Hello Ramachan

Welcome to PC Help Forum

Please click this link called Prework and follow the instructions, once you have acknowledged this in this thread I shall move it to the Security forum and a member of the Security Team will assist you.

Thanks, and sorry about that Wolfeymole. I went through the instructions, and am copying the dumps / attaching the files requested.

Some additional info which may help on identifying the problem:

1. I am occasionally getting a blue screen of death when my system crashes, but I can't see the error report. (I've disabled automatic restarts on system failures, but the system still restarts.)

2. The only two updates I have made to my system based on the original purchase configuration was to upgrade to an NVidia GEForce 7600 GS, and to replace the power supply because it once blew out from being plugged in to a 220V outlet without changing the PSU setting.

3. In the past few months, I've seen errors saying that the system has Low Battery Voltage on start up, but everything was working fine.

4. Since my last post, I was able to log on once (after restarting many many times, and I haven't been able to log in on "Normal" mode again). I updated the NVidia drivers from NVidia's website, but that didn't help.

Thanks in advance for all the help. Here's the information requested:

DDS Text:


DDS (Ver_09-10-13.01) - NTFSx86 NETWORK
Run by Kartik Ramachandran at 11:19:30.03 on Tue 10/20/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.645 [GMT 5.5:30]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\LVComsX.exe
C:\Documents and Settings\Kartik Ramachandran\Desktop\RootRepeal.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Kartik Ramachandran\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uDefault_Page_URL = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8
mDefault_Search_URL = hxxp://www.google.com/ie
mSearch Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com/
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
mWinlogon: Userinit=c:\windows\system32\userinit.exe,c:\windo ws\system32\sdra64.exe,
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: &Google Web Accelerator Helper: {69a87b7d-de56-4136-9655-716ba50c19c7} - c:\program files\google\web accelerator\GoogleWebAccToolbar.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: IeCaptureBho Object: {7c1ce531-09e9-4fc5-9803-1c2956615786} - c:\program files\google\google desktop search\GoogleDesktopIE.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.3.4501.1418\s wg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Google Web Accelerator: {db87bfa2-a2e3-451e-8e5a-c89982d87cbf} - c:\program files\google\web accelerator\GoogleWebAccToolbar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
EB: &Research: {ff059e31-cc5a-4e2e-bf3b-96e929d65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
uRun: [MoneyAgent] "c:\program files\microsoft money\system\mnyexpr.exe"
uRun: [LogitechSoftwareUpdate] "c:\program files\logitech\video\ManifestEngine.exe" boot
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [googletalk] "c:\program files\google\google talk\googletalk.exe" /autostart
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNo tifier.exe"
uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
uRun: [Google Update] "c:\documents and settings\kartik ramachandran\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
mRun: [DVDSentry] c:\windows\system32\DSentry.exe
mRun: [PCMService] "c:\program files\dell\media experience\PCMService.exe"
mRun: [diagent] "c:\program files\creative\sblive\diagnostics\diagent.exe" startup
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r
mRun: [LVCOMSX] c:\windows\system32\LVCOMSX.EXE
mRun: [LogitechVideoRepair] c:\program files\logitech\video\ISStart.exe
mRun: [LogitechVideoTray] c:\program files\logitech\video\LogiTray.exe
mRun: [sealmon] c:\program files\sealedmedia\sealmon.exe
mRun: [mmtask] "c:\program files\musicmatch\musicmatch jukebox\mmtask.exe"
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [LifeCam] "c:\program files\microsoft lifecam\LifeExp.exe"
mRun: [VX1000] c:\windows\vVX1000.exe
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /install
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe " -t
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ado ber~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dig ita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\log ite~1.lnk - c:\program files\logitech\desktop messenger\8876480\program\LDMConf.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\run goo~1.lnk - c:\program files\google\web accelerator\GoogleWebAccWarden.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\vpn cli~1.lnk - c:\windows\installer\{d25122bc-a60e-4663-b602-b01718f12044}\Icon3E5562ED7.ico
mPolicies-explorer: <NO NAME> =
IE: &Clean Traces - c:\program files\dap\privacy package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\dap\dapextie.htm
IE: Download &all with DAP - c:\program files\dap\dapextie2.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
Trusted Zone: microsoft.com\support
Trusted Zone: microsoft.com\update
Trusted Zone: microsoft.com\windowsupdate
Trusted Zone: windowsupdate.com \download
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/0/5/7/05796dde-b2ba-4eef-8da4-f99c7e0c9b92/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - hxxps://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1255983607656
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
Notify: ssqpn - c:\windows\system32\ssqpn.dll
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\window~4\MpShHook.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\kartik~1\applic~1\mozilla\firefox\prof iles\l4z0e1aj.default\
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\avg\avg8\firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\kartik ramachandran\application data\mozilla\firefox\profiles\l4z0e1aj.default\ext ensions\{e2883e8f-472f-4fb0-9522-ac9bf37916a7}\plugins\np_gp.dll
FF - plugin: c:\documents and settings\kartik ramachandran\local settings\application data\google\update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\quicktime\plugins\npqtplugin8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-7-20 335240]
S2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2008-7-20 297752]
S3 getPlusHelper;getPlus(R) Helper;c:\windows\system32\svchost.exe -k getPlusHelper [2002-8-29 14336]
S3 PciCon;PciCon;\??\e:\pcicon.sys --> e:\PciCon.sys [?]
S3 PhilCam8116_XP;Logitech QuickCam Pro 3000(PID_08B1);c:\windows\system32\drivers\CamDrL2 0.sys [2005-3-29 245760]

=============== Created Last 30 ================

2009-10-20 02:04 <DIR> --d----- c:\docume~1\alluse~1\applic~1\NVIDIA Corporation
2009-10-20 02:04 <DIR> --d----- c:\program files\NVIDIA Corporation
2009-10-20 02:03 <DIR> --d----- C:\NVIDIA
2009-10-20 02:00 <DIR> --d----- c:\program files\SystemRequirementsLab
2009-10-20 01:06 <DIR> --d----- c:\program files\Trend Micro
2009-10-19 18:20 588 a------- c:\windows\system32\settingsbkup.sfm
2009-10-19 18:20 588 a------- c:\windows\system32\settings.sfm
2009-10-19 18:10 <DIR> --d----- c:\windows\system32\NtmsData
2009-10-19 18:06 15,064 a------- c:\windows\system32\wuapi.dll.mui
2009-10-19 17:38 201,050 a------- c:\windows\system32\nvapps.nvb
2009-10-19 17:37 <DIR> --d----- c:\windows\NV39482548.TMP
2009-10-19 11:26 153,088 -------- c:\windows\system32\dllcache\triedit.dll
2009-10-19 11:24 1,315,328 -------- c:\windows\system32\dllcache\msoe.dll
2009-10-19 11:24 128,512 -------- c:\windows\system32\dllcache\dhtmled.ocx
2009-10-19 11:19 1,089,593 -------- c:\windows\system32\dllcache\ntprint.cat
2009-10-19 10:28 <DIR> --d----- c:\windows\system32\XPSViewer
2009-10-19 10:26 597,504 -------- c:\windows\system32\dllcache\printfilterpipelinesv c.exe
2009-10-19 10:26 117,760 -------- c:\windows\system32\prntvpt.dll
2009-10-19 10:26 89,088 -------- c:\windows\system32\dllcache\filterpipelineprintpr oc.dll
2009-10-19 10:26 575,488 -------- c:\windows\system32\xpsshhdr.dll
2009-10-19 10:26 575,488 -------- c:\windows\system32\dllcache\xpsshhdr.dll
2009-10-19 10:26 1,676,288 -------- c:\windows\system32\xpssvcs.dll
2009-10-19 10:26 1,676,288 -------- c:\windows\system32\dllcache\xpssvcs.dll
2009-10-19 10:26 <DIR> --d----- C:\9557d76d4a143b04a16f50ac8c46
2009-09-27 18:20 2,173,544 a------- c:\windows\system32\nvcplui.exe
2009-09-27 18:20 420,456 a------- c:\windows\system32\nvcpl.cpl
2009-09-27 18:20 81,920 a------- c:\windows\system32\nvwddi.dll
2009-09-27 16:12 2,194,024 a------- c:\windows\system32\nvcuvid.dll
2009-09-27 16:12 1,714,792 a------- c:\windows\system32\nvcuvenc.dll
2009-09-27 16:12 1,604,482 a------- c:\windows\system32\nvdata.bin

==================== Find3M ====================

2009-10-12 13:30 335,240 a------- c:\windows\system32\drivers\avgldx86.sys
2009-10-12 13:30 11,952 a------- c:\windows\system32\avgrsstx.dll
2009-09-27 18:19 3,166,208 a------- c:\windows\system32\nvwss.dll
2009-09-27 18:19 4,026,368 a------- c:\windows\system32\nvvitvs.dll
2009-09-27 18:19 3,547,136 a------- c:\windows\system32\nvgames.dll
2009-09-27 18:19 1,286,144 a------- c:\windows\system32\nvmobls.dll
2009-09-27 18:19 188,416 a------- c:\windows\system32\nvmccss.dll
2009-09-27 18:19 13,918,208 a------- c:\windows\system32\nvcpl.dll
2009-09-27 18:19 4,935,680 a------- c:\windows\system32\nvdisps.dll
2009-09-27 18:19 172,100 a------- c:\windows\system32\nvsvc32.exe
2009-09-27 18:19 143,360 a------- c:\windows\system32\nvcolor.exe
2009-09-27 18:19 86,016 a------- c:\windows\system32\nvmctray.dll
2009-09-27 18:19 229,376 a------- c:\windows\system32\nvmccs.dll
2009-09-27 16:12 10,756,096 a------- c:\windows\system32\nvoglnt.dll
2009-09-27 16:12 7,655,872 a------- c:\windows\system32\drivers\nv4_mini.sys
2009-09-27 16:12 7,655,872 a------- c:\windows\system32\dllcache\nv4_mini.sys
2009-09-27 16:12 5,900,416 a------- c:\windows\system32\nv4_disp.dll
2009-09-27 16:12 2,007,040 a------- c:\windows\system32\nvcuda.dll
2009-09-27 16:12 888,832 a------- c:\windows\system32\nvapi.dll
2009-09-27 16:12 490,088 a------- c:\windows\system32\nvudisp.exe
2009-09-27 16:12 170,600 a------- c:\windows\system32\nvcodins.dll
2009-09-27 16:12 170,600 a------- c:\windows\system32\nvcod.dll
2009-09-25 11:07 667,136 a------- c:\windows\system32\wininet.dll
2009-09-25 11:07 667,136 -------- c:\windows\system32\dllcache\wininet.dll
2009-09-25 11:07 627,712 -------- c:\windows\system32\dllcache\urlmon.dll
2009-09-25 11:07 3,070,976 -------- c:\windows\system32\dllcache\mshtml.dll
2009-09-25 11:07 1,509,888 -------- c:\windows\system32\dllcache\shdocvw.dll
2009-09-25 11:07 81,920 a------- c:\windows\system32\ieencode.dll
2009-09-25 11:07 81,920 -------- c:\windows\system32\dllcache\ieencode.dll
2009-09-24 09:24 490,088 a------- c:\windows\system32\NVUNINST.EXE
2009-09-11 19:48 136,192 a------- c:\windows\system32\msv1_0.dll
2009-09-11 19:48 136,192 -------- c:\windows\system32\dllcache\msv1_0.dll
2009-09-05 02:33 58,880 a------- c:\windows\system32\msasn1.dll
2009-09-05 02:33 58,880 -------- c:\windows\system32\dllcache\msasn1.dll
2009-08-26 13:30 247,326 a------- c:\windows\system32\strmdll.dll
2009-08-26 13:30 247,326 -------- c:\windows\system32\dllcache\strmdll.dll
2009-08-13 20:46 512,000 -------- c:\windows\system32\dllcache\jscript.dll
2009-08-06 19:24 327,896 a------- c:\windows\system32\dllcache\wucltui.dll
2009-08-06 19:24 35,552 a------- c:\windows\system32\dllcache\wups.dll
2009-08-06 19:24 53,472 a------- c:\windows\system32\dllcache\wuauclt.exe
2009-08-06 19:24 96,480 a------- c:\windows\system32\dllcache\cdm.dll
2009-08-06 19:23 575,704 a------- c:\windows\system32\dllcache\wuapi.dll
2009-08-06 19:23 1,929,952 a------- c:\windows\system32\dllcache\wuaueng.dll
2009-08-06 19:23 215,904 a------- c:\windows\system32\muweb.dll
2009-08-05 14:31 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-08-05 14:31 204,800 -------- c:\windows\system32\dllcache\mswebdvd.dll
2009-08-04 20:44 2,189,184 -------- c:\windows\system32\dllcache\ntoskrnl.exe
2009-08-04 20:43 2,145,280 a------- c:\windows\system32\ntoskrnl.exe
2009-08-04 20:43 2,145,280 -------- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-08-04 19:52 1,193,832 a------- c:\windows\system32\FM20.DLL
2009-08-04 19:50 2,023,936 a------- c:\windows\system32\ntkrnlpa.exe
2009-08-04 19:50 2,023,936 -------- c:\windows\system32\dllcache\ntkrpamp.exe
2009-08-04 19:50 2,066,048 -------- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-07-29 10:07 119,808 a------- c:\windows\system32\t2embed.dll
2009-07-29 10:07 81,920 a------- c:\windows\system32\fontsub.dll
2009-07-29 10:07 119,808 -------- c:\windows\system32\dllcache\t2embed.dll
2009-07-29 10:07 81,920 -------- c:\windows\system32\dllcache\fontsub.dll
2008-06-29 15:15 10,856 a--sh--- c:\windows\system32\KGyGaAvL.sys

============= FINISH: 11:19:57.00 ===============

SecurityCheck Information:

Results of screen317's Security Check version 0.99.0
Windows XP Service Pack 3
``````````````````````````````
Antivirus/Firewall Check:
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Enabled!
AVG Free 8.5
``````````````````````````````
Anti-malware/Other Utilities Check:
Windows Defender
Windows Defender Signatures
HijackThis 2.0.2
Java(TM) 6 Update 11
Java 2 Runtime Environment, SE v1.4.2
Out of date Java installed!
Adobe Flash Player 10
Adobe Reader 7.0.9
Out of date Adobe Reader installed!
``````````````````````````````
Process Check:
objlist.exe by Laurent
``````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

`````````End of Log```````````

Your java needs updating.Apart from that,I see no problems..

Hello Ramachan

Has the assistance provided at PC Help Forum assisted you in remedying your issue yet?

An update would be most appreciated.

Thank you.

Marked as Pending