Internet Explorer Stops working

acer05 · 05-10-2009, 05:20 AM

Hi,

My internet explorer stops working after about 5 minutes. If I download a file it will stop working after the file is downloaded. Vista then takes a long time (3 to 5 minutes) to shut down. I have to reset the pc to git it working.

Do I have a virus or trojan on my PC. If so how do I get raid of it. I have avg antivirus.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:01:10, on 10/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Safe mode

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\RunOnce: [EIVCD] E:\EIVCD.exe /w
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O13 - Gopher Prefix:
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-09.sun.com/s/ESD7/JSC...ws-i586-jc.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_98f8d2d0\STacSV.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

--
End of file - 4625 bytes

**********************************************************
ComboFix 09-05-08.03 - Raj 10/05/2009 10:05.1 - NTFSx86 MINIMAL
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.44.1033.18.3315.2883 [GMT 1:00]
Running from: c:\users\Raj\Desktop\ComboFix.exe
FW: ZoneAlarm Firewall *enabled*
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\x64

.
((((((((((((((((((((((((( Files Created from 2009-04-10 to 2009-05-10 )))))))))))))))))))))))))))))))
.

2009-05-09 18:35 . 2009-05-09 18:35 -------- d-----w c:\windows\Sun
2009-05-09 18:34 . 2009-05-09 18:34 410984 ----a-w c:\windows\system32\deploytk.dll
2009-05-09 18:34 . 2009-05-09 18:34 -------- d-----w c:\program files\Java
2009-05-09 16:29 . 2009-05-09 16:29 -------- d-----w c:\program files\Trend Micro
2009-05-09 15:36 . 2008-12-04 08:31 53248 ----a-w c:\windows\system32\CSVer.dll
2009-05-09 15:24 . 2009-02-26 10:05 398336 ----a-w c:\windows\system32\TVWizudlg.exe
2009-05-09 15:24 . 2009-02-26 10:04 140288 ----a-w c:\windows\system32\igfxtvcx.dll
2009-05-09 14:59 . 2009-03-12 11:53 536576 ----a-w c:\windows\system32\idtmini1.exe
2009-05-09 14:59 . 2009-03-12 11:53 254036 ----a-w c:\windows\system32\stacsv.exe
2009-05-09 14:59 . 2009-03-12 11:53 3514368 ----a-w c:\windows\system32\stlang.dll
2009-05-09 14:58 . 2009-03-12 11:53 398336 ----a-w c:\windows\system32\drivers\stwrt.sys
2009-05-09 14:58 . 2009-03-12 11:53 404992 ----a-w c:\windows\system32\stcplx.dll
2009-05-09 14:58 . 2009-03-12 11:53 835072 ----a-w c:\windows\system32\stapo.dll
2009-05-09 14:58 . 2009-03-12 11:53 432128 ----a-w c:\windows\system32\stapi32.dll
2009-05-09 14:58 . 2009-03-12 11:53 171520 ----a-w c:\windows\system32\st322000.dll
2009-05-09 14:58 . 2009-05-09 14:59 -------- d-----w c:\program files\IDT
2009-05-09 14:42 . 2007-11-15 15:40 33148 ----a-w c:\windows\system32\drivers\FlexBios.sys
2009-05-09 14:42 . 2007-11-15 15:40 34064 ----a-w c:\windows\system32\drivers\Invoker.sys
2009-05-09 14:42 . 2009-05-09 14:42 -------- d-----w C:\EbuDllTmpDir
2009-05-09 13:32 . 2009-05-09 13:32 -------- d-----w c:\users\Raj\AppData\Local\Apple
2009-05-09 13:32 . 2009-05-09 13:32 -------- d-----w c:\program files\Apple Software Update
2009-05-09 13:31 . 2009-05-09 13:34 -------- d-----w c:\program files\Common Files\Apple
2009-05-09 13:31 . 2009-05-09 13:31 -------- d-----w c:\progra~2\Apple
2009-05-09 13:31 . 2009-05-09 13:31 -------- d-----w c:\users\All Users\Apple
2009-05-09 11:47 . 2009-05-09 11:55 -------- d---a-w c:\progra~2\TEMP
2009-05-09 11:47 . 2009-05-09 11:55 -------- d---a-w c:\users\All Users\TEMP
2009-05-09 11:39 . 2008-02-23 02:41 22528 ----a-w c:\windows\system32\netiougc.exe
2009-05-09 11:39 . 2008-02-23 04:38 170496 ----a-w c:\windows\system32\tcpipcfg.dll
2009-05-09 11:39 . 2008-02-23 04:41 890936 ----a-w c:\windows\system32\drivers\tcpip.sys
2009-05-09 11:39 . 2008-02-23 04:41 223288 ----a-w c:\windows\system32\drivers\netio.sys
2009-05-09 11:39 . 2008-02-23 04:41 101432 ----a-w c:\windows\system32\drivers\FWPKCLNT.SYS
2009-05-09 11:39 . 2008-02-23 04:34 438272 ----a-w c:\windows\system32\IKEEXT.DLL
2009-05-09 11:39 . 2008-02-23 04:34 595456 ----a-w c:\windows\system32\FWPUCLNT.DLL
2009-05-09 11:39 . 2008-02-23 04:32 328704 ----a-w c:\windows\system32\BFE.DLL
2009-05-09 11:39 . 2009-05-09 11:39 -------- d-----w c:\program files\AskBarDis
2009-05-09 11:38 . 2009-02-15 23:10 1221512 ----a-w c:\windows\system32\zpeng25.dll
2009-05-09 11:38 . 2009-05-09 11:38 -------- d-----w c:\program files\Zone Labs
2009-05-09 11:37 . 2009-02-15 23:11 293528 ----a-w c:\windows\system32\drivers\vsdatant.sys
2009-05-09 11:37 . 2009-05-09 11:38 -------- d-----w c:\windows\system32\ZoneLabs
2009-05-09 11:31 . 2009-05-09 11:31 11952 ----a-w c:\windows\system32\avgrsstx.dll
2009-05-09 11:31 . 2009-05-09 11:31 108552 ----a-w c:\windows\system32\drivers\avgtdix.sys
2009-05-09 11:31 . 2009-05-09 11:31 325896 ----a-w c:\windows\system32\drivers\avgldx86.sys
2009-05-09 11:31 . 2009-05-09 11:36 -------- d-----w c:\windows\system32\drivers\Avg
2009-05-09 11:30 . 2009-05-09 11:30 -------- d-----w c:\program files\AVG
2009-05-09 11:30 . 2009-05-09 11:30 -------- d-----w c:\progra~2\avg8
2009-05-09 11:30 . 2009-05-09 11:30 -------- d-----w c:\users\All Users\avg8
2009-05-09 11:26 . 2009-05-09 11:26 -------- d-----w c:\progra~2\CheckPoint
2009-05-09 11:26 . 2009-05-09 11:26 -------- d-----w c:\users\All Users\CheckPoint
2009-05-09 10:24 . 2009-05-09 10:10 47560 ----a-w c:\windows\system32\SPReview.exe
2009-05-09 10:24 . 2009-05-09 10:10 152576 ----a-w c:\windows\system32\SPWizUI.dll
2009-05-09 10:14 . 2008-01-18 22:35 274432 ----a-w c:\windows\system32\netman.dll
2009-05-09 10:13 . 2008-01-18 22:34 114688 ----a-w c:\windows\system32\imm32.dll
2009-05-09 10:11 . 2008-01-18 22:33 44032 ----a-w c:\windows\system32\cbsra.exe
2009-05-09 09:24 . 2009-05-09 09:24 269312 ----a-w c:\windows\system32\es.dll
2009-05-09 09:08 . 2009-05-10 08:41 -------- d-----w c:\windows\Internet Logs
2009-05-09 05:39 . 2009-05-09 04:50 -------- d-----w c:\windows\Panther
2009-05-09 05:23 . 2009-05-09 05:23 -------- d-----w C:\Windows.old
2009-05-09 04:44 . 2009-05-09 09:23 -------- d-----w c:\windows\Debug
2009-05-08 23:38 . 2009-05-08 23:38 28672 ----a-w c:\windows\system32\FwRemoteSvr.dll
2009-05-08 23:38 . 2009-05-08 23:38 61440 ----a-w c:\windows\system32\winipsec.dll
2009-05-08 23:38 . 2009-05-08 23:38 361984 ----a-w c:\windows\system32\IPSECSVC.DLL
2009-05-08 23:38 . 2009-05-08 23:38 272896 ----a-w c:\windows\system32\polstore.dll
2009-05-08 23:36 . 2009-05-08 23:36 241152 ----a-w c:\windows\system32\PortableDeviceApi.dll
2009-05-08 23:36 . 2009-05-08 23:36 94720 ----a-w c:\windows\system32\PortableDeviceClassExtension.dll
2009-05-08 23:36 . 2009-05-08 23:36 160768 ----a-w c:\windows\system32\PortableDeviceTypes.dll
2009-05-08 23:29 . 2009-05-08 23:29 376832 ----a-w c:\windows\system32\winhttp.dll
2009-05-08 23:28 . 2009-05-08 23:28 296960 ----a-w c:\windows\system32\gdi32.dll
2009-05-08 23:25 . 2009-05-08 23:25 212480 ----a-w c:\windows\system32\drivers\mrxsmb10.sys
2009-05-08 23:24 . 2009-05-08 23:24 562176 ----a-w c:\windows\system32\msdtcprx.dll
2009-05-08 23:24 . 2009-05-08 23:24 38912 ----a-w c:\windows\system32\xolehlp.dll
2009-05-08 23:22 . 2009-05-08 23:22 28672 ----a-w c:\windows\system32\Apphlpdm.dll
2009-05-08 23:22 . 2009-05-08 23:22 4240384 ----a-w c:\windows\system32\GameUXLegacyGDFs.dll
2009-05-08 23:22 . 2009-05-08 23:22 1695744 ----a-w c:\windows\system32\gameux.dll
2009-05-08 23:21 . 2009-05-08 23:21 303616 ----a-w c:\windows\system32\wmpeffects.dll
2009-05-08 23:20 . 2009-05-08 23:20 1191936 ----a-w c:\windows\system32\msxml3.dll
2009-05-08 23:20 . 2009-05-08 23:20 2048 ----a-w c:\windows\system32\msxml3r.dll
2009-05-08 23:16 . 2009-05-08 23:16 2048 ----a-w c:\windows\system32\tzres.dll
2009-05-08 23:15 . 2009-05-08 23:15 428544 ----a-w c:\windows\system32\EncDec.dll
2009-05-08 23:15 . 2009-05-08 23:15 293376 ----a-w c:\windows\system32\psisdecd.dll
2009-05-08 23:14 . 2009-05-08 23:14 8147456 ----a-w c:\windows\system32\wmploc.DLL
2009-05-08 23:14 . 2009-05-08 23:14 7680 ----a-w c:\windows\system32\spwmp.dll
2009-05-08 23:14 . 2009-05-08 23:14 4096 ----a-w c:\windows\system32\dxmasf.dll
2009-05-08 23:09 . 2009-05-08 23:09 2927104 ----a-w c:\windows\explorer.exe
2009-05-08 23:02 . 2009-05-08 23:02 6656 ----a-w c:\windows\system32\kbd106n.dll
2009-05-08 23:02 . 2009-05-08 23:02 927288 ----a-w c:\windows\system32\winresume.exe
2009-05-08 23:02 . 2009-05-08 23:02 988216 ----a-w c:\windows\system32\winload.exe
2009-05-08 23:02 . 2009-05-08 23:02 40960 ----a-w c:\windows\system32\srclient.dll
2009-05-08 23:02 . 2009-05-08 23:02 318464 ----a-w c:\windows\system32\rstrui.exe
2009-05-08 23:02 . 2009-05-08 23:02 378368 ----a-w c:\windows\system32\srcore.dll
2009-05-08 23:02 . 2009-05-08 23:02 14848 ----a-w c:\windows\system32\srdelayed.exe
2009-05-08 23:02 . 2009-05-08 23:02 19000 ----a-w c:\windows\system32\kd1394.dll
2009-05-08 23:02 . 2009-05-08 23:02 46592 ----a-w c:\windows\system32\setbcdlocale.dll
2009-05-08 23:02 . 2009-05-08 23:02 615992 ----a-w c:\windows\system32\ci.dll
2009-05-08 23:01 . 2009-05-08 23:01 551424 ----a-w c:\windows\system32\rpcss.dll
2009-05-08 23:01 . 2009-05-08 23:01 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-05-08 23:01 . 2009-05-08 23:01 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-05-08 23:01 . 2009-05-08 23:01 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-05-08 23:01 . 2009-05-08 23:01 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-05-08 23:01 . 2009-05-08 23:01 54784 ----a-w c:\windows\system32\iasads.dll
2009-05-08 23:01 . 2009-05-08 23:01 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-05-08 23:01 . 2009-05-08 23:01 17408 ----a-w c:\windows\system32\iashost.exe
2009-05-08 23:01 . 2009-05-08 23:01 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-05-08 23:01 . 2009-05-08 23:01 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-05-08 22:58 . 2009-05-08 22:58 441400 ----a-w c:\windows\system32\drivers\ksecdd.sys
2009-05-08 22:58 . 2009-05-08 22:58 72704 ----a-w c:\windows\system32\secur32.dll
2009-05-08 22:58 . 2009-05-08 22:58 9728 ----a-w c:\windows\system32\lsass.exe
2009-05-08 22:58 . 2009-05-08 22:58 1255936 ----a-w c:\windows\system32\lsasrv.dll
2009-05-08 22:58 . 2009-05-08 22:58 24064 ----a-w c:\windows\system32\amxread.dll
2009-05-08 22:58 . 2009-05-08 22:58 13824 ----a-w c:\windows\system32\apilogen.dll
2009-05-08 22:57 . 2009-05-08 22:57 425472 ----a-w c:\windows\system32\PhotoMetadataHandler.dll
2009-05-08 22:57 . 2009-05-08 22:57 712704 ----a-w c:\windows\system32\WindowsCodecs.dll
2009-05-08 22:57 . 2009-05-08 22:57 347136 ----a-w c:\windows\system32\WindowsCodecsExt.dll
2009-05-08 22:55 . 2009-05-08 22:55 37888 ----a-w c:\windows\system32\printcom.dll
2009-05-08 22:55 . 2009-05-08 22:55 443392 ----a-w c:\windows\system32\win32spl.dll
2009-05-08 22:54 . 2009-05-08 22:54 113664 ----a-w c:\windows\system32\drivers\rmcast.sys
2009-05-08 22:54 . 2009-05-08 22:54 14848 ----a-w c:\windows\system32\wshrm.dll
2009-05-08 22:53 . 2009-05-08 22:53 288768 ----a-w c:\windows\system32\drivers\srv.sys
2009-05-08 22:51 . 2009-05-08 22:51 268288 ----a-w c:\windows\system32\schannel.dll
2009-05-08 22:48 . 2009-05-08 22:48 622080 ----a-w c:\windows\system32\icardagt.exe
2009-05-08 22:48 . 2009-05-08 22:48 11264 ----a-w c:\windows\system32\icardres.dll
2009-05-08 22:48 . 2009-05-08 22:48 97800 ----a-w c:\windows\system32\infocardapi.dll
2009-05-08 22:48 . 2009-05-08 22:48 105016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-05-08 22:48 . 2009-05-08 22:48 326160 ----a-w c:\windows\system32\PresentationHost.exe
2009-05-08 22:48 . 2009-05-08 22:48 43544 ----a-w c:\windows\system32\PresentationHostProxy.dll
2009-05-08 22:48 . 2009-05-08 22:48 781344 ----a-w c:\windows\system32\PresentationNative_v0300.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-10 08:20 . 2009-05-09 11:37 350192 ---ha-w c:\windows\system32\drivers\vsconfig.xml
2009-05-09 16:32 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat
2009-05-09 16:32 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat
2009-05-09 16:32 . 2006-11-02 10:25 143360 ----a-w c:\windows\inf\infstrng.dat
2009-05-09 13:34 . 2009-05-09 13:34 -------- d-----w c:\program files\iTunes
2009-05-09 13:34 . 2009-05-09 13:34 -------- d-----w c:\program files\iPod
2009-05-09 13:33 . 2009-05-09 13:33 -------- d-----w c:\program files\Bonjour
2009-05-09 13:33 . 2009-05-09 13:33 -------- d-----w c:\program files\QuickTime
2009-05-09 12:11 . 2009-05-09 12:13 15360 ----a-w c:\windows\Internet Logs\xDBEC94.tmp
2009-05-09 12:09 . 2009-05-09 12:11 1350144 ----a-w c:\windows\Internet Logs\xDB8F33.tmp
2009-05-09 12:09 . 2009-05-09 12:11 43520 ----a-w c:\windows\Internet Logs\xDB8E28.tmp
2009-05-09 11:26 . 2009-05-09 11:26 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-05-09 10:46 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini
2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Sidebar
2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Photo Gallery
2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Journal
2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Collaboration
2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Calendar
2009-05-09 10:40 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Defender
2009-05-09 10:40 . 2006-11-02 10:25 665600 ----a-w c:\windows\inf\drvindex.dat
2009-05-09 10:29 . 2006-11-02 10:32 101888 ----a-w c:\windows\system32\ifxcardm.dll
2009-05-09 10:29 . 2006-11-02 10:32 82432 ----a-w c:\windows\system32\axaltocm.dll
2009-05-08 22:20 . 2009-05-08 22:20 827392 ----a-w c:\windows\system32\wininet.dll
2009-05-08 22:20 . 2009-05-08 22:20 72704 ----a-w c:\windows\system32\admparse.dll
2009-05-08 22:20 . 2009-05-08 22:20 78336 ----a-w c:\windows\system32\ieencode.dll
2009-05-08 22:20 . 2009-05-08 22:20 48128 ----a-w c:\windows\system32\mshtmler.dll
2009-05-08 22:20 . 2009-05-08 22:20 26624 ----a-w c:\windows\system32\ieUnatt.exe
2009-05-08 21:23 . 2009-05-08 21:07 680 ----a-w c:\users\Raj\AppData\Local\d3d9caps.dat
2009-05-08 21:07 . 2009-05-08 21:07 48600 ----a-w c:\users\Raj\AppData\Local\GDIPFONTCACHEV1.DAT
2009-03-26 14:23 . 2009-03-26 14:23 36864 ----a-w c:\windows\system32\drivers\usbaapl.sys
2009-03-26 14:23 . 2009-03-26 14:23 1900544 ----a-w c:\windows\system32\usbaaplrc.dll
2009-03-19 15:32 . 2009-05-09 13:34 23400 ----a-w c:\windows\system32\drivers\GEARAspiWDM.sys
2009-03-05 11:06 . 2009-03-05 11:06 8198680 ----a-w c:\windows\system32\TVWSetup.exe
2009-03-05 11:06 . 2008-02-11 19:13 141848 ----a-w c:\windows\system32\igfxtray.exe
2009-03-05 11:06 . 2008-02-11 19:13 252952 ----a-w c:\windows\system32\igfxsrvc.exe
2009-03-05 11:06 . 2008-02-11 19:13 150552 ----a-w c:\windows\system32\igfxpers.exe
2009-03-05 11:06 . 2009-03-05 11:06 173080 ----a-w c:\windows\system32\igfxext.exe
2009-03-05 11:06 . 2009-03-05 11:06 668696 ----a-w c:\windows\system32\igfxcfg.exe
2009-03-05 11:06 . 2008-02-11 19:13 173592 ----a-w c:\windows\system32\hkcmd.exe
2009-02-26 10:49 . 2009-02-26 10:49 151552 ----a-w c:\windows\system32\igfxCoIn_v1666.dll
2009-02-26 10:39 . 2009-02-26 10:39 4569088 ----a-w c:\windows\system32\drivers\igdkmd32.sys
2009-02-26 10:34 . 2009-02-26 10:34 536576 ----a-w c:\windows\system32\igdumdx32.dll
2009-02-26 10:16 . 2009-02-26 10:16 2674688 ----a-w c:\windows\system32\ig4dev32.dll
2009-02-26 10:16 . 2009-02-26 10:16 4112384 ----a-w c:\windows\system32\ig4icd32.dll
2009-02-26 10:05 . 2009-02-26 10:05 59392 ----a-w c:\windows\system32\oemdspif.dll
2009-02-26 10:04 . 2009-02-26 10:04 200192 ----a-w c:\windows\system32\igfxpph.dll
2009-02-26 10:04 . 2009-02-26 10:04 23552 ----a-w c:\windows\system32\igfxexps.dll
2009-02-26 10:04 . 2009-02-26 10:04 130048 ----a-w c:\windows\system32\igfxdo.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-10-16 17:22 333192 ----a-w c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-16 333192]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-16 333192]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-18 1233920]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"EIVCD"="E:\EIVCD.exe" [2007-09-26 540672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-05-09 1947928]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-12 483422]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-05 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-05 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-05 150552]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-09 148888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{EED9815E-45D6-4B0C-89C7-1671374EE692}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
"{CE239F65-09A9-4B1A-8CDD-EFC14F244E3B}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{6FAD6A1F-076A-48F8-B7B9-E6359E956CF4}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
"{4CBCEB0E-4D44-45E9-AC12-64D44C2A26B3}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{E0F97315-DAAC-497F-A0EB-82E9BFF5B0BF}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{F6EBA48A-463A-479C-8DFC-300EDA3839B6}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{CABD9631-CF3F-40F6-9248-7F8C41E7E37E}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [5/9/2009 12:31 PM 325896]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [5/9/2009 12:31 PM 108552]
S2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [5/9/2009 12:39 PM 464264]
S2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [5/9/2009 12:30 PM 908568]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [5/9/2009 12:30 PM 298776]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - ECACHE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9036f912-3c53-11de-8fe7-806e6f6e6963}]
\shell\AutoRun\command - E:\EIVCD.exe
.
- - - - ORPHANS REMOVED - - - -

HKLM-RunOnce-<NO NAME> - (no file)

.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yahoo.com/
uInternet Settings,ProxyOverride = *.local
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-10 10:07
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2009-05-10 10:08
ComboFix-quarantined-files.txt 2009-05-10 09:08

Pre-Run: The system cannot find message text for message number 0x2379 in the message file for Application.
Post-Run: 151,657,357,312 bytes free

273 --- E O F --- 2009-05-09 09:24

Any help would be welcome.

acer05 · 05-10-2009, 08:45 AM

ZA is also asking to give iexplorer.exe server access.

Alert property Alert property value Technical explanation
Program Name Internet Explorer A program running on your computer, which either attempted to send an IP packet over the Internet or is waiting for an incoming packet.
Filename iexplore.exe The filename of the program that ZoneAlarm found on your computer.
Program Version 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) The version of Internet Explorer running on your computer.
Program Size 638816 The size of the program executable file in bytes.
Program MD5 b60dddd2d63ce41cb8c487fcfbb6419e The MD5 hash, or number, that uniquely identifies the executable.
Smart Checksum 603188e42b079c1b57f28c6cb2d94d65 The SKIMP hash, or number, that uniquely identifies the executable.
Date Modified Mar-08-2009 10:09:26 PM The date when iexplore.exe was most recently modified.
Connect Type Server This value can be either Access, which is an Internet connection attempt by Internet Explorer or Server, which indicates that Internet Explorer is waiting for connections coming in from the Internet.
Local Port 62871 The port Internet Explorer is using to receive packets on the local computer.
Remote IP Address 0.0.0.0 The IP address of the remote computer that caused the alert.
Alert Date May-10-2009 07:35:15 AM PDT The time when ZoneAlarm detected the alert on your computer.

05-10-2009, 05:20 AM	#1 (permalink)
acer05 Registered User Join Date: May 2009 Posts: 2 OS: Vista 32	Internet Explorer Stops working Hi, My internet explorer stops working after about 5 minutes. If I download a file it will stop working after the file is downloaded. Vista then takes a long time (3 to 5 minutes) to shut down. I have to reset the pc to git it working. Do I have a virus or trojan on my PC. If so how do I get raid of it. I have avg antivirus. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:01:10, on 10/05/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18226) Boot mode: Safe mode Running processes: C:\Windows\Explorer.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = .local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O3 - Toolbar: ZoneAlarm Spy Blocker Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\RunOnce: [EIVCD] E:\EIVCD.exe /w O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O13 - Gopher Prefix: O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-09.sun.com/s/ESD7/JSC...ws-i586-jc.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_98f8d2d0\STacSV.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe -- End of file - 4625 bytes ********************************************************* ComboFix 09-05-08.03 - Raj 10/05/2009 10:05.1 - NTFSx86 MINIMAL Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.44.1033.18.3315.2883 [GMT 1:00] Running from: c:\users\Raj\Desktop\ComboFix.exe FW: ZoneAlarm Firewall enabled . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\x64 . ((((((((((((((((((((((((( Files Created from 2009-04-10 to 2009-05-10 ))))))))))))))))))))))))))))))) . 2009-05-09 18:35 . 2009-05-09 18:35 -------- d-----w c:\windows\Sun 2009-05-09 18:34 . 2009-05-09 18:34 410984 ----a-w c:\windows\system32\deploytk.dll 2009-05-09 18:34 . 2009-05-09 18:34 -------- d-----w c:\program files\Java 2009-05-09 16:29 . 2009-05-09 16:29 -------- d-----w c:\program files\Trend Micro 2009-05-09 15:36 . 2008-12-04 08:31 53248 ----a-w c:\windows\system32\CSVer.dll 2009-05-09 15:24 . 2009-02-26 10:05 398336 ----a-w c:\windows\system32\TVWizudlg.exe 2009-05-09 15:24 . 2009-02-26 10:04 140288 ----a-w c:\windows\system32\igfxtvcx.dll 2009-05-09 14:59 . 2009-03-12 11:53 536576 ----a-w c:\windows\system32\idtmini1.exe 2009-05-09 14:59 . 2009-03-12 11:53 254036 ----a-w c:\windows\system32\stacsv.exe 2009-05-09 14:59 . 2009-03-12 11:53 3514368 ----a-w c:\windows\system32\stlang.dll 2009-05-09 14:58 . 2009-03-12 11:53 398336 ----a-w c:\windows\system32\drivers\stwrt.sys 2009-05-09 14:58 . 2009-03-12 11:53 404992 ----a-w c:\windows\system32\stcplx.dll 2009-05-09 14:58 . 2009-03-12 11:53 835072 ----a-w c:\windows\system32\stapo.dll 2009-05-09 14:58 . 2009-03-12 11:53 432128 ----a-w c:\windows\system32\stapi32.dll 2009-05-09 14:58 . 2009-03-12 11:53 171520 ----a-w c:\windows\system32\st322000.dll 2009-05-09 14:58 . 2009-05-09 14:59 -------- d-----w c:\program files\IDT 2009-05-09 14:42 . 2007-11-15 15:40 33148 ----a-w c:\windows\system32\drivers\FlexBios.sys 2009-05-09 14:42 . 2007-11-15 15:40 34064 ----a-w c:\windows\system32\drivers\Invoker.sys 2009-05-09 14:42 . 2009-05-09 14:42 -------- d-----w C:\EbuDllTmpDir 2009-05-09 13:32 . 2009-05-09 13:32 -------- d-----w c:\users\Raj\AppData\Local\Apple 2009-05-09 13:32 . 2009-05-09 13:32 -------- d-----w c:\program files\Apple Software Update 2009-05-09 13:31 . 2009-05-09 13:34 -------- d-----w c:\program files\Common Files\Apple 2009-05-09 13:31 . 2009-05-09 13:31 -------- d-----w c:\progra~2\Apple 2009-05-09 13:31 . 2009-05-09 13:31 -------- d-----w c:\users\All Users\Apple 2009-05-09 11:47 . 2009-05-09 11:55 -------- d---a-w c:\progra~2\TEMP 2009-05-09 11:47 . 2009-05-09 11:55 -------- d---a-w c:\users\All Users\TEMP 2009-05-09 11:39 . 2008-02-23 02:41 22528 ----a-w c:\windows\system32\netiougc.exe 2009-05-09 11:39 . 2008-02-23 04:38 170496 ----a-w c:\windows\system32\tcpipcfg.dll 2009-05-09 11:39 . 2008-02-23 04:41 890936 ----a-w c:\windows\system32\drivers\tcpip.sys 2009-05-09 11:39 . 2008-02-23 04:41 223288 ----a-w c:\windows\system32\drivers\netio.sys 2009-05-09 11:39 . 2008-02-23 04:41 101432 ----a-w c:\windows\system32\drivers\FWPKCLNT.SYS 2009-05-09 11:39 . 2008-02-23 04:34 438272 ----a-w c:\windows\system32\IKEEXT.DLL 2009-05-09 11:39 . 2008-02-23 04:34 595456 ----a-w c:\windows\system32\FWPUCLNT.DLL 2009-05-09 11:39 . 2008-02-23 04:32 328704 ----a-w c:\windows\system32\BFE.DLL 2009-05-09 11:39 . 2009-05-09 11:39 -------- d-----w c:\program files\AskBarDis 2009-05-09 11:38 . 2009-02-15 23:10 1221512 ----a-w c:\windows\system32\zpeng25.dll 2009-05-09 11:38 . 2009-05-09 11:38 -------- d-----w c:\program files\Zone Labs 2009-05-09 11:37 . 2009-02-15 23:11 293528 ----a-w c:\windows\system32\drivers\vsdatant.sys 2009-05-09 11:37 . 2009-05-09 11:38 -------- d-----w c:\windows\system32\ZoneLabs 2009-05-09 11:31 . 2009-05-09 11:31 11952 ----a-w c:\windows\system32\avgrsstx.dll 2009-05-09 11:31 . 2009-05-09 11:31 108552 ----a-w c:\windows\system32\drivers\avgtdix.sys 2009-05-09 11:31 . 2009-05-09 11:31 325896 ----a-w c:\windows\system32\drivers\avgldx86.sys 2009-05-09 11:31 . 2009-05-09 11:36 -------- d-----w c:\windows\system32\drivers\Avg 2009-05-09 11:30 . 2009-05-09 11:30 -------- d-----w c:\program files\AVG 2009-05-09 11:30 . 2009-05-09 11:30 -------- d-----w c:\progra~2\avg8 2009-05-09 11:30 . 2009-05-09 11:30 -------- d-----w c:\users\All Users\avg8 2009-05-09 11:26 . 2009-05-09 11:26 -------- d-----w c:\progra~2\CheckPoint 2009-05-09 11:26 . 2009-05-09 11:26 -------- d-----w c:\users\All Users\CheckPoint 2009-05-09 10:24 . 2009-05-09 10:10 47560 ----a-w c:\windows\system32\SPReview.exe 2009-05-09 10:24 . 2009-05-09 10:10 152576 ----a-w c:\windows\system32\SPWizUI.dll 2009-05-09 10:14 . 2008-01-18 22:35 274432 ----a-w c:\windows\system32\netman.dll 2009-05-09 10:13 . 2008-01-18 22:34 114688 ----a-w c:\windows\system32\imm32.dll 2009-05-09 10:11 . 2008-01-18 22:33 44032 ----a-w c:\windows\system32\cbsra.exe 2009-05-09 09:24 . 2009-05-09 09:24 269312 ----a-w c:\windows\system32\es.dll 2009-05-09 09:08 . 2009-05-10 08:41 -------- d-----w c:\windows\Internet Logs 2009-05-09 05:39 . 2009-05-09 04:50 -------- d-----w c:\windows\Panther 2009-05-09 05:23 . 2009-05-09 05:23 -------- d-----w C:\Windows.old 2009-05-09 04:44 . 2009-05-09 09:23 -------- d-----w c:\windows\Debug 2009-05-08 23:38 . 2009-05-08 23:38 28672 ----a-w c:\windows\system32\FwRemoteSvr.dll 2009-05-08 23:38 . 2009-05-08 23:38 61440 ----a-w c:\windows\system32\winipsec.dll 2009-05-08 23:38 . 2009-05-08 23:38 361984 ----a-w c:\windows\system32\IPSECSVC.DLL 2009-05-08 23:38 . 2009-05-08 23:38 272896 ----a-w c:\windows\system32\polstore.dll 2009-05-08 23:36 . 2009-05-08 23:36 241152 ----a-w c:\windows\system32\PortableDeviceApi.dll 2009-05-08 23:36 . 2009-05-08 23:36 94720 ----a-w c:\windows\system32\PortableDeviceClassExtension.dll 2009-05-08 23:36 . 2009-05-08 23:36 160768 ----a-w c:\windows\system32\PortableDeviceTypes.dll 2009-05-08 23:29 . 2009-05-08 23:29 376832 ----a-w c:\windows\system32\winhttp.dll 2009-05-08 23:28 . 2009-05-08 23:28 296960 ----a-w c:\windows\system32\gdi32.dll 2009-05-08 23:25 . 2009-05-08 23:25 212480 ----a-w c:\windows\system32\drivers\mrxsmb10.sys 2009-05-08 23:24 . 2009-05-08 23:24 562176 ----a-w c:\windows\system32\msdtcprx.dll 2009-05-08 23:24 . 2009-05-08 23:24 38912 ----a-w c:\windows\system32\xolehlp.dll 2009-05-08 23:22 . 2009-05-08 23:22 28672 ----a-w c:\windows\system32\Apphlpdm.dll 2009-05-08 23:22 . 2009-05-08 23:22 4240384 ----a-w c:\windows\system32\GameUXLegacyGDFs.dll 2009-05-08 23:22 . 2009-05-08 23:22 1695744 ----a-w c:\windows\system32\gameux.dll 2009-05-08 23:21 . 2009-05-08 23:21 303616 ----a-w c:\windows\system32\wmpeffects.dll 2009-05-08 23:20 . 2009-05-08 23:20 1191936 ----a-w c:\windows\system32\msxml3.dll 2009-05-08 23:20 . 2009-05-08 23:20 2048 ----a-w c:\windows\system32\msxml3r.dll 2009-05-08 23:16 . 2009-05-08 23:16 2048 ----a-w c:\windows\system32\tzres.dll 2009-05-08 23:15 . 2009-05-08 23:15 428544 ----a-w c:\windows\system32\EncDec.dll 2009-05-08 23:15 . 2009-05-08 23:15 293376 ----a-w c:\windows\system32\psisdecd.dll 2009-05-08 23:14 . 2009-05-08 23:14 8147456 ----a-w c:\windows\system32\wmploc.DLL 2009-05-08 23:14 . 2009-05-08 23:14 7680 ----a-w c:\windows\system32\spwmp.dll 2009-05-08 23:14 . 2009-05-08 23:14 4096 ----a-w c:\windows\system32\dxmasf.dll 2009-05-08 23:09 . 2009-05-08 23:09 2927104 ----a-w c:\windows\explorer.exe 2009-05-08 23:02 . 2009-05-08 23:02 6656 ----a-w c:\windows\system32\kbd106n.dll 2009-05-08 23:02 . 2009-05-08 23:02 927288 ----a-w c:\windows\system32\winresume.exe 2009-05-08 23:02 . 2009-05-08 23:02 988216 ----a-w c:\windows\system32\winload.exe 2009-05-08 23:02 . 2009-05-08 23:02 40960 ----a-w c:\windows\system32\srclient.dll 2009-05-08 23:02 . 2009-05-08 23:02 318464 ----a-w c:\windows\system32\rstrui.exe 2009-05-08 23:02 . 2009-05-08 23:02 378368 ----a-w c:\windows\system32\srcore.dll 2009-05-08 23:02 . 2009-05-08 23:02 14848 ----a-w c:\windows\system32\srdelayed.exe 2009-05-08 23:02 . 2009-05-08 23:02 19000 ----a-w c:\windows\system32\kd1394.dll 2009-05-08 23:02 . 2009-05-08 23:02 46592 ----a-w c:\windows\system32\setbcdlocale.dll 2009-05-08 23:02 . 2009-05-08 23:02 615992 ----a-w c:\windows\system32\ci.dll 2009-05-08 23:01 . 2009-05-08 23:01 551424 ----a-w c:\windows\system32\rpcss.dll 2009-05-08 23:01 . 2009-05-08 23:01 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe 2009-05-08 23:01 . 2009-05-08 23:01 3547632 ----a-w c:\windows\system32\ntoskrnl.exe 2009-05-08 23:01 . 2009-05-08 23:01 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll 2009-05-08 23:01 . 2009-05-08 23:01 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe 2009-05-08 23:01 . 2009-05-08 23:01 54784 ----a-w c:\windows\system32\iasads.dll 2009-05-08 23:01 . 2009-05-08 23:01 44032 ----a-w c:\windows\system32\iasdatastore.dll 2009-05-08 23:01 . 2009-05-08 23:01 17408 ----a-w c:\windows\system32\iashost.exe 2009-05-08 23:01 . 2009-05-08 23:01 183296 ----a-w c:\windows\system32\sdohlp.dll 2009-05-08 23:01 . 2009-05-08 23:01 98304 ----a-w c:\windows\system32\iasrecst.dll 2009-05-08 22:58 . 2009-05-08 22:58 441400 ----a-w c:\windows\system32\drivers\ksecdd.sys 2009-05-08 22:58 . 2009-05-08 22:58 72704 ----a-w c:\windows\system32\secur32.dll 2009-05-08 22:58 . 2009-05-08 22:58 9728 ----a-w c:\windows\system32\lsass.exe 2009-05-08 22:58 . 2009-05-08 22:58 1255936 ----a-w c:\windows\system32\lsasrv.dll 2009-05-08 22:58 . 2009-05-08 22:58 24064 ----a-w c:\windows\system32\amxread.dll 2009-05-08 22:58 . 2009-05-08 22:58 13824 ----a-w c:\windows\system32\apilogen.dll 2009-05-08 22:57 . 2009-05-08 22:57 425472 ----a-w c:\windows\system32\PhotoMetadataHandler.dll 2009-05-08 22:57 . 2009-05-08 22:57 712704 ----a-w c:\windows\system32\WindowsCodecs.dll 2009-05-08 22:57 . 2009-05-08 22:57 347136 ----a-w c:\windows\system32\WindowsCodecsExt.dll 2009-05-08 22:55 . 2009-05-08 22:55 37888 ----a-w c:\windows\system32\printcom.dll 2009-05-08 22:55 . 2009-05-08 22:55 443392 ----a-w c:\windows\system32\win32spl.dll 2009-05-08 22:54 . 2009-05-08 22:54 113664 ----a-w c:\windows\system32\drivers\rmcast.sys 2009-05-08 22:54 . 2009-05-08 22:54 14848 ----a-w c:\windows\system32\wshrm.dll 2009-05-08 22:53 . 2009-05-08 22:53 288768 ----a-w c:\windows\system32\drivers\srv.sys 2009-05-08 22:51 . 2009-05-08 22:51 268288 ----a-w c:\windows\system32\schannel.dll 2009-05-08 22:48 . 2009-05-08 22:48 622080 ----a-w c:\windows\system32\icardagt.exe 2009-05-08 22:48 . 2009-05-08 22:48 11264 ----a-w c:\windows\system32\icardres.dll 2009-05-08 22:48 . 2009-05-08 22:48 97800 ----a-w c:\windows\system32\infocardapi.dll 2009-05-08 22:48 . 2009-05-08 22:48 105016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2009-05-08 22:48 . 2009-05-08 22:48 326160 ----a-w c:\windows\system32\PresentationHost.exe 2009-05-08 22:48 . 2009-05-08 22:48 43544 ----a-w c:\windows\system32\PresentationHostProxy.dll 2009-05-08 22:48 . 2009-05-08 22:48 781344 ----a-w c:\windows\system32\PresentationNative_v0300.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-10 08:20 . 2009-05-09 11:37 350192 ---ha-w c:\windows\system32\drivers\vsconfig.xml 2009-05-09 16:32 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat 2009-05-09 16:32 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat 2009-05-09 16:32 . 2006-11-02 10:25 143360 ----a-w c:\windows\inf\infstrng.dat 2009-05-09 13:34 . 2009-05-09 13:34 -------- d-----w c:\program files\iTunes 2009-05-09 13:34 . 2009-05-09 13:34 -------- d-----w c:\program files\iPod 2009-05-09 13:33 . 2009-05-09 13:33 -------- d-----w c:\program files\Bonjour 2009-05-09 13:33 . 2009-05-09 13:33 -------- d-----w c:\program files\QuickTime 2009-05-09 12:11 . 2009-05-09 12:13 15360 ----a-w c:\windows\Internet Logs\xDBEC94.tmp 2009-05-09 12:09 . 2009-05-09 12:11 1350144 ----a-w c:\windows\Internet Logs\xDB8F33.tmp 2009-05-09 12:09 . 2009-05-09 12:11 43520 ----a-w c:\windows\Internet Logs\xDB8E28.tmp 2009-05-09 11:26 . 2009-05-09 11:26 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf 2009-05-09 10:46 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini 2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Sidebar 2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Photo Gallery 2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Journal 2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Collaboration 2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Calendar 2009-05-09 10:40 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail 2009-05-09 10:40 . 2006-11-02 12:37 -------- d-----w c:\program files\Windows Defender 2009-05-09 10:40 . 2006-11-02 10:25 665600 ----a-w c:\windows\inf\drvindex.dat 2009-05-09 10:29 . 2006-11-02 10:32 101888 ----a-w c:\windows\system32\ifxcardm.dll 2009-05-09 10:29 . 2006-11-02 10:32 82432 ----a-w c:\windows\system32\axaltocm.dll 2009-05-08 22:20 . 2009-05-08 22:20 827392 ----a-w c:\windows\system32\wininet.dll 2009-05-08 22:20 . 2009-05-08 22:20 72704 ----a-w c:\windows\system32\admparse.dll 2009-05-08 22:20 . 2009-05-08 22:20 78336 ----a-w c:\windows\system32\ieencode.dll 2009-05-08 22:20 . 2009-05-08 22:20 48128 ----a-w c:\windows\system32\mshtmler.dll 2009-05-08 22:20 . 2009-05-08 22:20 26624 ----a-w c:\windows\system32\ieUnatt.exe 2009-05-08 21:23 . 2009-05-08 21:07 680 ----a-w c:\users\Raj\AppData\Local\d3d9caps.dat 2009-05-08 21:07 . 2009-05-08 21:07 48600 ----a-w c:\users\Raj\AppData\Local\GDIPFONTCACHEV1.DAT 2009-03-26 14:23 . 2009-03-26 14:23 36864 ----a-w c:\windows\system32\drivers\usbaapl.sys 2009-03-26 14:23 . 2009-03-26 14:23 1900544 ----a-w c:\windows\system32\usbaaplrc.dll 2009-03-19 15:32 . 2009-05-09 13:34 23400 ----a-w c:\windows\system32\drivers\GEARAspiWDM.sys 2009-03-05 11:06 . 2009-03-05 11:06 8198680 ----a-w c:\windows\system32\TVWSetup.exe 2009-03-05 11:06 . 2008-02-11 19:13 141848 ----a-w c:\windows\system32\igfxtray.exe 2009-03-05 11:06 . 2008-02-11 19:13 252952 ----a-w c:\windows\system32\igfxsrvc.exe 2009-03-05 11:06 . 2008-02-11 19:13 150552 ----a-w c:\windows\system32\igfxpers.exe 2009-03-05 11:06 . 2009-03-05 11:06 173080 ----a-w c:\windows\system32\igfxext.exe 2009-03-05 11:06 . 2009-03-05 11:06 668696 ----a-w c:\windows\system32\igfxcfg.exe 2009-03-05 11:06 . 2008-02-11 19:13 173592 ----a-w c:\windows\system32\hkcmd.exe 2009-02-26 10:49 . 2009-02-26 10:49 151552 ----a-w c:\windows\system32\igfxCoIn_v1666.dll 2009-02-26 10:39 . 2009-02-26 10:39 4569088 ----a-w c:\windows\system32\drivers\igdkmd32.sys 2009-02-26 10:34 . 2009-02-26 10:34 536576 ----a-w c:\windows\system32\igdumdx32.dll 2009-02-26 10:16 . 2009-02-26 10:16 2674688 ----a-w c:\windows\system32\ig4dev32.dll 2009-02-26 10:16 . 2009-02-26 10:16 4112384 ----a-w c:\windows\system32\ig4icd32.dll 2009-02-26 10:05 . 2009-02-26 10:05 59392 ----a-w c:\windows\system32\oemdspif.dll 2009-02-26 10:04 . 2009-02-26 10:04 200192 ----a-w c:\windows\system32\igfxpph.dll 2009-02-26 10:04 . 2009-02-26 10:04 23552 ----a-w c:\windows\system32\igfxexps.dll 2009-02-26 10:04 . 2009-02-26 10:04 130048 ----a-w c:\windows\system32\igfxdo.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}] 2008-10-16 17:22 333192 ----a-w c:\program files\AskBarDis\bar\bin\askBar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-16 333192] [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}] [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-10-16 333192] [HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}] [HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-18 1233920] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "EIVCD"="E:\EIVCD.exe" [2007-09-26 540672] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-05-09 1947928] "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] "SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-12 483422] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-05 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-05 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-05 150552] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-09 148888] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "GrpConv"="grpconv -o" [X] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=avgrsstx.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{EED9815E-45D6-4B0C-89C7-1671374EE692}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe "{CE239F65-09A9-4B1A-8CDD-EFC14F244E3B}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe "{6FAD6A1F-076A-48F8-B7B9-E6359E956CF4}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe "{4CBCEB0E-4D44-45E9-AC12-64D44C2A26B3}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{E0F97315-DAAC-497F-A0EB-82E9BFF5B0BF}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{F6EBA48A-463A-479C-8DFC-300EDA3839B6}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes "{CABD9631-CF3F-40F6-9248-7F8C41E7E37E}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [5/9/2009 12:31 PM 325896] S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [5/9/2009 12:31 PM 108552] S2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [5/9/2009 12:39 PM 464264] S2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [5/9/2009 12:30 PM 908568] S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [5/9/2009 12:30 PM 298776] --- Other Services/Drivers In Memory --- NewlyCreated - ECACHE [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9036f912-3c53-11de-8fe7-806e6f6e6963}] \shell\AutoRun\command - E:\EIVCD.exe . - - - - ORPHANS REMOVED - - - - HKLM-RunOnce-<NO NAME> - (no file) . ------- Supplementary Scan ------- . uStart Page = hxxp://www.yahoo.com/ uInternet Settings,ProxyOverride = .local . *********************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-10 10:07 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2009-05-10 10:08 ComboFix-quarantined-files.txt 2009-05-10 09:08 Pre-Run: The system cannot find message text for message number 0x2379 in the message file for Application. Post-Run: 151,657,357,312 bytes free 273 --- E O F --- 2009-05-09 09:24 Any help would be welcome.

05-10-2009, 08:45 AM	#2 (permalink)
acer05 Registered User Join Date: May 2009 Posts: 2 OS: Vista 32	Re: Internet Explorer Stops working ZA is also asking to give iexplorer.exe server access. Alert property Alert property value Technical explanation Program Name Internet Explorer A program running on your computer, which either attempted to send an IP packet over the Internet or is waiting for an incoming packet. Filename iexplore.exe The filename of the program that ZoneAlarm found on your computer. Program Version 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) The version of Internet Explorer running on your computer. Program Size 638816 The size of the program executable file in bytes. Program MD5 b60dddd2d63ce41cb8c487fcfbb6419e The MD5 hash, or number, that uniquely identifies the executable. Smart Checksum 603188e42b079c1b57f28c6cb2d94d65 The SKIMP hash, or number, that uniquely identifies the executable. Date Modified Mar-08-2009 10:09:26 PM The date when iexplore.exe was most recently modified. Connect Type Server This value can be either Access, which is an Internet connection attempt by Internet Explorer or Server, which indicates that Internet Explorer is waiting for connections coming in from the Internet. Local Port 62871 The port Internet Explorer is using to receive packets on the local computer. Remote IP Address 0.0.0.0 The IP address of the remote computer that caused the alert. Alert Date May-10-2009 07:35:15 AM PDT The time when ZoneAlarm detected the alert on your computer.