Bsod

  1. #1
    spinkfloyd is offline Full Member

    Question Bsod

    Thanks for the quick reply Jephree hope this will be of some use

    Logfile of HijackThis v1.99.1
    Scan saved at 01:29:45, on 16/12/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16544)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Comodo\Firewall\cmdagent.exe
    C:\WINDOWS\System32\SnoopFreeSvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\wwSecure.exe
    C:\Program Files\Keybreeze\Keybreeze.exe
    C:\Program Files\Comodo\Firewall\CPF.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\AnalogX\NetStat Live\nsl.exe
    C:\WINDOWS\SnoopFreeUI.exe
    C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
    C:\PROGRA~1\HDTUNE~1\HDTune.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
    C:\Program Files\Hawking\HWU8DD\HWU8DD.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Pumatech\Intellisync Lite for NEC 616\Intellisync For NEC.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
    C:\Program Files\WallpaperToy\Wallpapertoy.Exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\PrevxCSI\prevxcsi.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
    R3 - URLSearchHook: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox0.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox0.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O3 - Toolbar: Foxit Toolbar - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - C:\Program Files\Foxit\tbFox0.dll
    O4 - HKLM\..\Run: [Keybreeze] C:\Program Files\Keybreeze\Keybreeze.exe
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [NetStat Live] C:\Program Files\AnalogX\NetStat Live\nsl.exe
    O4 - HKLM\..\Run: [SnoopFreeUI] SnoopFreeUI.exe
    O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
    O4 - HKLM\..\Run: [HD Tune] C:\PROGRA~1\HDTUNE~1\HDTune.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [PrevxCSI] "C:\Program Files\PrevxCSI\prevxcsi.exe" -boot
    O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
    O4 - HKCU\..\Run: [wireless hub] C:\Program Files\Hawking\HWU8DD\HWU8DD.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
    O4 - Startup: Wallpaper Changer.lnk = C:\Program Files\WallpaperToy\Wallpapertoy.Exe
    O4 - Global Startup: Intellisync Lite for NEC 616.lnk = ?
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://utilities.pcpitstop.com/da/PCPitStop.CAB
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1193396350109
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1195486451203
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6...ws-i586-jc.cab
    O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
    O23 - Service: EPGService - Hauppauge Computer Works - C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: HauppaugeTVServer - Hauppauge Computer Works - C:\PROGRA~1\WinTV\HCWTVS~1.EXE
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
    O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
    O23 - Service: Snoop Free Service (SnoopFreeSvc) - Unknown owner - C:\WINDOWS\System32\SnoopFreeSvc.exe
    O23 - Service: Washer AutoComplete (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe



  2. #2
    Neal is offline Dedicated Member
    Welcome,

    BSOD's are very hard to find the problem, possibly not a malware issue.

    Did you do a scan with super antispyware?


    If you have previously downloaded ComboFix,please delete that version now.

    Now download http://download.bleepingcomputer.com/sUBs/ComboFix.exe and save to your desktop:

    Note:

    It is IMPORTANT that it is saved directly to your desktop

    Close any open browsers.

    Disconnect from the Internet.

    Double click on combofix.exe and follow the prompts.

    When it's finished it will produce a log.
    Post the entire contents of C:\ComboFix.txt into your next reply.

    Note:
    Do not mouseclick combofix's window while it's running.

    That may cause the program to freeze/hang.

    Do NOT post the ComboFix-quarantined-files.txt unless I ask.

    *Note*
    In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.
    Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.

  3. #3
    spinkfloyd is offline Full Member
    ComboFix 07-12-18.1 - RON 2007-12-18 17:10:00.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.379 [GMT 0:00]
    Running from: C:\Documents and Settings\RON\Desktop\ComboFix.exe
    * Created a new restore point
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\RON\Application Data\inst.exe

    .
    ((((((((((((((((((((((((( Files Created from 2007-11-18 to 2007-12-18 )))))))))))))))))))))))))))))))
    .

    2007-12-17 16:20 . 2007-12-17 16:20 <DIR> d-------- C:\Program Files\Uniblue
    2007-12-17 01:55 . 2007-12-17 07:31 <DIR> d-------- C:\Documents and Settings\RON\Application Data\Azureus
    2007-12-17 01:55 . 2007-12-17 01:55 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
    2007-12-17 01:54 . 2007-12-17 02:00 <DIR> d-------- C:\Program Files\Azureus
    2007-12-16 16:40 . 2007-12-16 16:40 <DIR> d-------- C:\Program Files\Lavasoft
    2007-12-16 16:40 . 2007-12-16 16:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
    2007-12-16 04:36 . 2007-12-16 04:38 1,393 --a------ C:\WINDOWS\imsins.BAK
    2007-12-16 04:23 . 2007-12-16 04:23 <DIR> d-------- C:\Program Files\MSXML 4.0
    2007-12-16 03:59 . 2007-12-16 03:59 <DIR> d-------- C:\Program Files\Belarc
    2007-12-16 03:59 . 2005-04-07 16:18 3,840 --a------ C:\WINDOWS\system32\drivers\BANTExt.sys
    2007-12-16 00:54 . 2007-12-16 00:54 <DIR> d-------- C:\Program Files\PrevxCSI
    2007-12-16 00:54 . 2007-12-18 00:00 10,624 --a------ C:\WINDOWS\system32\drivers\pxark.sys
    2007-12-16 00:50 . 2007-12-18 00:00 <DIR> d-------- C:\Documents and Settings\RON\Application Data\PrevxCSI
    2007-12-16 00:50 . 2007-12-16 00:50 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Prevx
    2007-12-14 18:24 . 2007-12-16 02:48 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SecTaskMan
    2007-12-14 18:18 . 2007-12-16 02:44 <DIR> d-------- C:\Program Files\Security Task Manager
    2007-12-13 15:11 . 2007-12-13 15:11 <DIR> d-------- C:\Program Files\RadioXpi
    2007-12-13 15:11 . 2007-12-13 15:11 1,155 --a------ C:\WINDOWS\mozver.dat
    2007-12-13 13:14 . 2007-12-13 13:14 <DIR> d-------- C:\Documents and Settings\RON\Application Data\IrfanView
    2007-12-08 15:10 . 2007-12-08 15:17 <DIR> d-------- C:\Documents and Settings\RON\Application Data\VersionTracker Pro
    2007-12-08 15:06 . 2007-12-08 15:06 <DIR> d-------- C:\Program Files\TechTracker
    2007-12-08 11:37 . 2007-12-08 11:37 <DIR> d-------- C:\symbols
    2007-12-08 11:24 . 2007-12-08 11:36 <DIR> d-------- C:\Program Files\Debugging Tools for Windows
    2007-12-07 15:40 . 2007-12-07 15:40 <DIR> d-------- C:\Documents and Settings\RON\Application Data\Ashampoo
    2007-12-07 15:30 . 2007-12-07 15:30 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ashampoo
    2007-12-07 14:28 . 2007-12-07 15:52 <DIR> d-------- C:\Program Files\Total Video Converter
    2007-12-07 14:12 . 2007-12-07 14:15 <DIR> d-------- C:\Documents and Settings\RON\Application Data\CopyToDvd
    2007-12-07 14:07 . 2007-12-07 15:13 <DIR> d-------- C:\Documents and Settings\RON\Application Data\Vso
    2007-12-07 14:07 . 2007-12-07 14:07 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
    2007-12-07 14:07 . 2007-12-07 15:13 47,360 --a------ C:\Documents and Settings\RON\Application Data\pcouffin.sys
    2007-12-07 13:46 . 2007-12-07 13:46 74,240 --a------ C:\WINDOWS\system32\3D Wormhole.scr
    2007-12-01 09:23 . 2007-12-01 09:23 <DIR> d-------- C:\Documents and Settings\RON\Application Data\AltrixSoft
    2007-11-30 01:03 . 2007-11-30 01:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
    2007-11-30 01:02 . 2007-12-18 15:52 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
    2007-11-30 01:02 . 2007-11-30 01:02 <DIR> d-------- C:\Documents and Settings\RON\Application Data\SUPERAntiSpyware.com
    2007-11-30 01:01 . 2007-12-16 16:39 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
    2007-11-27 08:23 . 2007-12-01 06:33 <DIR> d-------- C:\Program Files\CLOX
    2007-11-27 06:02 . 2007-11-27 06:10 <DIR> d-------- C:\Program Files\RegistryFix
    2007-11-26 18:56 . 2007-11-26 18:56 <DIR> d-------- C:\Program Files\HD Tune
    2007-11-26 18:36 . 2007-12-01 06:19 249,856 --------- C:\WINDOWS\Setup1.exe
    2007-11-26 18:36 . 2007-12-01 06:19 73,216 --a------ C:\WINDOWS\ST6UNST.EXE
    2007-11-26 05:24 . 2007-11-26 05:24 <DIR> d-------- C:\Program Files\Innovative Solutions
    2007-11-26 04:21 . 2007-11-26 04:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
    2007-11-26 03:57 . 2007-01-18 13:38 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS
    2007-11-26 03:09 . 2007-11-26 03:09 <DIR> d-------- C:\Program Files\Lavalys
    2007-11-26 02:53 . 2007-11-26 03:07 <DIR> d-------- C:\Program Files\Software by Design
    2007-11-26 02:53 . 2005-06-19 05:00 90,112 --------- C:\WINDOWS\SDUnInst.exe
    2007-11-26 02:41 . 2007-12-07 15:13 <DIR> d-------- C:\Program Files\vso
    2007-11-26 02:33 . 2007-11-26 02:33 <DIR> d-------- C:\Program Files\CdCoverCreator
    2007-11-25 07:09 . 2007-12-07 13:13 <DIR> d-------- C:\Program Files\Foxit
    2007-11-25 07:08 . 2007-11-25 07:08 <DIR> d-------- C:\Program Files\Foxit Software
    2007-11-24 16:01 . 2007-11-24 16:01 0 --a------ C:\WINDOWS\nsreg.dat
    2007-11-23 21:19 . 2007-11-23 21:19 <DIR> d-------- C:\Documents and Settings\RON\Application Data\EPSON
    2007-11-23 21:09 . 2007-11-23 21:09 27 --a------ C:\WINDOWS\CDE P34903590EF.ini
    2007-11-23 20:59 . 2005-04-14 00:00 282,624 --a------ C:\WINDOWS\system32\esint52.dll
    2007-11-23 20:59 . 2005-04-14 00:00 180,224 --a------ C:\WINDOWS\system32\eswia52.dll
    2007-11-23 20:59 . 2005-04-14 00:00 64,000 --a------ C:\WINDOWS\system32\esfw52.bin
    2007-11-23 20:59 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
    2007-11-23 20:59 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
    2007-11-23 20:59 . 2005-02-08 00:00 5,632 -ra------ C:\WINDOWS\system32\escdev.dll
    2007-11-23 17:13 . 2007-11-23 17:13 <DIR> d-------- C:\Program Files\Sienzo
    2007-11-23 17:10 . 2007-11-23 20:49 <DIR> d-------- C:\Program Files\Guitar Speed Trainer
    2007-11-23 17:10 . 2007-11-23 20:50 <DIR> d-------- C:\Program Files\Guitar Scales Method
    2007-11-23 17:05 . 2007-11-23 17:05 <DIR> d-------- C:\Program Files\D'Accord Music Software
    2007-11-23 05:52 . 2007-11-23 05:52 221,184 --a------ C:\WINDOWS\SnoopFreeUI.exe
    2007-11-23 05:52 . 2007-11-23 05:52 90,112 --a------ C:\WINDOWS\system32\SnoopFreeSvc.exe
    2007-11-23 05:52 . 2007-11-23 05:52 45,056 --a------ C:\WINDOWS\SnoopFreeDll.dll
    2007-11-23 05:52 . 2007-11-23 05:52 9,472 --a------ C:\WINDOWS\system32\drivers\SnopFree.sys
    2007-11-23 05:38 . 2007-11-23 05:38 <DIR> d-------- C:\Program Files\ZSoft
    2007-11-23 05:21 . 2007-12-17 07:19 7,680 --ahs---- C:\WINDOWS\Thumbs.db
    2007-11-22 15:24 . 2007-11-23 08:44 <DIR> d-------- C:\Program Files\FLAC
    2007-11-21 18:25 . 2007-11-21 18:25 <DIR> d-------- C:\WINDOWS\system32\EXP
    2007-11-21 18:22 . 2007-11-24 15:00 <DIR> d-------- C:\Program Files\Audacity
    2007-11-21 17:17 . 2007-12-13 17:51 3,145,782 --ah----- C:\WINDOWS\system32\toyhide.bmp
    2007-11-21 17:15 . 2007-11-21 17:15 <DIR> d-------- C:\Program Files\WallpaperToy
    2007-11-21 17:15 . 2007-11-21 17:12 187,072 --a------ C:\WINDOWS\walltoyUninst.exe
    2007-11-21 16:42 . 2007-11-21 16:42 <DIR> d-------- C:\Program Files\YourWare Solutions
    2007-11-21 16:37 . 2007-11-24 16:04 <DIR> d-------- C:\Program Files\EULAlyzer
    2007-11-21 01:14 . 2007-11-21 01:14 <DIR> d-------- C:\Documents and Settings\RON\Application Data\GlarySoft
    2007-11-21 00:53 . 2007-11-21 00:53 <DIR> d-------- C:\Program Files\Glary Utilities
    2007-11-20 23:42 . 2007-11-21 01:32 <DIR> d-------- C:\Program Files\Startup Optimizer
    2007-11-20 21:55 . 2004-08-04 12:00 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
    2007-11-20 19:53 . 2007-11-20 20:26 <DIR> d-------- C:\Program Files\NT Registry Optimizer
    2007-11-19 22:48 . 2007-11-19 22:48 <DIR> d-------- C:\NVIDIA
    2007-11-19 19:48 . 2007-11-26 11:46 <DIR> d-------- C:\Documents and Settings\RON\DoctorWeb
    2007-11-19 18:06 . 2007-11-19 18:51 <DIR> d-------- C:\Documents and Settings\RON\.housecall6.6
    2007-11-19 18:02 . 2007-11-19 18:02 <DIR> d-------- C:\WINDOWS\Sun
    2007-11-19 18:02 . 2007-11-19 18:02 <DIR> d-------- C:\Program Files\Java
    2007-11-19 18:02 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
    2007-11-19 18:00 . 2007-11-19 18:00 <DIR> d-------- C:\Program Files\Common Files\Java
    2007-11-19 16:38 . 2004-06-24 01:20 309,760 --a------ C:\WINDOWS\system32\EAL32.DLL
    2007-11-19 16:38 . 2004-03-12 01:30 82,944 --a------ C:\WINDOWS\system32\EAL.EXE
    2007-11-19 16:38 . 2004-11-25 05:07 79,679 --a------ C:\WINDOWS\system32\E_FLMAIA.DLL
    2007-11-19 16:38 . 2003-05-21 02:27 64,000 --a------ C:\WINDOWS\system32\E_FBCBAIA.DLL
    2007-11-19 16:38 . 2000-06-07 01:01 34,304 --a------ C:\WINDOWS\system32\E_FBCHAIA.DLL
    2007-11-19 16:38 . 2004-06-24 01:20 58 --a------ C:\WINDOWS\system32\EAL32.INI
    2007-11-19 16:37 . 2007-11-20 22:52 <DIR> d-------- C:\epson
    2007-11-19 16:22 . 2007-11-19 16:22 <DIR> d-------- C:\Program Files\Common Files\IviSDK
    2007-11-19 16:22 . 2003-03-18 16:28 2,179,072 --a------ C:\WINDOWS\system32\mfc71d.dll
    2007-11-19 16:22 . 2003-03-18 15:04 765,952 --a------ C:\WINDOWS\system32\msvcp71d.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
    .
    2007-12-18 16:52 --------- d-----w C:\Documents and Settings\RON\Application Data\foobar2000
    2007-12-18 15:36 --------- d-----w C:\Documents and Settings\RON\Application Data\Keybreeze Data
    2007-12-18 15:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg7
    2007-12-17 17:57 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
    2007-12-17 17:25 --------- d-----w C:\Program Files\IrfanView
    2007-12-17 16:35 --------- d-----w C:\Documents and Settings\RON\Application Data\AVG7
    2007-12-17 16:20 --------- d-----w C:\Documents and Settings\RON\Application Data\Uniblue
    2007-12-08 14:49 --------- d-----w C:\Program Files\Opera
    2007-12-07 15:30 --------- d-----w C:\Program Files\Ashampoo
    2007-11-26 06:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-11-24 15:57 --------- d-----w C:\Program Files\Spamihilator
    2007-11-24 15:56 --------- d-----w C:\Documents and Settings\RON\Application Data\SlimBrowser
    2007-11-24 15:17 --------- d-----w C:\Program Files\PCPitstop
    2007-11-24 15:04 --------- d-----w C:\Program Files\Maxthon2
    2007-11-24 15:03 --------- d-----w C:\Program Files\Common Files\Logitech
    2007-11-23 21:16 --------- d-----w C:\Program Files\Common Files\InstallShield
    2007-11-23 21:13 --------- d-----w C:\Program Files\EPSON
    2007-11-23 05:34 --------- d-----w C:\Program Files\AnalogX
    2007-11-21 01:55 --------- d-----w C:\Program Files\PC Doc Pro
    2007-11-21 01:48 --------- d-----w C:\Program Files\Diskeeper Corporation
    2007-11-21 01:07 --------- d-----w C:\Program Files\ZoneLog
    2007-11-16 19:06 --------- d-----w C:\Program Files\iDisk
    2007-11-16 18:24 --------- d-----w C:\Documents and Settings\RON\Application Data\Comodo
    2007-11-16 18:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Comodo
    2007-11-16 18:21 --------- d-----w C:\Program Files\Comodo
    2007-11-16 16:15 --------- d-----w C:\Documents and Settings\RON\Application Data\FastStone
    2007-11-16 16:00 --------- d-----w C:\Program Files\ToniArts
    2007-11-16 15:50 --------- d-----w C:\Program Files\AnswersThatWork
    2007-11-16 00:19 --------- d-----w C:\Program Files\RegCure
    2007-11-15 19:50 --------- d-----w C:\Documents and Settings\RON\Application Data\U3
    2007-11-15 15:44 --------- d-----w C:\Documents and Settings\RON\Application Data\SiteAdvisor
    2007-11-15 15:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\SiteAdvisor
    2007-11-15 15:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee
    2007-11-15 15:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\U3
    2007-11-15 03:58 --------- d-----w C:\Documents and Settings\RON\Application Data\Avant Profiles
    2007-11-15 03:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\RoboForm
    2007-11-15 03:56 --------- d-----w C:\Program Files\Siber Systems
    2007-11-15 03:54 --------- d-----w C:\Program Files\Avant Browser
    2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
    2007-11-13 04:19 720,896 ----a-w C:\WINDOWS\iun6002ev.exe
    2007-11-10 16:18 --------- d-----w C:\Program Files\Microsoft Games
    2007-11-10 16:16 --------- d-----w C:\Program Files\ubi.com
    2007-11-10 15:49 --------- d-----w C:\Program Files\Ubi Soft
    2007-11-10 15:48 --------- d-----w C:\Program Files\directx
    2007-11-10 11:18 --------- d-----w C:\Program Files\Google
    2007-11-10 10:44 --------- d-----w C:\Documents and Settings\RON\Application Data\Smart Recorder
    2007-11-09 15:40 --------- d-----w C:\Documents and Settings\RON\Application Data\Creative
    2007-11-09 14:38 --------- d-----w C:\Program Files\Creative
    2007-11-08 17:45 --------- d-----w C:\Program Files\foobar2000
    2007-11-08 16:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet
    2007-11-08 13:31 --------- d-----w C:\Program Files\Common Files\Adobe
    2007-11-08 13:31 --------- d-----w C:\Program Files\Bonjour
    2007-11-08 13:21 --------- d-----w C:\Program Files\Common Files\Macrovision Shared
    2007-11-06 18:45 --------- d-----w C:\Documents and Settings\RON\Application Data\Ahead
    2007-11-06 17:24 --------- d-----w C:\Program Files\Active Data Recovery Services
    2007-11-06 17:16 --------- d-----w C:\Program Files\Common Files\Ahead
    2007-11-06 17:12 --------- d-----w C:\Program Files\Nero
    2007-11-06 15:48 --------- d-----w C:\Program Files\EssentialPIM
    2007-11-06 15:48 --------- d-----w C:\Documents and Settings\RON\Application Data\EssentialPIM
    2007-11-05 17:19 --------- d-----w C:\Program Files\SiSoftware
    2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
    2007-10-28 17:06 --------- d-----w C:\Program Files\XP Repair Pro 2007
    2007-10-28 08:45 --------- d-----w C:\Documents and Settings\RON\Application Data\Leadertech
    2007-10-27 17:39 230,912 ----a-w C:\WINDOWS\system32\wmasf.dll
    2007-10-27 04:21 --------- d-----w C:\Program Files\Common Files\eSellerate
    2007-10-27 03:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-10-26 14:05 --------- d-----w C:\Program Files\CCleaner
    2007-10-26 13:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    2007-10-26 13:11 --------- d-----w C:\Program Files\Common Files\Webroot Shared
    2007-10-26 13:09 --------- d-----w C:\Program Files\Webroot
    2007-10-26 13:03 --------- d-----w C:\Documents and Settings\RON\Application Data\Webroot
    2007-10-26 12:12 --------- d-----w C:\Program Files\Pumatech
    2007-10-26 11:39 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
    2007-10-26 11:39 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
    2007-10-26 11:39 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
    2007-10-26 11:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier
    2007-10-26 10:36 --------- d-----w C:\Program Files\Keybreeze
    2007-10-26 10:35 64,650 ----a-w C:\WINDOWS\BricoPackUninst.cmd
    2007-10-26 10:35 6,110 ----a-w C:\WINDOWS\BricoPackFoldersDelete.cmd
    2007-10-26 10:35 218,624 ----a-w C:\WINDOWS\system32\uxtheme.dll
    2007-10-26 10:16 --------- d-----w C:\Program Files\Hawking
    2007-10-26 10:05 --------- d-----w C:\Program Files\AusLogics Disk Defrag
    2007-10-26 09:57 --------- d-----w C:\Program Files\Microsoft.NET
    2007-10-26 09:57 --------- d-----w C:\Program Files\Microsoft ActiveSync
    2007-10-26 09:57 --------- d-----w C:\Program Files\Common Files\L&H
    2007-10-26 09:56 --------- d-----w C:\Program Files\Microsoft Works
    2007-10-26 09:43 --------- d-----w C:\Program Files\microsoft frontpage
    2007-10-04 17:14 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll
    2007-10-04 17:14 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll
    2007-10-04 17:14 8,491,008 ----a-w C:\WINDOWS\system32\nvcpl.dll
    2007-10-04 17:14 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe
    2007-10-04 17:14 6,750,208 ----a-w C:\WINDOWS\system32\nvoglnt.dll
    2007-10-04 17:14 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll
    2007-10-04 17:14 5,783,424 ----a-w C:\WINDOWS\system32\nv4_disp.dll
    2007-10-04 17:14 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
    2007-10-04 17:14 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
    2007-10-04 17:14 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
    2007-10-04 17:14 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
    2007-10-04 17:14 364,544 ----a-w C:\WINDOWS\system32\nvapi.dll
    2007-10-04 17:14 36,864 ----a-w C:\WINDOWS\system32\nvcodins.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]
    2007-12-14 14:48 1502232 --a------ C:\Program Files\Foxit\tbFox0.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {EE5D279F-081B-4404-994D-C6B60AAEBA6D}
    {73C7D5B0-7B03-444A-84C7-CE1BA03B5573}

    [HKEY_CLASSES_ROOT\clsid\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
    "{73C7D5B0-7B03-444A-84C7-CE1BA03B5573}"= C:\Program Files\Foxit\tbFox0.dll [2007-12-14 14:48 1502232]

    [HKEY_CLASSES_ROOT\clsid\{73c7d5b0-7b03-444a-84c7-ce1ba03b5573}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
    "RocketDock"="C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" [2007-03-18 22:05]
    "wireless hub"="C:\Program Files\Hawking\HWU8DD\HWU8DD.exe" [2005-09-09 09:55]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "Keybreeze"="C:\Program Files\Keybreeze\Keybreeze.exe" [2007-10-01 04:44]
    "COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2007-11-16 18:21]
    "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-10-26 11:39]
    "NetStat Live"="C:\Program Files\AnalogX\NetStat Live\nsl.exe" [2007-10-22 12:10]
    "SnoopFreeUI"="SnoopFreeUI.exe" [2007-11-23 05:52 C:\WINDOWS\SnoopFreeUI.exe]
    "EEventManager"="C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe" [2005-04-08 14:09]
    "HD Tune"="C:\PROGRA~1\HDTUNE~1\HDTune.exe" [2007-09-03 00:37]
    "PrevxCSI"="C:\Program Files\PrevxCSI\prevxcsi.exe" [2007-12-16 00:50]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
    "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-10-26 11:39]

    C:\Documents and Settings\RON\Start Menu\Programs\Startup\
    TransBar.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe [2005-06-01 19:41:18]
    UberIcon.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe [2006-05-21 07:43:08]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^RON^Start Menu^Programs^Startup^RocketDock.lnk]
    backup=C:\WINDOWS\pss\RocketDock.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^RON^Start Menu^Programs^Startup^UberIcon.lnk]
    backup=C:\WINDOWS\pss\UberIcon.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^RON^Start Menu^Programs^Startup^Y'z Shadow.lnk]
    backup=C:\WINDOWS\pss\Y'z Shadow.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ARSA]
    C:\Program Files\AnswersThatWork\A Really Small App\A_Really_Small_App.exe -startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    2004-08-04 12:00 15360 --a------ C:\WINDOWS\system32\ctfmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
    RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
    RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
    nwiz.exe /install

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Red Swoosh]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteCenter]
    2004-06-25 10:21 147456 --a------ C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoboForm]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RocketDock]
    2007-03-18 22:05 630784 --a------ C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XPRepairPro2007]
    C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe /r

    R3 HCW88BDA;Hauppauge WinTV 88x DVB Tuner/Demod;C:\WINDOWS\system32\drivers\hcw88bda.sys [2006-11-21 04:03]
    R3 hcw88rc5;Hauppauge WinTV 88x IR Decoder;C:\WINDOWS\system32\Drivers\hcw88rc5.sys [2007-01-24 14:25]
    R3 HCW88TSE;Hauppauge WinTV 88x MPEG/TS Capture;C:\WINDOWS\system32\drivers\hcw88tse.sys [2007-01-24 14:25]
    R3 hcw88vid;Hauppauge WinTV 88x Video;C:\WINDOWS\system32\drivers\hcw88vid.sys [2007-01-24 14:25]
    R3 sbusb;Sound Blaster USB Audio Driver;C:\WINDOWS\system32\DRIVERS\sbusb.sys [2004-07-27 09:31]
    R3 WmBEnum;Logitech Virtual Bus Enumerator Driver;C:\WINDOWS\system32\drivers\WmBEnum.sys [2007-09-13 20:40]
    R3 WmFilter;Logitech Gaming HID Filter Driver;C:\WINDOWS\system32\drivers\WmFilter.sys [2007-09-13 20:41]
    R3 WmXlCore;Logitech Translation Layer Driver;C:\WINDOWS\system32\drivers\WmXlCore.sys [2007-09-13 20:41]
    S3 EPGService;EPGService;C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [2006-11-28 17:17]
    S3 HauppaugeTVServer;HauppaugeTVServer;C:\PROGRA~1\Wi nTV\HCWTVS~1.EXE [2006-12-01 14:41]
    S3 pxark;pxark;C:\WINDOWS\system32\drivers\pxark.sys [2007-12-18 00:00]
    S3 ulusba;NEC 616 Command Port Driver;C:\WINDOWS\system32\DRIVERS\ulusba.sys [2003-06-22 16:00]
    S3 ulusbc;NEC 616 CONTROL Driver;C:\WINDOWS\system32\DRIVERS\ulusbc.sys [2003-06-22 16:00]
    S3 ulusbe;NEC 616 ENUMERATION Driver;C:\WINDOWS\system32\DRIVERS\ulusbe.sys [2003-06-22 16:00]
    S3 ulusbm;NEC 616 Modem Driver;C:\WINDOWS\system32\DRIVERS\ulusbm.sys [2003-06-22 16:00]
    S3 ulusbo;NEC 616 OBEX Port Driver;C:\WINDOWS\system32\DRIVERS\ulusbo.sys [2003-07-23 16:00]
    S3 WmVirHid;Logitech Virtual Hid Device Driver;C:\WINDOWS\system32\drivers\WmVirHid.sys [2007-09-13 20:41]
    S3 ZD1211U(Hawking);Hawking Hi-Gain Wireless-G USB Dish Adapter(Hawking);C:\WINDOWS\system32\DRIVERS\zd121 1u.sys [2005-08-16 13:50]

    *Newly Created Service* - CATCHME
    *Newly Created Service* - PROCEXP90
    .
    Contents of the 'Scheduled Tasks' folder
    "2007-11-16 00:14:44 C:\WINDOWS\Tasks\RegCure.job"
    - C:\Program Files\RegCure\RegCure.exe
    .
    ************************************************** ************************

    catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-12-18 17:12:30
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    ************************************************** ************************
    .
    Completion time: 2007-12-18 17:13:35

  4. #4
    Neal is offline Dedicated Member
    Open Hijackthis.

    Click the "Open the Misc Tools" section Button.

    Click the "Open Uninstall Manager" Button.

    Click the "Save list..." Button.

    Save it to your desktop. Copy and paste the contents into your reply.




    Go here to learn how to show hidden files/folders:

    http://www.xtra.co.nz/help/0,,4155-1916458,00.html#5

    Re-hide after we are done



    Go to next site:
    http://www.virustotal.com/en/indexf.html
    On top you'll find 'Browse'
    Click the browse button and browse to next file:


    C:\WINDOWS\CDE P34903590EF.ini


    Click open.
    Then click the 'Send' button next to it.
    This will scan the file. Please be patient.
    Once scanned, copy and paste the results as well in your next reply.


    If that one is to busy here is another option:


    http://virusscan.jotti.org

    And

    http://www.kaspersky.com/scanforvirus.html


    Do the same for this one please:

    C:\WINDOWS\system32\toyhide.bmp

    Thanks.

  5. #5
    spinkfloyd is offline Full Member
    Thanks Neal here are the logs, just hope i have done all this correctly.....

    uninstall log=
    A Really Small App 2.0
    Ad-Aware 2007
    Adobe Anchor Service CS3
    Adobe Asset Services CS3
    Adobe Bridge CS3
    Adobe Bridge Start Meeting
    Adobe Camera Raw 4.0
    Adobe CMaps
    Adobe Color - Photoshop Specific
    Adobe Color Common Settings
    Adobe Color EU Extra Settings
    Adobe Color JA Extra Settings
    Adobe Color NA Recommended Settings
    Adobe Default Language CS3
    Adobe Device Central CS3
    Adobe ExtendScript Toolkit 2
    Adobe ExtendScript Toolkit 2
    Adobe Flash Player Plugin
    Adobe Fonts All
    Adobe Help Viewer CS3
    Adobe Linguistics CS3
    Adobe PDF Library Files
    Adobe Photoshop CS3
    Adobe Photoshop CS3
    Adobe Reader 8.1.1
    Adobe Setup
    Adobe Setup
    Adobe Stock Photos CS3
    Adobe Type Support
    Adobe Update Manager CS3
    Adobe Version Cue CS3 Client
    Adobe WinSoft Linguistics Plugin
    Adobe XMP Panels CS3
    Ashampoo Burning Studio 6
    AVG 7.5
    AVG Anti-Rootkit Free
    Azureus Vuze
    Belarc Advisor 7.2
    CCleaner (remove only)
    CdCoverCreator v.2.4
    COMODO Firewall Pro
    Creative MediaSource
    Creative System Information
    Debugging Tools for Windows
    DriverMax 3.0
    EPSON Attach To Email
    EPSON Copy Utility 3
    EPSON Event Manager
    EPSON File Manager
    EPSON Image Clip Palette
    EPSON Printer Software
    EPSON Scan
    EPSON Scan Assistant
    EPSON Web-To-Page
    Error Messages for Windows
    EULAlyzer v1.2
    EVEREST Home Edition v2.20
    FLAC 1.1.4b (remove only)
    foobar2000 v0.9.4.4
    Foxit Reader
    Foxit Toolbar
    Glary Utilities 2.3.3
    Google Earth
    Hauppauge English Help Files and Resources
    Hauppauge WinTV DVB-T EPG Service
    Hauppauge WinTV Infrared Remote
    Hauppauge WinTV Scheduler
    Hauppauge WinTV TV Services
    Hauppauge WinTV2000
    HD Tune 2.54
    HijackThis 1.99.1
    Intellisync Lite for NEC 616
    InterVideo FilterSDK for Hauppauge
    IrfanView (remove only)
    Java(TM) 6 Update 3
    Keybreeze
    LADSPA_plugins-win-0.4.15
    Microsoft .NET Framework 2.0
    Microsoft Fighter Ace II
    Microsoft Flight Simulator 2002
    Microsoft Office Professional Edition 2003
    Microsoft Visual C++ 2005 Redistributable
    Mozilla Firefox (2.0.0.9)
    MSXML 4.0 SP2 (KB936181)
    Nero 7 Ultra Edition
    NVIDIA Drivers
    Online Manuals for WinTV (English)
    Opera 9.22
    Opera 9.24
    Pack Vista Inspirat 2 1.0
    PC Pitstop Optimize 1.5
    PDF Settings
    Perf3490P_3590P User's Guide
    Prevx CSI Plus
    RegCure 1.0.0.43
    RegistryFix v6.3
    Security Task Manager 1.7d
    Security Update for Microsoft .NET Framework 2.0 (KB928365)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows XP (KB923789)
    Security Update for Windows XP (KB937894)
    Security Update for Windows XP (KB941568)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB944653)
    SiSoftware Sandra Lite XIIc
    SnoopFree Privacy Shield
    Sound Blaster Live! 24-Bit External
    Spybot - Search & Destroy
    SUPERAntiSpyware Free Edition
    The Ultimate Troubleshooter
    Total Video Converter 3.02
    U3Launcher
    Uniblue RegistryBooster 2
    Update for Windows XP (KB942763)
    VersionTracker Pro for Windows
    Wallpaper Changer for Windows XP
    Window Washer
    Windows Internet Explorer 7
    WinRAR archiver
    XP Repair Pro 2007
    ZoneLog 1.19
    ZSoft Uninstaller 2.4.1

    virustotal logs

    File CDE_P34903590EF.ini received on 12.19.2007 17:10:37 (CET)
    Current status: finished
    Result: 0/32 (0%)
    Compact
    Print results Antivirus Version Last Update Result
    AhnLab-V3 2007.12.20.10 2007.12.19 -
    AntiVir 7.6.0.45 2007.12.19 -
    Authentium 4.93.8 2007.12.19 -
    Avast 4.7.1098.0 2007.12.18 -
    AVG 7.5.0.503 2007.12.19 -
    BitDefender 7.2 2007.12.19 -
    CAT-QuickHeal 9.00 2007.12.19 -
    ClamAV 0.91.2 2007.12.19 -
    DrWeb 4.44.0.09170 2007.12.19 -
    eSafe 7.0.15.0 2007.12.19 -
    eTrust-Vet 31.3.5387 2007.12.19 -
    Ewido 4.0 2007.12.19 -
    FileAdvisor 1 2007.12.19 -
    Fortinet 3.14.0.0 2007.12.19 -
    F-Prot 4.4.2.54 2007.12.18 -
    F-Secure 6.70.13030.0 2007.12.19 -
    Ikarus T3.1.1.15 2007.12.19 -
    Kaspersky 7.0.0.125 2007.12.19 -
    McAfee 5189 2007.12.19 -
    Microsoft 1.3109 2007.12.19 -
    NOD32v2 2734 2007.12.19 -
    Norman 5.80.02 2007.12.19 -
    Panda 9.0.0.4 2007.12.18 -
    Prevx1 V2 2007.12.19 -
    Rising 20.23.22.00 2007.12.19 -
    Sophos 4.24.0 2007.12.19 -
    Sunbelt 2.2.907.0 2007.12.19 -
    Symantec 10 2007.12.19 -
    TheHacker 6.2.9.164 2007.12.18 -
    VBA32 3.12.2.5 2007.12.19 -
    VirusBuster 4.3.26:9 2007.12.19 -
    Webwasher-Gateway 6.6.2 2007.12.19 -
    Additional information
    File size: 27 bytes
    MD5: 0811f42f4988de430213178a138140b2
    SHA1: 6494530153512e278b23b23fd95f6d678edc89bb
    PEiD: -


    File toyhide.bmp received on 12.19.2007 17:26:14 (CET)
    Current status: finished
    Result: 0/32 (0%)
    Compact
    Print results Antivirus Version Last Update Result
    AhnLab-V3 2007.12.20.10 2007.12.19 -
    AntiVir 7.6.0.45 2007.12.19 -
    Authentium 4.93.8 2007.12.19 -
    Avast 4.7.1098.0 2007.12.18 -
    AVG 7.5.0.503 2007.12.19 -
    BitDefender 7.2 2007.12.19 -
    CAT-QuickHeal 9.00 2007.12.19 -
    ClamAV 0.91.2 2007.12.19 -
    DrWeb 4.44.0.09170 2007.12.19 -
    eSafe 7.0.15.0 2007.12.19 -
    eTrust-Vet 31.3.5387 2007.12.19 -
    Ewido 4.0 2007.12.19 -
    FileAdvisor 1 2007.12.19 -
    Fortinet 3.14.0.0 2007.12.19 -
    F-Prot 4.4.2.54 2007.12.18 -
    F-Secure 6.70.13030.0 2007.12.19 -
    Ikarus T3.1.1.15 2007.12.19 -
    Kaspersky 7.0.0.125 2007.12.19 -
    McAfee 5189 2007.12.19 -
    Microsoft 1.3109 2007.12.19 -
    NOD32v2 2734 2007.12.19 -
    Norman 5.80.02 2007.12.19 -
    Panda 9.0.0.4 2007.12.18 -
    Prevx1 V2 2007.12.19 -
    Rising 20.23.22.00 2007.12.19 -
    Sophos 4.24.0 2007.12.19 -
    Sunbelt 2.2.907.0 2007.12.19 -
    Symantec 10 2007.12.19 -
    TheHacker 6.2.9.164 2007.12.18 -
    VBA32 3.12.2.5 2007.12.19 -
    VirusBuster 4.3.26:9 2007.12.19 -
    Webwasher-Gateway 6.6.2 2007.12.19 -
    Additional information
    File size: 3145782 bytes
    MD5: 8f53c3638cba49dbcce5fb78a8af39fc
    SHA1: a855eb91e7abadc15f6b6bf2b3c5e5275c3b0938
    PEiD: -

    Thanks

  6. #6
    Neal is offline Dedicated Member
    If you are still having BSOD's then you proabably need to look in a different direction, like a hardware problem. Combofix did not come up with much of anything.

    Good luck

  7. #7
    spinkfloyd is offline Full Member
    Cheers for having a look anyway Neal, I think the problem has something to do with a ZDPSp50 NDIS Protocol Driver, cant seem to find any one to help with its update or removal. Cheers anyway. Just have to keep looking.

  8. #8
    Neal is offline Dedicated Member
    Save 20% on AVG Internet Security 2012 Suite!
    Good luck and hope you get it sorted soon

+ Reply to Thread