relevant knowledge is back 3rd time

i looked over my old postings and found that when i changed routers it happened, not positive but think that when i completely removed my router it's back. I cannot get into msn gaming zone and a facebook game asks me to reload every 7 minutes or so.  please help and please tell me exactly what i can do again to never let it in again.

[Moderator]

Please follow the instructions in the following link and post your logs:
http://www.computerhope.com/forum/index.php/topic,46313.0.html

i'll have everthing  dec. 7th tyvm

hello and tyvm   First mistake  Sry did not read proper, was very tired.  Tried to download spybot S&D and second, got SsyProt Antirootkiet v1.0.0 instead.  No option in my add/remove programs to delete it.  Hope it's okay. 
STEP 1:  don't know if i should keep or delete these programs in add/remove:

Amazon MP3 Downloader 1.0.5, DevalVR plugin for Internet Explorer (remove), Driver Wiz, ESET Online Scanner v3, File Type Assistant, FLV Player, Free File Opener v2011.6.0.4, GamesBar 2.0.1.82, High Definition Audio Driver Package - KB88811, IrfanView (remove only) Kalydo Player 3.10.04, Microsoft Compression Client Pack 1.0 for winxp, Microsoft SQL Server 2005 Compact Edition [ENU], Windows Defender, Windows Search 4.0, MSXML 4.0 SP2 (KB954430, MSXML 4.0 SP2 (KB973688), MyDefrag v4.3.1, Nord, Speccy

I will stop here until further instruction tysooom  PS  I have SUPERAntiSpyware Professional LIFETIME Subscription

Do not delete anything until an expert tells you to, do steps 3/4/5/6 and post the logs here, and expert will read them.

I'm trying to reply and told i'm not logged in    I was putting all requested info so maybe it's too much so I'm going to send in sections.

A:  I have an updated antivirus from my internet provider which is COGECO. 

B:  Also have a Firewall from COGECO.  I have windows firewall turned off.  Not sure what a 3rd party firewall is?

STEP 1:  I've already posted the programs in add/remove that i'm not sure of

going to post and see what happens.

STEP 2:  Downloaded and ran CCleaner and backed up registry.

STEP 3:  SUPERantispyware (i own) log

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/08/2011 at 10:24 PM

Application Version : 5.0.1136

Core Rules Database Version : 8032
Trace Rules Database Version: 5844

Scan type       : Complete Scan
Total Scan Time : 00:04:06

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 605
Memory threats detected   : 0
Registry items scanned    : 36204
Registry threats detected : 0
File items scanned        : 14419
File threats detected     : 6

Adware.Tracking Cookie
   C:\Documents and Settings\Darlene\Cookies\TBNR2OWW.txt [ /tacoda.at.atwola.com ]
   C:\Documents and Settings\Darlene\Cookies\TSSLGXAF.txt [ /revsci.net ]
   C:\Documents and Settings\Darlene\Cookies\JTVKDC99.txt [ /at.atwola.com ]
   C:\Documents and Settings\Darlene\Cookies\Z8G1X5Z7.txt [ /tacoda.net ]
   C:\Documents and Settings\Darlene\Cookies\UWV5CJ8C.txt [ /ar.atwola.com ]
   C:\Documents and Settings\Darlene\Cookies\5AE7NZND.txt [ /imrworldwide.com ]

STEP 4:  Malwarebytes:

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8338

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

12/8/2011 11:47:39 PM
mbam-log-2011-12-08 (23-47-39).txt

Scan type: Quick scan
Objects scanned: 174533
Time elapsed: 2 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


STEP 5  Updated Java and used JavaRA to remove older versions

STEP 6:  DDS

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 7.0.5730.13  BrowserJavaVersion: 1.6.0_29
Run by Darlene at 23:08:05 on 2011-12-08
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.1919.1015 [GMT -5:00]
.
AV: COGECO Security Services 9.01 *Enabled/Updated* {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: COGECO Security Services 9.01 *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\COGECO Security Services\Anti-Virus\fsgk32st.exe
C:\Program Files\COGECO Security Services\Common\FSMA32.EXE
C:\Program Files\COGECO Security Services\Anti-Virus\FSGK32.EXE
C:\Program Files\COGECO Security Services\Common\FSHDLL32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe
C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe
C:\Program Files\COGECO Security Services\Anti-Virus\fssm32.exe
C:\Program Files\COGECO Security Services\FWES\Program\fsdfwd.exe
C:\Program Files\COGECO Security Services\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lexmark 4300 Series\lxcemon.exe
C:\Program Files\Lexmark 4300 Series\ezprint.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\COGECO Security Services\Common\FSM32.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Gamesbar\SearchEngineProtection.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\lxcecoms.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.computerhope.com/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://g.msn.ca/0SEENCA/SAOS01?FORM=TOOLBR
mSearchAssistant =
uURLSearchHooks: H - No File
uURLSearchHooks: FCToolbarURLSearchHook Class: {96b985b7-3cf9-456a-9db6-791710e60f5f} - c:\program files\mypoints point finder\Helper.dll
mURLSearchHooks: H - No File
mURLSearchHooks: H - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: MyPoints Point Finder BHO: {614bda1f-9bef-4cd1-bde4-fa4804929b4a} - c:\program files\mypoints point finder\Toolbar.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - No File
BHO: Browsing Protection Class: {c6867eb7-8350-4856-877f-93cf8ae3dc9c} - c:\program files\cogeco security services\nrs\iescript\baselitmus.dll
BHO: GamesBarBHO Class: {cb0d163c-e9f4-4236-9496-0597e24b23a5} - c:\program files\gamesbar\2.0.1.82\oberontb.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: MyPoints Point Finder: {89a2510a-b4b6-4683-bec9-1b96700bc7f1} - c:\program files\mypoints point finder\Toolbar.dll
TB: GamesBar: {6f282b65-56bf-4bd1-a8b2-a4449a05863d} - c:\program files\gamesbar\2.0.1.82\oberontb.dll
TB: Browsing Protection Toolbar: {265eee8e-3228-44d3-aea5-f7fdf5860049} - c:\program files\cogeco security services\nrs\iescript\baselitmus.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
TB: {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [PCSpeedUp] c:\program files\pc speed up\PCSpeedUp.lnk
uRun: [SearchEngineProtection] c:\program files\gamesbar\SearchEngineProtection.exe
uRun: [Facebook Update] "c:\documents and settings\darlene\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [lxcemon.exe] "c:\program files\lexmark 4300 series\lxcemon.exe"
mRun: [EzPrint] "c:\program files\lexmark 4300 series\ezprint.exe"
mRun: [LXCECATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCEtime.dll,_RunDLLEntry@16
mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [F-Secure Manager] "c:\program files\cogeco security services\common\FSM32.EXE" /splash
mRun: [F-Secure TNB] "c:\program files\cogeco security services\fsgui\TNBUtil.exe" /CHECKALL /WAITFORSW
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRunOnce: [WUAppSetup] c:\program files\common files\logishrd\WUApp32.exe -v 0x046d -p 0x08b5 -f video -m logitech -d 10.5.1.2023
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {1A93C934-025B-4c3a-B38E-9654A7003239} - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - c:\program files\gamesbar\2.0.1.82\oberontb.dll
Trusted Zone: facebook.com\www
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/common/asusTek_sys_ctrl.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} - hxxps://webiq005.webiqonline.com/WebIQ/DataServer/DataServer.dll?Handler=GetEngineDistribution&EDID={896A23A1-5821-4609-A6C6-6D5536C585C9}
DPF: {5D2CF9D0-113A-476B-986F-288B54571614} - hxxp://www.devalvr.com/instalacion/plugin/devalvrplugin.php
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6770.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1237576997218
DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} - hxxp://www.facebook.com/controls/contactx.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} - hxxp://zone.msn.com/bingame/zpagames/zpa_wof.cab55579.cab
DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} - hxxp://www.worldwinner.com/games/launcher/ie/v2.23.01.0/iewwload.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} - hxxp://zone.msn.com/bingame/zpagames/zpa_hrtz.cab99160.cab
DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} - hxxp://zone.msn.com/binGame/ZAxRcMgr.cab
DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} - hxxp://zone.msn.com/bingame/zpagames/zpa_txhe.cab79352.cab
DPF: {A4110378-789B-455F-AE86-3A1BFC402853} - hxxp://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab
DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab
DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
DPF: {BA94245D-2AA0-4953-9D9F-B0EE4CC02C43} - hxxp://www.worldwinner.com/games/v42/tilecity/tilecity.cab
DPF: {C93C1C34-CEA9-49B1-9046-040F59E0E0D8} - hxxp://www.worldwinner.com/games/v43/paint/paint.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553550000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} - hxxp://zone.msn.com/bingame/dash/default/DinerDash.1.0.0.98.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {FC4CAF5F-91BD-4DD9-ADC1-F3C737E37BC4} - hxxp://zone.msn.com/bingame/swet/default/Sweetopia.1.0.0.46.cab
DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} - hxxp://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab
TCP: DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194 24.226.1.94
TCP: Interfaces\{BC44D23C-E2E6-4FDB-BE8D-AD1BEF8F5D5E} : DhcpNameServer = 24.226.1.93 24.226.10.193 24.226.10.194 24.226.1.94
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll
LSA: Notification Packages =  scecli
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\darlene\application data\mozilla\firefox\profiles\oqcfa02q.default\
FF - prefs.js: browser.search.selectedEngine - bing
FF - prefs.js: browser.startup.homepage - hxxp://www.computerhope.com/
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\darlene\application data\kalydo\kalydoplayer\npkalydo.dll
FF - plugin: c:\documents and settings\darlene\local settings\application data\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\common files\oberon media\ncadapter\1.0.0.7\npapicomadapter.dll
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\microsoft silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
.
============= SERVICES / DRIVERS ===============
.
R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [2011-3-26 42672]
R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [2011-3-26 82120]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\cogeco security services\hips\drivers\fshs.sys [2011-3-26 68064]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2010-2-17 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2011-5-4 116608]
R2 F-Secure Gatekeeper Handler Starter;FSGKHS;c:\program files\cogeco security services\anti-virus\fsgk32st.exe [2011-3-26 215648]
R2 vseamps;vseamps;c:\program files\common files\authentium\antivirus5\vseamps.exe [2010-4-8 117288]
R2 vsedsps;vsedsps;c:\program files\common files\authentium\antivirus5\vsedsps.exe [2010-4-8 117288]
R2 vseqrts;vseqrts;c:\program files\common files\authentium\antivirus5\vseqrts.exe [2010-4-8 154152]
R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\cogeco security services\anti-virus\minifilter\fsgk.sys [2011-3-26 148632]
R3 FSORSPClient;F-Secure ORSP Client;c:\program files\cogeco security services\orsp client\fsorsp.exe [2011-3-26 61088]
S1 SABKUTIL;SABKUTIL;\??\c:\documents and settings\darlene\local settings\temporary internet files\content.ie5\sooa4naj\saskutil.sys --> c:\documents and settings\darlene\local settings\temporary internet files\content.ie5\sooa4naj\SASKUTIL.SYS [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-7-19 135664]
S2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2010-10-22 1684736]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-7-19 135664]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-4 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-12-09 03:38:28   22216   ----a-w-   c:\windows\system32\drivers\mbam.sys
2011-12-09 03:38:28   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2011-12-07 06:14:35   16409960   ----a-w-   C:\spybotsd162.exe
2011-11-30 06:40:00   --------   d-----w-   c:\program files\iPod
2011-11-30 06:39:57   --------   d-----w-   c:\program files\iTunes
2011-11-30 06:37:10   --------   d-----w-   c:\program files\Bonjour
2011-11-21 02:05:11   --------   d-----w-   c:\documents and settings\darlene\application data\blg
2011-11-21 02:05:11   --------   d-----w-   c:\documents and settings\all users\application data\blg
2011-11-18 04:34:26   --------   d-----w-   c:\documents and settings\all users\application data\FreshGames
2011-11-18 04:33:38   --------   d-----w-   c:\program files\Ranch Rush
2011-11-18 04:32:58   --------   d-----w-   c:\documents and settings\all users\application data\Big Fish Games
.
==================== Find3M  ====================
.
2011-11-23 02:03:05   414368   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-10 14:22:41   692736   ----a-w-   c:\windows\system32\inetcomm.dll
2011-10-04 21:52:25   50793184   ----a-w-   C:\agatha_christie_4_46879135-setup.exe
2011-10-03 10:06:03   472808   ----a-w-   c:\windows\system32\deployJava1.dll
2011-10-03 07:37:52   73728   ----a-w-   c:\windows\system32\javacpl.cpl
2011-09-28 07:06:50   599040   ----a-w-   c:\windows\system32\crypt32.dll
2011-09-26 15:41:20   611328   ----a-w-   c:\windows\system32\uiautomationcore.dll
2011-09-26 15:41:20   220160   ----a-w-   c:\windows\system32\oleacc.dll
2011-09-26 15:41:14   20480   ----a-w-   c:\windows\system32\oleaccrc.dll
2011-09-20 18:34:23   27024112   ----a-w-   C:\PowerPointViewer.exe
2011-06-08 04:20:53   11363664   ----a-w-   c:\program files\SUPERAntiSpywarePro.exe
2011-06-08 03:48:23   7109120   ----a-w-   c:\program files\registrybooster.exe
2011-06-01 03:24:00   9352392   ----a-w-   c:\program files\Install_MSN_Messenger
2011-05-07 06:07:09   440   ----a-w-   c:\program files\050720112070929.bat
2011-04-28 02:33:05   9013888   ----a-w-   c:\program files\MSNOIE8_ENCA_XPL.EXE
2011-02-22 02:06:51   442   -c--a-w-   c:\program files\0221201121065109.bat
2011-01-31 02:03:58   5095264   ----a-w-   c:\program files\FLVPlayerSetup.exe
2011-01-21 20:06:58   208072   ----a-w-   c:\program files\bigfishgamesRainbowWEb2.exe
2011-01-21 18:37:54   208072   ----a-w-   c:\program files\bigfishgamesSUperGRanny.exe
2010-10-19 21:18:43   554280   ----a-w-   c:\program files\Mats_Run.AudioPlayback.exe
2010-10-18 15:18:11   554264   ----a-w-   c:\program files\Mats_Run.IEAddon.exe
2010-09-11 02:04:42   441   ----a-w-   c:\program files\0910201022044203.bat
2010-06-13 04:02:46   6153352   ----a-w-   c:\program files\mbam-setup-1.46.exe
2010-05-10 18:56:58   299864   ----a-w-   c:\program files\dxwebsetup.exe
2010-05-01 04:02:58   24099296   ----a-w-   c:\program files\Second_Life_2-0-1-203797_Setup.exe
2010-04-29 20:59:53   252564   ----a-w-   c:\program files\FHSetup.exe
2010-04-29 02:40:18   22080360   ----a-w-   c:\program files\NDP30SP2-KB976570-x64.exe
2010-04-26 19:40:13   3774872   ----a-w-   c:\program files\rcsetup137.exe
2010-04-26 19:39:55   4165768   ----a-w-   c:\program files\dfsetup118.exe
2010-04-26 19:39:28   3382520   ----a-w-   c:\program files\ccsetup231.exe
2010-04-24 18:04:16   82045688   ----a-w-   c:\program files\197.45_desktop_winxp_32bit_english_whql.exe
2010-04-24 17:53:13   921376   ----a-w-   c:\program files\JavaSetup6u20.exe
.
============= FINISH: 23:09:11.45 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 3/20/2009 2:32:55 AM
System Uptime: 12/8/2011 3:39:41 PM (8 hours ago)
.
Motherboard: ASUSTeK Computer INC. |  | M2N68-AM
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ | AM2 | 2600/200mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 233 GiB total, 206.254 GiB free.
D: is Removable
E: is CDROM ()
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1: 12/7/2011 1:44:38 AM - System Checkpoint
RP2: 12/7/2011 1:45:48 AM - computerhope
RP3: 12/8/2011 4:12:00 PM - System Checkpoint
RP4: 12/8/2011 10:49:04 PM - Installed Java(TM) 6 Update 29
.
==== Installed Programs ======================
.
ABBYY FineReader 6.0 Sprint
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.1)
Adobe Shockwave Player 11.5
Agatha Christie 4.50 from Paddington
Amazon MP3 Downloader 1.0.5
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVSDK5
Big Fish Games: Game Manager
Bonjour
CCleaner
COGECO Security Services
Critical Update for Windows Media Player 11 (KB959772)
Defraggler
DevalVR plugin for Internet Explorer (remove)
Driver Whiz
ESET Online Scanner v3
EZ Lyrics (remove only)
F-Secure PSC Prerequisites
Facebook Video Calling 1.0.0.8953
Farm Frenzy
File Type Assistant
FLV Player
Free File Opener v2011.6.0.4
GamesBar 2.0.1.82
Google Update Helper
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB954708)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
IrfanView (remove only)
iTunes
Java(TM) 6 Update 29
Junk Mail filter update
Kalydo Player 3.10.04
Lexmark 4300 Series
Lexmark Fax Solutions
Magic Farm
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2572067)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Windows XP Video Decoder Checkup Utility
Mozilla Firefox 8.0 (x86 en-US)
MSN
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
My Farm Life 2
MyDefrag v4.3.1
MyPoints Point Finder
Nord
NVIDIA Drivers
NVIDIA nView Desktop Manager
QuickTime
Rainbow Web 2
Rainbow Web 3
Rainbow Web II
Ranch Rush
Realtek High Definition Audio Driver
Recuva
SecondLifeViewer2 (remove only)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 7 (KB2544521)
Security Update for Windows Internet Explorer 7 (KB2586448)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Search 4 - KB963093
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2510581)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Segoe UI
Speccy
Super Granny 3
SUPERAntiSpyware
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Windows (KB971513)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB2641690)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer Clean Up
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Management Framework Core
Windows Media Format 11 runtime
Windows Media Player 11
Windows PowerShell(TM) 1.0 MUI pack
Windows Search 4.0
Windows XP Service Pack 3
Zuma’s Revenge
.
==== Event Viewer Messages From Past Week ========
.
12/7/2011 1:16:42 AM, error: Service Control Manager [7000]  - The SysProtDrv.sys service failed to start due to the following error:  The system cannot find the path specified.
.
==== End Of File ===========================

[Malware Removal Specialist]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
I seem to recall that this problem is all about receiving emails from relevant knowledge. Are you using the MailWasher program that I suggested? If that is your problem, by using the "bounce" feature of MailWasher will get rid of them.

Installed MailWasher and blacklisted and removed cdavis@relevantknowledge.com from friend's list using *'s.  Usually get one every couple of days.  I think these emails are messing with my computer.  Is that possible?  ty Cannot remember the last time i ever opened one, years i believe.  It was poseing as a "Survey"

[Malware Removal Specialist]

Installed MailWasher and blacklisted and removed cdavis@relevantknowledge.com from friend's list using *'s.  Usually get one every couple of days.  I think these emails are messing with my computer.  Is that possible?  ty Cannot remember the last time i ever opened one, years i believe.  It was poseing as a "Survey"

I don't see what's the problem. Everytime you want to check your mail you open MailWasher, bounce any messages that you don't want and then download the ones you want. That way the spam nevers reaches the computer. I get a lot of these every day and it's as simple as put a checkmark in front of the message.

Sry I wasn't clear.  I just installed MailWasher 1/2 hour ago.  Was saying i get the relevantknowledge emails every couple of days and will watch for them.  My question/concern is that 'relevant knowledge' emails are not just emails but i believe they have installed something that messes with my computer.  As i said in previous post, seems since i switched router(s) the emails get thru and my computer starts acting wacky.  You seem to be saying they are only emails and my problem is solved.   What should i do with all the programs i've installed and the stuff on my desktop please.  tyvm i really really appreciate any help

[Malware Removal Specialist]

My question/concern is that 'relevant knowledge' emails are not just emails but i believe they have installed something that messes with my computer.  As i said in previous post, seems since i switched router(s) the emails get thru and my computer starts acting wacky.  You seem to be saying they are only emails and my problem is solved.   What should i do with all the programs i've installed and the stuff on my desktop please.  tyvm i really really appreciate any help

I've run numerous scans on your computer and it was clean unless it was infected again which I doubt. You need to use MailWasher before you open your mail account. Once Mailwasher opens it will show you all the messages that are waiting on your ISP server to be download. Bounce all the messages that you don't and and then when you click Process Mail only the messages that you want to see will be downloaded to your computer. This is much easier than sorting through a bunch of mail after it's downloaded. As for the programs, you can uninstall/delete them.

relevant knowledge is really bad for the computer?  it doesn't cause any problems with computers?  can i just leave the programs you suggested to download?  tyvm

[Malware Removal Specialist]

can i just leave the programs you suggested to download?

The only two that you should keep is SAS and MBAM. Update them and run them on a regular basis.

relevant knowledge is really bad for the computer?

Just annoying.
There no evidence of Relevant Knowledge on your computer. What's makes you think that it is there?
You should uninstall the two programs listed below because they have some level of spyware.

GamesBar 2.0.1.82

MyPoints Point Finder

I'm assuming we are done. tyvm

[Malware Removal Specialist]

I'm assuming we are done. tyvm

We can run a whole bunch of scans but it would be for nothing if you're not having any problems. Are you still having problems?

except for facebook games yes tysoo very much, i have done as you said

[Malware Removal Specialist]

except for facebook games yes tysoo very much, i have done as you said

Please explain the facebook games problem to me again.

When playing The Sims on Facebook every 6 minutes i would be asked to reload.  i now have a terrible problem.  i thought the computer froze while  updating my nvidia and then the computer started to turn itself off, checked and both video and ethernet controllers are gone.  i'm on my friends laptop.  computer. It went into safe mode last time i turned it on.  haven't turned on today out of fear    I have posted in the driver forum yesterday at 10am  Waiting patiently.  thank you for listening.  i guess we're really done now,  again thank you from the bottom of my heart for your help  until next time

[Malware Removal Specialist]

You're welcome. I'm sorry I couldn't be more helpful. I will lock this thread. If you need it re-opened, please send me a pm.