Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)  (Read 19177 times)

0 Members and 1 Guest are viewing this topic.

bluecountry

    Topic Starter


    Apprentice

    Thanked: 1
    Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
    « on: August 04, 2010, 05:42:49 PM »
    Today I was scanning the internet.  I typed in a question I had on google and went to website to get an answer.  The website appeared to be legit.
    I read the article, it did not answer my question but had links to supposed other articles which seemed promising.
    I clicked on them, suddenly the PC got slow.
    I left for an hour.
    I came back and there were a ton of pop ups on my screen.  I have scotty win-patrol which informs me when new programs have been installed and are trying to run.  I had many of these on my screen.
    I denied access to all of them, but the same ones kept coming up.

    I tried to go back on firefox, but could not.  I checked the connection, and I was connected fine by Cox wireless.
    I tried on firefox once more, but again I was told that some proxy settings were being refused.
    I do not connect by proxy...this had me fearful that an outside source was accessing my PC.

    I decided to shut down my PC and restart.
    When I did, immediately checkdisk ran a long scan.  After finishing, where it set some of the security settings back to default, it said it would restart.  Five minutes later I still was waiting, it had not restarted, so I just disconnected the power, shut it off, and started it myself again.

    The problem now is, the computer starts up, it goes to the sign on screen (I have XP), then it makes a click and shuts down and restarts automatically, only to do the same thing again.
    I can't sign on to my name on windows.
    I would like to try and fix this myself BEFORE taking it to the shop and being ripped off.

    Does anybody have an idea as to what is wrong and what steps I should follow to repair?

    Thanks.

    SuperDave

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
    « Reply #1 on: August 05, 2010, 06:23:25 PM »
    Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

    1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
    2. The fixes are specific to your problem and should only be used for this issue on this machine.
    3. If you don't know or understand something, please don't hesitate to ask.
    4. Please DO NOT run any other tools or scans while I am helping you.
    5. It is important that you reply to this thread. Do not start a new topic.
    6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
    7. Absence of symptoms does not mean that everything is clear.

    You will have to do this on a working computer then follow the directions.

    Go to this link to create a Rescue CD or to this site to create a Rescue USB. Carefully follow all the instructions for whichever method you choose.
    Windows 8 and Windows 10 dual boot with two SSD's

    bluecountry

      Topic Starter


      Apprentice

      Thanked: 1
      Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
      « Reply #2 on: August 06, 2010, 11:36:48 PM »
      First, thank you for the suggestion.

      Unfortunately, there are still big problems.
      I choose to follow the steps to create a Bitdefender Rescue USB.
      I went ahead, plugged the USB in, and got it to scan.

      As I tried starting the scan an error popped up
      Quote
      update error: the server address is not correct
      I clicked "ok" and it seemed to be a non issue as it still scanned.

      Once the scan finished however, more issues began.
      1) I was told the scan found 6 threats in 13 items that were still present (4 of them were trojans)....so apparently the scan was not successful in removing everything.
      2) 2 files failed to scan
      3) So I clicked on the "fixed issues" choice...the status said it was ignored and 0 issues were resolved.
      4) So I clicked on the "disinfect" choice...it failed.
      5) I clicked on the delete choice...all of the threats/items were deleted and it then read:
      "0 threats in 0 items"
      6) I thought I was in the clear...I clicked finish.  I was back to the main screen...I right clicked and selected reboot....it went to a black screen...said to remove USB drive...then hit enter...I did....then it began to reboot to regular windows only to have the same issue all over again...the PC would not start up.

      What now?

      SuperDave

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
      « Reply #3 on: August 07, 2010, 03:34:31 PM »
      We are going to be using a Windows Recovery Environment to help disinfect the system so it may boot again.

      Download the OTLPE Standard REATOGO Windows Recovery Environment.
      • Place a blank CD-R disc in to your CD burning drive.
      • Download OTLPEStd.exe and double-click on it to burn to a CD using ISO Burner.
      • Reboot your system using the boot CD you just created.

      Note : If you do not know how to set your computer to boot from CD follow the steps here
      • Your system should now display a REATOGO-X-PE desktop.
      • Double-click on the OTLPE icon.
      • When asked "Do you wish to load the remote registry", select Yes
      • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
      • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
      • OTL should now start. Change the following settings
      • Change Drivers to Non-Microsoft
      • Press Run Scan to start the scan.
      • When finished, the file will be saved  in drive C:\_OTL\MovedFiles
      • Copy this file to your USB drive if you do not have internet connection on this system
      • Please post the contents of the OTL.txt file in your reply.
      Windows 8 and Windows 10 dual boot with two SSD's

      bluecountry

        Topic Starter


        Apprentice

        Thanked: 1
        Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
        « Reply #4 on: August 07, 2010, 10:49:08 PM »
        OK before I get started, a couple of questions


        1)  Is there anyway this can be done by USB instead of by burning a cd?
        -Reason is, I haven't burned a CD in a LONG time so I am somewhat unfamiliar.

        2) Assuming the answer is no, I do not know how to set the PC to boot from a CD.  I clicked the link just to read through but I was unclear.
        It says
        Quote
        When you start your computer, check the boot-screen for setup key, In most newer pc it will be DELETE key, so make sure to check it.

        This AmiBios Require you to press DEL key to enter setup
        I'm not sure...when the PC starts do push f8 (as in safe mode) f12/esc or the del button?
        Otherwise the PC will boot up as usual.

        SuperDave

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
        « Reply #5 on: August 08, 2010, 01:18:51 PM »
        Quote
        1)  Is there anyway this can be done by USB instead of by burning a cd?
        -Reason is, I haven't burned a CD in a LONG time so I am somewhat unfamiliar.
        All you need to do is stick the CD in the burner.

        Quote
        Assuming the answer is no, I do not know how to set the PC to boot from a CD.  I clicked the link just to read through but I was unclear.
        If you do not know how to set your computer to boot from CD follow the steps here

        Windows 8 and Windows 10 dual boot with two SSD's

        bluecountry

          Topic Starter


          Apprentice

          Thanked: 1
          Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
          « Reply #6 on: August 08, 2010, 01:26:07 PM »
          Thanks Dave.
          I am in the process right now.
          The CD is burned and on the infected PC.

          One question...you said to change the settings:
          Change Drivers to Non-Microsoft

          Under drivers...the only settings I have are:
          -None
          -Use Safelist
          -All

          Which do I select...none?

          bluecountry

            Topic Starter


            Apprentice

            Thanked: 1
            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
            « Reply #7 on: August 08, 2010, 02:15:39 PM »
            OK...well I did not hear back...so I just changed drivers to "None" since "non-microsoft" was not an option.

            I was able to save on the txt file of the scan on my USB (still do not have internet access on the infected PC).
            Here it is...thanks.

            [recovering disk space - old attachment deleted by admin]

            Wicked Dezigns

            • Guest
            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
            « Reply #8 on: August 08, 2010, 02:33:32 PM »
            Your comment has been removed. Please do not post malware advice, or post here in the malware forum, unless you need help.
            « Last Edit: August 08, 2010, 05:33:54 PM by SuperDave »

            SuperDave

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Thanked: 1020
            • Certifications: List
            • Experience: Expert
            • OS: Windows 10
            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
            « Reply #9 on: August 08, 2010, 05:40:33 PM »
            Can you now boot your computer in Normal mode? If yes, please download these programs and transfer them to your infected computer and run the scans until you can gain access to the net.

            SUPERAntiSpyware

            If you already have SUPERAntiSpyware be sure to check for updates before scanning!


            Download SuperAntispyware Free Edition (SAS)
            * Double-click the icon on your desktop to run the installer.
            * When asked to Update the program definitions, click Yes
            * If you encounter any problems while downloading the updates, manually download and unzip them from here
            * Next click the Preferences button.

            •Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
            * Click the Scanning Control tab.
            * Under Scanner Options make sure only the following are checked:

            •Close browsers before scanning
            •Scan for tracking cookies
            •Terminate memory threats before quarantining
            Please leave the others unchecked

            •Click the Close button to leave the control center screen.

            * On the main screen click Scan your computer
            * On the left check the box for the drive you are scanning.
            * On the right choose Perform Complete Scan
            * Click Next to start the scan. Please be patient while it scans your computer.
            * After the scan is complete a summary box will appear. Click OK
            * Make sure everything in the white box has a check next to it, then click Next
            * It will quarantine what it found and if it asks if you want to reboot, click Yes

            •To retrieve the removal information please do the following:
            •After reboot, double-click the SUPERAntiSpyware icon on your desktop.
            •Click Preferences. Click the Statistics/Logs tab.

            •Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

            •It will open in your default text editor (preferably Notepad).
            •Save the notepad file to your desktop by clicking (in notepad) File > Save As...

            * Save the log somewhere you can easily find it. (normally the desktop)
            * Click close and close again to exit the program.
            *Copy and Paste the log in your post.

            ===================================

            Please download Malwarebytes Anti-Malware from here.

            Double Click mbam-setup.exe to install the application.
            • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
            • If an update is found, it will download and install the latest version.
            • Once the program has loaded, select "Perform Full Scan", then click Scan.
            • The scan may take some time to finish,so please be patient.
            • When the scan is complete, click OK, then Show Results to view the results.
            • Make sure that everything is checked, and click Remove Selected.
            • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
            • Please save the log to a location you will remember.
            • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
            • Copy and paste the entire report in your next reply.
            Extra Note:

            If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

            ====================================

            Please download: HiJackThis to your Desktop.
            • Double Click the HijackThis icon, located on your Desktop.
            • By Default, it will install to: C:\Program Files\Trend Micro\HijackThis
            • Accept the license agreement.
            • Click the Open the Misc Tools section button.
            • Place a checkmark beside Calculate MD5 of files if possible. Then, click Back.
            • Click Do a System Scan and Save a Logfile. Or, if you see a white screen, click Scan.
            • Please post the log in your next reply.
            Windows 8 and Windows 10 dual boot with two SSD's

            bluecountry

              Topic Starter


              Apprentice

              Thanked: 1
              Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
              « Reply #10 on: August 08, 2010, 09:33:45 PM »
              1)  I still can not get on the infected PC normally, it still shuts down.

              2)  I have SUPERAntiSpyware and Malwarebytes Anti-Malware.
              -Assuming that I can somehow get onto my infected PC...how would I be able to use and update these programs?  It has been my experience that without internet access you can not update, scan, and follow those steps for these features.

              bluecountry

                Topic Starter


                Apprentice

                Thanked: 1
                Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                « Reply #11 on: August 09, 2010, 12:54:44 PM »
                Look this is a little frustrating now.
                I've followed what's been said...I am now 5+ days without my PC operating.
                What's going on...why can I not SIGN on or get the internet and what is the fix?

                I find it hard to believe a simple virus obtained from a website is going to destroy my ability to use the PC as normal ever again >:( >:( >:( >:( >:( >:( >:( >:(

                Seriously...we've been working on this for days and everytime I try to access windows normally it still shuts down.  This is really annoying and frustrating already.

                What needs to be done?  System restore?  Scans?  What? 

                I've burned USB and CDs and the net result is still nothing.  Come on now.......
                « Last Edit: August 09, 2010, 01:18:01 PM by bluecountry »

                SuperDave

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Thanked: 1020
                • Certifications: List
                • Experience: Expert
                • OS: Windows 10
                Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                « Reply #12 on: August 09, 2010, 04:50:09 PM »
                Quote
                I still can not get on the infected PC normally, it still shuts down.
                Can you start in Safe Mode? If so, please run MBAM and get me the log.

                Quote
                Look this is a little frustrating now.
                I've followed what's been said...I am now 5+ days without my PC operating.
                What's going on...why can I not SIGN on or get the internet and what is the fix?
                I'm trying to get it fixed but first of all we have to get it running so we can run the scans.

                Quote
                I find it hard to believe a simple virus obtained from a website is going to destroy my ability to use the PC as normal ever again
                Some viruses can turn your computer into a doorstopper.

                Quote
                I've burned USB and CDs and the net result is still nothing.  Come on now.......
                If you feel I'm wasting your time, you can always leave. I responded to your post 4 days ago. Some repairs do take quite a while.

                Windows 8 and Windows 10 dual boot with two SSD's

                bluecountry

                  Topic Starter


                  Apprentice

                  Thanked: 1
                  Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                  « Reply #13 on: August 09, 2010, 10:36:05 PM »
                  Sorry for the frustration...but this is how I feel lol!

                  OK...so I can get MBAM to scan in safe mode.

                  Do you want me to just scan MBAM and post a log OR do you want me to scan SuperAntiSpyware and MBAM as described earlier (with me running the scan then removing/fixing threats?)

                  bluecountry

                    Topic Starter


                    Apprentice

                    Thanked: 1
                    Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                    « Reply #14 on: August 09, 2010, 11:58:10 PM »
                    Here is the MBAM log

                    [recovering disk space - old attachment deleted by admin]

                    SuperDave

                    • Malware Removal Specialist
                    • Moderator


                    • Genius
                    • Thanked: 1020
                    • Certifications: List
                    • Experience: Expert
                    • OS: Windows 10
                    Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                    « Reply #15 on: August 10, 2010, 04:04:23 PM »
                    Quote
                    Sorry for the frustration...but this is how I feel lol!
                    I can understand how you feel because I feel just the same way when I can't get a computer cleaned in a hurry.

                    Please run MBAM again and this time clean the infected files. See if you can run it in Normal Mode. If you can, then run SAS and HJT and post the logs.

                    Windows 8 and Windows 10 dual boot with two SSD's

                    bluecountry

                      Topic Starter


                      Apprentice

                      Thanked: 1
                      Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                      « Reply #16 on: August 11, 2010, 02:32:32 PM »
                      Logged onto safe mode.
                      Ran a new scan (attached)....which found ONE trojan horse.
                      Removed it.


                      Started up computer, and was able to access windows as usual.
                      However, a few problems listed below.


                      1) Still can not access the internet.  Tried both firefox and IE.  Strange because it says I am connected to the wireless network in the house...any ideas on why?

                      2)  When I sign onto windows...greeted by several odd prompts

                      A.  a popup coms saying:

                      RUNDLL
                      error loading C:\WINDOWS\I3hprl.dll
                      the specified module could not be found


                      3)  I have winpatrol...it pops up with these messages

                      A. WinPatrol New Program Alert
                      -New Startup program detechted
                      -do you want to run
                      C:\WINDOWS\ikaqicoxikihev.dll,startup

                      B. WinPatrol New Program Alert
                      -%systemroot%\system32\doppaw0-k(or something like that...might have mispelled)

                      C. WinPatrol
                      -C:\Windows\I3hprl.dll,startup

                      for each of these I clicked NO

                      4) Also got a message saying Windows Explorer encountered an error and needs to close


                      OK...so what do you think is going on now that I can get onto windows but not the internet and that I get these messages?
                      What to do?
                      System restore?
                      Spyware scan and MBAM scan and HJACK scan?

                      [recovering disk space - old attachment deleted by admin]

                      SuperDave

                      • Malware Removal Specialist
                      • Moderator


                      • Genius
                      • Thanked: 1020
                      • Certifications: List
                      • Experience: Expert
                      • OS: Windows 10
                      Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                      « Reply #17 on: August 11, 2010, 04:40:23 PM »
                      When you run MBAM you have to click on "Remove Selected" to clear the infections. Please run it again in whatever mode you can and do this. This next one you will have to download on another computer and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

                      Download ComboFix by sUBs from one of the below links.  You must rename it before saving it!

                      Important! You MUST save ComboFix to your desktop

                      link # 1
                      Link # 2

                      Rename ComboFix to Combo-Fix before saving it to the desktop.





                      Temporarily disable your Anti-virus and any Antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

                      Double click on Combo-Fix.exe & follow the prompts.

                      Vista users Right-Click on Combo-Fix.exe and select Run as administrator (you will receive a UAC prompt, please allow it)

                      Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

                      When the scan completes it will open a text window.
                       
                      Post the contents of that log in your next reply.

                      Remember to re-enable your Anti-virus and Antispyware protection when ComboFix is complete.
                      Windows 8 and Windows 10 dual boot with two SSD's

                      bluecountry

                        Topic Starter


                        Apprentice

                        Thanked: 1
                        Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                        « Reply #18 on: August 11, 2010, 10:25:03 PM »
                        Thanks Dave...but I am very confused
                        When you run MBAM you have to click on "Remove Selected" to clear the infections. Please run it again in whatever mode you can and do this. This next one you will have to download on another computer and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

                        OK.....

                        1) so do you want me to re-run MBAM and clear anything which is infected OR do you want me to download MBAM on the good PC I am using now then transfer it to the infected PC by CD/USB, scan, then remove the infected files, and post the logs here?

                        OR
                        2) do you just want me to re-run MBAM, remove infected files, run again, and post the new log?

                        THEN...do you want me to download on the good PC the links below, transfer them to the infected PC, scan, save on CD/USB, transfer and post here?

                        Could you clarify the first paragraph?

                        Thought I would tell you, I did re-run the MBAM...no infected files came up...but I still can not get online.
                        Would you like this latest log or not (since nothing came up on the latest) or not?



                        BC_Programmer


                          Mastermind
                        • Typing is no substitute for thinking.
                        • Thanked: 1140
                          • Yes
                          • Yes
                          • BC-Programming.com
                        • Certifications: List
                        • Computer: Specs
                        • Experience: Beginner
                        • OS: Windows 11
                        Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                        « Reply #19 on: August 11, 2010, 10:31:22 PM »
                        Quote
                        When you run MBAM you have to click on "Remove Selected" to clear the infections. Please run it again in whatever mode you can and do this.

                        He wants you to do the above. Then, after, you proceed to the rest of his steps, which take you through running Combofix. the information he gave regarding transferring was regarding Combofix (getting it to the infected PC) and the getting the logs it produces back to the other PC that you are using to access this forum.
                        I was trying to dereference Null Pointers before it was cool.

                        bluecountry

                          Topic Starter


                          Apprentice

                          Thanked: 1
                          Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                          « Reply #20 on: August 11, 2010, 10:59:40 PM »
                          OK...so let me confirm so I do not misstep


                          1) Re-run the MBAM...post log here

                          2) Download on good PC combofix
                          -Transfer it to infected PC
                          -Scan it
                          -Save scan log
                          -Transfer log back to good PC and post here

                          Got it?

                          SuperDave

                          • Malware Removal Specialist
                          • Moderator


                          • Genius
                          • Thanked: 1020
                          • Certifications: List
                          • Experience: Expert
                          • OS: Windows 10
                          Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                          « Reply #21 on: August 12, 2010, 01:29:11 PM »
                          Quote
                          Re-run the MBAM...post log here
                          Only post the log if something is found

                          Quote
                          Download on good PC combofix
                          -Transfer it to infected PC
                          -Scan it
                          -Save scan log
                          -Transfer log back to good PC and post here

                          Got it?
                          Please do what needs to be done to get the scan and the log back here.
                          Windows 8 and Windows 10 dual boot with two SSD's

                          bluecountry

                            Topic Starter


                            Apprentice

                            Thanked: 1
                            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                            « Reply #22 on: August 13, 2010, 02:36:17 PM »
                            This is not working.

                            When I tried the first link...it would not download on the good PC.  Instead, it was blocked by McAfee which stated it had a trojan horse!

                            When I click the second link...it opens up a new page
                            It has "download" file at the bottom...I click on it and it says

                            Quote
                            "Firefox can't find the file at http://www.forospyware.com/sUBs/ComboFix.exe."

                            So I can not download.

                            When I click now again on the first link I am told
                            Quote
                            Firefox can't find the file at http://download.bleepingcomputer.com/sUBs/ComboFix.exe.


                            I was told to diable anti-virus only with the bad PC when running the scan...not the good PC when downloading combofix.
                            I am baffled on why this is failing.

                            SuperDave

                            • Malware Removal Specialist
                            • Moderator


                            • Genius
                            • Thanked: 1020
                            • Certifications: List
                            • Experience: Expert
                            • OS: Windows 10
                            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                            « Reply #23 on: August 13, 2010, 04:52:44 PM »
                            Did you try downloading it on IE?
                            Windows 8 and Windows 10 dual boot with two SSD's

                            bluecountry

                              Topic Starter


                              Apprentice

                              Thanked: 1
                              Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                              « Reply #24 on: August 13, 2010, 08:42:24 PM »
                              I just tried...and each time I do I run into another problem.


                              Jesus...it's been 10 days...I really am having my patience tested here.
                              I really find it hard to believe clicking on a link on a safe website it causing this much grief.
                              Let's gets this solved post hast.


                              Some installation files are corrupt.
                              Please download a fresh copy and retry the installation.

                              I did this on the bad pc and the good pc.


                              I tried to re-download and was told this
                              Quote
                              cannot copy combofix[1]: Access is denied.
                              make sure the disc is not full or write-protected and that another file is not in use.

                              All I did was click a link to an article on a legit site...this should not be taking 10 days to fix.
                              Let's come up with plan and fix it already.
                              Jesus Christ. >:(


                              You know each time I try and download combofix I am warned that it has trojan horses removed...this is really *censored* up already.
                              « Last Edit: August 13, 2010, 08:57:00 PM by bluecountry »

                              bluecountry

                                Topic Starter


                                Apprentice

                                Thanked: 1
                                Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                « Reply #25 on: August 13, 2010, 08:45:51 PM »
                                Look...I can now sign on to windows normally on the infected PC.
                                I still have no internet access despite the connection being fine.

                                All is need is to
                                1) Restore internet connection
                                2) Remove any virus/spyware issues on the infected PC
                                3) REMOVE combofix from the infected PC

                                4) REMOVE combofix from the good PC (I just deleted it from the desktop...so does that count)?
                                -Now since downloading combofix on the goodPC I am getting a mesage CONSTANTLY stating:

                                Quote
                                An error has occurred in the script on this page

                                Line: 1
                                Chart: 1
                                Error: Object Expected
                                Code: 0
                                URL: file:///C:/Documents%20and%20Settings/All%20Users/Application%20Data/yahoo!/YOP/yop.html

                                Do you want to continue running scripts on this page?

                                Yes   No

                                I click yes or no and it does not matter this just will pop up within a minute.
                                This NEVER happened until I downloaded combofix on the good PC.
                                « Last Edit: August 13, 2010, 08:59:33 PM by bluecountry »

                                SuperDave

                                • Malware Removal Specialist
                                • Moderator


                                • Genius
                                • Thanked: 1020
                                • Certifications: List
                                • Experience: Expert
                                • OS: Windows 10
                                Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                « Reply #26 on: August 14, 2010, 01:25:27 PM »
                                I'm beginning to think that both of your computer could be infected. Just delete ComboFix from both computers. You can go to C: drive and look for a ComboFix folder. If it's there, delete it . Let's try this.

                                Download OTL  to your Desktop
                                • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
                                • Under the Custom Scan box paste this in
                                netsvcs
                                msconfig
                                safebootminimal
                                safebootnetwork
                                activex
                                drivers32
                                %SYSTEMDRIVE%\*.exe
                                %systemroot%\*. /mp /s
                                c:\$recycle.bin\*.* /s
                                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
                                /md5start
                                eventlog.dll
                                scecli.dll
                                netlogon.dll
                                cngaudit.dll
                                sceclt.dll
                                ntelogon.dll
                                logevent.dll
                                iaStor.sys
                                nvstor.sys
                                nvstor32.sys
                                atapi.sys
                                IdeChnDr.sys
                                viasraid.sys
                                AGP440.sys
                                vaxscsi.sys
                                nvatabus.sys
                                viamraid.sys
                                nvata.sys
                                nvgts.sys
                                iastorv.sys
                                ViPrt.sys
                                eNetHook.dll
                                explorer.exe
                                svchost.exe
                                userinit.exe
                                qmgr.dll
                                ws2_32.dll
                                proquota.exe
                                imm32.dll
                                kernel32.dll
                                ndis.sys
                                autochk.exe
                                spoolsv.exe
                                xmlprov.dll
                                ntmssvc.dll
                                mswsock.dll
                                Beep.SYS
                                ntfs.sys
                                termsrv.dll
                                sfcfiles.dll
                                st3shark.sys
                                ahcix86.sys
                                srsvc.dll
                                nvrd32.sys
                                /md5stop
                                %systemroot%\system32\*.dll /lockedfiles
                                %systemroot%\Tasks\*.job /lockedfiles

                                • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
                                  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
                                  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time
                                Windows 8 and Windows 10 dual boot with two SSD's

                                bluecountry

                                  Topic Starter


                                  Apprentice

                                  Thanked: 1
                                  Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                  « Reply #27 on: August 15, 2010, 02:10:36 AM »
                                  1)  I assume you meant to do this on the good PC?

                                  2)  Here is  the OTL.txt

                                  Quote
                                  OTL logfile created on: 8/15/2010 4:01:07 AM - Run 1
                                  OTL by OldTimer - Version 3.2.9.1     Folder = C:\Documents and Settings\Trent Berger\My Documents\Downloads
                                  Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
                                  Internet Explorer (Version = 8.0.6001.18702)
                                  Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
                                   
                                  1,014.00 Mb Total Physical Memory | 424.00 Mb Available Physical Memory | 42.00% Memory free
                                  2.00 Gb Paging File | 1.00 Gb Available in Paging File | 56.00% Paging File free
                                  Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
                                   
                                  %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
                                  Drive C: | 107.09 Gb Total Space | 71.67 Gb Free Space | 66.92% Space Free | Partition Type: NTFS
                                  Drive D: | 37.10 Gb Total Space | 37.03 Gb Free Space | 99.82% Space Free | Partition Type: NTFS
                                  E: Drive not present or media not loaded
                                  Drive F: | 0.25 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
                                  G: Drive not present or media not loaded
                                  H: Drive not present or media not loaded
                                  I: Drive not present or media not loaded
                                   
                                  Computer Name: D8W926B1
                                  Current User Name: Trent Berger
                                  Logged in as Administrator.
                                   
                                  Current Boot Mode: Normal
                                  Scan Mode: Current user
                                  Company Name Whitelist: On
                                  Skip Microsoft Files: On
                                  File Age = 90 Days
                                  Output = Standard
                                  Quick Scan
                                   
                                  ========== Processes (SafeList) ==========
                                   
                                  PRC - [2010/08/15 04:00:33 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Trent Berger\My Documents\Downloads\OTL(3).exe
                                  PRC - [2010/07/23 13:06:25 | 002,403,568 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
                                  PRC - [2010/06/10 06:58:32 | 000,865,832 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe
                                  PRC - [2010/03/09 13:50:32 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                                  PRC - [2009/12/08 15:25:28 | 000,093,320 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
                                  PRC - [2009/11/04 17:53:34 | 000,144,704 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\Mcshield.exe
                                  PRC - [2009/11/04 16:59:50 | 000,606,736 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe
                                  PRC - [2009/10/29 07:54:44 | 001,218,008 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe
                                  PRC - [2009/10/29 07:54:44 | 001,218,008 | ---- | M] (McAfee, Inc.) -- c:\Program Files\McAfee.com\Agent\mcagent.exe
                                  PRC - [2009/10/27 12:19:46 | 000,895,696 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MPF\MpfSrv.exe
                                  PRC - [2009/07/08 12:54:34 | 000,359,952 | ---- | M] (McAfee, Inc.) -- c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe
                                  PRC - [2009/07/07 20:10:02 | 002,482,848 | ---- | M] (McAfee, Inc.) -- c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe
                                  PRC - [2009/07/07 18:45:22 | 000,436,752 | ---- | M] (McAfee, Inc.) -- C:\Program Files\Common Files\McAfee\MSC\McUICnt.exe
                                  PRC - [2009/05/21 10:55:32 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe
                                  PRC - [2009/05/08 00:30:22 | 000,192,128 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee\MSM\McSmtFwk.exe
                                  PRC - [2008/08/13 18:32:40 | 000,201,968 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                                  PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
                                  PRC - [2007/10/08 17:50:56 | 000,041,824 | ---- | M] (AOL LLC) -- C:\Program Files\Common Files\AOL\1151195914\ee\aolsoftware.exe
                                  PRC - [2007/03/15 11:09:36 | 000,460,784 | ---- | M] (Gteko Ltd.) -- C:\Program Files\DellSupport\DSAgnt.exe
                                  PRC - [2007/03/11 17:37:14 | 000,936,960 | ---- | M] (Motive Communications, Inc.) -- C:\Program Files\Verizon\McciTrayApp.exe
                                  PRC - [2007/01/04 17:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) -- C:\Program Files\Viewpoint\Common\ViewpointService.exe
                                  PRC - [2006/10/23 08:50:35 | 000,046,640 | ---- | M] (AOL LLC) -- C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
                                  PRC - [2006/03/03 15:18:10 | 000,200,704 | ---- | M] (Yahoo!, Inc.) -- C:\Program Files\Yahoo!\browser\ycommon.exe
                                  PRC - [2005/06/16 23:30:36 | 000,401,408 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\YOP\yop.exe
                                  PRC - [2005/06/10 10:44:02 | 000,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
                                  PRC - [2004/10/12 20:29:40 | 000,667,920 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Citrix\icaweb32\wfica32.exe
                                  PRC - [2004/08/10 05:00:00 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mshearts.exe
                                  PRC - [2003/05/12 15:02:26 | 000,270,336 | ---- | M] (Dell Computer Corporation) -- C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
                                  PRC - [2003/05/12 15:02:26 | 000,053,248 | ---- | M] (Dell Computer Corporation) -- C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
                                   
                                   
                                  ========== Modules (SafeList) ==========
                                   
                                  MOD - [2010/08/15 04:00:33 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Trent Berger\My Documents\Downloads\OTL(3).exe
                                  MOD - [2009/12/08 14:12:24 | 000,014,544 | ---- | M] (McAfee, Inc.) -- c:\Program Files\McAfee\SiteAdvisor\sahook.dll
                                  MOD - [2008/04/13 20:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
                                   
                                   
                                  ========== Win32 Services (SafeList) ==========
                                   
                                  SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
                                  SRV - File not found [Auto | Stopped] --  -- (CLTNetCnService)
                                  SRV - [2010/06/10 06:58:32 | 000,865,832 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\MSC\mcmscsvc.exe -- (mcmscsvc)
                                  SRV - [2009/12/08 15:25:28 | 000,093,320 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
                                  SRV - [2009/11/04 17:53:34 | 000,144,704 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\McAfee\VirusScan\Mcshield.exe -- (McShield)
                                  SRV - [2009/11/04 16:59:50 | 000,606,736 | ---- | M] (McAfee, Inc.) [On_Demand | Running] -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe -- (McSysmon)
                                  SRV - [2009/10/28 12:50:32 | 000,365,072 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS)
                                  SRV - [2009/10/27 12:19:46 | 000,895,696 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\McAfee\MPF\MPFSrv.exe -- (MpfService)
                                  SRV - [2009/07/08 12:54:34 | 000,359,952 | ---- | M] (McAfee, Inc.) [Auto | Running] -- c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe -- (McProxy)
                                  SRV - [2009/07/07 20:10:02 | 002,482,848 | ---- | M] (McAfee, Inc.) [Auto | Running] -- c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe -- (McNASvc)
                                  SRV - [2008/08/13 18:32:40 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
                                  SRV - [2007/03/07 15:47:46 | 000,076,848 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\DellSupport\brkrsvc.exe -- (DSBrokerService)
                                  SRV - [2007/01/04 17:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) [Auto | Running] -- C:\Program Files\Viewpoint\Common\ViewpointService.exe -- (Viewpoint Manager Service)
                                  SRV - [2006/10/23 08:50:35 | 000,046,640 | ---- | M] (AOL LLC) [Auto | Running] -- C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe -- (AOL ACS)
                                   
                                   
                                  ========== Driver Services (SafeList) ==========
                                   
                                  DRV - [2010/07/15 15:18:22 | 000,120,136 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Mpfp.sys -- (MPFP)
                                  DRV - [2010/05/29 19:50:41 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
                                  DRV - [2010/02/18 17:34:00 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
                                  DRV - [2010/02/18 17:33:59 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
                                  DRV - [2009/11/04 17:54:12 | 000,214,664 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\mfehidk.sys -- (mfehidk)
                                  DRV - [2009/11/04 17:54:12 | 000,079,816 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfeavfk.sys -- (mfeavfk)
                                  DRV - [2009/11/04 17:54:12 | 000,040,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfesmfk.sys -- (mfesmfk)
                                  DRV - [2009/11/04 17:54:12 | 000,035,272 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mfebopk.sys -- (mfebopk)
                                  DRV - [2009/11/04 17:53:40 | 000,034,248 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mferkdk.sys -- (mferkdk)
                                  DRV - [2009/01/18 17:30:13 | 000,064,160 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
                                  DRV - [2008/04/13 14:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
                                  DRV - [2008/04/13 14:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
                                  DRV - [2008/04/13 12:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
                                  DRV - [2007/03/11 17:37:20 | 000,018,003 | ---- | M] (Motive, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MRENDIS5.sys -- (MRENDIS5)
                                  DRV - [2007/03/11 17:37:19 | 000,019,345 | ---- | M] (Motive, Inc.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Motive\MREMPR5.sys -- (MREMPR5)
                                  DRV - [2007/02/25 12:10:48 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\dsunidrv.sys -- (dsunidrv)
                                  DRV - [2006/10/05 16:07:28 | 000,004,736 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Running] -- C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys -- (DSproct)
                                  DRV - [2006/08/03 19:33:20 | 000,014,848 | ---- | M] (Webroot Software Inc (www.webroot.com)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sskbfd.sys -- (SSKBFD)
                                  DRV - [2005/11/16 21:36:00 | 001,047,816 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
                                  DRV - [2004/08/03 22:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
                                  DRV - [2003/11/17 21:59:20 | 000,212,224 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys -- (HSFHWBS2)
                                  DRV - [2003/11/17 21:58:02 | 000,680,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
                                  DRV - [2003/11/17 21:56:26 | 001,042,432 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
                                  DRV - [2003/01/10 17:13:04 | 000,033,588 | R--- | M] (America Online, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
                                  DRV - [2002/12/13 04:06:40 | 000,129,875 | R--- | M] (Mars Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mr97310c.sys -- (MR97310_USB_DUAL_CAMERA)
                                  DRV - [2001/08/17 14:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
                                  DRV - [2001/08/17 14:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
                                  DRV - [2001/08/17 14:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
                                  DRV - [2001/08/17 14:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
                                  DRV - [2001/08/17 14:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
                                  DRV - [2001/08/17 13:57:38 | 000,016,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA)
                                  DRV - [2001/08/17 13:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
                                  DRV - [2001/08/17 13:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
                                  DRV - [2001/08/17 13:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
                                  DRV - [2001/08/17 13:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
                                  DRV - [2001/08/17 13:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
                                  DRV - [2001/08/17 13:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
                                  DRV - [2001/08/17 13:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
                                  DRV - [2001/08/17 13:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
                                  DRV - [2001/08/17 13:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
                                  DRV - [2001/08/17 13:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
                                   
                                   
                                  ========== Standard Registry (SafeList) ==========
                                   
                                   
                                  ========== Internet Explorer ==========
                                   
                                  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
                                  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://red.clientapps.yahoo.com/customize/ie/defaults/cs/sbcydsl/*http://www.yahoo.com/search/ie.html
                                  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
                                  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
                                  IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
                                  IE - HKLM\..\URLSearchHook: {f0e98552-8e47-4c6c-9b3a-11ab0549f94d} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL L.L.C.)
                                   
                                  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
                                  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
                                  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
                                  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://verizon.yahoo.com
                                  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch =
                                  IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
                                  IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
                                   
                                  ========== FireFox ==========
                                   
                                  FF - prefs.js..browser.startup.homepage: "http://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official"
                                  FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.0
                                  FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.1
                                   
                                   
                                  FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2010/06/02 00:57:58 | 000,000,000 | ---D | M]
                                  FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/03/09 13:53:42 | 000,000,000 | ---D | M]
                                  FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/31 23:56:55 | 000,000,000 | ---D | M]
                                  FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/07/24 13:33:25 | 000,000,000 | ---D | M]
                                   
                                  [2010/04/13 15:40:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Trent Berger\Application Data\Mozilla\Extensions
                                  [2010/08/14 13:32:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Trent Berger\Application Data\Mozilla\Firefox\Profiles\ik5aqexj.default\extensions
                                  [2010/06/17 20:52:45 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Trent Berger\Application Data\Mozilla\Firefox\Profiles\ik5aqexj.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
                                  [2010/04/13 15:42:17 | 000,002,386 | ---- | M] () -- C:\Documents and Settings\Trent Berger\Application Data\Mozilla\Firefox\Profiles\ik5aqexj.default\searchplugins\siteadvisor.xml
                                  [2010/08/14 13:32:26 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
                                  [2009/12/16 04:33:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
                                  [2009/11/19 17:16:28 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
                                  [2009/11/19 17:16:29 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll
                                  [2007/04/16 13:07:12 | 000,180,293 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
                                  [2010/06/08 10:57:07 | 000,002,024 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\McSiteAdvisor.xml
                                   
                                  O1 HOSTS File: ([2006/09/06 10:17:28 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
                                  O1 - Hosts: 127.0.0.1       localhost
                                  O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
                                  O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
                                  O2 - BHO: (AOL Toolbar Loader) - {3ef64538-8b54-4573-b48f-4d34b0238ab2} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL L.L.C.)
                                  O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
                                  O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
                                  O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
                                  O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
                                  O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
                                  O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
                                  O3 - HKLM\..\Toolbar: (AOL Toolbar) - {ba00b7b1-0351-477a-b948-23e3ee5a73d4} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL L.L.C.)
                                  O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
                                  O3 - HKCU\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
                                  O3 - HKCU\..\Toolbar\WebBrowser: (AOL Toolbar) - {BA00B7B1-0351-477A-B948-23E3EE5A73D4} - C:\Program Files\AOL Toolbar\aoltb.dll (AOL L.L.C.)
                                  O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
                                  O4 - HKLM..\Run: [Dell AIO Printer A920] C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe (Dell Computer Corporation)
                                  O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
                                  O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
                                  O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1151195914\ee\aolsoftware.exe (AOL LLC)
                                  O4 - HKLM..\Run: [ISUSPM Startup] c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (InstallShield Software Corporation)
                                  O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
                                  O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
                                  O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
                                  O4 - HKLM..\Run: [Verizon_McciTrayApp] C:\Program Files\Verizon\McciTrayApp.exe (Motive Communications, Inc.)
                                  O4 - HKLM..\Run: [YOP] C:\Program Files\Yahoo!\YOP\yop.exe (Yahoo! Inc.)
                                  O4 - HKCU..\Run: [DellSupport] C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
                                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
                                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
                                  O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
                                  O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
                                  O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
                                  O9 - Extra Button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
                                  O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
                                  O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
                                  O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
                                  O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
                                  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
                                  O16 - DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (MetaStreamCtl Class)
                                  O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} http://remote.segalco.com/wficat81.cab (Citrix ICA Client)
                                  O16 - DPF: {48DF87EE-F2DE-11D8-BE7F-302050C10801} http://www.flyword.com/loaderword_win.cab (FlyLoader Class)
                                  O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
                                  O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
                                  O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
                                  O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} http://www.pcpitstop.com/mhLbl.cab (mhLabel Class)
                                  O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
                                  O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
                                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
                                  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.105.28.12 68.105.29.12 68.105.28.11
                                  O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
                                  O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
                                  O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
                                  O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
                                  O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
                                  O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
                                  O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
                                  O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll -  File not found
                                  O24 - Desktop WallPaper: C:\Documents and Settings\Trent Berger\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
                                  O24 - Desktop BackupWallPaper: C:\Documents and Settings\Trent Berger\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
                                  O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
                                  O32 - HKLM CDRom: AutoRun - 1
                                  O32 - AutoRun File - [2005/08/16 04:43:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
                                  O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell - "" = AutoRun
                                  O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun - "" = Auto&Play
                                  O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe -- File not found
                                  O35 - HKLM\..comfile [open] -- "%1" %*
                                  O35 - HKLM\..exefile [open] -- "%1" %*
                                  O37 - HKLM\...com [@ = comfile] -- "%1" %*
                                  O37 - HKLM\...exe [@ = exefile] -- "%1" %*
                                   
                                  NetSvcs: 6to4 -  File not found
                                  NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
                                  NetSvcs: Ias -  File not found
                                  NetSvcs: Iprip -  File not found
                                  NetSvcs: Irmon -  File not found
                                  NetSvcs: NWCWorkstation -  File not found
                                  NetSvcs: Nwsapagent -  File not found
                                  NetSvcs: WmdmPmSp -  File not found
                                   
                                  MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ymetray.lnk - C:\PROGRA~1\Yahoo!\YAHOO!~1\ymetray.exe - File not found
                                  MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe File not found
                                  MsConfig - StartUpReg: DellSupportCenter - hkey= - key= - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
                                  MsConfig - StartUpReg: dscactivate - hkey= - key= - C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
                                  MsConfig - StartUpReg: IgfxTray - hkey= - key= - Reg Error: Value error. File not found
                                  MsConfig - StartUpReg: MSMSGS - hkey= - key= - Reg Error: Value error. File not found
                                  MsConfig - StartUpReg: QuickTime Task - hkey= - key= - Reg Error: Value error. File not found
                                  MsConfig - StartUpReg: TkBellExe - hkey= - key= - Reg Error: Value error. File not found
                                  MsConfig - StartUpReg: VerizonServicepoint.exe - hkey= - key= - C:\Program Files\Verizon\VSP\VerizonServicepoint.exe File not found
                                  MsConfig - StartUpReg: Yahoo! Pager - hkey= - key= - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe File not found
                                  MsConfig - StartUpReg: YBrowser - hkey= - key= - C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe File not found
                                  MsConfig - StartUpReg: ymetray - hkey= - key= - C:\Program Files\Yahoo!\Yahoo! Music Engine\YahooMusicEngine.exe File not found
                                  MsConfig - State: "system.ini" - 0
                                  MsConfig - State: "win.ini" - 0
                                  MsConfig - State: "bootini" - 0
                                  MsConfig - State: "services" - 0
                                  MsConfig - State: "startup" - 2
                                   
                                  SafeBootMin: Base - Driver Group
                                  SafeBootMin: Boot Bus Extender - Driver Group
                                  SafeBootMin: Boot file system - Driver Group
                                  SafeBootMin: File system - Driver Group
                                  SafeBootMin: Filter - Driver Group
                                  SafeBootMin: mcmscsvc - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
                                  SafeBootMin: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
                                  SafeBootMin: PCI Configuration - Driver Group
                                  SafeBootMin: PNP Filter - Driver Group
                                  SafeBootMin: Primary disk - Driver Group
                                  SafeBootMin: SCSI Class - Driver Group
                                  SafeBootMin: sermouse.sys - Driver
                                  SafeBootMin: System Bus Extender - Driver Group
                                  SafeBootMin: vds - Service
                                  SafeBootMin: vga.sys - Driver
                                  SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                                  SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                                  SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                                  SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                                  SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                                  SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                                  SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                                  SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                                  SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                                  SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                                  SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                                  SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
                                  SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                                  SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                                   
                                  SafeBootNet: Base - Driver Group
                                  SafeBootNet: Boot Bus Extender - Driver Group
                                  SafeBootNet: Boot file system - Driver Group
                                  SafeBootNet: File system - Driver Group
                                  SafeBootNet: Filter - Driver Group
                                  SafeBootNet: mcmscsvc - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
                                  SafeBootNet: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
                                  SafeBootNet: MpfService - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
                                  SafeBootNet: NDIS Wrapper - Driver Group
                                  SafeBootNet: NetBIOSGroup - Driver Group
                                  SafeBootNet: NetDDEGroup - Driver Group
                                  SafeBootNet: Network - Driver Group
                                  SafeBootNet: NetworkProvider - Driver Group
                                  SafeBootNet: PCI Configuration - Driver Group
                                  SafeBootNet: PNP Filter - Driver Group
                                  SafeBootNet: PNP_TDI - Driver Group
                                  SafeBootNet: Primary disk - Driver Group
                                  SafeBootNet: SCSI Class - Driver Group
                                  SafeBootNet: sermouse.sys - Driver
                                  SafeBootNet: Streams Drivers - Driver Group
                                  SafeBootNet: System Bus Extender - Driver Group
                                  SafeBootNet: TDI - Driver Group
                                  SafeBootNet: vga.sys - Driver
                                  SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
                                  SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
                                  SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
                                  SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
                                  SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
                                  SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
                                  SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
                                  SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
                                  SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
                                  SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
                                  SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
                                  SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
                                  SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
                                  SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
                                  SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
                                  SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
                                  SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
                                   
                                  ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
                                  ActiveX: {0430454D-47EA-11D6-AD58-00010333D0AD} - Reg Error: Value error.
                                  ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
                                  ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
                                  ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1
                                  ActiveX: {1803B9EF-9905-4F34-AFC4-05D1BAB28801} - Reg Error: Value error.
                                  ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
                                  ActiveX: {1BC46932-21B2-4130-86E0-B4EB4F7A7A7B} - Microsoft .NET Framework 1.0 Hotfix (KB887998)
                                  ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
                                  ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
                                  ActiveX: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} - Reg Error: Value error.
                                  ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0
                                  ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
                                  ActiveX: {29E7D24F-BF30-45E7-8A40-AD27AFD8F5C6} - Microsoft .NET Framework 1.0 Hotfix (KB979904)
                                  ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0
                                  ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
                                  ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
                                  ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
                                  ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
                                  ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
                                  ActiveX: {407408d4-94ed-4d86-ab69-a7f649d112ee} - %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection QuickLaunchShortcut 640 %systemroot%\inf\mcdftreg.inf
                                  ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
                                  ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
                                  ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
                                  ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
                                  ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
                                  ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
                                  ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
                                  ActiveX: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} - Reg Error: Value error.
                                  ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
                                  ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
                                  ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
                                  ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
                                  ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
                                  ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
                                  ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
                                  ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
                                  ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
                                  ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders
                                  ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
                                  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
                                  ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
                                  ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
                                  ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
                                  ActiveX: {924C1588-90C3-4910-B6CA-D57A1C0418FE} - Reg Error: Value error.
                                  ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
                                  ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider
                                  ActiveX: {BDE0FA43-6952-4BA8-8C58-09AF690F88E1} - Microsoft .NET Framework 1.0 Hotfix (KB930494)
                                  ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
                                  ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
                                  ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
                                  ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
                                  ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
                                  ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
                                  ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
                                  ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Yahoo! Messenger
                                  ActiveX: {E8EA5BD6-D931-4001-ABF6-81BAA500360A} - Microsoft .NET Framework 1.0 Hotfix (KB953295)
                                  ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
                                  ActiveX: {EA29D410-CE41-4953-A862-2DE706A1DAD7} - Microsoft .NET Framework 1.0 Service Pack 3
                                  ActiveX: {FDC11A6F-17D1-48f9-9EA3-9051954BAA24} - .NET Framework
                                  ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
                                  ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
                                  ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
                                  ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
                                  ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
                                  ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
                                  ActiveX: KB910393 - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\EasyCDBlock.inf,PerUserInstall
                                   
                                  Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
                                  Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
                                  Drivers32: MSACM.MSNAUDIO - C:\WINDOWS\System32\MSNAUDIO.ACM (Microsoft Corporation)
                                  Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
                                  Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
                                  Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
                                  Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
                                  Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
                                  Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
                                  Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
                                  Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
                                  Drivers32: wave - C:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)
                                   
                                  ========== Files/Folders - Created Within 90 Days ==========
                                   
                                  [2010/08/15 00:48:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\Local Settings\Application Data\Apple
                                  [2010/08/13 22:50:35 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
                                  [2010/08/13 22:34:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Trent Berger\My Documents\My Videos
                                  [2010/08/11 01:31:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Downloads
                                  [2010/08/10 14:03:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\UCONN General
                                  [2010/08/10 14:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\UCONN Classes
                                  [2010/08/10 14:02:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Travel
                                  [2010/08/10 14:02:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Sports
                                  [2010/08/10 14:02:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Shopping Plan
                                  [2010/08/10 14:02:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Schedule
                                  [2010/08/10 14:02:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Relocation
                                  [2010/08/10 14:01:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Regions and Sports Inquiry
                                  [2010/08/10 14:00:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Personal Notes
                                  [2010/08/10 14:00:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Personal Finance
                                  [2010/08/10 14:00:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Northeastern Classes
                                  [2010/08/10 14:00:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Misc Notes
                                  [2010/08/10 14:00:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\IBS Notes and Guide
                                  [2010/08/10 14:00:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\House Notes
                                  [2010/08/10 14:00:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Health Professionals and Notes
                                  [2010/08/10 14:00:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Gym
                                  [2010/08/10 14:00:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Food Grocery, Rests, Recipe, and Eat Directions
                                  [2010/08/10 14:00:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Computer, TV, Radio, Cell, iPod, Internet
                                  [2010/08/10 14:00:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\My Documents\Career
                                  [2010/07/23 01:01:49 | 000,000,000 | ---D | C] -- C:\spoolerlogs
                                  [2010/06/29 00:54:01 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Trent Berger\IECompatCache
                                  [2010/06/18 13:32:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Trent Berger\Application Data\U3
                                  [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
                                  [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
                                   
                                  ========== Files - Modified Within 90 Days ==========
                                   
                                  [2010/08/15 04:04:02 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
                                  [2010/08/15 04:00:58 | 000,000,292 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-614667138-659496962-2533976660-1008.job
                                  [2010/08/15 04:00:57 | 000,000,300 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-614667138-659496962-2533976660-1008.job
                                  [2010/08/15 03:30:00 | 000,000,440 | ---- | M] () -- C:\WINDOWS\tasks\RegistrySmart Scheduled Scan.job
                                  [2010/08/15 03:30:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\tasks\ErrorSmart Scheduled Scan.job
                                  [2010/08/15 02:14:15 | 000,000,374 | ---- | M] () -- C:\WINDOWS\dellstat.ini
                                  [2010/08/15 01:21:27 | 000,000,354 | ---- | M] () -- C:\WINDOWS\tasks\McDefragTask.job
                                  [2010/08/15 00:46:56 | 000,002,137 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
                                  [2010/08/15 00:33:32 | 000,043,008 | ---- | M] () -- C:\Documents and Settings\Trent Berger\My Documents\VOLPE Questions.doc
                                  [2010/08/15 00:09:40 | 000,000,292 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-614667138-659496962-2533976660-1006.job
                                  [2010/08/15 00:09:39 | 000,000,300 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-614667138-659496962-2533976660-1006.job
                                  [2010/08/14 17:46:42 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
                                  [2010/08/14 14:51:31 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\null
                                  [2010/08/14 13:21:06 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
                                  [2010/08/14 12:04:00 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
                                  [2010/08/14 08:05:49 | 000,009,963 | ---- | M] () -- C:\WINDOWS\System32\Config.MPF
                                  [2010/08/14 08:04:41 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
                                  [2010/08/14 08:04:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
                                  [2010/08/14 08:04:37 | 1063,407,616 | -HS- | M] () -- C:\hiberfil.sys
                                  [2010/08/14 04:37:07 | 003,407,872 | -H-- | M] () -- C:\Documents and Settings\Trent Berger\ntuser.dat
                                  [2010/08/14 04:37:07 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Trent Berger\ntuser.ini
                                  [2010/08/12 12:41:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
                                  [2010/08/11 18:50:02 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
                                  [2010/08/11 16:57:27 | 000,033,578 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\lastscan.JPG
                                  [2010/08/11 06:25:01 | 000,317,152 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
                                  [2010/08/11 04:52:01 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
                                  [2010/08/11 04:49:02 | 000,503,304 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
                                  [2010/08/11 04:49:02 | 000,442,466 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
                                  [2010/08/11 04:49:02 | 000,071,732 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
                                  [2010/08/01 22:00:00 | 000,000,398 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag.job
                                  [2010/08/01 01:00:11 | 000,000,332 | ---- | M] () -- C:\WINDOWS\tasks\McQcTask.job
                                  [2010/07/15 15:18:22 | 000,120,136 | ---- | M] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\Mpfp.sys
                                  [2010/07/12 06:27:39 | 000,000,051 | ---- | M] () -- C:\WINDOWS\lexstat.ini
                                  [2010/07/03 23:36:30 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\Trent Berger\My Documents\Montauk.doc
                                  [2010/07/02 04:11:09 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
                                  [2010/06/22 17:13:56 | 000,226,728 | R--- | M] (Coupons, Inc.) -- C:\WINDOWS\System32\cpnprt2.cid
                                  [3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
                                  [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
                                   
                                  ========== Files Created - No Company Name ==========
                                   
                                  [2010/08/13 18:01:32 | 000,043,008 | ---- | C] () -- C:\Documents and Settings\Trent Berger\My Documents\VOLPE Questions.doc
                                  [2010/08/10 14:03:59 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\Trent Berger\My Documents\Montauk.doc
                                  [2010/05/26 13:00:48 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
                                  [2009/08/15 12:33:11 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\AscSQLite.dll
                                  [2008/07/01 23:43:16 | 000,000,165 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI
                                  [2007/10/11 03:28:37 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
                                  [2007/08/21 12:33:57 | 000,000,018 | ---- | C] () -- C:\WINDOWS\msoffice.ini
                                  [2007/07/11 02:55:07 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
                                  [2007/06/28 17:09:04 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\SDL.dll
                                  [2007/06/18 23:13:02 | 000,760,531 | ---- | C] () -- C:\WINDOWS\System32\avformat-51.dll
                                  [2007/06/18 23:12:56 | 000,097,358 | ---- | C] () -- C:\WINDOWS\System32\avutil-49.dll
                                  [2007/06/18 17:56:40 | 002,041,856 | ---- | C] () -- C:\WINDOWS\System32\avcodec-51.dll
                                  [2007/06/18 17:56:02 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\swscale-0.dll
                                  [2007/06/02 09:22:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\webica.ini
                                  [2007/05/25 12:40:21 | 000,000,004 | ---- | C] () -- C:\WINDOWS\uccspecb.sys
                                  [2007/02/19 22:32:46 | 000,000,037 | ---- | C] () -- C:\WINDOWS\marscam.ini
                                  [2007/01/13 21:15:04 | 000,000,125 | ---- | C] () -- C:\WINDOWS\APOapp.INI
                                  [2007/01/13 21:06:17 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\mr310exv.dll
                                  [2007/01/13 21:06:17 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\mr310exd.dll
                                  [2006/09/07 17:46:31 | 000,000,051 | ---- | C] () -- C:\WINDOWS\lexstat.ini
                                  [2006/09/03 17:59:31 | 000,000,374 | ---- | C] () -- C:\WINDOWS\dellstat.ini
                                  [2006/09/03 17:59:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\dlbkvs.dll
                                  [2006/09/03 17:58:41 | 000,000,255 | ---- | C] () -- C:\WINDOWS\System32\dlbkcoin.ini
                                  [2006/09/01 14:15:04 | 000,000,047 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
                                  [2006/08/29 12:23:06 | 000,006,048 | ---- | C] () -- C:\WINDOWS\System32\MCC16.dll
                                  [2006/07/30 14:52:44 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\YCRWin32.dll
                                  [2006/06/24 19:43:51 | 000,006,686 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
                                  [2006/06/24 19:43:51 | 000,000,168 | RHS- | C] () -- C:\WINDOWS\System32\91158AE4D0.sys
                                  [2006/06/23 13:55:32 | 000,000,030 | ---- | C] () -- C:\WINDOWS\atid.ini
                                  [2006/06/19 14:06:18 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
                                  [2006/06/19 14:02:36 | 000,000,339 | ---- | C] () -- C:\WINDOWS\wininit.ini
                                  [2006/06/19 13:59:08 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
                                  [2006/06/19 13:55:31 | 000,712,704 | ---- | C] () -- C:\WINDOWS\System32\DellSystemRestore.dll
                                  [2006/06/19 13:27:38 | 000,000,392 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
                                  [2005/08/16 04:37:24 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
                                  [2005/08/05 14:01:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
                                   
                                  ========== LOP Check ==========
                                   
                                  [2008/07/31 23:48:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\acccore
                                  [2009/07/23 10:10:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AIM Toolbar
                                  [2008/02/09 01:50:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Citrix
                                  [2008/02/08 18:29:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SupportSoft
                                  [2008/07/29 03:34:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
                                  [2009/07/23 10:09:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
                                  [2010/04/15 04:17:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\YAHOO
                                  [2010/04/15 04:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ZKS_COMPANY_SUBDIR
                                  [2006/11/22 16:19:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Trent Berger\Application Data\acccore
                                  [2006/08/26 23:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Trent Berger\Application Data\Sereniti
                                  [2007/01/11 19:12:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Trent Berger\Application Data\Viewpoint
                                  [2010/08/12 12:41:00 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
                                  [2010/08/15 03:30:00 | 000,000,416 | ---- | M] () -- C:\WINDOWS\Tasks\ErrorSmart Scheduled Scan.job
                                  [2010/08/15 01:21:27 | 000,000,354 | ---- | M] () -- C:\WINDOWS\Tasks\McDefragTask.job
                                  [2010/08/01 01:00:11 | 000,000,332 | ---- | M] () -- C:\WINDOWS\Tasks\McQcTask.job
                                  [2010/08/15 03:30:00 | 000,000,440 | ---- | M] () -- C:\WINDOWS\Tasks\RegistrySmart Scheduled Scan.job
                                  [2010/08/01 22:00:00 | 000,000,398 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag.job
                                   
                                  ========== Purity Check ==========
                                   
                                   
                                   
                                  ========== Custom Scans ==========
                                   
                                   
                                  < %SYSTEMDRIVE%\*.exe >
                                  [2005/10/31 11:56:00 | 000,700,416 | ---- | M] (LimeWire) -- C:\StubInstaller.exe
                                   
                                  < %systemroot%\*. /mp /s >
                                   
                                  < c:\$recycle.bin\*.* /s >
                                   
                                  < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-08-11 08:52:13
                                   
                                   
                                  < MD5 for: AGP440.SYS  >
                                  [2004/08/10 05:00:00 | 016,971,599 | ---- | M] () .cab file -- C:\i386\sp2.cab:AGP440.sys
                                  [2004/08/10 05:00:00 | 016,971,599 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
                                  [2008/08/07 20:17:40 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
                                  [2008/08/07 20:17:40 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
                                  [2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
                                  [2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
                                  [2004/08/03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\i386\AGP440.SYS
                                  [2004/08/03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
                                   
                                  < MD5 for: ATAPI.SYS  >
                                  [2004/08/10 05:00:00 | 016,971,599 | ---- | M] () .cab file -- C:\i386\sp2.cab:atapi.sys
                                  [2004/08/10 05:00:00 | 016,971,599 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
                                  [2008/08/07 20:17:40 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
                                  [2008/08/07 20:17:40 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
                                  [2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
                                  [2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
                                  [2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\i386\atapi.sys
                                  [2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
                                  [2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys
                                  [2004/08/03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\atapi.sys
                                   
                                  < MD5 for: AUTOCHK.EXE  >
                                  [2008/04/13 20:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
                                  [2008/04/13 20:12:12 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=23043C91A0F9DFB4B9E9F87B680863B4 -- C:\WINDOWS\system32\autochk.exe
                                  [2004/08/10 05:00:00 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- C:\i386\autochk.exe
                                  [2004/08/10 05:00:00 | 000,588,800 | ---- | M] (Microsoft Corporation) MD5=B3415B9D6026F65E43089ABED096C38C -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
                                   
                                  < MD5 for: BEEP.SYS  >
                                  [2004/08/10 05:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\i386\beep.sys
                                  [2004/08/10 05:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) MD5=DA1F27D85E0D1525F6621372E7B685E9 -- C:\WINDOWS\system32\drivers\beep.sys
                                   
                                  < MD5 for: EVENTLOG.DLL  >
                                  [2008/04/13 20:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
                                  [2008/04/13 20:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
                                  [2004/08/10 05:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\i386\eventlog.dll
                                  [2004/08/10 05:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
                                   
                                  < MD5 for: EXPLORER.EXE  >
                                  [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
                                  [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
                                  [2007/06/13 07:26:03 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=7712DF0CDDE3A5AC89843E61CD5B3658 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
                                  [2007/06/13 06:23:07 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=97BD6515465659FF8F3B7BE375B2EA87 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
                                  [2004/08/10 05:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
                                   
                                  < MD5 for: IMM32.DLL  >
                                  [2008/04/13 20:11:54 | 000,110,080 | ---- | M] (Microsoft Corporation) MD5=0DA85218E92526972A821587E6A8BF8F -- C:\WINDOWS\ServicePackFiles\i386\imm32.dll
                                  [2008/04/13 20:11:54 | 000,110,080 | ---- | M] (Microsoft Corporation) MD5=0DA85218E92526972A821587E6A8BF8F -- C:\WINDOWS\system32\imm32.dll
                                  [2004/08/10 05:00:00 | 000,110,080 | ---- | M] (Microsoft Corporation) MD5=87CA7CE6469577F059297B9D6556D66D -- C:\i386\imm32.dll
                                  [2004/08/10 05:00:00 | 000,110,080 | ---- | M] (Microsoft Corporation) MD5=87CA7CE6469577F059297B9D6556D66D -- C:\WINDOWS\$NtServicePackUninstall$\imm32.dll
                                   
                                  < MD5 for: KERNEL32.DLL  >
                                  [2007/04/16 12:07:27 | 000,986,112 | ---- | M] (Microsoft Corporation) MD5=09F7CB3687F86EDAA4CA081F7AB66C03 -- C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll
                                  [2006/07/05 06:57:10 | 000,985,088 | ---- | M] (Microsoft Corporation) MD5=0FDD84928A5DDE2510761B7EC76CCEC9 -- C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll
                                  [2004/08/10 05:00:00 | 000,983,552 | ---- | M] (Microsoft Corporation) MD5=888190E31455FAD793312F8D087146EB -- C:\i386\kernel32.dll
                                  [2004/08/10 05:00:00 | 000,983,552 | ---- | M] (Microsoft Corporation) MD5=888190E31455FAD793312F8D087146EB -- C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll
                                  [2007/04/16 11:52:53 | 000,984,576 | ---- | M] (Microsoft Corporation) MD5=A01F9CA902A88F7CED06884174D6419D -- C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll
                                  [2009/03/21 10:06:58 | 000,989,696 | ---- | M] (Microsoft Corporation) MD5=B921FB870C9AC0D509B2CCABBBBE95F3 -- C:\WINDOWS\system32\dllcache\kernel32.dll
                                  [2009/03/21 10:06:58 | 000,989,696 | ---- | M] (Microsoft Corporation) MD5=B921FB870C9AC0D509B2CCABBBBE95F3 -- C:\WINDOWS\system32\kernel32.dll
                                  [2008/04/13 20:11:56 | 000,989,696 | ---- | M] (Microsoft Corporation) MD5=C24B983D211C34DA8FCC1AC38477971D -- C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll
                                  [2008/04/13 20:11:56 | 000,989,696 | ---- | M] (Microsoft Corporation) MD5=C24B983D211C34DA8FCC1AC38477971D -- C:\WINDOWS\ServicePackFiles\i386\kernel32.dll
                                  [2006/07/05 06:55:01 | 000,984,064 | ---- | M] (Microsoft Corporation) MD5=D8DB5397DE07577C1CB50BA6D23B3AD4 -- C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll
                                  [2009/03/21 09:59:23 | 000,991,744 | ---- | M] (Microsoft Corporation) MD5=DA11D9D6ECBDF0F93436A4B7C13F7BEC -- C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll
                                   
                                  < MD5 for: MSWSOCK.DLL  >
                                  [2008/06/20 13:41:10 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=097722F235A1FB698BF9234E01B52637 -- C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll
                                  [2008/06/20 13:36:11 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=1DFCA7713EA5A70D5D93B436AEA0317A -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
                                  [2004/08/10 05:00:00 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=4E74AF063C3271FBEA20DD940CFD1184 -- C:\i386\mswsock.dll
                                  [2004/08/10 05:00:00 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=4E74AF063C3271FBEA20DD940CFD1184 -- C:\WINDOWS\$NtUninstallKB951748_0$\mswsock.dll
                                  [2008/06/20 13:46:57 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=832E4DD8964AB7ACC880B2837CB1ED20 -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
                                  [2008/06/20 13:46:57 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=832E4DD8964AB7ACC880B2837CB1ED20 -- C:\WINDOWS\system32\dllcache\mswsock.dll
                                  [2008/06/20 13:46:57 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=832E4DD8964AB7ACC880B2837CB1ED20 -- C:\WINDOWS\system32\mswsock.dll
                                  [2008/04/13 20:12:01 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=B4138E99236F0F57D4CF49BAE98A0746 -- C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll
                                  [2008/04/13 20:12:01 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=B4138E99236F0F57D4CF49BAE98A0746 -- C:\WINDOWS\ServicePackFiles\i386\mswsock.dll
                                  [2008/06/20 13:43:05 | 000,245,248 | ---- | M] (Microsoft Corporation) MD5=FCEE5FCB99F7C724593365C706D28388 -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
                                   
                                  < MD5 for: NDIS.SYS  >
                                  [2008/04/13 15:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
                                  [2008/04/13 15:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
                                  [2004/08/10 05:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\i386\ndis.sys
                                  [2004/08/10 05:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
                                   
                                  < MD5 for: NETLOGON.DLL  >
                                  [2008/04/13 20:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
                                  [2008/04/13 20:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\syste

                                  bluecountry

                                    Topic Starter


                                    Apprentice

                                    Thanked: 1
                                    Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                    « Reply #28 on: August 15, 2010, 02:13:27 AM »
                                    3) Just went on the infected PC...still can not access the internet on firefox or ie.

                                    -Went to the run...cmd...typed ipconfig...and it said the following

                                    Quote
                                    Windows IP Configuration

                                    An internal error occured: The request is not supported.

                                    Please contact Microsoft Product Support Services for further help.

                                    Additional information: Unable to query host name.

                                    Does this help?

                                    SuperDave

                                    • Malware Removal Specialist
                                    • Moderator


                                    • Genius
                                    • Thanked: 1020
                                    • Certifications: List
                                    • Experience: Expert
                                    • OS: Windows 10
                                    Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                    « Reply #29 on: August 15, 2010, 12:59:56 PM »
                                    Quote
                                    I assume you meant to do this on the good PC?
                                    From which computer is the OTL log from?

                                    Do you have an XP CD?

                                    If so, place it in your CD ROM drive and follow the instructions below:
                                    •Click on Start > Run and type sfc /scannow then press Enter (note the space between scf and /scannow)
                                    *Let this run undisturbed until the window with the blue  progress bar goes away
                                    SFC - Which stands for System File Checker, retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.

                                    Even if you don't have the OS CD, please run SFC anyway. If it stops and asks for the CD, we'll know that some files are corrupted.
                                    Windows 8 and Windows 10 dual boot with two SSD's

                                    bluecountry

                                      Topic Starter


                                      Apprentice

                                      Thanked: 1
                                      Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                      « Reply #30 on: August 15, 2010, 01:20:53 PM »
                                      You never said which PC to run it from.
                                      The OTL were run off the good PC, since there is no way I could download OTL on the infected PC with no IP access.

                                      Which PC do you want the sfc scan run from?
                                      Could I request in the future, may you specify which PC to do scans/other things from?

                                      Thanks.


                                      Also...since we fixed the infected PC to now sign on normally, why is it that I can not access the internet even though I am connected and what can be done?

                                      bluecountry

                                        Topic Starter


                                        Apprentice

                                        Thanked: 1
                                        Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                        « Reply #31 on: August 15, 2010, 02:38:10 PM »
                                        OK when I tried on the good PC the black cmd screen popped up and vanished instantly.

                                        I tried on the infected PC....it ran until this message popped up

                                        Quote
                                        Files that are required for windows to run properly must be copied to the DLL Cache.

                                        Insert your Windows XP Professional CD-ROM now.

                                        The only CDs I have are
                                        -Windows XP Service Pack 2
                                        -Application (For re-installing Dell Tools System Software)
                                        -Operating System (Reinstallion CD Microsoft Windows XP Professional Including Service Pack 1a)
                                        -Drivers and Utilities (For reinstalling Dell Inspiron System Software)


                                        I inserted the XP Service Pack 2 on the infected PC and was told it was the wrong disc.
                                        I then inserted the Operating System (Reinstallion CD Microsoft Windows XP Professional Including Service Pack 1a) into the infected PC...and the scan resumed

                                        After it finshed the bar vanishes...and I still can't get on the internet

                                        SuperDave

                                        • Malware Removal Specialist
                                        • Moderator


                                        • Genius
                                        • Thanked: 1020
                                        • Certifications: List
                                        • Experience: Expert
                                        • OS: Windows 10
                                        Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                        « Reply #32 on: August 15, 2010, 04:13:46 PM »
                                        Quote
                                        Which PC do you want the sfc scan run from?
                                        Could I request in the future, may you specify which PC to do scans/other things from?
                                        Let's just work on the originally infected computer. You will have to download any programs and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

                                        Ok. We need to clear your DNS cache.

                                        Please navigate to Start>Run and type cmd

                                        in the window that pops up type ipconfig /flushdns

                                        ***************************************

                                        Download the Fix IE Utility to your desktop.

                                        Before running the utility, make sure that all your Internet Explorer windows are closed!

                                        * Extract the contents of the .zip file to your desktop.
                                        * Double click the Fix IE Utility button to run the tool.
                                        * Click Run Utility
                                        * Click OK when you see 'Re-registered all files'
                                        * Open Internet Explorer and see how it works.

                                        Windows 8 and Windows 10 dual boot with two SSD's

                                        bluecountry

                                          Topic Starter


                                          Apprentice

                                          Thanked: 1
                                          Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                          « Reply #33 on: August 15, 2010, 09:12:12 PM »
                                          Let's just work on the originally infected computer. You will have to download any programs and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.

                                          Ok. We need to clear your DNS cache.

                                          Please navigate to Start>Run and type cmd

                                          in the window that pops up type ipconfig /flushdns

                                          ***************************************


                                          Again, I assume you meant on this and here after on the infected pc only.
                                          I did this on the infected PC, and I got the same message I got last night when I typed IPconfig:

                                          Quote
                                          Windows IP Configuration

                                          An internal error occured: The request is not supported.

                                          Please contact Microsoft Product Support Services for further help.

                                          Additional information: Unable to query host name.

                                          bluecountry

                                            Topic Starter


                                            Apprentice

                                            Thanked: 1
                                            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                            « Reply #34 on: August 15, 2010, 09:32:10 PM »
                                            Quote
                                            Download the Fix IE Utility to your desktop.

                                            Before running the utility, make sure that all your Internet Explorer windows are closed!

                                            * Extract the contents of the .zip file to your desktop.
                                            * Double click the Fix IE Utility button to run the tool.
                                            * Click Run Utility
                                            * Click OK when you see 'Re-registered all files'
                                            * Open Internet Explorer and see how it works.

                                            ........Done...........and told

                                            "Internet Explorer cannot display the webpage"


                                            NOTHING works!!!

                                            I still do not get why I am perfectly connected to the internet but can't access it????
                                            The virus is gone.

                                            evilfantasy

                                            • Malware Removal Specialist
                                            • Moderator


                                            • Genius
                                            • Calm like a bomb
                                            • Thanked: 493
                                            • Experience: Experienced
                                            • OS: Windows 11
                                            Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                            « Reply #35 on: August 16, 2010, 03:46:36 PM »
                                            Try this please. Reset Explorer Settings IE

                                            bluecountry

                                              Topic Starter


                                              Apprentice

                                              Thanked: 1
                                              Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                              « Reply #36 on: August 25, 2010, 11:15:41 AM »
                                              OK...a few things

                                              1)  Congratulations!  Thanks to both SuperDave and EvilFantasy my PC is running and I am able to access the internet.
                                              -SuperDave got the PC to be able to turn on
                                              -Evil Fantasy and his latest post allowed me to get the internet

                                              I would like to personally thank the both of you for walking me through this complicated problem step-by-step.
                                              I know I lost patience and snapped a few times, this was quite lengthy, but thank you!

                                              How can I officially thank you both in your profile?
                                              I would have updated sooner, but I was out of town last week and only got around to the problem last night.

                                              2)  Given my expertise, would it be better to leave it alone or could we say what exactly the problem was?
                                              In your experience, did this come off as one of the more difficult problems?


                                              3)  While we fixed this virus, I have a 6 year old PC and want to get a clean bill of health.
                                              I went ahead and ran/download Java and did all the recommended scans.
                                              I have attached the logs below.
                                              Before I go onto business as usual, I want the PC running as safely, fastly, and best as possible.
                                              Would you mind going through these logs so we can get a clean bill of health?
                                              Lemme know so I can clear this out.



                                              Super Anti-Spyware
                                              Quote
                                              SUPERAntiSpyware Scan Log
                                              http://www.superantispyware.com

                                              Generated 08/25/2010 at 02:34 AM

                                              Application Version : 4.41.1000

                                              Core Rules Database Version : 5189
                                              Trace Rules Database Version: 3001

                                              Scan type       : Complete Scan
                                              Total Scan Time : 01:56:25

                                              Memory items scanned      : 513
                                              Memory threats detected   : 0
                                              Registry items scanned    : 6647
                                              Registry threats detected : 0
                                              File items scanned        : 63752
                                              File threats detected     : 0


                                              MBAM
                                              Quote
                                              Malwarebytes' Anti-Malware 1.46
                                              www.malwarebytes.org

                                              Database version: 4476

                                              Windows 5.1.2600 Service Pack 3
                                              Internet Explorer 8.0.6001.18702

                                              8/25/2010 12:29:46 PM
                                              mbam-log-2010-08-25 (12-29-46).txt

                                              Scan type: Quick scan
                                              Objects scanned: 141086
                                              Time elapsed: 12 minute(s), 7 second(s)

                                              Memory Processes Infected: 0
                                              Memory Modules Infected: 0
                                              Registry Keys Infected: 4
                                              Registry Values Infected: 1
                                              Registry Data Items Infected: 0
                                              Folders Infected: 1
                                              Files Infected: 3

                                              Memory Processes Infected:
                                              (No malicious items detected)

                                              Memory Modules Infected:
                                              (No malicious items detected)

                                              Registry Keys Infected:
                                              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{fe4c2c37-edc8-4c00-b864-3c38cf3ba834} (Adware.Adshot) -> Quarantined and deleted successfully.
                                              HKEY_CLASSES_ROOT\CLSID\{3436ec28-ccde-4a49-83a6-0b8dee619be3} (Trojan.BHO) -> Quarantined and deleted successfully.
                                              HKEY_CLASSES_ROOT\CLSID\{486bdd1d-bac7-4f82-8b68-38b1bd5378f2} (Trojan.BHO) -> Quarantined and deleted successfully.
                                              HKEY_CURRENT_USER\Software\SolutionAV (Rogue.AntivirSolutionPro) -> Quarantined and deleted successfully.

                                              Registry Values Infected:
                                              HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\settingsxx.exe (Spyware.SpyEyes) -> Quarantined and deleted successfully.

                                              Registry Data Items Infected:
                                              (No malicious items detected)

                                              Folders Infected:
                                              C:\settingsxx.exe (Spyware.SpyEyes) -> Quarantined and deleted successfully.

                                              Files Infected:
                                              C:\WINDOWS\system32\vugip.dll (Trojan.BHO) -> Quarantined and deleted successfully.
                                              C:\WINDOWS\system32\zugip.dll (Trojan.BHO) -> Quarantined and deleted successfully.
                                              C:\settingsxx.exe\config.bin (Spyware.SpyEyes) -> Quarantined and deleted successfully.



                                              HiJackThis
                                              Quote
                                              Logfile of Trend Micro HijackThis v2.0.2
                                              Scan saved at 1:23:59 PM, on 8/25/2010
                                              Platform: Windows XP SP3 (WinNT 5.01.2600)
                                              MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                                              Boot mode: Normal

                                              Running processes:
                                              C:\WINDOWS\System32\smss.exe
                                              C:\WINDOWS\system32\winlogon.exe
                                              C:\WINDOWS\system32\services.exe
                                              C:\WINDOWS\system32\lsass.exe
                                              C:\WINDOWS\system32\svchost.exe
                                              C:\WINDOWS\System32\svchost.exe
                                              C:\WINDOWS\System32\WLTRYSVC.EXE
                                              C:\WINDOWS\System32\bcmwltry.exe
                                              C:\Program Files\Emsisoft\Online Armor\OAcat.exe
                                              C:\Program Files\Emsisoft\Online Armor\oasrv.exe
                                              C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                                              C:\WINDOWS\system32\spoolsv.exe
                                              C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                                              C:\Program Files\Bonjour\mDNSResponder.exe
                                              C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
                                              C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                              C:\WINDOWS\system32\svchost.exe
                                              C:\WINDOWS\system32\WLTRAY.exe
                                              C:\WINDOWS\BCMSMMSG.exe
                                              C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
                                              C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
                                              C:\WINDOWS\System32\svchost.exe
                                              C:\WINDOWS\system32\nvsvc32.exe
                                              C:\Program Files\iTunes\iTunesHelper.exe
                                              C:\Program Files\Emsisoft\Online Armor\oaui.exe
                                              C:\WINDOWS\System32\svchost.exe
                                              C:\Program Files\Seagate\Sync\SeaSyncServices.exe
                                              C:\WINDOWS\system32\ctfmon.exe
                                              C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
                                              C:\WINDOWS\system32\svchost.exe
                                              C:\Program Files\Emsisoft\Online Armor\OAhlp.exe
                                              C:\Program Files\iPod\bin\iPodService.exe
                                              C:\WINDOWS\System32\svchost.exe
                                              C:\Program Files\Java\jre6\bin\jqs.exe
                                              C:\WINDOWS\explorer.exe
                                              C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
                                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.inbox.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=70001
                                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net
                                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xfinity.com/?cid=xfactiv_eg_self_main
                                              R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://dell.com/
                                              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522
                                              O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
                                              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
                                              O2 - BHO: AIM Toolbar Loader - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll
                                              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                              O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                                              O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
                                              O3 - Toolbar: AIM Toolbar - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll
                                              O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
                                              O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                              O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
                                              O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
                                              O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
                                              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                              O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
                                              O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
                                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                              O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Emsisoft\Online Armor\oaui.exe"
                                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
                                              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                              O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                                              O4 - HKUS\S-1-5-21-484763869-630328440-725345543-1003\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
                                              O4 - HKUS\S-1-5-21-484763869-630328440-725345543-1003\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User '?')
                                              O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User '?')
                                              O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User '?')
                                              O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
                                              O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
                                              O9 - Extra button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll
                                              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                                              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                                              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                                              O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
                                              O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
                                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                              O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
                                              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
                                              O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
                                              O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
                                              O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
                                              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                                              O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1215897936109
                                              O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll
                                              O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
                                              O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                                              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                                              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                                              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
                                              O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                              O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                                              O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                                              O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                              O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                              O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle - C:\Program Files\Java\jre6\bin\jqs.exe
                                              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                              O23 - Service: Online Armor Helper Service (OAcat) - Emsi Software GmbH - C:\Program Files\Emsisoft\Online Armor\OAcat.exe
                                              O23 - Service: Seagate Sync Service - Seagate Technology LLC - C:\Program Files\Seagate\Sync\SeaSyncServices.exe
                                              O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
                                              O23 - Service: Online Armor (SvcOnlineArmor) - Emsi Software GmbH - C:\Program Files\Emsisoft\Online Armor\oasrv.exe
                                              O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

                                              --
                                              End of file - 9823 bytes









                                              Thanks!

                                              bluecountry

                                                Topic Starter


                                                Apprentice

                                                Thanked: 1
                                                Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                                « Reply #37 on: August 25, 2010, 11:15:58 AM »
                                                4)  As I have been trying to clean out old files, I still am unable to delete civ4.  Years ago I got this from a friend, pirated style.
                                                It is located under downloads, every time I try and delete it tells me it cannot because "another program or person"
                                                It also is located in the "E" drive of my PC as well.

                                                Lemme know so I can clear this out.

                                                Thanks!

                                                SuperDave

                                                • Malware Removal Specialist
                                                • Moderator


                                                • Genius
                                                • Thanked: 1020
                                                • Certifications: List
                                                • Experience: Expert
                                                • OS: Windows 10
                                                Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                                « Reply #38 on: August 25, 2010, 04:27:37 PM »
                                                You could try deleting it in Safe Mode or download and install Unlocker to delete it.
                                                Windows 8 and Windows 10 dual boot with two SSD's

                                                bluecountry

                                                  Topic Starter


                                                  Apprentice

                                                  Thanked: 1
                                                  Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                                  « Reply #39 on: August 28, 2010, 01:23:18 PM »
                                                  OK so..........

                                                  1) Installed unlocker...under downloads in my documents it is now deleted.
                                                  -However....in my computer it still shows in the E drive.

                                                  -Next time I re-start my PC will it be gone?
                                                  -If not how can I remove it from E drive...or is it moot...is it gone?


                                                  2)  Otherwise given my logs, is my PC now given a clean bill of health?

                                                  3)  What was the big problem with it, and was this one of the worst you have seen?

                                                  4)  Thanks again, how can I officially thank you?

                                                  « Last Edit: September 03, 2010, 08:44:51 PM by evilfantasy »

                                                  evilfantasy

                                                  • Malware Removal Specialist
                                                  • Moderator


                                                  • Genius
                                                  • Calm like a bomb
                                                  • Thanked: 493
                                                  • Experience: Experienced
                                                  • OS: Windows 11
                                                  Re: Can't Get Onto Windows XP-Possibe Major PC Problem (Long)
                                                  « Reply #40 on: September 03, 2010, 08:47:13 PM »



                                                  Quote
                                                  1) Installed unlocker...under downloads in my documents it is now deleted.
                                                  -However....in my computer it still shows in the E drive.

                                                  -Next time I re-start my PC will it be gone?
                                                  -If not how can I remove it from E drive...or is it moot...is it gone?

                                                  Is it still there?


                                                  Quote
                                                  2)  Otherwise given my logs, is my PC now given a clean bill of health?

                                                  Your logs are  clean.

                                                  Quote
                                                  3)  What was the big problem with it, and was this one of the worst you have seen?

                                                  No it's far from the worst. Look back through the Malwarebytes and SUPERAntispyware logs and you will see what all was found/removed.

                                                  Quote
                                                  4)  Thanks again, how can I officially thank you?

                                                  I think you just did.  ;)