A quick checkup?

TJ Belfiore · 04-18-2009, 04:46 PM

Hey, I am experiencing now trouble with my computer but since It's newer and I'm very protective of it could you please take a look at my hijackthis log and see if you spot anything out of the ordinary and help me detect a future problem?

Quote:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:44:08 PM, on 4/18/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PRISMSVR.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sbc.yahoo.com/dsl
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SoundMan] :SOUNDMAN.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1239808477593
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

--
End of file - 2200 bytes

Thanks!

Ried · 04-18-2009, 08:18 PM

Hello Undocked Windy,

HijackThis is no longer the preferred initial scanning tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs for us to work from.

TJ Belfiore · 04-20-2009, 01:35 AM

Oh my apologies. I misunderstood a member here that said I couldn't post HiJackThis Logs in the forum I was in (which wasn't this one), so I guess he meant ALL forums. My bad.

Here's my GMER log:
Coming soon.

Here's my DDS.txt log:

DDS (Ver_09-03-16.01) - NTFSx86
Run by Undocked Windy at 0:27:37.29 on Mon 04/20/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3062.2128 [GMT -7:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PRISMSVR.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Documents and Settings\Undocked Windy\Desktop\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://sbc.yahoo.com/dsl
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
mRun: [PRISMSVR.EXE] "c:\windows\system32\PRISMSVR.EXE" /APPLY
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [AlcWzrd] ALCWZRD.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [SoundMan] :SOUNDMAN.EXE
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1239808477593
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\undock~1\applic~1\mozilla\firefox\profiles\ilwnr1oj.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-4-15 325640]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-4-15 27656]
R2 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-5-12 611664]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-4-15 298264]
R3 WlanUIG;2Wire 802.11g USB Driver;c:\windows\system32\drivers\WlanUIG.sys [2009-4-15 347648]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2008-7-10 47128]
S4 RsFx0102;RsFx0102 Driver;c:\windows\system32\drivers\RsFx0102.sys [2008-7-10 242712]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\microsoft sql server\mssql10.sqlexpress\mssql\binn\SQLAGENT.EXE [2008-7-10 369688]

=============== Created Last 30 ================

2009-04-20 00:26 <DIR> --d-h--- c:\windows\PIF
2009-04-18 15:41 <DIR> --d----- c:\program files\Trend Micro
2009-04-16 23:09 <DIR> --d----- c:\windows\system32\appmgmt
2009-04-16 15:15 <DIR> --d----- c:\documents and settings\undocked windy\Studio Nouva Cartella
2009-04-16 14:04 <DIR> --d----- c:\documents and settings\undocked windy\amaya
2009-04-16 11:16 <DIR> --d----- c:\windows\system32\NtmsData
2009-04-16 11:00 <DIR> --d----- c:\docume~1\undock~1\applic~1\IrfanView
2009-04-16 09:40 <DIR> --d----- C:\CloneDVDTemp
2009-04-16 09:24 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Elaborate Bytes
2009-04-16 09:23 <DIR> --d----- c:\program files\Elaborate Bytes
2009-04-16 09:22 <DIR> --d----- c:\program files\SlySoft
2009-04-16 08:25 233,472 a------- c:\windows\system\yacscom.dll
2009-04-16 08:25 151,552 a------- c:\windows\system\yacsui.dll
2009-04-16 07:41 56 ---shr-- c:\windows\system32\04ED6F51E5.sys
2009-04-16 07:41 1,682 a--sh--- c:\windows\system32\KGyGaAvL.sys
2009-04-16 06:19 <DIR> --d----- c:\program files\Unziplify
2009-04-16 05:10 <DIR> --d----- c:\program files\Siber Systems
2009-04-16 05:03 <DIR> --d----- c:\program files\Megaupload Downloader
2009-04-15 22:34 <DIR> --d----- c:\windows\Internet Logs
2009-04-15 21:46 <DIR> --d----- c:\program files\IrfanView
2009-04-15 21:21 <DIR> --d----- c:\docume~1\undock~1\applic~1\FLV Extract
2009-04-15 21:15 <DIR> --d----- c:\program files\K-Lite Codec Pack
2009-04-15 09:18 <DIR> --d----- c:\program files\Defraggler
2009-04-15 09:17 <DIR> --d----- c:\program files\CCleaner
2009-04-15 09:01 553 a----r-- c:\windows\USetup.iss
2009-04-15 08:59 26,488 a------- c:\windows\system32\spupdsvc.exe
2009-04-15 08:59 <DIR> --d----- c:\program files\Realtek
2009-04-15 08:57 10,520 a------- c:\windows\system32\avgrsstx.dll
2009-04-15 08:57 325,640 a------- c:\windows\system32\drivers\avgldx86.sys
2009-04-15 08:57 <DIR> --d----- c:\windows\system32\drivers\Avg
2009-04-15 08:57 <DIR> --d----- c:\program files\AVG
2009-04-15 08:57 <DIR> --d----- c:\docume~1\alluse~1\applic~1\avg8
2009-04-15 08:51 <DIR> --d----- c:\program files\uTorrent
2009-04-15 08:51 <DIR> --d----- c:\docume~1\undock~1\applic~1\uTorrent
2009-04-15 08:48 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PC Drivers HeadQuarters
2009-04-15 07:53 <DIR> --ds---- c:\documents and settings\undocked windy\UserData
2009-04-15 07:52 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Prism
2009-04-15 07:52 372,825 a------- c:\windows\system32\PRISMAPI.dll
2009-04-15 07:52 290,905 a------- c:\windows\system32\PRISMSVR.exe
2009-04-15 07:52 <DIR> --d----- c:\program files\2Wire 802.11g Wireless
2009-04-15 07:40 347,648 a----r-- c:\windows\system32\drivers\WlanUIG.sys
2009-04-15 07:38 <DIR> --d----- c:\program files\Yahoo!
2009-04-15 07:37 <DIR> --d----- c:\program files\2Wire
2009-04-15 07:25 <DIR> --d----- c:\documents and settings\Undocked Windy
2009-04-15 07:25 <DIR> --ds---- c:\windows\system32\Microsoft
2009-04-15 07:24 8,192 a------- c:\windows\REGLOCS.OLD
2009-04-15 07:23 28,288 ac------ c:\windows\system32\dllcache\xjis.nls
2009-04-15 07:23 156,672 ac------ c:\windows\system32\dllcache\winzm.ime
2009-04-15 07:23 156,672 ac------ c:\windows\system32\dllcache\winsp.ime
2009-04-15 07:23 156,672 ac------ c:\windows\system32\dllcache\winpy.ime
2009-04-15 07:23 65,536 ac------ c:\windows\system32\dllcache\winime.ime
2009-04-15 07:23 79,360 ac------ c:\windows\system32\dllcache\winar30.ime
2009-04-15 07:23 69,120 ac------ c:\windows\system32\dllcache\wingb.ime
2009-04-15 07:23 53,248 ac------ c:\windows\system32\dllcache\wamreg51.dll
2009-04-15 07:23 41,600 ac------ c:\windows\system32\dllcache\weitekp9.dll
2009-04-15 07:23 31,232 ac------ c:\windows\system32\dllcache\weitekp9.sys
2009-04-15 07:21 134,339 ac------ c:\windows\system32\dllcache\imekr.lex
2009-04-15 07:20 76,800 ac------ c:\windows\system32\dllcache\logui.ocx
2009-04-15 07:19 <DIR> --dsh--- c:\documents and settings\all users\DRM
2009-04-15 07:19 488 a---hr-- c:\windows\system32\WindowsLogon.manifest
2009-04-15 07:19 488 a---hr-- c:\windows\system32\logonui.exe.manifest
2009-04-15 07:19 <DIR> --ds---- c:\windows\Downloaded Program Files
2009-04-15 07:19 <DIR> --d--r-- c:\windows\Offline Web Pages
2009-04-15 07:19 749 a---hr-- c:\windows\WindowsShell.Manifest
2009-04-15 07:19 749 a---hr-- c:\windows\system32\wuaucpl.cpl.manifest
2009-04-15 07:19 749 a---hr-- c:\windows\system32\sapi.cpl.manifest
2009-04-15 07:19 749 a---hr-- c:\windows\system32\nwc.cpl.manifest
2009-04-15 07:19 749 a---hr-- c:\windows\system32\ncpa.cpl.manifest
2009-04-15 07:19 749 a---hr-- c:\windows\system32\cdplayer.exe.manifest
2009-04-15 07:19 <DIR> --d-h--- c:\program files\WindowsUpdate
2009-04-15 07:18 <DIR> --d----- c:\program files\common files\MSSoap
2009-04-15 07:16 <DIR> --d----- c:\program files\Online Services
2009-04-15 07:16 <DIR> --d----- c:\program files\Messenger
2009-04-15 07:16 <DIR> --d----- c:\program files\MSN Gaming Zone
2009-04-15 07:15 <DIR> --d----- c:\program files\Windows NT
2009-04-15 04:26 <DIR> --d----- c:\program files\Microsoft SQL Server
2009-04-15 04:26 <DIR> --d----- c:\program files\Microsoft Synchronization Services
2009-04-15 04:26 <DIR> --d----- c:\program files\Microsoft SQL Server Compact Edition
2009-04-15 04:17 <DIR> --d----- c:\program files\MSXML 6.0
2009-04-15 03:05 <DIR> --d----- c:\docume~1\alluse~1\applic~1\NexonUS
2009-04-15 02:04 <DIR> --d----- c:\program files\Lavasoft
2009-04-15 02:04 <DIR> --d----- c:\program files\common files\Wise Installation Wizard
2009-04-15 00:10 <DIR> --d----- c:\program files\common files\ODBC
2009-04-15 00:10 <DIR> --d----- c:\program files\common files\SpeechEngines
2009-04-15 00:10 <DIR> --d--r-- c:\documents and settings\all users\Documents

==================== Find3M ====================

2009-04-15 08:59 315,392 a------- c:\windows\HideWin.exe
2009-04-15 07:38 155,995 a------- c:\windows\java\packages\C01J1NRV.ZIP
2009-04-15 07:38 2,232 a------- c:\windows\java\packages\data\J1B33RBP.DAT
2009-04-15 07:38 2,678 a------- c:\windows\java\packages\data\3XBJBHVD.DAT
2009-04-15 07:38 2,678 a------- c:\windows\java\packages\data\YED3BBZ7.DAT
2009-04-15 07:38 2,678 a------- c:\windows\java\packages\data\XBFFZ3ZL.DAT
2009-04-15 07:38 2,678 a------- c:\windows\java\packages\data\TB7XJLVR.DAT
2009-04-15 07:38 2,678 a------- c:\windows\java\packages\data\7BBBRVXR.DAT
2009-04-15 07:31 86,327 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2009-04-15 07:17 21,640 a------- c:\windows\system32\emptyregdb.dat
2009-03-02 11:10 67,584 a------- c:\windows\system32\ff_vfw.dll

============= FINISH: 0:27:49.54 ===============

Here's my Attach.txt log:

DDS (Ver_09-03-16.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 4/15/2009 7:23:12 AM
System Uptime: 4/17/2009 12:05:18 PM (60 hours ago)

Motherboard: Acer | | Aspire 6920
Processor: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz | U2E1 | 997/167mhz
Processor: Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz | U2E1 | 1316/167mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 224 GiB total, 211.698 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E968-E325-11CE-BFC1-08002BE10318}
Description: Mobile Intel(R) 965 Express Chipset Family
Device ID: PCI\VEN_8086&DEV_2A02&SUBSYS_01461025&REV_03\3&B1BFB68&0&10
Manufacturer: Intel Corporation
Name: Mobile Intel(R) 965 Express Chipset Family
PNP Device ID: PCI\VEN_8086&DEV_2A02&SUBSYS_01461025&REV_03\3&B1BFB68&0&10
Service: igfx

Class GUID: {4D36E968-E325-11CE-BFC1-08002BE10318}
Description: Mobile Intel(R) 965 Express Chipset Family
Device ID: PCI\VEN_8086&DEV_2A03&SUBSYS_01461025&REV_03\3&B1BFB68&0&11
Manufacturer: Intel Corporation
Name: Mobile Intel(R) 965 Express Chipset Family
PNP Device ID: PCI\VEN_8086&DEV_2A03&SUBSYS_01461025&REV_03\3&B1BFB68&0&11
Service: igfx

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: USB Device
Device ID: USB\VID_138A&PID_0001\5&2F704FC7&0&2
Manufacturer:
Name: USB Device
PNP Device ID: USB\VID_138A&PID_0001\5&2F704FC7&0&2
Service:

Class GUID:
Description: Modem Device on High Definition Audio Bus
Device ID: HDAUDIO\FUNC_02&VEN_11C1&DEV_1040&SUBSYS_10250146&REV_1002\4&302A1E8C&0&0101
Manufacturer:
Name: Modem Device on High Definition Audio Bus
PNP Device ID: HDAUDIO\FUNC_02&VEN_11C1&DEV_1040&SUBSYS_10250146&REV_1002\4&302A1E8C&0&0101
Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Ethernet Controller
Device ID: PCI\VEN_1969&DEV_1026&SUBSYS_01461025&REV_B0\4&23F5EDAD&0&00E0
Manufacturer:
Name: Ethernet Controller
PNP Device ID: PCI\VEN_1969&DEV_1026&SUBSYS_01461025&REV_B0\4&23F5EDAD&0&00E0
Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Network Controller
Device ID: PCI\VEN_8086&DEV_4229&SUBSYS_11008086&REV_61\4&1B09A299&0&00E3
Manufacturer:
Name: Network Controller
PNP Device ID: PCI\VEN_8086&DEV_4229&SUBSYS_11008086&REV_61\4&1B09A299&0&00E3
Service:

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description:
Device ID: ACPI\ITE8708\5&9617A93&0
Manufacturer:
Name:
PNP Device ID: ACPI\ITE8708\5&9617A93&0
Service:

==== System Restore Points ===================

RP1: 4/15/2009 7:26:18 AM - System Checkpoint
RP2: 4/15/2009 7:38:14 AM - Installed 2Wire Wireless Client
RP3: 4/15/2009 7:52:04 AM - Configured 2Wire Wireless Client
RP4: 4/15/2009 8:31:53 AM - Installed Windows Media Format Runtime
RP5: 4/15/2009 8:48:49 AM - Installed Driver Detective
RP6: 4/15/2009 8:57:28 AM - Installed AVG Free 8.5
RP7: 4/15/2009 8:59:49 AM - Installed Realtek High Definition Audio Driver
RP8: 4/15/2009 9:00:02 AM - Installed Windows XP KB888111WXPSP2.
RP9: 4/15/2009 9:15:42 AM - Removed Driver Detective
RP10: 4/15/2009 2:04:43 AM - Installed Ad-Aware
RP11: 4/15/2009 3:59:40 AM - Installed Windows Installer KB893803v2.
RP12: 4/15/2009 4:04:28 AM - Avg8 Update
RP13: 4/15/2009 4:17:45 AM - Installed Windows XP WIC.
RP14: 4/15/2009 4:20:34 AM - Installed Windows KB954550-v5.
RP15: 4/15/2009 4:20:40 AM - Printer Driver Microsoft XPS Document Writer Installed
RP16: 4/15/2009 4:20:48 AM - Printer Driver Microsoft XPS Document Writer Installed
RP17: 4/15/2009 4:26:49 AM - Installed Windows XP KB942288-v3.
RP18: 4/16/2009 5:11:19 AM - Installed RapidLeecher
RP19: 4/16/2009 7:40:09 AM - Installed RGSS-RTP Standard
RP20: 4/16/2009 7:40:33 AM - Installed RPGXP
RP21: 4/16/2009 8:56:34 AM - Avg8 Update
RP22: 4/16/2009 9:22:30 AM - Install AnyDVD
RP23: 4/16/2009 9:23:07 AM - Install CloneDVD2
RP24: 4/16/2009 11:09:20 PM - Removed RPGXP
RP25: 4/16/2009 11:09:40 PM - Removed RGSS-RTP Standard
RP26: 4/17/2009 11:10:44 PM - System Checkpoint
RP27: 4/18/2009 9:13:37 AM - Avg8 Update
RP28: 4/19/2009 10:09:38 AM - System Checkpoint

==== Installed Programs ======================

µTorrent
2Wire Wireless Client
7-Zip 4.65
Ad-Aware
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
AnyDVD
AVG 8.5
CamStudio
CCleaner (remove only)
CloneDVD2
Defraggler (remove only)
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB945282)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946040)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946308)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946344)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947540)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947789)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB948127)
Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB951708)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB954550-v5)
Intel(R) Graphics Media Accelerator Driver
IrfanView (remove only)
K-Lite Codec Pack 4.7.5 (Full)
Megaupload Downloader
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Silverlight
Microsoft SQL Server 2008
Microsoft SQL Server 2008 Browser
Microsoft SQL Server 2008 Common Files
Microsoft SQL Server 2008 Database Engine Services
Microsoft SQL Server 2008 Database Engine Shared
Microsoft SQL Server 2008 Management Objects
Microsoft SQL Server 2008 Native Client
Microsoft SQL Server 2008 RsFx Driver
Microsoft SQL Server 2008 Setup Support Files (English)
Microsoft SQL Server Compact 3.5 SP1 Design Tools English
Microsoft SQL Server Compact 3.5 SP1 English
Microsoft SQL Server VSS Writer
Microsoft Visual Basic 2008 Express Edition with SP1 - ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu
Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
Mozilla Firefox (3.0.8)
Mozilla Thunderbird (2.0.0.21)
MSXML 6.0 Parser (KB933579)
NVIDIA Drivers
RapidLeecher
Realtek High Definition Audio Driver
Recuva (remove only)
Sql Server Customer Experience Improvement Program
SQL Server System CLR Types
Unziplify v1.3
WebFldrs XP
Winamp
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Yahoo! Messenger

==== Event Viewer Messages From Past Week ========

4/15/2009 8:49:16 AM, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error message: The referenced assembly is not installed on your system. .
4/15/2009 8:49:16 AM, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.DirectX.dll. Reference error message: The operation completed successfully. .
4/15/2009 8:49:16 AM, error: SideBySide [32] - Dependent Assembly Microsoft.VC90.CRT could not be found and Last Error was The referenced assembly is not installed on your system.

==== End Of File ===========================

Ried · 04-20-2009, 05:36 AM

I do not see the gmer log. Refer to the instructions again, and be sure to attach it as requested.

Please describe for me what trouble you're having with your machine.

04-18-2009, 08:18 PM	#2 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,975 OS: WinXP and Vista	Re: A quick checkup? Hello Undocked Windy, HijackThis is no longer the preferred initial scanning tool in this forum. We want all our members to perform the steps outlined in the link given below, before posting for assistance. NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help After running through all the steps, you shall have a proper set of logs for us to work from. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

04-20-2009, 05:36 AM	#4 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,975 OS: WinXP and Vista	Re: A quick checkup? I do not see the gmer log. Refer to the instructions again, and be sure to attach it as requested. Please describe for me what trouble you're having with your machine. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."