shawnselig Posted July 18, 2005 Report Share Posted July 18, 2005 Logfile of HijackThis v1.99.1Scan saved at 8:30:56 AM, on 07/18/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\WINDOWS\system32\crypserv.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\Program Files\ewido\security suite\ewidoguard.exeC:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXEC:\WINDOWS\system32\nvsvc32.exeC:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXEC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Dell Support\DSAgnt.exeC:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeC:\Program Files\Mirc 6.16\mirc.exeC:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\hijackthis\hijackthis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.eastlink.ca/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.comO2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - C:\WINDOWS\SYSTEM32\HDBHO.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dllO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dllO4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -startO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [iSUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startupO4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckRegO4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startupO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.htmlO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dllO9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)O9 - Extra button: WIC Messenger - {CD3A1E66-5772-4b4d-B69A-A21F377499B6} - C:\Program Files\WIC Messenger\wicmessenger.exe (file missing)O9 - Extra 'Tools' menuitem: WIC Messenger - {CD3A1E66-5772-4b4d-B69A-A21F377499B6} - C:\Program Files\WIC Messenger\wicmessenger.exe (file missing)O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CABO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cabO16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CABO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by20fd.bay20.hotmail.msn.com/resources/MsnPUpld.cabO16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://www.ea.com/downloads/rtpatch/EARTPX.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab27513.cabO16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/...utocomplete.cabO16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO16 - DPF: {C432C4BD-3566-411C-8F3C-E5E0D3AE5D33} (CBrowser Class) - http://www.streamingfaith.com/common/mbrow...MINIBrowser.CABO16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cabO16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cabO16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.streamload.com/Upload/XUpload.ocxO16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...389/mcfscan.cabO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cabO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exeO23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exeO23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXEO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXEO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe Link to post Share on other sites
Atribune Posted July 18, 2005 Report Share Posted July 18, 2005 Download the RKFiles.zip from here:http://skads.org/special/rkfiles.zip1. Reboot into safe mode2. Open the C:\Antispyware\RKFiles folder* Locate and double-click the RKFILES.BAT to run this tool.* Sit back and wait untill its finished.* When it is finally finished a text file will open.* Save the contents of that text file.Note: It should save by default to C:\Log.txt3. Reboot back to Normal Mode.4. Post the log Also lets do silent runners* Please click this link to download Silent Runners.* Save it to the desktop.* Run Silent Runner's by doubleclicking the "Silent Runners" icon on your desktop.* You will see a text file appear on the desktop - it's not done yet, just let it run (it won't appear to be doing anything!)* Once you receive the prompt "All Done!", double-click on the new text file on the desktop and copy that entire log and paste it here.*NOTE* If you receive any warning message about scripts, please choose to allow the script to run. Link to post Share on other sites
shawnselig Posted July 18, 2005 Author Report Share Posted July 18, 2005 07/18/2005 8:42:57 AM Service Control Manager Information None 7036 N/A D3S6H341 The ewido security suite guard service entered the stopped state.07/18/2005 8:38:54 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 8:38:42 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 8:38:42 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 8:25:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 8:25:42 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 8:25:42 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 8:21:01 AM Application Popup Information None 26 N/A D3S6H341 "Application popup: NPROTECT.EXE - Application Error : The instruction at ""0x0124131b"" referenced memory at ""0x0027fffc"". The memory could not be ""read"".Click on OK to terminate the program"07/18/2005 8:18:24 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/18/2005 8:18:24 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/18/2005 8:18:23 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/18/2005 8:18:23 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/18/2005 8:18:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/18/2005 8:18:22 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/18/2005 8:18:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 8:18:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/18/2005 8:18:21 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/18/2005 8:18:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/18/2005 8:18:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/18/2005 8:18:20 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 8:18:20 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 8:18:20 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/18/2005 8:17:49 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/18/2005 8:17:49 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/18/2005 8:17:49 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/18/2005 8:17:49 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/18/2005 8:17:45 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/18/2005 8:17:13 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/18/2005 8:17:08 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/18/2005 8:17:35 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/18/2005 8:17:18 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/18/2005 8:17:18 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/18/2005 7:37:56 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/18/2005 7:37:55 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/18/2005 7:37:55 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/18/2005 7:37:54 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/18/2005 7:37:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/18/2005 7:37:53 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/18/2005 7:37:52 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/18/2005 7:37:51 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/18/2005 7:37:51 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/18/2005 7:37:51 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/18/2005 7:37:51 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/18/2005 7:37:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 7:37:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 7:37:20 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 7:37:19 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/18/2005 7:37:19 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/18/2005 7:37:19 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/18/2005 7:37:18 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/18/2005 7:37:15 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/18/2005 7:36:42 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/18/2005 7:36:39 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/18/2005 7:37:05 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/18/2005 7:36:49 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/18/2005 7:36:49 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/18/2005 7:35:53 AM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/18/2005 7:30:04 AM Service Control Manager Error None 7034 N/A D3S6H341 The Symantec Event Manager service terminated unexpectedly. It has done this 1 time(s).07/18/2005 7:25:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/18/2005 7:25:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/18/2005 7:25:22 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/18/2005 7:25:22 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/18/2005 7:25:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/18/2005 7:25:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/18/2005 7:25:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 7:25:21 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/18/2005 7:25:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/18/2005 7:25:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/18/2005 7:25:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/18/2005 7:25:19 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 7:25:19 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 7:25:19 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/18/2005 7:24:49 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/18/2005 7:24:49 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/18/2005 7:24:49 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/18/2005 7:24:48 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/18/2005 7:24:41 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/18/2005 7:24:09 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/18/2005 7:24:06 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/18/2005 7:24:31 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/18/2005 7:24:15 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/18/2005 7:24:15 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/18/2005 7:21:44 AM Service Control Manager Error None 7034 N/A D3S6H341 The Symantec Event Manager service terminated unexpectedly. It has done this 1 time(s).07/18/2005 7:21:14 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/18/2005 7:21:14 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/18/2005 7:21:14 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 7:21:14 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/18/2005 7:21:14 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/18/2005 7:21:14 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/18/2005 7:21:13 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/18/2005 7:21:13 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/18/2005 7:21:13 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/18/2005 7:21:13 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/18/2005 7:21:13 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/18/2005 7:21:12 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 7:21:11 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 7:21:11 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/18/2005 7:20:41 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/18/2005 7:20:41 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/18/2005 7:20:41 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/18/2005 7:20:40 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/18/2005 7:20:35 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/18/2005 7:20:04 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/18/2005 7:20:01 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/18/2005 7:20:30 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/18/2005 7:20:10 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/18/2005 7:20:10 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/18/2005 7:19:13 AM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/18/2005 7:12:28 AM Service Control Manager Information None 7036 N/A D3S6H341 The IMAPI CD-Burning COM Service service entered the running state.07/18/2005 7:12:28 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The IMAPI CD-Burning COM Service service was successfully sent a start control.07/18/2005 7:12:27 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/18/2005 7:12:27 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/18/2005 7:12:27 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/18/2005 7:12:26 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/18/2005 7:12:26 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/18/2005 7:12:26 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/18/2005 7:12:25 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/18/2005 7:12:25 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/18/2005 7:12:25 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/18/2005 7:12:25 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/18/2005 7:12:24 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/18/2005 7:12:24 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/18/2005 7:12:24 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/18/2005 7:12:24 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/18/2005 7:11:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/18/2005 7:11:53 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/18/2005 7:11:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/18/2005 7:11:53 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/18/2005 7:11:28 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/18/2005 7:10:58 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/18/2005 7:10:55 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/18/2005 7:11:20 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/18/2005 7:11:05 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/18/2005 7:11:05 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/17/2005 9:04:01 PM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/17/2005 9:03:38 PM Application Popup Information None 26 N/A D3S6H341 Application popup: dwwin.exe - DLL Initialization Failed : The application failed to initialize because the window station is shutting down. 07/17/2005 9:02:55 PM Application Popup Information None 26 N/A D3S6H341 Application popup: msmsgs.exe - Application Error : The exception unknown software exception (0xc0000409) occurred in the application at location 0x59a7adc1.07/17/2005 6:28:41 PM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/17/2005 6:28:40 PM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/17/2005 6:28:39 PM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/17/2005 6:28:39 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/17/2005 6:28:38 PM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/17/2005 6:28:38 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/17/2005 6:28:37 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/17/2005 6:28:37 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/17/2005 6:28:37 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/17/2005 6:28:36 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/17/2005 6:28:36 PM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/17/2005 6:28:36 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/17/2005 6:28:36 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/17/2005 6:28:36 PM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/17/2005 6:28:05 PM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/17/2005 6:28:05 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/17/2005 6:28:05 PM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/17/2005 6:28:05 PM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/17/2005 6:28:01 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/17/2005 6:27:29 PM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/17/2005 6:27:27 PM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/17/2005 6:27:52 PM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/17/2005 6:27:34 PM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/17/2005 6:27:34 PM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/17/2005 3:50:54 PM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/17/2005 3:35:50 PM Application Popup Information None 26 N/A D3S6H341 "Application popup: iexplore.exe - Application Error : The instruction at ""0x1001a584"" referenced memory at ""0x1001a584"". The memory could not be ""read"".Click on OK to terminate the program"07/17/2005 3:27:11 PM Tcpip Information None 4201 N/A D3S6H341 The system detected that network adapter \DEVICE\TCPIP_{9813F5A3-7C77-4E1A-BC71-3C2E47EF6126} was connected to the network, and has initiated normal operation over the network adapter.07/17/2005 3:27:11 PM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/17/2005 3:27:05 PM E100B Warning None 4 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down07/17/2005 3:26:54 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/17/2005 3:26:53 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/17/2005 3:25:54 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/17/2005 3:25:53 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/17/2005 3:25:28 PM Tcpip Information None 4201 N/A D3S6H341 The system detected that network adapter \DEVICE\TCPIP_{9813F5A3-7C77-4E1A-BC71-3C2E47EF6126} was connected to the network, and has initiated normal operation over the network adapter.07/17/2005 3:25:23 PM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/17/2005 3:25:08 PM Tcpip Information None 4202 N/A D3S6H341 The system detected that network adapter \DEVICE\TCPIP_{9813F5A3-7C77-4E1A-BC71-3C2E47EF6126} was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers.07/17/2005 3:25:01 PM E100B Warning None 4 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Down07/17/2005 3:13:11 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/17/2005 3:13:09 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/17/2005 2:50:51 PM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/17/2005 2:50:50 PM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/17/2005 2:50:50 PM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/17/2005 2:50:50 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/17/2005 2:50:50 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/17/2005 2:50:49 PM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/17/2005 2:50:49 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/17/2005 2:50:49 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/17/2005 2:50:47 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/17/2005 2:50:47 PM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/17/2005 2:50:47 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/17/2005 2:50:46 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/17/2005 2:50:46 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/17/2005 2:50:44 PM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/17/2005 2:50:44 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/17/2005 2:50:44 PM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/17/2005 2:50:44 PM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/17/2005 2:50:42 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/17/2005 2:50:09 PM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/17/2005 2:50:07 PM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/17/2005 2:50:33 PM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/17/2005 2:50:15 PM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/17/2005 2:50:15 PM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/17/2005 10:12:11 AM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/17/2005 10:00:10 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/17/2005 10:00:08 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/17/2005 10:00:08 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/17/2005 10:00:08 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/17/2005 10:00:08 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/17/2005 10:00:08 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/17/2005 10:00:08 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/17/2005 10:00:07 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/17/2005 10:00:07 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/17/2005 10:00:07 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/17/2005 10:00:05 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/17/2005 10:00:05 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/17/2005 10:00:05 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/17/2005 10:00:05 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/17/2005 9:59:34 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/17/2005 9:59:34 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/17/2005 9:59:34 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/17/2005 9:59:34 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/17/2005 9:59:32 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/17/2005 9:59:00 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/17/2005 9:58:55 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/17/2005 9:59:23 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/17/2005 9:59:05 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/17/2005 9:59:05 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/17/2005 9:53:21 AM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/17/2005 9:52:36 AM Service Control Manager Information None 7036 N/A D3S6H341 The ewido security suite guard service entered the running state.07/17/2005 9:52:36 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The ewido security suite guard service was successfully sent a start control.07/17/2005 9:51:37 AM Service Control Manager Information None 7036 N/A D3S6H341 The ewido security suite guard service entered the stopped state.07/17/2005 9:51:24 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/17/2005 9:51:23 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/17/2005 9:51:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/17/2005 9:51:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/17/2005 9:51:20 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/17/2005 9:51:20 AM Service Control Manager Information None 7036 N/A D3S6H341 The ewido security suite guard service entered the running state.07/17/2005 9:51:20 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The ewido security suite guard service was successfully sent a start control.07/17/2005 9:51:20 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/17/2005 9:51:20 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/17/2005 9:51:20 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/17/2005 9:51:20 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/17/2005 9:51:19 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/17/2005 9:51:19 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/17/2005 9:51:19 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/17/2005 9:51:19 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/17/2005 9:51:19 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/17/2005 9:50:56 AM DCOM Error None 10010 D3S6H341\barb selig D3S6H341 The server {3C9EFEC1-8D1A-11D5-989F-0000E87B4FB1} did not register with DCOM within the required timeout.07/17/2005 9:50:48 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/17/2005 9:50:48 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/17/2005 9:50:48 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/17/2005 9:50:48 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/17/2005 9:50:41 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/17/2005 9:50:05 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/17/2005 9:50:03 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/17/2005 9:50:32 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/17/2005 9:50:10 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/17/2005 9:50:10 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/16/2005 10:38:25 PM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/16/2005 10:35:24 PM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/16/2005 10:35:23 PM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/16/2005 10:35:22 PM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/16/2005 10:35:22 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/16/2005 10:35:21 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/16/2005 10:35:21 PM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/16/2005 10:35:21 PM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/16/2005 10:35:20 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/16/2005 10:35:20 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/16/2005 10:35:20 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/16/2005 10:35:19 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/16/2005 10:35:18 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/16/2005 10:35:18 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/16/2005 10:35:18 PM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/16/2005 10:34:47 PM Service Control Manager Information None 7036 N/A D3S6H341 The Fax service entered the stopped state.07/16/2005 10:34:47 PM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/16/2005 10:34:47 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/16/2005 10:34:47 PM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/16/2005 10:34:47 PM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/16/2005 10:34:45 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/16/2005 10:34:35 PM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/16/2005 10:34:12 PM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/16/2005 10:34:02 PM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/16/2005 10:34:17 PM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/16/2005 10:34:17 PM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/16/2005 4:14:44 PM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/16/2005 3:04:57 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/16/2005 3:04:56 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/16/2005 3:03:58 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/16/2005 3:03:56 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/16/2005 10:33:03 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/16/2005 10:33:02 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/16/2005 10:05:37 AM Service Control Manager Information None 7036 N/A D3S6H341 The IMAPI CD-Burning COM Service service entered the stopped state.07/16/2005 10:04:08 AM Service Control Manager Information None 7036 N/A D3S6H341 The IMAPI CD-Burning COM Service service entered the running state.07/16/2005 10:04:08 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The IMAPI CD-Burning COM Service service was successfully sent a start control.07/16/2005 8:45:54 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/16/2005 8:45:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/16/2005 8:45:53 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/16/2005 8:45:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/16/2005 8:45:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/16/2005 8:45:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/16/2005 8:45:53 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/16/2005 8:45:53 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/16/2005 8:45:53 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/16/2005 8:45:53 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/16/2005 8:45:51 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/16/2005 8:45:51 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/16/2005 8:45:51 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/16/2005 8:45:51 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/16/2005 8:45:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/16/2005 8:45:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fax service entered the stopped state.07/16/2005 8:45:21 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/16/2005 8:45:21 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/16/2005 8:45:17 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/16/2005 8:45:14 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/16/2005 8:44:41 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/16/2005 8:44:39 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/16/2005 8:45:03 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/16/2005 8:44:46 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/16/2005 8:44:46 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/16/2005 8:30:13 AM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/16/2005 8:12:21 AM Application Popup Information None 26 N/A D3S6H341 "Application popup: wmplayer.exe - Application Error : The instruction at ""0x078f0807"" referenced memory at ""0x08be8c30"". The memory could not be ""read"".Click on OK to terminate the program"07/16/2005 7:32:34 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/16/2005 7:32:34 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/16/2005 7:32:32 AM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/16/2005 7:32:32 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/16/2005 7:32:32 AM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/16/2005 7:32:32 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/16/2005 7:32:31 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/16/2005 7:32:31 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/16/2005 7:32:31 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/16/2005 7:32:31 AM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/16/2005 7:32:31 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/16/2005 7:32:30 AM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/16/2005 7:32:30 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/16/2005 7:32:30 AM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/16/2005 7:32:00 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fax service entered the stopped state.07/16/2005 7:31:59 AM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/16/2005 7:31:59 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/16/2005 7:31:59 AM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/16/2005 7:31:59 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/16/2005 7:31:59 AM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/16/2005 7:31:52 AM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/16/2005 7:31:24 AM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/16/2005 7:31:15 AM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/16/2005 7:31:29 AM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/16/2005 7:31:29 AM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/15/2005 8:34:55 PM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/15/2005 2:37:57 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 2:37:56 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 2:37:03 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 2:37:02 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 2:19:43 PM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/15/2005 2:19:43 PM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/15/2005 2:19:42 PM Service Control Manager Information None 7036 N/A D3S6H341 The Application Layer Gateway Service service entered the running state.07/15/2005 2:19:42 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Application Layer Gateway Service service was successfully sent a start control.07/15/2005 2:19:41 PM Service Control Manager Information None 7036 N/A D3S6H341 The SSDP Discovery Service service entered the running state.07/15/2005 2:19:41 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the stopped state.07/15/2005 2:19:41 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Norton Unerase Protection Driver service was successfully sent a start control.07/15/2005 2:19:41 PM Service Control Manager Information None 7036 N/A D3S6H341 The Network Location Awareness (NLA) service entered the running state.07/15/2005 2:19:40 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The SSDP Discovery Service service was successfully sent a start control.07/15/2005 2:19:40 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Network Location Awareness (NLA) service was successfully sent a start control.07/15/2005 2:19:38 PM Service Control Manager Information None 7036 N/A D3S6H341 The Symantec Password Validation service entered the running state.07/15/2005 2:19:38 PM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/15/2005 2:19:38 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Symantec Password Validation service was successfully sent a start control.07/15/2005 2:19:38 PM Service Control Manager Error None 7011 N/A D3S6H341 Timeout (30000 milliseconds) waiting for a transaction response from the ewido security suite control service.07/15/2005 2:19:08 PM Service Control Manager Information None 7036 N/A D3S6H341 The Fast User Switching Compatibility service entered the running state.07/15/2005 2:19:08 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fast User Switching Compatibility service was successfully sent a start control.07/15/2005 2:19:08 PM Service Control Manager Information None 7036 N/A D3S6H341 The Terminal Services service entered the running state.07/15/2005 2:19:07 PM Service Control Manager Error None 7026 N/A D3S6H341 The following boot-start or system-start driver(s) failed to load: black07/15/2005 2:19:03 PM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The Fax service was successfully sent a stop control.07/15/2005 2:18:31 PM E100B Information None 5 N/A D3S6H341 Adapter Intel® PRO/100 VE Network Connection: Adapter Link Up07/15/2005 2:18:26 PM redbook Information None 10 N/A D3S6H341 This drive has not been shown to support digital audio playback.07/15/2005 2:18:53 PM Service Control Manager Error None 7000 N/A D3S6H341 The Plextor ConvertX PX-M401U service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 07/15/2005 2:18:36 PM EventLog Information None 6005 N/A D3S6H341 The Event log service was started.07/15/2005 2:18:36 PM EventLog Information None 6009 N/A D3S6H341 Microsoft ® Windows ® 5.01. 2600 Service Pack 2 Uniprocessor Free.07/15/2005 1:22:54 PM EventLog Information None 6006 N/A D3S6H341 The Event log service was stopped.07/15/2005 1:22:01 PM USER32 Warning None 1073 NT AUTHORITY\SYSTEM D3S6H341 The attempt to power off D3S6H341 failed07/15/2005 10:06:51 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 10:03:44 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 9:22:09 AM Service Control Manager Information None 7036 N/A D3S6H341 The ewido security suite guard service entered the running state.07/15/2005 9:22:09 AM Service Control Manager Information None 7035 NT AUTHORITY\SYSTEM D3S6H341 The ewido security suite guard service was successfully sent a start control.07/15/2005 9:21:02 AM Service Control Manager Information None 7036 N/A D3S6H341 The ewido security suite guard service entered the stopped state.07/15/2005 8:44:09 AM Application Popup Information None 26 N/A D3S6H341 "Application popup: CiceroUIWndFrame: iexplore.exe - Application Error : The instruction at ""0x018227cd"" referenced memory at ""0x018227cd"". The memory could not be ""read"".Click on OK to terminate the program"07/15/2005 8:15:48 AM Tcpip Warning None 4226 N/A D3S6H341 TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.07/15/2005 7:41:05 AM Windows File Protection Information None 64005 N/A D3S6H341 The protected system file tcpip.sys was not restored to its original, valid version because the Windows File Protection restoration process was cancelled by user interaction, user name is barb selig. The file version of the bad file is 5.1.2600.2685.07/15/2005 7:40:59 AM Application Popup Information None 26 N/A D3S6H341 Application popup: Windows File Protection : Possible reasons for this problem:• You have inserted the wrong CD. (i.e., a different Windows product CD than the version installed)• The CD-ROM drive in your system is not functioning.07/15/2005 7:23:27 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 7:23:23 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The SDDMI2 service was successfully sent a start control.07/15/2005 7:17:34 AM Service Control Manager Information None 7036 N/A D3S6H341 The Computer Browser service entered the stopped state.07/15/2005 7:17:34 AM Service Control Manager Information None 7036 N/A D3S6H341 The Remote Access Connection Manager service entered the running state.07/15/2005 7:17:33 AM Service Control Manager Information None 7035 D3S6H341\barb selig D3S6H341 The Remote Access Connection Manager service was successfully sent a start control.07/15/2005 7:17:32 Link to post Share on other sites
shawnselig Posted July 18, 2005 Author Report Share Posted July 18, 2005 07/18/2005 8:38:42 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 8:25:42 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 8:25:15 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/18/2005 8:21:37 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/18/2005 8:21:37 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/18/2005 8:18:21 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/18/2005 8:18:20 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 8:17:45 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/18/2005 8:17:45 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/18/2005 8:17:35 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/18/2005 8:17:34 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/18/2005 8:17:32 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/18/2005 8:17:31 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 8:17:31 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/18/2005 8:17:31 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/18/2005 8:17:31 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/18/2005 8:17:30 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/18/2005 8:17:30 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/18/2005 8:17:30 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/18/2005 8:17:30 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/18/2005 7:41:13 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/18/2005 7:41:13 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/18/2005 7:37:22 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/18/2005 7:37:21 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:37:14 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/18/2005 7:37:14 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/18/2005 7:37:05 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/18/2005 7:37:03 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:37:02 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/18/2005 7:37:00 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:37:00 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/18/2005 7:37:00 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/18/2005 7:37:00 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/18/2005 7:37:00 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/18/2005 7:37:00 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:36:59 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/18/2005 7:36:59 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/18/2005 7:35:51 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/18/2005 7:28:35 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/18/2005 7:28:35 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/18/2005 7:25:21 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/18/2005 7:25:19 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:24:41 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/18/2005 7:24:41 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/18/2005 7:24:31 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/18/2005 7:24:29 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:24:28 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/18/2005 7:24:26 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:24:26 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/18/2005 7:24:26 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/18/2005 7:24:26 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/18/2005 7:24:26 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/18/2005 7:24:26 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:24:26 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/18/2005 7:24:26 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/18/2005 7:21:11 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:20:35 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/18/2005 7:20:35 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/18/2005 7:20:30 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/18/2005 7:20:30 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:20:26 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/18/2005 7:20:24 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:20:24 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/18/2005 7:20:24 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/18/2005 7:20:24 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/18/2005 7:20:23 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/18/2005 7:20:23 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:20:23 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/18/2005 7:20:23 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/18/2005 7:19:11 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/18/2005 7:15:22 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/18/2005 7:15:22 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/18/2005 7:13:37 AM Application Hang Error None 1001 N/A D3S6H341 Fault bucket 155330254.07/18/2005 7:13:33 AM Application Hang Error (101) 1002 N/A D3S6H341 Hanging application nero.exe, version 6.6.0.3, hang module hungapp, version 0.0.0.0, hang address 0x00000000.07/18/2005 7:12:24 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:11:28 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/18/2005 7:11:28 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/18/2005 7:11:20 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/18/2005 7:11:19 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:11:18 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/18/2005 7:11:16 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/18/2005 7:11:16 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/18/2005 7:11:16 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/18/2005 7:11:16 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/18/2005 7:11:16 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/18/2005 7:11:16 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/18/2005 7:11:16 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/18/2005 7:11:16 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/17/2005 9:03:58 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/17/2005 6:31:53 PM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/17/2005 6:31:53 PM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/17/2005 6:28:36 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 6:28:01 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/17/2005 6:28:01 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/17/2005 6:27:52 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/17/2005 6:27:50 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/17/2005 6:27:49 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/17/2005 6:27:47 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 6:27:47 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/17/2005 6:27:47 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/17/2005 6:27:47 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/17/2005 6:27:47 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/17/2005 6:27:47 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/17/2005 6:27:47 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/17/2005 6:27:46 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/17/2005 3:50:51 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/17/2005 2:54:36 PM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/17/2005 2:54:36 PM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/17/2005 2:50:47 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 2:50:42 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/17/2005 2:50:42 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/17/2005 2:50:33 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/17/2005 2:50:32 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/17/2005 2:50:28 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/17/2005 2:50:26 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 2:50:26 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/17/2005 2:50:26 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/17/2005 2:50:26 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/17/2005 2:50:26 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/17/2005 2:50:26 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/17/2005 2:50:26 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/17/2005 2:50:26 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/17/2005 10:12:09 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/17/2005 10:03:25 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/17/2005 10:03:25 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/17/2005 10:00:05 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 9:59:32 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/17/2005 9:59:32 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/17/2005 9:59:23 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/17/2005 9:59:21 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/17/2005 9:59:19 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/17/2005 9:59:17 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 9:59:17 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/17/2005 9:59:17 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/17/2005 9:59:17 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/17/2005 9:59:16 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/17/2005 9:59:16 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/17/2005 9:59:16 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/17/2005 9:59:16 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/17/2005 9:53:21 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/17/2005 9:51:20 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/17/2005 9:51:19 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 9:50:41 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/17/2005 9:50:41 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/17/2005 9:50:32 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/17/2005 9:50:28 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/17/2005 9:50:25 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/17/2005 9:50:22 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/17/2005 9:50:22 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/17/2005 9:50:22 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/17/2005 9:50:22 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/17/2005 9:50:22 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/17/2005 9:50:22 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/17/2005 9:50:22 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/17/2005 9:50:22 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/16/2005 10:38:25 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/16/2005 10:35:18 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/16/2005 10:34:45 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/16/2005 10:34:45 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/16/2005 10:34:35 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/16/2005 10:34:33 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/16/2005 10:34:31 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/16/2005 10:34:30 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/16/2005 10:34:29 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/16/2005 10:34:29 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/16/2005 10:34:29 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/16/2005 10:34:29 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/16/2005 10:34:29 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/16/2005 10:34:29 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/16/2005 10:34:29 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/16/2005 4:14:41 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/16/2005 8:49:05 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/16/2005 8:49:05 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/16/2005 8:45:51 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/16/2005 8:45:13 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/16/2005 8:45:13 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/16/2005 8:45:04 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/16/2005 8:45:02 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/16/2005 8:45:00 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/16/2005 8:44:58 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/16/2005 8:44:58 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/16/2005 8:44:58 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/16/2005 8:44:58 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/16/2005 8:44:58 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/16/2005 8:44:58 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/16/2005 8:44:57 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/16/2005 8:44:57 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/16/2005 8:30:12 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/16/2005 7:35:51 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/16/2005 7:35:51 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/16/2005 7:32:30 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/16/2005 7:31:57 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/16/2005 7:31:57 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/16/2005 7:31:51 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/16/2005 7:31:48 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/16/2005 7:31:46 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/16/2005 7:31:45 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/16/2005 7:31:45 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/16/2005 7:31:45 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/16/2005 7:31:45 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/16/2005 7:31:43 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/16/2005 7:31:43 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/16/2005 7:31:43 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/16/2005 7:31:43 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/15/2005 8:34:52 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/15/2005 2:22:55 PM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/15/2005 2:22:54 PM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/15/2005 2:19:38 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/15/2005 2:19:02 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/15/2005 2:19:02 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/15/2005 2:18:53 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/15/2005 2:18:51 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/15/2005 2:18:50 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/15/2005 2:18:48 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/15/2005 2:18:48 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/15/2005 2:18:48 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/15/2005 2:18:48 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/15/2005 2:18:48 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/15/2005 2:18:48 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/15/2005 2:18:47 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/15/2005 2:18:47 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/15/2005 1:22:50 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/15/2005 7:21:17 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/15/2005 7:21:16 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/15/2005 7:17:32 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/15/2005 7:17:29 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/15/2005 7:17:19 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/15/2005 7:17:19 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/15/2005 7:17:12 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/15/2005 7:17:10 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/15/2005 7:17:09 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/15/2005 7:17:06 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/15/2005 7:17:06 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/15/2005 7:17:06 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/15/2005 7:17:06 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/15/2005 7:17:06 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/15/2005 7:17:06 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/15/2005 7:17:06 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/15/2005 7:17:06 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/14/2005 2:59:25 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/14/2005 12:43:35 PM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/14/2005 12:43:35 PM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/14/2005 12:41:59 PM Application Hang Error (101) 1002 N/A D3S6H341 Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.07/14/2005 12:41:44 PM Application Hang Error (101) 1002 N/A D3S6H341 Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.07/14/2005 12:39:48 PM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/14/2005 12:39:46 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/14/2005 12:39:40 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/14/2005 12:39:40 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/14/2005 12:39:32 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/14/2005 12:39:30 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/14/2005 12:39:28 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/14/2005 12:39:26 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/14/2005 12:39:26 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/14/2005 12:39:26 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/14/2005 12:39:26 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/14/2005 12:39:26 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/14/2005 12:39:26 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/14/2005 12:39:26 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/14/2005 12:39:26 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/14/2005 12:38:16 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/14/2005 8:03:38 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/14/2005 8:03:38 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/14/2005 7:59:48 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/14/2005 7:59:46 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/14/2005 7:59:37 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/14/2005 7:59:37 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/14/2005 7:59:36 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/14/2005 7:59:35 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/14/2005 7:59:34 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/14/2005 7:59:31 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/14/2005 7:59:31 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/14/2005 7:59:31 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/14/2005 7:59:31 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/14/2005 7:59:31 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/14/2005 7:59:31 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/14/2005 7:59:31 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/14/2005 7:59:31 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/13/2005 8:37:54 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/13/2005 8:37:02 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 8:36:55 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/13/2005 8:36:55 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/13/2005 8:36:54 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/13/2005 8:36:53 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/13/2005 8:36:51 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/13/2005 8:36:49 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 8:36:49 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/13/2005 8:36:49 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/13/2005 8:36:49 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/13/2005 8:36:48 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/13/2005 8:36:48 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/13/2005 8:36:48 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/13/2005 8:36:48 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/13/2005 8:35:40 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/13/2005 4:37:10 PM Application Hang Error (101) 1002 N/A D3S6H341 Hanging application wmplayer.exe, version 10.0.0.3646, hang module hungapp, version 0.0.0.0, hang address 0x00000000.07/13/2005 3:35:03 PM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/13/2005 3:35:03 PM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/13/2005 3:31:07 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 3:31:02 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/13/2005 3:31:02 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/13/2005 3:31:02 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/13/2005 3:31:01 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/13/2005 3:30:58 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/13/2005 3:30:56 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 3:30:56 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/13/2005 3:30:56 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/13/2005 3:30:56 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/13/2005 3:30:56 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/13/2005 3:30:56 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/13/2005 3:30:56 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/13/2005 3:30:56 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/13/2005 12:40:03 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/13/2005 8:24:42 AM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/13/2005 8:24:42 AM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/13/2005 8:20:50 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/13/2005 8:20:49 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 8:20:45 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/13/2005 8:20:45 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/13/2005 8:20:42 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/13/2005 8:20:41 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/13/2005 8:20:39 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/13/2005 8:20:38 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 8:20:38 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/13/2005 8:20:38 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/13/2005 8:20:38 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/13/2005 8:20:38 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/13/2005 8:20:38 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/13/2005 8:20:38 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/13/2005 8:20:38 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/13/2005 8:19:32 AM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/13/2005 8:16:14 AM ccPwdSvc Information None 2 NT AUTHORITY\SYSTEM D3S6H341 Application terminated07/13/2005 8:16:13 AM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 8:16:09 AM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/13/2005 8:16:09 AM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/13/2005 8:16:08 AM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/13/2005 8:16:07 AM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/13/2005 8:16:06 AM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/13/2005 8:16:04 AM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/13/2005 8:16:04 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/13/2005 8:16:04 AM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/13/2005 8:16:04 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/13/2005 8:16:04 AM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/13/2005 8:16:04 AM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/13/2005 8:16:03 AM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/13/2005 8:16:03 AM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/12/2005 8:36:58 PM Userenv Warning None 1517 NT AUTHORITY\SYSTEM D3S6H341 Windows saved user D3S6H341\barb selig registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.07/12/2005 7:10:46 PM Application Hang Error (101) 1002 N/A D3S6H341 Hanging application iexplore.exe, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.07/12/2005 5:16:49 PM LoadPerf Information None 1000 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service.07/12/2005 5:16:49 PM LoadPerf Information None 1001 N/A D3S6H341 Performance counters for the WmiApRpl (WmiApRpl) service were removed successfully. The Record Data contains the new values of the system Last Counter and Last Help registry entries.07/12/2005 5:12:58 PM ccPwdSvc Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/12/2005 5:12:48 PM Microsoft Fax Warning Initialization/Termination 32068 N/A D3S6H341 The outgoing routing rule is not valid because it cannot find a valid device. The outgoing faxes that use this rule will not be routed. Verify that the targeted device or devices (if routed to a group of devices) is connected and installed correctly, and turned on. If routed to a group, verify that the group is configured correctly. Country/region code: '*' Area code: '*'07/12/2005 5:12:48 PM Microsoft Fax Warning Initialization/Termination 32026 N/A D3S6H341 Fax Service failed to initialize any assigned fax devices (virtual or TAPI). No faxes can be sent or received until a fax device is installed.07/12/2005 5:12:48 PM SecurityCenter Information None 1800 N/A D3S6H341 The Windows Security Center Service has started.07/12/2005 5:12:47 PM WMDM PMSP Service Information None 105 N/A D3S6H341 The service was started.07/12/2005 5:12:46 PM NProtectService Information None 3 NT AUTHORITY\SYSTEM D3S6H341 The service was started.07/12/2005 5:12:45 PM ccEvtMgr Information None 1 NT AUTHORITY\SYSTEM D3S6H341 Application started07/12/2005 5:12:45 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to create the Trust Module.07/12/2005 5:12:45 PM ccEvtMgr Warning None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Loaded the default configuration settings.07/12/2005 5:12:45 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Failed to load the configuration settings.07/12/2005 5:12:45 PM Creative Service for CDROM Access Information None 105 N/A D3S6H341 The service was started.07/12/2005 5:12:45 PM ccEvtMgr Error None 13 NT AUTHORITY\SYSTEM D3S6H341 ccEvtMgr: Settings server is not installed.07/12/2005 5:12:45 PM ccEvtMgr Information None 26 NT AUTHORITY\SYSTEM D3S6H341 Application starting07/12/2005 5:12:45 PM Avg7UpdSvc Information None 1 N/A D3S6H341 Service started07/12/2005 11:41:30 AM Application Error Error None 1000 N/A D3S6H341 Faulting application n2 studio center.exe, version 2.0.0.0, faulting module kernel32.dll, version 5.1.2600.2180, fault address 0x0001eb33.07/12/2005 11:37:18 AM Application Error Error None 1001 N/A D3S6H341 Fault bucket 184091312.07/12/2005 11:37:16 AM Application Error Error None 1000 N/A D3S6H341 Faulting application n2 studio center.exe, version 2.0.0.0, faulting module kernel32.dll, version 5.1.2600.2180, fault address 0x0001eb33.07/12/2005 10:24:31 AM MsiInstaller Information None 1005 D3S6H341\barb selig D3S6H341 The Windows Installer initiated a system restart to complete or continue the configuration of 'Symantec Network Drivers Update'.07/12/2005 10:24:31 AM MsiInstaller Information None 11707 D3S6H341\barb selig D3S6H341 Product: Symantec Network Drivers Update -- Installation operation completed successfully.0 Link to post Share on other sites
shawnselig Posted July 18, 2005 Author Report Share Posted July 18, 2005 C:\Documents and Settings\Administrator.D3S6H341\Desktop PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files Found in system Folder............ ------------------------C:\WINDOWS\SYSTEM32\cpuinf32.dll: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: >UPX!tC:\WINDOWS\SYSTEM32\kl_upx.exe: t[hUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: MThUPX!PQC:\WINDOWS\SYSTEM32\kl_upx.exe: hUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: hUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: hUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!tC:\WINDOWS\SYSTEM32\kl_upx.exe: hUPX!PQC:\WINDOWS\SYSTEM32\kl_upx.exe: JMUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: JMUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: JMPDUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!uC:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!uC:\WINDOWS\SYSTEM32\kl_upx.exe: UPX!uC:\WINDOWS\SYSTEM32\kl_upx.exe: JMPOUPX!C:\WINDOWS\SYSTEM32\kl_upx.exe: JMPDUPX!C:\WINDOWS\SYSTEM32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213C:\WINDOWS\SYSTEM32\DivX.dll: PEC2C:\WINDOWS\SYSTEM32\ODBCJET.HLP: +0`3Spec2Files Found in all users startup Folder............ ------------------------Files Found in all users windows Folder............ ------------------------C:\WINDOWS\choice.exe: UPX!C:\WINDOWS\RMAgentOutput.dll: UPX!C:\WINDOWS\tsc.exe: UPX!C:\WINDOWS\vsapi32.dll: UPX!t4Finishedbye Link to post Share on other sites
shawnselig Posted July 18, 2005 Author Report Share Posted July 18, 2005 "Silent Runners.vbs", revision 39, http://www.silentrunners.org/Operating System: Windows XP SP2Output limited to non-default values, except where indicated by "{++}"Startup items buried in registry:---------------------------------HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}"ctfmon.exe" = "C:\WINDOWS\system32\ctfmon.exe" [MS]"AWMON" = ""C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"" ["Lavasoft Sweden"]"DellSupport" = ""C:\Program Files\Dell Support\DSAgnt.exe" /startup" ["Gteko Ltd."]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}"ISUSScheduler" = ""C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start" ["InstallShield Software Corporation"]"TkBellExe" = ""C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]"ccRegVfy" = ""C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"" ["Symantec Corporation"]"ccApp" = ""C:\Program Files\Common Files\Symantec Shared\ccApp.exe"" ["Symantec Corporation"]"AWMON" = ""C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"" ["Lavasoft Sweden"]"NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS]"AVG7_CC" = "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP" ["GRISOFT, s.r.o."]"AVG7_EMC" = "C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe" ["GRISOFT, s.r.o."]"ISUSPM Startup" = "c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startup" ["InstallShield Software Corporation"]"PinnacleDriverCheck" = "C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg" [empty string]"Symantec NetDriver Monitor" = "C:\PROGRA~1\SYMNET~1\SNDMon.exe" ["Symantec Corporation"]HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02DCA195-602B-4B1F-83FF-381B7E804BDB}\(Default) = (no title provided) -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\SYSTEM32\HDBHO.dll" [null data]{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]{22D8E815-4A5E-4DFB-845E-AAB64207F5BD}\(Default) = "eBay Toolbar Helper" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll" [null data]{243B17DE-77C7-46BF-B94B-0B5F309A0E64}\(Default) = (no title provided) -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyside.dll" [MS]{53707962-6F74-2D53-2644-206D7942484F}\(Default) = (no title provided) -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\SPYBOT~1\SDHelper.dll" ["Safer Networking Limited"]{5CA3D70E-1895-11CF-8E15-001234567890}\(Default) = "DriveLetterAccess" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["Sonic Solutions"]{AA58ED58-01DD-4d91-8333-CF10577473F7}\(Default) = "Google Toolbar Helper" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]"{E0D79304-84BE-11CE-9641-444553540000}" = "WinZip" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]"{E0D79305-84BE-11CE-9641-444553540000}" = "WinZip" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]"{E0D79306-84BE-11CE-9641-444553540000}" = "WinZip" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]"{E0D79307-84BE-11CE-9641-444553540000}" = "WinZip" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\Office10\msohev.dll" [MS]"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]"{DEE12703-6333-4D4E-8F34-738C4DCC2E04}" = "RecordNow! SendToExt" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Sonic\RecordNow! Deluxe\shlext.dll" [null data]"{5CA3D70E-1895-11CF-8E15-001234567890}" = "DriveLetterAccess" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\dla\tfswshx.dll" ["Sonic Solutions"]"{336B02CE-F88A-4aea-8731-79EF94D3723A}" = "Free AOL & Unlimited Internet.url" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\aod\aodshext.dll" [null data]"{92085AD4-F48A-450D-BD93-B28CC7DF67CE}" = "eBay Toolbar" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll" [null data]"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]"{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}" = "AVG7 Shell Extension" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]"{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}" = "AVG7 Find Extension" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]"{27E11846-A7C7-4DF8-8680-63653355A754}" = "Microsoft Security Extensibility Snap-in" -> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\PROTOCOL.INI:Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â " [** WMI GetObject error **]HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\INFECTION WARNING! "{54D9498B-CF93-414F-8984-8CE7FDE0D391}" = "ewido shell guard" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\shellhook.dll" ["TODO: <Firmenname>"]HKLM\System\CurrentControlSet\Control\Session Manager\INFECTION WARNING! "BootExecute" = "autocheck autochk * smrgdf C:\PROGRA~1\iolo\SYSTEM~1\" [file not found], [MS], [file not found], [null data], [file not found]HKLM\Software\Classes\*\shellex\ContextMenuHandlers\AVG7 Shell Extension\(Default) = "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"]WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]WinZip\(Default) = "{E0D79304-84BE-11CE-9641-444553540000}" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ewido\(Default) = "{57BD36D7-CE32-4600-9B1C-1A0C47EFC02E}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\ewido\security suite\context.dll" ["ewido networks"]WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]WinZip\(Default) = "{E0D79304-84BE-11CE-9641-444553540000}" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\AVG7 Shell Extension\(Default) = "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Grisoft\AVG Free\avgse.dll" ["GRISOFT, s.r.o."]WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]WinZip\(Default) = "{E0D79304-84BE-11CE-9641-444553540000}" -> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WINZIP\WZSHLSTB.DLL" ["WinZip Computing, Inc."]Active Desktop and Wallpaper:-----------------------------Active Desktop is disabled at this entry:HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellStateHKCU\Control Panel\Desktop\"Wallpaper" = "C:\Documents and Settings\barb selig\Local Settings\Application Data\Microsoft\Wallpaper1.bmp"Startup items in "barb selig" & "All Users" startup folders:------------------------------------------------------------C:\Documents and Settings\All Users\Start Menu\Programs\Startup"Adobe Reader Speed Launch" -> shortcut to: "C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe" ["Adobe Systems Incorporated"]Winsock2 Service Provider DLLs:-------------------------------Namespace Service ProvidersHKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]Transport Service ProvidersHKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 13%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05Toolbars, Explorer Bars, Extensions:------------------------------------ToolbarsHKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = "&Google" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = "&Google" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]HKLM\Software\Microsoft\Internet Explorer\Toolbar\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" = "&Google" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "c:\program files\google\googletoolbar2.dll" ["Google Inc."]"{92085AD4-F48A-450D-BD93-B28CC7DF67CE}" = "eBay Toolbar" [from CLSID] -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll" [null data]Explorer BarsDormant Explorer Bars in "View, Explorer Bar" menuHKLM\Software\Classes\CLSID\{D6A116E7-5906-42E4-87F6-E7E15936415E}\ = "MoneySide"Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyside.dll" [MS]Extensions (Tools menu items, main toolbar menu buttons)HKLM\Software\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\"MenuText" = "Sun Java Console""CLSIDExtension" = "{08B0E5C0-4FCB-11CF-AAA5-00401C608501}"{9819CC0E-9669-4D01-9CD7-2C66DA43AC6C}\{CD3A1E66-5772-4B4D-B69A-A21F377499B6}\"ButtonText" = "WIC Messenger""MenuText" = "WIC Messenger""Exec" = "C:\Program Files\WIC Messenger\wicmessenger.exe" [file not found]{CD67F990-D8E9-11D2-98FE-00C0F0318AFE}\{E023F504-0C5A-4750-A1E7-A9046DEA8A21}\"ButtonText" = "MoneySide""CLSIDExtension" = "{DD6687B5-CB43-4211-BFC9-2942CCBDCB3E}" -> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Microsoft Money\System\mnyside.dll" [MS]{FB5F1910-F110-11D2-BB9E-00C04F795683}\"ButtonText" = "Messenger""MenuText" = "Windows Messenger""Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]Running Services (Display Name, Service Name, Path {Service DLL}):------------------------------------------------------------------AVG7 Alert Manager Server, Avg7Alrt, "C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe" ["GRISOFT, s.r.o."]AVG7 Update Service, Avg7UpdSvc, "C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe" ["GRISOFT, s.r.o."]Creative Service for CDROM Access, Creative Service for CDROM Access, "C:\WINDOWS\System32\CTsvcCDA.exe" ["Creative Technology Ltd"]Crypkey License, Crypkey License, "crypserv.exe" ["Kenonic Controls Ltd."]ewido security suite control, ewido security suite control, "C:\Program Files\ewido\security suite\ewidoctrl.exe" ["ewido networks"]ewido security suite guard, ewido security suite guard, "C:\Program Files\ewido\security suite\ewidoguard.exe" ["ewido networks"]LexBce Server, LexBceS, "C:\WINDOWS\system32\LEXBCES.EXE" ["Lexmark International, Inc."]Norton Unerase Protection, NProtectService, "C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE" ["Symantec Corporation"]NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]Speed Disk service, Speed Disk service, "C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE" ["Symantec Corporation"]Symantec Core LC, Symantec Core LC, "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe" ["Symantec Corporation"]Symantec Event Manager, ccEvtMgr, ""C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"" ["Symantec Corporation"]WMDM PMSP Service, WMDM PMSP Service, "C:\WINDOWS\system32\MsPMSPSv.exe" [MS]----------+ This report excludes default entries except where indicated.+ To see *everywhere* the script checks and *everything* it finds, launch it from a command prompt or a shortcut with the -all parameter.+ The search for DESKTOP.INI DLL launch points on all local fixed drives took 42 seconds.+ The search for all Registry CLSIDs containing dormant Explorer Bars took 15 seconds.---------- (total run time: 88 seconds) Link to post Share on other sites
Atribune Posted July 18, 2005 Report Share Posted July 18, 2005 Please locate zip and email the following files to [email protected]C:\WINDOWS\SYSTEM32\cpuinf32.dllC:\WINDOWS\SYSTEM32\kl_upx.exe Link to post Share on other sites
shawnselig Posted July 18, 2005 Author Report Share Posted July 18, 2005 Logfile of HijackThis v1.99.1Scan saved at 4:04:12 PM, on 07/18/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Dell Support\DSAgnt.exeC:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\WINDOWS\system32\crypserv.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\WINDOWS\System32\alg.exeC:\hijackthis\hijackthis\HijackThis.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\System32\wbem\wmiprvse.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.eastlink.ca/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.comO2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - C:\WINDOWS\SYSTEM32\HDBHO.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dllO2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dllO4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -startO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [iSUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startupO4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckRegO4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startupO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.htmlO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dllO9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)O9 - Extra button: WIC Messenger - {CD3A1E66-5772-4b4d-B69A-A21F377499B6} - C:\Program Files\WIC Messenger\wicmessenger.exe (file missing)O9 - Extra 'Tools' menuitem: WIC Messenger - {CD3A1E66-5772-4b4d-B69A-A21F377499B6} - C:\Program Files\WIC Messenger\wicmessenger.exe (file missing)O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CABO16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cabO16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://D:\content\include\XPPatchInstaller.CABO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by20fd.bay20.hotmail.msn.com/resources/MsnPUpld.cabO16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://www.ea.com/downloads/rtpatch/EARTPX.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab27513.cabO16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/...utocomplete.cabO16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO16 - DPF: {C432C4BD-3566-411C-8F3C-E5E0D3AE5D33} (CBrowser Class) - http://www.streamingfaith.com/common/mbrow...MINIBrowser.CABO16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cabO16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cabO16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.streamload.com/Upload/XUpload.ocxO16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...389/mcfscan.cabO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cabO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exeO23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe Link to post Share on other sites
Atribune Posted July 18, 2005 Report Share Posted July 18, 2005 Run HijackThis and check off the following once done close all other windows and click fix checkedO4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exeO9 - Extra button: WIC Messenger - {CD3A1E66-5772-4b4d-B69A-A21F377499B6} - C:\Program Files\WIC Messenger\wicmessenger.exe (file missing)O9 - Extra 'Tools' menuitem: WIC Messenger - {CD3A1E66-5772-4b4d-B69A-A21F377499B6} - C:\Program Files\WIC Messenger\wicmessenger.exe (file missing)O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cabO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeThen reboot and post another Hijackthis log. Link to post Share on other sites
Recommended Posts