1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Google Redirect Virus

Discussion in 'Virus & Other Malware Removal' started by pins333, Aug 31, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    Hi Cookiegal,

    Just want to make sure I understand your directions (and don't break anything further):

    ~Check all the services you mention, click "start" if they are not already running.
    ~except for RPC--don't do anything, just report back
    ~If some seem to work, then try starting DHCP and TCP/IP
    ~report back on all the other services' staus, automatic or manual

    Does that make sense? Am I on the right track?
     
  2. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    That's correct.
    Yes, that's right.
    Yes, if some were in a "stopped" state and you were able to start them, then try starting those others as some of the services depend on each other so they won't start until the others are started.
    That would be good, yes.

    If you were able to start them all (I doubt RPC is stopped or you'd be having other problems but like I said, leave that one alone) then reboot the machine and see if you can connect to the Internet.
     
  3. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    Hi Cookiegal,

    Here's what I found with those services:

    Computer Browser - started - automatic
    DNS Client - started - automatic
    Network Connections - started - manual
    Network Location Awareness - stopped - manual
    Remote Procedure Call - started - unable to select
    Remote Procedure Call Locator (?) - stopped - manual
    Server - started - automatic
    Workstation - started - automatic


    I wasn't sure if you wanted RPC Locator as well, so I included it.

    When I tried starting Network Location Awareness, I got the same error message as I did with DHCP and TCP/IP:

    "Error 1075: The dependency service does not exist or has been marked for deletion."
     
  4. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    What about these?

    DHCP Client
    TCP/IP NetBIOS Helper services

    We you able to start them?

    Please go to Start - Run - type in eventvwr.msc to open the event viewer. Look under both "Application" and "System" for recent (the last 48 hours or so) errors (shown in red) and if found, do this for each one.

    Double-click the error to open it up and then click on the icon that looks like two pieces of paper. This will copy the full error. Then "paste" the error into Notepad. Do this for each one until you have them all listed in Notepad and then copy and paste the list in a reply here please.
     
  5. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    I don't remember if I tried to start DHCP and TCP last night, but I'm pretty sure that I had tried them, at least, within the last couple of days, and the error message hadn't changed.

    I'll report back with the "errors".
     
  6. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    Hi Cookiegal,

    Here is the text for each of the errors that occured within the past 48 hours--there were only three:

    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7003
    Date: 9/29/2011
    Time: 7:51:10 PM
    User: N/A
    Computer: ROUTH
    Description:
    The Network Location Awareness (NLA) service depends on the following nonexistent service: Afd

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7003
    Date: 9/29/2011
    Time: 7:39:19 PM
    User: N/A
    Computer: ROUTH
    Description:
    The DHCP Client service depends on the following nonexistent service: Afd

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7003
    Date: 9/28/2011
    Time: 8:21:53 PM
    User: N/A
    Computer: ROUTH
    Description:
    The TCP/IP NetBIOS Helper service depends on the following nonexistent service: Afd

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


     
  7. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    That is helpful. I need you to export a registry key.

    Go to Start - Run and copy and paste the following:

    Code:
    regedit /e C:\look.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD"
    You won't see anything happen and it will only take a second. You will find the report it creates at C:\look.txt. Please open it in Notepad and then copy and paste the report here.
     
  8. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    Hi Cookiegal,

    Here is the report:

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD\Parameters]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD\Enum]
    "0"="Root\\LEGACY_AFD\\0000"
    "Count"=dword:00000001
    "NextInstance"=dword:00000001
    "INITSTARTFAILED"=dword:00000001
     
  9. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    I'm attaching a FixAFD.zip file to this post. Save it to your desktop. Unzip it (extract the file) and then double-click on the FixAFD.reg file and allow it to merge into the registry.

    Then reboot the machine and try to start all of these services.

    Network Location Awareness
    DHCP Client
    TCP/IP NetBIOS Helper

    If you are successful in starting them, see if your Internet connection is restored. If it's not, reboot and try again.

    If it's still not working, I'd like to check to make sure the file we restored did indeed get restored to its proper place so do the following (if you still have it from when we last used it then there's no need to download it again):

    Please download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1
    Download Mirror #2
    • Double-click SystemLook.exe to run it.
    • Copy the content of the following code box into the main text field:
      Code:
      :filefind
      afd.sys
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
    Note: The log can also be found on your Desktop entitled SystemLook.txt
     

    Attached Files:

  10. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    It worked!!!!

    Safe mode is also working again too...so awesome!

    Thanks so much!

    Is there anything else I need to do?
     
  11. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    I'm glad to hear that it worked. (y)

    There are a couple of things I'd like to check to be sure things are as they should so please stick with me.

    I would like you to run DDS again and when the logs open up in Notepad please rename then to DDS2.txt and Attach2.txt before saving them to your desktop and then copy and paste the contents of both in your next reply.
     
  12. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    I would also like you to do this again please:

    Go to Start - Run - type in cmd and click OK to open a command prompt:

    Type the following command (be sure to include the space between the g and the /:

    Ipconfig /all

    Hit Enter.

    Right click in the top part of the command window and choose Select All, then hit Enter.
    Paste the results in a message here.
     
  13. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    Hi Cookiegal,

    here it is:

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\courtney>Ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : routh
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Unknown
    IP Routing Enabled. . . . . . . . : Yes
    WINS Proxy Enabled. . . . . . . . : No

    Ethernet adapter Local Area Connection 2:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : NVIDIA nForce Networking Controller
    Physical Address. . . . . . . . . : 00-18-F3-78-D6-02
    Dhcp Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    IP Address. . . . . . . . . . . . : 192.168.15.251
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.15.1
    DHCP Server . . . . . . . . . . . : 192.168.15.1
    DNS Servers . . . . . . . . . . . : 192.168.15.1
    Lease Obtained. . . . . . . . . . : Thursday, October 06, 2011 10:54:15
    AM
    Lease Expires . . . . . . . . . . : Friday, October 07, 2011 10:54:15 AM


    C:\Documents and Settings\courtney>
     
  14. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,662
    Please see post no. 41. I'd like to see a new DDS log as well please.
     
  15. pins333

    pins333 Thread Starter

    Joined:
    Aug 25, 2011
    Messages:
    95
    Oh sorry! I overlooked that post. Here are the DDS logs:

    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_11
    Run by courtney at 18:48:15 on 2011-10-10
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.504 [GMT -7:00]
    .
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\WgaTray.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Java\jre6\bin\jucheck.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
    uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10u_Plugin.exe -update plugin
    mRun: [High Definition Audio Property Page Shortcut] HDAShCut.exe
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [nwiz] nwiz.exe /install
    mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
    mRun: [Acrobat Assistant 7.0] "c:\program files\adobe\acrobat 7.0\distillr\Acrotray.exe"
    mRun: [QuickTime Task] "c:\program files\quicktime alternative\qttask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
    mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
    StartupFolder: c:\docume~1\courtney\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe
    IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
    IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
    IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
    IE: Convert to existing PDF - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1243917838843
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1243989182671
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    TCP: DhcpNameServer = 192.168.15.1
    TCP: Interfaces\{9B1817BA-9673-4693-BBF5-2DBB9CA1665A} : DhcpNameServer = 192.168.15.1
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\courtney\application data\mozilla\firefox\profiles\vof86f22.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
    FF - prefs.js: network.proxy.type - 0
    FF - plugin: c:\program files\microsoft silverlight\3.0.40624.0\npctrlui.dll
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-5-2 54752]
    R2 vnccom;vnccom;c:\windows\system32\drivers\vnccom.SYS [2006-12-14 6016]
    S0 xodbg;xodbg;c:\windows\system32\drivers\bwntvdk.sys --> c:\windows\system32\drivers\bwntvdk.sys [?]
    S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);c:\windows\system32\drivers\A3AB.sys [2007-5-23 547744]
    S3 AE1000;Linksys AE1000 Driver;c:\windows\system32\drivers\AE1000XP.sys [2010-12-11 816672]
    S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
    S3 hitmanpro35;Hitman Pro 3.5 Support Driver;c:\windows\system32\drivers\hitmanpro35.sys [2011-8-23 23624]
    S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;c:\windows\system32\drivers\wg111v2.sys --> c:\windows\system32\drivers\wg111v2.sys [?]
    .
    =============== Created Last 30 ================
    .
    2011-09-26 03:35:54 138496 -c--a-w- c:\windows\system32\dllcache\afd.sys
    2011-09-26 03:35:54 138496 ----a-w- c:\windows\system32\drivers\afd.sys
    2011-09-26 03:31:25 98816 ----a-w- c:\windows\sed.exe
    2011-09-26 03:31:25 518144 ----a-w- c:\windows\SWREG.exe
    2011-09-26 03:31:25 256000 ----a-w- c:\windows\PEV.exe
    2011-09-26 03:31:25 208896 ----a-w- c:\windows\MBR.exe
    2011-09-21 02:20:39 -------- d-----w- C:\reg
    2011-09-21 02:20:22 -------- d-----w- C:\ERDNT
    2011-09-18 00:43:11 -------- d-sha-r- C:\cmdcons
    .
    ==================== Find3M ====================
    .
    2011-08-24 03:24:56 23624 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
    2011-08-24 03:04:00 42112 ----a-w- c:\windows\system32\drivers\imapi.sys
    2011-07-21 02:03:37 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    .
    ============= FINISH: 18:48:55.43 ===============


    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 12/2/2006 3:21:02 AM
    System Uptime: 10/3/2011 7:29:36 PM (167 hours ago)
    .
    Motherboard: ASUSTek Computer INC. | | M2NBP-VM CSM
    Processor: AMD Athlon(tm) 64 Processor 3200+ | Socket AM2 | 2004/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 49 GiB total, 30.961 GiB free.
    D: is CDROM ()
    E: is CDROM ()
    S: is FIXED (NTFS) - 184 GiB total, 15.083 GiB free.
    T: is FIXED (NTFS) - 75 GiB total, 74.463 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: D-Link AirPlus DWL-G520 Wireless PCI Adapter(rev.B)
    Device ID:

    PCI\VEN_168C&DEV_0013&SUBSYS_3A131186&REV_01\4&DC268A3&0&4880
    Manufacturer: D-Link
    Name: D-Link AirPlus DWL-G520 Wireless PCI Adapter(rev.B)
    PNP Device ID:

    PCI\VEN_168C&DEV_0013&SUBSYS_3A131186&REV_01\4&DC268A3&0&4880
    Service: A3AB
    .
    ==== System Restore Points ===================
    .
    RP1613: 8/11/2011 3:05:55 AM - System Checkpoint
    RP1614: 8/12/2011 4:05:55 AM - System Checkpoint
    RP1615: 8/13/2011 5:05:55 AM - System Checkpoint
    RP1616: 8/14/2011 6:06:00 AM - System Checkpoint
    RP1617: 8/15/2011 7:05:59 AM - System Checkpoint
    RP1618: 8/16/2011 8:05:55 AM - System Checkpoint
    RP1619: 8/17/2011 9:05:55 AM - System Checkpoint
    RP1620: 8/18/2011 10:05:59 AM - System Checkpoint
    RP1621: 8/19/2011 11:05:55 AM - System Checkpoint
    RP1622: 8/20/2011 11:07:00 AM - System Checkpoint
    RP1623: 8/21/2011 11:45:23 AM - System Checkpoint
    RP1624: 8/22/2011 12:32:08 PM - System Checkpoint
    RP1625: 8/23/2011 1:20:09 PM - System Checkpoint
    RP1626: 8/24/2011 1:40:58 PM - System Checkpoint
    RP1627: 8/25/2011 2:40:56 PM - System Checkpoint
    RP1628: 8/26/2011 2:51:05 PM - System Checkpoint
    RP1629: 8/26/2011 9:55:13 PM - Installed HiJackThis
    RP1630: 8/27/2011 10:52:08 PM - System Checkpoint
    RP1631: 8/28/2011 11:52:08 PM - System Checkpoint
    RP1632: 8/30/2011 12:51:03 AM - System Checkpoint
    RP1633: 8/31/2011 1:51:03 AM - System Checkpoint
    RP1634: 9/1/2011 2:40:27 AM - System Checkpoint
    RP1635: 9/2/2011 3:40:26 AM - System Checkpoint
    RP1636: 9/3/2011 3:50:11 AM - System Checkpoint
    RP1637: 9/4/2011 4:40:26 AM - System Checkpoint
    RP1638: 9/5/2011 5:40:26 AM - System Checkpoint
    RP1639: 9/6/2011 6:40:26 AM - System Checkpoint
    RP1640: 9/7/2011 7:40:26 AM - System Checkpoint
    RP1641: 9/8/2011 8:40:26 AM - System Checkpoint
    RP1642: 9/9/2011 9:40:26 AM - System Checkpoint
    RP1643: 9/10/2011 10:40:26 AM - System Checkpoint
    RP1644: 9/11/2011 11:40:26 AM - System Checkpoint
    RP1645: 9/12/2011 12:40:26 PM - System Checkpoint
    RP1646: 9/13/2011 1:40:26 PM - System Checkpoint
    RP1647: 9/14/2011 2:21:50 PM - System Checkpoint
    RP1648: 9/15/2011 9:09:02 PM - System Checkpoint
    RP1649: 9/16/2011 9:45:49 PM - System Checkpoint
    RP1650: 9/17/2011 9:56:00 PM - System Checkpoint
    RP1651: 9/18/2011 10:09:46 PM - System Checkpoint
    RP1652: 9/19/2011 10:49:33 PM - System Checkpoint
    RP1653: 9/20/2011 11:29:00 PM - System Checkpoint
    RP1654: 9/22/2011 12:25:45 AM - System Checkpoint
    RP1655: 9/23/2011 2:51:17 AM - System Checkpoint
    RP1656: 9/24/2011 8:37:17 AM - System Checkpoint
    RP1657: 9/25/2011 9:37:14 AM - System Checkpoint
    RP1658: 9/26/2011 9:43:20 AM - System Checkpoint
    RP1659: 9/27/2011 10:20:54 AM - System Checkpoint
    RP1660: 9/28/2011 11:01:53 AM - System Checkpoint
    RP1661: 9/29/2011 12:01:52 PM - System Checkpoint
    RP1662: 9/30/2011 1:01:54 PM - System Checkpoint
    RP1663: 10/1/2011 1:10:46 PM - System Checkpoint
    RP1664: 10/2/2011 2:01:52 PM - System Checkpoint
    RP1665: 10/3/2011 3:01:52 PM - System Checkpoint
    RP1666: 10/4/2011 3:33:47 PM - System Checkpoint
    RP1667: 10/5/2011 4:33:49 PM - System Checkpoint
    RP1668: 10/6/2011 5:33:45 PM - System Checkpoint
    RP1669: 10/7/2011 6:33:45 PM - System Checkpoint
    RP1670: 10/8/2011 7:33:48 PM - System Checkpoint
    RP1671: 10/9/2011 7:35:34 PM - System Checkpoint
    .
    ==== Installed Programs ======================
    .
    µTorrent
    Across Lite
    Adobe Acrobat 7.0 Professional
    Adobe Acrobat 7.1.0 Professional
    Adobe Bridge 1.0
    Adobe Common File Installer
    Adobe Digital Editions
    Adobe Flash Player 10 Plugin
    Adobe Flash Player 9 ActiveX
    Adobe Help Center 1.0
    Adobe Illustrator CS
    Adobe InDesign CS
    Adobe Photoshop CS2
    Adobe Stock Photos 1.0
    Adobe SVG Viewer 3.0
    Bonjour
    Bookworm Adventures Deluxe 1.0
    CachemanXP 1.12
    Critical Update for Windows Media Player 11 (KB959772)
    FileZilla (remove only)
    High Definition Audio Driver Package - KB888111
    HiJackThis
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB954708)
    iTunes
    Java(TM) 6 Update 11
    Java(TM) 6 Update 2
    Java(TM) 6 Update 5
    Java(TM) 6 Update 7
    Java(TM) SE Runtime Environment 6 Update 1
    Junk Mail filter update
    Malwarebytes' Anti-Malware version 1.51.1.1800
    MediaLab Research Software v2008.1
    MediaMonkey 2.5
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Choice Guard
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Office 2007 Service Pack 2 (SP2)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office Live Add-in 1.3
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook Connector
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft Software Update for Web Folders (English) 12
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Mozilla Firefox 7.0.1 (x86 en-US)
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 Parser and SDK
    Netflix Movie Viewer
    NewsLeecher
    NVIDIA Drivers
    QuarkXPress 7.0
    QuickBooks Premier: Professional Services Edition 2007
    QuickBooks Product Listing Service
    QuickPar 0.9
    QuickTime
    QuickTime Alternative 1.76
    Rhapsody Player Engine
    Security Update for CAPICOM (KB931906)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 9 (KB917734)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB938464-v2)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB963027)
    Segoe UI
    SmartDraw 2007
    SoundMAX
    Spark 2.5.2
    SupportSoft Assisted Service
    SurfOffline (remove only)
    System Requirements Lab
    UltraVNC v1.0.2
    Update for 2007 Microsoft Office System (KB967642)
    Update for Outlook 2007 Junk Email Filter (kb968503)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    WebFldrs XP
    Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006

    1.3.2.0)
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Imaging Component
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Family Safety
    Windows Live Mail
    Windows Live Messenger
    Windows Live Photo Gallery
    Windows Live Sign-in Assistant
    Windows Live Sync
    Windows Live Toolbar
    Windows Live Upload Tool
    Windows Live Writer
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows XP Service Pack 3
    WinRAR archiver
    .
    ==== Event Viewer Messages From Past Week ========
    .
    10/6/2011 10:54:04 AM, error: Dhcp [1002] - The IP address lease 192.168.15.251

    for the Network Card with network address 0018F378D602 has been denied by the

    DHCP server 192.168.15.1 (The DHCP Server sent a DHCPNACK message).
    10/3/2011 7:29:05 PM, error: DCOM [10005] - DCOM got error "%1084" attempting

    to start the service EventSystem with arguments "" in order to run the server:

    {1BE1F766-5536-11D1-B726-00C04FB926AF}
    10/3/2011 7:28:40 PM, error: DCOM [10005] - DCOM got error "%1084" attempting

    to start the service upnphost with arguments "" in order to run the server:

    {204810B9-73B2-11D4-BF42-00B0D0118B56}
    10/3/2011 7:28:40 PM, error: DCOM [10005] - DCOM got error "%1084" attempting

    to start the service ALG with arguments "" in order to run the server:

    {D6015EC3-FA16-4813-9CA1-DA204574F5DA}
    10/3/2011 7:23:51 PM, error: ipnathlp [30013] - The DHCP allocator has disabled

    itself on IP address 192.168.15.251, since the IP address is outside the

    192.168.0.0/255.255.255.0 scope from which addresses are being allocated to DHCP

    clients. To enable the DHCP allocator on this IP address, please change the scope to

    include the IP address, or change the IP address to fall within the scope.
    .
    ==== End Of File ===========================
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1015354