Author Topic: I cannot access the internet. (Read 58691 times)

jim.mar · « **on:** January 25, 2012, 01:23:45 PM »

I am not sure that this problem is a virus or not. It all started when I OKed an uupdate on my computer with service pack 1 (running windows 7 home premium).
I have a desktop computer that has had internet access via cable and ethernet input for years. A few years ago I installed a wireless router to allow me to access the internet on my laptop via wifi. Yesterday my main computer (the desktop) was unable to access the internet. Accept, once in a while (and while trying to use Chrome as my browser), I can get on to facebook. but not anything else.. Internet Explorer tries but cannot respond, the same happens with Firefox. I know that my internet connection, cable, is working because;
1) I do get facebook occasionally and
2) I can get full access to the internet with my laptop on wifi thru the browser.
I tried disconnecting the ethernet cable and immediately got an error message telling me about it.
My machine is running Windows 7 home premium, 64 bit
with an AMD Athlon II x4 processor on 4 GB of ram.
All of this started after I had updated my os with service pack 1. I have tried going back to before Service Pack 1, with "RESTORE" with no luck. I ran "malwarebytes" and "Superantispyware" (found one trojan") still no luck. Does anyone have any suggestions??

SuperDave · « **Reply #1 on:** January 25, 2012, 01:30:17 PM »

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
Please download MiniToolBox to Desktop and run it.

Checkmark the following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
List content of Hosts
List IP Configuration
Lst Last 10 Event Viewer Errors
List Users, Partitions and Memory Size
[/b]
Click Go and copy/paste the log (Result.txt) into your next post. .

jim.mar · « **Reply #2 on:** January 26, 2012, 11:14:34 AM »

SUPER DAVE: Thanks for the comeback. I have done as you have instructed. Log follows:

MiniToolBox by Farbar Version: 18-01-2012
Ran by JIM (administrator) on 26-01-2012 at 10:53:18
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Atheros AR8131 PCI-E Gigabit Ethernet Controller = Local Area Connection (Connected)

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global

popd
# End of IPv4 configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : Rosie
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Atheros AR8131 PCI-E Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 6C-62-6D-7B-E8-97
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::ac85:8b9d:d728:28b6%9(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.6(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Thursday, January 26, 2012 9:13:49 AM
Lease Expires . . . . . . . . . . : Friday, January 27, 2012 9:13:49 AM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 241984109
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-51-00-58-6C-62-6D-7B-E8-97
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{9F8D9178-14EC-465A-9768-9E35F078DAD7}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 10:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:c4f:2c46:b3a6:cf5a(Preferred)
Link-local IPv6 Address . . . . . : fe80::c4f:2c46:b3a6:cf5a%11(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 192.168.1.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
Name: google.com
Addresses: 74.125.224.177
     74.125.224.178
     74.125.224.179
     74.125.224.180
     74.125.224.176

Pinging google.com [74.125.224.210] with 32 bytes of data:
Reply from 74.125.224.210: bytes=32 time=28ms TTL=54
Reply from 74.125.224.210: bytes=32 time=27ms TTL=53

Ping statistics for 74.125.224.210:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 27ms, Maximum = 28ms, Average = 27ms
Server: UnKnown
Address: 192.168.1.1

Name: yahoo.com
Addresses: 98.139.180.149
     209.191.122.70
     72.30.2.43
     98.137.149.56

Pinging yahoo.com [98.137.149.56] with 32 bytes of data:
Reply from 98.137.149.56: bytes=32 time=48ms TTL=52
Reply from 98.137.149.56: bytes=32 time=44ms TTL=52

Ping statistics for 98.137.149.56:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 44ms, Maximum = 48ms, Average = 46ms
Server: UnKnown
Address: 192.168.1.1

Name: bleepingcomputer.com
Address: 208.43.87.2

Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:
Request timed out.
Request timed out.

Ping statistics for 208.43.87.2:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time=4ms TTL=128
Reply from 127.0.0.1: bytes=32 time=3ms TTL=128

Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 3ms, Maximum = 4ms, Average = 3ms
===========================================================================
Interface List
9...6c 62 6d 7b e8 97 ......Atheros AR8131 PCI-E Gigabit Ethernet Controller
1...........................Software Loopback Interface 1
10...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
11...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.6 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.6 276
192.168.1.6 255.255.255.255 On-link 192.168.1.6 276
192.168.1.255 255.255.255.255 On-link 192.168.1.6 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.6 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.6 276
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
11 58 ::/0 On-link
1 306 ::1/128 On-link
11 58 2001::/32 On-link
11 306 2001:0:4137:9e76:c4f:2c46:b3a6:cf5a/128
On-link
9 276 fe80::/64 On-link
11 306 fe80::/64 On-link
11 306 fe80::c4f:2c46:b3a6:cf5a/128
On-link
9 276 fe80::ac85:8b9d:d728:28b6/128
On-link
1 306 ff00::/8 On-link
11 306 ff00::/8 On-link
9 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

========================= Event log errors: ===============================

Application errors:
==================
Error: (01/26/2012 10:18:11 AM) (Source: Application Hang) (User: )
Description: The program WINWORD.EXE version 9.0.0.3822 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 130c

Start Time: 01ccdc499ee585ce

Termination Time: 1545

Application Path: C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE

Report Id: a9d22c57-4841-11e1-be39-6c626d7be897

Error: (01/26/2012 09:49:28 AM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 8.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1500

Start Time: 01ccdc4a680f98ba

Termination Time: 0

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: b34ab9e8-483d-11e1-be39-6c626d7be897

Error: (01/26/2012 09:49:27 AM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000005
Fault offset: 0x000a1d68
Faulting process id: 0x358
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (01/26/2012 09:39:51 AM) (Source: Application Hang) (User: )
Description: The program Explorer.exe version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 880

Start Time: 01ccdc4900e072f4

Termination Time: 31

Application Path: C:\Windows\Explorer.exe

Report Id: 588a23ee-483c-11e1-be39-6c626d7be897

Error: (01/26/2012 09:38:59 AM) (Source: Application Hang) (User: )
Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 7dc

Start Time: 01ccdb96b09f3b28

Termination Time: 60000

Application Path: C:\Windows\Explorer.EXE

Report Id: 132a2921-483c-11e1-be39-6c626d7be897

Error: (01/25/2012 01:52:41 PM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 8.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 984

Start Time: 01ccdba3346b3da9

Termination Time: 0

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: 82f36757-4796-11e1-be39-6c626d7be897

Error: (01/25/2012 01:19:14 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\
manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_
fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_
microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/25/2012 00:35:57 PM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 8.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1300

Start Time: 01ccdb9879f3f92a

Termination Time: 0

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: c8cab042-478b-11e1-be39-6c626d7be897

Error: (01/25/2012 00:35:53 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000005
Fault offset: 0x000a1d68
Faulting process id: 0xf80
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (01/25/2012 00:26:29 PM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 8.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1068

Start Time: 01ccdb97226d3167

Termination Time: 15

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: 750a572d-478a-11e1-be39-6c626d7be897

System errors:
=============
Error: (01/26/2012 10:48:19 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk2\DR3.

Error: (01/26/2012 10:48:18 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk2\DR3.

Error: (01/26/2012 10:48:17 AM) (Source: Disk) (User: )
Description: The driver detected a controller error on \Device\Harddisk2\DR3.

Error: (01/26/2012 10:19:17 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Error: (01/26/2012 10:19:10 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Error: (01/26/2012 10:19:04 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Error: (01/26/2012 10:18:58 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Error: (01/26/2012 10:18:51 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Error: (01/26/2012 10:18:43 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Error: (01/26/2012 10:18:37 AM) (Source: cdrom) (User: )
Description: The device, \Device\CdRom1, has a bad block.

Microsoft Office Sessions:
=========================
Error: (01/26/2012 10:18:11 AM) (Source: Application Hang)(User: )
Description: WINWORD.EXE9.0.0.3822130c01ccdc499ee585 ce1545C:\Program Files (x86)\
Microsoft Office\Office\WINWORD.EXEa9d22c57-4841-11e1-be39-6c626d7be897

Error: (01/26/2012 09:49:28 AM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7601.17514150001ccdc4a6 80f98ba0C:\Program Files (x86)\
Internet Explorer\iexplore.exeb34ab9e8-483d-11e1-be39-6c626d7be897

Error: (01/26/2012 09:49:27 AM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll .dll6.1.7601.
177254ec49b8fc0000005000a1d6835801ccdc4 a7777e0ddC:\Program Files (x86)\
Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dllb53c3980-483d-11e1-be39-6c626d7be897

Error: (01/26/2012 09:39:51 AM) (Source: Application Hang)(User: )
Description: Explorer.exe6.1.7601.1756788001ccdc4900 e072f431C:\Windows\Explorer.
exe588a23ee-483c-11e1-be39-6c626d7be897

Error: (01/26/2012 09:38:59 AM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7601.175677dc01ccdb96b0 9f3b2860000C:\Windows\Explorer.
EXE132a2921-483c-11e1-be39-6c626d7be897

Error: (01/25/2012 01:52:41 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7601.1751498401ccdba334 6b3da90C:\Program Files (x86)\
Internet Explorer\iexplore.exe82f36757-4796-11e1-be39-6c626d7be897

Error: (01/25/2012 01:19:14 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\
Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)
\ESET\eset online scanner\ESETSmartInstaller.exe

Error: (01/25/2012 00:35:57 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7601.17514130001ccdb987 9f3f92a0C:\Program Files (x86)\
Internet Explorer\iexplore.exec8cab042-478b-11e1-be39-6c626d7be897

Error: (01/25/2012 00:35:53 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll .dll6.1.7601.
177254ec49b8fc0000005000a1d68f8001ccdb9 88d12065aC:\Program Files (x86)\
Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dllcad8c05d-478b-11e1-be39-6c626d7be897

Error: (01/25/2012 00:26:29 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7601.17514106801ccdb972 26d316715C:\Program Files (x86)\
Internet Explorer\iexplore.exe750a572d-478a-11e1-be39-6c626d7be897

========================= Memory info: ===================================

Percentage of memory in use: 34%
Total physical RAM: 4095.18 MB
Available physical RAM: 2676.11 MB
Total Pagefile: 8188.55 MB
Available Pagefile: 6495.71 MB
Total Virtual: 4095.88 MB
Available Virtual: 3951.79 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:244.04 GB) (Free:188.08 GB) NTFS
2 Drive d: (Music) (Fixed) (Total:352.03 GB) (Free:265.06 GB) NTFS
3 Drive e: (Pers data) (Fixed) (Total:63.48 GB) (Free:36.25 GB) NTFS
4 Drive f: (Windows 7) (Fixed) (Total:12.86 GB) (Free:8.7 GB) NTFS
8 Drive l: () (Removable) (Total:3.74 GB) (Free:0.24 GB) FAT32

========================= Users: ========================================

User accounts for \\ROSIE

Administrator Guest JIM
Terri

**** End of log ****

SuperDave · « **Reply #3 on:** January 26, 2012, 12:23:55 PM »

SUPERAntiSpyware

If you already have SUPERAntiSpyware be sure to check for updates before scanning!

Download SuperAntispyware Free Edition (SAS)
* Double-click the icon on your desktop to run the installer.
* When asked to Update the program definitions, click Yes
* If you encounter any problems while downloading the updates, manually download and unzip them from here
* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
* Click the Scanning Control tab.
* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning
•Scan for tracking cookies
•Terminate memory threats before quarantining
•Please leave the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer
* On the left check the box for the drive you are scanning.
* On the right choose Perform Complete Scan
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click OK
* Make sure everything in the white box has a check next to it, then click Next
* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:
•After reboot, double-click the SUPERAntiSpyware icon on your desktop.
•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).
•Save the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
*Copy and Paste the log in your post.
************************************************

Please download Malwarebytes Anti-Malware from here.
Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Full Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
Please save the log to a location you will remember.
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
****************************************************
Download DDS from HERE or HERE and save it to your desktop.

Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

* XP users Double click on dds to run it.
* If your antivirus or firewall try to block DDS then please allow it to run.
* When finished DDS will open two (2) logs.
* Save both reports to your desktop.
* The instructions here ask you to attach the Attach.txt.

1) DDS.txt
2) Attach.txt
Instead of attaching, please copy/past both logs into your Thread

Note: DDS will instruct you to post the Attach.txt log as an attachment.
Please just post it as you would any other log by copying and pasting it into the reply.

•Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run.
After downloading the tool, disconnect from the internet and disable all antivirus protection.
Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control HERE .Then post your DDS logs. (DDS.txt and Attach.txt )

jim.mar · « **Reply #4 on:** January 27, 2012, 01:31:04 PM »

SUPERDAVE: OK, I am scanning with Superantispyware right now as I am writing on my laptop. I had to download the program on the laptop and move it to the desktop. I will copy the log and post it when it is finished. I have to use a flash drive as my laptop CD burner/reader is not compatible with my desktop CD burner/reader

FYI; Last night about 8;30 (mountain standard time) I received a call from somewhere in Asia telling me they were calling on behalf of Microsoft who was getting error reports from my computer, and that they were going to fix it for me. I had a hard time understanding them and when I asked how much they were going to charge me for their services they got very evasive so I hung up on them. Was I right or wrong to do that?

SuperDave · « **Reply #5 on:** January 27, 2012, 04:45:35 PM »

Quote

FYI; Last night about 8;30 (mountain standard time) I received a call from somewhere in Asia telling me they were calling on behalf of Microsoft who was getting error reports from my computer, and that they were going to fix it for me. I had a hard time understanding them and when I asked how much they were going to charge me for their services they got very evasive so I hung up on them. Was I right or wrong to do that?

You did the correct thing.

Salmon Trout · « **Reply #6 on:** January 27, 2012, 05:27:20 PM »

Quote

I received a call from somewhere in Asia telling me they were calling on behalf of Microsoft who was getting error reports from my computer

They come from "sweatshop" call centres in India. We get them here in England quite a lot, at one time I was getting 3 or 4 a week. British Telecom do not sell phone book information to third parties, but what happens is people acquire the paper phone books, guillotine off the spines, scan and OCR the pages, and get enough usable names, addresses and phone numbers to put on CDROMs and sell to "marketing" outfits including these phone spammers. Our landline phone number is listed against my girlfriend's name (let's call her Barbara Jones) but as "B Jones" (no gender specific title like Miss or Mr). My name isn't Jones, so if I answer the ringing phone and I say "Hi" in my male voice and they say "Is that Mr Jones?" I know at once it's one of these phone spammers. The heavy Indian accent gives it away anyhow. They usually say they are calling from the "Microsoft Security Centre" and they have detected "malware" on the computer "registered at your address" (which they quote). I often have fun playing around with these people, pretending to believe them etc. They use dreadful profanity when they realise what I am doing. They will ask you to look in event log, or type ASSOC at the RUN box, or something, and then tell you what you see as "proof" that you are infected, but for only $50 etc, etc.

jim.mar · « **Reply #7 on:** January 28, 2012, 10:57:48 AM »

Thank You Salmon Trout (aka B Jones): Now I am a little wiser. That was sthe third one that I have recieved over the past three years. At first I thought that they were legitimate but after they sked for $125.00 for a one year commitment, I wised up. Thanks again. IJIM

jim.mar · « **Reply #8 on:** January 28, 2012, 11:08:17 AM »

Super Dave,; following aae the logs for Super Antispy and MBAM. I have yet to do the DDS scan.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/27/2012 at 10:24 AM

Application Version : 5.0.1142

Core Rules Database Version : 8173
Trace Rules Database Version: 5985

Scan type : Quick Scan
Total Scan Time : 00:03:07

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 598
Memory threats detected : 0
Registry items scanned : 31174
Registry threats detected : 29
File items scanned : 11744
File threats detected : 203

Adware.EpicPlay
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}\InprocServer32
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}\InprocServer32#ThreadingModel
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}\ProgID
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}\Programmable
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}\TypeLib
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}\VersionIndependentProgID
   (x86) HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
   (x86) HKCR\CLSID\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
   (x86) HKCR\EpicPlay.TextLinks.1
   (x86) HKCR\EpicPlay.TextLinks.1\CLSID
   (x86) HKCR\EpicPlay.TextLinks
   (x86) HKCR\EpicPlay.TextLinks\CLSID
   (x86) HKCR\EpicPlay.TextLinks\CurVer
   (x86) HKCR\TypeLib\{7D5716DC-76B4-4421-908C-12A6E587F1C3}
   (x86) HKCR\TypeLib\{7D5716DC-76B4-4421-908C-12A6E587F1C3}\1.0
   (x86) HKCR\TypeLib\{7D5716DC-76B4-4421-908C-12A6E587F1C3}\1.0\0
   (x86) HKCR\TypeLib\{7D5716DC-76B4-4421-908C-12A6E587F1C3}\1.0\0\win32
   (x86) HKCR\TypeLib\{7D5716DC-76B4-4421-908C-12A6E587F1C3}\1.0\FLAGS
   (x86) HKCR\TypeLib\{7D5716DC-76B4-4421-908C-12A6E587F1C3}\1.0\HELPDIR
   C:\PROGRAM FILES (X86)\EPICPLAY\EPICPLAYGAMES.DLL
   (x86) HKU\S-1-5-21-3909975552-3371312792-2741729148-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56E4076B-A42B-4745-BA35-34DA8AC4C2F2}
   (x86) HKCR\Interface\{381F1945-55BB-4760-9050-726888B22C0F}
   (x86) HKCR\Interface\{381F1945-55BB-4760-9050-726888B22C0F}\ProxyStubClsid32
   (x86) HKCR\Interface\{381F1945-55BB-4760-9050-726888B22C0F}\TypeLib
   (x86) HKCR\Interface\{381F1945-55BB-4760-9050-726888B22C0F}\TypeLib#Version
   (x86) HKCR\Interface\{B351B62C-A449-4E8B-9A81-9FEB79C24384}
   (x86) HKCR\Interface\{B351B62C-A449-4E8B-9A81-9FEB79C24384}\ProxyStubClsid32
   (x86) HKCR\Interface\{B351B62C-A449-4E8B-9A81-9FEB79C24384}\TypeLib
   (x86) HKCR\Interface\{B351B62C-A449-4E8B-9A81-9FEB79C24384}\TypeLib#Version

Adware.Tracking Cookie
   .mediaplex.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adinterax.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adinterax.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .content.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   counter.surfcounters.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .yieldmanager.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .apmebf.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .r1-ads.ace.advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .imrworldwide.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .imrworldwide.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adserver.adtechus.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .mediabrandsww.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .mediaplex.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .doubleclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .paypal.112.2o7.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .stats.paypal.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .californiastateautomobileassociation.1 12.2o7.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .backingtracksonline.co.uk [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .backingtracksonline.co.uk [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .backingtracksonline.co.uk [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .www.burstnet.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ads.bridgetrack.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ads.bridgetrack.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ads.bridgetrack.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   track.totalvac.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .serving-sys.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   network.realmedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .liveperson.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .dealtime.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   stat.dealtime.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   tracking.waterfrontmedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .serving-sys.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .liveperson.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .liveperson.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   sales.liveperson.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .edge.ru4.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .edge.ru4.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .fastclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .fastclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   segment-pixel.invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .at.atwola.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .eyewonder.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .eyewonder.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .tribalfusion.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   statse.webtrendslive.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .microsoftsto.112.2o7.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ads.neudesicmediagroup.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ads.neudesicmediagroup.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ads.neudesicmediagroup.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .mediaplex.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .specificmedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .statcounter.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .questionmarket.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .questionmarket.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .nextag.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   www.kntrack.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   affiliate.utatracker.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .interclick.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .content.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .serving-sys.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .serving-sys.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   pixel.invitemedia.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\JIM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5PEQ3KB4.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\JIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .atdmt.com [ C:\USERS\JIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .doubleclick.net [ C:\USERS\JIM\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

============================================================

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7622

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

1/27/2012 2:26:16 PM
mbam-log-2012-01-27 (14-26-16).txt

Scan type: Full scan (C:\|E:\|F:\|)
Objects scanned: 459296
Time elapsed: 44 minute(s), 2 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

jim.mar · « **Reply #9 on:** January 28, 2012, 11:36:24 AM »

SusperDave: Following are the DDSlogs:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_29
Run by JIM at 11:17:52 on 2012-01-28
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4095.2638 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: PC Tools Firewall Plus *Enabled* {175D0B73-9F8F-2CA9-8BF1-62277A276DC9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\SysWOW64\svchost.exe -k Akamai
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Stickies\stickies.exe
C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Ask.com\Updater\Updater.exe
C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\taskmgr.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\taskeng.exe
C:\Users\JIM\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\JIM\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\msfeedssync.exe
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE
C:\Windows\splwow64.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/MAIL
uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
uURLSearchHooks: FCToolbarURLSearchHook Class: {f78bf7a8-cf12-4de7-a6da-c463d1b539a7} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Helper.dll
uURLSearchHooks: H - No File
mURLSearchHooks: NCH Toolbar: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\tbNCH.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
BHO: Dogpile Bundle Toolbar BHO: {bfe4b5cb-63f7-4a51-9266-6167655d5b4f} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Toolbar.dll
BHO: NCH Toolbar: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\tbNCH.dll
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
TB: NCH Toolbar: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\tbNCH.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
TB: Dogpile Bundle Toolbar: {c80bdeb2-8735-44c6-bd55-a1ccd555667a} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Toolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: {00000000-0000-0000-0000-000000000000} - No File
TB: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
TB: {B9B97401-98E1-4942-930D-C36652DAB7F2} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
uRun: [DriverCure] C:\Program Files (x86)\ParetoLogic\DriverCure\DriverCure.exe -scan
mRun: [00PCTFW] "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [<NO NAME>]
mRun: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
mRun: [Share-to-Web Namespace Daemon] C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [ANIWZCS2Service] C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
StartupFolder: C:\Users\JIM\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Stickies.lnk - C:\Program Files (x86)\Stickies\stickies.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} - hxxps://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9F8D9178-14EC-465A-9768-9E35F078DAD7} : DhcpNameServer = 192.168.1.1
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO-X64: 0x1 - No File
BHO-X64: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO-X64: HP Print Enhancer - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
BHO-X64: Dogpile Bundle Toolbar BHO: {BFE4B5CB-63F7-4A51-9266-6167655D5B4F} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Toolbar.dll
BHO-X64: FCTBPos00Pos - No File
BHO-X64: NCH Toolbar: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\tbNCH.dll
BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO-X64: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
BHO-X64: Ask Toolbar BHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
BHO-X64: HP Smart BHO Class - No File
TB-X64: NCH Toolbar: {c2db4fe6-8409-45ce-8010-189a7b5cce86} - C:\Program Files (x86)\NCH\tbNCH.dll
TB-X64: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB-X64: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
TB-X64: Dogpile Bundle Toolbar: {C80BDEB2-8735-44C6-BD55-A1CCD555667A} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Toolbar.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB-X64: {00000000-0000-0000-0000-000000000000} - No File
TB-X64: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
TB-X64: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
TB-X64: {B9B97401-98E1-4942-930D-C36652DAB7F2} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [00PCTFW] "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
mRun-x64: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun-x64: [(Default)]
mRun-x64: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
mRun-x64: [Share-to-Web Namespace Daemon] C:\Program Files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [ANIWZCS2Service] C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
.
============= SERVICES / DRIVERS ===============
.
R1 aswSnx;aswSnx;C:\Windows\system32\drivers\aswSnx.sys --> C:\Windows\system32\drivers\aswSnx.sys [?]
R1 aswSP;aswSP;C:\Windows\system32\drivers\aswSP.sys --> C:\Windows\system32\drivers\aswSP.sys [?]
R1 pctgntdi;pctgntdi;\??\C:\Windows\System32\drivers\pctgntdi64.sys --> C:\Windows\System32\drivers\pctgntdi64.sys [?]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-11 140672]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-6-6 64952]
R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-13 20992]
R2 aswFsBlk;aswFsBlk;C:\Windows\system32\drivers\aswFsBlk.sys --> C:\Windows\system32\drivers\aswFsBlk.sys [?]
R2 aswMonFlt;aswMonFlt;\??\C:\Windows\system32\drivers\aswMonFlt.sys --> C:\Windows\system32\drivers\aswMonFlt.sys [?]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-12-22 44768]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-1-27 366152]
R2 PCToolsFirewallPlus;PC Tools Firewall Plus;C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe [2011-3-20 287024]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\system32\DRIVERS\L1C62x64.sys --> C:\Windows\system32\DRIVERS\L1C62x64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver;\??\C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys --> C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys [?]
R3 pctNdisMP;PC Tools Driver;C:\Windows\system32\DRIVERS\pctNdis64.sys --> C:\Windows\system32\DRIVERS\pctNdis64.sys [?]
R3 pctplfw;pctplfw;\??\C:\Windows\System32\drivers\pctplfw64.sys --> C:\Windows\System32\drivers\pctplfw64.sys [?]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\system32\drivers\viahduaa.sys --> C:\Windows\system32\drivers\viahduaa.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-21 136176]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-21 136176]
S3 pctNdis;PC Tools Firewall Intermediate Filter Service;C:\Windows\system32\DRIVERS\pctNdis64.sys --> C:\Windows\system32\DRIVERS\pctNdis64.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-2-28 183560]
.
=============== Created Last 30 ================
.
2012-01-27 20:37:06   69000   ----a-w-   C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8C8B97EF-6072-4622-8018-0A71D348CBCA}\offreg.dll
2012-01-27 20:33:13   709968   ----a-w-   C:\Windows\isRS-000.tmp
2012-01-27 17:17:38   --------   d-----w-   C:\Users\JIM\AppData\Roaming\SUPERAntiSpyware.com
2012-01-27 17:16:45   --------   d-----w-   C:\Program Files\SUPERAntiSpyware
2012-01-25 19:56:11   --------   d-----w-   C:\Users\JIM\AppData\Roaming\DriverCure
2012-01-25 19:55:40   --------   d-----w-   C:\ProgramData\ParetoLogic
2012-01-25 19:55:40   --------   d-----w-   C:\ProgramData\DriverCure
2012-01-25 19:55:40   --------   d-----w-   C:\Program Files (x86)\Common Files\ParetoLogic
2012-01-25 19:55:39   --------   d-----w-   C:\Program Files (x86)\ParetoLogic
2012-01-25 19:19:50   577536   ----a-w-   C:\Windows\SysWow64\ANIWZCS2.dll
2012-01-25 19:19:50   57407   ----a-w-   C:\Windows\SysWow64\ANICtl.dll
2012-01-25 19:19:50   49152   ----a-w-   C:\Windows\SysWow64\AQCKGen.dll
2012-01-25 19:19:50   192512   ----a-w-   C:\Windows\SysWow64\aIPH.dll
2012-01-25 19:19:50   131072   ----a-w-   C:\Windows\SysWow64\WlanApp.dll
2012-01-25 19:19:50   1163337   ----a-w-   C:\Windows\SysWow64\odSupp_M.dll
2012-01-25 19:19:24   36864   ----a-w-   C:\Windows\SysWow64\ANIOApi.dll
2012-01-25 19:19:24   28205   ----a-w-   C:\Windows\SysWow64\ANIO.sys
2012-01-25 19:19:24   16997   ----a-w-   C:\Windows\SysWow64\ANIO.VXD
2012-01-25 19:19:24   11904   ----a-w-   C:\Windows\SysWow64\anio4.sys
2012-01-25 19:19:24   --------   d-----w-   C:\Program Files (x86)\ANI
2012-01-25 19:19:17   --------   d-----w-   C:\Program Files (x86)\D-Link
2012-01-24 23:44:17   0   ---ha-w-   C:\Users\JIM\AppData\Local\BIT1ECD.tmp
2012-01-24 23:42:23   0   ---ha-w-   C:\Users\JIM\AppData\Local\BIT606D.tmp
2012-01-24 23:26:37   0   ---ha-w-   C:\Users\JIM\AppData\Local\BITCBF.tmp
2012-01-24 23:24:41   0   ---ha-w-   C:\Users\JIM\AppData\Local\BIT474E.tmp
2012-01-24 22:57:33   8822856   ----a-w-   C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8C8B97EF-6072-4622-8018-0A71D348CBCA}\mpengine.dll
2012-01-23 23:32:58   --------   d-----w-   C:\Windows\System32\SPReview
2012-01-23 23:32:01   --------   d-----w-   C:\Windows\System32\EventProviders
2012-01-23 23:30:40   737072   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2012-01-23 23:30:25   4283672   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2012-01-23 23:30:15   42776   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2012-01-23 23:30:06   539984   ----a-w-   C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-01-17 16:35:13   --------   d-----w-   C:\Users\JIM\AppData\Roaming\FCTB000060231
2012-01-11 15:09:32   514560   ----a-w-   C:\Windows\SysWow64\qdvd.dll
2012-01-11 15:09:32   1572864   ----a-w-   C:\Windows\System32\quartz.dll
2012-01-11 15:09:32   1328128   ----a-w-   C:\Windows\SysWow64\quartz.dll
2012-01-11 15:09:31   366592   ----a-w-   C:\Windows\System32\qdvd.dll
2012-01-11 15:09:28   1731920   ----a-w-   C:\Windows\System32\ntdll.dll
2012-01-11 15:09:28   1292080   ----a-w-   C:\Windows\SysWow64\ntdll.dll
2012-01-11 15:09:19   77312   ----a-w-   C:\Windows\System32\packager.dll
2012-01-11 15:09:19   67072   ----a-w-   C:\Windows\SysWow64\packager.dll
2012-01-10 18:49:08   --------   d-----w-   C:\Program Files (x86)\Dogpile Bundle Toolbar
2012-01-10 18:49:04   --------   d-----w-   C:\Users\JIM\AppData\Local\The Weather Channel
2012-01-10 18:48:56   --------   d-----w-   C:\Program Files (x86)\EpicPlay
.
==================== Find3M ====================
.
2012-01-25 18:37:06   639   ----a-w-   C:\Windows\uninstallstickies.bat
2012-01-23 23:41:00   152576   ----a-w-   C:\Windows\SysWow64\msclmd.dll
2012-01-23 23:40:59   175616   ----a-w-   C:\Windows\System32\msclmd.dll
2011-12-03 20:16:04   414368   ----a-w-   C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-28 18:01:25   41184   ----a-w-   C:\Windows\avastSS.scr
2011-11-28 17:54:06   591192   ----a-w-   C:\Windows\System32\drivers\aswSnx.sys
2011-11-28 17:52:11   66904   ----a-w-   C:\Windows\System32\drivers\aswMonFlt.sys
2011-11-24 04:52:09   3145216   ----a-w-   C:\Windows\System32\win32k.sys
2011-11-15 21:29:56   270720   ----a-w-   C:\Windows\System32\MpSigStub.exe
2011-11-05 17:45:06   1409   ----a-w-   C:\Windows\SysWow64\tmp3A218.FOT
2011-11-05 17:45:06   1409   ----a-w-   C:\Windows\SysWow64\tmp00318.FOT
2011-11-05 17:45:05   1409   ----a-w-   C:\Windows\SysWow64\tmpE6E08.FOT
2011-11-05 17:45:05   1409   ----a-w-   C:\Windows\SysWow64\tmpCCE08.FOT
2011-11-05 17:45:05   1409   ----a-w-   C:\Windows\SysWow64\tmpA1F08.FOT
2011-11-05 17:45:05   1409   ----a-w-   C:\Windows\SysWow64\tmp24018.FOT
2011-11-05 05:41:43   1188864   ----a-w-   C:\Windows\System32\wininet.dll
2011-11-05 05:32:50   2048   ----a-w-   C:\Windows\System32\tzres.dll
2011-11-05 04:35:00   981504   ----a-w-   C:\Windows\SysWow64\wininet.dll
2011-11-05 04:26:03   2048   ----a-w-   C:\Windows\SysWow64\tzres.dll
2011-11-05 03:32:47   1638912   ----a-w-   C:\Windows\System32\mshtml.tlb
2011-11-05 02:48:51   1638912   ----a-w-   C:\Windows\SysWow64\mshtml.tlb
.
============= FINISH: 11:20:35.85 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3/18/2011 8:09:53 PM
System Uptime: 1/28/2012 7:28:33 AM (4 hours ago)
.
Motherboard: MSI | | 870-G45 (MS-7599)
Processor: AMD Athlon(tm) II X4 640 Processor | CPU1 | 3000/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 244 GiB total, 186.883 GiB free.
D: is FIXED (NTFS) - 352 GiB total, 265.058 GiB free.
E: is FIXED (NTFS) - 63 GiB total, 36.26 GiB free.
F: is FIXED (NTFS) - 13 GiB total, 8.699 GiB free.
G: is CDROM ()
H: is CDROM ()
I: is CDROM ()
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}
Description: Officejet 4500 G510n-z
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Officejet 4500 G510n-z
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:
.
==== System Restore Points ===================
.
RP220: 1/24/2012 5:33:36 PM - Windows Update
RP221: 1/25/2012 12:10:20 PM - Installed AirPlus G
RP222: 1/27/2012 9:30:14 AM - Windows Update
.
==== Installed Programs ======================
.
4500_G510nz_Help
4500G510nz
4500G510nz_Software_Min
7-Zip 4.57
ACE-HIGH MP3 WAV WMA OGG Converter
Adobe Acrobat 4.0
Adobe AIR
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.1)
AirPlus G
Akamai NetSession Interface Service
ANIO Service
ANIWZCS2 Service
Ask Toolbar
Ask Toolbar Updater
ASUS E-Green Uninstall
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
Audacity 1.3.12 (Unicode)
avast! Free Antivirus
AVS Audio Converter version 6.2
AVS Audio Editor version 6.1
AVS Update Manager 1.0
AVS4YOU Software Navigator 1.4
Belarc Advisor 8.1
Bing Bar
Bing Rewards Client Installer
BufferChm
CanoScan Toolbox Ver4.6
CNET TechTracker
Creative MediaSource 5
Creative Software AutoUpdate
Creative WaveStudio 7
Destinations
DeviceDiscovery
DocMgr
DocProc
Dogpile Bundle Toolbar
DriverFinder
E-Hammer
EpicPlay
ESET Online Scanner v3
Express Burn Disc Burning Software
Express Rip
Facebook Video Calling 1.1.1.1
Fax
FreeRIP v3.6
Google Chrome
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
GPBaseService2
HP Photo and Imaging 2.2 - Scanjet 3970 Series
HP Product Detection
HP Update
HPProductAssistant
HPSSupply
ImagXpress
Java Auto Updater
Java(TM) 6 Update 29
KaraFun 1.18
KRISTAL Audio Engine
LAME v3.98.3 for Audacity
LightScribe System Software
Malwarebytes' Anti-Malware version 1.51.2.1300
MarketResearch
Microsoft Flight Simulator X
Microsoft Office 2000 SR-1 Disc 2
Microsoft Office 2000 SR-1 Small Business
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Silverlight
Microsoft Streets & Trips 2008
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works 6-9 Converter
MixPad Audio Mixer
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
NCH Toolbar
Nero 7 Essentials
NeroExpress
neroxml
OmniPage SE
ParetoLogic DriverCure
PC Health Doc PDF Reader 0.1
PC Tools Firewall Plus 7.0
Platform
Prism Video File Converter
Scan
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
ShareIns
Skype Click to Call
Skype™ 5.5
SmartWebPrinting
SolutionCenter
Sophos Anti-Rootkit 1.5.4
SpywareBlaster 4.4
Status
Stickies 7.0b
SunlitGreen Photo Editor 1.3
Toolbox
TrayApp
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
VIA Platform Device Manager
Visual Studio 2008 x64 Redistributables
WebReg
Yahoo! BrowserPlus 2.9.8
Yahoo! Software Update
.
==== Event Viewer Messages From Past Week ========
.
1/28/2012 11:11:14 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR4.
1/28/2012 11:06:20 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR3.
1/27/2012 10:13:25 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR5.
1/27/2012 1:34:53 PM, Error: Service Control Manager [7000] - The ANIO Service service failed to start due to the following error: The system cannot find the file specified.
1/25/2012 8:39:36 AM, Error: Service Control Manager [7023] - The Security Center service terminated with the following error: The authentication service is unknown.
1/25/2012 12:53:41 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR2.
1/25/2012 12:10:08 PM, Error: Microsoft-Windows-DistributedCOM [10001] - Unable to start a DCOM Server: {9C0BA3C1-2B67-45EB-BF69-BED9658D28D2} as /. The error: "740" Happened while starting this command: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe -Embedding
1/24/2012 8:40:20 AM, Error: Service Control Manager [7023] - The Windows Update service terminated with the following error: The process cannot access the file because it is being used by another process.
1/24/2012 8:40:20 AM, Error: Service Control Manager [7000] - The Windows Media Player Network Sharing Service service failed to start due to the following error: The process cannot access the file because it is being used by another process.
1/24/2012 8:39:31 AM, Error: Service Control Manager [7000] - The Software Protection service failed to start due to the following error: The process cannot access the file because it is being used by another process.
1/24/2012 8:39:30 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Google Update Service (gupdate) service to connect.
1/24/2012 8:39:30 AM, Error: Service Control Manager [7000] - The Google Update Service (gupdate) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/24/2012 8:39:30 AM, Error: Application Popup [877] - There was error [DATABASE OPEN FAILED] processing the driver database.
1/24/2012 8:39:29 AM, Error: Service Control Manager [7023] - The Windows Font Cache Service service terminated with the following error: The process cannot access the file because it is being used by another process.
1/24/2012 5:34:16 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2572077).
1/24/2012 4:53:01 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:51:26 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
1/24/2012 4:51:26 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
1/24/2012 4:46:42 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/24/2012 4:46:36 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
1/24/2012 4:46:25 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD aswRdr aswSnx aswSP aswTdi DfsC discache NetBIOS NetBT nsiproxy pctgntdi Psched rdbss SASDIFSV SASKUTIL spldr tdx Wanarpv6 WfpLwf
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Network Connections service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
1/24/2012 4:20:36 PM, Error: Service Control Manager [7043] - The Windows Update service did not shut down properly after receiving a preshutdown control.
.
==== End Of File ===========================
Thank you, JIM

SuperDave · « **Reply #10 on:** January 28, 2012, 11:48:22 AM »

I strongly recommend that you remove Ask from your computer because it;

•Promotes its toolbars on sites targeted to kids.

•Promotes its toolbars through ads that appear to be part of other companies' sites.

•Promotes its toolbars through other companies' spyware.

•Installs without any disclosure whatsoever and without any consent whatsoever.

•Solicits installations via "deceptive door openers" that do not accurately describe the offer; failing to affirmatively show a license agreement; linking to a EULA via an off-screen link.

•Makes confusing changes to users' browsers -- increasing Ask's revenues while taking users to pages they didn't intend to visit.

See Here for more info.

If you choose to follow my recommendation then please go to Start > Control Panel > Add/Remove Programs and remove the following programs if present.

•AskBarDis or anything related to Ask

Then please find and delete this folder in bold (if present):
C:\Program Files\AskBarDis. or anything related to Ask.
***************************************************
Download OTL to your desktop.

* Open OTL
* Copy and Paste the following text in the codebox into the Custom Scans/Fixes window.

Code: [Select]

:OTL

uURLSearchHooks: H - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: {00000000-0000-0000-0000-000000000000} - No File
TB: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
TB: {B9B97401-98E1-4942-930D-C36652DAB7F2} - No File
mRun: [<NO NAME>] 
BHO-X64: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO-X64:     0x1 - No File
BHO-X64:     HP Print Enhancer - No File
BHO-X64:     AcroIEHelperStub - No File
BHO-X64:     SkypeIEPluginBHO - No File
BHO-X64:     FCTBPos00Pos - No File
BHO-X64:     Ask Toolbar BHO - No File
BHO-X64:     HP Smart BHO Class - No File
TB-X64: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB-X64: {00000000-0000-0000-0000-000000000000} - No File
TB-X64: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
TB-X64: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
TB-X64: {B9B97401-98E1-4942-930D-C36652DAB7F2} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File

:Files
C:\Windows\isRS-000.tmp

:COMMANDS
[resethosts]
[purity]
[start explorer]

* Click Run Fix
* OTLI2 may ask to reboot the machine. Please do so if asked.
* Click OK
* A report will open. Copy and Paste that report in your next reply.
***********************************************************
Download Combofix from any of the links below, and save it to your desktop.

Link 1
Link 2
Link 3

To prevent your anti-virus application interfering with ComboFix we need to disable it. See here for a tutorial regarding how to do so if you are unsure.

Close any open windows and double click ComboFix.exe to run it.

You will see the following image:

Click I Agree to start the program.

ComboFix will then extract the necessary files and you will see this:

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. This will not occur in Windows Vista and 7

It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

If you did not have it installed, you will see the prompt below. Choose YES.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

When finished, it will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).

Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.

Note: Please Do NOT mouseclick combofix's window while its running because it may call it to stall.

jim.mar · « **Reply #11 on:** January 28, 2012, 01:14:32 PM »

I ran OTL as instructed. The report follows Also, being as I am running windows7 64 bit should i still do COMBOfix?

Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.> in the current context!
Error: Unable to interpret <IF REQUESTED, ZIP IT UP & ATTACH IT> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <DDS (Ver_2011-08-26.01)> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <Microsoft Windows 7 Home Premium > in the current context!
Error: Unable to interpret <Boot Device: \Device\HarddiskVolume1> in the current context!
Error: Unable to interpret <Install Date: 3/18/2011 8:09:53 PM> in the current context!
Error: Unable to interpret <System Uptime: 1/28/2012 7:28:33 AM (4 hours ago)> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <Motherboard: MSI | | 870-G45 (MS-7599)> in the current context!
Error: Unable to interpret <Processor: AMD Athlon(tm) II X4 640 Processor | CPU1 | 3000/200mhz> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <==== Disk Partitions =========================> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <C: is FIXED (NTFS) - 244 GiB total, 186.883 GiB free.> in the current context!
Error: Unable to interpret <D: is FIXED (NTFS) - 352 GiB total, 265.058 GiB free.> in the current context!
Error: Unable to interpret <E: is FIXED (NTFS) - 63 GiB total, 36.26 GiB free.> in the current context!
Error: Unable to interpret <F: is FIXED (NTFS) - 13 GiB total, 8.699 GiB free.> in the current context!
Error: Unable to interpret <G: is CDROM ()> in the current context!
Error: Unable to interpret <H: is CDROM ()> in the current context!
Error: Unable to interpret <I: is CDROM ()> in the current context!
Error: Unable to interpret <L: is Removable> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <==== Disabled Device Manager Items =============> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}> in the current context!
Error: Unable to interpret <Description: Officejet 4500 G510n-z> in the current context!
Error: Unable to interpret <Device ID: ROOT\MULTIFUNCTION\0000> in the current context!
Error: Unable to interpret <Manufacturer: HP> in the current context!
Error: Unable to interpret <Name: Officejet 4500 G510n-z> in the current context!
Error: Unable to interpret <PNP Device ID: ROOT\MULTIFUNCTION\0000> in the current context!
Error: Unable to interpret <Service: > in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <==== System Restore Points ===================> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <RP220: 1/24/2012 5:33:36 PM - Windows Update> in the current context!
Error: Unable to interpret <RP221: 1/25/2012 12:10:20 PM - Installed AirPlus G> in the current context!
Error: Unable to interpret <RP222: 1/27/2012 9:30:14 AM - Windows Update> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <==== Installed Programs ======================> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <4500_G510nz_Help> in the current context!
Error: Unable to interpret <4500G510nz> in the current context!
Error: Unable to interpret <4500G510nz_Software_Min> in the current context!
Error: Unable to interpret <7-Zip 4.57> in the current context!
Error: Unable to interpret <ACE-HIGH MP3 WAV WMA OGG Converter> in the current context!
Error: Unable to interpret <Adobe Acrobat 4.0> in the current context!
Error: Unable to interpret <Adobe AIR> in the current context!
Error: Unable to interpret <Adobe Flash Player 10 Plugin> in the current context!
Error: Unable to interpret <Adobe Flash Player 11 ActiveX> in the current context!
Error: Unable to interpret <Adobe Reader X (10.1.1)> in the current context!
Error: Unable to interpret <AirPlus G> in the current context!
Error: Unable to interpret <Akamai NetSession Interface Service> in the current context!
Error: Unable to interpret <ANIO Service> in the current context!
Error: Unable to interpret <ANIWZCS2 Service> in the current context!
Error: Unable to interpret <Ask Toolbar> in the current context!
Error: Unable to interpret <Ask Toolbar Updater> in the current context!
Error: Unable to interpret <ASUS E-Green Uninstall> in the current context!
Error: Unable to interpret <Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver> in the current context!
Error: Unable to interpret <Audacity 1.3.12 (Unicode)> in the current context!
Error: Unable to interpret <avast! Free Antivirus> in the current context!
Error: Unable to interpret <AVS Audio Converter version 6.2> in the current context!
Error: Unable to interpret <AVS Audio Editor version 6.1> in the current context!
Error: Unable to interpret <AVS Update Manager 1.0> in the current context!
Error: Unable to interpret <AVS4YOU Software Navigator 1.4> in the current context!
Error: Unable to interpret <Belarc Advisor 8.1> in the current context!
Error: Unable to interpret <Bing Bar> in the current context!
Error: Unable to interpret <Bing Rewards Client Installer> in the current context!
Error: Unable to interpret <BufferChm> in the current context!
Error: Unable to interpret <CanoScan Toolbox Ver4.6> in the current context!
Error: Unable to interpret <CNET TechTracker> in the current context!
Error: Unable to interpret <Creative MediaSource 5> in the current context!
Error: Unable to interpret <Creative Software AutoUpdate> in the current context!
Error: Unable to interpret <Creative WaveStudio 7> in the current context!
Error: Unable to interpret <Destinations> in the current context!
Error: Unable to interpret <DeviceDiscovery> in the current context!
Error: Unable to interpret <DocMgr> in the current context!
Error: Unable to interpret <DocProc> in the current context!
Error: Unable to interpret <Dogpile Bundle Toolbar> in the current context!
Error: Unable to interpret <DriverFinder> in the current context!
Error: Unable to interpret <E-Hammer> in the current context!
Error: Unable to interpret <EpicPlay> in the current context!
Error: Unable to interpret <ESET Online Scanner v3> in the current context!
Error: Unable to interpret <Express Burn Disc Burning Software> in the current context!
Error: Unable to interpret <Express Rip> in the current context!
Error: Unable to interpret <Facebook Video Calling 1.1.1.1> in the current context!
Error: Unable to interpret <Fax> in the current context!
Error: Unable to interpret <FreeRIP v3.6> in the current context!
Error: Unable to interpret <Google Chrome> in the current context!
Error: Unable to interpret <Google Earth> in the current context!
Error: Unable to interpret <Google Toolbar for Internet Explorer> in the current context!
Error: Unable to interpret <Google Update Helper> in the current context!
Error: Unable to interpret <GPBaseService2> in the current context!
Error: Unable to interpret <HP Photo and Imaging 2.2 - Scanjet 3970 Series> in the current context!
Error: Unable to interpret <HP Product Detection> in the current context!
Error: Unable to interpret <HP Update> in the current context!
Error: Unable to interpret <HPProductAssistant> in the current context!
Error: Unable to interpret <HPSSupply> in the current context!
Error: Unable to interpret <ImagXpress> in the current context!
Error: Unable to interpret <Java Auto Updater> in the current context!
Error: Unable to interpret <Java(TM) 6 Update 29> in the current context!
Error: Unable to interpret <KaraFun 1.18> in the current context!
Error: Unable to interpret <KRISTAL Audio Engine> in the current context!
Error: Unable to interpret <LAME v3.98.3 for Audacity> in the current context!
Error: Unable to interpret <LightScribe System Software> in the current context!
Error: Unable to interpret <Malwarebytes' Anti-Malware version 1.51.2.1300> in the current context!
Error: Unable to interpret <MarketResearch> in the current context!
Error: Unable to interpret <Microsoft Flight Simulator X> in the current context!
Error: Unable to interpret <Microsoft Office 2000 SR-1 Disc 2> in the current context!
Error: Unable to interpret <Microsoft Office 2000 SR-1 Small Business> in the current context!
Error: Unable to interpret <Microsoft Office PowerPoint Viewer 2007 (English)> in the current context!
Error: Unable to interpret <Microsoft Silverlight> in the current context!
Error: Unable to interpret <Microsoft Streets & Trips 2008> in the current context!
Error: Unable to interpret <Microsoft Visual C++ 2005 Redistributable> in the current context!
Error: Unable to interpret <Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022> in the current context!
Error: Unable to interpret <Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148> in the current context!
Error: Unable to interpret <Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161> in the current context!
Error: Unable to interpret <Microsoft Works 6-9 Converter> in the current context!
Error: Unable to interpret <MixPad Audio Mixer> in the current context!
Error: Unable to interpret <MSXML 4.0 SP2 (KB954430)> in the current context!
Error: Unable to interpret <MSXML 4.0 SP2 (KB973688)> in the current context!
Error: Unable to interpret <MSXML 4.0 SP2 Parser and SDK> in the current context!
Error: Unable to interpret <NCH Toolbar> in the current context!
Error: Unable to interpret <Nero 7 Essentials> in the current context!
Error: Unable to interpret <NeroExpress> in the current context!
Error: Unable to interpret <neroxml> in the current context!
Error: Unable to interpret <OmniPage SE> in the current context!
Error: Unable to interpret <ParetoLogic DriverCure> in the current context!
Error: Unable to interpret <PC Health Doc PDF Reader 0.1> in the current context!
Error: Unable to interpret <PC Tools Firewall Plus 7.0> in the current context!
Error: Unable to interpret <Platform> in the current context!
Error: Unable to interpret <Prism Video File Converter> in the current context!
Error: Unable to interpret <Scan> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)> in the current context!
Error: Unable to interpret <Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)> in the current context!
Error: Unable to interpret <ShareIns> in the current context!
Error: Unable to interpret <Skype Click to Call> in the current context!
Error: Unable to interpret <Skype™ 5.5> in the current context!
Error: Unable to interpret <SmartWebPrinting> in the current context!
Error: Unable to interpret <SolutionCenter> in the current context!
Error: Unable to interpret <Sophos Anti-Rootkit 1.5.4> in the current context!
Error: Unable to interpret <SpywareBlaster 4.4> in the current context!
Error: Unable to interpret <Status> in the current context!
Error: Unable to interpret <Stickies 7.0b> in the current context!
Error: Unable to interpret <SunlitGreen Photo Editor 1.3> in the current context!
Error: Unable to interpret <Toolbox> in the current context!
Error: Unable to interpret <TrayApp> in the current context!
Error: Unable to interpret <Update for Microsoft .NET Framework 4 Client Profile (KB2468871)> in the current context!
Error: Unable to interpret <Update for Microsoft .NET Framework 4 Client Profile (KB2533523)> in the current context!
Error: Unable to interpret <VIA Platform Device Manager> in the current context!
Error: Unable to interpret <Visual Studio 2008 x64 Redistributables> in the current context!
Error: Unable to interpret <WebReg> in the current context!
Error: Unable to interpret <Yahoo! BrowserPlus 2.9.8> in the current context!
Error: Unable to interpret <Yahoo! Software Update> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <==== Event Viewer Messages From Past Week ========> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <1/28/2012 11:11:14 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR4.> in the current context!
Error: Unable to interpret <1/28/2012 11:06:20 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR3.> in the current context!
Error: Unable to interpret <1/27/2012 10:13:25 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR5.> in the current context!
Error: Unable to interpret <1/27/2012 1:34:53 PM, Error: Service Control Manager [7000] - The ANIO Service service failed to start due to the following error: The system cannot find the file specified.> in the current context!
Error: Unable to interpret <1/25/2012 8:39:36 AM, Error: Service Control Manager [7023] - The Security Center service terminated with the following error: The authentication service is unknown.> in the current context!
Error: Unable to interpret <1/25/2012 12:53:41 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR2.> in the current context!
Error: Unable to interpret <1/25/2012 12:10:08 PM, Error: Microsoft-Windows-DistributedCOM [10001] - Unable to start a DCOM Server: {9C0BA3C1-2B67-45EB-BF69-BED9658D28D2} as /. The error: "740" Happened while starting this command: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe -Embedding> in the current context!
Error: Unable to interpret <1/24/2012 8:40:20 AM, Error: Service Control Manager [7023] - The Windows Update service terminated with the following error: The process cannot access the file because it is being used by another process.> in the current context!
Error: Unable to interpret <1/24/2012 8:40:20 AM, Error: Service Control Manager [7000] - The Windows Media Player Network Sharing Service service failed to start due to the following error: The process cannot access the file because it is being used by another process.> in the current context!
Error: Unable to interpret <1/24/2012 8:39:31 AM, Error: Service Control Manager [7000] - The Software Protection service failed to start due to the following error: The process cannot access the file because it is being used by another process.> in the current context!
Error: Unable to interpret <1/24/2012 8:39:30 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Google Update Service (gupdate) service to connect.> in the current context!
Error: Unable to interpret <1/24/2012 8:39:30 AM, Error: Service Control Manager [7000] - The Google Update Service (gupdate) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.> in the current context!
Error: Unable to interpret <1/24/2012 8:39:30 AM, Error: Application Popup [877] - There was error [DATABASE OPEN FAILED] processing the driver database.> in the current context!
Error: Unable to interpret <1/24/2012 8:39:29 AM, Error: Service Control Manager [7023] - The Windows Font Cache Service service terminated with the following error: The process cannot access the file because it is being used by another process.> in the current context!
Error: Unable to interpret <1/24/2012 5:34:16 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2572077).> in the current context!
Error: Unable to interpret <1/24/2012 4:53:01 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:51:26 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}> in the current context!
Error: Unable to interpret <1/24/2012 4:51:26 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:43 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:42 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:36 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD aswRdr aswSnx aswSP aswTdi DfsC discache NetBIOS NetBT nsiproxy pctgntdi Psched rdbss SASDIFSV SASKUTIL spldr tdx Wanarpv6 WfpLwf> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The Network Connections service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.> in the current context!
Error: Unable to interpret <1/24/2012 4:46:25 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.> in the current context!
Error: Unable to interpret <1/24/2012 4:20:36 PM, Error: Service Control Manager [7043] - The Windows Update service did not shut down properly after receiving a preshutdown control.> in the current context!
Error: Unable to interpret <.> in the current context!
Error: Unable to interpret <==== End Of File ===========================> in the current context!

OTL by OldTimer - Version 3.2.31.0 log created on 01282012_130523
========================================================================

SuperDave · « **Reply #12 on:** January 28, 2012, 06:59:44 PM »

Quote

being as I am running windows7 64 bit should i still do COMBOfix?

Yes. CF will work on 64 bit machines.
Are you certain that you did the OTL script correctly? That is one weird log.Please try it again.

jim.mar · « **Reply #13 on:** January 29, 2012, 02:28:19 PM »

jim.mar · « **Reply #14 on:** January 29, 2012, 02:43:37 PM »

OTL log 1-29-2012

========== OTL ==========
========== FILES ==========
C:\Windows\isRS-000.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.31.0 log created on 01292012_143923

Computer Hope Forum

News:

Author Topic: I cannot access the internet. (Read 58691 times)

jim.mar

I cannot access the internet.

SuperDave

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

SuperDave

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

SuperDave

Re: I cannot access the internet.

Salmon Trout

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

SuperDave

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

SuperDave

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.

jim.mar

Re: I cannot access the internet.