Computer Hope
Software => Computer viruses and spyware => Virus and spyware removal => Topic started by: bicyclist on July 30, 2015, 08:16:19 PM
-
Dear Computer Hope:
Please help me solve a problem with my computer that I think is due to malware. I have posted below the logs of the scans as requested.
I am having the following problems:
1. My computer is slow to connect to the Internet; my home page (MSN) takes a long time to form and does not completely form/download--only some pictures and text is provided (about half). However, the search function on the home page works and my Yahoo e-mail works; both those items work at normal speed.
Some Internet websites will not connect at all with my computer. Some sites are displayed with broken-up pictures or pictures with overlapping text--the pages are not formatting properly and in some cases information is missing or scrambled.
When I'm trying to do a search in some instances my computer seems to time-out on the Internet connection and I get a message on a new page (Bing page) saying "Content Encoding Error, the page you are trying to view cannot be shown because it uses an invalid or unsupported form of compression. Please contact the website owner to inform them of this problem" with a "Try Again" button. On clicking on the "Try Again" button, I get the desired search results--it's strange that I get the completed search on the second try.
2. The computer is having problems displaying only the pictures on some Internet sites. For instance, on Craigslist (the classified/items for sale Internet website) I can't get the "thumb" nor "gallery" view display features of items for sale. However, I do get all the text at normal speed and can quickly go from one item to another (skipping from page to page). When I'm on the page for one specific item, I also get the usual format of one large picture of the item along with thumbnail pictures below (the larger main picture) that show different views of the item. Those thumbnails are normally clicked by the viewer to enlarge those pictures; however, when I click on the thumbnail picture, I noticed the format is different from past visits to the site: the pictures display in the middle of another/second page and have a black surround rather than the normal display of changing the picture in the normal location on the original page (original page includes text and pictures).
On other Internet merchandise sites, such as Campmor (camping gear), I get the usual display of multiple items for sale on one page but, when I go to click for the next page of items, I get an icon in the location where I clicked that shows a small skull (with beady eyes) fixed inside a rotating disk resembling a hard drive disk/CD that in turn is inside a small square (the icon is about 1/2" square and is multi-colored). I think this icon is supposed to indicate I have a virus on my system--very scary icon.
Additionally, on other Internet sites the pictures are split into pieces; some pictures are split in horizontal pieces, some in random pieces, some are covered in bright colors and others fail to display entirely.
3. I can't run my virus checker (STOPzilla subscription edition) because something is preventing it from downloading updates (updates are a required first step to run the checker). Also, I can't update my SUPER Anti-Spyware Free Edition though I had updated it recently prior to the problem I'm now experiencing. The results of the Super Anti-Spyware scan indicate I have no potential threats. I noticed that the updates are almost completed before they fail; the updating slows as it approaches completion and subsequent failure. I think I was successful in running the Stopzilla scan once at about the time I noticed the problem with the computer--I might be wrong about the timing of that scan.
I'm guessing that something has corrupted the Internet picture making software on my computer thereby making connection to the Internet difficult.
I appreciate any help you might offer.
Here are the scan results as requested (I did not delete/clean anything yet):
1) ADW Cleaner log:
# AdwCleaner v4.208 - Logfile created 30/07/2015 at 15:59:33
# Updated 09/07/2015 by Xplode
# Database : 2015-07-09.2 [Local]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : User - KENCOMPUTER
# Running from : C:\Documents and Settings\User\My Documents\Downloads\adwcleaner_4.208.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Found : C:\Documents and Settings\User\Local Settings\Application Data\PackageAware
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Uniblue
***** [ Web browsers ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Mozilla Firefox v39.0 (x86 en-US)
*************************
AdwCleaner[R0].txt - [903 bytes] - [30/07/2015 15:59:33]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [961 bytes] ##########
2) Malawarebytes' Anti-Malware log:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 7/30/2015
Scan Time: 4:14:34 PM
Logfile: Malawarebytes Anti-Malware scan results 7-30-15.txt
Administrator: Yes
Version: 2.1.8.1057
Malware Database: v2015.06.03.03
Rootkit Database: v2015.07.29.02
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: User
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 319913
Time Elapsed: 21 min, 32 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 0
(No malicious items detected)
Physical Sectors: 0
(No malicious items detected)
(end)
3) Security Check log (I think this scan failed to execute):
Closing Browsers
Got a valid service handle. szkg5
Unable to stop the service.
Delete the Service szkg5
Got a valid service handle. is3srv
Unable to stop the service.
Delete the Service is3srv
Got a valid service handle. szkgfs
Unable to stop the service.
Delete the Service szkgfs
Got a valid service handle. szserver
Closing Browsers
Got a valid service handle. szkg5
Unable to stop the service.
Unable to stop the service szkg5
Got a valid service handle. szserver
Unable to stop the service.
Delete the Service szserver
Got a valid service handle. sbapifs
Closing Browsers
Got a valid service handle. szkg5
Unable to stop the service.
Unable to stop the service szkg5
Got a valid service handle. szserver
Unable to stop the service.
Unable to stop the service szserver
Got a valid service handle. sbapifs
Unable to stop the service.
Delete the Service sbapifs
Got a valid service handle. gfiark
Unable to stop the service.
Delete the Service gfiark
Got a valid service handle. sbre
Unable to stop the service.
Delete the Service sbre
Uninstalling the lsp
File was NOT Found : c:\documents and settings\user\desktop\register stopzilla!.lnk
File was NOT Found : c:\documents and settings\user\desktop\test.txt
File was NOT Found : c:\documents and settings\user\desktop\launch stopzilla!.lnk
File was NOT Found : c:\documents and settings\user\desktop\stopzilla help!.lnk
File was NOT Found : c:\documents and settings\all users\desktop\register stopzilla!.lnk
File was NOT Found : c:\documents and settings\all users\desktop\launch stopzilla!.lnk
Directory DOES NOT Exists: c:\program files\stopzilla!\diagnostics
Directory DOES NOT Exists: c:\program files\stopzilla\diagnostics
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla!\diagnostics
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla\diagnostics
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla!\drivers
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla!\x32
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla!\x64
Directory Exists: c:\program files\stopzilla!
Deleted directory: c:\program files\stopzilla!
Directory DOES NOT Exists: c:\program files\stopzilla
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla!
Directory DOES NOT Exists: %programfiles(x86)%\stopzilla
Directory DOES NOT Exists: c:\program files\common files\stopzilla!
Directory DOES NOT Exists: c:\program files\common files\stopzilla
Directory Exists: c:\program files\common files\is3\anti-spyware
Deleted directory: c:\program files\common files\is3\anti-spyware
Directory Exists: c:\program files\common files\is3
Deleted directory: c:\program files\common files\is3
Directory DOES NOT Exists: %programfiles(x86)%\common files\stopzilla!
Directory DOES NOT Exists: %programfiles(x86)%\common files\stopzilla
Directory DOES NOT Exists: %programfiles(x86)%\common files\is3\anti-spyware
Directory DOES NOT Exists: %programfiles(x86)%\common files\is3
Directory Exists: c:\docume~1\user\locals~1\temp\stopzilla!
Deleted directory: c:\docume~1\user\locals~1\temp\stopzilla!
Directory DOES NOT Exists: c:\docume~1\user\locals~1\temp\stopzilla
Directory DOES NOT Exists: c:\windows\temp\stopzilla
Directory Exists: c:\windows\temp\stopzilla!
Deleted directory: c:\windows\temp\stopzilla!
Directory DOES NOT Exists: c:\documents and settings\user\application data\stopzilla!
Directory DOES NOT Exists: c:\documents and settings\user\application data\stopzilla
Directory Exists: c:\documents and settings\all users\application data\stopzilla!
Deleted directory: c:\documents and settings\all users\application data\stopzilla!
Directory DOES NOT Exists: c:\documents and settings\all users\application data\stopzilla
Directory DOES NOT Exists: c:\documents and settings\all users\application data\siteguard
Directory DOES NOT Exists: c:\documents and settings\all users\stopzilla!\quarantine
Directory DOES NOT Exists: c:\documents and settings\all users\stopzilla!\vipre
Directory DOES NOT Exists: c:\documents and settings\all users\stopzilla!
Directory DOES NOT Exists: c:\documents and settings\all users\documents\stopzilla!
Directory DOES NOT Exists: c:\documents and settings\all users\start menu\programs\stopzilla!
Directory Exists: c:\documents and settings\all users\start menu\programs\stopzilla
Deleted directory: c:\documents and settings\all users\start menu\programs\stopzilla
Directory DOES NOT Exists: c:\documents and settings\user\start menu\programs\stopzilla!
Directory DOES NOT Exists: c:\documents and settings\user\start menu\programs\stopzilla
Directory DOES NOT Exists: c:\documents and settings\all users\microsoft\windows\start menu\programs\stopzilla
Directory DOES NOT Exists: c:\documents and settings\all users\microsoft\windows\start menu\programs\stopzilla!
File was NOT Found : c:\windows\system32\is3cmd.dll
File was NOT Found : c:\windows\system32\is3core.dll
File was NOT Found : c:\windows\system32\is3hook.dll
File was NOT Found : c:\windows\system32\is3http.dll
File was NOT Found : c:\windows\system32\is3mfc.dll
File was NOT Found : c:\windows\system32\is3msi.dll
File was NOT Found : c:\windows\system32\is3net.dll
File was NOT Found : c:\windows\system32\is3ntsvc.dll
File was NOT Found : c:\windows\system32\is3perst.dll
File was NOT Found : c:\windows\system32\is3sys32.dll
File was NOT Found : c:\windows\system32\szframe.dll
File was NOT Found : c:\windows\system32\szbhocor.dll
File was NOT Found : c:\windows\system32\szcore.dll
File was NOT Found : c:\windows\system32\sziebho.dll
File was NOT Found : c:\windows\system32\szmfc.dll
File was NOT Found : c:\windows\system32\szsvc.dll
File was NOT Found : c:\windows\system32\sztrgcln.dll
File was NOT Found : c:\windows\system32\is3base.dll
File was NOT Found : c:\windows\system32\is3dba.dll
File was NOT Found : c:\windows\system32\is3hooks.dll
File was NOT Found : c:\windows\system32\is3inet.dll
File was NOT Found : c:\windows\system32\is3lsr.dll
File was NOT Found : c:\windows\system32\is3svc.dll
File was NOT Found : c:\windows\system32\is3ui.dll
File was NOT Found : c:\windows\system32\is3vfs.dll
File was NOT Found : c:\windows\system32\is3win32.dll
File was NOT Found : c:\windows\system32\is3wlhandler.dll
File was NOT Found : c:\windows\system32\is3xdata.dll
File was NOT Found : c:\windows\system32\is39xldr.dll
File was NOT Found : c:\windows\system32\szpahost.dll
File was NOT Found : c:\windows\system32\szbase.dll
File was NOT Found : c:\windows\system32\is3htui.dll
File was NOT Found : c:\windows\system32\szbase5.dll
File was NOT Found : c:\windows\system32\is3htui5.dll
File was NOT Found : c:\windows\system32\is3dba5.dll
File was NOT Found : c:\windows\system32\is3ui5.dll
File was NOT Found : c:\windows\system32\is3hks5.dll
File was NOT Found : c:\windows\system32\is3xdat5.dll
File was NOT Found : c:\windows\system32\is3win325.dll
File was NOT Found : c:\windows\system32\is3inet5.dll
File was NOT Found : c:\windows\system32\is3svc5.dll
File was NOT Found : c:\windows\system32\is3base5.dll
File was NOT Found : c:\windows\system32\szcomp5.dll
File was NOT Found : c:\windows\system32\szio5.dll
File was Found : c:\windows\system32\sbbd.exe
Deleted file c:\windows\system32\sbbd.exe
File was NOT Found : c:\windows\syswow64\szbase5.dll
File was NOT Found : c:\windows\syswow64\is3htui5.dll
File was NOT Found : c:\windows\syswow64\is3dba5.dll
File was NOT Found : c:\windows\syswow64\is3ui5.dll
File was NOT Found : c:\windows\syswow64\is3hks5.dll
File was NOT Found : c:\windows\syswow64\is3xdat5.dll
File was NOT Found : c:\windows\syswow64\is3win325.dll
File was NOT Found : c:\windows\syswow64\is3inet5.dll
File was NOT Found : c:\windows\syswow64\is3svc5.dll
File was NOT Found : c:\windows\syswow64\is3base5.dll
File was NOT Found : c:\windows\syswow64\szcomp5.dll
File was NOT Found : c:\windows\syswow64\szio5.dll
File was NOT Found : c:\windows\syswow64\sbbd.exe
File was Found : c:\windows\system32\drivers\gfiark.sys
Deleted file c:\windows\system32\drivers\gfiark.sys
File was Found : c:\windows\system32\drivers\sbapifs.sys
Deleted file c:\windows\system32\drivers\sbapifs.sys
File was NOT Found : c:\windows\system32\drivers\sbapifsl.sys
File was Found : c:\windows\system32\drivers\sbaphd.sys
Deleted file c:\windows\system32\drivers\sbaphd.sys
File was NOT Found : c:\windows\system32\drivers\sbredrv.sys
File was Found : c:\windows\system32\drivers\szkg.sys
Deleted file c:\windows\system32\drivers\szkg.sys
File was NOT Found : c:\windows\syswow64\drivers\szkg64.sys
File was Found : c:\windows\system32\drivers\is3srv.sys
Deleted file c:\windows\system32\drivers\is3srv.sys
File was NOT Found : c:\windows\syswow64\drivers\is3srv64.sys
File was NOT Found : c:\windows\system32\drivers\szkgfs.sys
File was NOT Found : c:\windows\syswow64\drivers\szkgfs64.sys
File was Found : c:\windows\system32\drivers\kgpcpy.cfg
Deleted file c:\windows\system32\drivers\kgpcpy.cfg
File was NOT Found : c:\windows\syswow64\drivers\kgpcpy.cfg
File was NOT Found : \szkgfs.dat
Deleted reg Key CLSID\{FC403349-CE73-486b-8BAE-43D26F751B35}
Deleted reg Key VirtualStore\MACHINE\SOFTWARE\Wow6432Node\ISSS
Deleted reg Key SYSTEM\CurrentControlSet\Services\szkg
Deleted reg Key SYSTEM\CurrentControlSet\Services\is3srv
Deleted reg Key SYSTEM\CurrentControlSet\Services\szkgfs
Deleted reg Key SYSTEM\CurrentControlSet\Services\gfiark
Deleted reg Key SYSTEM\CurrentControlSet\Services\sbre
Deleted reg Key SYSTEM\CurrentControlSet\Services\STOPzilla Local Service
Entering function DeleteInstallerProductKey
Trying to open: HKCR\installer\products
Opened product key: HKCR\installer\products
Query Subkey: HKCR\installer\products\00002109020090400000000000F01FEC
Query Subkey Value of Product Name: Compatibility Pack for the 2007 Office system
Query Subkey: HKCR\installer\products\00002159F30090400000000000F01FEC
Query Subkey Value of Product Name: Microsoft Office Excel Viewer
Query Subkey: HKCR\installer\products\00006FCA9B229EC4896DC2FC53B9CA70
Query Subkey Value of Product Name: ABBYY FineReader 6.0 Sprint
Query Subkey: HKCR\installer\products\0336A2D4B8F23E11C9048BCAF6798BE8
Query Subkey Value of Product Name: Google Earth
Query Subkey: HKCR\installer\products\0B79C053C7D38EE4AB9A00CB3B5D2472
Query Subkey Value of Product Name: WebFldrs XP
Query Subkey: HKCR\installer\products\0C12434CBCD062F4A8B3FB6151F58997
Query Subkey Value of Product Name: TRENDnet TEW-424UB Wireless USB 2.0 Adapter Driver and Utility
Query Subkey: HKCR\installer\products\0DC1503A46F231838AD88BCDDC8E8F7C
Query Subkey Value of Product Name: Microsoft .NET Framework 3.0 Service Pack 2
Query Subkey: HKCR\installer\products\0F4ACED98C460254A9AFE8A31A52AA95
Query Subkey Value of Product Name: STOPzilla
Found Key stopzilla
Deleted Key: HKCR\installer\products\0F4ACED98C460254A9AFE8A31A52AA95
Query Subkey: HKCR\installer\products\11E8A78F4A2057843A5A951680B1E0E4
Query Subkey Value of Product Name: OpenOffice.org 2.4
Query Subkey: HKCR\installer\products\18555481990E8AB4CBB63FB4F26006C0
Query Subkey Value of Product Name: Google Toolbar for Internet Explorer
Query Subkey: HKCR\installer\products\1881ED2242D918945BCCCEE7F9F2D425
Query Subkey Value of Product Name: Rhapsody Player Engine
Query Subkey: HKCR\installer\products\2589E184C0ADB304DA4A508DC6B89F9A
Query Subkey Value of Product Name: Google Photos Screensaver
Query Subkey: HKCR\installer\products\26DDC2EC4210AC63483DF9D4FCC5B59D
Query Subkey Value of Product Name: Microsoft .NET Framework 3.5 SP1
Query Subkey: HKCR\installer\products\4255D12C079AAF24CAA8958B7CDCAC13
Query Subkey Value of Product Name: QuickTime
Query Subkey: HKCR\installer\products\46B5A9879DD95AB419A50FCFA0B1B7EF
Query Subkey Value of Product Name: Apple Software Update
Query Subkey: HKCR\installer\products\4EA42A62D9304AC4784BF238120662FF
Query Subkey Value of Product Name: Java(TM) 6 Update 26
Query Subkey: HKCR\installer\products\4EA42A62D9304AC4784BF238120701FF
Query Subkey Value of Product Name: Java 7 Update 10
Query Subkey: HKCR\installer\products\52FB46BF3953E4E4AA5848EA1F1D74F5
Query Subkey Value of Product Name: Broadcom Management Programs
Query Subkey: HKCR\installer\products\56A968A049C8C7F45A7C79D2C3C8DEE9
Query Subkey Value of Product Name: MSXML 6.0 Parser (KB933579)
Query Subkey: HKCR\installer\products\5A440F64B8EC691489E4B56D25E563D1
Query Subkey Value of Product Name: Apple Application Support
Query Subkey: HKCR\installer\products\62287FAB00234BD4EB33D429A2978904
Query Subkey Value of Product Name: Windows Presentation Foundation
Query Subkey: HKCR\installer\products\68AB67CA408033019195008120111403
Query Subkey Value of Product Name: Adobe Refresh Manager
Query Subkey: HKCR\installer\products\68AB67CA7DA73301B744BA0000000010
Query Subkey Value of Product Name: Adobe Reader XI
Query Subkey: HKCR\installer\products\6E8A266FCD4F2A1409E1C8110F44DBCE
Query Subkey Value of Product Name: MSXML 4.0 SP2 (KB973688)
Query Subkey: HKCR\installer\products\6FF81AEDA48D2424693696E2B55A8650
Query Subkey Value of Product Name: ScanSoft PaperPort 11
Query Subkey: HKCR\installer\products\72B963E72E315A14899753E81E8C5BDA
Query Subkey Value of Product Name: Broadcom NetXtreme Ethernet Controller
Query Subkey: HKCR\installer\products\84779EDF05021B74B9DD0E9426F6ED36
Query Subkey Value of Product Name: Smartparts Desktop
Query Subkey: HKCR\installer\products\8A0F842331866D117AB7000B0D610004
Query Subkey Value of Product Name: Java(TM) 6 Update 4
Query Subkey: HKCR\installer\products\8A0F842331866D117AB7000B0D610007
Query Subkey Value of Product Name: Java(TM) 6 Update 7
Query Subkey: HKCR\installer\products\9040580900063D11C8EF10054038389C
Query Subkey Value of Product Name: Microsoft Office Word Viewer 2003
Query Subkey: HKCR\installer\products\93BAD29AC2E44034A96BCB446EB8552E
Query Subkey Value of Product Name: Google Update Helper
Query Subkey: HKCR\installer\products\A1872CB26F7FE25459BE10A825F2B1C2
Query Subkey Value of Product Name: PaperPort Image Printer
Query Subkey: HKCR\installer\products\A49D0C45764FCBA4D920E6854768864D
Query Subkey Value of Product Name: iTunes
Query Subkey: HKCR\installer\products\b25099274a207264182f8181add555d0
Query Subkey Value of Product Name: Microsoft Visual C++ 2005 Redistributable
Query Subkey: HKCR\installer\products\CEAE6B36970F589458B5A9F70B434D6D
Query Subkey Value of Product Name: Santa Clara County Water Wise Gardening
Query Subkey: HKCR\installer\products\D20352A90C039D93DBF6126ECE614057
Query Subkey Value of Product Name: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Query Subkey: HKCR\installer\products\D272491B29F1FD6499BED8C59EC14BCE
Query Subkey Value of Product Name: Adobe AIR
Query Subkey: HKCR\installer\products\DC3BF90CC0D3D2F398A9A6D1762F70F3
Query Subkey Value of Product Name: Microsoft .NET Framework 2.0 Service Pack 2
Query Subkey: HKCR\installer\products\DDA39468D428E8B4DB27C8D5DC5CA217
Query Subkey Value of Product Name: MSXML 4.0 SP2 (KB954430)
Query Subkey: HKCR\installer\products\DDE7F2BCF1D91C3409CFF425AE1E271A
Query Subkey Value of Product Name: Microsoft .NET Framework 1.1
Query Subkey: HKCR\installer\products\F60730A4A66673047777F5728467D401
Query Subkey Value of Product Name: Java Auto Updater
Entering function DeleteInstallerProductKey
Trying to open: HKCU\software\microsoft\installer\products
Opened product key: HKCU\software\microsoft\installer\products
Query Subkey: HKCU\software\microsoft\installer\products\9F18C28F5BDADB24FA9EDDD5DF2D513E
Query Subkey Value of Product Name: Citrix Online Launcher
Entering function DeleteInstallerProductKey
Trying to open: HKLM\software\classes\installer\products
Opened product key: HKLM\software\classes\installer\products
Query Subkey: HKLM\software\classes\installer\products\00002109020090400000000000F01FEC
Query Subkey Value of Product Name: Compatibility Pack for the 2007 Office system
Query Subkey: HKLM\software\classes\installer\products\00002159F30090400000000000F01FEC
Query Subkey Value of Product Name: Microsoft Office Excel Viewer
Query Subkey: HKLM\software\classes\installer\products\00006FCA9B229EC4896DC2FC53B9CA70
Query Subkey Value of Product Name: ABBYY FineReader 6.0 Sprint
Query Subkey: HKLM\software\classes\installer\products\0336A2D4B8F23E11C9048BCAF6798BE8
Query Subkey Value of Product Name: Google Earth
Query Subkey: HKLM\software\classes\installer\products\0B79C053C7D38EE4AB9A00CB3B5D2472
Query Subkey Value of Product Name: WebFldrs XP
Query Subkey: HKLM\software\classes\installer\products\0C12434CBCD062F4A8B3FB6151F58997
Query Subkey Value of Product Name: TRENDnet TEW-424UB Wireless USB 2.0 Adapter Driver and Utility
Query Subkey: HKLM\software\classes\installer\products\0DC1503A46F231838AD88BCDDC8E8F7C
Query Subkey Value of Product Name: Microsoft .NET Framework 3.0 Service Pack 2
Query Subkey: HKLM\software\classes\installer\products\11E8A78F4A2057843A5A951680B1E0E4
Query Subkey Value of Product Name: OpenOffice.org 2.4
Query Subkey: HKLM\software\classes\installer\products\18555481990E8AB4CBB63FB4F26006C0
Query Subkey Value of Product Name: Google Toolbar for Internet Explorer
Query Subkey: HKLM\software\classes\installer\products\1881ED2242D918945BCCCEE7F9F2D425
Query Subkey Value of Product Name: Rhapsody Player Engine
Query Subkey: HKLM\software\classes\installer\products\2589E184C0ADB304DA4A508DC6B89F9A
Query Subkey Value of Product Name: Google Photos Screensaver
Query Subkey: HKLM\software\classes\installer\products\26DDC2EC4210AC63483DF9D4FCC5B59D
Query Subkey Value of Product Name: Microsoft .NET Framework 3.5 SP1
Query Subkey: HKLM\software\classes\installer\products\4255D12C079AAF24CAA8958B7CDCAC13
Query Subkey Value of Product Name: QuickTime
Query Subkey: HKLM\software\classes\installer\products\46B5A9879DD95AB419A50FCFA0B1B7EF
Query Subkey Value of Product Name: Apple Software Update
Query Subkey: HKLM\software\classes\installer\products\4EA42A62D9304AC4784BF238120662FF
Query Subkey Value of Product Name: Java(TM) 6 Update 26
Query Subkey: HKLM\software\classes\installer\products\4EA42A62D9304AC4784BF238120701FF
Query Subkey Value of Product Name: Java 7 Update 10
Query Subkey: HKLM\software\classes\installer\products\52FB46BF3953E4E4AA5848EA1F1D74F5
Query Subkey Value of Product Name: Broadcom Management Programs
Query Subkey: HKLM\software\classes\installer\products\56A968A049C8C7F45A7C79D2C3C8DEE9
Query Subkey Value of Product Name: MSXML 6.0 Parser (KB933579)
Query Subkey: HKLM\software\classes\installer\products\5A440F64B8EC691489E4B56D25E563D1
Query Subkey Value of Product Name: Apple Application Support
Query Subkey: HKLM\software\classes\installer\products\62287FAB00234BD4EB33D429A2978904
Query Subkey Value of Product Name: Windows Presentation Foundation
Query Subkey: HKLM\software\classes\installer\products\68AB67CA408033019195008120111403
Query Subkey Value of Product Name: Adobe Refresh Manager
Query Subkey: HKLM\software\classes\installer\products\68AB67CA7DA73301B744BA0000000010
Query Subkey Value of Product Name: Adobe Reader XI
Query Subkey: HKLM\software\classes\installer\products\6E8A266FCD4F2A1409E1C8110F44DBCE
Query Subkey Value of Product Name: MSXML 4.0 SP2 (KB973688)
Query Subkey: HKLM\software\classes\installer\products\6FF81AEDA48D2424693696E2B55A8650
Query Subkey Value of Product Name: ScanSoft PaperPort 11
Query Subkey: HKLM\software\classes\installer\products\72B963E72E315A14899753E81E8C5BDA
Query Subkey Value of Product Name: Broadcom NetXtreme Ethernet Controller
Query Subkey: HKLM\software\classes\installer\products\84779EDF05021B74B9DD0E9426F6ED36
Query Subkey Value of Product Name: Smartparts Desktop
Query Subkey: HKLM\software\classes\installer\products\8A0F842331866D117AB7000B0D610004
Query Subkey Value of Product Name: Java(TM) 6 Update 4
Query Subkey: HKLM\software\classes\installer\products\8A0F842331866D117AB7000B0D610007
Query Subkey Value of Product Name: Java(TM) 6 Update 7
Query Subkey: HKLM\software\classes\installer\products\9040580900063D11C8EF10054038389C
Query Subkey Value of Product Name: Microsoft Office Word Viewer 2003
Query Subkey: HKLM\software\classes\installer\products\93BAD29AC2E44034A96BCB446EB8552E
Query Subkey Value of Product Name: Google Update Helper
Query Subkey: HKLM\software\classes\installer\products\A1872CB26F7FE25459BE10A825F2B1C2
Query Subkey Value of Product Name: PaperPort Image Printer
Query Subkey: HKLM\software\classes\installer\products\A49D0C45764FCBA4D920E6854768864D
Query Subkey Value of Product Name: iTunes
Query Subkey: HKLM\software\classes\installer\products\b25099274a207264182f8181add555d0
Query Subkey Value of Product Name: Microsoft Visual C++ 2005 Redistributable
Query Subkey: HKLM\software\classes\installer\products\CEAE6B36970F589458B5A9F70B434D6D
Query Subkey Value of Product Name: Santa Clara County Water Wise Gardening
Query Subkey: HKLM\software\classes\installer\products\D20352A90C039D93DBF6126ECE614057
Query Subkey Value of Product Name: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Query Subkey: HKLM\software\classes\installer\products\D272491B29F1FD6499BED8C59EC14BCE
Query Subkey Value of Product Name: Adobe AIR
Query Subkey: HKLM\software\classes\installer\products\DC3BF90CC0D3D2F398A9A6D1762F70F3
Query Subkey Value of Product Name: Microsoft .NET Framework 2.0 Service Pack 2
Query Subkey: HKLM\software\classes\installer\products\DDA39468D428E8B4DB27C8D5DC5CA217
Query Subkey Value of Product Name: MSXML 4.0 SP2 (KB954430)
Query Subkey: HKLM\software\classes\installer\products\DDE7F2BCF1D91C3409CFF425AE1E271A
Query Subkey Value of Product Name: Microsoft .NET Framework 1.1
Query Subkey: HKLM\software\classes\installer\products\F60730A4A66673047777F5728467D401
Query Subkey Value of Product Name: Java Auto Updater
Scanning Uninstall Key
Scanning Uninstall Key
Found Uninstall Keys to delete
Deleting key SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9deca4f0-64c8-4520-9afa-8e3aa125aa59}
Looking for Folder Components.
Deleted Value: c:\documents and settings\all users\application data\stopzilla!\
Deleted Value: c:\documents and settings\all users\application data\stopzilla!\quarantine\
Deleted Value: c:\program files\stopzilla!\
Deleted Value: c:\program files\stopzilla!\x32\
Deleted Value: c:\program files\stopzilla!\x64\
Deleted Value: c:\program files\stopzilla!\drivers\i386\
Deleted Value: c:\program files\stopzilla!\drivers\
Deleted Value: c:\program files\stopzilla!\drivers\amd64\
Deleted Value: c:\documents and settings\all users\start menu\programs\stopzilla\
Looking for Components.
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\007E0A64EBD2A92449A4CDC9CA1F569F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\007E0AB4EBD2A92449A4CDC9CA1F569F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\052CCFC9AD506524FAA7A4B3EFD26222
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05A6D0E347CFD6046BB46D93FFE1FEFA
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08A1F577B442F264C8A77D40D88E3F1B
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\102918FE5A87D1347B3AE587EBF2D751
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A7B87D7A519C3248BB1466105A314C1
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1BBAA9BEC584C26489BF4EE1C71729A3
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C5B2EF91CA022340866C154C71DAD50
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2122D1FB378B2E444A100F786F575110
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B6F280CF71071E4B8A28C0F2ACC148C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C4702EA33BF673438726B95BA292CC7
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36B8165237473D749BA9BC62A482CD70
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36EA20426A8A1E44A8EDED03FDEA0486
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\376DAF40EE471624FB8965C0EEF54B3A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\389CDC3B97A4DC24E9141A824CB699A4
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3AFB9FBD800CA0C4EA61EF53A922CE0F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CBF92F66AAE6FA44A8B543205990A3B
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\48A9D0FCFE0AB5946849EA3D8AAC466C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A11140EE02B0784987D6B26B0F1320A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B28E4103F928414BB756FCE368BC6D9
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4E6FA5066F6FD07419F30F3B07A8475A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5075A61A8CA2A1D43B14A1FCA72FDCBB
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51007220C0FE7D748A261577D1E6BA81
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5130C2D847A59F1488FA184C43C528F4
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53480C1B5850B5E4CAEEAE9E4A37A486
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\543B1DD1E7760A44CB7AD6BE573C1DC6
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5491D5159FD41FC439AF83533CFC11A3
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\55D590FD6C4152A4A88B9CB8B907C663
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5AD8C8E67FD21234D8B7A134D6AAE5DE
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D7C4352D8360CE47BFB7D14CD8F7274
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D7C43BAD8360CE47BFB7D14CD8F5576
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\603FF5E932E0361418B8FE3EA8FA3F6A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61CD3E534A45A094FAB21AD64772ED3F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62E9700B7B347FE498D80126DE4A8C2C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67E9B9FD2DEFC934381910B52FBD8304
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68347B98238EDC34CB4DDED68662FCB9
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69A6DD7C056B298418B100B5C756E5D6
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A8D8770FDCB39E42A4B101AA95D9D3E
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AB409E9964174747969161A1E5E6E3C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE3C660FD3A564448A1D36873538A1A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71A26732452E8DF48A392D5B8E2A4987
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75FD42A6B34AB0F4FB6BB8F7FA932686
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76592EBE27EA0D44DA34669D5BCB90DC
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\77498C552187F2841AF875DD994E3029
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7791ADD970521BA4B99E2E6CF941D57E
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\77D06F680D87D7D4C918FC1AC21E74B9
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E02F718C91F95C468B51B1C54471DA3
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7F1DAA86396A4C648851F583084C1F73
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81CE3078FAEC05846A12350CAC58CDD5
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8326F49567452604093A866512B08C19
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\83492282CE799CC46B0524A0C9309470
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8581670AD339456459925008F2CB6FC2
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B215F20982F07E42BB345A985A76A8F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B215FA0982F07E42BB345A985A76A8F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\927B4061B9429A54BB4ADF427A5F39F2
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92E9A99032FE3D848BB1006E0F81404C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\984BDEC3BBF9023449CAC78512388AA4
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9ABA9273D1EA0DC4D830DD541EC853BE
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A8B57F15B79202644B3675803509DF2A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACD50AA2739583C479EA800EEB603FA3
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF5E5B0B2EF8C8F4D8B9FB656D18050B
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1109B98F14537949A270ED219C6B8E0
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B2E84C9FEF1BC084AA7D4BFB637F066E
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B40A78FD542531C4CA5D35721E47C7A1
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4380DB39B5D3EC488F2B78ED0419C8C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4646FD7788EEBE49A2D0D850E9F04D7
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B55EDD0E543194B45829B3DBE50DCF0E
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B71CFA7565ABD1144A7635C91C7F7C37
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B9DF9CEF3CF3FE34580006BCD3CD143B
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB607F2E8B54A45468AA2C0AC643E45F
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF0C31CF4FBF9CB4B81262E6407CC443
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C033846CE8CBB4F469479DF968552644
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C0EFC6964932DF94EB5329733546E346
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C84A12A5101FA9C4E816DF649D863C8E
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CAC07970F7ACD12418869DD9E585061C
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC589A669D1DA1D458B96965EED16B62
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D0F33C31A6BAC5345A2047853E811CA4
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D1E85E55DB0314B468DCC3E784BFD238
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2B9F250F3B782A4E9F99092BB6B7BAE
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5589D8F380C3194F90F1160F247B438
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D65EA59B778330A41B07FAF8C34D9480
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6C64051D7164BF4E8B6F3929B79DC5A
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DADA787A60FC98F4ABC9C63E6A19DF12
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB540B8EFC56CC946841E25A324740E8
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E0C1293C9230FD14D8C426185D712D4B
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36D4F07ACDF09A46B45E306D5A6E234
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3CB6342EC24A42419884988C61A3D2D
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEC9BED0282C59B46886E93E70271F18
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EECD62EBC34C1924A81E0F6D81A7DC39
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEFF958FB4DE1CB4783F735944364D06
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2CC53BC52E68A248B343A8757F4E0FF
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F798EC689F111964AA41DCD4C5993244
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F8307CB900F62E84E9EFFA46A5F4DBE0
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA753EDB13E262D4298F771A85B84D00
Deleting Key: hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD56009C58AB75148A3C75FCD4383030
-
Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.
1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.
If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
Please run AdwCleaner again and hit the clean button.
What AV are you running?
Please download Junkware Removal Tool (http://thisisudax.org/downloads/JRT.exe) to your desktop.
•Warning! Once the scan is complete JRT will shut down your browser with NO warning.
•Shut down your protection software now to avoid potential conflicts.
•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this (http://www.bleepingcomputer.com/forums/topic114351.html) link to see a list of security programs that should be disabled and how to disable them.
•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator
•The tool will open and start scanning your system.
•Please be patient as this can take a while to complete depending on your system's specifications.
•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
•Copy and Paste the JRT.txt log into your next message.
-
SuperDave,
Thank you for helping me with my computer problems. I forgot to mention in my first post that I am not getting any sound through my speakers (no sound while on YouTube); I have not checked my sound system since that first post.
I also forgot to mention that I'm running Microsoft Windows XP, Professional, Version 2002, Service Pack 3. The browser I use is Mozilla Firefox and I have the Internet Explorer browser on my system as well.
I ran the AdwCleaner again per your instructions and hit "clean"; it did not fix the problems. Log posted below.
I am running STOPzilla AVM anti-virus software subscription edition (real time protection); it seems to have left my system (deleted somehow?) after the JRT program ran (log below) and I went on-line to write this reply--I'm so sorry that I forgot to look for and reactivate/turn on my A/V before going on-line. :(
I'm not sure what to do about this lack of A/V at this time; maybe you don't want the A/V on at all at this point in the process? ??? If you wish, I can run the version of STOPzilla A/V that is on my system (.exe file) or I can contact STOPzilla to download a new copy of the program. Let me know how to proceed; I will not surf the web on my computer until I hear back from you. By the way, I do have access to another computer that is working so I will look for your reply on that other computer in case there is something I should do on startup on my computer. I have been able to access the Computer Hope site on my computer where I can see and reply to your messages (as I am doing now for this reply); hopefully, I'll be able to do that again on my next reply to you (again, I'll look for your reply and instructions first on the other computer).
I had to use another computer to download the JRT program onto a USB stick; JRT would not download onto my system (I got a message that it "failed" to download on my computer). In order to download the JRT onto a USB stick on the other computer and transfer that program onto my computer, I followed your instructions to hold the shift down as your Forum's instructions described while inserting the USB stick--went without incident.
The good news is that, after running the JRT, my MSN home page is now showing all the pictures and text--seems to be fully functional now. :) Also after the JRT run, I went (without the A/V protection) onto the Campmor (camping supplies) website home page and found some of the pictures still not showing well though it seems there are fewer of this type of problem (some pictures broken into horizontal bands).
Also after running JRT, I went onto another camping supply store website's home page, REI, and I can now see all the text and pictures. Before running JRT, that website would take twenty minutes at least to download only a list of text that appeared on the left side of the screen.
I think overall we have made good progress. :) Thank you again for helping me with these problems.
Here are the logs as requested:
ADWCleaner log:
# AdwCleaner v4.208 - Logfile created 31/07/2015 at 16:42:51
# Updated 09/07/2015 by Xplode
# Database : 2015-07-09.2 [Local]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : User - KENCOMPUTER
# Running from : C:\Documents and Settings\User\My Documents\Downloads\adwcleaner_4.208(1).exe
# Option : Cleaning
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Documents and Settings\User\Local Settings\Application Data\PackageAware
***** [ Scheduled tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Uniblue
***** [ Web browsers ] *****
-\\ Internet Explorer v8.0.6001.18702
-\\ Mozilla Firefox v39.0 (x86 en-US)
*************************
AdwCleaner[R0].txt - [1039 bytes] - [30/07/2015 15:59:33]
AdwCleaner[R1].txt - [1102 bytes] - [31/07/2015 16:38:45]
AdwCleaner[S0].txt - [1036 bytes] - [31/07/2015 16:42:51]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1095 bytes] ##########
JRT log:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.4 (07.27.2015:1)
OS: Microsoft Windows XP x86
Ran by User on Tue 08/04/2015 at 18:16:27.06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BD0C0251-D14A-4006-84FC-65D35DD19309}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
~~~ Files
Successfully deleted: [File] C:\Program Files\GUTE6.tmp
~~~ Folders
~~~ FireFox
Emptied folder: C:\Documents and Settings\User\Application Data\mozilla\firefox\profiles\2ds0ru54.default-1417913588875\minidumps [1 files]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 08/04/2015 at 18:23:25.73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
Did you try re-installing your AV program again? If not, try to do it.
Please run MBAM again.
I'd like to scan your machine with ESET OnlineScan
•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan (http://eset.com/onlinescan)
•Click the (http://i424.photobucket.com/albums/pp322/digistar/esetOnline.png) button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on (http://i424.photobucket.com/albums/pp322/digistar/esetSmartInstall.png) to download the ESET Smart Installer. Save it to your desktop.
- Double click on the (http://i424.photobucket.com/albums/pp322/digistar/esetSmartInstallDesktopIcon-1.png) icon on your desktop.
•Check (http://i424.photobucket.com/albums/pp322/digistar/esetAcceptTerms.png)
•Click the (http://i424.photobucket.com/albums/pp322/digistar/esetStart.png) button.
•Accept any security warnings from your browser.
- Leave the check mark next to Remove found threats.
•Check (http://i424.photobucket.com/albums/pp322/digistar/esetScanArchives.png)
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push (http://i424.photobucket.com/albums/pp322/digistar/esetListThreats.png)
•Push (http://i424.photobucket.com/albums/pp322/digistar/esetExport.png), and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the (http://i424.photobucket.com/albums/pp322/digistar/esetBack.png) button.
•Push (http://i424.photobucket.com/albums/pp322/digistar/esetFinish.png)
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt
-
Super Dave,
The AV was on my system on strartup and the icon for it was in the Start task bar at the bottom of the screen--it's strange that it returned in the active status (I had turned it off for the JRT program run). :) Per your introductory instructions in your first reply, I have not run the AV since we have started this debugging process.
I ran MBAM again per your instructions; it found no threats. Log is posted below. :)
I tried to download the ESET Online Scan on my machine but was able to do so only after repeated attempts (I kept hitting the retry button repeatedly on each failure and it would resume downloading from its last position). However this download technique must have corrupted the file because when I tried to run the program I got a message window that said "The parameter is incorrect". :( By the way, opening the home page for ESET (first step in your instructions) took a long time and the page was not very complete--took 20 minutes at least to provide primarily text on the left side of the screen.
I was able to download the esetsmartinstaller_enu. onto a USB stick on the other computer and was able to load the program onto my computer. I tried several times to run that program on my computer (I got to your step "Click the 'Start' button." and the program began dowloading) but, during the installation process (three step process--1. Component download, 2. Component registration, 3. Start) the program could not download its components--I got an error message "Unexpected error 3." :(
What should I do next? ??? I considered trying to download more of the ESET onto the other computer but not sure if that is possible (would it download in one piece to a specific location?) nor sure if it could be transferred between computers; I thought it best to wait for your instructions before proceeding further.
The log you requested:
MBAM scan log:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 8/6/2015
Scan Time: 1:49:02 PM
Logfile: Malwarebytes scan results, log 8-6-2015.txt
Administrator: Yes
Version: 2.1.8.1057
Malware Database: v2015.06.03.03
Rootkit Database: v2015.08.04.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows XP Service Pack 3
CPU: x86
File System: NTFS
User: User
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 319966
Time Elapsed: 36 min, 41 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 0
(No malicious items detected)
Physical Sectors: 0
(No malicious items detected)
(end)
-
Please run a complete scan with your AV. Are you still having problems with the pictures?
-
Dave,
I tried to run my AV and it won't update so it won't run (the update is the first step to running my AV). I tried several times and it slowly downloads the update for several hours but never completes the update. I get an "Update Error" asking me to make sure I'm connected to the Internet and that my system time is set correctly (I checked both--OK). :(
I'm having mixed results with pictures on websites, mostly problems with some improvements:
1. Some websites are better now; the Campmor website has all pictures showing but has a yellow overcast on some pictures. On another website some text and some pictures are provided and those pictures that are provided are displayed properly while in the past on that website my computer only displayed one image, the banner image, repeated several times down the left side of the screen. I'm still experiencing pictures (some, not all) displayed into horizontal bands on some websites.
2. Other websites won't download pictures at all, only text on the left side of the screen shown. Sometimes these websites will show some pictures with the text--this problem is inconsistent.
3. My MSN homepage has relapsed; it has the same problems as before that I reported to you in my first post. My home page was completely functional after the JRT run for a time (I don't know how long it was functional). My home page now opens with text only on the left side of the screen or sometimes it opens with only half the page with text and pictures on the top portion of page while the bottom portion of the page is entirely missing (text and pictures--lower half of screen screen is blank).
4. In general, these problems are inconsistent--the nature of the problems change occasionally (different amounts of text and pictures display in different/strange formats and quality).
My e-mail works and I can open and use the Computer Hope site; both websites have been fully functional and have worked at normal speed on my computer during this period of computer problems. I am able to see and reply to your posts on my computer.
Let me know what I should do next. Thank you for your help.
-
Please download and install this AV and run a full scan.
Comodo Antivirus (http://www.majorgeeks.com/Comodo_AntiVirus_d5109.html) (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage"
I'm still experiencing pictures (some, not all) displayed into horizontal bands on some websites.
Could you please provide a link to me of one of these sites?
Other websites won't download pictures at all, only text on the left side of the screen shown. Sometimes these websites will show some pictures with the text--this problem is inconsistent.
Does it do this with another browser?
-
Dave:
I could not scan my computer with the Comodo Antivirus; the program fails to execute during the "updating virus database" step in the scan process so the scan was aborted. I tried to scan several times and it usually failed at 5% download of the update at about 20 minutes into the scan. By the way, I had to download the Comodo Antivirus program onto a USB drive on my other computer and transfer the program via a USB stick to my computer; my computer failed to download the program.
On the startup of the Comodo Antivirus, I did not find all the Comodo installation queries you mentioned. I did find the following queries and performed the following (this is all of them):
1. Unchecked: "Set Comodo as the default browser."
2. Unchecked: "Replace existing Google Chrome shortcuts with Comodo shortcuts at the desktop & start menus."
3. Unchecked: "I want to enable added security while in the Internet by changing my DNS settings to Comodo Secure DNS servers."
4. Unchecked: "I want to help Comodo by setting my home page and search engine provider to Yahoo! (Applies to all supported browsers)"
5. Checked: "I want to enable 'Cloud based Behavior Analysis' of unrecognized programs by submitting them to Comodo with respect to privacy policy."
6. Checked: "Send anonymous program usage (e.g. crashes, errors, clicks, etc.) statistics to Comodo in order to improve the products quality."
Links:
Links to sites where I am experiencing picture displayed poorly (in horizontal bands, colored bands, missing entirely or obscured--Mozilla Firefox browser):
http://www.campmor.com/
http://www.campsaver.com/
Link to site where I am experiencing text only down the left side of the page (Mozilla Firefox browser):
http://www.rei.com/
Performance of other browser, Internet Explorer:
My other browser is Internet Explorer; it has the same problems as Mozilla Firefox (the one I normally use) only worse. The Internet Explorer does not connect to the Campsaver nor the REI website at all while Mozilla firefox will connect with display problems (nmnetioned in earlier posts--picture bancing, colored pictures). Internet Explorer does connect to the Campmor site but with more problems at this time than the Mozilla Firefox browser's connection to that website.
On the Campmor site, the page is not displayed correctly in Internet Explorer; it shows some of the header text aligned on the left side of the screen and below that it displays the rest of the header text and logos correctly except for one logo which is cutoff on the bottom of the image (box outline around image is shown but the image in the lower half of the logo is missing/blank screen). The middle of the page lists the merchandise in text that is centered on the page without any pictures that are normally shown. The "featured products' section at the bottom of the page has the correct format but some of the pictures are missing, cutoff/partially missing or are cut in to colored horizontal bands.
In contrast, Mozilla Firefox browser displays the Campmor website completely in its normal format (text and pictures coordinated over the entire page) but some of the pictures are shown in a pixel format (obscured into small rectangles).
Review of Status:
Normal operation: I can still use my e-mail service (Yahoo! service) and am still able to go onto the Computer Hope website at normal speeds.
Problem operation: In addition to the problems mentioned above, I do not have sound on my system; for example, I can't hear the sound in the videos on YouTube but I can see the video at normal speeds. I can't run the videos in the Yahoo website's news articles. My home page, MSN does not display completely (bottom half of page missing) and today it won't display at all. The extent of the problems changes from day to day; for instance, the Craigslist website is displaying a lot of the pictures today (some have the horizontal bands or are partially missing) while only a few days ago no pictures were visible from that site (only text description of the items for sale).
In addition to and to correct my earlier post on a related subject, I right-clicked on the strange image I found on the Campmor site that I reported to you in a previous post (looked like a skull--I dont' think you normally see this logo; it only appears when you click on the "next page" button or next numbered page button to go to subsequent pages of merchandise) and checked its properties and found that is evidently a normal logo of some sort on the Campmor site (GIF image with a "Campmor" description in its ULR address)--sorry that I might have lead you astray on that previous post.
What should I do now? I can try to post screen shots of these problems if that would help. Thank you for helping me with these computer problems.
-
All these sites open correctly for me. I'm just curious. Did you try re-setting the defaults on your browsers? How much free space to you have on your hard drive?
-
Dave:
My hard drive (C: drive) has free space of 37.5 GB and the total size is 74.5 GB.
After reviewing the instructions in "Enabling or Disabling a Program Set as the Default Program" on the Computer Hope website, I checked the defaults on the browsers on my computer: Mozilla Firefox is set as my default browser and the Internet Explorer is not set as my default browser.
I also noticed that during the installation of the Comodo A/V program, a shortcut icon for Internet Chromodo Internet was loaded on my desktop. I clicked on the icon and a new widow is displayed with a http followed by a Yahoo and Comodo address; that widow also indicates that Chromodo is not set as my default browser.
The Chromodo browser connects to the Internet but it will not connect to those websites listed in my last reply (Campmor, Campsaver, and REI). In contrast, Mozilla Firefox and Internet Explorer connect inconsistently at varying degrees/amounts.
I also took a look at the programs on my computer and I don't see any other browsers on my computer.
I guess from what I've read on the Computer Hope website that the browsers are not fighting each other because the Mozilla Firefox browser is the only browser set as a default browser.
I have been reading the Computer Hope website in order to learn more about how a computer works and about some of the more common computer problems in order to better describe my computer problem. I came across some articles on plugins and I remember that I had been looking at some videos about the time I noticed these computer problems. I think I may have some problems in that area.
Thank you for your help.
-
SuperDavee, a brief comment.
The OP has the option of creating a new user account with the same privilege level.
After longing into the new user, he can set any browser as the default to see if that makes any difference. It might. :)
-
I also noticed that during the installation of the Comodo A/V program, a shortcut icon for Internet Chromodo Internet was loaded on my desktop. I clicked on the icon and a new widow is displayed with a http followed by a Yahoo and Comodo address; that widow also indicates that Chromodo is not set as my default browser.
That's just another browser that comes with Comodo. You can uninstall it.Go to Control Panel, Uninstall Programs.
After reviewing the instructions in "Enabling or Disabling a Program Set as the Default Program" on the Computer Hope website, I checked the defaults on the browsers on my computer: Mozilla Firefox is set as my default browser and the Internet Explorer is not set as my default browser.
That's not what I meant by resetting the defaults. In IE you click on Tools, Internet Options, Advanced and click on Reset at the bottom.
-
Dave:
I uninstalled Comodo browser per your instructions.
I reset the default on Internet Explorer using your instructions and restarted my system. There is no improvement in performance--slow computer and corrupted pictures. :(
I tried to reset the default on Mozilla Firefox but could not find anything similar to the procedure for Internet Explorer. I did find a "Restore to Default" button (Tools>Options>General tab>"Restore to Default" button) that seems only to change the home page to Yahoo. I tried that restore and there was no improvement so I returned MSN as my home page.
I did find under the advanced tab (Mozilla Firefox> Tools> options> Advanced tab> Network> Connection (configure how Firefox connects to internet)> Settings > Configure Proxies to access the Internet> the "use system proxy setting" is checked). There are other proxy settings available: no (none), manual, and auto-detect network settings. I did not change anything in this window.
I have noticed that performance has been getting a little worse--my e-mail is taking longer to download and the attachments inside an e-mail will only download after several attempts. Each failed attempt displays a message that the attachment failed to download with a note to check connection with the Internet.
I also noticed the illustration on the Computer Hope website is displaying poorly on my system (the illustration in the article "How do computers connect to each other over the Internet?"). The illustration is full of small rectangular pixels, offset text, banded images, and multicolored images. The text surrounding the illustration is displaying normally and the illustration, though displaying badly, is in its proper place on the page.
-
Please download Farbar Service Scanner (http://download.bleepingcomputer.com/farbar/FSS.exe) to the desktop and run it on the computer with the issue.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Make sure FRST is run under administrator privileges.
Make sure that the Whitelist section is checked.Otherwise, the log will be very long.
You Security programs may prevent the tool from running. If this happens, disable the security program until the scan is completed.
- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press "Scan".
(http://i424.photobucket.com/albums/pp322/digistar/FRSTicon.jpg) (http://s424.photobucket.com/user/digistar/media/FRSTicon.jpg.html)
(http://i424.photobucket.com/albums/pp322/digistar/FRSTconsole-1.jpg) (http://s424.photobucket.com/user/digistar/media/FRSTconsole-1.jpg.html)
- It will create a log (FSS.txt) in the same directory the tool is run.
- Please copy and paste the log to your reply.
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
-
Dave:
I ran the FRST and the log is below. I had to download the program onto the other computer and transfer the program via USB stick to my computer; the program failed to download onto my computer.
I did not find the second FRST log (Addition.txt). I checked my desktop, the directory where my FRST program is stored and ran, and that second log is not there (the first log [text log] is there though and I posted it below).
On the first run of FRST, Comodo had a pop-up that said it would put the FRST program into the sandbox (to prevent the tool from running I think?) and I had a very brief opportunity to disable Comodo's actions (the pop-up disappeared)--I missed the opportunity--but nothing was under quarantine in the Comodo.
I went ahead and ran the FRST and it generated the log below. The Comodo pop-up did not return on subsequent runs of the FRST nor did any any other security programs pop-up during the FRST runs.
I tried to run FRST as an administrator (after running it differently as a "Current user" as mentioned in the following paragraph) by right clicking on the program, clicking "Run as..." and, on the window "Which user account do you want to use to run this program?", I checked "The following user (Administrator)." But the program will not run under administrator because I do not have a password for the administrator. Is there something I need to do further to run as an administrator if this needed at this point?
I ran the FRST under "Current user" with the feature "Protect my computer and data from unauthorized program activity" check marked and it generated the log below. Let me know if you want me to run FRST with that feature unchecked.
I also ran FRST twice; once with the "Internet Services" checked and another time with "Internet Services " and "Other Services" checked and it generated the same log. The whitelist you show is different than the one I had; mine had:
Internet Services
Windows Firewall
System Restore
Security Center/Action Center
Windows Update
Windows Defender
Other Services
Only one version of FRST was available/downloaded upon clicking on the link you provided--no selection was offered.
Thank you for helping me with these computer problems; I appreciate your patience.
FRST log:
Farbar Service Scanner Version: 26-07-2015
Ran by User (administrator) on 16-08-2015 at 16:47:32
Running from "C:\Documents and Settings\User\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Other Services:
==============
File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\afd.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\netbt.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\tcpip.sys => File is digitally signed
C:\WINDOWS\system32\Drivers\ipsec.sys => File is digitally signed
C:\WINDOWS\system32\dnsrslvr.dll => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
Extra List:
=======
AegisP(1) cmdHlp(18) Gpc(3) IPSec(5) NetBT(6) SbFw(15) SbFwHt(9) SBFWIMCLMP(7) sbtis(16) sbtisht(10) Tcpip(4)
0x0D00000005000000030000000400000012000 0000E0000000D00000001000000070000000900 00000A0000000F0000001000000006000000
IpSec Tag value is correct.
**** End of log ****
-
Comodo had a pop-up that said it would put the FRST program into the sandbox (to prevent the tool from running I think?)
Running a program in the sandbox is just a way of protecting your computer.
slow computer and corrupted pictures
What do you mean by slow computer. Is it genarally slow or just while surfing?
What happens with the pictures? Cannot open them? Any messages?
-
Dave,
My computer is not connecting to Internet websites properly; something is interfering with the normal display of pictures and text. Some connections to the Internet are performed at normal speed (my e-mail and some websites) but most of the connections are slow to display and what is displayed is displayed poorly.
My computer functions normally offline; my word document programs, files, and photos work normally and at normal speeds.
While surfing the web I find that the problems are inconsistent--pictures and text not displayed normally. Pictures are displayed in a banded format; the banded format includes images displayed in horizontal stripes across the image and the stripes consist of strange looking colors or an image is displayed in small rectangular pixels and/or a portion of the image is missing. Text is sometimes scrambled or left justified on the page while on the Internet.
Some specific examples of my computer problems (problems occur while surfing the Internet):
My home page, MSN, has not downloaded in the last six hours today; during the previous week I was able to download the top half of that webpage in about a minute or two up to twenty minutes.
Upon trying to connect to some commercial type websites (the camping merchandise supply websites mentioned in my earlier replies) I sometimes get an error message "Content Encoding Error, the page you are trying to view cannot be shown because it uses an invalid or unsupported form of compression." Some websites fail completely to connect one day while partially connecting the next day--things are inconsistent.
The Campmor website is now providing text descriptions of the images in place of images; this is fixed sometimes by reloading the page . A few days ago I got almost everything in their normal format except for a few pictures that displayed in horizontal colored stripes that obscured the image.
The Craigslist website is not displaying the "thumb" pictures of items and is only displaying text--normally I get pictures too on that page. Only when I click on an item is the image of the item displayed (in a new page--this portion of is normal operation). It is puzzling to me that a function is performing in a normal fashion while that function is downstream of a abnormally functioning operation.
The REI website is only showing text left justified with a a few logos included rather than the normal layout of text and pictures evenly spread across the page. Sometimes I get some pictures at the bottom of this page-- this problem too is inconsistent.
Text is sometimes displayed in incomprehensible language; this is sometimes fixed by reconnecting via the reload button.
These problems occur while surfing the web with either of my browsers (Mozilla Firefox and Internet Explorer).
-
Does it do this with different browsers?
-
Dave,
Yes, I have the same problems with both Internet Explorer and Mozilla Firefox browsers. I listed those problems in my earlier replies; I apologize for those very long replies--I'll try to keep my replies short.
I tried both browsers again today and I am having the same image/picture quality issues on the camping merchandise websites and sometimes I can't connect to those websites at all though I repeatedly hit the refresh button.
There is one slight/new development; I noticed there is that same strange looking small animated image of a skull in the center of a rotating green colored disk again on the Campmor site that I mentioned to you in an earlier reply (item #2, original post, July 30) when connecting to that site via the Internet Explorer browser. But this time the image is displayed at the top of the page without any action taken on my part. The skull image is not associated with any page advance button either--the image is displayed at the top of the page on connection to the page. When I right click on the image I do not get a drop down menu. I think that image means I have some malware though I'm not entirely sure. ???
The rest of that Campmor page is not displaying normally via Internet Explorer; it shows the site's "Help" button information vertically on the page that is normally displayed only when you hit that button. The rest of that toolbar, that is normally located at the very top of the page, is missing. Also the second toolbar (the header logo) is displayed normally (horizontally across the page) but the header picture is missing.
On the Mozilla Firefox browser that webpage is displayed normally except the header picture is displayed in small rectangular pixels and with some colored horizontal bands near the bottom of that picture. Sometimes that picture is displayed with yellow and red tinting over the entire image. The skull image is displayed when clicking for the next page of merchandise.
Also, I tried again to run my A/V again today and something really weird happened; it kept updating past the size of the update (407 MB and counting when it shows a 184 MB update size) and the update logo/pie-chart indicates a 100% update has occurred. ???
-
What happens when you boot in Safe Mode with NetWorking?
**********************************************
Please download MiniToolBox (http://download.bleepingcomputer.com/farbar/MiniToolBox.exe) to Desktop and run it.
(http://i424.photobucket.com/albums/pp322/digistar/MiniToolBox.png)
Checkmark the following boxes:
- Flush DNS
- Report IE Proxy Settings
- Reset IE Proxy Settings
- List content of Hosts
- List IP Configuration
- Lst Last 10 Event Viewer Errors
- List Users, Partitions and Memory Size
[/b]
Click Go and copy/paste the log (Result.txt) into your next post.
*************************************************************
Please go to Kaspersky website (http://www.kaspersky.com/kos/eng/partner/default/kavwebscan.html) and perform an online antivirus scan.
1. Read through the requirements and privacy statement and click on Accept button.
2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
3. When the downloads have finished, click on Settings.
4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
Spyware, Adware, Dialers, and other potentially dangerous programs
Archives
5. Click on My Computer under Scan.
6. Once the scan is complete, it will display the results. Click on View Scan Report.
7. You will see a list of infected items there. Click on Save Report As....
8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
9. Please post this log in your next reply.
-
Dave,
I tried Networking in Safe Mode and the same problems exist (picture problems and slow connectivity or no connectivity to websites).
The Kaspersky Security Scan download will not run on my computer. I get a Kaspersky page with a message that says "If the download does not start automatically, click here." I clicked the "clicked here" several times on several tries of downloading the program--it would not start.
I was able to download the MiniToolBox on the other computer (it would not download on my computer) and transfer it to my computer via a USB stick. The log is below.
MiniToolBox log:
MiniToolBox by Farbar Version: 25-07-2015 01
Ran by User (administrator) on 26-08-2015 at 16:15:27
Running from "C:\Documents and Settings\User\Desktop"
Microsoft Windows XP Professional Service Pack 3 (X86)
Model: HP dc5000 SFF(PB477A) Manufacturer: Hewlett-Packard
Boot Mode: Normal
***************************************************************************
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================
127.0.0.1 localhost
========================= IP Configuration: ================================
Broadcom NetXtreme Gigabit Ethernet for hp = Local Area Connection (Connected)
# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip
# Interface IP Configuration for "Local Area Connection"
set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp
popd
# End of interface IP configuration
Windows IP Configuration
Host Name . . . . . . . . . . . . : KenComputer
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet for hp
Physical Address. . . . . . . . . : 00-0F-20-6F-6B-2E
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.34
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1
Lease Obtained. . . . . . . . . . : Wednesday, August 26, 2015 1:20:44 PM
Lease Expires . . . . . . . . . . : Saturday, August 29, 2015 1:20:44 PM
Server: UnKnown
Address: 192.168.1.1
Name: google.com
Address: 216.58.216.110
Pinging google.com [216.58.216.110] with 32 bytes of data:
Reply from 216.58.216.110: bytes=32 time=330ms TTL=53
Reply from 216.58.216.110: bytes=32 time=497ms TTL=53
Ping statistics for 216.58.216.110:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 330ms, Maximum = 497ms, Average = 413ms
Server: UnKnown
Address: 192.168.1.1
Name: yahoo.com
Addresses: 98.138.253.109, 206.190.36.45, 98.139.183.24
Pinging yahoo.com [98.138.253.109] with 32 bytes of data:
Reply from 98.138.253.109: bytes=32 time=55ms TTL=54
Reply from 98.138.253.109: bytes=32 time=56ms TTL=54
Ping statistics for 98.138.253.109:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 55ms, Maximum = 56ms, Average = 55ms
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 0f 20 6f 6b 2e ...... Broadcom NetXtreme Gigabit Ethernet for hp - ThreatTrack Security Firewall NDIS IM Filter Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.34 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.34 192.168.1.34 20
192.168.1.34 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.1.255 255.255.255.255 192.168.1.34 192.168.1.34 20
224.0.0.0 240.0.0.0 192.168.1.34 192.168.1.34 20
255.255.255.255 255.255.255.255 192.168.1.34 192.168.1.34 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None
========================= Event log errors: ===============================
Application errors:
==================
Error: (08/22/2015 11:20:53 PM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
Error: (08/22/2015 07:17:32 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: This operation returned because the timeout period expired.
Error: (08/22/2015 07:17:11 PM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
Error: (08/22/2015 07:15:32 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: This operation returned because the timeout period expired.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The specified server cannot perform the requested operation.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The specified server cannot perform the requested operation.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list cab from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The specified server cannot perform the requested operation.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
System errors:
=============
Error: (12/25/2014 12:23:00 AM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2
Error: (12/25/2014 12:22:54 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde
szkgfs
Error: (12/25/2014 12:22:53 AM) (Source: Service Control Manager) (User: )
Description: The IPSEC Services service terminated with the following error:
%%1747
Error: (12/23/2014 07:08:05 PM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2
Error: (12/23/2014 07:07:36 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde
szkgfs
Error: (12/23/2014 07:07:33 PM) (Source: Service Control Manager) (User: )
Description: The IPSEC Services service terminated with the following error:
%%1747
Error: (12/23/2014 02:31:24 PM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2
Error: (12/23/2014 02:31:16 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde
szkgfs
Error: (12/23/2014 02:31:15 PM) (Source: Service Control Manager) (User: )
Description: The IPSEC Services service terminated with the following error:
%%1747
Error: (12/22/2014 08:54:19 PM) (Source: Service Control Manager) (User: )
Description: The szkgfs service failed to start due to the following error:
%%2
Microsoft Office Sessions:
=========================
Error: (08/22/2015 11:20:53 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.
Error: (08/22/2015 07:17:32 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThis operation returned because the timeout period expired.
Error: (08/22/2015 07:17:11 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.
Error: (08/22/2015 07:15:32 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThis operation returned because the timeout period expired.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe specified server cannot perform the requested operation.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe specified server cannot perform the requested operation.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe specified server cannot perform the requested operation.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.
Error: (08/20/2015 10:30:19 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabThe data is invalid.
========================= Memory info: ===================================
Percentage of memory in use: 50%
Total physical RAM: 1527.48 MB
Available physical RAM: 751.35 MB
Total Virtual: 2905.03 MB
Available Virtual: 2054.26 MB
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:74.53 GB) (Free:37.87 GB) NTFS
========================= Users: ========================================
User accounts for \\
Administrator ASPNET Guest
HelpAssistant SUPPORT_388945a0 User
**** End of log ****
-
Your internet connection appears to be ok. The only thing I can think of at this time is that the modem is causing these intermitten problems. Have you checked with your ISP?
-
Dave,
Regarding the checking with my ISP, the other computer is connected to the same modem and the other computer does not have the problems I am experiencing on my computer--there is a good connection; I think that means there is a problem in my computer. Let me know if I'm missing something here and I'll make the inquiry.
I tried disconnecting and reconnecting the cable between my computer and the switch at the modem--no change in performance/did not fix problems.
I tried Kaspersky Security Scan again but this time in Safe Mode on my computer. I was able to get the startup executable file downloaded on the other computer and transferred to my computer via a USB stick. Upon running the startup file on my computer in Safe Mode, my computer would not download the setup files of the application; the program almost completes downloading then stops. I tried to download half a dozen times and it failed to download at the same point each time.
I appreciate your help.
-
Could you please check your Device Manager to see if there are any yellow warnings?
-
Dave,
I checked the Device Manager and there are no yellow warnings; I read the Computer Hope's section on "Identifying problems in Windows Device Manager" to understand what to examine.
By the way, on that Computer Hope page the pictures are corrupted (banded on the bottom half of the picture [top half of picture is OK] and that bottom half of the picture has a purple background color [normal background is white color]). The text on that page is fine--no problems.
-
Did you try another cable connecting your computer to the internet? Did you check your internet interface to make sure it's secure?
-
Dave,
I have not tried another cable yet; I have been able to connect to my e-mail and many websites on my computer through the existing cable. If you think I need to check the cable, I'll bring my computer to the other/working computer and swap cables rather than purchase another long cable--OK?
How do you check the internet interface to make sure it is secure? I couldn't find any specific instructions from the Computer Hope dictionary.
-
Any way you swap the cable would be just fine. It could be something intermittent in the cable. If this is a pc just open the case and make sure the card is seated properly in the PCI slot.
-
Dave,
I had no luck with another cable connecting my PC to the Internet. I have the same picture problems and connectivity issues with that new cable. :(
I didn't find any problems with the cards. I found all the cards (two) seated properly in their slots.
-
Is it possible to try that pc at a friend's house?
-
Yes, I can try my PC at a friends house; it will try in a few days time. I'll let you know the results.
Since I have some time before then, I'm thinking that I should try hooking my interface cable in the same slot in the Ethernet switch that my other/working computer uses. That might reveal a problem in that switch--I doubt there is a problem with the switch but it's worth confirming.
When I'm hooked up to my friend's modem, I'll try to run my AV (STOPzilla) and the Super AntiSpyware Free Edition since they have failed to run because they haven't been able to update from the time these computer problems started. Should I try again to run the programs you mentioned in your posts as well?
For some reason I am getting sound now on YouTube and Vimeo videos that I could not get earlier when the problems started--really strange.
I still can't connect to most websites or only partially connect (text only in unusual fonts sometimes, or text jumbled with corrupted pictures, or text only displayed on left side of screen, and/or pictures displayed poorly [banded, monotone, in pixels, and/or off color]). My Yahoo e-mail is functioning fully and the Computer Hope site connects well (all text and fonts correctly located on the page) except for the pictures (same problems as mentioned above).
I appreciate all your help.
-
I would like to see if it behaves the same way at your friend's house. If it works normally that would indicate the problem is somewhere at your home.
-
Hello Dave,
Sorry about the late response, I had to go to a a shop to have them connect the computer to an outside/another line. Unfortunately my friend's connection that I had planned on using to test my system had a USB port on his connection switch and I was afraid to connect to his line for fear of transferring a virus to his system if that port was read/write-able.
The shop said they had no trouble connecting to the websites I mentioned to them (REI and Campmor). The shop also ran a virus checker too and found nothing.
I brought the computer home and hooked it up and I have the same problems (slow connection, no connection,or partial connection to websites and poor/scrambled picture quality). One exception is that the Campmor site for some reason is showing all the pictures correctly at this time but still has that skull icon in the middle of a rotating disk (looks bad and is also on my wife's system) when I hit the "Show Next Results" button to go from one page of merchandise to another (I'm pretty sure the skull icon was not there before these problems started). Do you find that icon on your system (white skull inside a green disk)?
I think I either have some connection problem at my home as you suggest, a malware problem, or a corrupted Microsoft XP OS. I could buy a new cable or connect my cable to my wife's computer if you think that might help (see next paragraph); I already tried moving the cable from port to port on the Internet switch located next to my wife's computer in another room without a change in performance. Or I can purchase a CD with Microsoft XP for about $30, wipe my system clean, and reinstall the XP (the shop did not recommend updating to Windows 7 because I have marginally enough RAM).
Because the other computer in my home does not have any issues connecting to websites (though it does take awhile to connect--she has noticed lower performance since going to Windows 7 and then 10 OS), I assume the Internet connection in my home is not faulty. It's possible the cable running from my computer to the Internet switch in the other room is faulty (about 40 feet long, goes under some doors [possibly stepped on though I have protective covers], up walls, and on the ceiling).
I primarily use the computer for e-mail, word processing, and a little shopping. It's getting hard for me to justify purchasing newer equipment when my needs are so small. I even considered converting to the Linux OS system but I don't know if I'm technically skilled enough to install and operate that system. Also, I have considered going to our city library to use their computer from now on; I'm fairly active on e-mail with committees and the library option would not be ideal.
Since my wife's system is going strong and is updated, I'm not looking at a hand-me-down from her anytime soon either; we have done this in the past and we do try to keep our machines as long as possible and recycle them when we upgrade in this way. We are concerned about how these machines are recycled in foreign countries and how their workmen may be exposed to toxins; so we keep our machines as long as possible.
Any further help and suggestions would be appreciated and I appreciate all the help you have provided to date. I'm stumped on what to do next.
-
Do you find that icon on your system (white skull inside a green disk)?
Never.
I think I either have some connection problem at my home as you suggest, a malware problem, or a corrupted Microsoft XP OS.
Everything points to some problem with the modem. Did you try re-setting it?
-
The OP might call his ISP. They can test his modem by remote control.
It it is their modem and it is flaky, the OP should not have to pay for a service call.