Hello,

Microsoft essentials picked up an issue VirTools/S/Obfuscator.BN. It said it had cleaned up the problem but I ran a successful restore and then strangely reveive a spam email with a title Restore and subject Unsuccessful. The timing of this seemed strange and it is not an email I have seen before. My machine also appears to not be able to download the latest microsoft essentials update KB2310138. It keeps asking me to download it repeatedly despite it saying in the histoy that it has already been installed successfully.

If you could take a look at the logs to see if I have any issues I would appreciate it.

Malwarebytes' Anti-Malware 1.51.0.1200
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: 7003

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

02/07/2011 14:14:27
mbam-log-2011-07-02 (14-14-27).txt

Scan type: Quick scan
Objects scanned: 148522
Time elapsed: 2 minute(s), 45 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


GMER 1.0.15.15640 - GMER - Rootkit Detector and Remover
Rootkit scan 2011-07-02 15:06:10
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 HITACHI_ rev.PB3Z
Running: o7ofqlgx.exe; Driver: C:\Users\Nick\AppData\Local\Temp\kxldqpoc.sys


---- System - GMER 1.0.15 ----

SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwAssignProcessToJobObject [0x91384FC0]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwCreateFile [0x91385A56]
SSDT \??\C:\ProgramData\Trusteer\Rapport\store\exts\Rap portCerberus\26762\RapportCerberus_26762.sys ZwCreateThread [0x913BDE20]
SSDT \??\C:\ProgramData\Trusteer\Rapport\store\exts\Rap portCerberus\26762\RapportCerberus_26762.sys ZwCreateThreadEx [0x913BDEBE]
SSDT \??\C:\ProgramData\Trusteer\Rapport\store\exts\Rap portCerberus\26762\RapportCerberus_26762.sys ZwDeleteFile [0x913BCE7C]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwDeleteKey [0x9138927C]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwDeleteValueKey [0x913892AE]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwLoadKey [0x91389410]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwOpenFile [0x91385B2C]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwOpenProcess [0x91385104]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwOpenThread [0x913852F6]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwProtectVirtualMemory [0x91385428]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwQueryValueKey [0x91389386]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwRenameKey [0x913892F0]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwReplaceKey [0x91389322]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwRestoreKey [0x91389354]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwSetContextThread [0x91384F66]
SSDT \??\C:\ProgramData\Trusteer\Rapport\store\exts\Rap portCerberus\26762\RapportCerberus_26762.sys ZwSetInformationFile [0x913BCEF0]
SSDT \??\C:\ProgramData\Trusteer\Rapport\store\exts\Rap portCerberus\26762\RapportCerberus_26762.sys ZwSetValueKey [0x913BDCFC]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwSuspendThread [0x91384F02]
SSDT \??\C:\ProgramData\Trusteer\Rapport\store\exts\Rap portCerberus\26762\RapportCerberus_26762.sys ZwTerminateProcess [0x913BCE02]
SSDT \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys ZwTerminateThread [0x91384E9E]

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!ZwSaveKey + 13C1 83092339 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 830CBD52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 1153 830D2E48 4 Bytes [C0, 4F, 38, 91] {ROR BYTE [EDI+0x38], 0x91}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11AF 830D2EA4 4 Bytes [56, 5A, 38, 91]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1203 830D2EF8 8 Bytes [20, DE, 3B, 91, BE, DE, 3B, ...] {AND DH, BL; CMP EDX, [ECX-0x6ec42142]}
.text ntkrnlpa.exe!KeRemoveQueueEx + 123F 830D2F34 8 Bytes [7C, CE, 3B, 91, 7C, 92, 38, ...] {JL 0xffffffffffffffd0; CMP EDX, [ECX-0x6ec76d84]}
.text ntkrnlpa.exe!KeRemoveQueueEx + 124F 830D2F44 4 Bytes [AE, 92, 38, 91]
.text ...
PAGE ntkrnlpa.exe!ZwAlpcDeletePortSection + 1332 8325F428 7 Bytes JMP 9174B880

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe[932] ntdll.dll!KiUserApcDispatcher 778A6F58 5 Bytes JMP 00414130 C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (RapportMgmtService/Trusteer Ltd.)
.text C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe[932] WS2_32.dll!getaddrinfo 77A54296 5 Bytes JMP 71A50022
.text C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe[932] WS2_32.dll!gethostbyname 77A67673 5 Bytes JMP 71AE0022
.text C:\Program Files\Trusteer\Rapport\bin\RapportService.exe[3420] ntdll.dll!KiUserApcDispatcher 778A6F58 5 Bytes JMP 0043EA30 C:\Program Files\Trusteer\Rapport\bin\RapportService.exe (RapportService/Trusteer Ltd.)
.text C:\Program Files\Trusteer\Rapport\bin\RapportService.exe[3420] WS2_32.dll!getaddrinfo 77A54296 5 Bytes JMP 71A50022
.text C:\Program Files\Trusteer\Rapport\bin\RapportService.exe[3420] WS2_32.dll!gethostbyname 77A67673 5 Bytes JMP 71AE0022

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [0046F320] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExA] [0046F250] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [0046F3F0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [0046F320] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [0046F3F0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW] [0046F320] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [0046F3F0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExA] [0046F250] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [0046F320] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [0046F3F0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [0046F250] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [USER32.dll!GetScrollInfo] [00469300] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [USER32.dll!ShowScrollBar] [00469590] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [USER32.dll!SetScrollInfo] [00469430] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [USER32.dll!SetScrollPos] [004694A0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [USER32.dll!SetFocus] [0046D8B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ole32.dll [USER32.dll!SetFocus] [0046D8B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [0046F180] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryExW] [0046F320] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [0046F3F0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\WININET.dll [USER32.dll!SetFocus] [0046D8B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW] [0046F320] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExA] [0046F250] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA] [0046F0B0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)
IAT C:\Program Files\ooVoo\ooVoo.exe[3816] @ C:\windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [0046F3F0] C:\Program Files\ooVoo\ooVoo.exe (ooVoo/ooVoo LLC)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

Device \Driver\BTHUSB \Device\00000084 bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device \Driver\BTHUSB \Device\00000086 bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device \Driver\ACPI_HAL \Device\0000005b halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Par ameters\Keys\002269ec2d88
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Par ameters\Keys\f07bcbf86622
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Paramet ers\Keys\002269ec2d88 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Paramet ers\Keys\f07bcbf86622 (not active ControlSet)

---- EOF - GMER 1.0.15 ----

aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
Run date: 2011-07-02 15:10:06
-----------------------------
15:10:06.561 OS Version: Windows 6.1.7601 Service Pack 1
15:10:06.561 Number of processors: 2 586 0x170A
15:10:06.561 ComputerName: NICK-PC UserName: Nick
15:10:07.404 Initialize success
15:10:37.250 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
15:10:37.250 Disk 0 Vendor: HITACHI_ PB3Z Size: 305245MB BusType: 3
15:10:37.312 Disk 0 MBR read successfully
15:10:37.312 Disk 0 MBR scan
15:10:37.312 Disk 0 Windows 7 default MBR code
15:10:37.328 Disk 0 scanning sectors +625142448
15:10:37.718 Disk 0 scanning C:\windows\system32\drivers
15:10:48.669 Service scanning
15:10:49.714 Disk 0 trace - called modules:
15:10:49.746 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll
15:10:49.746 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x872a07c8]
15:10:49.761 3 CLASSPNP.SYS[8be1559e] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x8646a028]
15:10:49.761 Scan finished successfully
15:11:17.841 Disk 0 MBR has been saved successfully to "C:\Users\Nick\Desktop\MBR.dat"
15:11:17.841 The log file has been saved successfully to "C:\Users\Nick\Desktop\aswMBR.txt"



.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.7601.17514
Run by Nick at 15:13:23 on 2011-07-02
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.3033.1668 [GMT 1:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe
C:\windows\system32\conhost.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
C:\windows\System32\IgrsSvcs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Secunia\PSI\PSIA.exe
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\USB Camera2\VM332_STI.EXE
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Lenovo\VeriFace\PManage.exe
C:\Program Files\Conexant\SAII\SmartAudio.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\ooVoo\ooVoo.exe
C:\Program Files\TouchFreeze\TouchFreeze.exe
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\windows\Microsoft.Net\Framework\v3.0\WPF\Presen tationFontCache.exe
C:\windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Nero\Update\NASvc.exe
C:\windows\system32\svchost.exe -k SDRSVC
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\StikyNot.exe
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\windows\system32\Macromed\Flash\FlashUtil10t_Ac tiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\DllHost.exe
C:\windows\system32\DllHost.exe
C:\windows\system32\conhost.exe
C:\windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.co.uk/
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\6.3.2322.0\npwinext.dll
BHO: Nero Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre1.6.0_20\bin\jp2ssv.dll
TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
TB: @c:\program files\msn toolbar\platform\6.3.2322.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\6.3.2322.0\npwinext.dll
TB: Nero Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
uRun: [ooVoo.exe] c:\program files\oovoo\ooVoo.exe /minimized
uRun: [TouchFreeze] c:\program files\touchfreeze\TouchFreeze.exe
uRun: [RESTART_STICKY_NOTES] c:\windows\system32\StikyNot.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SmartAudio] c:\program files\conexant\saii\SAIICpl.exe /t
mRun: [332BigDog] c:\program files\usb camera2\VM332_STI.EXE
mRun: [VeriFaceManager] c:\program files\lenovo\veriface\PManage.exe
mRun: [UpdateP2GShortCut] "c:\program files\lenovo\power2go\muitransfer\muistartmenu.exe " "c:\program files\lenovo\power2go" updatewithcreateonce "software\cyberlink\power2go\5.0"
mRun: [EnergyUtility] c:\program files\lenovo\energy management\utility.exe
mRun: [Energy Management] c:\program files\lenovo\energy management\Energy Management.exe
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [NWEReboot]
dRunOnce: [WLStart] "c:\program files\windows live\installer\wlstart.exe" /nosearch /nohomepage
StartupFolder: c:\users\nick\appdata\roaming\micros~1\windows\sta rtm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\sta rtup\blueto~1.lnk - c:\program files\lenovo\bluetooth software\BTTray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\sta rtup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Send image to &Bluetooth Device... - c:\program files\lenovo\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\lenovo\bluetooth software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\lenovo\bluetooth software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
Trusted Zone: secunia.om
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{14D602EB-8868-4EA4-9E77-BC880202ACF4} : DhcpNameServer = 192.168.0.1
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
Notify: igfxcui - igfxdev.dll
.
============= SERVICES / DRIVERS ===============
.
R0 RapportKELL;RapportKELL;c:\windows\system32\driver s\RapportKELL.sys [2011-4-28 53816]
R1 funfrm;funfrm;c:\windows\system32\drivers\funfrm.s ys [2010-8-24 54800]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-24 165264]
R1 MpKsl6b9c1e95;MpKsl6b9c1e95;c:\programdata\microso ft\microsoft antimalware\definition updates\{7ba53b06-a192-414d-a782-4ec1302805ef}\MpKsl6b9c1e95.sys [2011-7-2 28752]
R1 RapportCerberus_26762;RapportCerberus_26762;c:\pro gramdata\trusteer\rapport\store\exts\rapportcerber us\26762\RapportCerberus_26762.sys [2011-6-13 57144]
R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2011-4-28 66360]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2011-4-28 158904]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 cvhsvc;Client Virtualization Handler;c:\program files\common files\microsoft shared\virtualization handler\CVHSVC.EXE [2010-2-28 821664]
R2 IGRS;IGRS;c:\program files\lenovo\readycomm\common\IGRS.exe [2009-7-14 38152]
R2 NAUpdate;Nero Update;c:\program files\nero\update\NASvc.exe [2010-5-4 503080]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2011-4-28 870200]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\w indows\system32\igrssvcs.exe -k igrssvcs --> c:\windows\system32\IgrsSvcs.exe -k IgrsSvcs [?]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-1-10 993848]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-1-10 399416]
R2 sftlist;Application Virtualization Client;c:\program files\microsoft application virtualization client\sftlist.exe [2010-4-24 483688]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\drivers\AcpiVpc.sys [2010-1-20 23136]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-5-31 260648]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-4-14 45736]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2010-8-24 29472]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2010-8-24 122368]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2010-10-24 43392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\antimalware\NisSrv.exe [2010-11-11 206360]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
R3 Sftfs;Sftfs;c:\windows\system32\drivers\Sftfslh.sy s [2010-4-24 550760]
R3 Sftplay;Sftplay;c:\windows\system32\drivers\Sftpla ylh.sys [2010-4-24 195944]
R3 Sftredir;Sftredir;c:\windows\system32\drivers\Sftr edirlh.sys [2010-4-24 21864]
R3 Sftvol;Sftvol;c:\windows\system32\drivers\Sftvollh .sys [2010-4-24 19304]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\microsoft application virtualization client\sftvsa.exe [2010-4-24 209768]
R3 vm332avs;Lenovo Camera2;c:\windows\system32\drivers\vm332avs.sys [2010-8-24 198000]
R3 wdmirror;wdmirror;c:\windows\system32\drivers\WDMi rror.sys [2010-8-24 11792]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\ v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 Bridge0;Bridge0;c:\windows\system32\drivers\wdbrid ge.sys [2010-8-24 63240]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\k57nd60x.sys [2009-7-13 229888]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\lenovo\readycomm\AppSvc.exe [2010-8-24 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\lenovo\readycomm\ConnSvc.exe [2010-8-24 579400]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EX E [2010-1-9 4640000]
S3 PS_MDP;ReadyComm Presentation Space Helper Service;c:\windows\system32\igrssvcs.exe -k igrssvcs --> c:\windows\system32\IgrsSvcs.exe -k IgrsSvcs [?]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUs bFlt.sys [2011-3-2 52224]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-12-29 1343400]
S3 wsvd;wsvd;c:\windows\system32\drivers\wsvd.sys [2009-7-21 81704]
.
=============== Created Last 30 ================
.
2011-07-02 14:07:41 28752 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{7ba53b06-a192-414d-a782-4ec1302805ef}\MpKsl6b9c1e95.sys
2011-07-02 14:07:37 7074640 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{7ba53b06-a192-414d-a782-4ec1302805ef}\mpengine.dll
2011-07-02 14:07:27 439632 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a191a652-cfec-6e68-b016-e0a916afbc26}\GapaEngine.dll
2011-07-02 13:16:21 439632 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{46bc4fc2-464c-494f-0dca-49c8288cb737}\GapaEngine.dll
2011-06-30 17:53:31 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-30 17:53:22 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-06-30 17:53:22 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-06-30 17:53:21 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-06-30 17:53:20 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-06-30 17:53:20 337408 ----a-w- c:\windows\system32\mssph.dll
2011-06-30 17:53:20 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-06-30 17:53:19 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-06-30 17:53:19 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-06-30 17:53:18 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-06-15 12:26:26 981504 ----a-w- c:\windows\system32\wininet.dll
2011-06-15 12:26:25 189952 ----a-w- c:\program files\internet explorer\sqmapi.dll
2011-06-15 12:26:24 163328 ----a-w- c:\program files\internet explorer\ieproxy.dll
2011-06-15 12:26:23 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-06-15 12:24:53 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-15 12:24:52 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-15 12:24:51 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-15 12:24:49 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-15 12:24:49 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-15 12:24:49 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-15 12:24:48 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-15 12:24:12 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-15 12:24:12 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-15 12:24:12 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-15 12:23:47 759296 ----a-w- c:\program files\common files\microsoft shared\vgx\VGX.dll
2011-06-07 21:45:11 -------- d-----w- c:\program files\Paint Shop Pro
.
==================== Find3M ====================
.
2011-06-16 15:52:50 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-29 08:11:30 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 08:11:20 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-28 13:34:50 53816 ----a-w- c:\windows\system32\drivers\RapportKELL.sys
2011-04-22 19:14:16 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-09 06:02:25 3967872 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-04-09 06:02:25 3912576 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-09 0538 123904 ----a-w- c:\windows\system32\poqexec.exe
.
============= FINISH: 15:13:53.53 ===============



.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-23.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 29/12/2010 19:43:15
System Uptime: 02/07/2011 14:15:44 (1 hours ago)
.
Motherboard: LENOVO | | NITU1
Processor: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz | U2E1 | 2300/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 253 GiB total, 89.369 GiB free.
D: is FIXED (NTFS) - 30 GiB total, 29.456 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl2a365cf7
Device ID: ROOT\LEGACY_MPKSL2A365CF7\0000
Manufacturer:
Name: MpKsl2a365cf7
PNP Device ID: ROOT\LEGACY_MPKSL2A365CF7\0000
Service: MpKsl2a365cf7
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsla04759f1
Device ID: ROOT\LEGACY_MPKSLA04759F1\0000
Manufacturer:
Name: MpKsla04759f1
PNP Device ID: ROOT\LEGACY_MPKSLA04759F1\0000
Service: MpKsla04759f1
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl328d934e
Device ID: ROOT\LEGACY_MPKSL328D934E\0000
Manufacturer:
Name: MpKsl328d934e
PNP Device ID: ROOT\LEGACY_MPKSL328D934E\0000
Service: MpKsl328d934e
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKslec80c4fe
Device ID: ROOT\LEGACY_MPKSLEC80C4FE\0000
Manufacturer:
Name: MpKslec80c4fe
PNP Device ID: ROOT\LEGACY_MPKSLEC80C4FE\0000
Service: MpKslec80c4fe
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl860f39f5
Device ID: ROOT\LEGACY_MPKSL860F39F5\0000
Manufacturer:
Name: MpKsl860f39f5
PNP Device ID: ROOT\LEGACY_MPKSL860F39F5\0000
Service: MpKsl860f39f5
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl1e75e4f6
Device ID: ROOT\LEGACY_MPKSL1E75E4F6\0000
Manufacturer:
Name: MpKsl1e75e4f6
PNP Device ID: ROOT\LEGACY_MPKSL1E75E4F6\0000
Service: MpKsl1e75e4f6
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl8bab4b23
Device ID: ROOT\LEGACY_MPKSL8BAB4B23\0000
Manufacturer:
Name: MpKsl8bab4b23
PNP Device ID: ROOT\LEGACY_MPKSL8BAB4B23\0000
Service: MpKsl8bab4b23
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsl3a9183a8
Device ID: ROOT\LEGACY_MPKSL3A9183A8\0000
Manufacturer:
Name: MpKsl3a9183a8
PNP Device ID: ROOT\LEGACY_MPKSL3A9183A8\0000
Service: MpKsl3a9183a8
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKsld7923d7d
Device ID: ROOT\LEGACY_MPKSLD7923D7D\0000
Manufacturer:
Name: MpKsld7923d7d
PNP Device ID: ROOT\LEGACY_MPKSLD7923D7D\0000
Service: MpKsld7923d7d
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: MpKslc3ee86d8
Device ID: ROOT\LEGACY_MPKSLC3EE86D8\0000
Manufacturer:
Name: MpKslc3ee86d8
PNP Device ID: ROOT\LEGACY_MPKSLC3EE86D8\0000
Service: MpKslc3ee86d8
.
==== System Restore Points ===================
.
RP83: 17/06/2011 14:10:42 - Scheduled Checkpoint
RP84: 18/06/2011 19:33:49 - Windows Update
RP85: 22/06/2011 01:00:10 - Windows Update
RP86: 25/06/2011 01:13:29 - Windows Update
RP87: 28/06/2011 14:26:56 - Windows Update
RP88: 29/06/2011 18:11:53 - Windows Update
RP89: 30/06/2011 18:46:56 - Restore Operation
RP90: 30/06/2011 18:54:47 - Windows Update
RP91: 30/06/2011 18:59:29 - Windows Update
.
==== Installed Programs ======================
.
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
ALPS Touch Pad Driver
Ask Toolbar
Bing Bar
Bing Bar Platform
Broadcom 802.11 Wireless Driver
Broadcom Gigabit Integrated Controller
Conexant HD Audio
DVD Flick 1.3.0.7
EasyCapture
Energy Management
Foxit Reader
ImgBurn
Intel(R) Graphics Media Accelerator Driver
Intel(R) TV Wizard
Intel® Matrix Storage Manager
Java Auto Updater
Java(TM) 6 Update 20
Junk Mail filter update
Lenovo Bluetooth with Enhanced Data Rate Software
Lenovo EasyCamera
Lenovo OneKey Recovery
Lenovo ReadyComm 5
Lenovo ReadyComm 5.0 Service
Malwarebytes' Anti-Malware version 1.51.0.1200
Microsoft .NET Framework 4 Client Profile
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office 2010
Microsoft Office Click-to-Run 2010
Microsoft Office Starter 2010 - English
Microsoft Search Enhancement Pack
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
MSVCRT
MSXML 4.0 SP3 Parser
Nero BurnLite 10
Nero Control Center 10
Nero ControlCenter 10 Help (CHM)
Nero Core Components 10
Nero Update
ooVoo
Paint Shop Pro 4.15 SE
PC-Doctor for Windows
Power2Go
Rapport
Realtek USB 2.0 Card Reader
Secunia PSI (2.0.0.3001)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
TouchFreeze
VeriFace
Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000)
Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
WinRAR archiver
WOT for Internet Explorer
.
==== Event Viewer Messages From Past Week ========
.
30/06/2011 19:00:48, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Internet Explorer 9 for Windows 7.
30/06/2011 18:57:36, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
30/06/2011 18:55:47, Error: Service Control Manager [7031] - The Microsoft Antimalware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.
30/06/2011 18:53:15, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.760.0).
30/06/2011 18:51:45, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.760.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
30/06/2011 18:51:39, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
30/06/2011 18:51:39, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
30/06/2011 18:40:41, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.760.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
30/06/2011 18:40:35, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
30/06/2011 18:40:35, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
30/06/2011 18:39:42, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
30/06/2011 0752, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.739.0).
30/06/2011 0747, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.739.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
30/06/2011 0743, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
30/06/2011 0743, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
29/06/2011 23:55:48, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.713.0).
29/06/2011 23:55:23, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.713.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
29/06/2011 23:55:15, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
29/06/2011 23:55:15, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
29/06/2011 23:54:07, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
29/06/2011 09:26:24, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
29/06/2011 09:08:55, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.656.0).
29/06/2011 09:08:50, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.656.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
29/06/2011 09:08:45, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
29/06/2011 09:08:45, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
29/06/2011 00:00:14, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D3DCB472-7261-43CE-924B-0704BD730D5F} and APPID {D3DCB472-7261-43CE-924B-0704BD730D5F} to the user Nick-PC\Nick SID (S-1-5-21-1647757156-3214455835-2215275708-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
29/06/2011 00:00:14, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {145B4335-FE2A-4927-A040-7C35AD3180EF} and APPID {145B4335-FE2A-4927-A040-7C35AD3180EF} to the user Nick-PC\Nick SID (S-1-5-21-1647757156-3214455835-2215275708-1000) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
28/06/2011 23:52:13, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.624.0).
28/06/2011 23:52:08, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.624.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
28/06/2011 23:52:03, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
28/06/2011 23:52:03, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
28/06/2011 14:28:10, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.553.0).
28/06/2011 14:27:51, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.553.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
28/06/2011 14:27:42, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
28/06/2011 14:27:42, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
28/06/2011 14:25:33, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
27/06/2011 23:11:03, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.551.0).
27/06/2011 23:10:58, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.551.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
27/06/2011 23:10:54, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
27/06/2011 23:10:54, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
27/06/2011 02:36:19, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
27/06/2011 02:35:20, Error: Service Control Manager [7038] - The MsMpSvc service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
27/06/2011 02:35:20, Error: Service Control Manager [7000] - The Microsoft Antimalware Service service failed to start due to the following error: The service did not start due to a logon failure.
27/06/2011 00:51:34, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
27/06/2011 00:15:28, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.476.0).
27/06/2011 00:15:23, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.476.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
27/06/2011 00:15:20, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
27/06/2011 00:15:20, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
26/06/2011 15:26:48, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.463.0).
26/06/2011 15:26:43, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.463.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
26/06/2011 15:26:40, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
26/06/2011 15:26:40, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
26/06/2011 02:39:12, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
26/06/2011 01:25:23, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.442.0).
26/06/2011 01:25:18, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.442.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
26/06/2011 01:25:15, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
26/06/2011 01:25:15, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
25/06/2011 20:51:36, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.432.0).
25/06/2011 20:51:31, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.432.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
25/06/2011 20:51:28, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
25/06/2011 20:51:28, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
25/06/2011 11:30:36, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.412.0).
25/06/2011 11:30:31, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.412.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
25/06/2011 11:30:27, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
25/06/2011 11:30:27, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
25/06/2011 02:14:15, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
25/06/2011 01:14:22, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.389.0).
25/06/2011 01:14:17, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.389.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
25/06/2011 01:14:13, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
25/06/2011 01:14:13, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
02/07/2011 14:16:31, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
02/07/2011 13:31:11, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.907.0).
02/07/2011 13:31:06, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.907.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
02/07/2011 13:31:02, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
02/07/2011 13:31:02, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
01/07/2011 15:04:40, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.860.0).
01/07/2011 15:04:35, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.860.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
01/07/2011 15:04:32, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
01/07/2011 15:04:32, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
01/07/2011 09:07:07, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.834.0).
01/07/2011 09:07:02, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.834.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
01/07/2011 09:06:59, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
01/07/2011 09:06:59, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
01/07/2011 00:34:59, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.107.798.0).
01/07/2011 00:34:54, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.107.798.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: Microsoft Corporation: Software, Smartphones, Online, Games, Cloud Computing, IT Business Technology, Downloads Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7000.0 Error code: 0x80070643 Error description: Fatal error during installation.
01/07/2011 00:34:50, Error: Microsoft Antimalware [2003] - Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: Previous Engine Version: 2.0.5854.0 Engine Type: Network Inspection System User: NT AUTHORITY\SYSTEM Error Code: 0x80092003 Error description: An error occurred while reading or writing to a file.
01/07/2011 00:34:50, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 9.134.0.0 Update Source: User Update Stage: Install Source Path: Signature Type: Network Inspection System Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 2.0.5854.0 Error code: 0x80092003 Error description: An error occurred while reading or writing to a file.
.
==== End Of File ===========================


Thanks for your help!

Welcome aboard

Please, observe following rules:

• Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
• If you're stuck, or you're not sure about certain step, always ask before doing anything else.
• Please refrain from running tools or applying updates other than those I suggest.
• Never run more than one scan at a time.
• Keep updating me regarding your computer behavior, good, or bad.
• The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
• If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
• I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

================================================== =================

So far, I don't see much....

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

1. Please, never rename Combofix unless instructed.
2. Close any open browsers.
3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
   
   • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
   • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
   
   NOTE1. If Combofix asks you to install Recovery Console, please allow it.
   NOTE 2. If Combofix asks you to update the program, always do so.
   
   • Close any open browsers.
   • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
   • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
   • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
4. Double click on combofix.exe & follow the prompts.
5. When finished, it will produce a report for you.
6. Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG users: ComboFix will not run until AVG is uninstalled as a protective measure against the anti-virus. This is because AVG "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG first.
Use AppRemover to uninstall it: Uninstall & Remove McAfee, Symantec, Norton, AVG, Avast & More Antivirus and Security Applications and Programs
We can reinstall it when we're done with CF.
**Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.



Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try one of the following:

1. Run Combofix from Safe Mode.

2. Delete Combofix file, download fresh one, but rename combofix.exe to yourname.exe BEFORE saving it to your desktop.
Do NOT run it yet.

Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

There are 4 different versions. If one of them won't run then download and try to run the other one.

Vista and Win7 users need to right click Rkill and choose Run as Administrator

You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

Rkill.com
Rkill.scr
Rkill.exe

• Double-click on the Rkill desktop icon to run the tool.
• If using Vista or Windows 7 right-click on it and choose Run As Administrator.
• A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
• If not, delete the file, then download and use the one provided in Link 2.
• If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
• Do not reboot until instructed.
• If the tool does not run from any of the links provided, please let me know.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

If normal mode still doesn't work, run BOTH tools from safe mode.

In case #2, please post BOTH logs, rKill and Combofix.

DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!

Hi Broni,

Here are the logs. When I ran the RKill it completed on the third option. It did not offer me a prompt to run anything else. sorry if I messed up but there was nothing there...

ComboFix

ComboFix 11-07-02.02 - Nick 02/07/2011 21:31:01.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.3033.1736 [GMT 1:00]
Running from: c:\users\Nick\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2011-06-02 to 2011-07-02 )))))))))))))))))))))))))))))))
.
.
2011-07-02 20:35 . 2011-07-02 20:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-02 14:24 . 2011-07-02 14:24 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{450878FD-51F5-4128-9B72-2E256ECDFC7E}\MpKslf5cc9d3c.sys
2011-07-02 14:24 . 2011-06-07 15:55 7074640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{450878FD-51F5-4128-9B72-2E256ECDFC7E}\mpengine.dll
2011-07-02 14:07 . 2011-02-28 02:59 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A191A652-CFEC-6E68-B016-E0A916AFBC26}\GapaEngine.dll
2011-07-02 13:16 . 2011-02-28 02:59 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{46BC4FC2-464C-494F-0DCA-49C8288CB737}\GapaEngine.dll
2011-06-30 17:53 . 2011-05-24 10:44 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2011-06-30 17:53 . 2011-05-04 04:34 1549312 ----a-w- c:\windows\system32\tquery.dll
2011-06-30 17:53 . 2011-05-04 04:32 1401344 ----a-w- c:\windows\system32\mssrch.dll
2011-06-30 17:53 . 2011-05-04 04:28 427520 ----a-w- c:\windows\system32\SearchIndexer.exe
2011-06-30 17:53 . 2011-05-04 04:32 666624 ----a-w- c:\windows\system32\mssvp.dll
2011-06-30 17:53 . 2011-05-04 04:32 337408 ----a-w- c:\windows\system32\mssph.dll
2011-06-30 17:53 . 2011-05-04 04:28 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe
2011-06-30 17:53 . 2011-05-04 04:32 197120 ----a-w- c:\windows\system32\mssphtb.dll
2011-06-30 17:53 . 2011-05-04 04:28 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe
2011-06-30 17:53 . 2011-05-04 04:32 59392 ----a-w- c:\windows\system32\msscntrs.dll
2011-06-15 12:26 . 2011-04-22 19:10 981504 ----a-w- c:\windows\system32\wininet.dll
2011-06-15 12:26 . 2011-04-29 04:57 189952 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2011-06-15 12:26 . 2011-04-22 19:09 163328 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2011-06-15 12:26 . 2011-05-28 02:53 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-06-15 12:24 . 2011-05-03 04:30 741376 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-15 12:24 . 2011-04-25 04:31 1290624 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-15 12:24 . 2011-04-25 02:18 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-15 12:24 . 2011-04-29 02:46 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-15 12:24 . 2011-04-29 02:46 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-15 12:24 . 2011-04-29 02:46 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-15 12:24 . 2011-02-25 05:34 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-15 12:24 . 2011-04-27 02:17 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-15 12:24 . 2011-04-27 02:17 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-15 12:24 . 2011-04-27 02:17 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-15 12:23 . 2011-04-29 04:57 759296 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2011-06-07 21:45 . 2011-06-07 21:45 -------- d-----w- c:\program files\Paint Shop Pro
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2011-06-16 15:52 . 2011-05-15 00:15 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-07 15:55 . 2011-02-28 03:00 7074640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-05-29 08:11 . 2010-12-29 23:05 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-29 08:11 . 2010-12-29 23:05 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-04-28 13:34 . 2011-04-28 13:34 53816 ----a-w- c:\windows\system32\drivers\RapportKELL.sys
2011-04-22 19:14 . 2011-05-24 20:41 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-09 06:02 . 2011-05-12 02:22 3967872 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-04-09 06:02 . 2011-05-12 02:22 3912576 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-09 05:56 . 2011-05-12 11:04 123904 ----a-w- c:\windows\system32\poqexec.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-21 12:17 1233288 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-21 1233288]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-21 1233288]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\explorer\shelliconoverlayidentifiers\Ve riFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2010-08-24 09:37 1410312 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ooVoo.exe"="c:\program files\ooVoo\ooVoo.exe" [2010-02-02 19812536]
"TouchFreeze"="c:\program files\TouchFreeze\TouchFreeze.exe" [2005-04-29 45056]
"RESTART_STICKY_NOTES"="c:\windows\system32\StikyN ot.exe" [2009-07-14 354304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-18 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-18 174104]
"Persistence"="c:\windows\system32\igfxpers.ex e" [2009-09-18 150552]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768]
"332BigDog"="c:\program files\USB Camera2\VM332_STI.EXE" [2010-01-19 536576]
"VeriFaceManager"="c:\program files\Lenovo\VeriFace\PManage.exe" [2010-08-24 3122440]
"UpdateP2GShortCut"="c:\program files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe " [2008-12-03 218408]
"EnergyUtility"="c:\program files\Lenovo\Energy Management\utility.exe" [2009-09-29 4114288]
"Energy Management"="c:\program files\Lenovo\Energy Management\Energy Management.exe" [2009-09-29 5064560]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce]
"WLStart"="c:\program files\Windows Live\Installer\wlstart.exe" [2009-07-26 768336]
.
c:\users\Nick\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2009-8-11 795936]
Secunia PSI Tray.lnk - c:\program files\Secunia\PSI\psi_tray.exe [2011-1-10 291896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R1 MpKsl1e75e4f6;MpKsl1e75e4f6;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{04D7D5FA-4BA1-4D93-B602-97D557AF5B1D}\MpKsl1e75e4f6.sys [x]
R1 MpKsl2a365cf7;MpKsl2a365cf7;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{5A1281DF-8425-402C-A910-ED89577369DE}\MpKsl2a365cf7.sys [x]
R1 MpKsl328d934e;MpKsl328d934e;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{067081E9-FA46-46E3-BBA7-B349D09C84B6}\MpKsl328d934e.sys [x]
R1 MpKsl3a9183a8;MpKsl3a9183a8;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{97F8DA7E-0D05-41E7-A6BD-8DBE7C682B71}\MpKsl3a9183a8.sys [x]
R1 MpKsl860f39f5;MpKsl860f39f5;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{E960BD3B-70DC-4751-9A56-C4FA20658065}\MpKsl860f39f5.sys [x]
R1 MpKsl8bab4b23;MpKsl8bab4b23;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{067081E9-FA46-46E3-BBA7-B349D09C84B6}\MpKsl8bab4b23.sys [x]
R1 MpKsla04759f1;MpKsla04759f1;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{5C65B4E4-8B8F-44BB-91B3-3F8D56342F15}\MpKsla04759f1.sys [x]
R1 MpKslc3ee86d8;MpKslc3ee86d8;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{CAF77608-BCA1-4007-85B0-E36328269FCA}\MpKslc3ee86d8.sys [x]
R1 MpKsld7923d7d;MpKsld7923d7d;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{2FC595C6-FBA7-4444-A57C-3726A42DAB43}\MpKsld7923d7d.sys [x]
R1 MpKslec80c4fe;MpKslec80c4fe;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{D22F85D5-AEC0-499D-8CC2-DD7892896475}\MpKslec80c4fe.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\ v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 Bridge0;Bridge0;c:\windows\system32\drivers\WDBrid ge.sys [2009-07-28 63240]
R3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888]
R3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
R3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 54144]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EX E [2010-01-09 4640000]
R3 PS_MDP;ReadyComm Presentation Space Helper Service;c:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsus bflt.sys [2010-11-20 52224]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-29 1343400]
R3 WinRing0_1_2_0;WinRing0_1_2_0;d:\test\ECECECEC\Win Ring0.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]
S0 RapportKELL;RapportKELL;c:\windows\System32\Driver s\RapportKELL.sys [2011-04-28 53816]
S1 funfrm;funfrm; [x]
S1 MpKslf5cc9d3c;MpKslf5cc9d3c;c:\programdata\Microso ft\Microsoft Antimalware\Definition Updates\{450878FD-51F5-4128-9B72-2E256ECDFC7E}\MpKslf5cc9d3c.sys [2011-07-02 28752]
S1 RapportCerberus_26762;RapportCerberus_26762;c:\pro gramdata\Trusteer\Rapport\store\exts\RapportCerber us\26762\RapportCerberus_26762.sys [2011-06-13 57144]
S1 RapportEI;RapportEI;c:\program files\Trusteer\Rapport\bin\RapportEI.sys [2011-04-28 66360]
S1 RapportPG;RapportPG;c:\program files\Trusteer\Rapport\bin\RapportPG.sys [2011-04-28 158904]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 IGRS;IGRS;c:\program files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 RapportMgmtService;Rapport Management Service;c:\program files\Trusteer\Rapport\bin\RapportMgmtService.exe [2011-04-28 870200]
S2 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\w indows\System32\IgrsSvcs.exe [2009-07-14 20992]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\Secunia\PSI\PSIA.exe [2011-01-10 993848]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files\Secunia\PSI\sua.exe [2011-01-10 399416]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [2010-01-20 23136]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-04-14 45736]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-05-25 122368]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 43392]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2010-09-01 15544]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sy s [2010-04-24 550760]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftpla ylh.sys [2010-04-24 195944]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftr edirlh.sys [2010-04-24 21864]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh .sys [2010-04-24 19304]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768]
S3 vm332avs;Lenovo Camera2;c:\windows\system32\Drivers\vm332avs.sys [2010-04-20 198000]
S3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMi rror.sys [2009-07-16 11792]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - ASWMBR
*NewlyCreated* - KXLDQPOC
*NewlyCreated* - MPKSL25F93A8D
*NewlyCreated* - MPKSLF5CC9D3C
*Deregistered* - aswMBR
*Deregistered* - kxldqpoc
*Deregistered* - MpKsl25f93a8d
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc Mcx2Svc
IgrsSvcs REG_MULTI_SZ ReadyComm.DirectRouter PS_MDP
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/
IE: Send image to &Bluetooth Device... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
Trusted Zone: secunia.om
TCP: DhcpNameServer = 192.168.0.1
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-NWEReboot - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1647757156-3214455835-2215275708-1000\Software\Microsoft\Windows\CurrentVersion\Exp lorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1647757156-3214455835-2215275708-1000\Software\Microsoft\Windows\CurrentVersion\Exp lorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PC W\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(1404)
c:\windows\system32\IcnOvrly.dll
c:\program files\Lenovo\Bluetooth Software\btmmhook.dll
.
Completion time: 2011-07-02 21:36:24
ComboFix-quarantined-files.txt 2011-07-02 20:36
.
Pre-Run: 95,672,061,952 bytes free
Post-Run: 95,582,199,808 bytes free
.
- - End Of File - - 84C7BFAEB94C65D13FC36FACB5653845


RKill

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 02/07/2011 at 2130.
Operating System: Windows 7 Home Premium


Processes terminated by Rkill or while it was running:



Rkill completed on 02/07/2011 at 2137.

Thanks

It's clean as well.

In this forum, we make sure, your computer is free of malware and your computer is clean
Because the access to malware forum is very limited, your best option is to create new topic about your current issue, at Windows section.
You'll get more attention.

Thanks, for your help Broni, sorry to have bothered you, I honestly thought I had a problem.

Its a real relief to know its clean.

I will post in the other forum about my updates issue as you suggest.

Once agian thanks!

sorry to have bothered you, I honestly thought I had a problem

No problem at all. That's why we're here