Jump to content


Photo

Tried of restoring & recovery system


  • This topic is locked This topic is locked
105 replies to this topic

#1 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 26 August 2008 - 12:21 PM

I WAS TOLD THAT THIS WAS THE BEST PLACE TO GET HELP! I HAVE RESTORED AND RECOVERY UNTIL I AM BLUE IN THE FACE. I HAVE SEEN THE BLUE SCREEN OF DEATH BUT SOMETHING IS STILL NOT RIGHT WITH THIS COMPUTER! PLEASSSSSSSSSSSSSSSSSE HELP!!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:11 PM, on 8/26/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\HP Optical 4 Button USB Mouse\Kmaestro.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.att.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...a...&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...a...&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BtcMouseMaestro] "C:\Program Files\HP Optical 4 Button USB Mouse\KMaestro.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-707000247-1430798824-112632010-1001\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun (User 'My Spoil Child')
O4 - S-1-5-21-707000247-1430798824-112632010-1001 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'My Spoil Child')
O4 - S-1-5-21-707000247-1430798824-112632010-1001 User Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'My Spoil Child')
O4 - Global Startup: Snapfish Media Detector.lnk = C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewi...oOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: lxcy_device - - C:\Windows\system32\lxcycoms.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 8239 bytes



cws SHREDDER
**** Run Keys ****

RUN: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
RUN: [hpsysdrv] c:\hp\support\hpsysdrv.exe
RUN: [KBD] C:\HP\KBD\KbdStub.EXE
RUN: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
RUN: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
RUN: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
RUN: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
RUN: [RtHDVCpl] RtHDVCpl.exe
RUN: []
RUN: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
RUN: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
RUN: [BtcMouseMaestro] "C:\Program Files\HP Optical 4 Button USB Mouse\KMaestro.exe"
RUN: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
RUN: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
RUN: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
RUN: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
RUN: [LXCYCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
RUN: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun


**** Browser Helper Objects ****

BHO: [Adobe PDF Reader Link Helper] C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
BHO: [Spybot-S&D IE Protection] C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
BHO: [Symantec Intrusion Prevention] C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll


**** IE Toolbars ****



**** IE Extensions ****

IEExt: [Send to OneNote]
IEExt: [Research]
IEExt: [Research]


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: ::1 localhost
HOSTS: ::1 localhost


**** IE Settings ****

Default Page: http://ie.redirect.h...a...&pf=desktop
Default Search: http://go.microsoft....k/?LinkId=54896
Local Page: C:\Windows\system32\blank.htm
Search Page: http://go.microsoft....k/?LinkId=54896


**** IE Context Menu (Right click) ****

IEContext: [E&xport to Microsoft Excel] res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000


**** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: MSAFD Tcpip [TCP/IPv6]
LSP: MSAFD Tcpip [UDP/IPv6]
LSP: RSVP TCPv6 Service Provider
LSP: RSVP TCP Service Provider
LSP: RSVP UDPv6 Service Provider
LSP: RSVP UDP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{33D0AADA-BD7B-4440-889F-4B3104675DAD}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{33D0AADA-BD7B-4440-889F-4B3104675DAD}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8B5B5133-47CB-4149-B1E4-AF5C4117282A}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8B5B5133-47CB-4149-B1E4-AF5C4117282A}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{33D0AADA-BD7B-4440-889F-4B3104675DAD}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{33D0AADA-BD7B-4440-889F-4B3104675DAD}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8B5B5133-47CB-4149-B1E4-AF5C4117282A}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8B5B5133-47CB-4149-B1E4-AF5C4117282A}] DATAGRAM 5


**** Blocked Control Panel Items ****



**** Downloaded Program Files ****

{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} [http://download.micr...OGAControl.cab] C:\Windows\System32\OGACheckControl.DLL
{166B1BCA-3F9C-11CF-8075-444553540000} [http://download.macr...irector/sw.cab]
{17492023-C23A-453E-A040-C7C580BBF700} [http://download.micr...eckControl.cab]
{193C772A-87BE-4B19-A7BB-445B226FE9A1} [http://downloads.ewi...OnlineScan.cab]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} [http://security.syma...in/AvSniff.cab] C:\Windows\Downloaded Program Files\navapi.vxd C:\Windows\Downloaded Program Files\navapi32.dll C:\Windows\Downloaded Program Files\avsniffdlgs.dll C:\Windows\Downloaded Program Files\avsniff.dll
{644E432F-49D3-41A1-8DD5-E099162EEEC5} [http://security.syma.../bin/cabsa.cab]
{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} [http://fpdownload.ma.../ultrashim.cab]


**** Windows Services ****

[AeLookupSvc] %systemroot%\system32\svchost.exe -k netsvcs
[ALG] %SystemRoot%\System32\alg.exe
[Appinfo] %SystemRoot%\system32\svchost.exe -k netsvcs
[AudioEndpointBuilder] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
[Audiosrv] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[Automatic LiveUpdate Scheduler] "C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe"
[BFE] %systemroot%\system32\svchost.exe -k LocalServiceNoNetwork
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
[ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
[ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
[CertPropSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[clr_optimization_v2.0.50727_32] %systemroot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
[CLTNetCnService] "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
[COMSysApp] %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
[CryptSvc] %SystemRoot%\system32\svchost.exe -k NetworkService
[DcomLaunch] %SystemRoot%\system32\svchost.exe -k DcomLaunch
[DFSR] %SystemRoot%\system32\DFSR.exe
[Dhcp] %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
[Dnscache] %SystemRoot%\system32\svchost.exe -k NetworkService
[dot3svc] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[DPS] %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork
[EapHost] %SystemRoot%\System32\svchost.exe -k netsvcs
[ehRecvr] %systemroot%\ehome\ehRecvr.exe
[ehSched] %systemroot%\ehome\ehsched.exe
[ehstart] %windir%\system32\svchost.exe -k LocalServiceNoNetwork
[EMDMgmt] %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[Eventlog] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[EventSystem] %SystemRoot%\system32\svchost.exe -k LocalService
[fdPHost] %SystemRoot%\system32\svchost.exe -k LocalService
[FDResPub] %SystemRoot%\system32\svchost.exe -k LocalService
[FontCache3.0.0.0] %systemroot%\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
[gpsvc] %systemroot%\system32\svchost.exe -k netsvcs
[hidserv] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[hkmsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[IDriverT] "c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
[idsvc] "%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
[IKEEXT] %systemroot%\system32\svchost.exe -k netsvcs
[IPBusEnum] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[iphlpsvc] %SystemRoot%\System32\svchost.exe -k NetSvcs
[KeyIso] %SystemRoot%\system32\lsass.exe
[KtmRm] %SystemRoot%\System32\svchost.exe -k NetworkService
[LanmanServer] %SystemRoot%\system32\svchost.exe -k netsvcs
[LanmanWorkstation] %SystemRoot%\System32\svchost.exe -k LocalService
[LightScribeService] "c:\Program Files\Common Files\LightScribe\LSSrvc.exe"
[LiveUpdate] "C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE"
[LiveUpdate Notice] "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
[lltdsvc] %SystemRoot%\System32\svchost.exe -k LocalService
[lmhosts] %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
[lxcy_device] C:\Windows\system32\lxcycoms.exe -service
[Mcx2Svc] %SystemRoot%\system32\svchost.exe -k LocalService
[MMCSS] %SystemRoot%\system32\svchost.exe -k netsvcs
[MpsSvc] %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork
[MSDTC] %SystemRoot%\System32\msdtc.exe
[MSiSCSI] %systemroot%\system32\svchost.exe -k netsvcs
[msiserver] %systemroot%\system32\msiexec /V
[napagent] %SystemRoot%\System32\svchost.exe -k NetworkService
[Netlogon] %systemroot%\system32\lsass.exe
[Netman] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
[netprofm] %SystemRoot%\System32\svchost.exe -k LocalService
[NetTcpPortSharing] "%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"
[NlaSvc] %SystemRoot%\System32\svchost.exe -k NetworkService
[nsi] %systemroot%\system32\svchost.exe -k LocalService
[odserv] "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"
[ose] "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
[p2pimsvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[p2psvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[PcaSvc] %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[pla] %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork
[PlugPlay] %SystemRoot%\system32\svchost.exe -k DcomLaunch
[PNRPAutoReg] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[PNRPsvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[PolicyAgent] %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted
[ProfSvc] %systemroot%\system32\svchost.exe -k netsvcs
[ProtectedStorage] %SystemRoot%\system32\lsass.exe
[QWAVE] %windir%\system32\svchost.exe -k LocalService
[RasAuto] %SystemRoot%\system32\svchost.exe -k netsvcs
[RasMan] %SystemRoot%\system32\svchost.exe -k netsvcs
[RemoteAccess] %SystemRoot%\system32\svchost.exe -k netsvcs
[RemoteRegistry] %SystemRoot%\system32\svchost.exe -k regsvc
[RoxMediaDB9] "c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe"
[RpcLocator] %SystemRoot%\system32\locator.exe
[RpcSs] %SystemRoot%\system32\svchost.exe -k rpcss
[SamSs] %SystemRoot%\system32\lsass.exe
[SCardSvr] %SystemRoot%\system32\svchost.exe -k LocalService
[Schedule] %systemroot%\system32\svchost.exe -k netsvcs
[SCPolicySvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[SDRSVC] %SystemRoot%\system32\svchost.exe -k SDRSVC
[seclogon] %windir%\system32\svchost.exe -k netsvcs
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
[SessionEnv] %SystemRoot%\System32\svchost.exe -k netsvcs
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
[slsvc] %SystemRoot%\system32\SLsvc.exe
[SLUINotify] %SystemRoot%\system32\svchost.exe -k LocalService
[SNMPTRAP] %SystemRoot%\System32\snmptrap.exe
[Spooler] %SystemRoot%\System32\spoolsv.exe
[SSDPSRV] %SystemRoot%\system32\svchost.exe -k LocalService
[stisvc] %SystemRoot%\system32\svchost.exe -k imgsvc
[stllssvr] "c:\Program Files\Common Files\SureThing Shared\stllssvr.exe"
[swprv] %SystemRoot%\System32\svchost.exe -k swprv
[Symantec Core LC] C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
[SysMain] %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[TabletInputService] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
[TapiSrv] %SystemRoot%\System32\svchost.exe -k NetworkService
[TBS] %SystemRoot%\System32\svchost.exe -k LocalService
[TermService] %SystemRoot%\System32\svchost.exe -k NetworkService
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
[THREADORDER] %SystemRoot%\system32\svchost.exe -k LocalService
[TrkWks] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
[TrustedInstaller] %SystemRoot%\servicing\TrustedInstaller.exe
[UI0Detect] %SystemRoot%\system32\UI0Detect.exe
[upnphost] %SystemRoot%\system32\svchost.exe -k LocalService
[UxSms] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
[vds] %SystemRoot%\System32\vds.exe
[VSS] %systemroot%\system32\vssvc.exe
[W32Time] %SystemRoot%\system32\svchost.exe -k LocalService
[wcncsvc] %SystemRoot%\System32\svchost.exe -k LocalService
[WcsPlugInService] %SystemRoot%\system32\svchost.exe -k wcssvc
[WdiServiceHost] %SystemRoot%\System32\svchost.exe -k wdisvc
[WdiSystemHost] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
[WebClient] %SystemRoot%\system32\svchost.exe -k LocalService
[Wecsvc] %SystemRoot%\system32\svchost.exe -k NetworkService
[wercplsupport] %SystemRoot%\System32\svchost.exe -k netsvcs
[WerSvc] %SystemRoot%\System32\svchost.exe -k WerSvcGroup
[WinDefend] %SystemRoot%\System32\svchost.exe -k secsvcs
[WinHttpAutoProxySvc] %SystemRoot%\system32\svchost.exe -k LocalService
[Winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
[WinRM] %SystemRoot%\System32\svchost.exe -k NetworkService
[Wlansvc] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[wmiApSrv] %systemroot%\system32\wbem\WmiApSrv.exe
[WMPNetworkSvc] "%ProgramFiles%\Windows Media Player\wmpnetwk.exe"
[WPCSvc] %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
[WPDBusEnum] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[wscsvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
[WSearch] %systemroot%\system32\SearchIndexer.exe /Embedding
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
[wudfsvc] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
[XAudioService] %SystemRoot%\system32\DRIVERS\xaudio.exe
[aawservice] "C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe"


**** Custom IE Search Items ****



**** Complete IE Options ****

IEOPT: [Disable Script Debugger] yes
IEOPT: [Start Page] http://my.att.net/
IEOPT: [Anchor Underline] yes
IEOPT: [Cache_Update_Frequency] Once_Per_Session
IEOPT: [Display Inline Images] yes
IEOPT: [Do404Search]
IEOPT: [Local Page] C:\Windows\system32\blank.htm
IEOPT: [Save_Session_History_On_Exit] no
IEOPT: [Show_FullURL] no
IEOPT: [Show_StatusBar] yes
IEOPT: [Show_ToolBar] yes
IEOPT: [Show_URLinStatusBar] yes
IEOPT: [Show_URLToolBar] yes
IEOPT: [Use_DlgBox_Colors] yes
IEOPT: [Search Page] http://go.microsoft....k/?LinkId=54896
IEOPT: [XMLHTTP]
IEOPT: [NoUpdateCheck]
IEOPT: [UseClearType] no
IEOPT: [Enable Browser Extensions] yes
IEOPT: [Play_Background_Sounds] yes
IEOPT: [Play_Animations] yes
IEOPT: [CompatibilityFlags]
IEOPT: [StartPageCache]
IEOPT: [FullScreen] no
IEOPT: [SearchMigrated]
IEOPT: [Window_Placement] ,
IEOPT: [RunOnceComplete]
IEOPT: [RunOnceHasShown]
IEOPT: [NotifyDownloadComplete] yes
IEOPT: [ShowedCheckBrowser] Yes
IEOPT: [Check_Associations] no
IEOPT: [Use FormSuggest] no
IEOPT: [Start Page] http://ie.redirect.h...a...&pf=desktop
IEOPT: [AutoHide] yes
IEOPT: [Default_Page_URL] http://ie.redirect.h...a...&pf=desktop
IEOPT: [Default_Secondary_Page_URL]
IEOPT: [Default_Search_URL] http://go.microsoft....k/?LinkId=54896
IEOPT: [Search Page] http://go.microsoft....k/?LinkId=54896
IEOPT: [Extensions Off Page] about:NoAdd-ons
IEOPT: [Security Risk Page] about:SecurityRisk
IEOPT: [Enable_Disk_Cache] yes
IEOPT: [Cache_Percent_of_Disk]
IEOPT: [Delete_Temp_Files_On_Exit] yes
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm
IEOPT: [Anchor_Visitation_Horizon]
IEOPT: [Use_Async_DNS] yes
IEOPT: [Placeholder_Width]
IEOPT: [Placeholder_Height]


I HOPE THESE POST RIGHT. BUT THESE ARE THE SCANS I RAN. I TRIED RUNNING THE LAVASOFT BUT WONT SCAN JUST GAVE ME 132 INFECTIONS BUT DIDNT TELL WHAT THE 132 WERE

Attached Files



#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,533 posts

Posted 29 August 2008 - 12:42 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

#3 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 29 August 2008 - 08:41 PM

Hi,

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply along with a fresh HijackThis log.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

In addition, update me specifically on what problems remain.

-screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#4 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 30 August 2008 - 08:29 PM

[quote name='screen317' post='655339' date='Aug 29 2008, 09:41 PM']Hi,

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply along with a fresh HijackThis log.
Extra Note:


Message,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan started,Virus scan engine version: 4.5.9
Virus scan engine date: 4/1/2008
Virus database version: 10.83.15
Virus database date: 8/13/2008

Scan areas:
C:\ - recursive
D:\ - recursive
Scanned extensions: *.mdb;*.xl?;*.arj;*.a??;*.zip;*.rar;*.cab;*.gz;*.bz2;*.tgz;*.tar;*.dbx;*.do?;*.rtf;*.wiz;*.eml;*.docx;*.docm;*.dotx;*.dotm;*.xl*;*.pptx;*.pptm;*.potx;*.potm
;*.ppam;*.ppsx;*.ppsm;*.ppt;*.pot;*.exe;*.com;*.ov?;*.sys;*.386;*.bin;*.dll;*.drv;*.lnk;*.ocx;*.prg;*.scr;*.vxd;*.crt;*.prc;*.xml;*
.swf;*.bat;*.ht*;*.js;*.jse;*.vbs;*.ini;*.csc;*.hlp;*.shs;*.pif;*.ade;*.adp;*.bas
;*.chm;*.cmd;*.cpl;*.inf;*.ins;*.isp;*.zl*;*.mde;*.msc;*.msi;*.msp;*.mst;*.pcd;*.
reg;*.scr;*.sct;*.url;*.vb;*.vbe;*.ws*;*.ans;*.tmp;*.mpp;*.mpt;*.php;*.;*.exe;*.c
om;*.ov?;*.sys;*.386;*.bin;*.dll;*.drv;*.lnk;*.ocx;*.prg;*.scr;*.vxd;*.crt;*.prc;*.xml;*
.swf;*.do?;*.rtf;*.wiz;*.eml;*.docx;*.docm;*.dotx;*.dotm;*.xl*;*.pptx;*.pptm;*.potx;*.potm
;*.ppam;*.ppsx;*.ppsm;*.xl?;*.mdb;*.ppt;*.pot;*.bat;*.ht*;*.js;*.jse;*.vbs;*.ini;*.csc;*.hlp;*.shs;*.pif;*.
ade;*.adp;*.bas;*.chm;*.cmd;*.cpl;*.inf;*.ins;*.isp;*.zl*;*.mde;*.msc;*.msi;*.msp
;*.mst;*.pcd;*.reg;*.scr;*.sct;*.url;*.vb;*.vbe;*.ws*;*.ans;*.tmp;*.mpp;*.mpt;*.p
hp;*.;*.arj;*.a??;*.zip;*.rar;*.cab;*.gz;*.bz2;*.tgz;*.tar;*.dbx;*.WMF;*.jpg;*.ani;*.pdf
Excluded extensions:
Scan in compressed files.
Scan method: Extensive
Heuristics level: Normal
On virus found: Kill
On failed kill attempt: Move to quarantine
In case of heuristics found: Skip

Error,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,General error,Error occurred during virus scanning.

Error information:
Error message: Internal Error.
Error code: 0x801a0037

Detailed information:
Incident location: Disk 0: drive's master boot sector.
Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Failed to access the file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because of access restrictions.
Error code: 0x8014006d

Detailed information:
File path: C:\hiberfil.sys

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Failed to access the file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because of access restrictions.
Error code: 0x8014006d

Detailed information:
File path: C:\pagefile.sys

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\$Recycle.Bin\S-1-5-21-2152478756-3922319563-605102323-500

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\$Recycle.Bin\S-1-5-21-707000247-1430798824-112632010-1000

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\$Recycle.Bin\S-1-5-21-707000247-1430798824-112632010-500

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:56,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Documents and Settings

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:38:41,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\MSOCache

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:40:16,Scan problem - Failed to access the file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because of access restrictions.
Error code: 0x8014006d

Detailed information:
File path: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:16,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Mozilla Firefox\uninstall\helper.exe:stream

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0014

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0021

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:29,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\muinst\muinst.exe:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:33,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0000

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:33,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0001

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0002

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0003

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0004

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0006

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0007

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0008

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0009

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0010

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0011

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0012

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0017

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0018

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0019

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0020

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0021

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0024

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0025

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0026

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0027

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0028

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0029

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0030

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0031

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0032

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:38,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0033

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0014

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0020

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:41,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\MUINST\MUINST.EXE:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0000

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0001

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0002

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0003

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0004

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0006

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0007

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0008

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0009

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0010

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0011

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0012

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0017

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0018

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0019

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0020

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0021

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0024

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0025

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0026

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0027

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0028

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0029

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0030

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0031

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0032

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0033

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:51,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe:data0007

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:52,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe:data0008

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:52,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe:data0019

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:44:13,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Netscape_ca\Setup.exe:data0034

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:44:13,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Netscape_ca\Setup.exe:data0036

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:44:37,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 0x80140078

Detailed information:
File path: C:\Program Files\PC-Doctor 5 for Windows\Configuration\config.xml

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Desktop

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Documents

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Favorites

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Network\Downloader

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Search\Data\Applications\Windows

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:03,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Windows\Sqm

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:05,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report17b8079f

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:05,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Windows Defender

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:06,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 0x80140078

Detailed information:
File path: C:\ProgramData\muvee Technologies\030625\0103\0399\values

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:06,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Start Menu

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:19,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Symantec\SRTSP\SrtETmp

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:19,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Templates

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\System Volume Information

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Desktop

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Documents

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Favorites

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Crypto\RSA\S-1-5-18

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Network\Downloader

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Search\Data\Applications\Windows

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Search\Data\Temp\usgthrsvc

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:27,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Windows\Sqm

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:29,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\Report17b8079f

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:29,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Windows Defender

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:29,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 0x80140078

Detailed information:
File path: C:\Users\All Users\muvee Technologies\030625\0103\0399\values

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:30,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Start Menu

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:38,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Symantec\SRTSP\SrtETmp

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:38,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Templates

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:42,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\AppData\Local\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:42,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\AppData\Local\History

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:42,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\AppData\Local\Temporary Internet Files

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:43,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:43,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\Cookies

Wa

#5 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 30 August 2008 - 08:32 PM

[quote name='screen317' post='655339' date='Aug 29 2008, 09:41 PM']Hi,

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply along with a fresh HijackThis log.
Extra Note:


Message,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan started,Virus scan engine version: 4.5.9
Virus scan engine date: 4/1/2008
Virus database version: 10.83.15
Virus database date: 8/13/2008

Scan areas:
C:\ - recursive
D:\ - recursive
Scanned extensions: *.mdb;*.xl?;*.arj;*.a??;*.zip;*.rar;*.cab;*.gz;*.bz2;*.tgz;*.tar;*.dbx;*.do?;*.rtf;*.wiz;*.eml;*.docx;*.docm;*.dotx;*.dotm;*.xl*;*.pptx;*.pptm;*.potx;*.potm
;*.ppam;*.ppsx;*.ppsm;*.ppt;*.pot;*.exe;*.com;*.ov?;*.sys;*.386;*.bin;*.dll;*.drv;*.lnk;*.ocx;*.prg;*.scr;*.vxd;*.crt;*.prc;*.xml;*
.swf;*.bat;*.ht*;*.js;*.jse;*.vbs;*.ini;*.csc;*.hlp;*.shs;*.pif;*.ade;*.adp;*.bas
;*.chm;*.cmd;*.cpl;*.inf;*.ins;*.isp;*.zl*;*.mde;*.msc;*.msi;*.msp;*.mst;*.pcd;*.
reg;*.scr;*.sct;*.url;*.vb;*.vbe;*.ws*;*.ans;*.tmp;*.mpp;*.mpt;*.php;*.;*.exe;*.c
om;*.ov?;*.sys;*.386;*.bin;*.dll;*.drv;*.lnk;*.ocx;*.prg;*.scr;*.vxd;*.crt;*.prc;*.xml;*
.swf;*.do?;*.rtf;*.wiz;*.eml;*.docx;*.docm;*.dotx;*.dotm;*.xl*;*.pptx;*.pptm;*.potx;*.potm
;*.ppam;*.ppsx;*.ppsm;*.xl?;*.mdb;*.ppt;*.pot;*.bat;*.ht*;*.js;*.jse;*.vbs;*.ini;*.csc;*.hlp;*.shs;*.pif;*.
ade;*.adp;*.bas;*.chm;*.cmd;*.cpl;*.inf;*.ins;*.isp;*.zl*;*.mde;*.msc;*.msi;*.msp
;*.mst;*.pcd;*.reg;*.scr;*.sct;*.url;*.vb;*.vbe;*.ws*;*.ans;*.tmp;*.mpp;*.mpt;*.p
hp;*.;*.arj;*.a??;*.zip;*.rar;*.cab;*.gz;*.bz2;*.tgz;*.tar;*.dbx;*.WMF;*.jpg;*.ani;*.pdf
Excluded extensions:
Scan in compressed files.
Scan method: Extensive
Heuristics level: Normal
On virus found: Kill
On failed kill attempt: Move to quarantine
In case of heuristics found: Skip

Error,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,General error,Error occurred during virus scanning.

Error information:
Error message: Internal Error.
Error code: 0x801a0037

Detailed information:
Incident location: Disk 0: drive's master boot sector.
Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Failed to access the file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because of access restrictions.
Error code: 0x8014006d

Detailed information:
File path: C:\hiberfil.sys

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Failed to access the file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because of access restrictions.
Error code: 0x8014006d

Detailed information:
File path: C:\pagefile.sys

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\$Recycle.Bin\S-1-5-21-2152478756-3922319563-605102323-500

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\$Recycle.Bin\S-1-5-21-707000247-1430798824-112632010-1000

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:55,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\$Recycle.Bin\S-1-5-21-707000247-1430798824-112632010-500

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:36:56,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Documents and Settings

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:38:41,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\MSOCache

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:40:16,Scan problem - Failed to access the file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because of access restrictions.
Error code: 0x8014006d

Detailed information:
File path: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:16,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Mozilla Firefox\uninstall\helper.exe:stream

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0014

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:26,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\acs\acssetup.exe:data0021

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:29,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\muinst\muinst.exe:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:33,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0000

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:33,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0001

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0002

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0003

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0004

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0006

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:34,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0007

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0008

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0009

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0010

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0011

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0012

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:35,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0017

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0018

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0019

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0020

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:36,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0021

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0024

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0025

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0026

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0027

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0028

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0029

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0030

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0031

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:37,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0032

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:38,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolca\comps\vwpt\Vwpt.exe:data0033

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0014

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:39,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\ACS\ACSSETUP.EXE:data0020

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:41,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\MUINST\MUINST.EXE:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0000

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0001

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0002

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:46,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0003

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0004

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0005

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0006

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0007

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0008

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0009

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0010

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:47,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0011

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0012

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0013

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0015

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0016

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0017

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0018

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:48,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0019

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0020

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0021

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0024

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0025

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0026

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0027

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:49,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0028

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0029

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0030

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0031

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0032

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:50,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Aolus\AOL90\COMPS\VWPT\VWPT.EXE:data0033

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:51,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe:data0007

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:52,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe:data0008

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:43:52,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe:data0019

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:44:13,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Netscape_ca\Setup.exe:data0034

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:44:13,Scan problem - Broken file,Error occurred during virus scanning.

Error information:
Error message: Failed to scan the file because it is broken, so
the data stored in it are not accessible.
The file is not surely clean of viruses.
Error code: 0x801c007f

Detailed information:
File path: C:\Program Files\Online Services\Netscape_ca\Setup.exe:data0036

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:44:37,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 0x80140078

Detailed information:
File path: C:\Program Files\PC-Doctor 5 for Windows\Configuration\config.xml

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Desktop

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Documents

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:45:59,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Favorites

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Network\Downloader

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Search\Data\Applications\Windows

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:01,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:03,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Windows\Sqm

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:05,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Report17b8079f

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:05,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Microsoft\Windows Defender

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:06,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 0x80140078

Detailed information:
File path: C:\ProgramData\muvee Technologies\030625\0103\0399\values

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:06,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Start Menu

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:19,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Symantec\SRTSP\SrtETmp

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:19,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\ProgramData\Templates

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\System Volume Information

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Desktop

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Documents

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:24,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Favorites

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Crypto\RSA\S-1-5-18

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Network\Downloader

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Search\Data\Applications\Windows

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:26,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Search\Data\Temp\usgthrsvc

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:27,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Windows\Sqm

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:29,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\Report17b8079f

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:29,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Microsoft\Windows Defender

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:29,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 0x80140078

Detailed information:
File path: C:\Users\All Users\muvee Technologies\030625\0103\0399\values

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:30,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Start Menu

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:38,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Symantec\SRTSP\SrtETmp

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:38,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\All Users\Templates

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:42,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\AppData\Local\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:42,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\AppData\Local\History

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:42,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\AppData\Local\Temporary Internet Files

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:43,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\Application Data

Warning,JOHNSON-PC,My Spoil Child,Search,2008.08.13. 17:46:43,Scan problem - Access denied,Error occurred during virus scanning.

Error information:
Error message: The proper permission is missing to scan the path or file.
Files found on the path are not surely clean of viruses.
Error code: 5

Detailed information:
File path: C:\Users\Default\Cookies

Wa

Attached Files



#6 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 01 September 2008 - 06:34 PM

kym,

I'm not sure what you posted; could you tell me what gave you that report please? Do you have the results from the MBAM scan?

Please consider donating to help support the continued prompt and excellent services of this site.


#7 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 02 September 2008 - 08:37 PM

I forgot which scan I ran. But it didnt let me clean my system. Spyboit Search is telling me that %windir%\SMINST\launcher.exe is a virus. Its in red. According to Norton its making changings to the registry but Norton is not catching. Running Norton Antivirus 2008.
Malwarebytes' Anti-Malware 1.25
Database version: 1099
Executable location: C:\Program Files\Malwarebytes' Anti-Malware
Database location: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref

Username: My Spoil Child
Windows folder: C:\Windows
System folder: C:\Windows\system32
Root drive: C:
Program Files: C:\Program Files
Common Files: C:\Program Files\Common Files

Desktop: C:\Users\Default\Desktop
Desktop: C:\Users\My Spoil Child\Desktop
Desktop: C:\Users\Public\Desktop

Start Menu: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
Start Menu: C:\Users\My Spoil Child\AppData\Roaming\Microsoft\Windows\Start Menu
Start Menu: C:\ProgramData\Microsoft\Windows\Start Menu

User Root: C:\Users\Default
User Root: C:\Users\johnson
User Root: C:\Users\My Spoil Child
User Root: C:\Users\Public

Favorite: C:\Users\Default\Favorites
Favorite: C:\Users\My Spoil Child\Favorites
Favorite: C:\Users\Public\Favorites

Application Data: C:\Users\Default\AppData\Roaming
Application Data: C:\Users\My Spoil Child\AppData\Roaming
Application Data: C:\ProgramData

Quick Launch: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
Quick Launch: C:\Users\My Spoil Child\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

Temporary Folder: C:\Users\Default\AppData\Local\Temp
Temporary Folder: C:\Users\My Spoil Child\AppData\Local\Temp
Temporary Folder: C:\Windows\Temp

Spybot Startup:

--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2008-08-26 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-08-05 Includes\Adware.sbi
2008-08-26 Includes\AdwareC.sbi
2008-06-03 Includes\Cookies.sbi
2008-06-03 Includes\Dialer.sbi
2008-08-05 Includes\DialerC.sbi
2008-07-23 Includes\HeavyDuty.sbi
2008-08-19 Includes\Hijackers.sbi
2008-08-26 Includes\HijackersC.sbi
2008-08-05 Includes\Keyloggers.sbi
2008-08-26 Includes\KeyloggersC.sbi
2004-11-29 Includes\LSP.sbi
2008-08-27 Includes\Malware.sbi
2008-08-26 Includes\MalwareC.sbi
2008-08-05 Includes\PUPS.sbi
2008-08-26 Includes\PUPSC.sbi
2007-11-07 Includes\Revision.sbi
2008-06-18 Includes\Security.sbi
2008-08-26 Includes\SecurityC.sbi
2008-06-03 Includes\Spybots.sbi
2008-06-03 Includes\SpybotsC.sbi
2008-08-11 Includes\Spyware.sbi
2008-08-26 Includes\SpywareC.sbi
2008-06-03 Includes\Tracks.uti
2008-08-05 Includes\Trojans.sbi
2008-08-27 Includes\TrojansC.sbi
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll

Located: HK_LM:Run, BtcMouseMaestro
command: "C:\Program Files\HP Optical 4 Button USB Mouse\KMaestro.exe"
file: C:\Program Files\HP Optical 4 Button USB Mouse\KMaestro.exe
size: 344064
MD5: AD0FC2800187643F12F49074B2BFBC5B

Located: HK_LM:Run, ccApp
command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 51048
MD5: E67200B6EF51BBF60C14C64D60FAD482

Located: HK_LM:Run, EzPrint
command: "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
file: C:\Program Files\Lexmark 3400 Series\ezprint.exe
size: 82608
MD5: E2D5034A8CFB24403FF6374118197794

Located: HK_LM:Run, FaxCenterServer
command: "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
file: C:\Program Files\Lexmark Fax Solutions\fm3032.exe
size: 295600
MD5: 37A28E56FE56DA311A761962043E5824

Located: HK_LM:Run, hpsysdrv
command: c:\hp\support\hpsysdrv.exe
file: c:\hp\support\hpsysdrv.exe
size: 65536
MD5: 85B8925F1A477DF7AEC93CABBEB04F1F

Located: HK_LM:Run, is-DVJNA
command: "C:\Users\Public\Desktop\Kaspersky Lab Tool\is-DVJNA\is-DVJNA.exe"
file: C:\Users\Public\Desktop\Kaspersky Lab Tool\is-DVJNA\is-DVJNA.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, is-SV617
command: "C:\Users\Public\Desktop\Kaspersky Lab Tool\is-SV617\is-SV617.exe"
file: C:\Users\Public\Desktop\Kaspersky Lab Tool\is-SV617\is-SV617.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!

Located: HK_LM:Run, KBD
command: C:\HP\KBD\KbdStub.EXE
file: C:\HP\KBD\KbdStub.EXE
size: 65536
MD5: 7088B136BB58A5F95CF0DE8386CA6C0F

Located: HK_LM:Run, LXCYCATS
command: rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
file: C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll
size: 106496
MD5: 5610D60C7230BB56647AB40B88AC9476

Located: HK_LM:Run, lxcymon.exe
command: "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
file: C:\Program Files\Lexmark 3400 Series\lxcymon.exe
size: 291504
MD5: 17ED8E35A5302419651A22A0282D80F4

Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
file: C:\Windows\system32\NvCpl.dll
size: 8429568
MD5: 96227E643741C93E4AA66A39C77F4172

Located: HK_LM:Run, NvMediaCenter
command: RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
file: C:\Windows\system32\NvMcTray.dll
size: 81920
MD5: 4A39B077F1621BD7FC5D4D9823A73714

Located: HK_LM:Run, NvSvc
command: RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
file: C:\Windows\system32\nvsvc.dll
size: 90192
MD5: DCFC1A6E1034DC9CCCA199C3EB63C72F

Located: HK_LM:Run, OsdMaestro
command: "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
file: C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
size: 118784
MD5: B1361669BDC6ED612C35B7C67ADA2240

Located: HK_LM:Run, RtHDVCpl
command: RtHDVCpl.exe
file: C:\Windows\RtHDVCpl.exe
size: 4390912
MD5: F3B864BF39CDB3A71F2774DD02FC1090

Located: HK_LM:Run, Windows Defender
command: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
file: C:\Program Files\Windows Defender\MSASCui.exe
size: 1006264
MD5: 9AD9E2FB2811123DA13DE84CC154AB77

Located: HK_LM:RunOnce, Launcher
command: %WINDIR%\SMINST\launcher.exe
file: C:\Windows\SMINST\launcher.exe
size: 44168
MD5: 31539595F006DAE39F719735F30C3570

Located: HK_CU:Run, HPADVISOR
where: S-1-5-21-707000247-1430798824-112632010-1001...
command: C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
file: C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
size: 1773568
MD5: F85650181A48E957E43E8E4A253C72FF

Located: WinLogon, !SASWinLogon
command: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
file: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
size: 352256
MD5: D8EDAEEAF63BBF45ED9B7A3666641C2A

#8 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 03 September 2008 - 06:21 PM

That scan that you asked about my have been virustotal? I believe this the one.

#9 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 04 September 2008 - 12:29 AM

Spyboit Search is telling me that %windir%\SMINST\launcher.exe is a virus.

That's a false positive; launcher.exe is a legitimate Vista file. Report it here please.


In addition, you posted the first four lines from the MBAM log, followed by a Spybot log... Please post the MBAM log in its entirety; it's all I need to see right now, thanks. :)

-screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#10 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 04 September 2008 - 10:31 AM

ok, sorry. my desktop is crazy. i post reports there to my desktop and then have to search for them. Norton Antivirus is reporting that launcher is making registry changes to my computer but its nothing I can do about it. Also Spybot tells me that its a virus, spyware or malware. Filename: relaunch.exe. Description: Spyware component related to DownloadWare????? I also get a black screen for a period of time before logging in. After logging in screen goes black. It did this on last night and stayd black for awhile. I finally was told to run combofix by a friend and that help so what but something is not right still. I have the combofix report if need. Thanks For Your Help!!

While I have a chance I will give you the combofix because we are having problems at times connecting to certain web pages. I know you didnt ask for it but just in case I am not able to produce it at a later time.

Attached Files


Edited by kym, 04 September 2008 - 10:40 AM.


#11 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 04 September 2008 - 12:21 PM

Also Spybot tells me that its a virus, spyware or malware. Filename: relaunch.exe

relaunch.exe?? Last time you posted you said it was Launcher.exe ....


Where is the location of relaunch.exe?

Please consider donating to help support the continued prompt and excellent services of this site.


#12 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 04 September 2008 - 10:28 PM

spybot tells me the launcher is located in HK_LM:RUNONCE (current system).
also there are some other things that has viruses:

1. rundll32.EXE C:\Windows\system32\NvCPL>dll, NvStartup added by the DLOADER-YI trojan

2. rundll32.EXE C:\Windows\system32\NvMcTray.dll, Nv, TaskbarInit

3. Rundll32.EXE C:\Windows\system32\nvsvc.dll, nvsvcStart -it states this is added by the AGOBOT.ALX Worm-this is not the valid NVIDIA Driver its located in the system 32 folder


My computer is shutting down while I am in the middle of doing things. So something is definently wrong.

Also a file called : CLEARSPRING.SOL.VIR IS FOUND ON MY DESKTOP

#13 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 04 September 2008 - 10:47 PM

Hi,

Please go to VirusTotal, and upload the following files for analysis:
C:\Windows\system32\NvCPL.dll (I assume you meant .dll and not >dll)
C:\Windows\system32\NvMcTray.dll
C:\Windows\system32\nvsvc.dll


Post the results in your reply.

In addition, open up your computer's case and look at the fan; clear all dust, and make sure nothing is obstructing proper air flow... I suspect temperature issues may be at play.

-screen317

Edited by screen317, 04 September 2008 - 10:49 PM.

Please consider donating to help support the continued prompt and excellent services of this site.


#14 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 05 September 2008 - 07:37 PM

Hi,

Please go to VirusTotal, and upload the following files for analysis:
C:\Windows\system32\NvCPL.dll (I assume you meant .dll and not >dll)
C:\Windows\system32\NvMcTray.dll
C:\Windows\system32\nvsvc.dll


Post the results in your reply.

In addition, open up your computer's case and look at the fan; clear all dust, and make sure nothing is obstructing proper air flow... I suspect temperature issues may be at play.

-screen317

Please tell me how to find these files. I dont know they are

#15 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 05 September 2008 - 07:43 PM

Finally found how to scan but not the right file take a look.

Attached Files



#16 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 05 September 2008 - 08:00 PM

Hi,

Please go to VirusTotal, and upload the following files for analysis:
C:\Windows\system32\NvCPL.dll (I assume you meant .dll and not >dll)
C:\Windows\system32\NvMcTray.dll
C:\Windows\system32\nvsvc.dll


Post the results in your reply.

In addition, open up your computer's case and look at the fan; clear all dust, and make sure nothing is obstructing proper air flow... I suspect temperature issues may be at play.

-screen317

Please tell me how to find these files. I dont know they are




results | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...
File nvcpl.cpl received on 09.06.2008 03:58:49 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 0/36 (0%)
Loading server information...
Your file is queued in position: 1.
Estimated start time is between 39 and 56 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2008.9.5.1 2008.09.05 -
AntiVir 7.8.1.28 2008.09.05 -
Authentium 5.1.0.4 2008.09.05 -
Avast 4.8.1195.0 2008.09.05 -
AVG 8.0.0.161 2008.09.05 -
BitDefender 7.2 2008.09.06 -
CAT-QuickHeal 9.50 2008.09.02 -
ClamAV 0.93.1 2008.09.05 -
DrWeb 4.44.0.09170 2008.09.05 -
eSafe 7.0.17.0 2008.09.03 -
eTrust-Vet 31.6.6072 2008.09.05 -
Ewido 4.0 2008.09.05 -
F-Prot 4.4.4.56 2008.09.05 -
F-Secure 8.0.14332.0 2008.09.05 -
Fortinet 3.112.0.0 2008.09.05 -
GData 19 2008.09.06 -
Ikarus T3.1.1.34.0 2008.09.06 -
K7AntiVirus 7.10.443 2008.09.05 -
Kaspersky 7.0.0.125 2008.09.06 -
McAfee 5378 2008.09.05 -
Microsoft 1.3903 2008.09.06 -
NOD32v2 3421 2008.09.06 -
Norman 5.80.02 2008.09.05 -
Panda 9.0.0.4 2008.09.05 -
PCTools 4.4.2.0 2008.09.05 -
Prevx1 V2 2008.09.06 -
Rising 20.60.42.00 2008.09.05 -
Sophos 4.33.0 2008.09.06 -
Sunbelt 3.1.1610.1 2008.09.05 -
Symantec 10 2008.09.06 -
TheHacker 6.3.0.8.072 2008.09.04 -
TrendMicro 8.700.0.1004 2008.09.05 -
VBA32 3.12.8.5 2008.09.05 -
ViRobot 2008.9.5.1365 2008.09.05 -
VirusBuster 4.5.11.0 2008.09.05 -
Webwasher-Gateway 6.6.2 2008.09.05 -
Additional information
File size: 73728 bytes
MD5...: fdf1bb4d2983d3e2ff9c6722c6b24aa9
SHA1..: ed0f25017e762b6ca65f82ac9dc719a602dbbfff
SHA256: f9f51ebcfabb7c4cc2ef1013737457d9307c9b37ef2ea5d14c93250faab09b48
SHA512: 2fb5a8df19381f9fbfba50d4037ec4b434a9709394500fe4747561a6d36c09d6
85bc65e63242d3b0e2a9fde96201b5e707808505972c361744278f5be53697cd
PEiD..: -
TrID..: File type identification
Win64 Executable Generic (53.8%)
Win32 Executable MS Visual C++ (generic) (23.7%)
Win 9x/ME Control Panel applet (9.7%)
Win32 Executable Generic (5.3%)
Win32 Dynamic Link Library (generic) (4.7%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10001a3e
timedatestamp.....: 0x45ce13b9 (Sat Feb 10 18:49:29 2007)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x55a4 0x6000 6.20 3877e97ec62c4e91e5115a2a8efa22ab
.rdata 0x7000 0x1b96 0x2000 4.45 aa388c78f6439241dd29341cec82aec3
.data 0x9000 0x113c 0x1000 1.49 39216a8104d725a2b533b33154750bbc
.rsrc 0xb000 0x6138 0x7000 5.78 eeabb36946f2f3b9896d8a1f91d72168
.reloc 0x12000 0xd86 0x1000 3.71 4dc1c1289d563d3134c8ca83c788a39d

( 4 imports )
> KERNEL32.dll: GetSystemInfo, VirtualProtect, GetVersionExW, LoadLibraryW, GetProcAddress, FreeLibrary, LCMapStringW, ExitProcess, GetCurrentThreadId, GetCommandLineA, GetVersionExA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleFileNameA, GetModuleHandleA, TerminateProcess, GetCurrentProcess, TlsAlloc, SetLastError, GetLastError, TlsFree, TlsSetValue, TlsGetValue, HeapFree, HeapAlloc, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, HeapDestroy, HeapCreate, VirtualFree, UnhandledExceptionFilter, WriteFile, LoadLibraryA, RtlUnwind, InterlockedExchange, VirtualQuery, LeaveCriticalSection, EnterCriticalSection, GetACP, GetOEMCP, GetCPInfo, VirtualAlloc, HeapReAlloc, InitializeCriticalSection, HeapSize, GetLocaleInfoA, GetStringTypeA, MultiByteToWideChar, GetStringTypeW, LCMapStringA
> USER32.dll: LoadStringW, MessageBoxW, EnumDisplayDevicesW, LoadIconW
> ADVAPI32.dll: RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegSetValueExW
> SHELL32.dll: ShellExecuteW

( 1 exports )
CPlApplet



ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

VirusTotal © Hispasec Sistemas - Blog - Contact: info@virustotal.com - Terms of Service & Privacy Policy

#17 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 05 September 2008 - 08:05 PM

| עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...
File nvmctray.dll received on 09.06.2008 04:03:27 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 0/36 (0%)
Loading server information...
Your file is queued in position: ___.
Estimated start time is between ___ and ___ .
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact Print results
Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
Email:


Antivirus Version Last Update Result
AhnLab-V3 2008.9.5.1 2008.09.05 -
AntiVir 7.8.1.28 2008.09.05 -
Authentium 5.1.0.4 2008.09.05 -
Avast 4.8.1195.0 2008.09.05 -
AVG 8.0.0.161 2008.09.05 -
BitDefender 7.2 2008.09.06 -
CAT-QuickHeal 9.50 2008.09.02 -
ClamAV 0.93.1 2008.09.05 -
DrWeb 4.44.0.09170 2008.09.05 -
eSafe 7.0.17.0 2008.09.03 -
eTrust-Vet 31.6.6072 2008.09.05 -
Ewido 4.0 2008.09.05 -
F-Prot 4.4.4.56 2008.09.05 -
F-Secure 8.0.14332.0 2008.09.05 -
Fortinet 3.112.0.0 2008.09.05 -
GData 19 2008.09.06 -
Ikarus T3.1.1.34.0 2008.09.06 -
K7AntiVirus 7.10.443 2008.09.05 -
Kaspersky 7.0.0.125 2008.09.06 -
McAfee 5378 2008.09.05 -
Microsoft 1.3903 2008.09.06 -
NOD32v2 3421 2008.09.06 -
Norman 5.80.02 2008.09.05 -
Panda 9.0.0.4 2008.09.05 -
PCTools 4.4.2.0 2008.09.05 -
Prevx1 V2 2008.09.06 -
Rising 20.60.42.00 2008.09.05 -
Sophos 4.33.0 2008.09.06 -
Sunbelt 3.1.1610.1 2008.09.05 -
Symantec 10 2008.09.06 -
TheHacker 6.3.0.8.072 2008.09.04 -
TrendMicro 8.700.0.1004 2008.09.05 -
VBA32 3.12.8.5 2008.09.05 -
ViRobot 2008.9.5.1365 2008.09.05 -
VirusBuster 4.5.11.0 2008.09.05 -
Webwasher-Gateway 6.6.2 2008.09.05 -
Additional information
File size: 81920 bytes
MD5...: 4a39b077f1621bd7fc5d4d9823a73714
SHA1..: a6728114482fd4b017adb0b0350d8b5771d6b310
SHA256: 175c5f18e0c31cb964e610b2e13f31e49793f5169ee6653d5a9f35e2dd6dc7cc
SHA512: 64d3959893bea9afff0a60117bf82c0f060b39b5a922a9cbeb4c2cae490c144b
6faaa2c9cf43ae06a12777b6f34f72bdbe74a91ee80e36b7da9c3ab39669d255
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x100035e6
timedatestamp.....: 0x45ce251b (Sat Feb 10 20:03:39 2007)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x743a 0x8000 6.24 6c0d9e51f8e5a70bc5daad09422c9fbc
.rdata 0x9000 0x1f59 0x2000 5.12 182f75c8336490a11498e5297827ba6e
.data 0xb000 0x23a8 0x1000 1.00 2b6b11bbd695fa24ecede28c2d3e2955
.rsrc 0xe000 0x7000 0x7000 4.37 ef8a6c8c61ce29a9af2e5db002149ba6
.reloc 0x15000 0xb0c 0x1000 4.42 e82d0b9e945232973cab4e9ef4134d66

( 5 imports )
> KERNEL32.dll: GetNumberFormatA, InterlockedExchange, SetFilePointer, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, RtlUnwind, FlushFileBuffers, SetStdHandle, VirtualQuery, GetSystemInfo, VirtualProtect, GetStringTypeW, GetStringTypeA, WriteFile, GetLocaleInfoA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetModuleFileNameA, GetStartupInfoA, GetFileType, GetStdHandle, SetHandleCount, TerminateProcess, ExitProcess, HeapReAlloc, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, lstrlenA, GlobalMemoryStatus, lstrcpyA, LocalFree, GetModuleHandleA, FindResourceA, LocalAlloc, CreateProcessA, GetExitCodeProcess, Sleep, GetCurrentThread, GetCurrentProcess, CloseHandle, GetVersionExA, ReleaseMutex, CreateMutexA, LoadLibraryExA, LockResource, OpenMutexA, LoadLibraryA, GlobalFree, GetProcAddress, SetLastError, GetLastError, GlobalAlloc, LoadResource, LCMapStringW, MultiByteToWideChar, WideCharToMultiByte, FreeLibrary, lstrcpynA, UnhandledExceptionFilter, HeapFree, HeapAlloc, GetCommandLineA, GetACP, GetOEMCP, GetCPInfo, LCMapStringA, HeapSize
> USER32.dll: DestroyWindow, PostQuitMessage, SendDlgItemMessageA, GetSubMenu, DeleteMenu, LoadMenuA, LoadIconA, wsprintfA, TrackPopupMenuEx, DefWindowProcA, GetCursorPos, DestroyMenu, SetDlgItemTextA, ModifyMenuA, SendMessageA, LoadImageA, GetMessageA, InsertMenuItemA, SetForegroundWindow, TranslateMessage, CreateDialogIndirectParamA, CreateWindowExA, GetDesktopWindow, GetMenuItemInfoA, ShowWindow, GetMenuItemCount, PostMessageA, DispatchMessageA, FindWindowA, SetMenuItemInfoA, LoadCursorA, DestroyIcon, RegisterClassA, IsWindow
> ADVAPI32.dll: OpenProcessToken, RegDeleteKeyA, RegEnumKeyExA, GetLengthSid, IsValidSecurityDescriptor, FreeSid, RevertToSelf, AddAccessAllowedAce, SetSecurityDescriptorOwner, AllocateAndInitializeSid, RegDeleteValueA, InitializeAcl, ImpersonateSelf, RegCreateKeyExA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegSetValueExA, AccessCheck, SetSecurityDescriptorGroup, OpenThreadToken, RegCloseKey, RegOpenKeyExA, RegQueryValueExA
> SHELL32.dll: Shell_NotifyIconA, ShellExecuteExA
> COMCTL32.dll: InitCommonControlsEx, -

( 6 exports )
NvMCRegisterApp, NvMCUnRegisterApp, NvMCUpdateStartSettings, NvTaskbarDelete, NvTaskbarInit, NvTaskbarNotify



ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

VirusTotal © Hispasec Sistemas - Blog - Contact: info@virustotal.com - Terms of Service & Privacy Policy

#18 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 06 September 2008 - 03:13 PM

Ok, please this is driving me crazing. Last night I had some downloads or installations because I got a message "installing new drivers". What drivers, didnt download anything. My daughter got up to work on school project but cant print. Printer is having communication problems. Went to services and noticed that everything is grayed out and cant be stopped or started. Something things are network servic with a password and everthing things is depending on RPC. I noticed while in services, several things caught my attention. Files I did not recognize:

c:\users\johnson\appdata\local\tempEFAQS.EXE
c:\users\johnson\appdata\local\temp\LEY.EXE - research GOOGLE _LISTED AS WORM
c:\users\johnson\appadata\local\temp\XPPPWPB.exe
c:\users\johnson\appdata\local\temp\NHNMCPMU.EXE
c:\users\johnson\appdata\local\temp\CBILKZ.EXE


Also just installed NIS 2008 catching nothing but cookies. (sucks) Ran VirusBuster can found virus. This machine is full of garbarge.

Attached Files



#19 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 06 September 2008 - 11:28 PM

Okay, let's take this a step at a time...

First, update MBAM and run a scan; post its log.

Next, please download ATF Cleaner by Atribune from here, and save it to your Desktop.

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache

The rest are optional - if you want to remove the whole lot, check Select All.
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

Finally, post a fresh HijackThis log, update me on current problems, and we'll continue from there.

-screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#20 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 07 September 2008 - 03:10 PM

Okay, let's take this a step at a time...

First, update MBAM and run a scan; post its log.

Next, please download ATF Cleaner by Atribune from here, and save it to your Desktop.

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache

The rest are optional - if you want to remove the whole lot, check Select All.
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

Finally, post a fresh HijackThis log, update me on current problems, and we'll continue from there.

-screen317




here is new hijack this report and atf report

Attached Files



#21 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 07 September 2008 - 03:12 PM

Okay, let's take this a step at a time...

First, update MBAM and run a scan; post its log.

Next, please download ATF Cleaner by Atribune from here, and save it to your Desktop.

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache

The rest are optional - if you want to remove the whole lot, check Select All.
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

Finally, post a fresh HijackThis log, update me on current problems, and we'll continue from there.

-screen317




here is new hijack this report and atf report

while rrunning hijack this a message appeared: DENIED WRITE ACCESS TO HOSTS FILES. Service host is very high.

#22 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 07 September 2008 - 06:16 PM

Okay, let's take this a step at a time...

First, update MBAM and run a scan; post its log.

Next, please download ATF Cleaner by Atribune from here, and save it to your Desktop.

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache

The rest are optional - if you want to remove the whole lot, check Select All.
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

Finally, post a fresh HijackThis log, update me on current problems, and we'll continue from there.

-screen317




here is new hijack this report and atf report

while rrunning hijack this a message appeared: DENIED WRITE ACCESS TO HOSTS FILES. Service host is very high.

Attached Files



#23 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 07 September 2008 - 06:25 PM

Okay, let's take this a step at a time...

First, update MBAM and run a scan; post its log.

Next, please download ATF Cleaner by Atribune from here, and save it to your Desktop.

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

Windows Temp
Current User Temp
All Users Temp
Temporary Internet Files
Java Cache

The rest are optional - if you want to remove the whole lot, check Select All.
Finally click Empty Selected. When you get the "Done Cleaning" message, click OK.

Finally, post a fresh HijackThis log, update me on current problems, and we'll continue from there.

-screen317




here is new hijack this report and atf report

while rrunning hijack this a message appeared: DENIED WRITE ACCESS TO HOSTS FILES. Service host is very high.



sorry meant to post this
Malwarebytes' Anti-Malware 1.26
Database version: 1103
Windows 6.0.6000

9/7/2008 5:59:06 AM
mbam-log-2008-09-07 (05-59-06).txt

Scan type: Quick Scan
Objects scanned: 38819
Time elapsed: 3 minute(s), 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



Its hidding somewhere but didnt show here !!!!!!!!!!!!!!!!

#24 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 07 September 2008 - 06:43 PM

Hi,

In the future please use the ADD REPLY button to reply.

Please use the Internet Explorer browser and click here to use the F-Secure Online Scanner.
  • Click Start Scanning.
  • You should get a notification bar (on top) to install the ActiveX control.
  • Click on it and select to install the ActiveX.
  • Once the ActiveX is installed, you should accept the License terms by clicking OK below to start the scan.
  • In case you are having problems with installing the ActiveX/starting the scan, please read here.
  • Click the Full System Scan button.
  • It will start to download scanner components and databases. This can take a while.
  • The main scan will start.
  • Once the scan has finished scanning, click the Automatic cleaning (recommended) button
  • It could be possible that your firewall gives an alert - allow it, because that's a connection you establish to submit infected files to F-Secure.
  • The cleaning can take a while, so please be patient.
  • Then click the Show report button and Copy/Paste what is present under results in your next reply.


-screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#25 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 09 September 2008 - 06:44 PM

ran the scan. foudn 1 virus and 12 spyware and skipped about 28 files. Once it finished it wouldnt let me show report gave me an error.
*
* This defines the look-and-feel styling of the error pages.
* (see: netError.xhtml)
*
* Original styling by William Price <bugzilla@mob.rice.edu>
* Updated by: Steven Garrity <steven@silverorange.com>
* Henrik Skupin <mozilla@hskupin.info>
*/

html {
background: -moz-Dialog;
}

body {
margin: 0;
padding: 0 1em;
color: -moz-FieldText;
font: message-box;
}

h1 {
margin: 0 0 .6em 0;
border-bottom: 1px solid ThreeDLightShadow;
font-size: 160%;
}

ul, ol {
margin: 0;
-moz-margin-start: 1.5em;
padding: 0;
}

ul > li, ol > li {
margin-bottom: .5em;
}

ul {
list-style: square;
}

#errorPageContainer {
position: relative;
min-width: 13em;
max-width: 52em;
margin: 4em auto;
border: 1px solid ThreeDShadow;
-moz-border-radius: 10px;
padding: 3em;
-moz-padding-start: 30px;
background: url("chrome://global/skin/icons/warning-large.png") left 0 no-repeat -moz-Field;
-moz-background-origin: content;
}

#errorPageContainer.certerror {
background-image: url("chrome://global/skin/icons/sslWarning.png");
}

body[dir="rtl"] #errorPageContainer {
background-position: right 0;
}

#errorTitle {
-moz-margin-start: 80px;
}

#errorLongContent {
-moz-margin-start: 80px;
}

#errorShortDesc > p {
overflow: auto;
border-bottom: 1px solid ThreeDLightShadow;
padding-bottom: 1em;
font-size: 130%;
white-space: pre-wrap;
}

#errorLongDesc {
-moz-padding-end: 3em;
font-size: 110%;
}

#errorLongDesc > p {
}

#errorTryAgain {
margin-top: 2em;
-moz-margin-start: 80px;
}

#brand {
position: absolute;
right: 0;
bottom: -1.5em;
-moz-margin-end: 10px;
opacity: .4;
}

body[dir="rtl"] #brand {
right: auto;
left: 0;
}

#brand > p {
margin: 0;
}

#errorContainer {
display: none;
}

#securityOverrideDiv {
padding-top: 10px;
}

#securityOverrideContent {
background-color: InfoBackground;
color: InfoText;
padding: 10px;
-moz-border-radius: 10px;
}

/* Custom styling for 'blacklist' error class */
:root.blacklist #errorTitle, :root.blacklist #errorLongContent,
:root.blacklist #errorShortDesc, :root.blacklist #errorLongDesc,
:root.blacklist a {
background-color: #722; /* Dark red */
color: white;
}

:root.blacklist #errorPageContainer {
background-image: url("chrome://global/skin/icons/blacklist_large.png");
background-color: #722;
}

:root.blacklist {
background: #333;
}

:root.blacklist #errorTryAgain {
display: none;
}
this folder is on my desktop dont know why but it is titled: ols_report_files.



This is the error report when trying to print report.

%htmlDTD; %netErrorDTD; %globalDTD; ]> File Not Found
Firefox can't find the file at /C:/Users/johnson/AppData/Local/Temp/OnlineScanner/ols_report.html.
Could the item have been renamed, removed, or relocated?
Is there a spelling, capitalization, or other typographical error in the address?
Do you have sufficient access permissions to the requested item?

#26 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 09 September 2008 - 06:53 PM

I AM ONLINE NOW. CAN SCREEN317 PLEASE HELP!!!! RUNNING SCAN AGAIN TO SEE IF I CAN GET REPORT BUT I AM SURE IT WONT BE THE SAME. HELP!!!!!!!!!!!!!!! DO YOU HAVE LIVE CHAT AND HOW DO YOU START IT!!!!!!!

#27 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 09 September 2008 - 07:17 PM

kym,

First of all, calm down please; typing in all CAPS is considering shouting and rude.

What is the emergency...?


Run this online scan instead:
BitDefender

Edited by screen317, 09 September 2008 - 07:17 PM.

Please consider donating to help support the continued prompt and excellent services of this site.


#28 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 09 September 2008 - 08:01 PM

Ok, ran the scan one more time and cleaned both times and virus seems not to be cleaned. Found it once again.
Scanning Report
Tuesday, September 09, 2008 07:39:18 - 08:51:33

Computer name: JOHNSON-PC
Scanning type: Scan system for malware, rootkits
Target: C:\ D:\
Result: 1 malware found
W32/Malware (virus)

* C:\PROGRAM FILES\SPYWAREBLASTER\SBAUTOUPDATE.EXE (Submitted)

Statistics
Scanned:

* Files: 42541
* System: 6708
* Not scanned: 27

At first it should 9 viruses, could that be true??


Actions:

* Disinfected: 0
* Renamed: 0
* Deleted: 0
* None: 1
* Submitted: 1

Files not scanned:

* C:\HIBERFIL.SYS
* C:\PAGEFILE.SYS
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\0AA48B501F0DC901AD0D00009010C015._SERVICEMODELENDPOINTPERFCOUNTERS.INI
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\2AFDAA4E1F0DC901A80D00009010C015.IFXCARDM.DLL
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\6A4959501F0DC901AA0D00009010C015._SERVICEMODELSERVICEPERFCOUNTERS.INI
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\7A268F501F0DC901AE0D00009010C015._TRANSACTIONBRIDGEPERFCOUNTERS.INI
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\7AD387501F0DC901AC0D00009010C015._SMSVCHOSTPERFCOUNTERS.INI
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\AA087B4D1F0DC901A70D00009010C015.AXALTOCM.DLL
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\AA137C501F0DC901AB0D00009010C015._SERVICEMODELOPERATIONPERFCOUNTERS.INI
* C:\WINDOWS\WINSXS\TEMP\PENDINGRENAMES\EA772C511F0DC901B60D00009010C015.FRAMEWORKLIST.XML
* C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
* C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
* C:\WINDOWS\SYSTEM32\CONFIG\SAM
* C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
* C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
* C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
* C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\COMPONENTS
* C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\DEFAULT
* C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SAM
* C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SECURITY
* C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SOFTWARE
* C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SYSTEM
* C:\WINDOWS\SYSTEM32\CATROOT2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB
* C:\WINDOWS\SYSTEM32\CATROOT2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB
* C:\USERS\MY SPOIL CHILD\APPDATA\ROAMING\SYMANTEC\NPMDATASTORE\CIMSTORE.XML
* C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCRST.DLL
* C:\BOOT\BCD

Options
Scanning engines:

* F-Secure USS: 2.30.0
* F-Secure Hydra: 2.8.8110, 2008-09-09
* F-Secure Pegasus: 1.20.0, 2008-04-14
* F-Secure AVP: 7.0.171, 2008-09-09

Scanning options:

* Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX ANI AVB BAT CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR
* Use Advanced heuristics

Copyright © 1998-2007 Product support |Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name.This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.


Sorry but wouldnt let me upload. So did it this way. I am sorry for all caps, but I am a just about had it with this computer, spent 30 minutes trying to get this to work. Sorry, pleasebe patience with me. Thanks for your help so far.

Edited by kym, 09 September 2008 - 08:03 PM.


#29 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 09 September 2008 - 08:26 PM

Hi,

At first it should 9 viruses, could that be true??

Yes, that means it cleaned them the first time...


See my last post and do the BitDefender online scan also. Post a fresh HijackThis log after that.

screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#30 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 09 September 2008 - 09:11 PM

Did you notice that there is still one virus that was not clean? I ran a scan twice and still showed up. Running a bitdefender scan now and will post. Also here crunching sound from tower.

#31 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 09 September 2008 - 09:20 PM

Yes I saw..... Look where it's located:


* C:\PROGRAM FILES\SPYWAREBLASTER\SBAUTOUPDATE.EXE (Submitted)


It's related to SpywareBlaster, so it's a false positive.

Also here crunching sound from tower.

Open your case and find out where it's coming from...

Edited by screen317, 09 September 2008 - 09:21 PM.

Please consider donating to help support the continued prompt and excellent services of this site.


#32 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 09 September 2008 - 09:40 PM

ok ran bitdefender. here are the results.



BitDefender Online Scanner - Real Time Virus Report







Generated at: Tue, Sep 09, 2008 - 10:35:36









Scan Info







Scanned Files


425494

Infected Files


0















Virus Detected







No virus found.

























This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.








So what is next? I will restart computer to see if I get black screen at startup!

#33 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 09 September 2008 - 09:50 PM

Hijack this is scary. What is the local host:: 1.



O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup- Spybot list as spyware or virus
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit- Spybot list as spyware or virus

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe- Spybot list as virus or worm filename: launcher.exe, description: spyware component related to DownloadWare and found in Program Files KFH, current file name: %WINDIR%SMINST|launcher.exe

Please advise. Started up a then got a black screen for a little while then log on came up!!!

Attached Files


Edited by kym, 09 September 2008 - 10:06 PM.


#34 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 09 September 2008 - 10:24 PM

Hijack this is scary. What is the local host:: 1.

It is a default value related to connection settings for Windows Vista; it's legitimate, so don't touch it.



O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup- Spybot list as spyware or virus

As I said before, this is a false positive by Spybot; see:
http://www.systemloo...t...plDaemon&s=
"Intializes the clock and memory settings on nVidia based graphics cards. Enable if you overclock your card"

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit- Spybot list as spyware or virus

See: http://www.systemloo...t...iaCenter&s=
"System Tray icon used to manage settings for nVidia based graphics cards. May be required for some 3D applications to recognize your card correctly - such as the game "Everquest". Otherwise, settings can be changed manually via Display Properties"

They are both related to your graphics card.

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe- Spybot list as virus or worm filename: launcher.exe, description: spyware component related to DownloadWare and found in Program Files KFH, current file name: %WINDIR%SMINST|launcher.exe

Read the info you are posting please............... The trojan version lives in the folder %program files%\KFH, NOT %windir%\SMINST, which is a legitimate Windows Vista entry.


As I have said previously, report these false positives to the link I gave you to Spybot's forum in Post #9.



Please advise. Started up a then got a black screen for a little while then log on came up!!!

When does this black screen occur?? After the Windows loading screen?? How long does it occur?? Details please.

Edited by screen317, 09 September 2008 - 10:25 PM.

Please consider donating to help support the continued prompt and excellent services of this site.


#35 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 10 September 2008 - 10:24 AM

Here how my computer starts up:


1. Compaq screen- 1 second

2. Black screen 1-2 seconds

3. Microsoft Corpation screen 2 seconds

4. Then total black screen 6 seconds then log in

5. After log in another black screen


I just bought computer a year ago, didnt start this way. I got a screen were it tells you, you need to restart your computer because of updates, well it did not give me an optio to restart or postpone downloads. That part was grayed out and just automically shut the computer down. It does that often and no updates will be installed . I go back to check and no updates have been installed at all. So I wen to the system events ot find out what happen and it told me: the com+ event system detected a bad return code during its internal processing. HRESULT was 8007043c from line 45 of d:\vista_gdr\com\complus\src\events\tier1\eventsystemobj.cpp. After it shut the computer down weird things we going on, windows start up then would go to say: loading windows file, but then automatic repair would start. it couldn't repair the machine. Then try to restart the machine but wouldnt boot up in normal mode so tried safe mode with networking but couldnt get internet service. So tried again to reboot in safe mode to go to event services and looked at system events again found a message dated todays date: the following boot-start or system start driver (s) failed to load eeCTRL under that is SASDIFSV. Also failed updates kb954366,kb936330, kb939159. Dont know whats going on hear.

Edited by kym, 10 September 2008 - 03:58 PM.


#36 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 11 September 2008 - 12:12 AM

Hi,

So tried again to reboot in safe mode to go to event services and looked at system events again found a message dated todays date: the following boot-start or system start driver (s) failed to load eeCTRL under that is SASDIFSV

This error appears to be coming from SuperAntiSpyware. To troubleshoot, I recommend uninstalling SuperAntiSpyware from Add or Remove Programs. After that, restart your computer and let me know if problems persist.

Please consider donating to help support the continued prompt and excellent services of this site.


#37 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 11 September 2008 - 02:18 PM

I will do what you said about uninstalling. But turn computer on today an immediately got that prompt again with windows update. Must start computer for updates to take place. I did not download any updates just turned on computer. Well, that would not let me postpone updates only, it restarted the computer itself. I went to alt+task+delt and look for the the update and try to stop the task. the process running is "WUAUClLT.exe" I dont believe that is the correct process thats running. I also have many rundll's running and when trying to right click on them they disappear. This is at start up only. Can't catch them to see what they are. Also after that so called update it started the machine over and got blackscreen but this time displayed at message at start up: "207/207 registry compents" writing was in write with just pitch black screen. Also noticed that updates were being congfigured but never got to 100% which makes me very suspicous. This is soemthing that has control over my machine. I believe that it maybe in my restore system because when I restore it doesnt help at all.

#38 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 12 September 2008 - 11:39 AM

I started my computer today and the same thing happen. Updates needed to shut my computer down. Windows update comes up and cant postpone because its grayed out. I never gotten this many updates on a daily basis. Strange. Once the machine restart black screen again with registry machine components 1349/1349, i saw it installing something but moving to fast for me to copy anything. I also noticed that my clock no matter how I change it wont keep the correct time. When I change it you cant click apply because it is also grayed out. You can only click ok. I was curious and went to the regeidt and noticed that HKEY_Local_machine was expanded but not by me, I have touch the regedit. I have noticed for about a week that when I log off my computer that my internet light on my mode is flashing away. Who is still on the internet after I log off. Also my recycle bin has disappeared from my desktop. I tried to do a search and an advance search but nothing comes up at all, i select hidden files and no return of my recycle bin. Weird machine. Something is going on for real here

Edited by kym, 12 September 2008 - 11:41 AM.


#39 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 13 September 2008 - 12:43 AM

Your operating system is clearly suffering from what appears to be corruption of some sort, and at this point, a format and reinstallation of your operating system may cure all of it. If you have valuable data on this computer, I suggest backing it up.

Question for you-- do you have your Windows Vista CD?

Please consider donating to help support the continued prompt and excellent services of this site.


#40 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 13 September 2008 - 03:31 PM

I have tried to restore and reformat with the cd's and still the same thing is happening. What do I do. I believe what ever it is, it is in the restore system. Before I tried to do the last reformat I ran a scan of some sort and it gave me something about: system/volume. But had to pay for the version to clean it. Please tell me what to do. What do you suggest about the when I log off the last are still flashing on modem? I am sure something is on here or it wouldnt still be flashing the internet button.

Edited by kym, 13 September 2008 - 03:32 PM.


#41 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 13 September 2008 - 06:22 PM

I have tried to restore and reformat with the cd's and still the same thing is happening. What do I do. I believe what ever it is, it is in the restore system. Before I tried to do the last reformat I ran a scan of some sort and it gave me something about: system/volume. But had to pay for the version to clean it. Please tell me what to do. What do you suggest about the when I log off the last are still flashing on modem? I am sure something is on here or it wouldnt still be flashing the internet button.

Well your ISP is always pinging your modem to make sure you're still connected; that's nothing to worry about.

Let's see if your system files are corrupted.


Please see this page for details on how to run Check Disk on your drive:
http://www.maximumpc...-windows-vista/

Refer to the section labeled Using the Graphical User Interface (GUI)

Let me know if you need any help.

After it completes, restart your computer and let me know if anything improves. If not, let's see what's going on with Windows Update.

Go to Start --> Programs --> Windows Update

See if any updates are available; if so, let me know which ones are.

screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#42 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 14 September 2008 - 08:31 PM

I got rid of symantec 2008 because it wasnt worth the money I spent. So i download avast! and the sunbelt firewall. I am really going crazy because I dont know how to set either one of them. I getting a pitch black screen in the middle of working. The screen goes black and then message: Logon process has failed to create the security options dialog. Failure-Security Options? Now what is that? WOW! Another problem I see since installing the firewall Windows SQM Consolidator Application is launching other applications. Just help!!!!

#43 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 14 September 2008 - 08:36 PM

kym,

Your computer is experiencing many odd problems that appear to be related to various conflicts; at this point, considering that it is not malware related, I cannot really help you much more.

I recommend visiting the great people at TechSupportForum, who may be better able to analyze your current problems and hardware to provide a solution.

Sorry that I am not able to help you at this time.

screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#44 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 28 September 2008 - 03:24 PM

hello screen317. I have experience some really bad times here. I ran every scan there is too run and found that I have a virus. I thank you for your help even though it was rather short. I would like to know if my computer is free of viruses or malware. I will submit scan it found, too let you see what was found on my computer. The virus was located in my hp games and another location. I also had a backdoor trojan what ever that means.
a-squared Anti-Malware - Version 4.0
Last update: 9/26/2008 4:19:53 PM

Scan settings:

Objects: Memory, Traces, Cookies, C:\, D:\
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 9/26/2008 5:28:12 PM

C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Blackhawk Striker 2\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Blasterball 3\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Bookworm Deluxe\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Bounce Symphony\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Cake Mania\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Crystal Maze\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Cue Master\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Diner Dash\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Family Feud\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\FATE\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Final Drive Nitro\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Flip Words\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\JEOPARDY\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Jewel Quest\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Otto\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Overball\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Penguins!\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Phoenix Assault\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Polar Bowler\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Polar Golfer\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Polar Tubing\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Ricochet Lost Worlds\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\SCRABBLE\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Super Granny\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Tradewinds\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Wheel of Fortune\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe detected: IRC-Worm.Win32.Lile.A!IK
C:\Users\My Spoil Child\Desktop\SDFix.exe/RestartIt!.exe detected: IM-Worm.Win32.Prex.D!IK
D:\hp\apps\APP15728\src\install\games\bejeweled2deluxe-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\blackhawkstriker2-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\blasterball3-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\bookwormdeluxe-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\bounce-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\cakemania-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\chuzzledeluxe-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\crystalmaze-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\cuemaster-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\dinerdash-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\familyfeud-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\fate-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\finaldrivenitro-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\flipwords-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\insaniquariumdeluxe-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\jeopardy-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\jewelquest-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\mahjongquest-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\otto-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\overball-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\penguins-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\phoenixassault-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\polarbowler-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\polargolfer-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\polartubing-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\ricochetlostworlds-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\scrabble-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\supergranny-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\tradewinds-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\wheeloffortune-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\zuma-setup.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\other\fatemediaupgrade-silent.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\other\UberUninstallSetup-hpdesktop.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\other\UberUninstallSetup-hpusb.exe detected: IRC-Worm.Win32.Lile.A!IK
D:\PRELOAD\73NAv3PrA123.wim detected: Trojan.Win32.Shutdowner.awy!IK
D:\PRELOAD\73NAv3PrA125.wim detected: Trojan.Win32.Shutdowner.awy!IK

Scanned

Files: 136701
Traces: 328707
Cookies: 167
Processes: 18

Found

Files: 69
Traces: 0
Cookies: 0
Processes: 0
Registry keys: 0

Scan end: 9/26/2008 6:50:21 PM
Scan time: 1:22:09

D:\PRELOAD\73NAv3PrA123.wim Deleted Trojan.Win32.Shutdowner.awy!IK
D:\PRELOAD\73NAv3PrA125.wim Deleted Trojan.Win32.Shutdowner.awy!IK
C:\Users\My Spoil Child\Desktop\SDFix.exe/RestartIt!.exe Deleted IM-Worm.Win32.Prex.D!IK
C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Blackhawk Striker 2\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Blasterball 3\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Bookworm Deluxe\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Bounce Symphony\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Cake Mania\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Crystal Maze\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Cue Master\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Diner Dash\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Family Feud\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\FATE\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Final Drive Nitro\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Flip Words\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\JEOPARDY\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Jewel Quest\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Otto\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Overball\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Penguins!\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Phoenix Assault\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Polar Bowler\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Polar Golfer\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Polar Tubing\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Ricochet Lost Worlds\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\SCRABBLE\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Super Granny\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Tradewinds\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Wheel of Fortune\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\bejeweled2deluxe-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\blackhawkstriker2-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\blasterball3-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\bookwormdeluxe-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\bounce-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\cakemania-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\chuzzledeluxe-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\crystalmaze-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\cuemaster-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\dinerdash-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\familyfeud-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\fate-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\finaldrivenitro-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\flipwords-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\insaniquariumdeluxe-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\jeopardy-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\jewelquest-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\mahjongquest-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\otto-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\overball-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\penguins-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\phoenixassault-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\polarbowler-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\polargolfer-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\polartubing-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\ricochetlostworlds-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\scrabble-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\supergranny-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\tradewinds-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\wheeloffortune-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\games\zuma-setup.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\other\fatemediaupgrade-silent.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\other\UberUninstallSetup-hpdesktop.exe Deleted IRC-Worm.Win32.Lile.A!IK
D:\hp\apps\APP15728\src\install\other\UberUninstallSetup-hpusb.exe Deleted IRC-Worm.Win32.Lile.A!IK

Deleted

Files: 69
Traces: 0
Cookies: 0



SECOND SCAN RAN
a-squared Anti-Malware - Version 4.0
Last update: 9/22/2008 6:56:01 PM

Scan settings:

Objects: Memory, Traces, Cookies, C:\, D:\
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 9/22/2008 6:57:39 PM

Key: HKEY_USERS\S-1-5-21-707000247-1430798824-112632010-1000\software\kazaa detected: Trace.Registry.KaZaA!A2
C:\Users\My Spoil Child\AppData\Roaming\Mozilla\Firefox\Profiles\fumvcvch.default\cookies.sqlite:1221521317429760 detected: Trace.TrackingCookie.webtrends!A2
C:\Program Files\HP Games\Flip Words\FlipWords.exe detected: Packed.Win32.PePatch.gk!A2
C:\Program Files\HP Games\Mah Jong Quest\mahjong.exe detected: Trojan-Spy.Win32.Pophot.aww!A2
C:\Program Files\HP Games\SCRABBLE\Scrabble.exe detected: Backdoor.Win32.Bifrose.kt!A2
C:\Program Files\PC-Doctor 5 for Windows\pcdrmodem.p5x detected: Heuristic.Dialer.RAS!A2

Scanned

Files: 124628
Traces: 541290
Cookies: 169
Processes: 49

Found

Files: 4
Traces: 1
Cookies: 1
Processes: 0
Registry keys: 0

Scan end: 9/22/2008 7:42:47 PM
Scan time: 0:45:08

C:\Program Files\PC-Doctor 5 for Windows\pcdrmodem.p5x Deleted Heuristic.Dialer.RAS!A2
C:\Program Files\HP Games\SCRABBLE\Scrabble.exe Deleted Backdoor.Win32.Bifrose.kt!A2
C:\Program Files\HP Games\Mah Jong Quest\mahjong.exe Deleted Trojan-Spy.Win32.Pophot.aww!A2
C:\Program Files\HP Games\Flip Words\FlipWords.exe Deleted Packed.Win32.PePatch.gk!A2
C:\Users\My Spoil Child\AppData\Roaming\Mozilla\Firefox\Profiles\fumvcvch.default\cookies.sqlite:1221521317429760 Deleted Trace.TrackingCookie.webtrends!A2
Key: HKEY_USERS\S-1-5-21-707000247-1430798824-112632010-1000\software\kazaa Deleted Trace.Registry.KaZaA!A2

Deleted

Files: 4
Traces: 1
Cookies: 1

TWO THINGS I HAVE DONE SINCE THIS: DOWLOADED A-SQUARED ANTIMALWARE AND SUNBELT PERSONAL FIREWALL. DONT KNOW HOW TO CONFIGURE SUNBELT FIREWALL BUT IT IS DOING AN EXCELLENT JOB. A-SQUARED ANTIMALAWARE 10 THUMBS UP!!!!!!!!


THANKS FOR YOUR HELP SCREEN317!!! pLEASE CHECK LOG FOR ME.

Attached Files



#45 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 30 September 2008 - 09:08 AM

A-squared anti-malware states that I still have backdoor activity, but not saying what type it is. Can someone please help. There is a very loud ticking sound coming from this tower, my computer is constantly pinged and trace per the history in the antimalware. Also sunbelt firewall does not start up anymore, could this be due to the backdoor? What is backdoor trojan!!! Please help!! Losing my pc to this mess up !!

#46 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 03 October 2008 - 11:15 AM

kym,

My apologies for the delay. Unfortunately, I am being quite overwhelmed with everything going on at my university. As such, and it pains me to say this, but I cannot keep up with the few open topics I have left.

If you would like further assistance, please let me know, and I'll ask another Helper if they would like to take over.

Regards,

screen317

Please consider donating to help support the continued prompt and excellent services of this site.


#47 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 06 October 2008 - 09:03 AM

I appreciate all of your help screen317. Please if you don't mins please give me someone with as much knowledge as you have. I ran another scan and i will post it here. This backdoor trojan is creating new things as fast as I can delete them. It is a monster. Also this morning when loggin on i get a weird message upon signing on: Windows is not genuine post activate now. I click cancel but still pops up. Also another message that I get "Logon Process Intitalization Failure"- Interactive logon process intitalization has failed , please consult the event log for failure.

a-squared Anti-Malware - Version 4.0
Last update: 10/4/2008 5:03:16 PM

Scan settings:

Objects: Memory, Traces, Cookies, C:\, D:\
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 10/5/2008 1:43:13 PM

Value: HKEY_LOCAL_MACHINE\SOFTWARE\Sony Pictures Games\JEOPARDY! --> PID detected: Trace.Registry.JEOPARDY!!A2
C:\Program Files\Alwil Software\Avast4\ENGLISH\HELP\CheckListSimple.chm detected: Exploit.HTML.CodeBaseExec!IK

Scanned

Files: 142103
Traces: 332046
Cookies: 197
Processes: 18

Found

Files: 1
Traces: 1
Cookies: 0
Processes: 0
Registry keys: 0

Scan end: 10/5/2008 3:09:27 PM
Scan time: 1:26:14

C:\Program Files\Alwil Software\Avast4\ENGLISH\HELP\CheckListSimple.chm Deleted Exploit.HTML.CodeBaseExec!IK
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Sony Pictures Games\JEOPARDY! --> PID Deleted Trace.Registry.JEOPARDY!!A2

Deleted

Files: 1
Traces: 1
Cookies: 0

ALSO RAN A NEW HIJACK THIS:Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:11 PM, on 8/26/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\HP Optical 4 Button USB Mouse\Kmaestro.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.att.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...a...&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...a...&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BtcMouseMaestro] "C:\Program Files\HP Optical 4 Button USB Mouse\KMaestro.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-707000247-1430798824-112632010-1001\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun (User 'My Spoil Child')
O4 - S-1-5-21-707000247-1430798824-112632010-1001 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'My Spoil Child')
O4 - S-1-5-21-707000247-1430798824-112632010-1001 User Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'My Spoil Child')
O4 - Global Startup: Snapfish Media Detector.lnk = C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewi...oOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: lxcy_device - - C:\Windows\system32\lxcycoms.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 8239 bytes

WHEN I GO TO THE EVENT LOG-IT WONT LET ME VIEW THE LOG, ALSO WHEN VIEWING SERVICES ALL OF THE ARE GRAYED OUT OR EITHER STOPPED AND CANT BE STARTED. PLEASE HELP i DONT NO ANY OTHER HELP!! RESTORING WITH DISK DONT WORK!! aLSO MY SUNBELT FIREWALL HAS BEEN TAMPERED WIT. BECAUSE I NOTICED THAT THE UPDATE BUTTON IS GRAYED OUT NOW AND CANT UPDATE THE FIREWALL. i CANT UNINSTALL PROGRMAS BECAUSE WHEN I LOG ON AS ADMIN IT TELLS ME "TO CONTACT ADMINSTRATOR FOR THAT UNINSTALLN OR REMOVING PROGRAMS!!

wHAT IS REALLY GOING ON WITH THIS VIRUS OR TROJANS. SEEM LIKE IT KEEPS CHANGING. pLEASE CHECK PREVIOUS POST WHERE IT WAS "IRC-WORM.WIN32.LILE.A!lK. ITS DANGEROUS TO YOUR SYSTEM. ALSO CANT COPY AND PASTE SOMETIMES.

Edited by kym, 06 October 2008 - 09:07 AM.


#48 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 07 October 2008 - 08:52 AM

I am working in safe mode with networking because when I try to log on gettn weird message:

1. Windows Vista Home Premium product key you typed is invalid for activation???? .
2. It gives s options for you to click on: Buy new product key online, Type different product key, or Contact Hewlett-Packard Company to resolve
3. It also states in the lower right corner that Windows is not genuine

By the way there is no desktop here. So I started clicking just to see what may happen, Buy new products takes u to the internet!! (YESSSSSSSSSSSSSSSS)

Type different prouct key- gives message: User Account Control (UAC) has failed to authenicate the user-Error Code ox80070005 Access is denied.

Contact Hewlett-Packard Company to resolve.


Well I chose to buy new product just to get online and post my problem here!! After trying in safe mode with networking got a desktop and everything seems to work fine. Running a scan with A-squared and will post later. Also ran a scan yesterday and found something weird in the scan. Someone put a test virus on system!! This is getting crazier by the day.

POST:

a-squared Anti-Malware - Version 4.0
Last update: 10/4/2008 5:03:16 PM

Scan settings:

Objects: Memory, Traces, Cookies, C:\, D:\
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 10/6/2008 8:13:07 AM

C:\Users\johnson\AppData\Local\Temp\Av-test.txt detected: EICAR-ANTIVIRUS-TESTFILE!IK

Scanned

Files: 141997
Traces: 319803
Cookies: 147
Processes: 6

Found

Files: 1
Traces: 0
Cookies: 0
Processes: 0
Registry keys: 0

Scan end: 10/6/2008 9:38:56 AM
Scan time: 1:25:49

C:\Users\johnson\AppData\Local\Temp\Av-test.txt Deleted EICAR-ANTIVIRUS-TESTFILE!IK

Deleted

Files: 1
Traces: 0
Cookies: 0


After many deletions this virus is in the wild!! (!IK)


SOMEONE PLEASE COME TO MY RESCUE!!!

#49 screen317

screen317

    SWI Sentinel

  • Global Moderator
  • PipPipPipPipPip
  • 8,815 posts

Posted 07 October 2008 - 06:41 PM

Hi,

Several backdoor trojans have infiltrated your system. The damage that has been done is immeasurable. Please update MBAM and run a scan with it. Post its log.

When you reformat and install, what exactly do you do? Be specific.

Please consider donating to help support the continued prompt and excellent services of this site.


#50 kym

kym

    Member

  • Full Member
  • Pip
  • 79 posts

Posted 08 October 2008 - 08:47 AM

I AM USING THE DISK THAT CAME WITH THE COMPUTER. ITS NOT WORKING. I RAN MALWARE BYTES FOUND NOTHING. BUT RAN A SCAN WITH A-SQUARED A FOUND 2 THINGS ALREADY, WILL POST WHEN FINISH RUNNING.


THERE IS A FOLDER I FOUND WHILE TRYING TO FIGURE OUT WHAT HAPPEN TO COMPUTER CALLED AUTO-RECOVERY?????

Attached Files






Member of UNITE
Support SpywareInfo Forum - click the button