mojito Posted January 30, 2009 Report Share Posted January 30, 2009 Recently, my PC keeps locking-up for no apparent reason. I'm sure that it is due to some malware as it all started when I accessed a friends website and firefox blocked me (there was an attempt to redirect to 89.28.13.210). I am absolutely sure that my PC is infected. Normally, no problem, and I would run ad-aware or similar and AVG. By when I try to run the following my PC locks:Ad-awareSpybot sdAVG 8.0Norton Security ScanIt would appear that whatever has infected my PC is stopping me from finding it! Can anyone help?Cheers.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 18:51:08, on 30/01/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\PRISMSVR.EXEC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\WINDOWS\System32\PRISMSVC.EXEC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\PROGRA~1\AVG\AVG8\avgemc.exeC:\WINDOWS\LTSMMSG.exeC:\WINDOWS\System32\khooker.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Java\jre1.6.0_07\bin\jusched.exeC:\Program Files\ScanSoft\OmniPageSE\opware32.exeC:\Program Files\Messenger\msmsgs.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\Thomson SpeedTouch\SpeedTouch 121g Wireless USB Monitor\st121g.exeC:\Program Files\Sony\VAIO Action Setup\VAServ.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Ian\Desktop\HiJackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.sony-europe.comO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dllO2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exeO4 - HKLM\..\Run: [siS KHooker] C:\WINDOWS\System32\khooker.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\System32\PRISMSVR.EXE" /APPLYO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exeO4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exeO4 - HKLM\..\Run: [\IANMALPASS\EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P36 "\\IANMALPASS\EPSON Stylus D68 Series" /O6 "USB002" /M "Stylus D68"O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [1&1 EasyLogin] C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exeO4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeO4 - Global Startup: SpeedTouch 121g Wireless USB Monitor.lnk = C:\Program Files\Thomson SpeedTouch\SpeedTouch 121g Wireless USB Monitor\st121g.exeO4 - Global Startup: VAIO Action Setup (Server).lnk = ?O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\System32\GPhotos.scr/200O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.comO15 - Trusted Zone: *.Sony-europe.comO15 - Trusted Zone: *.Sonystyle-europe.comO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1233310837777O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://www.arcadetown.com/swf/deliciousdel...zylomplayer.cabO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dllO20 - AppInit_DLLs: avgrsstx.dllO23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exeO23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exeO23 - Service: Express Accounts (ExpressAccountsService) - NCH Software - C:\Program Files\NCH Software\ExpressAccounts\expressaccounts.exeO23 - Service: Express Invoice (ExpressInvoiceService) - NCH Software - C:\Program Files\NCH Software\ExpressInvoice\expressinvoice.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: PRISMSVC - Conexant Systems, Inc. - C:\WINDOWS\System32\PRISMSVC.EXEO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe--End of file - 6881 bytes Quote Link to post Share on other sites
Andro1d Posted January 31, 2009 Report Share Posted January 31, 2009 Hello and Welcome to the forums. I am MoNsTeReNeRgY22 and I will be assisting you with your computer problem today. Download OTViewIt to your desktop.Close all windows and open itClick Run Scan and let the program run uninterruptedIt will produce two logs for you, one will pop up called OTViewIt.txt, the other will be saved on your desktop and called Extras. Post both those logs here.You may need to use two posts to get it all on the forum Quote Link to post Share on other sites
mojito Posted January 31, 2009 Author Report Share Posted January 31, 2009 (edited) Hi MoNsTeReNeRgY22,Here is the OTViewIt.Txt fileOTViewIt logfile created on: 31/01/2009 10:30:46 - Run 2OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\Ian\DesktopWindows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 6.0.2900.2180)Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy239.53 Mb Total Physical Memory | 102.53 Mb Available Physical Memory | 42.80% Memory free738.61 Mb Paging File | 469.43 Mb Available in Paging File | 63.56% Paging File freePaging file location(s): C:\pagefile.sys 512 1024;%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program FilesDrive C: | 18.67 Gb Total Space | 6.12 Gb Free Space | 32.79% Space Free | Partition Type: NTFSDrive D: | 18.64 Gb Total Space | 2.47 Gb Free Space | 13.25% Space Free | Partition Type: NTFSE: Drive not present or media not loadedF: Drive not present or media not loadedG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loadedComputer Name: DESKTOP-VIOCurrent User Name: IanLogged in as Administrator.Current Boot Mode: NormalScan Mode: Current userWhitelist: OnFile Age = 30 Days========== Processes ==========[2005/04/13 00:28:12 | 00,368,726 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\PRISMSVR.exe[2009/01/30 16:54:59 | 00,231,704 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe[2005/04/13 00:30:44 | 00,061,526 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\PRISMSVC.exe[2009/01/30 16:55:13 | 00,287,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgrsx.exe[2009/01/30 16:55:05 | 00,875,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe[2002/03/29 15:07:00 | 00,032,768 | ---- | M] (Lucent Technologies) -- C:\WINDOWS\LTSMMSG.exe[2002/01/25 02:30:48 | 00,290,816 | R--- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\khooker.exe[2008/03/07 16:42:07 | 00,185,896 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe[2008/06/10 03:27:04 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe[2002/06/03 11:38:12 | 00,049,152 | ---- | M] (ScanSoft, Inc) -- C:\Program Files\ScanSoft\OmniPageSE\opware32.exe[2004/08/04 08:56:53 | 01,667,584 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Messenger\msmsgs.exe[2008/02/27 17:53:24 | 01,540,096 | ---- | M] (1&1 Internet España S.L.U.) -- C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe[2009/01/26 15:31:16 | 02,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[2003/02/25 22:37:14 | 00,110,592 | ---- | M] () -- C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe[2005/10/21 18:54:24 | 00,430,080 | ---- | M] () -- C:\Program Files\Thomson SpeedTouch\SpeedTouch 121g Wireless USB Monitor\st121g.exe[2002/02/06 02:04:02 | 00,040,960 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Action Setup\VAServ.exe[2008/10/16 14:09:44 | 00,051,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wuauclt.exe[2009/01/31 10:16:12 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ian\Desktop\OTViewIt.exe========== (O23) Win32 Services ==========[2009/01/30 16:55:05 | 00,875,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe -- (avg8emc [Auto | Running])[2009/01/30 16:54:59 | 00,231,704 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe -- (avg8wd [Auto | Running])[2008/11/18 19:07:45 | 00,589,828 | ---- | M] (NCH Software) -- C:\Program Files\NCH Software\ExpressAccounts\expressaccounts.exe -- (ExpressAccountsService [On_Demand | Stopped])[2008/11/18 18:58:30 | 00,864,260 | ---- | M] (NCH Software) -- C:\Program Files\NCH Software\ExpressInvoice\expressinvoice.exe -- (ExpressInvoiceService [On_Demand | Stopped])[2008/04/08 00:16:26 | 00,136,120 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])[2005/04/13 00:30:44 | 00,061,526 | ---- | M] (Conexant Systems, Inc.) -- C:\WINDOWS\system32\PRISMSVC.exe -- (PRISMSVC [Auto | Running])[2001/09/27 23:26:40 | 00,065,536 | ---- | M] (Sony Corporation) -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV [On_Demand | Stopped])========== Driver Services ==========[2005/04/12 07:12:42 | 00,019,740 | ---- | M] (Meetinghouse Data Communications) -- C:\WINDOWS\system32\drivers\AEGISP.sys -- (AegisP [Auto | Running])[2004/08/04 06:59:20 | 00,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\amdk7.sys -- (AmdK7 [system | Running])[2009/01/30 16:55:42 | 00,097,928 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86 [system | Running])[2009/01/30 16:55:40 | 00,026,824 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86 [system | Running])[2009/01/30 16:55:50 | 00,076,040 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX [Auto | Running])[2000/07/24 01:01:00 | 00,019,537 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\system32\drivers\BRPAR.SYS -- (BrPar [Auto | Running])[2005/11/16 11:21:14 | 00,357,568 | ---- | M] (THOMSON Corporation) -- C:\WINDOWS\system32\drivers\BT4501G.sys -- (BT4501G [On_Demand | Running])[2000/12/05 17:18:02 | 00,003,952 | ---- | M] (Sony Corporation) -- C:\WINDOWS\system32\drivers\DMICall.sys -- (DMICall [system | Running])[2004/08/04 06:58:34 | 00,014,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\kbdhid.sys -- (kbdhid [system | Running])[2002/03/29 15:34:00 | 00,807,917 | ---- | M] (Lucent Technologies) -- C:\WINDOWS\system32\drivers\LTSM.sys -- (LucentSoftModem [On_Demand | Running])[2002/02/24 07:35:00 | 00,014,604 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc [On_Demand | Running])[2001/08/18 11:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink [On_Demand | Running])[2008/07/31 23:17:04 | 00,043,872 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\system32\drivers\pxhelp20.sys -- (PxHelp20 [boot | Running])[2001/12/31 15:12:40 | 00,045,312 | ---- | M] (Realtek Semiconductor Corporation) -- C:\WINDOWS\system32\drivers\R8139n51.sys -- (rtl8139 [On_Demand | Running])[2001/08/18 11:00:00 | 00,027,440 | ---- | M] () -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv [On_Demand | Stopped])[2002/03/29 18:48:00 | 00,187,648 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315 [On_Demand | Running])[2002/03/28 11:08:16 | 00,175,232 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\drivers\sis7012.sys -- (SiS7012 [On_Demand | Running])[2001/12/26 19:52:00 | 00,027,136 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\drivers\SISAGP.SYS -- (sisagp [boot | Running])[2002/03/17 15:23:00 | 00,005,760 | ---- | M] () -- C:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp [system | Running])[2002/02/24 15:19:58 | 00,030,650 | ---- | M] (Sony Corporation) -- C:\WINDOWS\system32\drivers\SonyWBMS.sys -- (SONYWBMS [On_Demand | Stopped])[2008/09/18 11:40:11 | 00,023,600 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\system32\drivers\TVICHW32.SYS -- (TVICHW32 [On_Demand | Stopped])========== (R ) Internet Explorer ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]"Default_Page_URL"=http://www.club-vaio.sony-europe.com"Default_Search_URL"=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"Local Page"=%SystemRoot%\system32\blank.htm"Search Page"=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"Start Page"=http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]"CustomizeSearch"=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"SearchAssistant"=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]"Default_Search_URL"=http://www.google.com/ie"Local Page"=C:\WINDOWS\system32\blank.htm"Search Page"=http://www.google.com"Start Page"=http://www.google.co.uk/[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search]"Default_Search_URL"=http://www.google.com/ie"SearchAssistant"=http://www.google.com/ie[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL]""=http://www.google.com/search?q=%s"provider"=gogl[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]"ProxyEnable" = 0========== (O1) Hosts File ==========HOSTS File = (734 bytes) - C:\WINDOWS\System32\drivers\etc\HostsFirst 25 entries...127.0.0.1 localhost========== (O2) BHO's ==========[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (HKLM) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated){3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (HKLM) -- C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.){53707962-6F74-2D53-2644-206D7942484F} (HKLM) -- C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited){761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (HKLM) -- C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)========== (O4) Run Keys ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"\IANMALPASS\EPSON Stylus D68 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P36 "\\IANMALPASS\EPSON Stylus D68 Series" /O6 "USB002" /M "Stylus D68" File not found"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)"EPSON Stylus D68 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68" File not found"LTSMMSG"=LTSMMSG.exe (Lucent Technologies)"Microsoft Works Portfolio"=C:\Program Files\Microsoft Works\WksSb.exe /AllUsers (Microsoft® Corporation)"Microsoft Works Update Detection"=C:\Program Files\Microsoft Works\WkDetect.exe (Microsoft® Corporation)"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe (ScanSoft, Inc)"PRISMSVR.EXE"="C:\WINDOWS\System32\PRISMSVR.EXE" /APPLY (Conexant Systems, Inc.)"SiS KHooker"=C:\WINDOWS\System32\khooker.exe (Silicon Integrated Systems Corporation)"SiS Tray"= File not found"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" (Sun Microsystems, Inc.)"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot (RealNetworks, Inc.)"WorksFUD"=C:\Program Files\Microsoft Works\wkfud.exe (Microsoft® Corporation)[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"1&1 EasyLogin"=C:\Program Files\1&1\1&1 EasyLogin\EasyLogin.exe (1&1 Internet España S.L.U.)"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation)"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)========== (O4) Startup Folders ==========[2003/02/25 22:37:14 | 00,110,592 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe[2005/10/21 18:54:24 | 00,430,080 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\SpeedTouch 121g Wireless USB Monitor.lnk = C:\Program Files\Thomson SpeedTouch\SpeedTouch 121g Wireless USB Monitor\st121g.exe[2002/02/06 02:04:02 | 00,040,960 | ---- | M] (Sony Corporation) -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\VAIO Action Setup (Server).lnk = C:\Program Files\Sony\VAIO Action Setup\VAServ.exe========== (O6 & O7) Current Version Policies ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]"dontdisplaylastusername"=0"legalnoticecaption"="legalnoticetext"="shutdownwithoutlogon"=1"undockwithoutlogon"=1[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]"NoDriveTypeAutoRun"=145========== (O8) IE Context Menu Extensions ==========[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\]Add to Google Photos Screensa&ver: C:\WINDOWS\system32\GPhotos.scr [2009/01/05 23:33:03 | 03,751,995 | ---- | M] (Google Inc.)========== (O9) IE Extensions ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\]{08B0E5C0-4FCB-11CF-AAA5-00401C608501}: Menu: Sun Java Console -- %ProgramFiles%\Java\jre1.6.0_07\bin\npjpi160_07.dll [2008/06/10 03:27:02 | 00,132,496 | ---- | M] (Sun Microsystems, Inc.){DFB852A3-47F8-48C4-A200-58CAB36FD2A2}: Menu: Spybot - Search & Destroy Configuration -- %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [2009/01/26 15:31:02 | 01,879,896 | ---- | M] (Safer Networking Limited){FB5F1910-F110-11d2-BB9E-00C04F795683}: Button: Messenger -- %ProgramFiles%\Messenger\msmsgs.exe [2004/08/04 08:56:53 | 01,667,584 | ---- | M] (Microsoft Corporation){FB5F1910-F110-11d2-BB9E-00C04F795683}: Menu: Windows Messenger -- %ProgramFiles%\Messenger\msmsgs.exe [2004/08/04 08:56:53 | 01,667,584 | ---- | M] (Microsoft Corporation)[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\]CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> %SystemRoot%\system32\msjava.dll [Web Browser Applet Control] -> [2002/02/18 19:23:04 | 00,945,936 | ---- | M] (Microsoft Corporation)CmdMapping\\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} [HKLM] -> %ProgramFiles%\Spybot - Search & Destroy\SDHelper.dll [spybot - Search & Destroy Configuration] -> [2009/01/26 15:31:02 | 01,879,896 | ---- | M] (Safer Networking Limited)CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2004/08/04 08:56:53 | 01,667,584 | ---- | M] (Microsoft Corporation)========== (O12) Internet Explorer Plugins ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\]PluginsPage: "" = http://activex.microsoft.com/controls/find...=%s&mime=%sPluginsPageFriendlyName: "" = Microsoft ActiveX GalleryExtension\.spop: -- C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll [2001/08/01 18:05:42 | 00,270,336 | ---- | M] (Intertrust Technologies, Inc.)========== (O13) Default Prefixes ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]""=http://========== (O15) Trusted Sites ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]1 domain(s) and sub-domain(s) not assigned to a zone.[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]Sony-europe.com: * in Trusted sitesSonystyle-europe.com: * in Trusted sites========== (O16) DPF ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]{166B1BCA-3F9C-11CF-8075-444553540000}: http://download.macromedia.com/pub/shockwa...director/sw.cab -- Shockwave ActiveX Control{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}: http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab -- Symantec AntiVirus scanner{33564D57-0000-0010-8000-00AA00389B71}: http://download.microsoft.com/download/F/6...922/wmv9VCM.CAB -- Reg Error: Key does not exist or could not be opened.{6414512B-B978-451D-A0D8-FCFDF33E833C}: http://www.update.microsoft.com/windowsupd...b?1233310837777 -- WUWebControl Class{644E432F-49D3-41A1-8DD5-E099162EEEC5}: http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab -- Symantec RuFSI Utility Class{8AD9C840-044E-11D1-B3E9-00805F499D93}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_07{BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B}: http://www.arcadetown.com/swf/deliciousdel...zylomplayer.cab -- Zylom Games Player{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_07{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab -- Java Plug-in 1.6.0_07{D27CDB6E-AE6D-11CF-96B8-444553540000}: http://download.macromedia.com/pub/shockwa...ash/swflash.cab -- Shockwave Flash ObjectMicrosoft XML Parser for Java: file://C:\WINDOWS\Java\classes\xmldso.cab -- Reg Error: Key does not exist or could not be opened.========== (O17) DNS Name Servers =========={1BB83695-B9DC-4972-A140-780FAA835E01} (Servers: | Description: 1394 Net Adapter){507CE00A-086A-423C-AF3B-7C617CD36928} (Servers: | Description: Realtek RTL8139/810X Family Fast Ethernet NIC){681FD8C1-BA41-486D-B58B-86EA63A63862} (Servers: | Description: SpeedTouch 121g Wireless USB Adapter){ABCAEEC3-7E9F-40A5-9277-95F572635C65} (Servers: | Description: 1394 Net Adapter)========== (O20) AppInit_DLLs ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]"AppInit_Dlls"=avgrsstx.dll>[2009/01/30 16:55:51 | 00,010,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\system32\avgrsstx.dll========== (O20) Winlogon Notify Settings ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\]PRISMGNA.DLL: "DllName" = PRISMGNA.DLL -- C:\WINDOWS\system32\PRISMGNA.DLL (Conexant Systems, Inc.)========== Safeboot Options =========="AlternateShell"=cmd.exe========== CDRom AutoRun Settings ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]"AutoRun" = 1========== Autorun Files on Drives ==========AUTOEXEC.BAT [][2002/04/04 23:45:30 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT -- [ NTFS ]========== Files/Folders - Created Within 30 Days ==========[1 C:\WINDOWS\System32\*.tmp files][1 C:\WINDOWS\*.tmp files][2009/01/31 10:16:11 | 00,422,912 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Ian\Desktop\OTViewIt.exe[2009/01/30 18:41:27 | 00,000,000 | ---D | C] -- C:\WINDOWS\Minidump[2009/01/30 18:08:54 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared[2009/01/30 18:08:44 | 00,000,404 | ---- | C] () -- C:\WINDOWS\tasks\Norton Security Scan for Ian.job[2009/01/30 18:08:27 | 00,002,359 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Norton Security Scan.lnk[2009/01/30 18:08:24 | 00,000,000 | ---D | C] -- C:\Program Files\Norton Security Scan[2009/01/30 16:55:52 | 00,001,511 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG Free 8.0.lnk[2009/01/30 16:55:51 | 00,010,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll[2009/01/30 16:55:50 | 00,076,040 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys[2009/01/30 16:55:42 | 00,097,928 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys[2009/01/30 16:55:40 | 00,026,824 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys[2009/01/30 16:55:21 | 32,598,094 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm[2009/01/30 16:55:21 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg[2009/01/30 16:55:21 | 00,368,010 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg[2009/01/30 16:55:21 | 00,082,350 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg[2009/01/30 16:55:21 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg[2009/01/30 16:54:49 | 00,000,000 | ---D | C] -- C:\Program Files\AVG[2009/01/30 16:54:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\avg8[2009/01/30 16:41:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch[2009/01/30 16:10:17 | 00,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpns.dll[2009/01/30 16:06:37 | 00,000,000 | ---D | C] -- C:\WINDOWS\peernet[2009/01/30 16:06:35 | 00,000,000 | ---D | C] -- C:\WINDOWS\provisioning[2009/01/30 16:03:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles[2009/01/30 15:56:01 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe[2009/01/30 15:51:48 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$[2009/01/30 15:51:41 | 00,000,000 | ---D | C] -- C:\WINDOWS\EHome[2009/01/30 11:58:02 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spnpinst.exe[2009/01/30 11:58:02 | 00,007,208 | ---- | C] () -- C:\WINDOWS\System32\secupd.sig[2009/01/30 11:58:02 | 00,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat[2009/01/30 11:30:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage[2009/01/30 11:24:53 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\bits[2009/01/30 11:24:05 | 00,438,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpob2res.dll[2009/01/30 11:24:05 | 00,351,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winhttp.dll[2009/01/30 11:24:05 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll[2009/01/30 11:24:05 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll[2009/01/30 11:24:05 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll[2009/01/30 11:21:26 | 00,323,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll[2009/01/30 11:21:26 | 00,043,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll[2009/01/30 11:21:26 | 00,034,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll[2009/01/30 11:21:26 | 00,031,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui[2009/01/30 11:21:26 | 00,018,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng.dll.mui[2009/01/30 11:21:25 | 00,213,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaucpl.cpl[2009/01/30 11:21:25 | 00,023,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaucpl.cpl.mui[2009/01/30 11:21:24 | 00,561,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll[2009/01/30 11:21:24 | 00,023,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui[2009/01/30 11:20:46 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution[2009/01/30 11:12:41 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Ian\Desktop\HiJackThis.exe[2009/01/29 20:38:59 | 00,000,937 | ---- | C] () -- C:\Documents and Settings\Ian\Desktop\Spybot - Search & Destroy.lnk[2009/01/29 20:38:46 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy[2009/01/29 20:38:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy[2009/01/29 20:37:12 | 16,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Documents and Settings\Ian\Desktop\spybotsd162.exe[2009/01/29 17:31:48 | 06,575,752 | ---- | C] (Symantec Corp.) -- C:\Documents and Settings\Ian\Desktop\Setup.exe[2009/01/24 11:53:29 | 00,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn[2009/01/24 11:53:29 | 00,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for[2009/01/23 10:00:54 | 54,157,776 | ---- | C] (AVG Technologies) -- C:\Documents and Settings\Ian\Desktop\avg_free_stf_en_8_176a1400.exe[2009/01/22 17:41:59 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft[2009/01/22 17:41:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft[2009/01/22 17:32:22 | 23,804,784 | ---- | C] () -- C:\Documents and Settings\Ian\Desktop\aaw2008-7.1.0.7.exe[2009/01/17 17:01:01 | 00,000,040 | ---- | C] () -- C:\Auth.prof[2009/01/17 14:02:22 | 00,001,789 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk[2009/01/17 14:02:22 | 00,001,697 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\InterVideo WinDVD Creator.lnk[2009/01/14 20:20:12 | 00,000,769 | ---- | C] () -- C:\Documents and Settings\Ian\Desktop\Untitled-1.htm[2009/01/14 16:57:35 | 00,015,872 | ---- | C] () -- C:\Documents and Settings\Ian\My Documents\scan2.doc[2009/01/14 13:44:35 | 00,011,776 | ---- | C] () -- C:\Documents and Settings\Ian\My Documents\scan.doc[2009/01/13 18:50:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ian\My Documents\ScheduleOCR Output[2009/01/13 18:50:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ian\My Documents\ScheduleOCR Input[2009/01/13 18:50:09 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ScanSoft[2009/01/13 18:37:07 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ian\Application Data\ScanSoft[2009/01/13 18:37:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SSScanWizard[2009/01/13 18:37:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir[2009/01/13 18:36:59 | 00,000,525 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI[2009/01/13 18:36:41 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ScanSoft Shared[2009/01/13 18:36:23 | 00,000,000 | ---D | C] -- C:\Program Files\ScanSoft[2009/01/12 17:51:13 | 00,000,000 | ---D | C] -- C:\Program Files\Egyptoid[2009/01/12 17:50:59 | 00,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade[2009/01/10 15:15:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ian\My Documents\Research Articles[2009/01/06 20:44:47 | 00,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll[2009/01/06 20:44:47 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll[2009/01/04 14:52:15 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Ian\My Documents\Holding Documents========== Files - Modified Within 30 Days ==========[1 C:\WINDOWS\System32\*.tmp files][1 C:\WINDOWS\*.tmp files][2009/01/31 10:16:12 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ian\Desktop\OTViewIt.exe[2009/01/31 10:01:49 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT[2009/01/31 10:01:27 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat[2009/01/31 10:01:25 | 25,123,6352 | -HS- | M] () -- C:\hiberfil.sys[2009/01/30 18:08:44 | 00,000,404 | ---- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Ian.job[2009/01/30 18:08:27 | 00,002,359 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Norton Security Scan.lnk[2009/01/30 16:59:27 | 32,598,094 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm[2009/01/30 16:58:50 | 00,368,010 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg[2009/01/30 16:58:50 | 00,082,350 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg[2009/01/30 16:55:52 | 00,001,511 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG Free 8.0.lnk[2009/01/30 16:55:51 | 00,010,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll[2009/01/30 16:55:50 | 00,076,040 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys[2009/01/30 16:55:42 | 00,097,928 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys[2009/01/30 16:55:40 | 00,026,824 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys[2009/01/30 16:55:21 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg[2009/01/30 16:52:24 | 00,312,378 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat[2009/01/30 16:52:24 | 00,040,448 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat[2009/01/30 16:52:21 | 00,355,944 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI[2009/01/30 16:45:44 | 00,000,074 | -HS- | M] () -- C:\Documents and Settings\Ian\My Documents\desktop.ini[2009/01/30 16:44:44 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx[2009/01/30 16:44:43 | 00,061,104 | ---- | M] () -- C:\Documents and Settings\Ian\Local Settings\Application Data\GDIPFONTCACHEV1.DAT[2009/01/30 16:43:50 | 00,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl[2009/01/30 16:40:59 | 00,225,616 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT[2009/01/30 16:15:57 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK[2009/01/30 16:10:24 | 00,000,211 | RHS- | M] () -- C:\boot.ini[2009/01/30 16:10:20 | 00,000,605 | ---- | M] () -- C:\WINDOWS\win.ini[2009/01/30 15:58:50 | 00,250,032 | RHS- | M] () -- C:\ntldr[2009/01/30 15:58:50 | 00,047,564 | RHS- | M] () -- C:\NTDETECT.COM[2009/01/30 11:12:42 | 00,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Ian\Desktop\HiJackThis.exe[2009/01/29 20:38:59 | 00,000,937 | ---- | M] () -- C:\Documents and Settings\Ian\Desktop\Spybot - Search & Destroy.lnk[2009/01/29 20:37:12 | 16,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Documents and Settings\Ian\Desktop\spybotsd162.exe[2009/01/29 20:23:31 | 00,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini[2009/01/29 17:33:12 | 06,575,752 | ---- | M] (Symantec Corp.) -- C:\Documents and Settings\Ian\Desktop\Setup.exe[2009/01/25 17:44:02 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn[2009/01/24 11:53:29 | 00,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for[2009/01/23 10:10:39 | 54,157,776 | ---- | M] (AVG Technologies) -- C:\Documents and Settings\Ian\Desktop\avg_free_stf_en_8_176a1400.exe[2009/01/22 17:39:03 | 23,804,784 | ---- | M] () -- C:\Documents and Settings\Ian\Desktop\aaw2008-7.1.0.7.exe[2009/01/22 16:29:04 | 00,000,769 | ---- | M] () -- C:\Documents and Settings\Ian\Desktop\Untitled-1.htm[2009/01/20 15:47:08 | 00,000,426 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI[2009/01/19 17:40:51 | 00,011,776 | ---- | M] () -- C:\Documents and Settings\Ian\My Documents\scan.doc[2009/01/19 16:27:23 | 00,015,872 | ---- | M] () -- C:\Documents and Settings\Ian\My Documents\scan2.doc[2009/01/17 17:01:01 | 00,000,040 | ---- | M] () -- C:\Auth.prof[2009/01/17 15:44:47 | 00,035,840 | ---- | M] () -- C:\Documents and Settings\Ian\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini[2009/01/17 14:02:22 | 00,001,789 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk[2009/01/17 14:02:22 | 00,001,697 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\InterVideo WinDVD Creator.lnk[2009/01/13 18:39:37 | 04,758,254 | -H-- | M] () -- C:\Documents and Settings\Ian\Local Settings\Application Data\IconCache.db[2009/01/13 18:36:59 | 00,000,525 | ---- | M] () -- C:\WINDOWS\MAXLINK.INI[2009/01/08 16:07:58 | 00,001,454 | ---- | M] () -- C:\Documents and Settings\Ian\Application Data\QuickZip45.ini< End of report > Edited January 31, 2009 by mojito Quote Link to post Share on other sites
mojito Posted January 31, 2009 Author Report Share Posted January 31, 2009 (edited) And the extras.txt file.Thanks for looking at these for me.OTViewIt Extras logfile created on: 31/01/2009 10:30:46 - Run 2OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\Ian\DesktopWindows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 6.0.2900.2180)Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy239.53 Mb Total Physical Memory | 102.53 Mb Available Physical Memory | 42.80% Memory free738.61 Mb Paging File | 469.43 Mb Available in Paging File | 63.56% Paging File freePaging file location(s): C:\pagefile.sys 512 1024;%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program FilesDrive C: | 18.67 Gb Total Space | 6.12 Gb Free Space | 32.79% Space Free | Partition Type: NTFSDrive D: | 18.64 Gb Total Space | 2.47 Gb Free Space | 13.25% Space Free | Partition Type: NTFSE: Drive not present or media not loadedF: Drive not present or media not loadedG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loadedComputer Name: DESKTOP-VIOCurrent User Name: IanLogged in as Administrator.Current Boot Mode: NormalScan Mode: Current userWhitelist: OnFile Age = 30 Days========== File Associations ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]========== Security Center Settings ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"AntiVirusDisableNotify"=0"FirewallDisableNotify"=0"UpdatesDisableNotify"=0"AntiVirusOverride"=0"FirewallOverride"=0[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]========== Authorized Applications List ==========[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List][2004/08/04 08:56:56 | 00,140,800 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List][2004/08/04 08:56:56 | 00,140,800 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019[2009/01/30 16:55:05 | 00,875,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe[2009/01/30 16:55:06 | 00,641,304 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe========== (O18) Protocol Handlers ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]ipp: [HKLM - No CLSID value][2004/08/04 08:56:43 | 00,532,480 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\msdaipp.dll ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - Microsoft OLE DB Moniker Binder for Internet Publishing][2009/01/30 16:55:19 | 00,079,128 | ---- | M] (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG8\avgpp.dll (linkscanner:{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} (HKLM) [XPLPPFilter Class])msdaipp: [HKLM - No CLSID value][2004/08/04 08:56:43 | 00,532,480 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\msdaipp.dll msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - Microsoft OLE DB Moniker Binder for Internet Publishing][2004/08/04 08:56:43 | 00,532,480 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\msdaipp.dll msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]========== HKEY_LOCAL_MACHINE Uninstall List ==========[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{21CF3E6E-1659-433E-B6CE-165D793560DA}"=VAIO Grid Wallpaper"{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}"=Rhapsody Player Engine"{2366D960-F00F-11D3-99D3-00C04FCCB775}"=VAIO System Information"{29F61465-428A-11D4-B646-00C04F790F76}"=DVgate"{2B9FBAE1-5016-4F14-B452-E6874A3C1284}"=VAIO Clock Screen Saver"{2BD5C305-1B27-4D41-B690-7A61172D2FEB}"=Macromedia Flash 8"{2FD4826C-1589-4FB5-8B98-D9625190B2C0}"=SpeedTouch 121g Wireless USB Adapter"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java 6 Update 7"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP"{3B24B725-D81F-442D-8CE5-2AF05A4A4CC9}"=Music Visualizer Library 1.2"{3C67D8C0-F0EC-11D3-99D3-00C04FCCB775}"=VAIO Action Setup"{4B6F4C00-E935-11D3-A98A-0080986030D9}"=Smart Capture"{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}"=Macromedia Extension Manager"{6249C22D-E6A8-407B-BA8B-40298848ED94}"=OmniPage SE"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}"=PowerDVD"{6990A2BF-D1D2-11D3-81BC-00609789C908}"=Sony DV Shared Library"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable"{764FBCE2-1593-11D4-A51F-0800460222F0}"=VAIO Web Phone"{7E819CE5-2C41-4C8D-BAF0-B49CC65C5562}"=Norton Security Scan"{802EF464-4992-42B3-8434-45151AD3C933}"=VAIO Serenus Wallpaper"{86E375D9-B56D-4D6A-87A9-ADF1CD9B6C65}"=Brother HL-2030"{885A63EA-382B-4DD4-A755-14809B8557D6}"=Macromedia Flash Player 8"{8B4AB829-DFD3-436D-B808-D9733D76C590}"=Macromedia Dreamweaver MX"{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}"=Macromedia Flash 8 Video Encoder"{98E8A2EF-4EAE-43B8-A172-74842B764777}"=InterVideo WinDVD 4"{9933F0EE-DFCD-4829-B979-3C56C367CB1A}"=InterVideo WinDVD Creator"{A228A09C-4826-42E0-A3D8-95B2BAAB5049}"=OpenMG Secure Module 3.0.01"{AC76BA86-7AD7-1033-7B44-A81200000003}"=Adobe Reader 8.1.2"{ACEC9C3E-0100-4EBE-B298-35A2145828A0}"=VAIO Brezza Wallpaper"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1"=Spybot - Search & Destroy"{BCE46757-7674-4416-BEDB-68205A60409E}"=Canon CanoScan Toolbox 4.1"{C64AA545-4301-45C6-B6D0-ED831A19A3A4}"=Online Registration"{D4A49B00-02F8-11D5-B64D-00C04F790F76}"=MovieShaker 3.3"{E2069DE3-5924-4766-A385-CDA273885A31}"=DigitalPrint 1.1"{E535DC62-56D6-11D5-8AE3-00105A7276CD}"=SonicStage 1.1.00"{F3CB4DC0-4FC0-11D5-9254-0000F460E7A9}"=SonicStage CD-R Writing Module"{F44DA61E-720D-4E79-871F-F6E628B33242}"=OpenOffice.org 3.0"{F8D0829C-9C6F-11D3-8080-00C04FA329AA}"=Microsoft Works 6.0"1&1 Acceso directo"=1&1 Acceso directo"Adobe Acrobat 5.0"=Adobe Acrobat 5.0"Adobe Flash Player ActiveX"=Adobe Flash Player ActiveX"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin"Adobe Shockwave Player"=Adobe Shockwave Player 11"AFPL Ghostscript 8.54"=AFPL Ghostscript 8.54"AFPL Ghostscript Fonts"=AFPL Ghostscript Fonts"Applian FLV Player2.0.24"=Applian FLV Player"AVG8Uninstall"=AVG Free 8.0"Beatnik Player"=Beatnik Player"BookSmartâ„¢ 1.9.9 1.9.9"=BookSmartâ„¢ 1.9.9 1.9.9"Caesar 3"=Caesar 3"Core FTP LE 2.1"=Core FTP LE 2.1"DriverAgent.exe"=DriverAgent by TouchStone Software"DVD Decrypter"=DVD Decrypter (Remove Only)"DVD Shrink_is1"=DVD Shrink 3.2"DVDFab HD Decrypter 4_is1"=DVDFab HD Decrypter 4.1.2.0"ExpressAccounts"=Express Accounts"ExpressInvoice"=Express Invoice"HijackThis"=HijackThis 2.0.2"Hospital"=Theme Hospital"HourGuard"=HourGuard Time Sheet"Inkscape"=Inkscape 0.46"InstallShield_{2FD4826C-1589-4FB5-8B98-D9625190B2C0}"=SpeedTouch 121g Wireless USB Adapter"InstallShield_{C64AA545-4301-45C6-B6D0-ED831A19A3A4}"=VAIO Online Registration"Lucent Technologies Soft Modem"=Lucent Technologies Soft Modem AMR"Midway Arcade Treasures"=Midway Arcade Treasures"Motion JPEG Software Decoder"=Motion JPEG Software Decoder"Mozilla Firefox (3.0.5)"=Mozilla Firefox (3.0.5)"NeroMultiInstaller!UninstallKey"=Nero Suite"NSSSetup.{7E819CE5-2C41-4C8D-BAF0-B49CC65C5562}"=Norton Security Scan (Symantec Corporation)"OpenMG HotFix3.0.01-02-01-18-01"=OpenMG Limited Patch 3.0.01-02-01-18-01"Picasa 3"=Picasa 3"Powerbullet Presenter free v1.35_is1"=Powerbullet Presenter"Quick Zip_is1"=Quick Zip 4.60.018"QuickTime"=QuickTime"RealPlayer 6.0"=RealPlayer"RealProducer 8.5"=RealProducer Basic 8.5"Serif PhotoPlus 6.0"=Serif PhotoPlus 6.0"Shockwave"=Shockwave"Sierra Utilities"=Sierra Utilities"SiS 650_740"=SiS 650_740"SiS7012"=SiS Audio Driver"Windows XP Service Pack"=Windows XP Service Pack 2"WinGimp-2.0_is1"=GIMP 2.4.7========== Last 10 Event Log Errors ==========[ Application Events ]Error - 15/12/2008 17:04:00 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application Dreamweaver.exe, version 6.0.1714.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.Error - 22/12/2008 12:10:18 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application st121g.exe, version 2.3.0.2, hang module hungapp, version 0.0.0.0, hang address 0x00000000.Error - 24/12/2008 12:15:13 | Computer Name = DESKTOP-VIO | Source = Application Error | ID = 1000Description = Faulting application omgjbox.exe, version 2.3.3.13100, faulting module contentregistrar.dll, version 2.3.0.10050, fault address 0x0000460f.Error - 30/12/2008 02:27:32 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application st121g.exe, version 2.3.0.2, hang module hungapp, version 0.0.0.0, hang address 0x00000000.Error - 03/01/2009 15:53:33 | Computer Name = DESKTOP-VIO | Source = Application Error | ID = 1000Description = Faulting application soffice.bin, version 3.0.9357.500, faulting module swmi.dll, version 3.0.500.0, fault address 0x0036066d.Error - 03/01/2009 16:09:12 | Computer Name = DESKTOP-VIO | Source = Application Error | ID = 1000Description = Faulting application soffice.bin, version 3.0.9357.500, faulting module swmi.dll, version 3.0.500.0, fault address 0x0036066d.Error - 05/01/2009 11:45:19 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application inkscape.exe, version 0.46.0.0, hang module libgtk-win32-2.0-0.dll, version 2.12.6.0, hang address 0x0010df01.Error - 05/01/2009 14:58:10 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application inkscape.exe, version 0.46.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.Error - 05/01/2009 16:06:11 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application IEXPLORE.EXE, version 6.0.2600.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.Error - 06/01/2009 14:17:30 | Computer Name = DESKTOP-VIO | Source = Application Hang | ID = 1002Description = Hanging application Dreamweaver.exe, version 6.0.1714.0, hang module Dreamweaver.exe, version 6.0.1714.0, hang address 0x000cc98f.[ System Events ]Error - 30/01/2009 11:47:18 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 11:50:09 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 11:51:39 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 11:51:44 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 11:51:47 | Computer Name = DESKTOP-VIO | Source = Server | ID = 2505Description = The server could not bind to the transport \Device\NetbiosSmb because another computer on the network has the same name. The server could not start.Error - 30/01/2009 12:12:55 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 12:35:37 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 13:45:19 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).Error - 30/01/2009 13:46:33 | Computer Name = DESKTOP-VIO | Source = System Error | ID = 1003Description = Error code 100000d1, parameter1 0000623d, parameter2 0000001e, parameter3 00000000, parameter4 0000623d.Error - 31/01/2009 05:05:40 | Computer Name = DESKTOP-VIO | Source = Dhcp | ID = 1002Description = The IP address lease 192.168.0.100 for the Network Card with network address 0012BF24F585 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).< End of report > Edited January 31, 2009 by mojito Quote Link to post Share on other sites
Andro1d Posted February 5, 2009 Report Share Posted February 5, 2009 Hey again,Step 1Please download JavaRa to your Desktop and unzip it to its own folder.Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.Accept any prompts. Open JavaRa.exe again and select Search For Updates.Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.Step 2Please download ATF Cleaner by Atribune.Double-click ATF-Cleaner.exe to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Step 3Please do an online scan with Kaspersky WebScannerI highly recommend using Internet Explorer for best results!Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.Click on the Accept button and install any components it needs.The program will install and then begin downloading the latest definition files.Once they are downloaded, the database will be updated.Please accept any ActiveX or Java notificationsAfter the files have been updated, go to the left side of the page under the Scan section and select My Computer.This will start the program and scan your system.The scan will take a while so be patient and let it run.Once the scan is complete, click on View scan reportNow, click on the Save Report as button.Save the file to your desktop.Copy and paste that information in your next post. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.