Our November Competition
User Reviews - Add Yours!
The PCHF Lounge
Go Back   PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs
Register for a Free Account

[Fixed] Hijackthis! Logs - my results from pre work posted in the Security & Safety forums; my laptop seems to be working strangely i have trouble on the net, the pages seem to load so slowly all of a sudden some pages dont load, the internet ...


Reply
Free PC Performance Scan
Old 06-04-2008   #1
Bronze Member
 
Join Date: Jun 2008
Posts: 28
PC Experience: Beginner
Default my results from pre work

my laptop seems to be working strangely

i have trouble on the net, the pages seem to load so slowly all of a sudden
some pages dont load, the internet stops working and closes itself also

i had a problem playing videos previously despite my codecs always working fine before

any help would be gratefully recieved

Deckard's System Scanner v20071014.68
Run by Emily Challenor-**** on 2008-06-04 20:41:59
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Emily Challenor-****.exe) --------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:43:23, on 04/06/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Users\Emily Challenor-****\Desktop\dss.exe
C:\Users\EMILYC~1\Desktop\Emily Challenor-****.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Build-A-Bear Workshop-United Kingdom: Home Page
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: McAfee Phishing Filter - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "c:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1126581028-4067848546-111004573-1000\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter (User 'James Challenor')
O4 - HKUS\S-1-5-21-1126581028-4067848546-111004573-1000\..\Run: [cmds] rundll32.exe C:\Users\JAMESC~1\AppData\Local\Temp\awTKaXqr.dll, c (User 'James Challenor')
O4 - HKUS\S-1-5-21-1126581028-4067848546-111004573-1000\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'James Challenor')
O4 - HKUS\S-1-5-21-1126581028-4067848546-111004573-1000\..\Run: [Uniblue RegistryBooster 2] c:\program files\uniblue\registrybooster 2\StartRegistryBooster.exe (User 'James Challenor')
O4 - HKUS\S-1-5-21-1126581028-4067848546-111004573-1000\..\Run: [BM09390a27] Rundll32.exe "C:\Users\JAMESC~1\AppData\Local\Temp\jqosovlq.dll ",s (User 'James Challenor')
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,avgrsstx. dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10557 bytes

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

All drivers whitelisted.


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 RegSrvc (Intel(R) PROSet/Wireless Registry Service) - c:\program files\intel\wireless\bin\regsrvc.exe <Not Verified; Intel Corporation; Intel(R) PROSet/Wireless Registry Service>
R2 sprtsvc_dellsupportcenter (SupportSoft Sprocket Service (dellsupportcenter)) - c:\program files\dell support center\bin\sprtsvc.exe /service /p dellsupportcenter


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2008-05-15 01:00:00 356 --a------ C:\Windows\Tasks\McDefragTask.job
2008-05-01 01:00:00 348 --a------ C:\Windows\Tasks\McQcTask.job


-- Files created between 2008-05-04 and 2008-06-04 -----------------------------

2008-06-02 22:54:13 0 d--h----- C:\$AVG8.VAULT$
2008-06-02 22:50:23 0 d-------- C:\Windows\system32\drivers\Avg
2008-06-02 22:49:46 0 d-------- C:\Users\All Users\avg8
2008-06-02 22:49:46 0 d-------- C:\Program Files\AVG
2008-06-02 20:14:01 0 d-------- C:\Program Files\RegistrySmart
2008-06-01 13:11:49 0 d-------- C:\Program Files\CA Yahoo! Anti-Spy
2008-06-01 12:14:49 0 d-------- C:\Program Files\Uniblue
2008-06-01 12:04:21 0 d-a------ C:\Users\All Users\TEMP
2008-05-31 18:28:38 0 d-------- C:\ConverterOutput
2008-05-31 02:18:50 0 d-------- C:\Program Files\Elaborate Bytes
2008-05-25 17:36:04 0 d-------- C:\Program Files\FunWebProducts
2008-05-25 17:36:02 0 d-------- C:\Program Files\MyWebSearch
2008-05-22 19:21:13 0 d-------- C:\GameRival
2008-05-22 19:20:50 0 d-------- C:\Users\All Users\Trymedia
2008-05-22 19:19:37 0 d-------- C:\Downloads
2008-05-18 14:55:18 0 d-------- C:\Program Files\SopCast
2008-05-13 10:41:25 0 d-------- C:\Users\All Users\SUPERAntiSpyware.com
2008-05-13 10:41:13 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-05-12 21:17:42 0 d-------- C:\Program Files\Virtual Earth 3D
2008-05-12 19:43:29 2560 --a------ C:\Windows\_MSRSTRT.EXE
2008-05-12 18:52:08 4096 --a------ C:\Windows\d3dx.dat
2008-05-12 18:51:32 0 d-------- C:\Program Files\Common Files\TerraGame Shared
2008-05-12 18:51:30 0 d-------- C:\Program Files\TerraGame
2008-05-12 17:06:54 0 d-------- C:\Users\All Users\vsosdk
2008-05-12 00:46:18 217127 --a------ C:\Windows\system32\drv43260.dll <Not Verified; RealNetworks, Inc.; RealVideo 9 (32-bit)>
2008-05-12 00:46:18 208935 --a------ C:\Windows\system32\drv33260.dll <Not Verified; RealNetworks, Inc.; RealVideo 8 (32-bit)>
2008-05-12 00:46:18 176165 --a------ C:\Windows\system32\drv23260.dll <Not Verified; RealNetworks, Inc.; RealVideo G2 (32-bit)>
2008-05-12 00:46:18 65602 --a------ C:\Windows\system32\cook3260.dll <Not Verified; RealNetworks, Inc.; RealPlayer 10>
2008-05-12 00:46:17 626688 --a------ C:\Windows\system32\vp7vfw.dll <Not Verified; On2.com; On2_VP70>
2008-05-12 00:46:13 0 d-------- C:\Program Files\VSO
2008-05-12 00:28:37 0 d-------- C:\Program Files\AviSynth 2.5
2008-05-12 00:27:55 0 d-------- C:\Program Files\Avi2Dvd


-- Find3M Report ---------------------------------------------------------------

2008-06-04 19:59:54 0 d-------- C:\Program Files\McAfee
2008-06-04 19:50:58 0 d-------- C:\Users\Emily Challenor-****\AppData\Roaming\JAM Software
2008-06-02 22:53:38 0 d-------- C:\Program Files\Common Files
2008-06-02 21:12:02 0 d-------- C:\Program Files\K-Lite Codec Pack
2008-06-02 21:12:02 0 d-------- C:\Program Files\CCleaner
2008-05-28 16:51:36 0 d-------- C:\Program Files\Google
2008-05-19 16:44:22 0 d-------- C:\Users\Emily Challenor-****\AppData\Roaming\Mozilla
2008-05-19 16:43:59 0 d-------- C:\Users\Emily Challenor-****\AppData\Roaming\Intel
2008-05-16 03:02:21 0 d-------- C:\Program Files\Windows Mail
2008-04-21 20:13:36 0 d-------- C:\Program Files\Common Files\Nero
2008-04-20 12:57:38 0 d-------- C:\Program Files\VideoLAN
2008-04-10 19:59:58 0 d-------- C:\Program Files\JAM Software
2008-04-10 19:15:13 0 d-------- C:\Users\Emily Challenor-****\AppData\Roaming\uTorrent
2008-04-10 17:32:42 0 d-------- C:\Users\Emily Challenor-****\AppData\Roaming\Real
2008-04-09 19:44:42 0 d-------- C:\Program Files\DellTPad
2008-03-31 17:31:49 0 --a------ C:\Windows\nsreg.dat
2008-03-20 13:34:57 76 -r-hs---- C:\Windows\CT4CET.bin
2008-03-20 13:23:42 174 --ahs---- C:\Program Files\desktop.ini
2008-03-04 13:33:18 7680 --a------ C:\Windows\system32\ff_vfw.dll


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{377C180E-6F0E-4D4C-980F-F45BD3D40CF4}]
19/09/2007 07:15 329032 --a------ c:\PROGRA~1\mcafee\msk\mcapbho.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
02/06/2008 22:50 2050816 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [02/06/2008 22:50 2050816]

[-HKEY_CLASSES_ROOT\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [20/03/2008 21:04]
"ECenter"="C:\Dell\E-Center\EULALauncher.exe" [25/05/2007 07:03]
"Apoint"="C:\Program Files\DellTPad\Apoint.exe" [25/10/2007 13:31]
"OEM02Mon.exe"="C:\Windows\OEM02Mon.exe" [28/08/2007 06:51]
"SigmatelSysTrayApp"="C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe" [12/11/2007 12:07]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [15/12/2007 04:54]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [15/12/2007 04:53]
"Persistence"="C:\Windows\system32\igfxpers.ex e" [15/12/2007 04:53]
"SunJavaUpdateSched"="c:\Program Files\Java\jre1.6.0\bin\jusched.exe" [20/03/2008 13:31]
"DELL Webcam Manager"="C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" [27/07/2007 17:43]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [21/03/2007 14:00]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [20/03/2008 13:41]
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [03/08/2007 23:33]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [15/11/2007 10:24]
"PCMService"="C:\Program Files\Dell\MediaDirect\PCMService.exe" [01/11/2007 16:39]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [27/03/2008 20:22]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [11/01/2008 22:16]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" []
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [15/11/2007 10:23]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [02/06/2008 22:49]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"WindowsWelcomeCenter"="oobefldr.dll,ShowWelcomeCe nter" []
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [02/11/2006 13:35]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [20/03/2008 13:32:30]
QuickSet.lnk - C:\Program Files\Dell\QuickSet\quickset.exe [07/09/2007 17:27:08]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\system]
"LogonHoursAction"=2 (0x2)
"DontDisplayLogonHoursWarnings"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~2\GOEC62~ 1.DLL,avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\AppInfo]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\KeyIso]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\NTDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\ProfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\sacsvr]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SWPRV]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\TabletInputService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\TBS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\TrustedInstaller]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\VDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\volmgr.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\volmgrx.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI



-- End of Deckard's System Scanner: finished at 2008-06-04 20:45:02 ------------
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft® Windows Vista™ Home Premium (build 6000)
Architecture: X86; Language: English

CPU 0: Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz
Percentage of Memory in Use: 44%
Physical Memory (total/avail): 2037.43 MiB / 1121.14 MiB
Pagefile Memory (total/avail): 4294.91 MiB / 3233.57 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1915.57 MiB

C: is Fixed (NTFS) - 136.46 GiB total, 108.45 GiB free.
D: is Fixed (NTFS) - 10 GiB total, 5.79 GiB free.
E: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - WDC WD1600BEVT-75ZCT0 - 149.05 GiB - 4 partitions
\PARTITION0 - Unknown - 94.1 MiB
\PARTITION1 - Installable File System - 10 GiB - D:
\PARTITION2 (bootable) - Installable File System - 136.46 GiB - C:
\PARTITION3 - Extended w/Extended Int 13 - 2.5 GiB



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FW: McAfee Personal Firewall v (McAfee)
AV: AVG Anti-Virus Free v8.0 (AVG Technologies)
AV: McAfee VirusScan v (McAfee)
AS: McAfee VirusScan v (McAfee)
AS: AVG Anti-Virus Free v8.0 (AVG Technologies) Disabled
AS: Windows Defender v1.1.1505.0 (Microsoft Corporation) Disabled

[HKLM\System\CurrentControlSet\Services\SharedAcces s\Parameters\FirewallPolicy\DomainProfile\Authoriz edApplications\List]

[HKLM\System\CurrentControlSet\Services\SharedAcces s\Parameters\FirewallPolicy\StandardProfile\Author izedApplications\List]


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Emily Challenor-****\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=JAMESCHALL-PC
ComSpec=C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Emily Challenor-****
LOCALAPPDATA=C:\Users\Emily Challenor-****\AppData\Local
LOGONSERVER=\\JAMESCHALL-PC
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Windows\system32;C:\Windows;C:\Windows\Sys tem32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 15 Stepping 13, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0f0d
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
RoxioCentral=C:\Program Files\Common Files\Roxio Shared\10.0\Roxio Central36\
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\EMILYC~1\AppData\Local\Temp
TMP=C:\Users\EMILYC~1\AppData\Local\Temp
USERDOMAIN=JamesChall-PC
USERNAME=Emily Challenor-****
USERPROFILE=C:\Users\Emily Challenor-****
windir=C:\Windows


-- User Profiles ---------------------------------------------------------------

James Challenor
Emily Challenor-****


-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1A5BA3E-9ABF-4037-820B-6151022B8ACB}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5BA7C09-E523-478C-9C37-A1D86C76383E}\setup.exe" -l0x9
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6366726-BA44-4D6A-8ECE-476E2E616AD1}\setup.exe" -l0x9
Adobe Flash Player ActiveX --> C:\Windows\system32\Macromed\Flash\uninstall_activ eX.exe
Adobe Flash Player Plugin --> C:\Windows\system32\Macromed\Flash\uninstall_plugi n.exe
Adobe Reader 8.1.2 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}
Adobe Shockwave Player 11 --> C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log
Advanced Audio FX Engine --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88564CEF-20A5-4EF2-A05F-309F2EBA9B06}\setup.exe" -l0x9 /remove
Advanced Video FX Engine --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5BA7C09-E523-478C-9C37-A1D86C76383E}\setup.exe" -l0x9 /remove
AVG Free 8.0 --> C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
AviSynth 2.5 --> "C:\Program Files\AviSynth 2.5\Uninstall.exe"
Browser Address Error Redirector --> MsiExec.exe /I{62230596-37E5-4618-A329-0D21F529A86F}
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Compatibility Pack for the 2007 Office system --> MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
Conexant HDA D330 MDC V.92 Modem --> C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C0 6&SUBSYS_14F1000F\HXFSETUP.EXE -U -Idel000fz.inf
ConvertXtoDVD 3.0.0.9c --> "C:\Program Files\VSO\ConvertX\3\unins000.exe"
Dell Getting Started Guide --> MsiExec.exe /I{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}
Dell Support Center --> MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
Dell Touchpad --> C:\Program Files\DellTPad\Uninstap.exe ADDREMOVE
Dell Webcam Center --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A1A5BA3E-9ABF-4037-820B-6151022B8ACB}\setup.exe" -l0x9 /remove
Dell Webcam Manager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\ 01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F6366726-BA44-4D6A-8ECE-476E2E616AD1}\setup.exe" -l0x9 /remove
Digital Line Detect --> C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
Football Manager 2008 --> "C:\Program Files\Sports Interactive\Football Manager 2008\Uninstall_Football Manager 2008\Uninstall Football Manager 2008.exe"
Google Desktop --> C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Earth --> MsiExec.exe /I{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}
Intel(R) Matrix Storage Manager --> C:\Windows\System32\Imsmudlg.exe
Intel(R) PROSet/Wireless Software --> C:\Windows\Installer\iProInst.exe
Internet From BT --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6FFB40A5-7F7D-4A32-8905-3CDF962EE1E4}\Setup.exe"
Java(TM) SE Runtime Environment 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
K-Lite Codec Pack 3.8.5 Full --> "C:\Program Files\K-Lite Codec Pack\unins000.exe"
Laptop Integrated Webcam Driver (1.03.02.0719) --> C:\Windows\CtDrvIns.exe -uninstall -script OEM002.uns -plugin OEM02Pin.dll -pluginres OEM02Pin.crl -nodisconprompt -langid 0x0409
Live! Cam Avatar Creator --> C:\Program Files\InstallShield Installation Information\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}\setup.exe -runfromtemp -l0x0009 -removeonly /remove
Live! Cam Avatar v1.0 --> C:\Program Files\InstallShield Installation Information\{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}\setup.exe -runfromtemp -l0x0009 -removeonly /remove
McAfee SecurityCenter --> C:\Program Files\McAfee\MSC\mcuninst.exe
mCore --> MsiExec.exe /I{F5D7FAB5-A1FD-4DD3-983E-4155B09D7102}
MediaDirect --> C:\Program Files\InstallShield Installation Information\{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}\setup.exe -runfromtemp -l0x0009 -cluninstall
mHelp --> MsiExec.exe /I{8C6BB412-D3A8-4AAE-A01B-35B681789D68}
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Works --> MsiExec.exe /I{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}
mMHouse --> MsiExec.exe /I{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}
Modem Diagnostic Tool --> MsiExec.exe /I{F63A3748-B93D-4360-9AD4-B064481A5C7B}
Mozilla Firefox (2.0) --> C:\Program Files\Mozilla Firefox\uninstall\uninst.exe
mPfMgr --> MsiExec.exe /I{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}
mWMI --> MsiExec.exe /I{63DB9CCD-2B56-4217-9A3D-507AC78320CA}
NetWaiting --> C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
OutlookAddinSetup --> MsiExec.exe /I{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}
QuickSet --> MsiExec.exe /I{C4972073-2BFE-475D-8441-564EA97DA161}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Roxio Creator Audio --> MsiExec.exe /I{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}
Roxio Creator Copy --> MsiExec.exe /I{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}
Roxio Creator Data --> MsiExec.exe /I{08E81ABD-79F7-49C2-881F-FD6CB0975693}
Roxio Creator DE --> C:\ProgramData\Uninstall\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}\setup.exe /x {09760D42-E223-42AD-8C3E-55B47D0DDAC3}
Roxio Creator DE --> MsiExec.exe /I{ED439A64-F018-4DD4-8BA5-328D85AB09AB}
Roxio Creator Tools --> MsiExec.exe /I{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}
Roxio Express Labeler 3 --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SopCast 3.0.3 --> C:\Program Files\SopCast\uninst.exe
Tiscali Internet --> MsiExec.exe /I{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6}
TreeSize Free V2.1 --> "C:\Program Files\JAM Software\TreeSize Free\unins000.exe"
Uniblue RegistryBooster 2 --> "C:\Program Files\Uniblue\RegistryBooster 2\unins000.exe"
User's Guides --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ct or.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
VCRedistSetup --> MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}
VideoLAN VLC media player 0.8.6f --> C:\Program Files\VideoLAN\VLC\uninstall.exe
Virtual Earth 3D (Beta) --> MsiExec.exe /I{39CE3C17-846D-4D9B-8B3E-C01A4B90FB73}
Windows Media Player Firefox Plugin --> MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
Yahoo! Install Manager --> C:\Windows\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Toolbar --> C:\PROGRA~1\Yahoo!\Common\unyt.exe


-- Application Event Log -------------------------------------------------------

Event Record #/Type2644 / Error
Event Submitted/Written: 06/04/2008 08:21:48 PM
Event ID/Source: 1002 / Application Hang
Event Description:
The program firefox.exe version 1.8.20061.1023 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel.
Process ID: 14c0
Start Time: 01c8c677e7b33c54
Termination Time: 78

Event Record #/Type2642 / Error
Event Submitted/Written: 06/04/2008 08:21:08 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application mcproxy.exe, version 2.0.150.0, time stamp 0x46c338e7, faulting module mpscfg.dll, version 10.0.267.0, time stamp 0x46f40b71, exception code 0xc0000005, fault offset 0x0000f647,
process id 0x13e4, application start time 0xmcproxy.exe0.

Event Record #/Type2639 / Error
Event Submitted/Written: 06/04/2008 08:19:53 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application mcproxy.exe, version 2.0.150.0, time stamp 0x46c338e7, faulting module mpscfg.dll, version 10.0.267.0, time stamp 0x46f40b71, exception code 0xc0000005, fault offset 0x0000f647,
process id 0x16d0, application start time 0xmcproxy.exe0.

Event Record #/Type2636 / Error
Event Submitted/Written: 06/04/2008 08:18:16 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application mcproxy.exe, version 2.0.150.0, time stamp 0x46c338e7, faulting module mpscfg.dll, version 10.0.267.0, time stamp 0x46f40b71, exception code 0xc0000005, fault offset 0x0000f647,
process id 0x81c, application start time 0xmcproxy.exe0.

Event Record #/Type2631 / Success
Event Submitted/Written: 06/04/2008 08:17:50 PM
Event ID/Source: 5617 / WinMgmt
Event Description:




-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type23528 / Warning
Event Submitted/Written: 06/04/2008 08:22:23 PM
Event ID/Source: 4 / Client Side Rendering Spooler
Event Description:
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.

Event Record #/Type23527 / Warning
Event Submitted/Written: 06/04/2008 08:22:23 PM
Event ID/Source: 4 / Client Side Rendering Spooler
Event Description:
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.

Event Record #/Type23526 / Warning
Event Submitted/Written: 06/04/2008 08:22:12 PM
Event ID/Source: 4 / Client Side Rendering Spooler
Event Description:
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.

Event Record #/Type23525 / Warning
Event Submitted/Written: 06/04/2008 08:22:12 PM
Event ID/Source: 4 / Client Side Rendering Spooler
Event Description:
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.

Event Record #/Type23522 / Warning
Event Submitted/Written: 06/04/2008 08:21:54 PM
Event ID/Source: 4 / Client Side Rendering Spooler
Event Description:
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.



-- End of Deckard's System Scanner: finished at 2008-06-04 20:45:02 ------------
JamesChall is offline   Reply With Quote
Register for a Free PCHF account
Advertisement - Register to Remove
Old 06-05-2008   #2
Senior Security Analyst
 
Pancake's Avatar
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 6,798
PC Experience: Elite PC Guru
Default Re: my results from pre work

Ok.We need to download ComboFix.exe. This will give a better view to the files running and also hidden on your computer and also those in the registry.
Please visit this webpage for download links, and instructions for running ComboFix
When the tool is finished, it will produce a report for you. Please copy and paste the "C:\ComboFix.txt" along with a new 'HijackThis' log so that we can continue to do any further cleaning that your system may require.
Caution: Never run and remove files with Combofix unless supervised by a qualified security analyst who is experienced in the use of Combofix. Mal use can cause serious computer problems
NOTE: Combofix prevents autorun of all CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you - please let me know.
__________________
  • An Australian Member of
  • and
My real name is Eddy
Pancake is offline   Reply With Quote
Old 06-05-2008   #3
Bronze Member
 
Join Date: Jun 2008
Posts: 28
PC Experience: Beginner
Default Re: my results from pre work

Help!! Im struggling to see whether i have windows xp home or professional and which service pack as i can ionly find the disc to reinstall windows
JamesChall is offline   Reply With Quote
Old 06-05-2008   #4
Senior Security Analyst
 
Pancake's Avatar
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 6,798
PC Experience: Elite PC Guru
Default Re: my results from pre work

You will need to download SP1 for Vista first.Then just carry on with running Combofix.
__________________
  • An Australian Member of
  • and
My real name is Eddy
Pancake is offline   Reply With Quote
Old 06-06-2008   #5
Bronze Member
 
Join Date: Jun 2008
Posts: 28
PC Experience: Beginner
Default Re: my results from pre work

im sorry to sound like an absolute idiot but i cant find where to download the above, it not listed on the link you previously gave- sorry again
JamesChall is offline   Reply With Quote
Old 06-06-2008   #6
Senior Security Analyst
 
Pancake's Avatar
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 6,798
PC Experience: Elite PC Guru
Default Re: my results from pre work

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Run this and post the log...
__________________
  • An Australian Member of
  • and
My real name is Eddy
Pancake is offline   Reply With Quote
Old 06-07-2008   #7
Bronze Member
 
Join Date: Jun 2008
Posts: 28
PC Experience: Beginner
Default Re: my results from pre work

Thanks for reply

ComboFix 08-06-06.4 - James Challenor 2008-06-07 0:55:08.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.905 [GMT 1:00]
Running from: C:\Users\James Challenor\Desktop\ComboFix.exe
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\FunWebProducts
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr0. dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1. dat
C:\Users\James Challenor\AppData\Roaming\inst.exe

----- BITS: Possible infected sites -----

hxxp://theinstalls.com
.
((((((((((((((((((((((((( Files Created from 2008-05-06 to 2008-06-06 )))))))))))))))))))))))))))))))
.

No new files created in this timespan

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-06-06 23:02 --------- d-----w C:\Program Files\Uniblue
2008-06-06 18:09 --------- d-----w C:\Program Files\McAfee
2008-06-04 22:55 --------- d-----w C:\Program Files\Microsoft Silverlight
2008-06-04 22:14 --------- d-----w C:\Users\Emily Challenor-****\AppData\Roaming\Uniblue
2008-06-04 18:50 --------- d-----w C:\Users\Emily Challenor-****\AppData\Roaming\JAM Software
2008-06-02 23:14 --------- d-----w C:\Users\James Challenor\AppData\Roaming\Uniblue
2008-06-02 22:44 --------- d-----w C:\Users\James Challenor\AppData\Roaming\uTorrent
2008-06-02 21:53 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-06-02 21:50 96,520 ----a-w C:\Windows\system32\drivers\avgldx86.sys
2008-06-02 21:50 67,080 ----a-w C:\Windows\system32\drivers\avgwfpx.sys
2008-06-02 21:50 10,520 ----a-w C:\Windows\System32\avgrsstx.dll
2008-06-02 21:49 --------- d-----w C:\ProgramData\avg8
2008-06-02 21:49 --------- d-----w C:\Program Files\AVG
2008-06-02 20:12 --------- d-----w C:\Users\James Challenor\AppData\Roaming\DVD Flick
2008-06-02 20:12 --------- d-----w C:\Program Files\K-Lite Codec Pack
2008-06-02 20:12 --------- d-----w C:\Program Files\CCleaner
2008-06-02 19:24 --------- d-----w C:\Users\James\AppData\Roaming\Media Player Classic
2008-06-02 19:24 --------- d-----w C:\Users\James\AppData\Roaming\DivX
2008-06-02 19:14 --------- d-----w C:\Users\James\AppData\Roaming\RegistrySmart
2008-06-02 19:14 --------- d-----w C:\Program Files\RegistrySmart
2008-06-02 19:05 --------- d-----w C:\Users\James\AppData\Roaming\uTorrent
2008-06-01 14:19 --------- d-----w C:\Users\James\AppData\Roaming\JAM Software
2008-06-01 13:32 --------- d-----w C:\Users\James\AppData\Roaming\Intel
2008-06-01 12:13 --------- d-----w C:\Program Files\CA Yahoo! Anti-Spy
2008-06-01 11:08 --------- d---a-w C:\ProgramData\TEMP
2008-06-01 11:04 --------- d-----w C:\Users\James Challenor\AppData\Roaming\CleanMyPC Software
2008-05-31 20:03 --------- d-----w C:\Program Files\Elaborate Bytes
2008-05-28 15:51 --------- d-----w C:\Program Files\Google
2008-05-26 23:06 270 ----a-w C:\Users\James Challenor\AppData\Roaming\wklnhst.dat
2008-05-22 18:20 --------- d-----w C:\ProgramData\Trymedia
2008-05-19 15:43 --------- d-----w C:\Users\Emily Challenor-****\AppData\Roaming\Intel
2008-05-18 13:55 --------- d-----w C:\Program Files\SopCast
2008-05-16 10:04 --------- d-----w C:\Users\James Challenor\AppData\Roaming\Vso
2008-05-16 02:02 --------- d-----w C:\Program Files\Windows Mail
2008-05-13 09:41 --------- d-----w C:\ProgramData\SUPERAntiSpyware.com
2008-05-12 20:18 --------- d-----w C:\Program Files\Virtual Earth 3D
2008-05-12 18:45 --------- d-----w C:\Program Files\TerraGame
2008-05-12 18:43 2,560 ----a-w C:\Windows\_MSRSTRT.EXE
2008-05-12 18:23 --------- d-----w C:\Users\James Challenor\AppData\Roaming\Sports Interactive
2008-05-12 17:51 --------- d-----w C:\Program Files\Common Files\TerraGame Shared
2008-05-12 16:06 --------- d-----w C:\ProgramData\vsosdk
2008-05-11 23:46 47,360 ----a-w C:\Windows\system32\drivers\pcouffin.sys
2008-05-11 23:46 47,360 ----a-w C:\Users\James Challenor\AppData\Roaming\pcouffin.sys
2008-05-11 23:46 --------- d-----w C:\Program Files\VSO
2008-05-11 23:37 --------- d-----w C:\Program Files\Avi2Dvd
2008-05-11 23:28 --------- d-----w C:\Program Files\AviSynth 2.5
2008-04-21 19:13 --------- d-----w C:\ProgramData\Nero
2008-04-21 19:13 --------- d-----w C:\Program Files\Common Files\Nero
2008-04-21 18:47 --------- d-----w C:\Users\James Challenor\AppData\Roaming\Nero
2008-04-21 17:25 --------- d-----w C:\ProgramData\Roxio
2008-04-20 23:44 158,456 ------w C:\Windows\System32\pxwma.dll
2008-04-20 12:03 --------- d-----w C:\Users\James Challenor\AppData\Roaming\vlc
2008-04-20 11:57 --------- d-----w C:\Program Files\VideoLAN
2008-04-12 16:34 --------- d-----w C:\Users\James Challenor\AppData\Roaming\Roxio
2008-04-10 19:00 --------- d-----w C:\Users\James Challenor\AppData\Roaming\JAM Software
2008-04-10 18:59 --------- d-----w C:\Program Files\JAM Software
2008-04-10 18:15 --------- d-----w C:\Users\Emily Challenor-****\AppData\Roaming\uTorrent
2008-04-09 18:44 --------- d-----w C:\Program Files\DellTPad
2008-03-27 18:24 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-03-27 18:21 3,504,696 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-03-27 18:21 3,470,392 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-03-27 18:20 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-03-27 18:20 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-03-27 18:20 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-03-27 18:20 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-03-27 18:16 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2008-03-27 18:01 53,080 ----a-w C:\Windows\System32\wuauclt.exe
2008-03-27 18:01 43,352 ----a-w C:\Windows\System32\wups2.dll
2008-03-27 18:01 1,712,984 ----a-w C:\Windows\System32\wuaueng.dll
2008-03-27 18:01 1,524,224 ----a-w C:\Windows\System32\wucltux.dll
2008-03-27 18:00 80,896 ----a-w C:\Windows\System32\wudriver.dll
2008-03-27 18:00 549,720 ----a-w C:\Windows\System32\wuapi.dll
2008-03-27 18:00 33,624 ----a-w C:\Windows\System32\wups.dll
2008-03-27 17:59 31,232 ----a-w C:\Windows\System32\wuapp.exe
2008-03-27 17:59 163,000 ----a-w C:\Windows\System32\wuwebv.dll
2008-03-20 20:14 87,040 ----a-w C:\Windows\System32\msoert2.dll
2008-03-20 20:14 39,424 ----a-w C:\Windows\System32\ACCTRES.dll
2008-03-20 20:14 229,888 ----a-w C:\Windows\System32\msshsq.dll
2008-03-20 20:14 205,824 ----a-w C:\Windows\System32\msoeacct.dll
2008-03-20 20:14 2,048 ----a-w C:\Windows\System32\msxml6r.dll
2008-03-20 20:14 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2008-03-20 20:13 750,080 ----a-w C:\Windows\System32\qmgr.dll
2008-03-20 20:11 8,704 ----a-w C:\Windows\System32\hcrstco.dll
2008-03-20 20:11 8,704 ----a-w C:\Windows\System32\hccoin.dll
2008-03-20 20:11 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2008-03-20 20:11 7,680 ----a-w C:\Windows\System32\spwmp.dll
2008-03-20 20:11 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2008-03-20 20:11 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2008-03-20 20:09 633,856 ----a-w C:\Windows\System32\user32.dll
2008-03-20 20:09 414,208 ----a-w C:\Windows\System32\msscp.dll
2008-03-20 20:06 2,048 ----a-w C:\Windows\System32\tzres.dll
2008-03-20 20:05 84,480 ----a-w C:\Windows\System32\INETRES.dll
2008-03-20 20:05 737,792 ----a-w C:\Windows\System32\inetcomm.dll
2008-03-20 20:05 2,048 ----a-w C:\Windows\System32\msxml3r.dll
2008-03-20 20:05 1,191,936 ----a-w C:\Windows\System32\msxml3.dll
2008-03-20 20:04 49,664 ----a-w C:\Windows\System32\csrsrv.dll
2008-03-20 20:04 376,320 ----a-w C:\Windows\System32\winsrv.dll
2008-03-20 20:04 104,448 ----a-w C:\Windows\System32\DWWIN.EXE
2008-03-20 20:04 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-03-20 20:01 5,120 ----a-w C:\Windows\System32\wmi.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
2008-06-02 22:50 2050816 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-06-02 22:50 2050816]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-06-02 22:50 2050816]

[HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
[HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 10:23 202544]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:35 125440]
"InetChk"="C:\Users\JAMESC~1\AppData\Local\Temp\ms 1210626751.exe" [ ]
"0a0a39bb"="C:\Users\JAMESC~1\AppData\Local\Temp\v nvmvwdp.dll" [ ]
"cmds"="C:\Users\JAMESC~1\AppData\Local\Temp\awTKa Xqr.dll" [ ]
"Uniblue RegistryBooster 2"="c:\program files\uniblue\registrybooster 2\StartRegistryBooster.exe" [ ]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 13:36 201728]
"BM09390a27"="C:\Users\JAMESC~1\AppData\Local\Temp \jqosovlq.dll" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-03-20 21:04 1006264]
"ECenter"="C:\Dell\E-Center\EULALauncher.exe" [2007-05-25 07:03 17920]
"Apoint"="C:\Program Files\DellTPad\Apoint.exe" [2007-10-25 13:31 167936]
"OEM02Mon.exe"="C:\Windows\OEM02Mon.exe" [2007-08-28 06:51 36864]
"SigmatelSysTrayApp"="C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-11-12 12:07 405504]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [2007-12-15 04:54 137752]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2007-12-15 04:53 154136]
"Persistence"="C:\Windows\system32\igfxpers.ex e" [2007-12-15 04:53 133656]
"SunJavaUpdateSched"="c:\Program Files\Java\jre1.6.0\bin\jusched.exe" [2008-03-20 13:31 77824]
"DELL Webcam Manager"="C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 17:43 118784]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 14:00 174872]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-03-20 13:41 1838592]
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-03 23:33 582992]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 10:24 16384]
"PCMService"="C:\Program Files\Dell\MediaDirect\PCMService.exe" [2007-11-01 16:39 189736]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-03-27 20:22 185896]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [ ]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 10:23 202544]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-06-02 22:49 1177368]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2008-03-20 13:32:30 50688]
QuickSet.lnk - C:\Program Files\Dell\QuickSet\quickset.exe [2007-09-07 17:27:08 1180952]

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\system]
"LogonHoursAction"= 2 (0x2)
"DontDisplayLogonHoursWarnings"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
"{711CAC3D-4656-4A00-98D6-A04681191107}"= Profile=Private|Profile=Public|C:\Program Files\Common Files\Mcafee\MNA\McNaSvc.exe:McAfee Network Agent
"{004E9152-7B61-4E50-A16A-5ECEBEC48AE4}"= C:\Program Files\Dell\MediaDirect\MediaDirect.exeell MediaDirect
"{B544BB23-DEA2-44EC-B109-0AD7EF6C32EE}"= C:\Program Files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program
"{6E0FC739-9228-4EF6-88C8-EF7EBB3CB351}"= C:\Program Files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine. exe:Cyberlink Media Server Browser Engine
"{51C7F458-3068-4408-8BF4-329472192810}"= C:\Program Files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe: CyberLink Media Server
"{E6E9B4A5-F5BB-4143-996F-62CC3A7B723D}"= UDP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{26A8F66A-E6BD-4585-9914-D20C76EE1593}"= TCP:C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:Football Manager 2008
"{A0B6BB1F-5F5A-493B-A454-00628F3A4F2B}"= C:\Program Files\AVG\AVG8\avgupd.exe:avgupd.exe
"{468128AD-57A2-4725-8BE4-487F73DF36BA}"= C:\Program Files\AVG\AVG8\avgemc.exe:avgemc.exe

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|S vc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\Windows\system32\Drivers\avgldx86.sys [2008-06-02 22:50]
R2 AESTFilters;Andrea ST Filters Service;C:\Windows\system32\aestsrv.exe [2007-11-12 12:07]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-06-02 22:49]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-06-02 22:49]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-11-15 10:23]
R3 AvgWfpX;AVG8 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfpx.sys [2008-06-02 22:50]
R3 igfx;igfx;C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-12-15 04:53]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;C:\Windows\system32\drivers\IntcHdmi.sys [2007-12-15 04:54]
R3 OEM02Dev;Creative Camera OEM002 Driver;C:\Windows\system32\DRIVERS\OEM02Dev.sys [2007-08-28 06:51]
R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;C:\Windows\system32\DRIVERS\OEM02Vfx.sys [2007-08-28 06:51]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x86.sys [2007-09-29 06:31]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 08:36]

*Newly Created Service* - CATCHME
.
Contents of the 'Scheduled Tasks' folder
"2008-05-15 00:00:00 C:\Windows\Tasks\McDefragTask.job"
- c:\PROGRA~1\mcafee\mqc\QcConsol.exe'
"2008-05-01 00:00:00 C:\Windows\Tasks\McQcTask.job"
- c:\PROGRA~1\mcafee\mqc\QcConsol.exe
.
************************************************** ************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-07 00:59:45
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
Completion time: 2008-06-07 1:01:38
ComboFix-quarantined-files.txt 2008-06-07 00:01:26

The system cannot find message text for message number 0x2379 in the message file for Application.
The system cannot find message text for message number 0x2379 in the message file for Application.

237 --- E O F --- 2008-06-06 17:51:05
JamesChall is offline   Reply With Quote

Reply

Bookmarks

Tags
fixed, Fixed:, pre, results, work
Similar discussions...
Thread Thread Starter Forum Replies Last Post
Pending: results for Hijack this joshuabengrove [Pending] HJT Logs 2 04-03-2009 03:48 AM
Pending: Games randomly deciding to work and not work. GiantSquid PC Games 7 01-20-2009 05:01 PM
RAM Test Results Cobracon The Lounge 1 07-07-2008 12:17 PM
Fixed: Prework results Isorene [Fixed] Hijackthis! Logs 32 06-21-2008 12:23 AM
Strange results tall_jono Unfinished Threads 25 07-17-2007 11:45 AM

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On




All times are GMT. The time now is 04:16 AM.
Powered by vBulletin
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2