System Checkpoint
RP1899: 4/18/2011 3:00:14 AM - Software Distribution Service 3.0
RP1900: 4/19/2011 3:47:42 AM - System Checkpoint
RP1901: 4/20/2011 4:59:41 AM - System Checkpoint
RP1902: 4/21/2011 5:59:41 AM - System Checkpoint
RP1903: 4/22/2011 6:59:41 AM - System Checkpoint
RP1904: 4/23/2011 7:59:41 AM - System Checkpoint
RP1905: 4/23/2011 7:07:55 PM - Restore Operation
RP1906: 4/25/2011 1:33:20 AM - System Checkpoint
RP1907: 4/26/2011 2:27:38 AM - System Checkpoint
RP1908: 4/29/2011 1:40:07 AM - System Checkpoint
RP1909: 5/1/2011 5:20:39 PM - System Checkpoint
RP1910: 5/2/2011 10:21:30 PM - System Checkpoint
RP1911: 5/4/2011 11:47:39 PM - System Checkpoint
RP1912: 5/6/2011 5:33:49 PM - System Checkpoint
RP1913: 5/6/2011 10:47:49 PM - Restore Operation
RP1914: 5/8/2011 10:28:56 AM - System Checkpoint
RP1915: 5/8/2011 12:59:37 PM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
RP1916: 5/8/2011 4:30:18 PM - avast! Free Antivirus Setup
RP1917: 5/13/2011 3:40:38 PM - System Checkpoint
RP1918: 5/13/2011 7:04:27 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP1919: 5/14/2011 8:44:46 PM - System Checkpoint
RP1920: 5/15/2011 10:13:11 PM - System Checkpoint
RP1921: 5/17/2011 6:27:12 PM - System Checkpoint
RP1922: 5/20/2011 6:35:55 AM - System Checkpoint
RP1923: 5/21/2011 10:32:42 AM - System Checkpoint
RP1924: 5/26/2011 10:38:42 PM - System Checkpoint
RP1925: 5/28/2011 12:04:38 AM - System Checkpoint
RP1926: 5/29/2011 12:05:07 AM - System Checkpoint
RP1927: 5/30/2011 3:22:16 AM - System Checkpoint
RP1928: 5/31/2011 9:44:55 AM - System Checkpoint
RP1929: 6/1/2011 10:11:54 AM - System Checkpoint
RP1930: 6/1/2011 10:18:04 PM - Installed OpenOffice.org 3.3
RP1931: 6/3/2011 3:52:18 PM - System Checkpoint
RP1932: 6/4/2011 3:55:39 PM - System Checkpoint
RP1933: 6/5/2011 4:31:31 PM - System Checkpoint
RP1934: 6/6/2011 10:44:36 PM - System Checkpoint
RP1935: 6/12/2011 8:14:01 PM - System Checkpoint
RP1936: 6/13/2011 10:40:52 PM - System Checkpoint
RP1937: 6/14/2011 11:35:38 PM - System Checkpoint
.
==== Installed Programs ======================
.
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.4
Agere Systems PCI Soft Modem
AiO_Scan
AiOSoftware
avast! Free Antivirus
BackupManager
Belkin Setup and Router Monitor
Belkin USB Print and Storage Center
Blackhawk Striker 2 from Hewlett-Packard Desktops (remove only)
Blasterball 2 from Hewlett-Packard Desktops (remove only)
Blasterball 2 Holidays from Hewlett-Packard Desktops (remove only)
Blasterball 2 Remix from Hewlett-Packard Desktops (remove only)
Bounce Symphony from Hewlett-Packard Desktops (remove only)
BufferChm
CameraDrivers
CCleaner
Copy
CP_AtenaShokunin1Config
cp_dwSharkTaleAlbums1
cp_dwSharkTaleCards1
cp_dwShrek2Albums1
cp_dwShrek2Cards1
CP_PLSBusinessFlyers
CreativeProjects
CreativeProjectsTemplates
Crystal Maze from Hewlett-Packard Desktops (remove only)
CueTour
Destinations
Director
Disk SpeedUp 1.3.0.388
DocProc
DocumentViewer
Easy Internet Sign-up
Enhanced Multimedia Keyboard Solution
ERUNT 1.1j
Family Tree For Dummies
Fax
Final Drive Nitro from Hewlett-Packard Desktops (remove only)
Glary Utilities 2.34.0.1190
Google Toolbar for Internet Explorer
GoToMeeting 4.5.0.457
Help and Support Additions
High Definition Audio Driver Package - KB835221
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB981793)
HP Boot Optimizer
HP Deskjet Printer Preload
HP Image Zone 4.8.6
HP Image Zone Plus 4.8.6
HP Organize
HP Photosmart Cameras 4.5
HP Product Assistant
HP Product Detection
HP PSC & OfficeJet 4.7
HP Update
HPIZplus450
HpSdpAppCoreApp
HPSystemDiagnostics
IBM iSeries Access for Windows
IBM iSeries Access for Windows SI29771
InstantShare
Intel(R) Graphics Media Accelerator Driver
IntelliMover Data Transfer Demo
InterVideo WinDVD Player
iTunes
J2SE Runtime Environment 5.0
Java Auto Updater
Java(TM) 6 Update 22
Lexibox Deluxe from Hewlett-Packard Desktops (remove only)
LS_HSI
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft Access 2000 SR-1 Runtime
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Mozilla Firefox 4.0.1 (x86 en-US)
Mozilla Thunderbird (3.1.10)
mp
mpmri
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee autoProducer 4.0
OpenOffice.org 3.3
Overball from Hewlett-Packard Desktops (remove only)
PanoStandAlone
PC-Doctor for Windows
Phoenix Assault from Hewlett-Packard Desktops (remove only)
PhotoGallery
Polar Bowler from Hewlett-Packard Desktops (remove only)
Polar Golfer from Hewlett-Packard Desktops (remove only)
PrintScreen
PS2
PSPrinters06
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QFolder
QuickProjects
QuickTime
Readme
RealPlayer
Remove Microsoft Money 2005 installer
Remove Quicken New User Edition installer
Remove WeatherBug installer
Scan
ScannerCopy
Secunia PSI (2.0.0.3003)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Shooting Stars Pool from Hewlett-Packard Desktops (remove only)
SkinsHP1
Slyder from Hewlett-Packard Desktops (remove only)
Smart Defrag 2
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
SpySubtract
Super Granny from Hewlett-Packard Desktops (remove only)
SUPERAntiSpyware
Tradewinds from Hewlett-Packard Desktops (remove only)
TrayApp
Unload
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Updates from HP
Video Mover
WebEx
WebFldrs XP
WebReg
WildTangent Web Driver
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3
.
==== Event Viewer Messages From Past Week ========
.
6/15/2011 1:56:33 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
6/12/2011 7:13:01 PM, error: DCOM [10005] - DCOM got error "%5" attempting to start the service iPodService with arguments "-Service" in order to run the server: {7A7FB085-6068-4898-8CCA-480A9187277C}
6/12/2011 7:04:55 PM, error: Service Control Manager [7000] - The SASDIFSV service failed to start due to the following error: Cannot create a file when that file already exists.
6/12/2011 6:58:55 PM, error: Dhcp [1002] - The IP address lease 192.168.2.2 for the Network Card with network address 0013D4247088 has been denied by the DHCP server 192.168.2.1 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================
Edit
Hello flywelder,
A helper did respond here: http://forums.spybot.info/showthread...056#post405056
May 20th, 2011
"Due to inactivity, this thread will now be closed."
---------------------------------------------------
Due to the troubles with the computer, I was not able to respond to Blade81's questions. i have been working very hard to get to the level the computer is in now. Just tonight I was able to get Erunt installed and running. However the troubles with the computer are far from over.
Please , oh please don't bail on me.
tonight I saw where the first post i made was closed, I read that I should open a new posting if i still had trouble, so i interpreted that to be what i should do tonight.
http://forums.spybot.info/images/smilies/poster_oops.gif Please forgive me if I made a mistake. and Please don't bail on me.
May 2011
My wife's computer is infected with that horrible XP Security Alert 2011. What a mess! I have tried a dozen steps and still it appears. I think it is reincarnating itself!
Malwarebytes has been deactivated some how, and for some reason!!?? But not by me or my wife!?
After several attempts I was able to install and run scans with AVast. and with Stopzilla, and with SuperAnti Spyware. they each find viruses, sometimes 8 then 12 then16 then 25 etc! each has quarantined the found viruses. {They are still quarantined, as i do not know how to tell the software to destroy the viruses..any suggestions please? }
yet, Still XP security alert 2011 rears up!
I have been battling this for more than 4 weeks, I am tired now, I am about to throw in the towel, and throw the computer to the curb!! I need your help please.. please.
I was able to down load: R Kill, and ran it.....not sure of the results as the software appeared, i think it ran, and then disappeared...????
I attempted to re-install Malwarebyts, the installation starts but is suddenly stopped for some unknown reason and the software aborts???? I had Malwarbytes loaded onto the computer before the infection happened, it never found any viruses and I kept it updated. ...odd ???? Now Malwarebytes will not function???
I cannot access the internet now???! So i cannot install ERUNT.
I have tried a dozen times to install spybot, yet cannot complete the download because suddenly XP security alert pops up and changes the browsing page! and so I cannot get to a web page to download spybot. Plus, I can no longer go to any web page!!!!!............not even in safe mode.
This all started when my wife ordered a nursing blouse for work on line. the blouse arrived and so did the security alert! I can ask her what site it was if that would help.
Since that event, we can not see anything in my documents. all the folders and doc. are not there and the folder reads empty. there were at least 15 folders before this XP security alert showed up. there is no internet explorer icon and no other icons are displayed on the desk top. I can only access the internet by going threw the update pages of the anti virus software on my computer such as avast or superspyware. and then, security alert 2011 begins to redirect me!! and I am cut off from the internet!!! I am so mad! I want to get back at the creator of this security alert! why can't they be stopped?
I am using a Belkin wireless router. I am in my home. How did this and other viruses get past my router I wonder? any suggestions on that ?
Her computer is using internet explorer. I tried installing Firefox, but the installation was mysteriously stopped for some unknown reason????
The infected computer is a HP Pavilion, with 512 MB of Ram and using Windows XP home edition. Computer is at least 5-7 years old. it is using 32 bit technology.
Tonight, I scanned the computer with Avast and as it began to quarantine found viruses...the computer went into soft reboot and when I realized it I quickly pressed F8 to go to safe mode. I was successful! However, I still cannot access the internet???!!! I was able to install Fire Fox as the new browser. I was not able to do that when out of 'safe mode'.
Avast is available but not Malwarebytes, and Malwarebytes will still not install , it begins, and then suddenly stops and says "I need to contact the site owner, as a problem has occurred." I believe I can access log files. i think.
OK,.... Today is June 15 2011. I have made some progress. I was able to install and run Avast but not Malwarebytes. Yet I think Malwarebytes is still in the operating system but will not start, for some reason. I was also able to install and run Super AntiSpyware. I was able finally to install Fire fox after I ran Avast several times and Super Anti Spy ware several times. After that I was able to install and run: Smart Defrag and Glary utilities and CCleaner. Both anti spyware programs have found different, yet many, infections. I have them safely held in virus chest and I have logs available from both.
We still are not able to access most documents and folders we created before the infection. Still experiencing several viruses attempting to do harm but Avast has stopped them and put them into the virus chest. same action has been observed with Super Anti Spyware.
Every time the computer boots up or we start the process of surfing the web, Avast finds and stops malware! ..that is crazy! and scary!
Windows firewall keeps being turned off some how...all by itself! ...why?
We are still experiencing having several pop up warnings appear on the monitor and movie adds playing suddenly while we search the web for something unrelated to any movie...weird?
I am hoping you can instruct me on when I should empty the virus vaults...I am not 100% comfortable doing so and not definitely sure just how to do so.
I have several screen prints I made of the many pop ups that appear on the monitor screen, I saved them in paint so that i could share them with the tech that helps me.
tonight I was able to finally install and run Erunt and DDS.
below is the DDS reports.
Presently this computer will not allow me to compress or, uncompress files.
just so you know, Concerning restore points, I personally wouldn't trust any restore point after April 20, 2011 because shortly after that is when the problems with the computer began.
I patiently await your replies, and instructions. I realize your busy, and probably swapped with requests for help. I praise this team for all your efforts!
Sincerely Thanking you in advance, and i really mean thank you!
Flywelder, { David}
.
DDS (Ver_2011-06-12.02) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Biomed at 21:42:29 on 2011-06-15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1527.770 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\BkBackupScheduler.exe
C:\Program Files\Belkin\Belkin USB Print and Storage Center\Bkapcs.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Secunia\PSI\PSIA.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\AGRSMMSG.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\Java\jre1.5.0\bin\jucheck.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = https://login.live.com/login.srf?wa...x&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1
uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop&parm1=seconduser
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uWindow Title = Road Runner High Speed Online
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyServer = proxy01:8080
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: HP view: {b2847e28-5d7d-4deb-8b67-05d28bcf79f5} - c:\program files\hp\digital imaging\bin\HPDTLK02.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [ccleaner] "c:\program files\ccleaner\CCleaner.exe" /AUTO
mRun: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [thirdintel] c:\hp\bin\cloaker.exe c:\hp\bin\intel_tweak\intel_tweak3.cmd
mRun: [HPHmon06] c:\windows\system32\hphmon06.exe
mRun: [Client Access Service] "c:\program files\ibm\client access\cwbsvstr.exe"
mRun: [KBD] c:\hp\kbd\KBD.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
StartupFolder: c:\docume~1\biomed\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\biomed\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\docume~1\biomed\startm~1\programs\startup\wkcalrem.lnk - c:\program files\common files\microsoft shared\works shared\WkCalRem.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL
DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} - hxxps://lowes.2020.net/Core/Player/2020PlayerAX_Win32.cab
DPF: {23A2712A-7A4F-4D0C-822C-D7BA9974447B} - hxxps://registration.rr.com/RegHelper.cab
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://harvestdatasystems.webex.com/client/T23L/support/ieatgpc.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E6ACF817-0A85-4EBE-9F0A-096C6488CFEA} - hxxp://na.ntrsupport.com/inquiero/mod/setup/ntractivex118_24.cab
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{A7859C65-4D00-4730-B8E4-BD16EE5AEDB2} : DhcpNameServer = 192.168.2.1
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxsrvc.dll
Notify: TPSvc - TPSvc.dll
SEH: {FA010552-4A27-4cb1-A1BB-3E2D697F1639} - No File
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\biomed\application data\mozilla\firefox\profiles\s3grf6ae.default\
FF - prefs.js: browser.startup.homepage - hxxp://cozicentral.cozi.com/
FF - prefs.js: network.proxy.ftp - proxy01
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.http - proxy01
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - proxy01
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - proxy01
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-5-27 13496]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-5-8 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-5-8 307928]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-5-8 19544]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-5-8 42184]
R2 Belkin Local Backup Service;Belkin Local Backup Service;c:\program files\belkin\belkin usb print and storage center\BkBackupScheduler.exe [2011-3-6 152064]
R2 Belkin Network USB Helper;Belkin Network USB Helper;c:\program files\belkin\belkin usb print and storage center\Bkapcs.exe [2011-3-6 49152]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-4-19 993848]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-4-19 399416]
R2 sxuptp;SXUPTP Driver;c:\windows\system32\drivers\sxuptp.sys [2011-3-6 246936]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
.
=============== Created Last 30 ================
.
2011-06-02 02:19:55 -------- d-----w- c:\documents and settings\biomed\application data\OpenOffice.org
2011-06-02 02:18:09 -------- d-----w- c:\program files\OpenOffice.org 3
2011-05-27 04:14:53 13496 ---ha-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2011-05-26 03:07:41 -------- d-----w- c:\program files\Glarysoft
.
==================== Find3M ====================
.
2011-06-12 23:10:08 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-01 17:14:27 0 ---ha-w- c:\windows\Pjepocu.bin
2011-05-10 12:10:59 40112 ----a-w- c:\windows\avastSS.scr
2011-05-10 12:03:54 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-07 02:22:56 917504 ----a-w- c:\windows\system32\FLASH.OCX
.
============= FINISH: 21:44:09.51 ===============
Below is the Attach. txt report
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-12.02)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 8/1/2005 8:25:00 AM
System Uptime: 6/15/2011 7:56:25 PM (2 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | Goldfish3
Processor: Intel(R) Pentium(R) 4 CPU 2.93GHz | CPU 1 | 2932/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 142 GiB total, 123.175 GiB free.
D: is FIXED (FAT32) - 7 GiB total, 1.244 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is CDROM (CDFS)
K: is Removable
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\3FB4A311D800
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\3FB4A311D800
Service: NIC1394
.
==== System Restore Points ===================
.
RP1868: 3/18/2011 5:01:08 AM - System Checkpoint
RP1869: 3/19/2011 6:01:08 AM - System Checkpoint
RP1870: 3/20/2011 7:13:08 AM - System Checkpoint
RP1871: 3/21/2011 8:13:08 AM - System Checkpoint
RP1872: 3/22/2011 9:13:09 AM - System Checkpoint
RP1873: 3/23/2011 9:16:17 AM - System Checkpoint
RP1874: 3/24/2011 9:57:36 AM - System Checkpoint
RP1875: 3/25/2011 10:57:35 AM - System Checkpoint
RP1876: 3/26/2011 11:14:24 AM - System Checkpoint
RP1877: 3/27/2011 12:15:40 PM - System Checkpoint
RP1878: 3/28/2011 3:00:13 AM - Software Distribution Service 3.0
RP1879: 3/29/2011 3:57:35 AM - System Checkpoint
RP1880: 3/30/2011 4:57:35 AM - System Checkpoint
RP1881: 3/31/2011 5:57:35 AM - System Checkpoint
RP1882: 4/1/2011 6:57:36 AM - System Checkpoint
RP1883: 4/2/2011 7:57:35 AM - System Checkpoint
RP1884: 4/3/2011 8:57:35 AM - System Checkpoint
RP1885: 4/4/2011 8:59:23 AM - System Checkpoint
RP1886: 4/5/2011 9:57:35 AM - System Checkpoint
RP1887: 4/6/2011 2:05:44 PM - System Checkpoint
RP1888: 4/7/2011 2:45:20 PM - System Checkpoint
RP1889: 4/8/2011 5:25:31 PM - System Checkpoint
RP1890: 4/9/2011 5:45:20 PM - System Checkpoint
RP1891: 4/10/2011 6:45:20 PM - System Checkpoint
RP1892: 4/11/2011 7:49:26 PM - System Checkpoint
RP1893: 4/12/2011 8:45:20 PM - System Checkpoint
RP1894: 4/13/2011 8:47:36 PM - System Checkpoint
RP1895: 4/14/2011 9:47:01 PM - System Checkpoint
RP1896: 4/15/2011 10:45:20 PM - System Checkpoint
RP1897: 4/16/2011 11:45:20 PM - System Checkpoint
RP1898: 4/18/2011 12:45:20 AM - System Checkpoint
RP1899: 4/18/2011 3:00:14 AM - Software Distribution Service 3.0
RP1900: 4/19/2011 3:47:42 AM - System Checkpoint
RP1901: 4/20/2011 4:59:41 AM - System Checkpoint
RP1902: 4/21/2011 5:59:41 AM - System Checkpoint
RP1903: 4/22/2011 6:59:41 AM - System Checkpoint
RP1904: 4/23/2011 7:59:41 AM - System Checkpoint
RP1905: 4/23/2011 7:07:55 PM - Restore Operation
RP1906: 4/25/2011 1:33:20 AM - System Checkpoint
RP1907: 4/26/2011 2:27:38 AM - System Checkpoint
RP1908: 4/29/2011 1:40:07 AM - System Checkpoint
RP1909: 5/1/2011 5:20:39 PM - System Checkpoint
RP1910: 5/2/2011 10:21:30 PM - System Checkpoint
RP1911: 5/4/2011 11:47:39 PM - System Checkpoint
RP1912: 5/6/2011 5:33:49 PM - System Checkpoint
RP1913: 5/6/2011 10:47:49 PM - Restore Operation
RP1914: 5/8/2011 10:28:56 AM - System Checkpoint
RP1915: 5/8/2011 12:59:37 PM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
RP1916: 5/8/2011 4:30:18 PM - avast! Free Antivirus Setup
RP1917: 5/13/2011 3:40:38 PM - System Checkpoint
RP1918: 5/13/2011 7:04:27 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP1919: 5/14/2011 8:44:46 PM - System Checkpoint
RP1920: 5/15/2011 10:13:11 PM - System Checkpoint
RP1921: 5/17/2011 6:27:12 PM - System Checkpoint
RP1922: 5/20/2011 6:35:55 AM - System Checkpoint
RP1923: 5/21/2011 10:32:42 AM - System Checkpoint
RP1924: 5/26/2011 10:38:42 PM - System Checkpoint
RP1925: 5/28/2011 12:04:38 AM - System Checkpoint
RP1926: 5/29/2011 12:05:07 AM - System Checkpoint
RP1927: 5/30/2011 3:22:16 AM - System Checkpoint
RP1928: 5/31/2011 9:44:55 AM - System Checkpoint
RP1929: 6/1/2011 10:11:54 AM - System Checkpoint
RP1930: 6/1/2011 10:18:04 PM - Installed OpenOffice.org 3.3
RP1931: 6/3/2011 3:52:18 PM - System Checkpoint
RP1932: 6/4/2011 3:55:39 PM - System Checkpoint
RP1933: 6/5/2011 4:31:31 PM - System Checkpoint
RP1934: 6/6/2011 10:44:36 PM - System Checkpoint
RP1935: 6/12/2011 8:14:01 PM - System Checkpoint
RP1936: 6/13/2011 10:40:52 PM - System Checkpoint
RP1937: 6/14/2011 11:35:38 PM - System Checkpoint
.
==== Installed Programs ======================
.
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.4
Agere Systems PCI Soft Modem
AiO_Scan
AiOSoftware
avast! Free Antivirus
BackupManager
Belkin Setup and Router Monitor
Belkin USB Print and Storage Center
Blackhawk Striker 2 from Hewlett-Packard Desktops (remove only)
Blasterball 2 from Hewlett-Packard Desktops (remove only)
Blasterball 2 Holidays from Hewlett-Packard Desktops (remove only)
Blasterball 2 Remix from Hewlett-Packard Desktops (remove only)
Bounce Symphony from Hewlett-Packard Desktops (remove only)
BufferChm
CameraDrivers
CCleaner
Copy
CP_AtenaShokunin1Config
cp_dwSharkTaleAlbums1
cp_dwSharkTaleCards1
cp_dwShrek2Albums1
cp_dwShrek2Cards1
CP_PLSBusinessFlyers
CreativeProjects
CreativeProjectsTemplates
Crystal Maze from Hewlett-Packard Desktops (remove only)
CueTour
Destinations
Director
Disk SpeedUp 1.3.0.388
DocProc
DocumentViewer
Easy Internet Sign-up
Enhanced Multimedia Keyboard Solution
ERUNT 1.1j
Family Tree For Dummies
Fax
Final Drive Nitro from Hewlett-Packard Desktops (remove only)
Glary Utilities 2.34.0.1190
Google Toolbar for Internet Explorer
GoToMeeting 4.5.0.457
Help and Support Additions
High Definition Audio Driver Package - KB835221
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB981793)
HP Boot Optimizer
HP Deskjet Printer Preload
HP Image Zone 4.8.6
HP Image Zone Plus 4.8.6
HP Organize
HP Photosmart Cameras 4.5
HP Product Assistant
HP Product Detection
HP PSC & OfficeJet 4.7
HP Update
HPIZplus450
HpSdpAppCoreApp
HPSystemDiagnostics
IBM iSeries Access for Windows
IBM iSeries Access for Windows SI29771
InstantShare
Intel(R) Graphics Media Accelerator Driver
IntelliMover Data Transfer Demo
InterVideo WinDVD Player
iTunes
J2SE Runtime Environment 5.0
Java Auto Updater
Java(TM) 6 Update 22
Lexibox Deluxe from Hewlett-Packard Desktops (remove only)
LS_HSI
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft Access 2000 SR-1 Runtime
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Mozilla Firefox 4.0.1 (x86 en-US)
Mozilla Thunderbird (3.1.10)
mp
mpmri
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee autoProducer 4.0
OpenOffice.org 3.3
Overball from Hewlett-Packard Desktops (remove only)
PanoStandAlone
PC-Doctor for Windows
Phoenix Assault from Hewlett-Packard Desktops (remove only)
PhotoGallery
Polar Bowler from Hewlett-Packard Desktops (remove only)
Polar Golfer from Hewlett-Packard Desktops (remove only)
PrintScreen
PS2
PSPrinters06
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QFolder
QuickProjects
QuickTime
Readme
RealPlayer
Remove Microsoft Money 2005 installer
Remove Quicken New User Edition installer
Remove WeatherBug installer
Scan
ScannerCopy
Secunia PSI (2.0.0.3003)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Shooting Stars Pool from Hewlett-Packard Desktops (remove only)
SkinsHP1
Slyder from Hewlett-Packard Desktops (remove only)
Smart Defrag 2
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
SpySubtract
Super Granny from Hewlett-Packard Desktops (remove only)
SUPERAntiSpyware
Tradewinds from Hewlett-Packard Desktops (remove only)
TrayApp
Unload
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Updates from HP
Video Mover
WebEx
WebFldrs XP
WebReg
WildTangent Web Driver
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows Media Player 10
Windows XP Service Pack 3
.
==== Event Viewer Messages From Past Week ========
.
6/15/2011 1:56:33 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
6/12/2011 7:13:01 PM, error: DCOM [10005] - DCOM got error "%5" attempting to start the service iPodService with arguments "-Service" in order to run the server: {7A7FB085-6068-4898-8CCA-480A9187277C}
6/12/2011 7:04:55 PM, error: Service Control Manager [7000] - The SASDIFSV service failed to start due to the following error: Cannot create a file when that file already exists.
6/12/2011 6:58:55 PM, error: Dhcp [1002] - The IP address lease 192.168.2.2 for the Network Card with network address 0013D4247088 has been denied by the DHCP server 192.168.2.1 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================
Edit
Hello flywelder,
A helper did respond here: http://forums.spybot.info/showthread...056#post405056
May 20th, 2011
"Due to inactivity, this thread will now be closed."
---------------------------------------------------
Due to the troubles with the computer, I was not able to respond to Blade81's questions. i have been working very hard to get to the level the computer is in now. Just tonight I was able to get Erunt installed and running. However the troubles with the computer are far from over.
Please , oh please don't bail on me.
tonight I saw where the first post i made was closed, I read that I should open a new posting if i still had trouble, so i interpreted that to be what i should do tonight.
http://forums.spybot.info/images/smilies/poster_oops.gif Please forgive me if I made a mistake. and Please don't bail on me.
Last edited by a moderator:
If I have incorrectly posted or messed up, please advise where I went wrong. thanks. 