Virus detection pop-up (non-native)

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

toptobottom

Thread Starter
Joined
Aug 4, 2008
Messages
11
A pop-up indicating detected viruses exist on this computer. It is not the installed native Avast Free edition and the pop-up has repeated a 2nd day in a row which is making me suspicious. Unfortunately, I got rid of it by using 'Task manager' both times and didn't pay attention as to what it was trying to sell me on. I know for sure it was nothing to do with Avast.

I ran Ccleaner prior to running the following requested logs.

When attempting to run GMER only 3 lowest boxes were checked above C: drive selection and the others were grayed out - could not select.

GMER did not find any rootkit modifications



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:21:46 AM, on 9/7/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\PROGRA~2\MICROS~1\wkcalrem.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O13 - Gopher Prefix:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 5178 bytes



DDS (Ver_10-11-27.01) - NTFS_AMD64
Run by Christine at 16:55:11.34 on Sat 12/04/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4085.2862 [GMT -5:00]
SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Christine\Downloads\dds.com
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
uRun: [EPSON Artisan 810 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFRA.EXE /FU "C:\Windows\TEMP\E_S5485.tmp" /EF "HKCU"
uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
mRun: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
mRun: [FUFAXSTM] "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
StartupFolder: C:\Users\CHRIST~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
BHO-X64: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg64.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [EPSON Stylus C88 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIABA.EXE /P23 "EPSON Stylus C88 Series" /O5 "LPT1:" /M "Stylus C88"
mRun-x64: [EPSON Stylus C88 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIABA.EXE /P32 "EPSON Stylus C88 Series (Copy 1)" /O5 "LPT1:" /M "Stylus C88"
============= SERVICES / DRIVERS ===============
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-9-6 53488]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2010-9-6 121936]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-29 128752]
R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2010-9-6 20048]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2010-9-6 61008]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-9-6 40384]
R3 avast! Mail Scanner;avast! Mail Scanner;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-9-6 40384]
R3 avast! Web Scanner;avast! Web Scanner;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-9-6 40384]
R3 VST64_DPV;VST64_DPV;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
R3 VST64HWBS2;VST64HWBS2;C:\Windows\System32\drivers\VSTBS26.SYS [2009-7-13 411136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-10 136176]
S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-11-10 48488]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-9-23 1493352]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-11-10 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
=============== Created Last 30 ================
2010-12-04 17:57:23 -------- d-----w- C:\Users\CHRIST~1\AppData\Roaming\SUPERAntiSpyware.com
2010-12-04 17:57:23 -------- d-----w- C:\PROGRA~3\SUPERAntiSpyware.com
2010-12-04 17:57:18 -------- d-----w- C:\PROGRA~3\!SASCORE
2010-12-04 17:57:17 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2010-12-03 20:07:29 8199504 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{92106CAE-202A-410E-AA46-DEF67587F9A5}\mpengine.dll
2010-12-02 16:24:39 -------- d-----w- C:\Program Files\iTunes
2010-12-02 16:24:39 -------- d-----w- C:\Program Files\iPod
2010-12-02 16:24:39 -------- d-----w- C:\Program Files (x86)\iTunes
2010-11-29 14:00:03 -------- d-----w- C:\Users\CHRIST~1\AppData\Roaming\OpenOffice.org
2010-11-29 13:58:23 -------- d-----w- C:\Program Files (x86)\JRE
2010-11-29 13:58:21 -------- d-----w- C:\Program Files (x86)\OpenOffice.org 3
2010-11-29 13:57:12 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2010-11-24 12:22:29 7680 ----a-w- C:\Program Files\Internet Explorer\iecompat.dll
2010-11-24 12:22:29 7680 ----a-w- C:\Program Files (x86)\Internet Explorer\iecompat.dll
2010-11-18 02:34:27 -------- d-----w- C:\Users\CHRIST~1\AppData\Local\Diagnostics
2010-11-13 07:15:42 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll
2010-11-13 07:15:42 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll
2010-11-13 07:15:42 48960 ----a-w- C:\Windows\System32\netfxperf.dll
2010-11-13 07:15:42 444752 ----a-w- C:\Windows\System32\mscoree.dll
2010-11-13 07:15:42 320352 ----a-w- C:\Windows\System32\PresentationHost.exe
2010-11-13 07:15:42 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll
2010-11-13 07:15:42 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe
2010-11-13 07:15:42 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2010-11-13 07:15:42 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll
2010-11-13 07:15:42 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll
2010-11-11 19:00:16 -------- d-----w- C:\Users\CHRIST~1\AppData\Local\Apple Computer
2010-11-11 19:00:12 34152 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
2010-11-11 19:00:12 126312 ----a-w- C:\Windows\System32\GEARAspi64.dll
2010-11-11 19:00:12 107368 ----a-w- C:\Windows\SysWow64\GEARAspi.dll
2010-11-11 17:50:51 -------- d-----w- C:\Users\CHRIST~1\AppData\Roaming\Windows Live Writer
2010-11-11 17:50:51 -------- d-----w- C:\Users\CHRIST~1\AppData\Local\Windows Live Writer
2010-11-11 17:48:39 737072 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2010-11-11 17:48:22 4277016 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2010-11-11 17:47:52 42776 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2010-11-11 17:47:48 588096 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2010-11-11 04:02:12 -------- d-----w- C:\Users\Christine\Tracing
2010-11-11 03:59:26 -------- d-----w- C:\Windows\en
2010-11-11 03:54:31 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2010-11-11 03:49:48 -------- d-----w- C:\Users\CHRIST~1\AppData\Local\Microsoft Games
2010-11-11 03:48:41 48488 ----a-w- C:\Windows\System32\drivers\fssfltr.sys
2010-11-11 03:47:32 -------- d-----w- C:\Windows\PCHEALTH
2010-11-11 03:46:01 -------- d-----w- C:\Program Files (x86)\Microsoft
2010-11-11 03:46:00 -------- d-----w- C:\Program Files (x86)\MSN Toolbar
2010-11-11 03:45:53 -------- d-----w- C:\Program Files (x86)\Bing Bar Installer
2010-11-11 03:45:51 469256 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\eed66d241cb815207\InstallManager_WLE_WLE.exe
2010-11-11 03:45:10 69464 ----a-w- C:\Windows\SysWow64\XAPOFX1_3.dll
2010-11-11 03:45:10 515416 ----a-w- C:\Windows\SysWow64\XAudio2_5.dll
2010-11-11 03:45:09 523088 ----a-w- C:\Windows\System32\d3dx10_42.dll
2010-11-11 03:45:09 453456 ----a-w- C:\Windows\SysWow64\d3dx10_42.dll
2010-11-11 03:44:52 15712 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\cc6322cd1cb815206\MeshBetaRemover.exe
2010-11-11 03:44:48 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c8aafc5f1cb815205\DSETUP.dll
2010-11-11 03:44:48 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c8aafc5f1cb815205\DXSETUP.exe
2010-11-11 03:44:48 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c8aafc5f1cb815205\dsetup32.dll
2010-11-11 03:44:45 4398360 ----a-w- C:\Windows\System32\d3dx9_32.dll
2010-11-11 03:44:45 3426072 ----a-w- C:\Windows\SysWow64\d3dx9_32.dll
2010-11-11 03:44:34 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c0c60c161cb815204\DSETUP.dll
2010-11-11 03:44:34 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c0c60c161cb815204\DXSETUP.exe
2010-11-11 03:44:34 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c0c60c161cb815204\dsetup32.dll
2010-11-11 03:43:24 6260088 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\96ff05671cb815203\Silverlight.4.0.exe
2010-11-11 03:43:03 3860992 ----a-w- C:\Windows\System32\UIRibbon.dll
2010-11-11 03:43:03 2983424 ----a-w- C:\Windows\SysWow64\UIRibbon.dll
2010-11-11 03:43:03 1164800 ----a-w- C:\Windows\SysWow64\UIRibbonRes.dll
2010-11-11 03:43:03 1164800 ----a-w- C:\Windows\System32\UIRibbonRes.dll
2010-11-11 03:42:21 206848 ----a-w- C:\Windows\System32\mfps.dll
2010-11-11 03:42:20 257024 ----a-w- C:\Windows\System32\mfreadwrite.dll
2010-11-11 03:42:20 196608 ----a-w- C:\Windows\SysWow64\mfreadwrite.dll
2010-11-11 03:42:20 1888256 ----a-w- C:\Windows\System32\WMVDECOD.DLL
2010-11-11 03:42:20 1619456 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
2010-11-11 03:42:19 4068864 ----a-w- C:\Windows\System32\mf.dll
2010-11-11 03:42:19 3181568 ----a-w- C:\Windows\SysWow64\mf.dll
2010-11-11 03:41:14 -------- d-----w- C:\Users\CHRIST~1\AppData\Local\Windows Live
2010-11-11 03:41:13 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
2010-11-11 03:34:59 243712 ----a-w- C:\Windows\System32\drivers\ks.sys
2010-11-11 03:32:53 -------- d-----w- C:\Users\CHRIST~1\AppData\Local\Google
2010-11-11 03:23:31 -------- d-----w- C:\Program Files (x86)\Microsoft Digital Image 2006
2010-11-11 02:51:43 -------- d-----w- C:\Program Files (x86)\EpsonNet
2010-11-11 02:51:31 558080 ----a-w- C:\Windows\System32\ensppmon.dll
2010-11-11 02:51:31 558080 ----a-w- C:\Windows\System32\enppmon.dll
2010-11-11 02:51:31 537600 ----a-w- C:\Windows\System32\ensppui.dll
2010-11-11 02:51:31 537600 ----a-w- C:\Windows\System32\enppui.dll
2010-11-11 02:51:31 250880 ----a-w- C:\Windows\System32\enspres.dll
2010-11-11 02:51:31 250880 ----a-w- C:\Windows\System32\enpres.dll
2010-11-11 02:51:31 -------- d-----w- C:\Program Files\EpsonNet
2010-11-11 02:51:27 -------- d-----w- C:\Program Files (x86)\Common Files\EPSON
2010-11-11 02:50:35 80024 ----a-w- C:\Windows\SysWow64\PICSDK.dll
2010-11-11 02:50:35 51360 ----a-w- C:\Windows\SysWow64\EpPicPrt.dll
2010-11-11 02:50:35 51360 ----a-w- C:\Windows\SysWow64\EpPicMgr.dll
2010-11-11 02:50:35 501912 ----a-w- C:\Windows\SysWow64\PICSDK2.dll
2010-11-11 02:50:35 108704 ----a-w- C:\Windows\SysWow64\PICEntry.dll
2010-11-11 02:49:15 -------- d-----w- C:\Program Files (x86)\Epson Software
2010-11-11 02:49:14 57344 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-11-11 02:49:14 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-11-11 02:49:14 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2010-11-11 02:49:14 237568 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-11-11 02:49:14 155648 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-11-11 02:49:13 696320 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-11-11 02:49:13 282756 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-11-11 02:49:13 163972 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-11-11 02:49:07 118784 ----a-w- C:\Windows\System32\E_ILMFRA.DLL
2010-11-11 02:49:06 81920 ----a-w- C:\Windows\System32\E_IBCBFRA.DLL
2010-11-11 02:49:00 -------- d-----w- C:\PROGRA~3\EPSON
2010-11-11 02:48:56 459776 ----a-w- C:\Windows\System32\esxwiaud.dll
2010-11-11 02:48:56 12800 ----a-w- C:\Windows\System32\esxcdev.dll
2010-11-11 02:48:55 -------- d-----w- C:\Program Files (x86)\epson
2010-11-11 02:44:58 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2010-11-11 02:33:46 311808 ----a-w- C:\Windows\System32\msv1_0.dll
2010-11-11 02:33:46 257024 ----a-w- C:\Windows\SysWow64\msv1_0.dll
2010-11-11 02:21:39 -------- d-----w- C:\Windows\SysWow64\Wat
2010-11-11 02:21:38 -------- d-----w- C:\Windows\System32\Wat
2010-11-11 01:47:59 82944 ----a-w- C:\Windows\SysWow64\iccvid.dll
2010-11-06 16:37:34 103864 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll
==================== Find3M ====================
2010-10-19 15:41:44 270720 ------w- C:\Windows\System32\MpSigStub.exe
2010-09-23 05:47:28 49016 ----a-w- C:\Windows\SysWow64\sirenacm.dll
2010-09-23 05:32:56 301936 ----a-w- C:\Windows\WLXPGSS.SCR
2010-09-21 19:49:02 252800 ----a-w- C:\Windows\System32\LIVESSP.DLL
2010-09-21 19:03:14 208768 ----a-w- C:\Windows\SysWow64\LIVESSP.DLL
2010-09-10 05:35:44 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2010-09-10 05:35:43 347648 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2010-09-08 16:17:46 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
2010-09-08 16:17:46 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
2010-09-08 05:36:17 1192960 ----a-w- C:\Windows\System32\wininet.dll
2010-09-08 05:34:34 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2010-09-08 04:30:04 978432 ----a-w- C:\Windows\SysWow64\wininet.dll
2010-09-08 04:28:15 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2010-09-08 04:16:38 482816 ----a-w- C:\Windows\System32\html.iec
2010-09-08 03:35:30 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2010-09-08 03:22:31 386048 ----a-w- C:\Windows\SysWow64\html.iec
2010-09-08 02:48:16 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
============= FINISH: 16:55:24.07 ===============



UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-11-27.01)
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume3
Install Date: 9/6/2010 8:34:50 PM
System Uptime: 12/4/2010 9:57:46 AM (6 hours ago)
Motherboard: Dell Inc. | | 0RY007
Processor: Intel(R) Core(TM)2 Duo CPU E7300 @ 2.66GHz | Socket 775 | 2106/266mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 586 GiB total, 527.95 GiB free.
D: is FIXED (NTFS) - 10 GiB total, 1.758 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
==== Disabled Device Manager Items =============
==== System Restore Points ===================
RP43: 11/25/2010 12:46:57 AM - Windows Update
RP44: 11/25/2010 11:22:34 AM - Windows Update
RP45: 11/25/2010 12:43:03 PM - Windows Update
RP46: 11/27/2010 10:58:52 PM - Windows Update
RP47: 11/29/2010 8:56:46 AM - Installed Java(TM) 6 Update 20
RP48: 11/29/2010 8:57:21 AM - Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
RP49: 11/29/2010 8:58:05 AM - Installed OpenOffice.org 3.2
RP50: 11/30/2010 9:37:27 PM - Windows Update
RP51: 11/30/2010 9:38:09 PM - Windows Update
RP52: 12/1/2010 7:46:03 AM - Windows Update
RP53: 12/1/2010 7:48:39 AM - Installed Java(TM) 6 Update 22
RP54: 12/3/2010 3:07:13 PM - Windows Update
==== Installed Programs ======================
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.4.1
Apple Application Support
Apple Software Update
avast! Free Antivirus
Bing Bar
Bing Bar Platform
Compatibility Pack for the 2007 Office system
CorelDRAW 11 SA
CorelDRAW SA 11
D3DX10
Epson Event Manager
Epson FAX Utility
Epson PC-FAX Driver
EPSON Scan
EpsonNet Print
EpsonNet Setup
Google Toolbar for Internet Explorer
Google Update Helper
HijackThis 2.0.2
Jasc Paint Shop Pro 8
Java Auto Updater
Java(TM) 6 Update 22
Junk Mail filter update
Malwarebytes' Anti-Malware
Mesh Runtime
Messenger Companion
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Starter Edition 2006
Microsoft Digital Image Starter Edition 2006 Editor
Microsoft Digital Image Starter Edition 2006 Library
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
MSVCRT
MSVCRT_amd64
OpenOffice.org 3.2
PrimoPDF -- brought to you by Nitro PDF Software
QuickTime
Roxio Creator Audio
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler 3
Roxio Update Manager
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
==== Event Viewer Messages From Past Week ========
12/2/2010 11:24:47 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Apple Mobile Device service, but this action failed with the following error: An instance of the service is already running.
12/2/2010 11:23:47 AM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
12/2/2010 11:23:38 AM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
11/29/2010 12:34:20 AM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} and APPID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} to the user COLORTEK\Christine SID (S-1-5-21-1968045072-2373682647-129680604-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
==== End Of File ===========================
 

Attachments

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top