Author Topic: Redirecting & can't run AV, spybot (Read 2583 times)

rmccabe · « **Reply #20 on:** October 03, 2010, 12:46:55 PM »

Hello, Things seem to be running fine, here is the MBRCheck log.

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version:      Windows XP Home Edition
Windows Information:      Service Pack 3 (build 2600)
Logical Drives Mask:      0x000005fc

Kernel Drivers (total 125):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E4000 \WINDOWS\system32\hal.dll
0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
0xB9F79000 ACPI.sys
0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xB9F68000 pci.sys
0xBA0A8000 isapnp.sys
0xBA0B8000 ohci1394.sys
0xBA0C8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xBA5AC000 intelide.sys
0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xBA0D8000 MountMgr.sys
0xB9F49000 ftdisk.sys
0xBA330000 PartMgr.sys
0xBA338000 pavboot.sys
0xBA0E8000 VolSnap.sys
0xB9F31000 atapi.sys
0xB9F0E000 fasttx2k.sys
0xB9EF6000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
0xBA0F8000 disk.sys
0xBA108000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB9ED6000 fltmgr.sys
0xB9EC4000 sr.sys
0xBA118000 PxHelp20.sys
0xB9EAD000 KSecDD.sys
0xB9E20000 Ntfs.sys
0xB9DF3000 NDIS.sys
0xB9DD9000 Mup.sys
0xBA2C8000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xB960D000 \SystemRoot\system32\DRIVERS\ialmnt5.sys
0xB95F9000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xB95D1000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xBA378000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xB95AD000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xBA380000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xB959B000 \SystemRoot\system32\DRIVERS\Rtlnicxp.sys
0xB9465000 \SystemRoot\system32\DRIVERS\AGRSM.sys
0xBA388000 \SystemRoot\System32\Drivers\Modem.SYS
0xB9451000 \SystemRoot\system32\DRIVERS\parport.sys
0xBA2D8000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xBA390000 \SystemRoot\system32\DRIVERS\PS2.sys
0xBA398000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xBA3A0000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xBA2E8000 \SystemRoot\system32\DRIVERS\imapi.sys
0xBA3A8000 \SystemRoot\System32\Drivers\ElbyCDFL.sys
0xBA2F8000 \SystemRoot\System32\Drivers\AnyDVD.sys
0xBA5E4000 \SystemRoot\System32\Drivers\ElbyDelay.sys
0xBA308000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xBA318000 \SystemRoot\system32\DRIVERS\redbook.sys
0xB942E000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA3B0000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0xBA759000 \SystemRoot\system32\DRIVERS\audstub.sys
0xBA168000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xB9D56000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB9417000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xB9762000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xB9752000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xBA3B8000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xB9406000 \SystemRoot\system32\DRIVERS\psched.sys
0xB9742000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xBA3C0000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xBA3C8000 \SystemRoot\system32\DRIVERS\raspti.sys
0xB9732000 \SystemRoot\system32\DRIVERS\termdd.sys
0xBA5E6000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB93A8000 \SystemRoot\system32\DRIVERS\update.sys
0xB9D46000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xB9722000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xA8345000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xA8321000 \SystemRoot\system32\drivers\portcls.sys
0xB96F2000 \SystemRoot\system32\drivers\drmk.sys
0xB96E2000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xBA5F6000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xBA5F8000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xBA6E1000 \SystemRoot\System32\Drivers\Null.SYS
0xBA5FA000 \SystemRoot\System32\Drivers\Beep.SYS
0xBA3E0000 \SystemRoot\System32\drivers\vga.sys
0xBA5FC000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xBA5FE000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xBA3E8000 \SystemRoot\System32\Drivers\Msfs.SYS
0xBA3F0000 \SystemRoot\System32\Drivers\Npfs.SYS
0xBA570000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xA82C6000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xA826D000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xA8245000 \SystemRoot\system32\DRIVERS\netbt.sys
0xA8223000 \SystemRoot\System32\drivers\afd.sys
0xBA178000 \SystemRoot\system32\DRIVERS\netbios.sys
0xBA3F8000 \SystemRoot\system32\DRIVERS\ssmdrv.sys
0xA81F8000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xA8160000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xBA198000 \SystemRoot\System32\Drivers\Fips.SYS
0xA813A000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xBA1A8000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xA803C000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
0xA801A000 \SystemRoot\system32\DRIVERS\avipbb.sys
0xBA602000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
0xBA400000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xBA408000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xBA410000 \SystemRoot\system32\DRIVERS\epusbsto.sys
0xA7FF6000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xA7FDE000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xBA618000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xA8319000 \SystemRoot\System32\drivers\Dxapi.sys
0xBA440000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xBA7D7000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF020000 \SystemRoot\System32\ialmdnt5.dll
0xBF012000 \SystemRoot\System32\ialmrnt5.dll
0xBF03F000 \SystemRoot\System32\ialmdev5.DLL
0xBF06B000 \SystemRoot\System32\ialmdd5.DLL
0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
0xA7F29000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0xA7F11000 \SystemRoot\system32\DRIVERS\AegisP.sys
0xA7F0D000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA7BF4000 \SystemRoot\system32\drivers\wdmaud.sys
0xA7E81000 \SystemRoot\system32\drivers\sysaudio.sys
0xA79BF000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xA7C71000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xBA5D0000 \SystemRoot\System32\Drivers\ElbyCDIO.sys
0xA7508000 \SystemRoot\system32\DRIVERS\srv.sys
0xBA360000 \??\C:\WINDOWS\system32\drivers\symlcbrd.sys
0xA6F9C000 \SystemRoot\System32\Drivers\HTTP.sys
0xA6FF9000 \??\C:\WINDOWS\system32\GTNDIS5.SYS
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 49):
0 System Idle Process
4 System
468 C:\WINDOWS\system32\smss.exe
544 csrss.exe
568 C:\WINDOWS\system32\winlogon.exe
612 C:\WINDOWS\system32\services.exe
624 C:\WINDOWS\system32\lsass.exe
796 C:\WINDOWS\system32\svchost.exe
848 svchost.exe
916 C:\WINDOWS\system32\svchost.exe
980 svchost.exe
1112 svchost.exe
1324 C:\WINDOWS\explorer.exe
1408 C:\WINDOWS\system32\spoolsv.exe
1464 C:\Program Files\Avira\AntiVir Desktop\sched.exe
1708 svchost.exe
1768 C:\WINDOWS\system32\hkcmd.exe
1784 C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
1808 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
1816 C:\hp\KBD\kbd.exe
1824 C:\WINDOWS\system32\hphmon06.exe
1864 C:\WINDOWS\AGRSMMSG.exe
1956 C:\Program Files\iTunes\iTunesHelper.exe
1972 C:\Program Files\Common Files\Java\Java Update\jusched.exe
1996 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
2008 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
2036 C:\WINDOWS\system32\ctfmon.exe
188 C:\Program Files\SpywareGuard\sgmain.exe
228 C:\Program Files\Avira\AntiVir Desktop\avguard.exe
244 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
400 C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
432 C:\Program Files\Bonjour\mDNSResponder.exe
436 C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
488 C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
588 C:\Program Files\SpywareGuard\sgbhp.exe
628 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
1064 C:\Program Files\Java\jre6\bin\jqs.exe
1176 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
1556 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
1592 C:\WINDOWS\system32\HPZipm12.exe
2052 C:\WINDOWS\system32\svchost.exe
2088 C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
2868 C:\Program Files\iPod\bin\iPodService.exe
3192 alg.exe
3596 C:\WINDOWS\SOUNDMAN.EXE
3724 C:\WINDOWS\ALCMTR.EXE
3744 C:\WINDOWS\ALCWZRD.EXE
356 C:\WINDOWS\system\hpsysdrv.exe
976 C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000002`02074000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (FAT32)

PhysicalDrive0 Model Number: Maxtor6L200M0, Rev: BANC1G10

Size Device Name MBR Status
--------------------------------------------
186 GB \\.\PhysicalDrive0 Legit MBR code detected
SHA1: F75A10171F7488C11BA9A98CEC3D186D7A8D3972

Done!

rmccabe · « **Reply #21 on:** October 04, 2010, 03:52:49 AM »

cumputer still seems to be slow while on the web. Here is a current comboFix log.

ComboFix 10-10-03.01 - HP_Owner 10/04/2010 0:38.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3063.2548 [GMT -8:00]
Running from: c:\documents and settings\HP_Owner\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((( Files Created from 2010-09-04 to 2010-10-04 )))))))))))))))))))))))))))))))
.

2010-09-28 07:18 . 2010-09-28 08:27   --------   d-----w-   c:\windows\system32\NtmsData
2010-09-28 07:10 . 2010-09-28 07:10   --------   d-----w-   c:\documents and settings\HP_Owner\Application Data\Avira
2010-09-28 07:01 . 2010-09-28 07:01   --------   d-----w-   c:\program files\Avira
2010-09-28 07:01 . 2010-09-28 07:01   --------   d-----w-   c:\documents and settings\All Users\Application Data\Avira
2010-09-28 07:01 . 2010-03-01 18:05   124784   ----a-w-   c:\windows\system32\drivers\avipbb.sys
2010-09-28 07:01 . 2010-02-16 22:24   60936   ----a-w-   c:\windows\system32\drivers\avgntflt.sys
2010-09-28 07:01 . 2009-05-11 20:49   45416   ----a-w-   c:\windows\system32\drivers\avgntdd.sys
2010-09-28 07:01 . 2009-05-11 20:49   22360   ----a-w-   c:\windows\system32\drivers\avgntmgr.sys
2010-09-28 06:29 . 2004-08-04 04:00   185344   ----a-w-   c:\windows\system32\Thawbrkr.dll
2010-09-28 06:29 . 2004-08-04 04:00   185344   ----a-w-   c:\windows\system32\dllcache\thawbrkr.dll
2010-09-28 06:29 . 2004-08-04 04:00   10752   ----a-w-   c:\windows\system32\dllcache\c_iscii.dll
2010-09-28 06:29 . 2004-08-04 04:00   10752   ----a-w-   c:\windows\system32\c_iscii.dll
2010-09-28 06:29 . 2004-08-04 04:00   5632   ----a-w-   c:\windows\system32\kbdusa.dll
2010-09-28 06:29 . 2004-08-04 04:00   5632   ----a-w-   c:\windows\system32\dllcache\kbdusa.dll
2010-09-28 06:29 . 2004-08-04 04:00   6144   ----a-w-   c:\windows\system32\ftlx041e.dll
2010-09-28 06:29 . 2004-08-04 04:00   6144   ----a-w-   c:\windows\system32\dllcache\ftlx041e.dll
2010-09-28 04:45 . 2010-09-28 04:45   --------   d-sh--w-   c:\documents and settings\Administrator\PrivacIE
2010-09-24 06:48 . 2010-09-24 06:48   388096   ----a-r-   c:\documents and settings\HP_Owner\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-09-24 06:48 . 2010-09-24 06:48   --------   d-----w-   c:\program files\Trend Micro
2010-09-24 06:33 . 2010-09-28 07:13   --------   d-----w-   c:\program files\SpywareBlaster
2010-09-24 04:08 . 2009-06-30 18:37   28552   ----a-w-   c:\windows\system32\drivers\pavboot.sys
2010-09-24 04:07 . 2010-09-24 04:07   --------   d-----w-   c:\program files\Panda Security
2010-09-24 04:04 . 2010-09-24 07:42   --------   d-----w-   c:\windows\BDOSCAN8
2010-09-23 03:52 . 2010-09-24 06:40   --------   d-sh--w-   c:\documents and settings\LocalService\IETldCache

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-01 17:22 . 2006-09-24 07:17   --------   d-----w-   c:\documents and settings\HP_Owner\Application Data\Apple Computer
2010-09-30 02:01 . 2006-02-01 14:58   --------   d-----w-   c:\program files\Google
2010-09-30 01:49 . 2010-05-21 02:31   --------   d-----w-   c:\program files\Microsoft Silverlight
2010-09-28 07:14 . 2008-03-19 07:00   --------   d---a-w-   c:\documents and settings\All Users\Application Data\TEMP
2010-09-28 07:13 . 2006-02-02 04:50   --------   d-----w-   c:\program files\SpywareGuard
2010-09-28 05:37 . 2006-02-02 04:48   --------   d-----w-   c:\program files\Spybot - Search & Destroy
2010-09-28 05:27 . 2006-02-01 05:25   75264   ----a-w-   c:\windows\system32\drivers\ipsec.sys
2010-09-25 18:03 . 2008-03-25 02:33   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2010-09-15 19:27 . 2006-02-06 16:34   8408   ----a-w-   c:\documents and settings\HP_Owner\Application Data\wklnhst.dat
2010-09-09 16:52 . 2007-03-20 02:06   --------   d-----w-   c:\documents and settings\HP_Owner\Application Data\FrostWire
2010-08-17 13:17 . 2006-02-01 05:26   58880   ----a-w-   c:\windows\system32\spoolsv.exe
2010-08-09 04:19 . 2006-02-04 17:57   --------   d-----w-   c:\documents and settings\HP_Owner\Application Data\AdobeUM
2010-08-08 05:18 . 2006-02-01 14:08   --------   d-----w-   c:\program files\Common Files\Java
2010-08-08 05:18 . 2006-02-01 14:08   --------   d-----w-   c:\program files\Java
2010-08-03 20:59 . 2010-08-03 20:59   503808   ----a-w-   c:\documents and settings\HP_Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-2ec19033-n\msvcp71.dll
2010-08-03 20:59 . 2010-08-03 20:59   499712   ----a-w-   c:\documents and settings\HP_Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-2ec19033-n\jmc.dll
2010-08-03 20:59 . 2010-08-03 20:59   348160   ----a-w-   c:\documents and settings\HP_Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-2ec19033-n\msvcr71.dll
2010-08-03 20:59 . 2010-08-03 20:59   61440   ----a-w-   c:\documents and settings\HP_Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-594a6c67-n\decora-sse.dll
2010-08-03 20:59 . 2010-08-03 20:59   12800   ----a-w-   c:\documents and settings\HP_Owner\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-594a6c67-n\decora-d3d.dll
2010-08-02 06:36 . 2006-02-02 03:48   65256   ----a-w-   c:\documents and settings\HP_Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-22 15:49 . 2006-02-01 05:26   590848   ----a-w-   c:\windows\system32\rpcrt4.dll
2010-07-22 05:57 . 2009-04-17 16:08   5120   ----a-w-   c:\windows\system32\xpsp4res.dll
2010-07-17 13:00 . 2010-05-12 03:37   423656   ----a-w-   c:\windows\system32\deployJava1.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-11-19 03:40   1196936   ----a-w-   c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-11-19 1196936]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-11-19 1196936]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-24 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-01-24 126976]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-26 245760]
"Ink Monitor"="c:\program files\EPSON\Ink Monitor\InkMonitor.exe" [2001-12-07 258118]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-09 54840]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-03 61440]
"HPHmon06"="c:\windows\system32\hphmon06.exe" [2004-06-08 659456]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 57344]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-30 88363]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-18 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-04-28 142120]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

c:\documents and settings\HP_Owner\Start Menu\Programs\Startup\
SpywareGuard.lnk - c:\program files\SpywareGuard\sgmain.exe [2003-8-29 360448]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^EPSON Status Monitor 3 Environment Check 2.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\EPSON Status Monitor 3 Environment Check 2.lnk
backup=c:\windows\pss\EPSON Status Monitor 3 Environment Check 2.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk
backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12   1695232   ----a-w-   c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\FrostWire\\FrostWire.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Documents and Settings\\HP_Owner\\Desktop\\internet tools\\programs\\FrostWire-4.10.0-3-Any-OS\\FrostWire\\FrostWire.exe"=

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [9/23/2010 8:08 PM 28552]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [9/27/2010 11:01 PM 135336]
R2 Belkin 54g Wireless USB Network Adapter Service;Belkin 54g Wireless USB Network Adapter;c:\program files\Belkin\Belkin Wireless Network Utility\WLService.exe [10/9/2006 6:28 PM 49152]
R3 EPUSBSTOR;EPSON USB Storage Driver;c:\windows\system32\drivers\epusbsto.sys [9/24/2006 10:40 PM 17976]
S2 gupdate1ca24505356b83a;Google Update Service (gupdate1ca24505356b83a);c:\program files\Google\Update\GoogleUpdate.exe [8/23/2009 4:17 PM 133104]
S3 bkn50USB;Belkin 54Mbps Wireless USB Network Adapter;c:\windows\system32\drivers\rt2500usb.sys [2/2/2006 1:43 PM 140416]
S3 SPCA506AV;USB Instant VCD;c:\windows\system32\drivers\CA506AV.SYS [4/28/2007 1:39 PM 178835]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - GTNDIS5
.
Contents of the 'Scheduled Tasks' folder

2010-10-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 21:34]

2010-10-04 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-07-21 00:15]

2010-10-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-24 00:17]

2010-10-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-24 00:17]

2010-10-04 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-11-19 03:40]
.
.
------- Supplementary Scan -------
.
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://ak.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - hxxp://downloads.ewido.net/ewidoOnlineScan.cab
.
- - - - ORPHANS REMOVED - - - -

SafeBoot-klmdb.sys

.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1262593418-1843708809-2277052518-1009\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-1262593418-1843708809-2277052518-1009\Software\YourCompanyName\YourProductName\Version*]
"VersionData"=hex:be,df,04,58,e0,df,b9,31,4a,29,48,62,18,36,ac,32,c6,ce,f0,ce,
63,76,17,d9,6c,aa,91,ae,30,c7,0b,e9,84,35,e2,fb,92,9b,cc,b4,a2,20,ac,21,c9,\

[HKEY_USERS\S-1-5-21-1262593418-1843708809-2277052518-1009\Software\Zepter Software\RegLib*f4a4a5d0\CloneDVD2/2]
"1"=dword:45d285da
"2"=dword:45d285da

[HKEY_LOCAL_MACHINE\System\ControlSet003\Hardware Profiles\0001\System\CurrentControlSet\Enum\¬ **\DirectSound\Device Presence]
"VxD"=dword:00000001
"WDM"=dword:00000001
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(368)
c:\windows\system32\WININET.dll
c:\program files\EPSON\Ink Monitor\inkpeek.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-10-04 00:48:13
ComboFix-quarantined-files.txt 2010-10-04 08:48
ComboFix2.txt 2010-09-28 05:17

Pre-Run: 42,009,010,176 bytes free
Post-Run: 42,175,660,032 bytes free

- - End Of File - - D6B9C13C3D663FD73A02D7BB61E16872

guestolo · « **Reply #22 on:** October 04, 2010, 10:46:36 PM »

Let's try the following
Go to START>>RUN>>Copy and paste the next command then hit OK

[color="#FF0000"]ComboFix /uninstall[/color]

This will uninstall ComboFix and it's components

Close down all Browsers, including this window
Access your Add and Remove programs and remove the following
Remove older versions of Java, this includes both
Java™ 6 Update 5
Java™ 6 Update 7

Remain in Add/Remove, uninstall the following
Ask Toolbar

when that's done, reboot the computer
Back in Windows
Open OTL.exe again, run a Quick scan and post the new log that opens

rmccabe · « **Reply #23 on:** October 04, 2010, 11:54:58 PM »

I deleted as requested, I also deleted some unused HP games, ran my clean up program. After clean up I lost a file for Avira, so I repaired the file When asked to "Repair" on the reinstall. Here is the OTL. log.

OTL logfile created on: 10/4/2010 8:43:59 PM - Run 3
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\HP_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 81.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 88.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 178.27 Gb Total Space | 43.01 Gb Free Space | 24.13% Space Free | Partition Type: NTFS
Drive D: | 8.02 Gb Total Space | 2.30 Gb Free Space | 28.74% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ROBANDBETH
Current User Name: HP_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/09/24 18:34:11 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
PRC - [2010/04/16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/04/01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/03/02 11:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/02/24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010/01/14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009/08/23 16:15:52 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2008/04/13 16:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/02/06 11:26:09 | 001,245,064 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
PRC - [2007/08/08 23:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2005/04/12 00:10:22 | 000,065,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCMTR.EXE
PRC - [2005/04/06 17:57:12 | 000,090,112 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2005/04/06 17:53:00 | 002,805,248 | ---- | M] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
PRC - [2005/02/25 22:34:02 | 000,245,760 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
PRC - [2003/08/29 19:05:35 | 000,360,448 | ---- | M] () -- C:\Program Files\SpywareGuard\sgmain.exe
PRC - [2003/08/29 11:14:56 | 000,233,472 | ---- | M] () -- C:\Program Files\SpywareGuard\sgbhp.exe
PRC - [2001/12/07 01:48:34 | 000,258,118 | ---- | M] (BillP Studios) -- C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
PRC - [2001/08/09 03:01:00 | 000,090,112 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe

========== Modules (SafeList) ==========

MOD - [2010/09/24 18:34:11 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
MOD - [2008/04/13 16:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2000/06/15 05:32:24 | 000,036,864 | ---- | M] (Tartan Software) -- C:\Program Files\EPSON\Ink Monitor\Inkpeek.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/04/16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/04/01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/02/24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2008/02/09 16:06:33 | 000,238,968 | ---- | M] (Symantec Corporation) [Disabled | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)
SRV - [2008/02/09 16:06:25 | 003,220,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)
SRV - [2008/02/06 11:26:09 | 001,245,064 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2007/08/08 23:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2001/08/09 03:01:00 | 000,090,112 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe -- (EPSONStatusAgent2)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIMMP)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIM)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\motmodem.sys -- (motmodem)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010/03/01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/02/16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/06/21 20:36:25 | 000,186,592 | ---- | M] (Jungo) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2009/05/11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/25 01:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2008/04/13 08:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/01/27 10:40:48 | 000,041,160 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2007/01/14 07:28:35 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2007/01/14 07:28:34 | 000,015,440 | ---- | M] (Elaborate Bytes AG) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV - [2006/12/20 11:31:34 | 000,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2006/12/13 15:41:48 | 000,011,984 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyDelay.sys -- (ElbyDelay)
DRV - [2006/10/27 20:13:10 | 000,022,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbsermpt.sys -- (usbsermpt)
DRV - [2006/10/15 10:41:05 | 000,010,344 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\symlcbrd.sys -- (symlcbrd)
DRV - [2005/12/12 17:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2)
DRV - [2005/04/15 17:05:42 | 002,564,032 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005/01/19 17:21:56 | 000,012,416 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PcdrNdisuio.sys -- (PcdrNdisuio)
DRV - [2004/10/15 20:52:48 | 000,071,168 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2004/08/04 03:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004/07/16 11:14:30 | 000,140,416 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2500usb.sys -- (bkn50USB)
DRV - [2004/06/29 16:07:18 | 001,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2004/03/17 23:10:40 | 000,113,664 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2003/12/03 00:23:20 | 000,142,336 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\fasttx2k.sys -- (fasttx2k)
DRV - [2002/12/13 00:06:40 | 000,129,875 | R--- | M] (Mars Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mr97310c.sys -- (MR97310_USB_DUAL_CAMERA)
DRV - [2002/07/30 12:09:12 | 000,178,835 | ---- | M] (Sunplus Technology Co. LTD.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CA506AV.SYS -- (SPCA506AV)
DRV - [2001/09/09 16:00:00 | 000,017,976 | ---- | M] (SEIKO EPSON CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epusbsto.sys -- (EPUSBSTOR)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

O1 HOSTS File: ([2010/09/27 21:08:15 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CloneCDTray] C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [HPBootOp] C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe (BillP Studios)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\HP_Owner\Start Menu\Programs\Startup\SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_21.dll (Sun Microsystems, Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} http://downloads.ewido.net/ewidoOnlineScan.cab (ewidoOnlineScan Control)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab (LSSupCtl Class)
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab (Reg Error: Key error.)
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab (Reg Error: Value error.)
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab (Symantec Script Runner Class)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.Email Removed.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1160807674250 (WUWebControl Class)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab (HpProductDetection Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {BB383206-6DA1-4E80-B62A-3DF950FCC697} http://ak.imgag.com/imgag/cp/install/AxCtp2.cab (Create & Print ActiveX Plug-in)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.Email Removed.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Email Removed Photo Upload Tool)
O16 - DPF: CabBuilder http://ak.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop Components:2 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/02/01 07:18:56 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/28 05:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 90 Days ==========

[2010/10/04 20:30:58 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/10/04 20:22:55 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/09/27 23:18:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010/09/27 23:10:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Owner\Application Data\Avira
[2010/09/27 23:01:29 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010/09/27 23:01:28 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010/09/27 23:01:28 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010/09/27 23:01:28 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010/09/27 23:01:28 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010/09/27 23:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010/09/27 23:01:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2010/09/27 21:04:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010/09/24 18:32:16 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2010/09/23 22:48:20 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/09/23 22:33:47 | 000,000,000 | ---D | C] -- C:\Program Files\SpywareBlaster
[2010/09/23 20:07:48 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2010/09/23 20:04:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\BDOSCAN8
[2010/08/07 21:18:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/07/24 00:02:03 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 90 Days ==========

[2010/10/04 20:43:36 | 000,000,248 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat
[2010/10/04 20:41:57 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/10/04 20:41:09 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/10/04 20:40:51 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/04 20:40:47 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/10/04 20:40:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/10/04 20:40:31 | 3212,169,216 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/04 20:39:45 | 009,699,328 | ---- | M] () -- C:\Documents and Settings\HP_Owner\NTUSER.DAT
[2010/10/04 20:39:45 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\HP_Owner\ntuser.ini
[2010/10/04 20:36:24 | 000,079,416 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/10/04 09:55:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/04 00:45:31 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/10/03 09:41:23 | 000,080,384 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/10/01 23:40:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/09/29 18:02:17 | 000,001,926 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/09/29 17:49:22 | 000,296,456 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/09/28 23:52:23 | 000,444,169 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\2010 Professional Installation Handbook Hardwood.pdf
[2010/09/27 21:08:15 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/09/25 10:15:39 | 000,000,731 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/09/24 18:34:11 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2010/09/16 20:25:26 | 000,120,320 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/15 23:33:41 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\peggy courtney.doc
[2010/09/15 13:06:43 | 000,000,794 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/09/15 12:04:20 | 000,028,160 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\Robert McCabe.doc
[2010/09/15 11:27:48 | 000,008,408 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Application Data\wklnhst.dat
[2010/08/30 10:23:17 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\vet clinic bill 8-30-10.doc
[2010/08/12 00:22:26 | 000,503,854 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/08/12 00:22:26 | 000,442,796 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/08/12 00:22:26 | 000,071,936 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/08/11 11:04:39 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\Mom's apt.doc
[2010/07/24 00:02:42 | 000,065,256 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Application Data\GDIPFONTCACHEV1.DAT
[2010/07/22 23:31:22 | 000,080,243 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\Matts Federal loan info.pdf
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/03 09:41:23 | 000,080,384 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/09/29 18:02:17 | 000,001,926 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/09/28 23:52:22 | 000,444,169 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\2010 Professional Installation Handbook Hardwood.pdf
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28596.NLS
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10004.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_864.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_720.nls
[2010/09/27 22:29:20 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010/09/27 22:29:20 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_708.nls
[2010/09/27 22:29:18 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010/09/27 22:29:18 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_862.nls
[2010/09/27 22:29:18 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010/09/27 22:29:18 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10005.nls
[2010/09/27 22:29:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010/09/27 22:29:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10021.nls
[2010/09/27 21:07:47 | 3212,169,216 | -HS- | C] () -- C:\hiberfil.sys
[2010/09/15 23:33:40 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\peggy courtney.doc
[2010/09/15 12:04:19 | 000,028,160 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\Robert McCabe.doc
[2010/08/30 10:23:17 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\vet clinic bill 8-30-10.doc
[2010/08/11 11:04:38 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\Mom's apt.doc
[2010/07/22 23:31:21 | 000,080,243 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\Matts Federal loan info.pdf
[2010/01/23 12:50:23 | 000,000,061 | ---- | C] () -- C:\WINDOWS\TaxACT09.ini
[2009/12/26 01:32:56 | 000,001,359 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2009/04/01 21:29:21 | 000,000,075 | ---- | C] () -- C:\WINDOWS\TaxACT08.ini
[2009/01/05 15:44:10 | 000,000,453 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2008/12/24 15:08:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\muveeapp.INI
[2008/01/28 22:43:57 | 000,000,074 | ---- | C] () -- C:\WINDOWS\TaxACT07.ini
[2007/04/28 13:39:30 | 000,014,379 | ---- | C] () -- C:\WINDOWS\tw5a.ini
[2007/04/28 13:39:30 | 000,000,149 | ---- | C] () -- C:\WINDOWS\Setup5a.ini
[2007/02/15 22:49:40 | 000,005,120 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2007/02/15 22:49:40 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2007/02/14 23:09:52 | 000,000,086 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2007/02/14 23:09:51 | 000,000,050 | -HS- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\.zreglib
[2007/01/31 00:48:22 | 000,000,128 | ---- | C] () -- C:\WINDOWS\TaxACT06.ini
[2006/12/25 11:46:11 | 000,000,109 | ---- | C] () -- C:\WINDOWS\marscam.ini
[2006/12/25 11:34:38 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\mr310exv.dll
[2006/12/25 11:34:38 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\mr310exd.dll
[2006/12/25 11:34:38 | 000,015,164 | ---- | C] () -- C:\WINDOWS\mr310twc.ini
[2006/11/26 21:10:19 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/07/28 15:19:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\JDSecure31.INI
[2006/04/11 17:36:17 | 000,005,946 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\GdiplusUpgrade_MSIApproach_Wrapper.log
[2006/04/11 17:36:17 | 000,000,206 | ---- | C] () -- C:\WINDOWS\HPGdiPlus.ini
[2006/04/06 18:27:16 | 000,000,004 | -H-- | C] () -- C:\WINDOWS\uccspecb.sys
[2006/03/26 14:22:33 | 000,000,097 | ---- | C] () -- C:\WINDOWS\TaxACT04.ini
[2006/02/19 17:12:19 | 000,000,029 | ---- | C] () -- C:\WINDOWS\atid.ini
[2006/02/09 01:24:57 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/02/06 16:40:30 | 000,000,128 | ---- | C] () -- C:\WINDOWS\TaxACT05.ini
[2006/02/06 08:34:18 | 000,008,408 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\wklnhst.dat
[2006/02/05 21:56:15 | 000,120,320 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/02/04 22:14:26 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\fusioncache.dat
[2006/02/04 18:29:43 | 000,000,023 | ---- | C] () -- C:\WINDOWS\EPS785EPX.ini
[2006/02/01 07:21:12 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/02/01 07:17:58 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2006/02/01 07:17:57 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2006/02/01 07:17:57 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2006/02/01 07:17:57 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2006/02/01 07:17:57 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2006/02/01 07:17:57 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2006/02/01 06:47:29 | 000,014,555 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2006/02/01 06:47:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2006/02/01 06:46:58 | 000,002,154 | ---- | C] () -- C:\WINDOWS\System32\ssmute.ini
[2006/02/01 06:43:52 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/02/01 06:22:11 | 000,002,264 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/02/01 06:20:44 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2006/02/01 06:15:52 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2006/02/01 06:04:11 | 000,000,780 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2005/04/30 18:57:52 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll
[2005/04/30 18:57:52 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll
[2005/04/30 18:57:20 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2005/02/18 16:56:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/01/19 22:45:40 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2005/01/19 22:45:40 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\ProgressTrace.dll
[2004/06/16 03:38:00 | 000,000,560 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003/04/10 22:04:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\JAWTAccessBridge.dll

========== LOP Check ==========

[2009/12/19 15:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AGI
[2006/06/07 23:59:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2009/01/24 12:58:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
[2009/01/24 13:25:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverCure
[2008/01/07 20:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2008/12/24 15:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2010/09/27 23:14:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2007/04/28 13:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2008/03/10 22:30:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Uniblue
[2006/02/19 17:18:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/06/05 00:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/01/20 22:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/06/01 22:04:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >

guestolo · « **Reply #24 on:** October 05, 2010, 08:02:34 PM »

I see leftovers of Norton's AV (Symantec's)
Did you recently uninstall it, or has it been removed for awhile?

rmccabe · « **Reply #25 on:** October 06, 2010, 12:06:00 AM »

It has been gone for about a year, is there anyway to delete the extra files. I think I will keep Avira, unless there is a better AV out there.

guestolo · « **Reply #26 on:** October 06, 2010, 12:09:59 AM »

Can you download and run the Norton Removal tool
Reboot the computer when it's done, run another quick scan with OTL.exe and post it's log
Keep me informed how things are running please

NORTON REMOVAL TOOL

rmccabe · « **Reply #27 on:** October 06, 2010, 03:53:09 AM »

Hi there, uninstalled Norton per instructions, thanks. Also here is a new OTL. The computer seems to run pretty good, no redirects lately, I'll keep all the little internet tools update with regular scans. Thank You so much for your help Again! If you see something I need to do let me know. I check regularly here. Thanks Again.

Do I need to do anything with JAVA?

OTL logfile created on: 10/6/2010 12:37:45 AM - Run 4
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\HP_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 81.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 178.27 Gb Total Space | 43.95 Gb Free Space | 24.65% Space Free | Partition Type: NTFS
Drive D: | 8.02 Gb Total Space | 2.30 Gb Free Space | 28.74% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ROBANDBETH
Current User Name: HP_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/09/24 18:34:11 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
PRC - [2010/04/16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/04/01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/03/02 11:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/02/24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010/01/14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009/08/23 16:15:52 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2008/04/13 16:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/08/08 23:27:52 | 000,073,728 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
PRC - [2005/04/12 00:10:22 | 000,065,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\ALCMTR.EXE
PRC - [2005/04/06 17:57:12 | 000,090,112 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2005/02/25 22:34:02 | 000,245,760 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
PRC - [2003/08/29 19:05:35 | 000,360,448 | ---- | M] () -- C:\Program Files\SpywareGuard\sgmain.exe
PRC - [2003/08/29 11:14:56 | 000,233,472 | ---- | M] () -- C:\Program Files\SpywareGuard\sgbhp.exe
PRC - [2001/12/07 01:48:34 | 000,258,118 | ---- | M] (BillP Studios) -- C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
PRC - [2001/08/09 03:01:00 | 000,090,112 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe

========== Modules (SafeList) ==========

MOD - [2010/09/24 18:34:11 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
MOD - [2008/04/13 16:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2000/06/15 05:32:24 | 000,036,864 | ---- | M] (Tartan Software) -- C:\Program Files\EPSON\Ink Monitor\Inkpeek.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/04/16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/04/01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/02/24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2007/08/08 23:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2001/08/09 03:01:00 | 000,090,112 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe -- (EPSONStatusAgent2)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\motmodem.sys -- (motmodem)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\HP_Owner\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010/03/01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/02/16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/06/21 20:36:25 | 000,186,592 | ---- | M] (Jungo) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2009/05/11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008/04/13 08:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/01/27 10:40:48 | 000,041,160 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2007/01/14 07:28:35 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2007/01/14 07:28:34 | 000,015,440 | ---- | M] (Elaborate Bytes AG) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV - [2006/12/20 11:31:34 | 000,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2006/12/13 15:41:48 | 000,011,984 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyDelay.sys -- (ElbyDelay)
DRV - [2006/10/27 20:13:10 | 000,022,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbsermpt.sys -- (usbsermpt)
DRV - [2005/12/12 17:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2)
DRV - [2005/04/15 17:05:42 | 002,564,032 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005/01/19 17:21:56 | 000,012,416 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PcdrNdisuio.sys -- (PcdrNdisuio)
DRV - [2004/10/15 20:52:48 | 000,071,168 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)
DRV - [2004/08/04 03:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004/07/16 11:14:30 | 000,140,416 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2500usb.sys -- (bkn50USB)
DRV - [2004/06/29 16:07:18 | 001,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2004/03/17 23:10:40 | 000,113,664 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2003/12/03 00:23:20 | 000,142,336 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\fasttx2k.sys -- (fasttx2k)
DRV - [2002/12/13 00:06:40 | 000,129,875 | R--- | M] (Mars Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mr97310c.sys -- (MR97310_USB_DUAL_CAMERA)
DRV - [2002/07/30 12:09:12 | 000,178,835 | ---- | M] (Sunplus Technology Co. LTD.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CA506AV.SYS -- (SPCA506AV)
DRV - [2001/09/09 16:00:00 | 000,017,976 | ---- | M] (SEIKO EPSON CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epusbsto.sys -- (EPUSBSTOR)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

O1 HOSTS File: ([2010/09/27 21:08:15 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CloneCDTray] C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.)
O4 - HKLM..\Run: [HPBootOp] C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe (BillP Studios)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\HP_Owner\Start Menu\Programs\Startup\SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_21.dll (Sun Microsystems, Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} http://downloads.ewido.net/ewidoOnlineScan.cab (ewidoOnlineScan Control)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab (Reg Error: Key error.)
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab (Reg Error: Key error.)
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab (Reg Error: Value error.)
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab (Symantec Script Runner Class)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.Email Removed.com/mail/w2/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1160807674250 (WUWebControl Class)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab (HpProductDetection Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {BB383206-6DA1-4E80-B62A-3DF950FCC697} http://ak.imgag.com/imgag/cp/install/AxCtp2.cab (Create & Print ActiveX Plug-in)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.Email Removed.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab (Windows Live Email Removed Photo Upload Tool)
O16 - DPF: CabBuilder http://ak.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop Components:2 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/02/01 07:18:56 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/28 05:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 90 Days ==========

[2010/10/04 20:30:58 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/10/04 20:22:55 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/09/27 23:18:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010/09/27 23:10:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Owner\Application Data\Avira
[2010/09/27 23:01:29 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010/09/27 23:01:28 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010/09/27 23:01:28 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010/09/27 23:01:28 | 000,051,992 | ---- | C] (AVIRA GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010/09/27 23:01:28 | 000,017,016 | ---- | C] (AVIRA GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010/09/27 23:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010/09/27 23:01:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2010/09/27 21:04:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010/09/24 18:32:16 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2010/09/23 22:48:20 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/09/23 22:33:47 | 000,000,000 | ---D | C] -- C:\Program Files\SpywareBlaster
[2010/09/23 20:07:48 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2010/09/23 20:04:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\BDOSCAN8
[2010/08/07 21:18:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/07/24 00:02:03 | 000,000,000 | ---D | C] -- C:\Program Files\MSECache
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 90 Days ==========

[2010/10/06 00:34:57 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/10/06 00:34:41 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/10/06 00:34:25 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/06 00:34:20 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/10/06 00:34:16 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/10/06 00:34:15 | 3212,169,216 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/06 00:33:22 | 009,699,328 | ---- | M] () -- C:\Documents and Settings\HP_Owner\NTUSER.DAT
[2010/10/06 00:33:22 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\HP_Owner\ntuser.ini
[2010/10/06 00:33:17 | 000,000,248 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat
[2010/10/05 23:55:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/05 23:26:57 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\Spybot - Search & Destroy.lnk
[2010/10/04 20:36:24 | 000,079,416 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/10/04 00:45:31 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/10/03 09:41:23 | 000,080,384 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/10/01 23:40:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/09/29 18:02:17 | 000,001,926 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/09/29 17:49:22 | 000,296,456 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/09/28 23:52:23 | 000,444,169 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\2010 Professional Installation Handbook Hardwood.pdf
[2010/09/27 21:08:15 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/09/25 10:15:39 | 000,000,731 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/09/24 18:34:11 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2010/09/16 20:25:26 | 000,120,320 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/15 23:33:41 | 000,024,576 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\peggy courtney.doc
[2010/09/15 13:06:43 | 000,000,794 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/09/15 12:04:20 | 000,028,160 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\Robert McCabe.doc
[2010/09/15 11:27:48 | 000,008,408 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Application Data\wklnhst.dat
[2010/08/30 10:23:17 | 000,020,480 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\vet clinic bill 8-30-10.doc
[2010/08/12 00:22:26 | 000,503,854 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/08/12 00:22:26 | 000,442,796 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/08/12 00:22:26 | 000,071,936 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/08/11 11:04:39 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\HP_Owner\My Documents\Mom's apt.doc
[2010/07/24 00:02:42 | 000,065,256 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Application Data\GDIPFONTCACHEV1.DAT
[2010/07/22 23:31:22 | 000,080,243 | ---- | M] () -- C:\Documents and Settings\HP_Owner\Desktop\Matts Federal loan info.pdf
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/05 23:26:57 | 000,000,944 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\Spybot - Search & Destroy.lnk
[2010/10/03 09:41:23 | 000,080,384 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/09/29 18:02:17 | 000,001,926 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/09/28 23:52:22 | 000,444,169 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\2010 Professional Installation Handbook Hardwood.pdf
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28596.NLS
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010/09/27 22:29:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10004.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_864.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010/09/27 22:29:20 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_720.nls
[2010/09/27 22:29:20 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010/09/27 22:29:20 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_708.nls
[2010/09/27 22:29:18 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010/09/27 22:29:18 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_862.nls
[2010/09/27 22:29:18 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010/09/27 22:29:18 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10005.nls
[2010/09/27 22:29:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010/09/27 22:29:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10021.nls
[2010/09/27 21:07:47 | 3212,169,216 | -HS- | C] () -- C:\hiberfil.sys
[2010/09/15 23:33:40 | 000,024,576 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\peggy courtney.doc
[2010/09/15 12:04:19 | 000,028,160 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\Robert McCabe.doc
[2010/08/30 10:23:17 | 000,020,480 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\vet clinic bill 8-30-10.doc
[2010/08/11 11:04:38 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\HP_Owner\My Documents\Mom's apt.doc
[2010/07/22 23:31:21 | 000,080,243 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Desktop\Matts Federal loan info.pdf
[2010/01/23 12:50:23 | 000,000,061 | ---- | C] () -- C:\WINDOWS\TaxACT09.ini
[2009/12/26 01:32:56 | 000,001,359 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2009/04/01 21:29:21 | 000,000,075 | ---- | C] () -- C:\WINDOWS\TaxACT08.ini
[2009/01/05 15:44:10 | 000,000,453 | ---- | C] () -- C:\WINDOWS\bdoscandellang.ini
[2008/12/24 15:08:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\muveeapp.INI
[2008/01/28 22:43:57 | 000,000,074 | ---- | C] () -- C:\WINDOWS\TaxACT07.ini
[2007/04/28 13:39:30 | 000,014,379 | ---- | C] () -- C:\WINDOWS\tw5a.ini
[2007/04/28 13:39:30 | 000,000,149 | ---- | C] () -- C:\WINDOWS\Setup5a.ini
[2007/02/15 22:49:40 | 000,005,120 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2007/02/15 22:49:40 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2007/02/14 23:09:52 | 000,000,086 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2007/02/14 23:09:51 | 000,000,050 | -HS- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\.zreglib
[2007/01/31 00:48:22 | 000,000,128 | ---- | C] () -- C:\WINDOWS\TaxACT06.ini
[2006/12/25 11:46:11 | 000,000,109 | ---- | C] () -- C:\WINDOWS\marscam.ini
[2006/12/25 11:34:38 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\mr310exv.dll
[2006/12/25 11:34:38 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\mr310exd.dll
[2006/12/25 11:34:38 | 000,015,164 | ---- | C] () -- C:\WINDOWS\mr310twc.ini
[2006/11/26 21:10:19 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/07/28 15:19:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\JDSecure31.INI
[2006/04/11 17:36:17 | 000,005,946 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\GdiplusUpgrade_MSIApproach_Wrapper.log
[2006/04/11 17:36:17 | 000,000,206 | ---- | C] () -- C:\WINDOWS\HPGdiPlus.ini
[2006/04/06 18:27:16 | 000,000,004 | -H-- | C] () -- C:\WINDOWS\uccspecb.sys
[2006/03/26 14:22:33 | 000,000,097 | ---- | C] () -- C:\WINDOWS\TaxACT04.ini
[2006/02/19 17:12:19 | 000,000,029 | ---- | C] () -- C:\WINDOWS\atid.ini
[2006/02/09 01:24:57 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/02/06 16:40:30 | 000,000,128 | ---- | C] () -- C:\WINDOWS\TaxACT05.ini
[2006/02/06 08:34:18 | 000,008,408 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Application Data\wklnhst.dat
[2006/02/05 21:56:15 | 000,120,320 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/02/04 22:14:26 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\fusioncache.dat
[2006/02/04 18:29:43 | 000,000,023 | ---- | C] () -- C:\WINDOWS\EPS785EPX.ini
[2006/02/01 07:21:12 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/02/01 07:17:58 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2006/02/01 07:17:57 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2006/02/01 07:17:57 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2006/02/01 07:17:57 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2006/02/01 07:17:57 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2006/02/01 07:17:57 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2006/02/01 06:47:29 | 000,014,555 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2006/02/01 06:47:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2006/02/01 06:46:58 | 000,002,154 | ---- | C] () -- C:\WINDOWS\System32\ssmute.ini
[2006/02/01 06:43:52 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/02/01 06:22:11 | 000,002,264 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/02/01 06:20:44 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2006/02/01 06:15:52 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2006/02/01 06:04:11 | 000,000,780 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2005/04/30 18:57:52 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll
[2005/04/30 18:57:52 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll
[2005/04/30 18:57:20 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2005/02/18 16:56:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/01/19 22:45:40 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2005/01/19 22:45:40 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\ProgressTrace.dll
[2004/06/16 03:38:00 | 000,000,560 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003/04/10 22:04:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\JAWTAccessBridge.dll

========== LOP Check ==========

[2009/12/19 15:32:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AGI
[2006/06/07 23:59:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2009/01/24 12:58:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations
[2009/01/24 13:25:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverCure
[2008/01/07 20:17:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2008/12/24 15:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2010/09/27 23:14:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2007/04/28 13:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2008/03/10 22:30:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Uniblue
[2006/02/19 17:18:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/06/05 00:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/01/20 22:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/06/01 22:04:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >

guestolo · « **Reply #28 on:** October 10, 2010, 10:22:45 AM »

Ensure you still have a copy of ComboFix on your desktop, then do the following
Go to START>>RUN>>Copy and paste the next command then hit OK

[color="#FF0000"]ComboFix /uninstall[/color]

This will uninstall ComboFix and it's components

Next: Open OTL.exe and click on the CLEANUP button, follow the prompts and reboot the computer when prompted

That should do it, post back and let me know how things are still running
After which I can lock this topic

rmccabe · « **Reply #29 on:** October 10, 2010, 01:26:28 PM »

Hello there ComboFix was already uninstalled, I did the clean up of OTL. Thanks I will let you know how things run today. One thing I have noticed is that web pages are a little slower to load, I relate that to Avira. other than that everything seems pretty smooth. Thanks Again.

guestolo · « **Reply #30 on:** October 10, 2010, 01:39:33 PM »

I'm stepping out for a bit, in the meantime, can you do the following for me
I just want to double check what I've had you uninstall and update

Download and unzip to your desktop InstalledPrograms.zip
Double click on InstalledPrograms.vbs

Click OK at the IP prompt and click YES to view the results now
A text file will open, can you copy and paste back here the whole contents

In addition:
Download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

rmccabe · « **Reply #31 on:** October 10, 2010, 04:47:08 PM »

Heres the programs list.

INSTALLED SOFTWARE (359) - ROBANDBETH - 10/10/2010 1:42:18 PM

3DShanghai 1.00      Installed: 7/1/2007
Adobe Flash Player 10 ActiveX   Ver: 10.1.85.3
Adobe Reader 7.0   Ver: 7.0.0   Installed: 8/8/2010
Adobe Shockwave Player 11.5   Ver: 11.5.2.602
Agere Systems PCI Soft Modem
AiO_Scan   Ver: 47.0.1.000   Installed: 1/31/2006
AiOSoftware   Ver: 47.0.1.000   Installed: 1/31/2006
AnyDVD
Apple Application Support   Ver: 1.2.1   Installed: 6/5/2010
Apple Mobile Device Support   Ver: 3.0.1.3   Installed: 6/5/2010
Apple Software Update   Ver: 2.1.1.116   Installed: 1/20/2010
Avanquest update   Ver: 1.17   Installed: 10/15/2008
Avira AntiVir Personal - Free Antivirus   Ver: 10.0.0.567
Bonjour   Ver: 2.0.1.2   Installed: 6/5/2010
Bounce Symphony from Hewlett-Packard Desktops (remove only)
BufferChm   Ver: 45.4.157.000   Installed: 1/31/2006
Camera Driver
CameraDrivers   Ver: 4.5.0.211   Installed: 1/31/2006
CCScore   Ver: 6.02.1001.0001   Installed: 1/7/2008
CloneCD
CloneDVD2
CloneDVDmobile
Compatibility Pack for the 2007 Office system   Ver: 12.0.6514.5001   Installed: 9/15/2010
Convert   Ver: 4.10   Installed: 5/17/2007
Copy   Ver: 45.4.157.000   Installed: 1/31/2006
Coupon Printer for Windows   Ver: 5.0.0.0
CP_AtenaShokunin1Config   Ver: 45.4.131.000   Installed: 1/31/2006
cp_dwSharkTaleAlbums1   Ver: 45.4.157.000   Installed: 1/31/2006
cp_dwSharkTaleCards1   Ver: 45.4.157.000   Installed: 1/31/2006
cp_dwShrek2Albums1   Ver: 45.4.157.000   Installed: 1/31/2006
cp_dwShrek2Cards1   Ver: 45.4.157.000   Installed: 1/31/2006
CP_PLSBusinessFlyers   Ver: 45.4.157.000   Installed: 1/31/2006
CreativeProjects   Ver: 45.4.157.000   Installed: 1/31/2006
CreativeProjectsTemplates   Ver: 45.4.157.000   Installed: 1/31/2006
Critical Update for Windows Media Player 11 (KB959772)      Installed: 3/11/2009
CueTour   Ver: 45.4.157.000   Installed: 1/31/2006
Destinations   Ver: 45.4.157.000   Installed: 1/31/2006
Digital Camera Media Studio demo 2.0   Ver: 2.0   Installed: 1/26/2007
Director   Ver: 45.4.157.000   Installed: 1/31/2006
DocProc   Ver: 4.5.0.0   Installed: 1/31/2006
DocumentViewer   Ver: 45.4.157.000   Installed: 1/31/2006
Enhanced Multimedia Keyboard Solution
EPSON Printer Software
ESSCDBK   Ver: 6.02.0001.0001   Installed: 1/7/2008
ESScore   Ver: 6.02.1001.0001   Installed: 1/7/2008
ESSgui   Ver: 6.02.1001.0001   Installed: 1/7/2008
ESSini   Ver: 6.02.1001.0001   Installed: 1/7/2008
ESSPCD   Ver: 6.02.1001.0001   Installed: 1/7/2008
ESSSONIC   Ver: 6.2.0001.0001   Installed: 1/7/2008
ESSTOOLS   Ver: 5.00.0000.0004   Installed: 1/7/2008
essvatgt   Ver: 6.02.1001.0001   Installed: 1/7/2008
eXplorist Wizard
Fax   Ver: 47.0.1.000   Installed: 1/31/2006
FrostWire 4.20.7   Ver: 4.20.7.0
Google Earth   Ver: 5.2.1.1588   Installed: 9/29/2010
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer   Ver: 1.0.0   Installed: 5/26/2010
Google Update Helper   Ver: 1.2.183.29   Installed: 6/14/2010
Google Updater   Ver: 2.4.1691.8062
Help and Support Additions   Ver: 3.0.5
High Definition Audio Driver Package - KB835221   Ver: 20040219.000000
HiJackThis   Ver: 1.0.0   Installed: 9/23/2010
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)   Ver: 1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)   Ver: 1
Hotfix for Windows Media Format 11 SDK (KB929399)      Installed: 3/17/2007
Hotfix for Windows Media Player 11 (KB939683)      Installed: 8/31/2007
Hotfix for Windows XP (KB2158563)   Ver: 1   Installed: 9/29/2010
Hotfix for Windows XP (KB952287)   Ver: 1   Installed: 9/28/2008
Hotfix for Windows XP (KB954550-v5)   Ver: 5   Installed: 8/15/2009
Hotfix for Windows XP (KB961118)   Ver: 1   Installed: 8/16/2009
Hotfix for Windows XP (KB970653-v3)   Ver: 3   Installed: 8/26/2009
Hotfix for Windows XP (KB976098-v2)   Ver: 2   Installed: 11/30/2009
Hotfix for Windows XP (KB979306)   Ver: 1   Installed: 2/24/2010
Hotfix for Windows XP (KB981793)   Ver: 1   Installed: 5/26/2010
HP Boot Optimizer   Ver: 1.0.2   Installed: 2/1/2006
HP Help and Support 4.0   Ver: 4.00.0025   Installed: 1/31/2006
HP Image Zone 4.8.6   Ver: 4.8.6
HP Image Zone Plus 4.8.6   Ver: 4.8.6
HP Organize
HP Photosmart Cameras 4.5   Ver: 4.5
HP Product Assistant   Ver: 100.000.001.000   Installed: 12/8/2008
HP Product Assistant   Ver: 2.0.0.0   Installed: 1/31/2006
HP Product Detection   Ver: 4.00.0004   Installed: 3/10/2008
HP PSC & OfficeJet 4.7
HP Update   Ver: 5.002.001.004   Installed: 12/3/2009
HPHDiscovery   Ver: 1.0.0.0   Installed: 10/4/2006
HPIZplus450   Ver: 48.2.6.0   Installed: 1/31/2006
HpSdpAppCoreApp   Ver: 3.00.0000   Installed: 1/31/2006
HPSystemDiagnostics   Ver: 1.6.0.0   Installed: 1/31/2006
Ink Monitor
InstantShare   Ver: 45.4.157.000   Installed: 1/31/2006
Intel(R) Graphics Media Accelerator Driver
IntelliMover Data Transfer Demo
InterVideo WinDVD Player
InterVideo WinDVD Player   Ver: 5.0-B11.767
iTunes   Ver: 9.1.1.12   Installed: 6/5/2010
Java Auto Updater   Ver: 2.0.2.4   Installed: 8/7/2010
Java(TM) 6 Update 21   Ver: 6.0.210   Installed: 3/14/2009
K-Lite Codec Pack 2.81 Full   Ver: 2.81   Installed: 2/15/2007
kgcbaby   Ver: 5.03.0000.0002   Installed: 1/7/2008
kgcbase   Ver: 5.03.0000.0004   Installed: 1/7/2008
kgchday   Ver: 5.03.0000.0002   Installed: 1/7/2008
kgchlwn   Ver: 5.03.0000.0002   Installed: 1/7/2008
kgcinvt   Ver: 5.03.0000.0003   Installed: 1/7/2008
kgckids   Ver: 5.03.0000.0002   Installed: 1/7/2008
kgcmove   Ver: 5.03.0000.0003   Installed: 1/7/2008
kgcvday   Ver: 5.03.0000.0002   Installed: 1/7/2008
Kodak EasyShare software
KSU   Ver: 632.62.0004.0001   Installed: 1/7/2008
LightScribe 1.4.84.1   Ver: 1.4.84.1   Installed: 12/24/2008
Mahjongg XP Championship 2006 Platinum Edition   Ver: 1.00.05.08.16
Malwarebytes' Anti-Malware      Installed: 9/23/2010
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1   Ver: 1.1.4322   Installed: 10/7/2010
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2   Ver: 2.2.30729   Installed: 10/7/2010
Microsoft .NET Framework 3.0 Service Pack 2   Ver: 3.2.30729   Installed: 6/22/2010
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1   Ver: 3.5.30729   Installed: 10/7/2010
Microsoft Compression Client Pack 1.0 for Windows XP   Ver: 1   Installed: 2/17/2007
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5      Installed: 1/17/2008
Microsoft Office Word Viewer 2003   Ver: 11.0.8173.0   Installed: 9/15/2010
Microsoft Office XP Professional with FrontPage   Ver: 10.0.6626.0   Installed: 9/15/2010
Microsoft Plus! Dancer LE   Ver: 1.1.0.3522   Installed: 1/31/2006
Microsoft Plus! Digital Media Edition Installer   Ver: 1.1.0.3500   Installed: 1/31/2006
Microsoft Plus! Photo Story 2 LE   Ver: 1.1.0.3463   Installed: 1/31/2006
Microsoft Silverlight   Ver: 4.0.50917.0   Installed: 9/28/2010
Microsoft User-Mode Driver Framework Feature Pack 1.0      Installed: 12/30/2006
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053   Ver: 8.0.50727.4053   Installed: 5/21/2010
Microsoft Visual C++ 2005 Redistributable   Ver: 8.0.56336   Installed: 12/8/2007
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148   Ver: 9.0.30729.4148   Installed: 9/27/2010
Microsoft Works   Ver: 08.04.0623   Installed: 1/31/2006
Motorola Driver Installation 3.4.0   Ver: 3.4.0   Installed: 10/15/2008
Motorola Phone Tools   Ver: 5.0.7a 4/01/2008   Installed: 10/15/2008
Motorola Phone Tools   Ver: 5.00   Installed: 10/15/2008
MSXML 4.0 SP2 (KB927978)   Ver: 4.20.9841.0   Installed: 11/18/2006
MSXML 4.0 SP2 (KB936181)   Ver: 4.20.9848.0   Installed: 8/14/2007
MSXML 4.0 SP2 (KB954430)   Ver: 4.20.9870.0   Installed: 11/11/2008
MSXML 4.0 SP2 (KB973688)   Ver: 4.20.9876.0   Installed: 11/29/2009
muvee autoProducer 4.0   Ver: 4.00.050
netbrdg   Ver: 6.02.1001.0001   Installed: 1/7/2008
Notifier   Ver: 6.02.0001.0001   Installed: 1/7/2008
OfotoXMI   Ver: 6.02.0001.0001   Installed: 1/7/2008
PanoStandAlone   Ver: 45.4.157.000   Installed: 1/31/2006
PC-Doctor for Windows   Ver: 1.06.005   Installed: 1/31/2006
PC-Doctor for Windows   Ver: 1.06.005   Installed: 1/31/2006
PCDADDIN   Ver: 6.02.0001.0003   Installed: 1/7/2008
PCDHELP   Ver: 6.02.0001.0001   Installed: 1/7/2008
PhotoGallery   Ver: 45.4.157.000   Installed: 1/31/2006
Photosmart 320,370,7400,8100,8400 Series   Ver: 2.0
PrintScreen   Ver: 43.1.5.000   Installed: 1/31/2006
PS2
PSPrinters06   Ver: 1.00.0000   Installed: 1/31/2006
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3   Ver: 2.2.3
QFolder   Ver: 1.00.0000   Installed: 1/31/2006
QuickProjects   Ver: 43.1.5.000   Installed: 1/31/2006
QuickTime   Ver: 7.66.71.0   Installed: 6/5/2010
Readme   Ver: 47.0.1.000   Installed: 1/31/2006
Registry Mechanic 6.0   Ver: 6.0   Installed: 3/19/2007
Remove Microsoft Money 2005 installer
Remove Quicken New User Edition installer
Scan   Ver: 4.5.0.0   Installed: 1/31/2006
ScannerCopy   Ver: 4.5.0.0   Installed: 1/31/2006
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)   Ver: 1
Security Update for Step By Step Interactive Training (KB898458)   Ver: 20050502.101010   Installed: 2/3/2006
Security Update for Step By Step Interactive Training (KB923723)   Ver: 20050502.101010   Installed: 2/16/2007
Security Update for Windows Internet Explorer 8 (KB2183461)   Ver: 1   Installed: 8/12/2010
Security Update for Windows Internet Explorer 8 (KB971961)   Ver: 1   Installed: 5/28/2010
Security Update for Windows Internet Explorer 8 (KB981332)   Ver: 1   Installed: 5/28/2010
Security Update for Windows Internet Explorer 8 (KB982381)   Ver: 1   Installed: 6/12/2010
Security Update for Windows Media Encoder (KB954156)      Installed: 9/10/2008
Security Update for Windows Media Encoder (KB979332)      Installed: 6/12/2010
Security Update for Windows Media Player (KB911564)      Installed: 10/14/2006
Security Update for Windows Media Player (KB952069)      Installed: 12/10/2008
Security Update for Windows Media Player (KB954155)      Installed: 10/14/2009
Security Update for Windows Media Player (KB968816)      Installed: 9/9/2009
Security Update for Windows Media Player (KB973540)      Installed: 8/12/2009
Security Update for Windows Media Player (KB975558)      Installed: 9/15/2010
Security Update for Windows Media Player (KB978695)      Installed: 6/12/2010
Security Update for Windows Media Player 10 (KB917734)      Installed: 10/14/2006
Security Update for Windows Media Player 11 (KB936782)      Installed: 8/15/2007
Security Update for Windows Media Player 11 (KB954154)      Installed: 9/10/2008
Security Update for Windows Media Player 6.4 (KB925398)      Installed: 12/13/2006
Security Update for Windows XP (KB2079403)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB2115168)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB2121546)   Ver: 1   Installed: 9/15/2010
Security Update for Windows XP (KB2160329)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB2229593)   Ver: 1   Installed: 7/15/2010
Security Update for Windows XP (KB2259922)   Ver: 1   Installed: 9/15/2010
Security Update for Windows XP (KB2286198)   Ver: 1   Installed: 8/3/2010
Security Update for Windows XP (KB2347290)   Ver: 1   Installed: 9/15/2010
Security Update for Windows XP (KB923561)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB923689)      Installed: 12/13/2006
Security Update for Windows XP (KB938464)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB938464-v2)   Ver: 2   Installed: 3/11/2009
Security Update for Windows XP (KB941569)      Installed: 12/13/2007
Security Update for Windows XP (KB946648)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB950759)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB950760)   Ver: 1   Installed: 6/14/2008
Security Update for Windows XP (KB950762)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB950974)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB951066)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB951376)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB951376-v2)   Ver: 2   Installed: 9/28/2008
Security Update for Windows XP (KB951698)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB951748)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB952004)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB952954)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB953838)   Ver: 1   Installed: 9/28/2008
Security Update for Windows XP (KB953839)   Ver: 1   Installed: 8/13/2008
Security Update for Windows XP (KB954211)   Ver: 1   Installed: 10/15/2008
Security Update for Windows XP (KB954459)   Ver: 1   Installed: 11/12/2008
Security Update for Windows XP (KB954600)   Ver: 1   Installed: 12/10/2008
Security Update for Windows XP (KB955069)   Ver: 1   Installed: 11/12/2008
Security Update for Windows XP (KB956390)   Ver: 1   Installed: 10/15/2008
Security Update for Windows XP (KB956391)   Ver: 1   Installed: 10/15/2008
Security Update for Windows XP (KB956572)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB956744)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB956802)   Ver: 1   Installed: 12/10/2008
Security Update for Windows XP (KB956803)   Ver: 1   Installed: 10/15/2008
Security Update for Windows XP (KB956841)   Ver: 1   Installed: 10/15/2008
Security Update for Windows XP (KB956844)   Ver: 1   Installed: 9/9/2009
Security Update for Windows XP (KB957095)   Ver: 1   Installed: 10/15/2008
Security Update for Windows XP (KB957097)   Ver: 1   Installed: 11/12/2008
Security Update for Windows XP (KB958215)   Ver: 1   Installed: 12/10/2008
Security Update for Windows XP (KB958644)   Ver: 1   Installed: 10/25/2008
Security Update for Windows XP (KB958687)   Ver: 1   Installed: 1/14/2009
Security Update for Windows XP (KB958690)   Ver: 1   Installed: 3/13/2009
Security Update for Windows XP (KB958869)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB959426)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB960225)   Ver: 1   Installed: 3/13/2009
Security Update for Windows XP (KB960714)   Ver: 1   Installed: 12/19/2008
Security Update for Windows XP (KB960715)   Ver: 1   Installed: 2/12/2009
Security Update for Windows XP (KB960803)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB960859)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB961371)   Ver: 1   Installed: 7/15/2009
Security Update for Windows XP (KB961373)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB961501)   Ver: 1   Installed: 6/10/2009
Security Update for Windows XP (KB963027)   Ver: 1   Installed: 4/17/2009
Security Update for Windows XP (KB968537)   Ver: 1   Installed: 6/10/2009
Security Update for Windows XP (KB969059)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB969897)   Ver: 1   Installed: 6/10/2009
Security Update for Windows XP (KB969898)   Ver: 1   Installed: 6/10/2009
Security Update for Windows XP (KB969947)   Ver: 1   Installed: 11/11/2009
Security Update for Windows XP (KB970238)   Ver: 1   Installed: 6/10/2009
Security Update for Windows XP (KB970430)   Ver: 1   Installed: 12/9/2009
Security Update for Windows XP (KB971468)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB971486)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB971557)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB971633)   Ver: 1   Installed: 7/15/2009
Security Update for Windows XP (KB971657)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB971961)   Ver: 1   Installed: 9/9/2009
Security Update for Windows XP (KB972260)   Ver: 1   Installed: 7/29/2009
Security Update for Windows XP (KB972270)   Ver: 1   Installed: 1/13/2010
Security Update for Windows XP (KB973346)   Ver: 1   Installed: 7/15/2009
Security Update for Windows XP (KB973354)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB973507)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB973525)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB973869)   Ver: 1   Installed: 8/12/2009
Security Update for Windows XP (KB973904)   Ver: 1   Installed: 12/9/2009
Security Update for Windows XP (KB974112)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB974318)   Ver: 1   Installed: 12/9/2009
Security Update for Windows XP (KB974392)   Ver: 1   Installed: 12/9/2009
Security Update for Windows XP (KB974455)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB974571)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB975025)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB975467)   Ver: 1   Installed: 10/14/2009
Security Update for Windows XP (KB975560)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB975561)   Ver: 1   Installed: 3/13/2010
Security Update for Windows XP (KB975562)   Ver: 1   Installed: 6/12/2010
Security Update for Windows XP (KB975713)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB976325)   Ver: 1   Installed: 12/9/2009
Security Update for Windows XP (KB977165)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB977816)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB977914)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB978037)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB978251)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB978262)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB978338)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB978542)   Ver: 1   Installed: 5/11/2010
Security Update for Windows XP (KB978601)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB978706)   Ver: 1   Installed: 2/9/2010
Security Update for Windows XP (KB979309)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB979482)   Ver: 1   Installed: 6/12/2010
Security Update for Windows XP (KB979559)   Ver: 1   Installed: 6/12/2010
Security Update for Windows XP (KB979683)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB980195)   Ver: 1   Installed: 6/12/2010
Security Update for Windows XP (KB980218)   Ver: 1   Installed: 6/12/2010
Security Update for Windows XP (KB980232)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB980436)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB981322)   Ver: 1   Installed: 9/15/2010
Security Update for Windows XP (KB981349)   Ver: 1   Installed: 4/15/2010
Security Update for Windows XP (KB981852)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB981997)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB982214)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB982665)   Ver: 1   Installed: 8/12/2010
Security Update for Windows XP (KB982802)   Ver: 1   Installed: 9/15/2010
SFR   Ver: 6.02.0001.0001   Installed: 1/7/2008
SHASTA   Ver: 6.02.0001.0001   Installed: 1/7/2008
SKIN0001   Ver: 6.02.1001.0001   Installed: 1/7/2008
SkinsHP1   Ver: 45.4.157.000   Installed: 1/31/2006
SKINXSDK   Ver: 6.02.1001.0001   Installed: 1/7/2008
Sonic Express Labeler   Ver: 2.0.0   Installed: 1/31/2006
Sonic MyDVD Plus   Ver: 6.1.0   Installed: 1/31/2006
Sonic RecordNow Audio   Ver: 2.0.0   Installed: 1/31/2006
Sonic RecordNow Copy   Ver: 2.0.0   Installed: 1/31/2006
Sonic RecordNow Data   Ver: 2.0.0   Installed: 1/31/2006
Sonic Update Manager   Ver: 3.0.0   Installed: 1/31/2006
Spybot - Search & Destroy   Ver: 1.6.2   Installed: 10/5/2010
SpywareBlaster 4.4   Ver: 4.4.0   Installed: 10/6/2010
SpywareGuard v2.2   Ver: 2.2
staticcr   Ver: 5.03.0000.0001   Installed: 1/7/2008
Symantec Technical Support Web Controls   Ver: 1.0.0   Installed: 10/15/2006
TaxACT 2006
TaxACT 2007
TaxACT 2008
TaxACT 2009
tooltips   Ver: 6.02.0001.0001   Installed: 1/7/2008
TrayApp   Ver: 45.4.157.000   Installed: 1/31/2006
U.B. Funkeys
Ulead VideoStudio 7 SE VCD   Ver: 7.0
Unload   Ver: 4.5.0   Installed: 1/31/2006
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)   Ver: 1
Update for Windows Internet Explorer 8 (KB976662)   Ver: 1   Installed: 5/28/2010
Update for Windows Internet Explorer 8 (KB980182)   Ver: 1   Installed: 5/27/2010
Update for Windows Internet Explorer 8 (KB982632)   Ver: 1   Installed: 5/27/2010
Update for Windows XP (KB2141007)   Ver: 1   Installed: 9/15/2010
Update for Windows XP (KB951072-v2)   Ver: 2   Installed: 8/16/2008
Update for Windows XP (KB951978)   Ver: 1   Installed: 9/29/2008
Update for Windows XP (KB955759)   Ver: 1   Installed: 12/19/2009
Update for Windows XP (KB955839)   Ver: 1   Installed: 12/10/2008
Update for Windows XP (KB967715)   Ver: 1   Installed: 2/25/2009
Update for Windows XP (KB968389)   Ver: 1   Installed: 8/25/2009
Update for Windows XP (KB971737)   Ver: 1   Installed: 12/9/2009
Update for Windows XP (KB973687)   Ver: 1   Installed: 11/30/2009
Update for Windows XP (KB973815)   Ver: 1   Installed: 8/12/2009
Update for Windows XP (KB976749)   Ver: 1   Installed: 11/4/2009
Update for Windows XP (KB978207)   Ver: 1   Installed: 1/22/2010
Update for Windows XP (KB980182)   Ver: 1   Installed: 3/30/2010
Updates from HP
USB Instant VideoCD
VPRINTOL   Ver: 6.02.0001.0001   Installed: 1/7/2008
WebFldrs XP   Ver: 9.50.7523   Installed: 1/26/2005
WebReg   Ver: 45.4.157.000   Installed: 1/31/2006
Windows Genuine Advantage Notifications (KB905474)   Ver: 1.7.0018.5   Installed: 3/22/2007
Windows Genuine Advantage Validation Tool (KB892130)      Installed: 11/3/2007
Windows Genuine Advantage Validation Tool (KB892130)   Ver: 1.7.0069.2   Installed: 10/14/2006
Windows Internet Explorer 8   Ver: 20090308.140743   Installed: 5/27/2010
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series   Ver: 9.00.2980   Installed: 4/28/2007
Windows Media Format 11 runtime
Windows Media Format 11 runtime      Installed: 12/30/2006
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Media Player 11      Installed: 12/30/2006
Windows XP Service Pack 3   Ver: 20080414.031525   Installed: 9/28/2008
WIRELESS   Ver: 6.02.0001.0001   Installed: 1/7/2008

Here is the Security Check.

Results of screen317's Security Check version 0.99.5
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Avira AntiVir Personal - Free Antivirus
Avira successfully updated!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 21
Adobe Flash Player
Adobe Reader 7.0
Out of date Adobe Reader installed!
````````````````````````````````
Process Check:
objlist.exe by Laurent
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
````````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````

guestolo · « **Reply #32 on:** October 10, 2010, 06:56:58 PM »

Let's do the following
Adobe Reader is outdated, it's important to keep up to date with the latest version to help patch security holes

Can you do the following
Go to Add and Remove programs and remove
Adobe Reader 7.0

Next: Spybot's Immunization is a great feature, but it's long Host file list
MAY slow Internet browsing
Do the following please
Go to START>>RUN>>type cmd, hit OK

In the command prompt, type the following exactly
ipconfig /flushdns

Hit ENTER on your keyboard
Note the single space after ipconfig, just before /

Afterwards:
Go to START>>RUN>>type in services.msc

In the service config window, look on the right hand side for the following service name
DNS Client
Right click on it and select PROPERTIES
In the startup type dropdown menu, change the startup type to MANUAL
Ensure to APPLY and OK the change

Exit Service config window
Java enable a Quick start service, that is not necessarily needed
You have the option of going into Windows Control Panel
Open the Java icon>>Open the ADVANCED tab>>Then expand(+) on "Miscellaneuos"
Untick "JAVA QUICK STARTER"
Apply and OK it then exit the Java control panel

Download [color="#FF0000"]ATF-Cleaner[/color] by Atribune.
Save it to your desktop
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
when complete
Click Exit on the Main menu to close the program.

Reboot the computer after any/all the above is done
NOTE: Startup may be a bit slower, as we have cleared your Prefetch folder
Startup time will get better as this folder gets repopulated

Back in Windows
let's get Adobe Reader updated
Go to the following link
http://get.adobe.com/reader/

UNTICK the option to also install McAfee Security Scan and/or Google toolbar or similiar
Download and save to desktop the installer for the latest version of A. Reader
Double click on the installer to install
After successfully installing, you can delete the installer on desktop
Can you open Adobe Reader and click on HELP>>CHECK FOR UPDATES and install any update if found to ensure you are right up to date

Afterwards: Can you open MyComputer, right click on your C: drive
Select the TOOLS tab, under ERROR CHECKING click on CHECK NOW...
Select both options then click START, you should get a prompt that you will have to restart Windows
Do so and let Error checking check your drive, this can take a whle, so be patient

Back in Windows, can you do the same for D: drive
You may not have to reboot to check that drive

Let me know if that helps at all

rmccabe · « **Reply #33 on:** October 10, 2010, 11:33:10 PM »

Back again, Did all as requested. I did catch the DNS Clin kinda figured it was missing the "T". The check disks both went good and computer is running really good. The C: drive did recover a bunch of orphaned files to Directory file 122461, all french to me. Gotta go get dinner, will surf later and let you know how its running. Thank You!!

guestolo · « **Reply #34 on:** October 10, 2010, 11:38:15 PM »

Alright, I'll check back tomorrow to see how everything is still running
So use your computer for a few hours before posting back

rmccabe · « **Reply #35 on:** October 12, 2010, 10:23:16 PM »

Hello I am Back sorry I been Very busy, "computer update" everything seems to work really well. Is AFT cleaner better then Windows CleanUp? do I need both, Is there any of the programs that you had me download that I need to keep and run on a regular basis.

guestolo · « **Reply #36 on:** October 14, 2010, 06:51:06 PM »

You can optionally hold onto ATF-Cleaner, or simply manually delete it

Quote

Is there any of the programs that you had me download that I need to keep and run on a regular basis.

Which did I have you download are you enquiring about?

rmccabe · « **Reply #37 on:** October 14, 2010, 11:46:14 PM »

I have these still on my computer, MBRcheck,Security check,TDSSKiller,Ruunhooker and this reg.cure setup. What do ya think?

guestolo · « **Reply #38 on:** October 15, 2010, 12:16:25 AM »

MBRcheck,Security check,TDSSKiller,Ruunhooker

Go ahead and manually delete all of those
reg.cure setup. <--I didn't ask you to download this, but by all means, get rid of it

rmccabe · « **Reply #39 on:** October 16, 2010, 01:03:18 AM »

Just wanted to let you know that everything is running good, Thanks for all your help. It still think its a very amazing skill that you have. Thank You!

News:

Author Topic: Redirecting & can't run AV, spybot (Read 2583 times)