|
|||||||
| Windows Vista Problem solving for the Windows Vista Operating System. Please remember to state which edition of Vista you are using - Home Basic, Home Premium, Business, Ultimate etc. and whether you are using the 32-bit or 64-bit version if you know. |
 |
|
|
Topic Tools |
|
#1
February 4th, 2009, 03:27 PM
|
|||
|
|||
Windows Defender Update Error - 0x80244019
hi i have the same problem as vimal.singh
Recently my Windows Defender does not update definitions neither manually nor automatically. The error code i get is - 0x80244019. When Searched over Microsoft Official pages, they link you to some bogus links which IE cannot even find. How can one get rid of this error ? can you please help me Thanks Paul 
|
|
#3
February 4th, 2009, 11:19 PM
|
||||
|
||||
|
Hi paul0179 and welcome. vimal.singh's operating system was infected and his topic is in the Cyber Safety Forum.
To cut back on their workload, I will look at some logs and see if this is the case in your situation however we do not work on malware issues in this forum. Download OldTimer's OTViewIt from here to your desktop,and doubleclick on OTViewIt.exe to start the scan. When the display opens place a check next to: Scan All Users Then click the Run Scan button to start the scan. Once that completes a textbox will open. Copy and paste the contents here for review please. The log can also be found on your desktop as OTViewIt.Txt. It will be a reasonably large log so you may have to divide the log into sections and make several posts to post it. Extras.txt will also be generated. Please post that log as well. Note - do not press any other buttons or make any other changes when running the scan.
|
|
#4
February 5th, 2009, 08:11 AM
|
|||
|
|||
|
Hi AnnMarie thank you for answering me,here is the log which you have asked for.I hope this will help and thank you for the help
OTViewIt Extras logfile created on: 05/02/2009 07:04:26 - Run 2 OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Users\Paul\Desktop Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free 4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free Paging file location(s): ?:\pagefile.sys; %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 455.33 Gb Total Space | 284.70 Gb Free Space | 62.53% Space Free | Partition Type: NTFS Drive D: | 10.43 Gb Total Space | 1.43 Gb Free Space | 13.70% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: PAULHOMECOMP Current User Name: Paul Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Whitelist: On File Age = 30 Days ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval"=1 "UacDisableNotify"=1 "InternetSettingsDisableNotify"=1 "AutoUpdateDisableNotify"=1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring"=1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring"=1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride"=0 "AntiSpywareOverride"=0 "FirewallOverride"=0 "VistaSp1"= [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile "EnableFirewall"=1 "DisableNotifications"=0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\GloballyOpenPorts] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\Logging] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List] [2008/12/16 20:16:10 | 00,637,232 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorre nt ========== (O10) Winsock2 Catalogs ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\WinSock2\Parameters\] NameSpace_Catalog5\Catalog_Entries\000000000001 [@%SystemRoot%\system32\nlasvc.dll,-1000] -- C:\Windows\System32\nlaapi.dll (Microsoft Corporation) NameSpace_Catalog5\Catalog_Entries\000000000002 [@%SystemRoot%\system32\napinsp.dll,-1000] -- C:\Windows\System32\NapiNSP.dll (Microsoft Corporation) NameSpace_Catalog5\Catalog_Entries\000000000003 [@%SystemRoot%\system32\pnrpnsp.dll,-1000] -- C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) NameSpace_Catalog5\Catalog_Entries\000000000004 [@%SystemRoot%\system32\pnrpnsp.dll,-1001] -- C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation) ========== HKEY_LOCAL_MACHINE Protocol Defaults ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\ZoneMap\ProtocolDefaults - Default Protocols ldap -- 4 = Restricted sites (Not a Default Protocol) news -- 4 = Restricted sites (Not a Default Protocol) nntp -- 4 = Restricted sites (Not a Default Protocol) oecmd -- 4 = Restricted sites (Not a Default Protocol) snews -- 4 = Restricted sites (Not a Default Protocol) ========== HKEY_USERS Protocol Defaults ========== [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Inter net Settings\ZoneMap\ProtocolDefaults] - Default Protocols @ivt -- @ivt protocol not assigned file -- file protocol not assigned ftp -- ftp protocol not assigned http -- http protocol not assigned https -- https protocol not assigned shell -- shell protocol not assigned ========== HKEY_USERS Protocol Defaults ========== [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Inter net Settings\ZoneMap\ProtocolDefaults] - Default Protocols @ivt -- @ivt protocol not assigned file -- file protocol not assigned ftp -- ftp protocol not assigned http -- http protocol not assigned https -- https protocol not assigned shell -- shell protocol not assigned ========== (O18) Protocol Handlers ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Hand ler\] [2007/06/08 00:30:54 | 00,230,760 | ---- | M] (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (ms-itss:{0A9007C0-4076-11D3-8789-0000F8105754} (HKLM) [Microsoft Infotech Storage Protocol for IE 4.0]) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall] "{02EBDBB9-4600-41D3-B566-40CB861511D2}"=World of Warcraft FREE Trial "{066D65EA-ED53-44E4-A96A-F81B6E409D2E}"=PC Connectivity Solution "{06A419C1-0509-4967-87F9-8761D8D6765D}"=ccc-core-static "{0711500B-9912-4D60-9A49-C577B4503D42}"=Nero Recode Help "{07FF7593-9DEA-40B5-9F87-F557E65BBF60}"=Nero Recode "{0A2C5854-557E-48C8-835A-3B9F074BDCAA}"=Python 2.5 "{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}"=LightScribe System Software 1.14.17.1 "{1122AAC4-AAAA-43BF-B2D4-3C8C12378952}"=Nero InfoTool "{11A84FCA-C3C7-4AFD-A797-111DB8569DBC}"=Nero BurningROM "{12345674-DE9A-677A-CCEE-666356D89777}"=Nero BurnRights "{12A76360-388E-4B27-ABEB-D5FC5378DD2A}"=HPPhotoSmartPhotobookWebPack1 "{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}"=Microsoft Works "{18455581-E099-4BA8-BC6B-F34B2F06600C}"=Google Toolbar for Internet Explorer "{1B040683-C390-4711-ABC7-DA8D85E470E7}"=NeroBurningROM "{1BCE2581-B7CA-4BB4-BDFB-D113506AA38B}"=HP Easy Setup - Frontend "{1EBE1FE9-A341-3E9B-84C2-ABBB25F313E7}"=Catalyst Control Center Graphics Full New "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}"=CyberLink DVD Suite Deluxe "{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=Google Toolbar for Internet Explorer "{254C37AA-6B72-4300-84F6-98A82419187E}"=Hewlett-Packard Active Check "{2D3455A8-3B15-41A8-99F8-0D4215746463}"=Nero StartSmart "{3097B151-1F61-4211-A4CC-D70127B226AE}"=SoundTrax "{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}"=Component Framework "{3248F0A8-6813-11D6-A77B-00B0D0160010}"=Java(TM) SE Runtime Environment 6 Update 1 "{34BFB099-07B2-4E95-A673-7362D60866A2}"=PSSWCORE "{34EEB1F5-E939-40A1-A6BA-957282A4B2C8}"=Norton AntiVirus Help "{3F30CC51-0788-487B-AA83-7214A239C0C0}"=Nero Disc Copy Gadget Help "{40BF1E83-20EB-11D8-97C5-0009C5020658}"=Power2Go "{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}"=Cards_Calendar_OrderGift_DoMorePlug out "{4D42353B-533F-4306-AD0B-7FEF292ADE04}"=Nero CoverDesigner Help "{4E8C27C2-D727-4C00-A90E-C3F6376EEE70}"=Nero ControlCenter "{5115C036-C0D5-4E1B-81C9-542CA967478A}"=muvee autoProducer 6.1 "{51A11FAF-9B10-4FF2-9EF3-32705973412A}"=Symantec Real Time Storage Protection Component "{548F99E0-14CC-4D53-A7D6-4A62A5F2C748}"=Nero PhotoSnap "{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}"=HP Picasso Media Center Add-In "{56BE5CC9-95E6-4128-ABEA-968414CA9C80}"=DolbyFiles "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}"=neroxml "{5A62A775-A29A-4CE1-BBC2-4A9CD0B211EF}"=Nero Live Help "{5AE12194-3EAA-40DF-B2BF-FE1D6B78BBF4}"=Nero Vision "{5C2E8A0F-80E2-4C68-8CC0-D8D16E7196BF}"=Nero RescueAgent Help "{5C42EAB8-54F9-423A-948C-1CBEF25F8DB4}"=Nero PhotoSnap Help "{5C9BB0B3-E830-4814-BBA4-D93535E1C7B9}"=Nero Live "{61EE011A-A8D9-C1BD-962D-6342A371B1DB}"=ccc-utility "{62120008-8E1E-4807-860D-A8B48F8552DB}"=Norton Protection Center "{669D4A35-146B-4314-89F1-1AC3D7B88367}"=Hewlett-Packard Asset Agent for Health Check "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}"=Apple Software Update "{6A179A95-BA3E-8E61-D15F-A1DCC6ADBFD9}"=Catalyst Control Center Graphics Previews Vista "{6F481C0F-B941-5E3F-CABD-0F23E718DF2C}"=Catalyst Control Center Core Implementation "{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable "{75321954-2589-11DC-DDCC-E98356D81493}"=Nero DriveSpeed "{753973C4-B961-43BF-B2D4-3C8C92F7216E}"=Nero DriveSpeed "{77772678-817F-4401-9301-ED1D01A8DA56}"=SPBBC 32bit "{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}"=Norton AntiVirus "{78523651-D8B1-11DC-CCEE-741589645873}"=Nero DiscSpeed "{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}"=Text-To-Speech-Runtime "{80B55F0E-5933-B1E8-4F05-4C386A2E61BD}"=Catalyst Control Center InstallProxy "{82C0D164-1456-0361-4F39-58435427AFCB}"=Catalyst Control Center Graphics Full Existing "{8BCD9811-1084-4941-0222-F993DB70F182}"=ATI Catalyst Install Manager "{8C654BD0-1949-43DE-84F2-EC2A1ABB0CB4}"=Nero ShowTime "{8DC42D05-680B-41B0-8878-6C14D24602DB}"=QuickTime "{90120000-0020-0409-0000-0000000FF1CE}"=Compatibility Pack for the 2007 Office system "{943CC0C0-2253-4FE0-9493-DD386F7857FD}"=Nero Express "{948FFAAE-C57F-447B-9B07-3721E950BFDC}"=Nero ShowTime "{95120000-00AF-0409-0000-0000000FF1CE}"=Microsoft Office PowerPoint Viewer 2007 (English) "{961D53EA-40DC-4156-AD74-25684CE05F81}"=Nero Installer "{9A875B56-A35C-46BA-A3AA-DF8D03EE9F2F}"=Nero ControlCenter "{9DBA770F-BF73-4D39-B1DF-6035D95268FC}"=HP Customer Feedback "{9F3523F8-DAD7-AE52-6DA7-45CDDDF33726}"=Advertising Center "{A49F249F-0C91-497F-86DF-B2585E8E76B7}"=Microsoft Visual C++ 2005 Redistributable "{A6359CCF-215D-43D9-8366-479D231F2A72}"=Belkin Wireless USB Utility "{A72E0107-CFC5-16FB-BEA6-A74B94425ADD}"=CCC Help English "{A73BEC3C-40A0-480E-87EF-EFCD33629088}"=NeroExpress "{A8399F58-234A-48C6-BA55-30C15738BF3C}"=Nero CoverDesigner "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}"=ImagXpress "{AAA12554-2589-11DC-92EF-E98356D81493}"=Nero InfoTool "{AABBCC54-D8B1-11DC-92EF-E98356D81493}"=Nero DiscSpeed "{AC76BA86-7AD7-1033-7B44-A81300000003}"=Adobe Reader 8.1.3 "{B24E05CC-46FF-4787-BBB8-5CD516AFB118}"=ccCommon "{B2C12C8D-65DC-40BD-B309-5ADB0C6C8D8F}"=Nero WaveEditor "{B96C2601-52F5-4D5D-816A-63469EA311EF}"="Nero SoundTrax Help "{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}"=HP Photosmart Essential 2.5 "{BCD82AB5-670D-4242-90FA-1F97103C16CD}"=Movie Templates - Starter Kit "{BF313243-28F5-2434-0B5B-FAA0B8B30B1C}"=Catalyst Control Center Graphics Light "{BF34CA8D-3327-4F02-B2D6-62AEBC0E368E}"=SymNet "{C59C179C-668D-49A9-B6EA-0121CCFC1243}"=LabelPrint "{C8D47273-7A1A-4614-A3D8-263632D8A5ED}"=HP Customer Experience Enhancements "{C99C89A3-119A-45E6-B26E-DD5643CAA0C5}"=Menu Templates - Starter Kit "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}"=PowerDirector "{CD1826A5-CFCC-4C6E-9F9D-E181876162EA}"=Nero Rescue Agent "{D3B1C799-CB73-42DE-BA0F-2344793A095C}"=Catalyst Control Center - Branding "{D466F3D9-510C-4729-B7D4-2E70490E4CDF}"=BBC iPlayer Download Manager "{D6F8B656-4127-D525-8893-8653D72DD136}"=Catalyst Control Center Graphics Previews Common "{d7904c7f-427f-4f30-bfaf-7e71c008d963}"=Nero 9 "{D7C206B6-1A63-4389-A8B1-8F607D0BFF1F}"=Nero StartSmart Help "{DB4DF8B5-E448-45E5-1C6C-0C276F828E10}"=Skins "{DE6A3D43-B716-9973-9E2E-4620237464C4}"=Catalyst Control Center HydraVision Full "{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}"=VideoToolkit01 "{E48469CC-635E-4FD5-A122-1497C286D217}"=Call of Duty(R) 4 - Modern Warfare(TM) "{E4A8DD87-A746-4443-BF25-CAF99CED6767}"=Nero Disc Copy Gadget "{E7300AF3-DD5B-4E86-A291-7631BE0C62C7}"=Giganews Accelerator "{E7A02A01-C75A-4490-A168-5CA709A3D862}"=MainConcept for Software Encoder "{E80F62FF-5D3C-4A19-8409-9721F2928206}"=LiveUpdate (Symantec Corporation) "{E86156E5-9859-440D-8876-26CED1349802}"=Nero WaveEditor Help "{EA9FFE54-D8B1-11DC-92EF-E98356D81493}"=Nero BurnRights "{ED50ECE9-EC54-4C05-B5ED-EE4741A9F2EC}"=Battlefield 2142 "{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}"=AppCore "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}"=Realtek High Definition Audio Driver "{F53F6769-AC46-49E3-ABE3-2C8AFD39D0DD}"=Nero Vision "{FE57DE70-95DE-4B64-9266-84DA811053DB}"=HP Update "{fef8097e-662d-49b3-aa77-2919db3746d7}"=HP Total Care Advisor "2B0D8F3C-18AD-4D8E-879A-74A867C5C3CB_is1"=Wireless Manager "Adobe Flash Player ActiveX"=Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin "ArmA"=ArmA Uninstall "AVS DVD Player_is1"=AVS DVD Player version 2.4 "AVS DVDMenu Editor_is1"=AVS DVDMenu Editor 1.2.1.19 "AVS Video Tools 5_is1"=AVS Video Tools 5.6 "AVS4YOU Software Navigator_is1"=AVS4YOU Software Navigator 1.2 "BBC iPlayer Download Manager"=BBC iPlayer Download Manager "Firebird SQL Server US"=Firebird SQL Server - MAGIX Edition "HP Photosmart Essential"=HP Photosmart Essential 2.5 "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}"=PowerDirector "InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}"=Call of Duty(R) 4 - Modern Warfare(TM) "InstallShield_{E7A02A01-C75A-4490-A168-5CA709A3D862}"=MainConcept for Software Encoder "IsoBuster_is1"=IsoBuster 2.4 "MAGIX Music Maker 14 Producer Edition Download version US"=MAGIX Music Maker 14 Producer Edition Download version 13.0.2.1 (US) "MAGIX Screenshare US"=MAGIX Screenshare 4.3.6.1987 (US) "Mozilla Firefox (3.0.5)"=Mozilla Firefox (3.0.5) "NewsLeecher_is1"=NewsLeecher v3.95 Beta 3 "NVIDIA Drivers"=NVIDIA Drivers "OfficeTrial"=Microsoft Office Home and Student 60 day trial "OpenAL"=OpenAL "OsdMaestro"=HP On-Screen Cap/Num/Scroll Lock Indicator "PC-Doctor 5 for Windows"=Hardware Diagnostic Tools "PsuedoLiveUpdate"=LiveUpdate (Symantec Corporation) "PunkBusterSvc"=PunkBuster Services "SymSetup.{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}"=Norton AntiVirus (Symantec Corporation) "VLC media player"=VLC media player 0.9.8a "WildTangent hp Master Uninstall"=My HP Games "WinRAR archiver"=WinRAR archiver ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Uninstall] "BitTorrent"=BitTorrent "BitTorrent DNA"=DNA ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall] "BitTorrent"=BitTorrent "BitTorrent DNA"=DNA ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 28/01/2009 07:37:18 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:19 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:19 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:19 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:19 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:19 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:19 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:20 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:20 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = Error - 28/01/2009 07:37:20 | Computer Name = Paulhomecomp | Source = Microsoft-Windows-CAPI2 | ID = 131077 Description = [ System Events ] Error - 29/01/2009 05:59:02 | Computer Name = Paulhomecomp | Source = Service Control Manager | ID = 7000 Description = Error - 29/01/2009 05:59:02 | Computer Name = Paulhomecomp | Source = Service Control Manager | ID = 7000 Description = Error - 29/01/2009 05:59:02 | Computer Name = Paulhomecomp | Source = Service Control Manager | ID = 7026 Description = Error - 29/01/2009 06:00:10 | Computer Name = Paulhomecomp | Source = Dhcp | ID = 1002 Description = The IP address lease 192.168.0.3 for the Network Card with network address 001644B4A9AA has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message). Error - 29/01/2009 07:10:46 | Computer Name = Paulhomecomp | Source = Dhcp | ID = 1002 Description = The IP address lease 192.168.0.3 for the Network Card with network address 001644B4A9AA has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message). Error - 29/01/2009 11:25:11 | Computer Name = Paulhomecomp | Source = DCOM | ID = 10010 Description = Error - 30/01/2009 04:36:34 | Computer Name = Paulhomecomp | Source = HTTP | ID = 15016 Description = Error - 30/01/2009 04:36:48 | Computer Name = Paulhomecomp | Source = Service Control Manager | ID = 7000 Description = Error - 30/01/2009 04:36:48 | Computer Name = Paulhomecomp | Source = Service Control Manager | ID = 7000 Description = Error - 30/01/2009 04:36:50 | Computer Name = Paulhomecomp | Source = Service Control Manager | ID = 7026 Description = < End of report >
|
|
#5
February 5th, 2009, 10:33 AM
|
||||
|
||||
|
Hi paul0179. Can you please post OTViewIt.Txt too (you will have to divide it into sections and make two or three posts). It's late where I am and I am going offline now but I will check it in the morning.
|
|
#6
February 5th, 2009, 10:43 AM
|
|||
|
|||
|
Hi AnnMarie here is the first part,
OTViewIt logfile created on: 05/02/2009 07:04:26 - Run 2 OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Users\Paul\Desktop Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free 4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free Paging file location(s): ?:\pagefile.sys; %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 455.33 Gb Total Space | 284.70 Gb Free Space | 62.53% Space Free | Partition Type: NTFS Drive D: | 10.43 Gb Total Space | 1.43 Gb Free Space | 13.70% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: PAULHOMECOMP Current User Name: Paul Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Whitelist: On File Age = 30 Days ========== Processes ========== [2008/01/19 07:33:37 | 00,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe [2008/01/19 07:33:14 | 00,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe [2008/10/29 02:18:23 | 00,712,704 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\Ati2evxx.exe [2008/01/19 07:33:22 | 02,623,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe [2008/10/29 02:18:23 | 00,712,704 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\Ati2evxx.exe [2008/10/17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE [2008/01/19 07:33:32 | 00,169,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe [2008/01/19 07:33:08 | 00,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe [2008/01/19 07:33:32 | 00,169,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe [2008/05/26 16:14:56 | 00,143,360 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Virgin Broadband Wireless\AffinegyService.exe [2008/02/27 17:56:54 | 03,072,184 | ---- | M] (Kontiki Inc.) -- C:\Program Files\Kontiki\KService.exe [2008/06/09 10:21:58 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008/08/29 15:20:56 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008/07/03 11:27:12 | 06,266,880 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe [2007/04/18 15:01:34 | 00,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe [2007/02/15 11:59:00 | 00,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2008/01/19 07:33:27 | 00,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe [2008/10/28 15:54:30 | 00,066,872 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe [2008/05/26 16:20:50 | 00,585,728 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Virgin Broadband Wireless\Wireless Manager.exe [2007/05/08 16:24:20 | 00,054,840 | ---- | M] (Hewlett-Packard) -- C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [2008/01/19 07:33:28 | 00,302,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe [2008/10/17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE [2008/01/19 07:33:09 | 00,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehtray.exe [2008/10/27 21:56:05 | 00,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe [2008/01/19 07:33:40 | 00,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe [2007/04/07 10:56:47 | 00,132,760 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\jusched.exe [2008/01/19 07:33:09 | 00,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehmsas.exe [2008/01/19 07:33:15 | 00,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe [2006/11/02 12:35:29 | 00,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehsched.exe [2008/01/19 07:33:33 | 00,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\unsecapp.exe [2008/01/19 07:33:39 | 00,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\WmiPrvSE.exe [2008/01/19 07:33:09 | 00,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehrecvr.exe [2008/01/05 11:21:53 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\Presen tationFontCache.exe [2008/01/19 07:33:12 | 00,299,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\ieuser.exe [2008/01/19 07:33:12 | 00,625,664 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe [2008/11/29 19:13:38 | 00,239,216 | ---- | M] () -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe [2007/08/23 20:35:30 | 00,243,064 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe [2007/09/20 01:30:52 | 00,065,536 | ---- | M] (Hewlett-Packard) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe [2008/01/19 07:33:40 | 00,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe [2008/12/08 15:28:46 | 01,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2009/02/05 07:00:59 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTViewIt.exe ========== (O23) Win32 Services ========== [2008/05/26 16:14:56 | 00,143,360 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Virgin Broadband Wireless\AffinegyService.exe -- (AffinegyService [Auto | Running]) [2008/10/29 02:18:23 | 00,712,704 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\Ati2evxx.exe -- (Ati External Event Utility [Auto | Running]) [2007/08/23 20:35:30 | 00,243,064 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler [Auto | Running]) File not found -- -- (Belkin High-Speed Mode Wireless G USB Network Adapter Service [Auto | Stopped]) [2008/10/17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE -- (ccEvtMgr [Auto | Running]) [2008/10/17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE -- (ccSetMgr [Auto | Running]) File not found -- -- (CertPropSvc [Unknown | Stopped]) [2008/01/05 11:26:41 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) [2008/10/17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE -- (CLTNetCnService [Auto | Running]) File not found -- -- (DcomLaunch [Unknown | Running]) [2008/01/19 07:33:06 | 02,091,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfsr.exe -- (DFSR [On_Demand | Stopped]) [2008/01/19 07:34:06 | 00,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dps.dll -- (DPS [Unknown | Running]) [2008/01/19 07:33:09 | 00,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr [On_Demand | Running]) [2006/11/02 12:35:29 | 00,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehsched.exe -- (ehSched [On_Demand | Running]) [2005/11/17 15:18:52 | 01,527,900 | ---- | M] (MAGIX®) -- C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance [On_Demand | Stopped]) [2008/01/05 11:21:53 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\Presen tationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Running]) [2007/07/23 23:33:06 | 00,181,800 | ---- | M] (WildTangent, Inc.) -- C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe -- (GameConsoleService [On_Demand | Stopped]) [2008/01/19 07:34:25 | 00,574,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpsvc.dll -- (gpsvc [Unknown | Running]) [2008/11/29 20:41:03 | 00,137,200 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped]) [2007/09/20 01:30:52 | 00,065,536 | ---- | M] (Hewlett-Packard) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe -- (HP Health Check Service [Auto | Running]) [2008/02/27 17:56:54 | 03,072,184 | ---- | M] (Kontiki Inc.) -- C:\Program Files\Kontiki\KService.exe -- (KService [Auto | Running]) [2008/06/09 10:21:58 | 00,073,728 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService [Auto | Running]) [2007/08/23 20:35:22 | 03,192,184 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate [On_Demand | Stopped]) [2008/10/17 15:52:10 | 00,149,352 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE -- (LiveUpdate Notice [Auto | Running]) [2006/11/02 13:04:14 | 00,000,000 | ---D | M] -- C:\Windows\System32\Msdtc -- (MSDTC [Unknown | Stopped]) [2008/08/29 15:20:56 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0 [Auto | Running]) [2008/01/05 11:21:39 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped]) [2008/10/28 15:54:30 | 00,066,872 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe -- (PnkBstrA [Auto | Running]) [2008/01/19 07:36:19 | 00,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll -- (SCardSvr [Unknown | Stopped]) File not found -- -- (Schedule [Unknown | Running]) File not found -- -- (SCPolicySvc [Unknown | Stopped]) [2007/03/26 12:06:24 | 00,292,864 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer [On_Demand | Stopped]) [2008/01/19 07:33:22 | 02,623,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe -- (slsvc [Auto | Running]) [2006/11/02 09:45:46 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\snmptrap.exe -- (SNMPTRAP [On_Demand | Stopped]) [2008/12/08 15:28:46 | 01,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC [On_Demand | Running]) [2008/01/19 07:33:33 | 00,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UI0Detect.exe -- (UI0Detect [On_Demand | Stopped]) [2008/01/19 07:33:33 | 00,382,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vds.exe -- (vds [On_Demand | Stopped]) File not found -- -- (WdiServiceHost [Unknown | Stopped]) File not found -- -- (WdiSystemHost [Unknown | Running]) [2008/01/19 07:33:39 | 00,896,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped]) [2008/01/19 07:33:28 | 00,302,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe -- (WSearch [Auto | Running])
|
|
#7
February 5th, 2009, 10:47 AM
|
|||
|
|||
|
Second part
========== Driver Services ========== [2007/01/26 02:42:50 | 02,831,232 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\System32\drivers\3xHybrid.sys -- (3xHybrid [On_Demand | Running]) [2006/11/02 09:51:38 | 00,420,968 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adp94xx.sys -- (adp94xx [Disabled | Stopped]) [2006/11/02 09:51:32 | 00,297,576 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpahci.sys -- (adpahci [Disabled | Stopped]) [2006/11/02 09:50:35 | 00,098,408 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu160m.sys -- (adpu160m [Disabled | Stopped]) [2006/11/02 09:51:00 | 00,147,048 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu320.sys -- (adpu320 [Disabled | Stopped]) [2008/10/29 04:09:10 | 00,017,801 | ---- | M] (Meetinghouse Data Communications) -- C:\Windows\System32\drivers\AegisP.sys -- (AegisP [Auto | Running]) [2008/05/26 16:09:42 | 00,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\Windows\System32\drivers\AFGSp50.sys -- (AFGSp50 [On_Demand | Running]) [2006/11/02 09:50:11 | 00,071,272 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\djsvs.sys -- (aic78xx [Disabled | Stopped]) [2008/02/28 04:25:13 | 00,017,464 | ---- | M] (Acer Laboratories Inc.) -- C:\Windows\System32\drivers\aliide.sys -- (aliide [Disabled | Stopped]) [2006/11/02 09:49:59 | 00,054,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\AMDAGP.SYS -- (amdagp [On_Demand | Stopped]) [2008/02/28 04:25:13 | 00,017,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdide.sys -- (amdide [Disabled | Stopped]) [2006/11/02 08:30:18 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdk7.sys -- (AmdK7 [Disabled | Stopped]) [2008/01/19 05:27:20 | 00,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdk8.sys -- (AmdK8 [On_Demand | Running]) [2006/11/02 09:50:09 | 00,067,688 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arc.sys -- (arc [Disabled | Stopped]) [2006/11/02 09:50:10 | 00,067,688 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arcsas.sys -- (arcsas [Disabled | Stopped]) [2008/10/29 03:11:48 | 04,017,152 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag [On_Demand | Running]) [2008/01/19 05:28:26 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bowser.sys -- (bowser [On_Demand | Running]) [2006/11/02 08:24:45 | 00,013,568 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltLo.sys -- (BrFiltLo [On_Demand | Stopped]) [2006/11/02 08:24:46 | 00,005,248 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltUp.sys -- (BrFiltUp [On_Demand | Stopped]) [2006/11/02 08:25:24 | 00,071,808 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerId.sys -- (Brserid [Disabled | Stopped]) [2006/11/02 08:24:44 | 00,062,336 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerWdm.sys -- (BrSerWdm [Disabled | Stopped]) [2006/11/02 08:24:44 | 00,012,160 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbMdm.sys -- (BrUsbMdm [Disabled | Stopped]) [2006/11/02 08:24:47 | 00,011,904 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbSer.sys -- (BrUsbSer [On_Demand | Stopped]) [2006/11/02 08:55:23 | 00,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bthmodem.sys -- (BTHMODEM [Disabled | Stopped]) [2008/01/19 05:53:24 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\circlass.sys -- (circlass [On_Demand | Running]) [2008/01/19 07:42:58 | 00,247,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys -- (CLFS [Unknown | Running]) [2008/02/28 04:25:13 | 00,019,000 | ---- | M] (CMD Technology, Inc.) -- C:\Windows\System32\drivers\cmdide.sys -- (cmdide [Disabled | Stopped]) [2008/07/30 17:42:12 | 00,023,888 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\COH_Mon.sys -- (COH_Mon [On_Demand | Stopped]) [2006/11/02 09:49:43 | 00,022,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\crcdisk.sys -- (crcdisk [Boot | Running]) [2006/11/02 08:30:18 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\crusoe.sys -- (Crusoe [Disabled | Stopped]) [2008/01/19 05:28:20 | 00,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dfsc.sys -- (DfsC [System | Running]) [2008/01/19 05:36:41 | 00,625,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys -- (DXGKrnl [On_Demand | Running]) [2006/11/02 07:30:54 | 00,117,760 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60 [On_Demand | Stopped]) [2008/01/19 07:42:11 | 00,143,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ecache.sys -- (Ecache [Boot | Running]) [2098/01/01 00:00:00 | 00,371,248 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl [System | Running]) [2006/11/02 09:51:34 | 00,316,520 | ---- | M] (Emulex) -- C:\Windows\System32\drivers\elxstor.sys -- (elxstor [Disabled | Stopped]) [2098/01/01 00:00:00 | 00,099,376 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv [On_Demand | Running]) [2008/01/19 05:28:01 | 00,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\exfat.sys -- (exfat [On_Demand | Stopped]) [2008/01/19 07:42:31 | 00,058,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fileinfo.sys -- (FileInfo [Boot | Running]) [2008/01/19 05:30:23 | 00,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\filetrace.sys -- (Filetrace [On_Demand | Stopped]) [2006/11/02 09:50:04 | 00,058,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\GAGP30KX.SYS -- (gagp30kx [On_Demand | Stopped]) [2006/11/02 07:36:49 | 00,235,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\HdAudio.sys -- (HdAudAddService [On_Demand | Stopped]) [2008/01/19 04:30:49 | 00,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys -- (HDAudBus [On_Demand | Running]) [2006/11/02 08:55:22 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbth.sys -- (HidBth [Disabled | Stopped]) [2008/01/19 05:53:18 | 00,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidir.sys -- (HidIr [On_Demand | Running]) [2006/11/02 09:50:10 | 00,037,480 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\System32\drivers\HpCISSs.sys -- (HpCISSs [Disabled | Stopped]) [2006/11/02 09:51:25 | 00,232,040 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorV.sys -- (iaStorV [Disabled | Stopped]) [2008/12/04 23:57:50 | 00,270,384 | ---- | M] (Symantec Corporation) -- C:\ProgramData\Symantec\Definitions\SymcData\ipsde fs\20090129.001\IDSvix86.sys -- (IDSvix86 [System | Running]) [2006/11/02 09:50:17 | 00,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) -- C:\Windows\System32\drivers\iirsp.sys -- (iirsp [Disabled | Stopped]) [2008/07/03 17:03:48 | 02,152,088 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService [On_Demand | Running]) [2006/11/02 08:42:03 | 00,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\IPMIDrv.sys -- (IPMIDRV [Disabled | Stopped]) [2008/01/19 07:42:35 | 00,181,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msiscsi.sys -- (iScsiPrt [On_Demand | Running]) [2006/11/02 09:50:07 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) -- C:\Windows\System32\drivers\iteatapi.sys -- (iteatapi [Disabled | Stopped]) [2006/11/02 09:50:09 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) -- C:\Windows\System32\drivers\iteraid.sys -- (iteraid [Disabled | Stopped]) [2008/01/19 05:49:17 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdhid.sys -- (kbdhid [System | Running]) [2008/01/19 05:55:03 | 00,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\lltdio.sys -- (lltdio [Auto | Running]) [2006/11/02 09:50:04 | 00,065,640 | ---- | M] (LSI Logic) -- C:\Windows\System32\drivers\lsi_fc.sys -- (LSI_FC [Disabled | Stopped]) [2006/11/02 09:50:05 | 00,065,640 | ---- | M] (LSI Logic) -- C:\Windows\System32\drivers\lsi_sas.sys -- (LSI_SAS [Disabled | Stopped]) [2006/11/02 09:50:10 | 00,065,640 | ---- | M] (LSI Logic) -- C:\Windows\System32\drivers\lsi_scsi.sys -- (LSI_SCSI [Disabled | Stopped]) [2008/01/19 05:30:36 | 00,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\luafv.sys -- (luafv [Auto | Running]) [2006/11/02 09:49:53 | 00,028,776 | ---- | M] (LSI Logic Corporation) -- C:\Windows\System32\drivers\megasas.sys -- (megasas [Disabled | Stopped]) [2008/01/19 05:52:19 | 00,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\monitor.sys -- (monitor [On_Demand | Running]) [2006/11/02 09:50:16 | 00,078,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpio.sys -- (mpio [Disabled | Stopped]) [2008/01/19 05:54:46 | 00,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys -- (mpsdrv [On_Demand | Running]) [2006/11/02 09:49:59 | 00,033,384 | ---- | M] (LSI Logic Corporation) -- C:\Windows\System32\drivers\Mraid35x.sys -- (Mraid35x [Disabled | Stopped]) [2008/01/19 05:28:42 | 00,211,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys -- (mrxsmb10 [On_Demand | Running]) [2008/01/19 05:28:37 | 00,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys -- (mrxsmb20 [On_Demand | Running]) [2008/02/28 04:25:13 | 00,028,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msahci.sys -- (msahci [Disabled | Stopped]) [2006/11/02 09:50:17 | 00,080,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msdsm.sys -- (msdsm [Disabled | Stopped]) [2008/01/19 07:41:14 | 00,016,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msisadrv.sys -- (msisadrv [Boot | Running]) [2008/01/19 07:42:29 | 00,163,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msrpc.sys -- (MsRPC [On_Demand | Stopped]) [2008/01/19 05:53:59 | 00,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys -- (NativeWifiP [On_Demand | Running]) [2098/01/01 00:00:00 | 00,089,104 | ---- | M] (Symantec Corporation) -- C:\ProgramData\Symantec\Definitions\VirusDefs\2009 0204.021\NAVENG.SYS -- (NAVENG [On_Demand | Running]) [2098/01/01 00:00:00 | 00,876,112 | ---- | M] (Symantec Corporation) -- C:\ProgramData\Symantec\Definitions\VirusDefs\2009 0204.021\NAVEX15.SYS -- (NAVEX15 [On_Demand | Running]) [2008/11/11 09:20:41 | 00,029,192 | ---- | M] () -- C:\Windows\System32\drivers\ndisprot.sys -- (Ndisprot [On_Demand | Stopped]) [2007/09/24 11:09:10 | 00,464,384 | ---- | M] (Ralink Technology, Corp.) -- C:\Windows\System32\drivers\netr73.sys -- (netr73 [On_Demand | Running]) [2006/11/02 09:50:19 | 00,045,160 | ---- | M] (IBM Corporation) -- C:\Windows\System32\drivers\nfrd960.sys -- (nfrd960 [Disabled | Stopped]) [2008/01/19 05:55:50 | 00,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nsiproxy.sys -- (nsiproxy [System | Running]) [2006/11/02 07:36:50 | 00,020,608 | ---- | M] (N-trig Innovative Technologies) -- C:\Windows\System32\drivers\ntrigdigi.sys -- (ntrigdigi [Disabled | Stopped]) [2007/11/17 19:39:50 | 01,040,544 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD [On_Demand | Running]) [2006/11/02 09:50:24 | 00,088,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvraid.sys -- (nvraid [Boot | Running]) [2007/12/07 15:28:10 | 00,131,616 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvrd32.sys -- (nvrd32 [Disabled | Stopped]) [2007/10/12 15:53:10 | 00,013,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu [Disabled | Stopped]) [2006/11/02 09:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor.sys -- (nvstor [Disabled | Stopped]) [2007/12/07 15:28:08 | 00,140,320 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32 [Boot | Running]) [2006/11/02 09:50:40 | 00,106,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\NV_AGP.SYS -- (nv_agp [On_Demand | Stopped]) [2006/11/02 09:04:35 | 00,878,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\PEAuth.sys -- (PEAUTH [Auto | Running]) [2008/01/19 05:55:53 | 00,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys -- (PSched [System | Running]) [2006/11/02 09:51:45 | 00,900,712 | ---- | M] (QLogic Corporation) -- C:\Windows\System32\drivers\ql2300.sys -- (ql2300 [Disabled | Stopped]) [2006/11/02 09:50:35 | 00,106,088 | ---- | M] (QLogic Corporation) -- C:\Windows\System32\drivers\ql40xx.sys -- (ql40xx [Disabled | Stopped]) [2008/01/19 05:56:07 | 00,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\qwavedrv.sys -- (QWAVEdrv [On_Demand | Stopped]) [2008/01/19 05:56:43 | 00,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rassstp.sys -- (RasSstp [On_Demand | Running]) [2008/01/19 06:01:09 | 00,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPENCDD.sys -- (RDPENCDD [System | Running]) [2008/01/19 05:55:03 | 00,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rspndr.sys -- (rspndr [Auto | Running]) [2006/11/02 09:50:16 | 00,076,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sbp2port.sys -- (sbp2port [Disabled | Stopped]) [2006/11/02 06:37:21 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv [Auto | Running]) [2008/01/19 05:49:16 | 00,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys -- (sermouse [Disabled | Stopped]) [2008/02/28 04:12:18 | 00,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffdisk.sys -- (sffdisk [Disabled | Stopped]) [2008/02/28 04:12:18 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_mmc.sys -- (sffp_mmc [On_Demand | Stopped]) [2008/02/28 04:12:18 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_sd.sys -- (sffp_sd [On_Demand | Stopped]) [2006/11/02 09:49:51 | 00,053,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\SISAGP.SYS -- (sisagp [On_Demand | Stopped]) [2006/11/02 09:50:10 | 00,038,504 | ---- | M] (Silicon Integrated Systems Corp.) -- C:\Windows\System32\drivers\sisraid2.sys -- (SiSRaid2 [Disabled | Stopped]) [2006/11/02 09:50:16 | 00,071,784 | ---- | M] (Silicon Integrated Systems) -- C:\Windows\System32\drivers\sisraid4.sys -- (SiSRaid4 [Disabled | Stopped]) [2008/01/19 05:55:27 | 00,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\smb.sys -- (Smb [System | Running]) [2008/09/05 14:31:42 | 00,447,024 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv [System | Running]) [2008/01/19 07:41:30 | 00,021,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\spldr.sys -- (spldr [Boot | Running]) [2007/11/30 23:57:12 | 00,279,088 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP [On_Demand | Running]) [2007/11/30 23:57:12 | 00,317,616 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL [On_Demand | Stopped]) [2007/11/30 23:57:12 | 00,043,696 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX [System | Running]) [2008/01/19 05:29:15 | 00,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys -- (srv2 [On_Demand | Running]) [2008/01/19 05:29:12 | 00,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys -- (srvnet [On_Demand | Running]) [2006/11/02 09:50:05 | 00,035,944 | ---- | M] (LSI Logic) -- C:\Windows\System32\drivers\symc8xx.sys -- (Symc8xx [Disabled | Stopped]) [2008/06/13 14:13:38 | 00,013,616 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\symdns.sys -- (SYMDNS [On_Demand | Running]) [2009/01/07 13:36:15 | 00,124,464 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent [On_Demand | Running]) [2008/06/13 14:13:38 | 00,096,432 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\symfw.sys -- (SYMFW [On_Demand | Running]) [2008/06/13 14:14:02 | 00,024,112 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SymIMV.sys -- (SymIM [System | Running]) [2008/06/13 14:13:40 | 00,041,008 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\symndisv.sys -- (SYMNDISV [On_Demand | Running]) [2008/06/13 14:13:38 | 00,022,320 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\symredrv.sys -- (SYMREDRV [On_Demand | Running]) [2008/06/13 14:13:40 | 00,184,240 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI [System | Running]) [2006/11/02 09:49:56 | 00,031,848 | ---- | M] (LSI Logic) -- C:\Windows\System32\drivers\sym_hi.sys -- (Sym_hi [Disabled | Stopped]) [2006/11/02 09:50:03 | 00,034,920 | ---- | M] (LSI Logic) -- C:\Windows\System32\drivers\sym_u3.sys -- (Sym_u3 [Disabled | Stopped]) [2008/01/19 05:56:07 | 00,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpipreg.sys -- (tcpipreg [Auto | Running]) [2008/01/19 05:55:58 | 00,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdx.sys -- (tdx [System | Running]) [2008/01/19 06:01:15 | 00,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tssecsrv.sys -- (tssecsrv [On_Demand | Stopped]) [2008/01/19 05:55:41 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\TUNMP.SYS -- (tunmp [On_Demand | Running]) [2008/01/19 05:55:50 | 00,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys -- (tunnel [On_Demand | Running]) [2006/11/02 09:49:59 | 00,056,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UAGP35.SYS -- (uagp35 [On_Demand | Stopped]) [2006/11/02 09:50:04 | 00,058,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ULIAGPKX.SYS -- (uliagpkx [On_Demand | Stopped]) [2006/11/02 09:51:25 | 00,235,112 | ---- | M] (ULi Electronics Inc.) -- C:\Windows\System32\drivers\uliahci.sys -- (uliahci [Disabled | Stopped]) [2006/11/02 09:50:35 | 00,098,408 | ---- | M] (Promise Technology, Inc.) -- C:\Windows\System32\drivers\ulsata.sys -- (UlSata [Disabled | Stopped]) [2006/11/02 09:50:45 | 00,115,816 | ---- | M] (Promise Technology, Inc.) -- C:\Windows\System32\drivers\ulsata2.sys -- (ulsata2 [Disabled | Stopped])
|
|
#8
February 5th, 2009, 10:49 AM
|
|||
|
|||
|
and third
[2008/01/19 05:53:40 | 00,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\umbus.sys -- (umbus [On_Demand | Running]) [2008/01/19 05:53:25 | 00,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbcir.sys -- (usbcir [On_Demand | Running]) [2008/01/19 05:56:08 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys -- (USB_RNDIS [On_Demand | Stopped]) [2006/11/02 08:53:56 | 00,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vgapnp.sys -- (vga [On_Demand | Stopped]) [2006/11/02 08:30:19 | 00,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\viac7.sys -- (ViaC7 [Disabled | Stopped]) [2008/02/28 04:25:13 | 00,020,024 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\System32\drivers\viaide.sys -- (viaide [Disabled | Stopped]) [2008/01/19 07:42:18 | 00,052,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgr.sys -- (volmgr [Boot | Running]) [2008/01/19 07:43:03 | 00,294,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgrx.sys -- (volmgrx [Boot | Running]) [2006/11/02 09:50:41 | 00,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) -- C:\Windows\System32\drivers\vsmraid.sys -- (vsmraid [Disabled | Stopped]) [2006/11/02 08:52:52 | 00,020,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wacompen.sys -- (WacomPen [Disabled | Stopped]) [2006/11/02 09:49:38 | 00,019,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wd.sys -- (Wd [Disabled | Stopped]) [2008/01/19 07:43:27 | 00,503,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys -- (Wdf01000 [Boot | Running]) [2006/11/02 08:35:03 | 00,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmiacpi.sys -- (WmiAcpi [Disabled | Stopped]) [2008/01/19 05:56:49 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ws2ifsl.sys -- (ws2ifsl [Disabled | Stopped]) ========== (R ) Internet Explorer ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main] "Default_Page_URL"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=81&bd=Pavilion &pf=desktop "Default_Search_URL"=http://go.microsoft.com/fwlink/?LinkId=54896 "Default_Secondary_Page_URL"= "Extensions Off Page"=about:NoAdd-ons "Local Page"=%SystemRoot%\system32\blank.htm "Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896 "Security Risk Page"=about:SecurityRisk "Start Page"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=81&bd=Pavilion &pf=desktop [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main] "Default_Page_URL"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=81&bd=Pavilion &pf=desktop "Local Page"=C:\Windows\system32\blank.htm "Page_Transitions"= "Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896 "Start Page"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=81&bd=Pavilion &pf=desktop "StartPageCache"= [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\System32\ieframe.dll (Microsoft Corporation) [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings] "ProxyEnable" = 0 [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet Settings] "ProxyEnable" = 0 [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main] [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings] "ProxyEnable" = 0 [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main] [HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\URLSearchHooks] "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\System32\ieframe.dll (Microsoft Corporation) [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net Settings] "ProxyEnable" = 0 [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main] [HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\URLSearchHooks] "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\System32\ieframe.dll (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\SOFTWARE\Microsoft\Internet Explorer\Main] "Default_Page_URL"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=81&bd=Pavilion &pf=desktop "Local Page"=C:\Windows\system32\blank.htm "Page_Transitions"= "Search Page"=http://go.microsoft.com/fwlink/?LinkId=54896 "Start Page"=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_gb&c=81&bd=Pavilion &pf=desktop "StartPageCache"= [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\Software\Microsoft\Internet Explorer\URLSearchHooks] "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) -- C:\Windows\System32\ieframe.dll (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings] "ProxyEnable" = 0 ========== (O1) Hosts File ========== HOSTS File = (289944 bytes) - C:\Windows\System32\drivers\etc\Hosts First 25 entries... 127.0.0.1 localhost ::1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 www.1001namen.com 127.0.0.1 1001namen.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.10sek.com 127.0.0.1 10sek.com 127.0.0.1 www.1-2005-search.com 9987 more lines... ========== (O2) BHO's ========== [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (HKLM) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) {6D53EC84-6AAE-4787-AEEE-F4628F01010C} (HKLM) -- C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation) {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (HKLM) -- C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.) {AA58ED58-01DD-4d91-8333-CF10577473F7} (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (HKLM) -- C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\sw g.dll (Google Inc.) {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} (HKLM) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.) ========== (O3) Toolbars ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar] "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] "{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] "{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll () ========== (O4) Run Keys ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run] ""= File not found "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated) "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" (Symantec Corporation) "HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe File not found "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard) "hpsysdrv"=c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company) "OsdMaestro"="C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" (OsdMaestro) "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.) "RtHDVCpl"=RtHDVCpl.exe (Realtek Semiconductor) "SunJavaUpdateReg"="C:\Windows\system32\jureg. exe" (Sun Microsystems, Inc.) "Wireless Manager"="C:\Program Files\Virgin Broadband Wireless\Wireless Manager.exe" startup (Affinegy, Inc.) [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run] "ehTray.exe"=C:\Windows\ehome\ehTray.exe (Microsoft Corporation) "HPAdvisor"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN (Hewlett-Packard) "kdx"=C:\Program Files\Kontiki\KHost.exe -all (Kontiki Inc.) "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe (Google Inc.) [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Microsoft Corporation) "WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation) [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Microsoft Corporation) "WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"=C:\Windows\ehome\ehTray.exe (Microsoft Corporation) "HPAdvisor"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN (Hewlett-Packard) "kdx"=C:\Program Files\Kontiki\KHost.exe -all (Kontiki Inc.) "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe (Google Inc.) ========== (O6 & O7) Current Version Policies ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\System] "ConsentPromptBehaviorAdmin"=2 "ConsentPromptBehaviorUser"=1 "EnableInstallerDetection"=1 "EnableLUA"=1 "EnableSecureUIAPaths"=1 "EnableVirtualization"=1 "PromptOnSecureDesktop"=1 "ValidateAdminCodeSignatures"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "scforceoption"=0 "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "FilterAdministratorToken"=0 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\System\UIPI\Clipboard\Exceptio nFormats] "CF_TEXT"=1 "CF_BITMAP"=2 "CF_OEMTEXT"=7 "CF_DIB"=8 "CF_PALETTE"=9 "CF_UNICODETEXT"=13 "CF_DIBV5"=17 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\policies\Explorer] "NoDriveTypeAutoRun"=36 "NoDriveAutoRun"=FF FF FF FF [binary data] [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\Explorer] "NoDriveTypeAutoRun"=0 [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\System] "DisableTaskMgr"=0 "DisableRegistryTools"=0 [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\Explorer] "NoDriveTypeAutoRun"=0 [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\polic ies\System] "DisableTaskMgr"=0 "DisableRegistryTools"=0 [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer] "NoDriveTypeAutoRun"=36 "NoDriveAutoRun"=FF FF FF FF [binary data] ========== (O9) IE Extensions ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\] {08B0E5C0-4FCB-11CF-AAA5-00401C608501}: Menu: Sun Java Console -- %ProgramFiles%\Java\jre1.6.0_01\bin\ssv.dll [2007/04/07 10:56:44 | 00,501,400 | ---- | M] (Sun Microsystems, Inc.) ========== (O12) Internet Explorer Plugins ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\] PluginsPage: "" = http://activex.microsoft.com/control...ext=%s&mime=%s PluginsPageFriendlyName: "" = Microsoft ActiveX Gallery ========== (O13) Default Prefixes ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\URL\DefaultPrefix] ""=http:// ========== (O15) Trusted Sites ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\ZoneMap\Domains\] 49 domain(s) and sub-domain(s) not assigned to a zone. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Internet Settings\ZoneMap\Domains\] 49 domain(s) and sub-domain(s) not assigned to a zone. [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Cur rentVersion\Internet Settings\ZoneMap\Domains\] 49 domain(s) and sub-domain(s) not assigned to a zone. [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Cur rentVersion\Internet Settings\ZoneMap\Domains\] Range1: ":Range"=127.0.0.1 -- http in Local intranet | [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Inter net Settings\ZoneMap\Domains\] 49 domain(s) and sub-domain(s) not assigned to a zone. [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Inter net Settings\ZoneMap\Domains\] Range1: ":Range"=127.0.0.1 -- http in Local intranet | [HKEY_USERS\S-1-5-21-2773673510-2133146264-729447079-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap\Domains\] 49 domain(s) and sub-domain(s) not assigned to a zone. ========== (O17) DNS Name Servers ========== {334D1067-913A-46B0-B67B-37FCBB2476C0} (Servers: 85.255.112.174;85.255.112.109 | Description: USB Wireless 802.11 b/g Adaptor) {6F9AFB3A-6F3C-46BA-944E-FC085BB8AA44} (Servers: | Description: ) {7F4D6420-A3C8-4AEE-A256-013B68992699} (Servers: 85.255.112.174;85.255.112.109 | Description: NVIDIA nForce Networking Controller) ========== HKLM *SecurityProviders* ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders] "SecurityProviders"=credssp.dll >[2008/01/19 07:33:59 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll ========== LSA *Security Packages* ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa] "Security Packages"=kerberos,msv1_0,schannel,wdigest,tspkg, >[2008/01/19 07:36:42 | 00,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSpkg.dll ========== Safeboot Options ========== "AlternateShell"=cmd.exe ========== CDRom AutoRun Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Cdrom] "AutoRun" = 1 ========== Autorun Files on Drives ========== autoexec.bat [REM Dummy file for NTVDMPATH=%PATH%;C:\PROGRA~1\COMMON~1\MUVEET~1\030 625 | ] [2008/02/28 05:12:12 | 00,000,074 | ---- | M] () -- C:\autoexec.bat -- [ NTFS ] autorun.inf [] [2009/02/04 13:48:41 | 00,000,000 | RHSD | M] -- C:\autorun.inf -- [ NTFS ] autorun.inf [[autorun] | shellexecute="resycled\boot.com d:" | shell\Open\command="resycled\boot.com d:" | shell=Open | ] [2008/11/13 10:33:53 | 00,000,103 | RHS- | M] () -- D:\autorun.inf -- [ NTFS ] ========== Files/Folders - Created Within 30 Days ========== [2009/02/05 07:00:54 | 00,422,912 | ---- | C] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTViewIt.exe [2009/02/04 13:53:57 | 00,000,000 | ---D | C] -- C:\_OTMoveIt [2009/02/04 13:48:41 | 00,000,000 | RHSD | C] -- C:\autorun.inf [2009/01/22 13:06:27 | 00,000,000 | ---D | C] -- C:\Windows\pss [2009/01/20 21:19:40 | 00,006,082 | ---- | C] () -- C:\Users\Paul\Desktop\P.Walecki C.V.rtf [2009/01/20 18:57:17 | 00,006,283 | ---- | C] () -- C:\Users\Paul\Documents\PaulsC.V.rtf [2009/01/19 10:57:57 | 00,000,000 | ---D | C] -- C:\Program Files\BitTorrent [2009/01/16 07:21:07 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_ 00.Wdf [2009/01/12 10:36:04 | 00,001,889 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk [2009/01/12 10:35:54 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe [2009/01/12 10:35:39 | 00,000,000 | -HSD | C] -- C:\Config.Msi [2009/01/11 14:14:00 | 00,001,964 | ---- | C] () -- C:\Users\Public\Desktop\BBC iPlayer Download Manager.lnk [2009/01/11 14:13:57 | 00,000,000 | ---D | C] -- C:\ProgramData\Kontiki [2009/01/11 14:13:57 | 00,000,000 | ---D | C] -- C:\Program Files\Kontiki [2009/01/11 14:13:52 | 00,000,000 | ---D | C] -- C:\logs3 [2009/01/10 21:37:21 | 00,000,000 | ---D | C] -- C:\Users\Paul\Documents\MAGIX downloads [2009/01/10 21:37:20 | 00,000,000 | ---D | C] -- C:\Users\Paul\Documents\MAGIX_MusicMaker14PE_Downl oad_version ========== Files - Modified Within 30 Days ========== [1 C:\Windows\System32\*.tmp files] [2009/02/05 07:00:59 | 00,422,912 | ---- | M] (OldTimer Tools) -- C:\Users\Paul\Desktop\OTViewIt.exe [2009/02/05 06:42:09 | 00,690,960 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2009/02/05 06:42:09 | 00,599,942 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2009/02/05 06:42:09 | 00,105,448 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2009/02/05 06:35:23 | 00,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2009/02/05 06:35:21 | 00,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2009/02/05 06:35:15 | 00,318,248 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2009/02/05 06:35:12 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2009/02/05 06:35:07 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2009/02/05 06:34:59 | 32,196,11648 | -HS- | M] () -- C:\hiberfil.sys [2009/02/04 21:36:59 | 03,042,883 | -H-- | M] () -- C:\Users\Paul\AppData\Local\IconCache.db [2009/02/04 17:10:01 | 00,094,720 | ---- | M] () -- C:\Users\Paul\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009/02/04 13:57:00 | 00,086,712 | ---- | M] () -- C:\Users\Paul\AppData\Local\GDIPFONTCACHEV1.DAT [2009/02/02 20:42:42 | 00,000,478 | ---- | M] () -- C:\Windows\tasks\Norton AntiVirus - Run Full System Scan - Paul.job [2009/02/02 13:47:52 | 00,000,126 | ---- | M] () -- C:\Users\Paul\AppData\Roaming\AVSDVDPlayer.m3u [2009/01/20 21:19:40 | 00,006,082 | ---- | M] () -- C:\Users\Paul\Desktop\P.Walecki C.V.rtf [2009/01/20 18:57:18 | 00,006,283 | ---- | M] () -- C:\Users\Paul\Documents\PaulsC.V.rtf [2009/01/19 10:58:06 | 00,000,830 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2009/01/16 07:21:07 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_ 00.Wdf [2009/01/12 10:36:04 | 00,001,889 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk [2009/01/11 14:14:00 | 00,001,964 | ---- | M] () -- C:\Users\Public\Desktop\BBC iPlayer Download Manager.lnk [2009/01/07 13:36:15 | 00,124,464 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS [2009/01/07 13:36:15 | 00,010,635 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT [2009/01/07 13:36:15 | 00,000,806 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF < End of report >
|
|
#9
February 6th, 2009, 12:37 AM
|
||||
|
||||
|
Hi paul0179. I can see enough to advise you that your OS is infected however as I previously advised, we do not work on malware issues in this forum. It would be a good idea for you to start a new topic in our Cyber Safety Forum.
I would move your topic but if I do that, it might get overlooked as this topic has been replied to. Just state that you have been advised by me that your operating system is infected and ask what logs you should post. Be patient because they are really busy there but there is a sticky at the top of the forum that you can post to if you have not received a reply after 24 hours.
|
|
| Bookmarks |
«
Previous Topic
|
Next Topic
»
|
|
Similar Topics
|
||||
| Topic | Topic Starter | Forum | Replies | Last Post |
| Windows Vista Defender error 0x80244019 | slamxmega | Malware Removal | 9 | March 12th, 2009 01:58 AM |
| Windows Defender Update Error - 0x80244019 | paul0179 | Malware Removal | 7 | February 6th, 2009 04:49 PM |
| Windows Defender Definition Update Error 0x80244019 | starks87 | Malware Removal | 1 | January 30th, 2009 04:26 AM |
| Windows Defender Update Error - 0x80244019 (moved from Vista Forum) | vimal.singh | Malware Removal | 46 | January 30th, 2009 12:55 AM |
| Windows Defender Definition Update Error 0x80244019 | starks87 | Windows Vista | 3 | January 28th, 2009 07:07 PM |
All times are GMT +1. The time now is 12:41 PM.