Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Several Spyware Issues

Started by smuckerzs , Feb 09 2012 02:06 PM

Please log in to reply

#16
RKinner

Posted 13 February 2012 - 10:51 AM

Malware Expert

Expert
24,625 posts

Yes.

You might have better luck in Safe Mode with Networking

(Reboot and when you see the maker's logo, hear a beep or it talks about F8, start tapping the F8 key slowly. Keep tapping until the Safe Mode Menu appears and choose Safe Mode with Networking. Login with your usual login.)

Sometimes it works if you

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after the line:

msconfig

(Click on Services tab and click on the box to hide Microsoft Services then uncheck
everything that remains. Go to Startup tab and uncheck everything. OK and
reboot.

Try Combofix again.

#17
smuckerzs

Posted 13 February 2012 - 06:05 PM

Member

Topic Starter
Member
26 posts

OK, finally got the combofix to run, yay :

ComboFix 12-02-13.01 - justin 02/13/2012 16:07:33.3.8 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.6134.4449 [GMT -5:00]
Running from: c:\users\justin\Desktop\ComboFix.exe
AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\TelevisionFanaticEI
c:\programdata\SPL165D.tmp
c:\programdata\SPL18DC.tmp
c:\programdata\SPL1AA1.tmp
c:\programdata\SPL6DB0.tmp
c:\programdata\SPL6E8A.tmp
c:\programdata\SPL6ED8.tmp
c:\programdata\SPL7020.tmp
c:\programdata\SPL7399.tmp
c:\programdata\SPL73D7.tmp
c:\programdata\SPL7992.tmp
c:\programdata\SPL7ABA.tmp
c:\programdata\SPL7B75.tmp
c:\programdata\SPL7CEC.tmp
c:\programdata\SPL80B3.tmp
c:\programdata\SPL8130.tmp
c:\programdata\SPL82B6.tmp
c:\programdata\SPL8381.tmp
c:\programdata\SPL88AF.tmp
c:\programdata\SPL8CF3.tmp
c:\programdata\SPL8E88.tmp
c:\programdata\SPL8F24.tmp
c:\programdata\SPLA89D.tmp
c:\users\justin\AppData\Roaming\.#
c:\users\justin\g2ax_customer_downloadhelper_win32_x86.exe
c:\users\justin\GoToAssistDownloadHelper.exe
c:\windows\Downloaded Program Files\f3initialsetup1.0.1.1.inf
c:\windows\SysWow64\spool\prtprocs\w32x86\ppbiPr.dll
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_NPF
.
.
((((((((((((((((((((((((( Files Created from 2012-01-13 to 2012-02-13 )))))))))))))))))))))))))))))))
.
.
2012-02-13 22:09 . 2012-02-13 23:40 -------- d-----w- c:\users\justin\AppData\Local\temp
2012-02-10 15:06 . 2012-02-10 15:06 -------- d-----w- C:\_OTL
2012-02-10 03:36 . 2012-02-10 15:17 -------- d-----w- c:\program files (x86)\SpywareBlaster
2012-02-07 23:02 . 2009-08-20 04:50 24416 ----a-r- c:\windows\system32\AdobePDFUI.dll
2012-02-06 20:28 . 2012-02-07 08:17 -------- d-----w- c:\windows\system32\drivers\N360x64\0502000.00D
2012-02-06 20:22 . 2011-11-17 06:53 515968 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-02-06 20:22 . 2011-11-16 16:42 347136 ----a-w- c:\windows\system32\schannel.dll
2012-02-06 20:22 . 2011-11-16 16:41 1689600 ----a-w- c:\windows\system32\lsasrv.dll
2012-02-06 20:22 . 2011-11-16 16:23 278528 ----a-w- c:\windows\SysWow64\schannel.dll
2012-02-06 20:22 . 2011-11-16 16:43 442368 ----a-w- c:\windows\system32\winhttp.dll
2012-02-06 20:22 . 2011-11-16 16:42 94720 ----a-w- c:\windows\system32\secur32.dll
2012-02-06 20:22 . 2011-11-16 16:24 77312 ----a-w- c:\windows\SysWow64\secur32.dll
2012-02-06 20:22 . 2011-11-16 16:23 377344 ----a-w- c:\windows\SysWow64\winhttp.dll
2012-02-06 20:22 . 2011-11-16 14:34 11264 ----a-w- c:\windows\system32\lsass.exe
2012-01-30 19:26 . 2012-01-31 04:05 -------- d-----w- c:\users\justin\AppData\Roaming\Masque
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-29 10:10 . 2009-10-02 22:37 279656 ------w- c:\windows\system32\MpSigStub.exe
2011-12-31 01:07 . 2011-09-30 21:19 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-25 16:25 . 2012-01-11 00:07 451072 ----a-w- c:\windows\system32\winsrv.dll
2011-11-23 13:57 . 2011-12-20 06:18 2764800 ----a-w- c:\windows\system32\win32k.sys
2011-11-18 20:55 . 2012-01-11 00:07 1585152 ----a-w- c:\windows\system32\ntdll.dll
2011-11-18 20:55 . 2012-01-11 00:07 1167984 ----a-w- c:\windows\SysWow64\ntdll.dll
2011-11-18 18:07 . 2012-01-11 00:07 76800 ----a-w- c:\windows\system32\packager.dll
2011-11-18 17:47 . 2012-01-11 00:07 66560 ----a-w- c:\windows\SysWow64\packager.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PaperPort PTD"="c:\program files (x86)\ScanSoft\PaperPort\pptd40nt.exe" [2004-04-14 57393]
"IndexSearch"="c:\program files (x86)\ScanSoft\PaperPort\IndexSearch.exe" [2004-04-14 40960]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2008-9-23 1295656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2010-02-23 288112]
S2 AERTFilters;Andrea RT Filters Service;c:\windows\system32\AERTSr64.exe [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-16 10:10]
.
2012-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-16 10:10]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dlcxmon.exe"="c:\program files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe" [2007-01-12 292336]
"DLCXCATS"="c:\windows\system32\spool\DRIVERS\x64\3\DLCXtime.dll" [2006-10-16 31744]
"RtHDVCpl"="RAVCpl64.exe" [2008-10-06 6475808]
"Bluetooth HCI Monitor"="HCIMNTR.DLL" [2006-12-07 56320]
"combofix"="c:\combofix\CF17624.3XE" [2008-01-21 363008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6090124
mStart Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: convergysworkathome.com\www
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
FF - ProfilePath - c:\users\justin\AppData\Roaming\Mozilla\Firefox\Profiles\5738a74f.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - My Web Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
.
------- File Associations -------
.
.txt=
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - c:\program files (x86)\Ask.com\GenericAskToolbar.dll
URLSearchHooks-{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - (no file)
WebBrowser-{A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - (no file)
HKLM-Run-Windows Defender - c:\program files (x86)\Windows Defender\MSASCui.exe
HKLM-Run-(Default) - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\5.2.0.13\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\5.2.0.13\diMaster.dll\" /prefetch:1"
--
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCCUJobMgr]
"ImagePath"="\"c:\program files (x86)\Norton PC Checkup\Engine\2.0.8.13\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files (x86)\Norton PC Checkup\Engine\2.0.8.13\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Dell\DellDock\DockLogin.exe
c:\windows\SysWOW64\brsvc01a.exe
c:\windows\SysWOW64\brss01a.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\programdata\SingleClick Systems\Advanced Networking Service\hnm_svc.exe
c:\program files (x86)\Norton 360\Engine\5.2.0.13\ccSvcHst.exe
c:\program files (x86)\Norton PC Checkup\Engine\2.0.8.13\ccSvcHst.exe
c:\program files (x86)\Viewpoint\Common\ViewpointService.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Norton PC Checkup\Engine\2.0.8.13\SymcPCCULaunchSvc.exe
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\Norton 360\Engine\5.2.0.13\ccSvcHst.exe
c:\program files (x86)\Norton PC Checkup\Engine\2.0.8.13\ccSvcHst.exe
.
**************************************************************************
.
Completion time: 2012-02-13 18:43:49 - machine was rebooted
ComboFix-quarantined-files.txt 2012-02-13 23:43
.
Pre-Run: 562,903,085,056 bytes free
Post-Run: 561,653,874,688 bytes free
.
- - End Of File - - 077B5862F7A520CFF6918BA6BAD05702

#18
RKinner

Posted 13 February 2012 - 06:31 PM

Malware Expert

Expert
24,625 posts

Log looks OK. What did you have to do to run Combofix?

Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application.

Reboot.

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then type (with an Enter after each line).

sfc  /scannow

(This will check your critical system files. If it asks for a CD and you don't have one or it doesn't like your CD just tell it to SKIP.)

1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning

Then use the 'Number of events' as follows:

1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.

Please post the Output log in your next reply then repeat but select Application.

Get Process Explorer

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator). Click once or twice on the CPU column header to sort things by CPU usage with the big hitters at the top. File, Save As, Save. Open the file Procexp.txt on your desktop and copy and paste the text to a reply.

Ron

#19
smuckerzs

Posted 13 February 2012 - 08:47 PM

Member

Topic Starter
Member
26 posts

OK here they are as requested

The command prompt says:
Found corrupt files but unable to fix. Details are included in the CBS logs. However access is denied when I try to open the log.

VEW Scan

Vino's Event Viewer v01c run on Windows Vista in English
Report run at 13/02/2012 9:25:08 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 14/02/2012 1:48:26 AM
Type: Error Category: 0
Event: 10016 Source: Microsoft-Windows-DistributedCOM
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Log: 'System' Date/Time: 14/02/2012 1:48:12 AM
Type: Error Category: 0
Event: 7026 Source: Service Control Manager
The following boot-start or system-start driver(s) failed to load: Beep

Log: 'System' Date/Time: 14/02/2012 1:48:12 AM
Type: Error Category: 0
Event: 7000 Source: Service Control Manager
The ULS VersaLaser Engraver Firmware Loader service failed to start due to the following error: The system cannot find the file specified.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Process PID CPU Private Bytes Working Set Description Company Name
AERTSr64.exe 2332 1,316 K 2,800 K Andrea filters APO access service (64-bit) Andrea Electronics Corporation
Ati2evxx.exe 980 3,892 K 6,600 K ATI External Event Utility EXE Module ATI Technologies Inc.
Ati2evxx.exe 1164 6,260 K 11,060 K ATI External Event Utility EXE Module ATI Technologies Inc.
audiodg.exe 612 19,744 K 23,616 K Windows Audio Device Graph Isolation Microsoft Corporation
brss01a.exe 1756 1,152 K 4,016 K brss01a.exe brother Industries Ltd
brsvc01a.exe 1532 1,336 K 3,948 K brsvc01a brother Industries Ltd
btwdins.exe 2648 2,720 K 5,664 K Bluetooth Support Server Broadcom Corporation.
ccSvcHst.exe 852 7,564 K 12,336 K Symantec Service Framework Symantec Corporation
ccsvchst.exe 236 15,968 K 10,240 K Symantec Service Framework Symantec Corporation
ccSvcHst.exe 3840 6,304 K 10,736 K Symantec Service Framework Symantec Corporation
cmd.exe 3436 2,488 K 3,136 K Windows Command Processor Microsoft Corporation
dlcxcoms.exe 2700 5,036 K 8,280 K Printer Communication System
dlcxmon.exe 2432 2,688 K 6,972 K Device Monitor
dllhost.exe 4524 2,064 K 5,744 K COM Surrogate Microsoft Corporation
DockLogin.exe 1132 1,532 K 4,808 K Dock Login Service Stardock Corporation
lsass.exe 712 5,332 K 2,344 K Local Security Authority Process Microsoft Corporation
lsm.exe 720 4,240 K 6,492 K Local Session Manager Service Microsoft Corporation
mDNSResponder.exe 2624 2,280 K 6,280 K Bonjour Service Apple Inc.
mobsync.exe 3644 5,736 K 10,716 K Microsoft Sync Center Microsoft Corporation
notepad.exe 3704 2,276 K 6,752 K Notepad Microsoft Corporation
pptd40nt.exe 2532 3,120 K 5,540 K PaperPort Print to Desktop for NT ScanSoft, Inc.
procexp.exe 1844 2,868 K 7,436 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
RAVCpl64.exe 2468 11,160 K 11,332 K HD Audio Control Panel Realtek Semiconductor
services.exe 696 4,748 K 9,628 K Services and Controller app Microsoft Corporation
SLsvc.exe 800 10,020 K 14,976 K Microsoft Software Licensing Service Microsoft Corporation
smss.exe 480 768 K 1,272 K Windows Session Manager Microsoft Corporation
svchost.exe 472 3,504 K 7,004 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1684 19,116 K 25,264 K Host Process for Windows Services Microsoft Corporation
svchost.exe 2636 3,280 K 5,024 K Host Process for Windows Services Microsoft Corporation
svchost.exe 2540 2,888 K 6,772 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1048 6,784 K 10,400 K Host Process for Windows Services Microsoft Corporation
svchost.exe 2460 2,004 K 3,752 K Host Process for Windows Services Microsoft Corporation
svchost.exe 3584 3,324 K 22,832 K Host Process for Windows Services Microsoft Corporation
svchost.exe 876 4,508 K 8,960 K Host Process for Windows Services Microsoft Corporation
svchost.exe 308 19,356 K 19,464 K Host Process for Windows Services Microsoft Corporation
svchost.exe 936 7,036 K 11,140 K Host Process for Windows Services Microsoft Corporation
SymcPCCULaunchSvc.exe 3972 4,004 K 7,308 K Norton PC Checkup Launcher Service Symantec Corporation
taskeng.exe 772 3,756 K 8,580 K Task Scheduler Engine Microsoft Corporation
taskeng.exe 2056 12,912 K 15,424 K Task Scheduler Engine Microsoft Corporation
ViewpointService.exe 1216 2,200 K 5,752 K ViewMgr Viewpoint Corporation
wininit.exe 616 2,376 K 5,724 K Windows Start-Up Application Microsoft Corporation
winlogon.exe 668 4,488 K 9,104 K Windows Logon Application Microsoft Corporation
WLIDSVC.EXE 3004 11,144 K 18,484 K Microsoft® Windows Live ID Service Microsoft Corp.
WLIDSVCM.EXE 1676 2,392 K 4,480 K Microsoft® Windows Live ID Service Monitor Microsoft Corp.
WmiPrvSE.exe 5056 4,196 K 7,988 K WMI Provider Host Microsoft Corporation
wmpnscfg.exe 3652 3,468 K 7,956 K Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation
WUDFHost.exe 872 4,700 K 7,376 K Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation
YahooAUService.exe 3132 4,356 K 8,248 K AutoUpater Service Module Yahoo! Inc.
Interrupts n/a < 0.01 0 K 0 K Hardware Interrupts and DPCs
spoolsv.exe 1660 < 0.01 12,576 K 19,788 K Spooler SubSystem App Microsoft Corporation
svchost.exe 400 < 0.01 35,092 K 47,088 K Host Process for Windows Services Microsoft Corporation
svchost.exe 340 < 0.01 197,124 K 204,056 K Host Process for Windows Services Microsoft Corporation
AppleMobileDeviceService.exe 2344 < 0.01 3,932 K 8,260 K MobileDeviceService Apple Inc.
csrss.exe 548 < 0.01 3,272 K 7,980 K Client Server Runtime Process Microsoft Corporation
wmpnetwk.exe 3724 < 0.01 7,984 K 14,224 K Windows Media Player Network Sharing Service Microsoft Corporation
SearchIndexer.exe 2464 < 0.01 54,860 K 42,108 K Microsoft Windows Search Indexer Microsoft Corporation
firefox.exe 3580 < 0.01 95,440 K 113,704 K Firefox Mozilla Corporation
svchost.exe 1348 < 0.01 23,412 K 23,940 K Host Process for Windows Services Microsoft Corporation
explorer.exe 1296 < 0.01 73,304 K 104,060 K Windows Explorer Microsoft Corporation
svchost.exe 1080 < 0.01 14,508 K 21,972 K Host Process for Windows Services Microsoft Corporation
csrss.exe 608 < 0.01 4,568 K 9,532 K Client Server Runtime Process Microsoft Corporation
ccsvchst.exe 2216 < 0.01 57,832 K 13,692 K Symantec Service Framework Symantec Corporation
System 4 < 0.01 0 K 41,336 K
hnm_svc.exe 2744 < 0.01 26,236 K 20,748 K Advanced Networking Service Dell Inc.
dwm.exe 1088 0.19 41,452 K 48,860 K Desktop Window Manager Microsoft Corporation
procexp64.exe 4620 0.38 26,696 K 40,412 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
System Idle Process 0 99.42 0 K 24 K

#20
RKinner

Posted 13 February 2012 - 11:00 PM

Malware Expert

Expert
24,625 posts

Vista almost always complains about something when you run SFC. If you want to see what it is you can:

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after each line:


cd  \windows\logs\cbs

copy  cbs.log  cbs.old

del  cbs.log

sfc  /scannow

findstr  /c:"[SR]"  cbs.log  >  junk.txt 

notepad  junk.txt

If you want you can
attach the file \windows\logs\cbs\junk.txt to your next reply.

Your event logs don't look too bad.

The ULS VersaLaser Engraver Firmware Loader service failed to start due to the following error: The system cannot find the file specified.

We didn't kill off the ULS VersaLaser Engraver Firmware Loader service.

Is it in the services menu?

Right click on Computer and select Manage (continue) then Services and Applications then Services. If you find it then right click on it and select Properties then change Startup Type: to Disabled then Apply.

The following boot-start or system-start driver(s) failed to load: Beep

I don't think beep exists in 64 bit systems so it's probably caused by some software that didn't get the word.

The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Not sure what this is but I don't think it's anything to do with malware.

Copy the next line:

reg query HKEY_CLASSES_ROOT\CLSID\{C97FCC79-E628-407D-AE68-A06AD6D8B4D1} /s > \junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line will appear. Hit Enter.

notepad  \junk.txt

How is it running now?

Ron
Copy and paste the text from notepad. Or attach it if it is really big.

#21
smuckerzs

Posted 14 February 2012 - 10:09 AM

Member

Topic Starter
Member
26 posts

Hey Ron,
Ok I have to tell you that on the 12, after some steps we did the PC began connecting to the internet fine. Not sure if it was due to the the steps or not, however it is back to timing out and unable to find the server lol. I dont understand whats going on. I thought it may have had something to do with the Norton 360, but that subscription has expired and I just installed AVG the free edition until I can get the Norton 360, and after the uninstall, the internet is still not working. But when I had to disable the Norton for the Combofix, right after that the internet was working. I dont know, I just want to use the internet lol!

I tried copying that hkey and pasting it into the command prompt but nothing happened.

Here is the junk notepad log:

2012-02-14 09:55:24, Info CSI 00000006 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:24, Info CSI 00000007 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:27, Info CSI 00000009 [SR] Verify complete
2012-02-14 09:55:27, Info CSI 0000000a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:27, Info CSI 0000000b [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:29, Info CSI 0000000d [SR] Verify complete
2012-02-14 09:55:29, Info CSI 0000000e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:29, Info CSI 0000000f [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:31, Info CSI 00000011 [SR] Verify complete
2012-02-14 09:55:31, Info CSI 00000012 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:31, Info CSI 00000013 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:33, Info CSI 00000015 [SR] Verify complete
2012-02-14 09:55:34, Info CSI 00000016 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:34, Info CSI 00000017 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:36, Info CSI 00000019 [SR] Verify complete
2012-02-14 09:55:36, Info CSI 0000001a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:36, Info CSI 0000001b [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:38, Info CSI 0000001d [SR] Verify complete
2012-02-14 09:55:38, Info CSI 0000001e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:38, Info CSI 0000001f [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:39, Info CSI 00000021 [SR] Verify complete
2012-02-14 09:55:40, Info CSI 00000022 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:40, Info CSI 00000023 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:41, Info CSI 00000025 [SR] Verify complete
2012-02-14 09:55:42, Info CSI 00000026 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:42, Info CSI 00000027 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:44, Info CSI 00000029 [SR] Verify complete
2012-02-14 09:55:45, Info CSI 0000002a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:45, Info CSI 0000002b [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:47, Info CSI 0000002d [SR] Verify complete
2012-02-14 09:55:47, Info CSI 0000002e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:47, Info CSI 0000002f [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:48, Info CSI 00000031 [SR] Verify complete
2012-02-14 09:55:49, Info CSI 00000032 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:49, Info CSI 00000033 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:50, Info CSI 00000035 [SR] Verify complete
2012-02-14 09:55:51, Info CSI 00000036 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:51, Info CSI 00000037 [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:53, Info CSI 00000039 [SR] Verify complete
2012-02-14 09:55:53, Info CSI 0000003a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:53, Info CSI 0000003b [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:56, Info CSI 0000003d [SR] Verify complete
2012-02-14 09:55:57, Info CSI 0000003e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:57, Info CSI 0000003f [SR] Beginning Verify and Repair transaction
2012-02-14 09:55:59, Info CSI 00000041 [SR] Verify complete
2012-02-14 09:55:59, Info CSI 00000042 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:55:59, Info CSI 00000043 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:02, Info CSI 00000045 [SR] Verify complete
2012-02-14 09:56:02, Info CSI 00000046 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:02, Info CSI 00000047 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:05, Info CSI 00000049 [SR] Verify complete
2012-02-14 09:56:05, Info CSI 0000004a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:05, Info CSI 0000004b [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:08, Info CSI 0000004d [SR] Verify complete
2012-02-14 09:56:08, Info CSI 0000004e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:08, Info CSI 0000004f [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:10, Info CSI 00000051 [SR] Verify complete
2012-02-14 09:56:10, Info CSI 00000052 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:10, Info CSI 00000053 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:11, Info CSI 00000055 [SR] Verify complete
2012-02-14 09:56:11, Info CSI 00000056 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:11, Info CSI 00000057 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:15, Info CSI 00000059 [SR] Verify complete
2012-02-14 09:56:15, Info CSI 0000005a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:15, Info CSI 0000005b [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:17, Info CSI 0000005d [SR] Verify complete
2012-02-14 09:56:18, Info CSI 0000005e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:18, Info CSI 0000005f [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:20, Info CSI 00000061 [SR] Verify complete
2012-02-14 09:56:21, Info CSI 00000062 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:21, Info CSI 00000063 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:22, Info CSI 00000065 [SR] Verify complete
2012-02-14 09:56:22, Info CSI 00000066 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:22, Info CSI 00000067 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:24, Info CSI 00000069 [SR] Verify complete
2012-02-14 09:56:25, Info CSI 0000006a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:25, Info CSI 0000006b [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:27, Info CSI 0000006d [SR] Verify complete
2012-02-14 09:56:27, Info CSI 0000006e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:27, Info CSI 0000006f [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:29, Info CSI 00000071 [SR] Verify complete
2012-02-14 09:56:29, Info CSI 00000072 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:29, Info CSI 00000073 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:32, Info CSI 00000075 [SR] Verify complete
2012-02-14 09:56:32, Info CSI 00000076 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:32, Info CSI 00000077 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:34, Info CSI 00000079 [SR] Verify complete
2012-02-14 09:56:34, Info CSI 0000007a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:34, Info CSI 0000007b [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:37, Info CSI 0000007d [SR] Verify complete
2012-02-14 09:56:37, Info CSI 0000007e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:37, Info CSI 0000007f [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:39, Info CSI 00000081 [SR] Verify complete
2012-02-14 09:56:39, Info CSI 00000082 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:39, Info CSI 00000083 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:42, Info CSI 00000085 [SR] Verify complete
2012-02-14 09:56:43, Info CSI 00000086 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:43, Info CSI 00000087 [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:50, Info CSI 00000089 [SR] Verify complete
2012-02-14 09:56:51, Info CSI 0000008a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:51, Info CSI 0000008b [SR] Beginning Verify and Repair transaction
2012-02-14 09:56:57, Info CSI 0000008f [SR] Verify complete
2012-02-14 09:56:57, Info CSI 00000090 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:56:57, Info CSI 00000091 [SR] Beginning Verify and Repair transaction
2012-02-14 09:57:04, Info CSI 00000094 [SR] Verify complete
2012-02-14 09:57:05, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:57:05, Info CSI 00000096 [SR] Beginning Verify and Repair transaction
2012-02-14 09:57:13, Info CSI 0000009a [SR] Verify complete
2012-02-14 09:57:14, Info CSI 0000009b [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:57:14, Info CSI 0000009c [SR] Beginning Verify and Repair transaction
2012-02-14 09:57:25, Info CSI 0000009e [SR] Verify complete
2012-02-14 09:57:39, Info CSI 0000009f [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:57:39, Info CSI 000000a0 [SR] Beginning Verify and Repair transaction
2012-02-14 09:57:48, Info CSI 000000c2 [SR] Verify complete
2012-02-14 09:57:48, Info CSI 000000c3 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:57:48, Info CSI 000000c4 [SR] Beginning Verify and Repair transaction
2012-02-14 09:57:55, Info CSI 000000c9 [SR] Verify complete
2012-02-14 09:57:55, Info CSI 000000ca [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:57:55, Info CSI 000000cb [SR] Beginning Verify and Repair transaction
2012-02-14 09:58:04, Info CSI 000000cd [SR] Verify complete
2012-02-14 09:58:05, Info CSI 000000ce [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:58:05, Info CSI 000000cf [SR] Beginning Verify and Repair transaction
2012-02-14 09:58:14, Info CSI 000000d1 [SR] Verify complete
2012-02-14 09:58:15, Info CSI 000000d2 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:58:15, Info CSI 000000d3 [SR] Beginning Verify and Repair transaction
2012-02-14 09:58:24, Info CSI 000000d5 [SR] Verify complete
2012-02-14 09:58:24, Info CSI 000000d6 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:58:24, Info CSI 000000d7 [SR] Beginning Verify and Repair transaction
2012-02-14 09:58:34, Info CSI 000000db [SR] Verify complete
2012-02-14 09:58:34, Info CSI 000000dc [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:58:34, Info CSI 000000dd [SR] Beginning Verify and Repair transaction
2012-02-14 09:58:43, Info CSI 000000f3 [SR] Verify complete
2012-02-14 09:58:44, Info CSI 000000f4 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:58:44, Info CSI 000000f5 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:05, Info CSI 000000f7 [SR] Verify complete
2012-02-14 09:59:05, Info CSI 000000f8 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:05, Info CSI 000000f9 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:09, Info CSI 000000fb [SR] Verify complete
2012-02-14 09:59:09, Info CSI 000000fc [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:09, Info CSI 000000fd [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:11, Info CSI 000000ff [SR] Verify complete
2012-02-14 09:59:11, Info CSI 00000100 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:11, Info CSI 00000101 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:13, Info CSI 00000103 [SR] Verify complete
2012-02-14 09:59:13, Info CSI 00000104 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:13, Info CSI 00000105 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:18, Info CSI 0000010d [SR] Verify complete
2012-02-14 09:59:18, Info CSI 0000010e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:18, Info CSI 0000010f [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:24, Info CSI 0000011c [SR] Verify complete
2012-02-14 09:59:24, Info CSI 0000011d [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:24, Info CSI 0000011e [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:24, Info CSI 00000120 [SR] Verify complete
2012-02-14 09:59:24, Info CSI 00000121 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:24, Info CSI 00000122 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:28, Info CSI 00000124 [SR] Verify complete
2012-02-14 09:59:28, Info CSI 00000125 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:28, Info CSI 00000126 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:32, Info CSI 00000128 [SR] Verify complete
2012-02-14 09:59:32, Info CSI 00000129 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:32, Info CSI 0000012a [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:38, Info CSI 0000012d [SR] Verify complete
2012-02-14 09:59:39, Info CSI 0000012e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:39, Info CSI 0000012f [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:43, Info CSI 00000131 [SR] Verify complete
2012-02-14 09:59:43, Info CSI 00000132 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:43, Info CSI 00000133 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:45, Info CSI 00000135 [SR] Verify complete
2012-02-14 09:59:45, Info CSI 00000136 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:45, Info CSI 00000137 [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:50, Info CSI 00000139 [SR] Verify complete
2012-02-14 09:59:50, Info CSI 0000013a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:50, Info CSI 0000013b [SR] Beginning Verify and Repair transaction
2012-02-14 09:59:55, Info CSI 0000013d [SR] Verify complete
2012-02-14 09:59:55, Info CSI 0000013e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 09:59:55, Info CSI 0000013f [SR] Beginning Verify and Repair transaction
2012-02-14 10:00:03, Info CSI 00000147 [SR] Verify complete
2012-02-14 10:00:03, Info CSI 00000148 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:00:03, Info CSI 00000149 [SR] Beginning Verify and Repair transaction
2012-02-14 10:00:12, Info CSI 0000015b [SR] Verify complete
2012-02-14 10:00:13, Info CSI 0000015c [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:00:13, Info CSI 0000015d [SR] Beginning Verify and Repair transaction
2012-02-14 10:00:32, Info CSI 0000015f [SR] Verify complete
2012-02-14 10:00:32, Info CSI 00000160 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:00:32, Info CSI 00000161 [SR] Beginning Verify and Repair transaction
2012-02-14 10:01:09, Info CSI 00000163 [SR] Verify complete
2012-02-14 10:01:11, Info CSI 00000164 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:01:11, Info CSI 00000165 [SR] Beginning Verify and Repair transaction
2012-02-14 10:01:35, Info CSI 00000167 [SR] Verify complete
2012-02-14 10:01:35, Info CSI 00000168 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:01:35, Info CSI 00000169 [SR] Beginning Verify and Repair transaction
2012-02-14 10:01:41, Info CSI 0000016b [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:01:43, Info CSI 0000016d [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:01:43, Info CSI 0000016e [SR] This component was referenced by [l:164{82}]"Package_30_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.936330-185_neutral_GDR"
2012-02-14 10:01:43, Info CSI 00000171 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2012-02-14 10:01:43, Info CSI 00000173 [SR] Verify complete
2012-02-14 10:01:43, Info CSI 00000174 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:01:43, Info CSI 00000175 [SR] Beginning Verify and Repair transaction
2012-02-14 10:01:49, Info CSI 00000177 [SR] Verify complete
2012-02-14 10:01:54, Info CSI 00000178 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:01:54, Info CSI 00000179 [SR] Beginning Verify and Repair transaction
2012-02-14 10:02:27, Info CSI 0000017b [SR] Verify complete
2012-02-14 10:02:32, Info CSI 0000017c [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:02:32, Info CSI 0000017d [SR] Beginning Verify and Repair transaction
2012-02-14 10:03:00, Info CSI 00000181 [SR] Verify complete
2012-02-14 10:03:01, Info CSI 00000182 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:03:01, Info CSI 00000183 [SR] Beginning Verify and Repair transaction
2012-02-14 10:03:16, Info CSI 00000185 [SR] Verify complete
2012-02-14 10:03:16, Info CSI 00000186 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:03:16, Info CSI 00000187 [SR] Beginning Verify and Repair transaction
2012-02-14 10:03:21, Info CSI 00000189 [SR] Verify complete
2012-02-14 10:03:22, Info CSI 0000018a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:03:22, Info CSI 0000018b [SR] Beginning Verify and Repair transaction
2012-02-14 10:04:33, Info CSI 0000018d [SR] Verify complete
2012-02-14 10:04:37, Info CSI 0000018e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:04:37, Info CSI 0000018f [SR] Beginning Verify and Repair transaction
2012-02-14 10:05:48, Info CSI 00000191 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:06:14, Info CSI 00000193 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:06:14, Info CSI 00000194 [SR] This component was referenced by [l:162{81}]"Package_17_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.948465-60_neutral_GDR"
2012-02-14 10:06:19, Info CSI 00000196 [SR] Verify complete
2012-02-14 10:06:23, Info CSI 00000197 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:06:23, Info CSI 00000198 [SR] Beginning Verify and Repair transaction
2012-02-14 10:07:13, Info CSI 0000019a [SR] Verify complete
2012-02-14 10:07:19, Info CSI 0000019b [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:07:19, Info CSI 0000019c [SR] Beginning Verify and Repair transaction
2012-02-14 10:08:43, Info CSI 0000019e [SR] Verify complete
2012-02-14 10:08:47, Info CSI 0000019f [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:08:47, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction
2012-02-14 10:10:28, Info CSI 000001a3 [SR] Verify complete
2012-02-14 10:10:30, Info CSI 000001a4 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:10:30, Info CSI 000001a5 [SR] Beginning Verify and Repair transaction
2012-02-14 10:10:55, Info CSI 000001a7 [SR] Verify complete
2012-02-14 10:10:59, Info CSI 000001a8 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:10:59, Info CSI 000001a9 [SR] Beginning Verify and Repair transaction
2012-02-14 10:11:48, Info CSI 000001ac [SR] Verify complete
2012-02-14 10:11:50, Info CSI 000001ad [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:11:50, Info CSI 000001ae [SR] Beginning Verify and Repair transaction
2012-02-14 10:12:43, Info CSI 000001b1 [SR] Verify complete
2012-02-14 10:12:48, Info CSI 000001b2 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:12:48, Info CSI 000001b3 [SR] Beginning Verify and Repair transaction
2012-02-14 10:13:58, Info CSI 000001b8 [SR] Verify complete
2012-02-14 10:14:07, Info CSI 000001b9 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:14:07, Info CSI 000001ba [SR] Beginning Verify and Repair transaction
2012-02-14 10:15:06, Info CSI 000001bc [SR] Verify complete
2012-02-14 10:15:07, Info CSI 000001bd [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:15:07, Info CSI 000001be [SR] Beginning Verify and Repair transaction
2012-02-14 10:16:54, Info CSI 000001c0 [SR] Verify complete
2012-02-14 10:16:58, Info CSI 000001c1 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:16:58, Info CSI 000001c2 [SR] Beginning Verify and Repair transaction
2012-02-14 10:17:14, Info CSI 000001c4 [SR] Verify complete
2012-02-14 10:17:17, Info CSI 000001c5 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:17:17, Info CSI 000001c6 [SR] Beginning Verify and Repair transaction
2012-02-14 10:17:35, Info CSI 000001c8 [SR] Verify complete
2012-02-14 10:17:35, Info CSI 000001c9 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:17:35, Info CSI 000001ca [SR] Beginning Verify and Repair transaction
2012-02-14 10:18:37, Info CSI 000001cc [SR] Verify complete
2012-02-14 10:18:38, Info CSI 000001cd [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:18:38, Info CSI 000001ce [SR] Beginning Verify and Repair transaction
2012-02-14 10:19:23, Info CSI 000001d0 [SR] Verify complete
2012-02-14 10:19:27, Info CSI 000001d1 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:19:27, Info CSI 000001d2 [SR] Beginning Verify and Repair transaction
2012-02-14 10:22:05, Info CSI 000001d4 [SR] Verify complete
2012-02-14 10:22:08, Info CSI 000001d5 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:22:08, Info CSI 000001d6 [SR] Beginning Verify and Repair transaction
2012-02-14 10:22:46, Info CSI 000001d8 [SR] Verify complete
2012-02-14 10:22:49, Info CSI 000001d9 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:22:49, Info CSI 000001da [SR] Beginning Verify and Repair transaction
2012-02-14 10:23:23, Info CSI 000001dc [SR] Verify complete
2012-02-14 10:23:24, Info CSI 000001dd [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:23:24, Info CSI 000001de [SR] Beginning Verify and Repair transaction
2012-02-14 10:24:23, Info CSI 000001e9 [SR] Verify complete
2012-02-14 10:24:25, Info CSI 000001ea [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:24:25, Info CSI 000001eb [SR] Beginning Verify and Repair transaction
2012-02-14 10:25:04, Info CSI 000001ed [SR] Verify complete
2012-02-14 10:25:05, Info CSI 000001ee [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:25:05, Info CSI 000001ef [SR] Beginning Verify and Repair transaction
2012-02-14 10:25:36, Info CSI 000001f1 [SR] Verify complete
2012-02-14 10:25:38, Info CSI 000001f2 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:25:38, Info CSI 000001f3 [SR] Beginning Verify and Repair transaction
2012-02-14 10:26:28, Info CSI 000001f5 [SR] Verify complete
2012-02-14 10:26:31, Info CSI 000001f6 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:26:31, Info CSI 000001f7 [SR] Beginning Verify and Repair transaction
2012-02-14 10:27:21, Info CSI 000001f9 [SR] Verify complete
2012-02-14 10:27:25, Info CSI 000001fa [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:27:25, Info CSI 000001fb [SR] Beginning Verify and Repair transaction
2012-02-14 10:27:37, Info CSI 000001fd [SR] Verify complete
2012-02-14 10:27:43, Info CSI 000001fe [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:27:43, Info CSI 000001ff [SR] Beginning Verify and Repair transaction
2012-02-14 10:28:08, Info CSI 00000202 [SR] Verify complete
2012-02-14 10:28:13, Info CSI 00000203 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:28:13, Info CSI 00000204 [SR] Beginning Verify and Repair transaction
2012-02-14 10:29:08, Info CSI 0000020a [SR] Verify complete
2012-02-14 10:29:22, Info CSI 0000020b [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:29:22, Info CSI 0000020c [SR] Beginning Verify and Repair transaction
2012-02-14 10:32:05, Info CSI 00000212 [SR] Verify complete
2012-02-14 10:32:08, Info CSI 00000213 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:32:08, Info CSI 00000214 [SR] Beginning Verify and Repair transaction
2012-02-14 10:32:24, Info CSI 00000224 [SR] Verify complete
2012-02-14 10:32:24, Info CSI 00000225 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:32:24, Info CSI 00000226 [SR] Beginning Verify and Repair transaction
2012-02-14 10:32:29, Info CSI 00000228 [SR] Verify complete
2012-02-14 10:32:31, Info CSI 00000229 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:32:31, Info CSI 0000022a [SR] Beginning Verify and Repair transaction
2012-02-14 10:32:38, Info CSI 0000022c [SR] Verify complete
2012-02-14 10:32:43, Info CSI 0000022d [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:32:43, Info CSI 0000022e [SR] Beginning Verify and Repair transaction
2012-02-14 10:32:59, Info CSI 00000233 [SR] Verify complete
2012-02-14 10:33:00, Info CSI 00000234 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:33:00, Info CSI 00000235 [SR] Beginning Verify and Repair transaction
2012-02-14 10:33:09, Info CSI 00000239 [SR] Verify complete
2012-02-14 10:33:09, Info CSI 0000023a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:33:09, Info CSI 0000023b [SR] Beginning Verify and Repair transaction
2012-02-14 10:33:19, Info CSI 0000025e [SR] Verify complete
2012-02-14 10:33:19, Info CSI 0000025f [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:33:19, Info CSI 00000260 [SR] Beginning Verify and Repair transaction
2012-02-14 10:33:24, Info CSI 00000262 [SR] Verify complete
2012-02-14 10:33:24, Info CSI 00000263 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:33:24, Info CSI 00000264 [SR] Beginning Verify and Repair transaction
2012-02-14 10:33:31, Info CSI 00000266 [SR] Verify complete
2012-02-14 10:33:32, Info CSI 00000267 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:33:32, Info CSI 00000268 [SR] Beginning Verify and Repair transaction
2012-02-14 10:33:45, Info CSI 00000279 [SR] Verify complete
2012-02-14 10:33:48, Info CSI 0000027a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:33:48, Info CSI 0000027b [SR] Beginning Verify and Repair transaction
2012-02-14 10:35:19, Info CSI 0000027d [SR] Verify complete
2012-02-14 10:35:21, Info CSI 0000027e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:35:21, Info CSI 0000027f [SR] Beginning Verify and Repair transaction
2012-02-14 10:36:25, Info CSI 0000028d [SR] Verify complete
2012-02-14 10:36:29, Info CSI 0000028e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:36:29, Info CSI 0000028f [SR] Beginning Verify and Repair transaction
2012-02-14 10:36:56, Info CSI 00000291 [SR] Verify complete
2012-02-14 10:36:58, Info CSI 00000292 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:36:58, Info CSI 00000293 [SR] Beginning Verify and Repair transaction
2012-02-14 10:37:45, Info CSI 00000296 [SR] Verify complete
2012-02-14 10:37:51, Info CSI 00000297 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:37:51, Info CSI 00000298 [SR] Beginning Verify and Repair transaction
2012-02-14 10:38:39, Info CSI 0000029a [SR] Repairing corrupted file [ml:520{260},l:64{32}]"\??\C:\Windows\PolicyDefinitions"\[l:24{12}]"inetres.admx" from store
2012-02-14 10:38:40, Info CSI 0000029d [SR] Repairing corrupted file [ml:520{260},l:76{38}]"\??\C:\Windows\PolicyDefinitions\en-US"\[l:24{12}]"InetRes.adml" from store
2012-02-14 10:38:40, Info CSI 000002a1 [SR] Verify complete
2012-02-14 10:38:49, Info CSI 000002a2 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:38:49, Info CSI 000002a3 [SR] Beginning Verify and Repair transaction
2012-02-14 10:39:02, Info CSI 000002a5 [SR] Verify complete
2012-02-14 10:39:03, Info CSI 000002a6 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:39:03, Info CSI 000002a7 [SR] Beginning Verify and Repair transaction
2012-02-14 10:39:12, Info CSI 000002a9 [SR] Verify complete
2012-02-14 10:39:13, Info CSI 000002aa [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:39:13, Info CSI 000002ab [SR] Beginning Verify and Repair transaction
2012-02-14 10:39:20, Info CSI 000002ad [SR] Verify complete
2012-02-14 10:39:21, Info CSI 000002ae [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:39:21, Info CSI 000002af [SR] Beginning Verify and Repair transaction
2012-02-14 10:39:37, Info CSI 000002c9 [SR] Verify complete
2012-02-14 10:39:39, Info CSI 000002ca [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:39:39, Info CSI 000002cb [SR] Beginning Verify and Repair transaction
2012-02-14 10:39:49, Info CSI 000002cf [SR] Verify complete
2012-02-14 10:39:49, Info CSI 000002d0 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:39:49, Info CSI 000002d1 [SR] Beginning Verify and Repair transaction
2012-02-14 10:45:17, Info CSI 000002d3 [SR] Verify complete
2012-02-14 10:45:18, Info CSI 000002d4 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:45:18, Info CSI 000002d5 [SR] Beginning Verify and Repair transaction
2012-02-14 10:45:59, Info CSI 000002d7 [SR] Verify complete
2012-02-14 10:45:59, Info CSI 000002d8 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:45:59, Info CSI 000002d9 [SR] Beginning Verify and Repair transaction
2012-02-14 10:46:07, Info CSI 000002db [SR] Verify complete
2012-02-14 10:46:07, Info CSI 000002dc [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:46:07, Info CSI 000002dd [SR] Beginning Verify and Repair transaction
2012-02-14 10:46:12, Info CSI 000002e0 [SR] Verify complete
2012-02-14 10:46:12, Info CSI 000002e1 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:46:12, Info CSI 000002e2 [SR] Beginning Verify and Repair transaction
2012-02-14 10:47:37, Info CSI 000002e4 [SR] Verify complete
2012-02-14 10:47:37, Info CSI 000002e5 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:47:37, Info CSI 000002e6 [SR] Beginning Verify and Repair transaction
2012-02-14 10:47:50, Info CSI 000002e8 [SR] Verify complete
2012-02-14 10:47:50, Info CSI 000002e9 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:47:50, Info CSI 000002ea [SR] Beginning Verify and Repair transaction
2012-02-14 10:47:55, Info CSI 000002ec [SR] Verify complete
2012-02-14 10:47:55, Info CSI 000002ed [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:47:55, Info CSI 000002ee [SR] Beginning Verify and Repair transaction
2012-02-14 10:48:14, Info CSI 000002f1 [SR] Verify complete
2012-02-14 10:48:14, Info CSI 000002f2 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:48:14, Info CSI 000002f3 [SR] Beginning Verify and Repair transaction
2012-02-14 10:48:26, Info CSI 000002f5 [SR] Verify complete
2012-02-14 10:48:26, Info CSI 000002f6 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:48:26, Info CSI 000002f7 [SR] Beginning Verify and Repair transaction
2012-02-14 10:48:32, Info CSI 000002f9 [SR] Verify complete
2012-02-14 10:48:32, Info CSI 000002fa [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:48:32, Info CSI 000002fb [SR] Beginning Verify and Repair transaction
2012-02-14 10:48:39, Info CSI 00000300 [SR] Verify complete
2012-02-14 10:48:39, Info CSI 00000301 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:48:39, Info CSI 00000302 [SR] Beginning Verify and Repair transaction
2012-02-14 10:48:46, Info CSI 00000304 [SR] Verify complete
2012-02-14 10:48:46, Info CSI 00000305 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:48:46, Info CSI 00000306 [SR] Beginning Verify and Repair transaction
2012-02-14 10:49:26, Info CSI 00000309 [SR] Verify complete
2012-02-14 10:49:26, Info CSI 0000030a [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:49:26, Info CSI 0000030b [SR] Beginning Verify and Repair transaction
2012-02-14 10:49:34, Info CSI 0000030d [SR] Verify complete
2012-02-14 10:49:35, Info CSI 0000030e [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:49:35, Info CSI 0000030f [SR] Beginning Verify and Repair transaction
2012-02-14 10:49:41, Info CSI 00000311 [SR] Verify complete
2012-02-14 10:49:41, Info CSI 00000312 [SR] Verifying 100 (0x0000000000000064) components
2012-02-14 10:49:41, Info CSI 00000313 [SR] Beginning Verify and Repair transaction
2012-02-14 10:49:49, Info CSI 00000315 [SR] Verify complete
2012-02-14 10:49:49, Info CSI 00000316 [SR] Verifying 17 (0x0000000000000011) components
2012-02-14 10:49:49, Info CSI 00000317 [SR] Beginning Verify and Repair transaction
2012-02-14 10:49:50, Info CSI 00000319 [SR] Verify complete
2012-02-14 10:49:50, Info CSI 0000031a [SR] Repairing 4 components
2012-02-14 10:49:50, Info CSI 0000031b [SR] Beginning Verify and Repair transaction
2012-02-14 10:49:51, Info CSI 0000031d [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:49:51, Info CSI 0000031f [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:49:51, Info CSI 00000321 [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:49:51, Info CSI 00000322 [SR] This component was referenced by [l:164{82}]"Package_30_for_KB936330~31bf3856ad364e35~amd64~~6.0.1.18000.936330-185_neutral_GDR"
2012-02-14 10:49:51, Info CSI 00000325 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2012-02-14 10:49:51, Info CSI 00000327 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-02-14 10:49:51, Info CSI 00000328 [SR] This component was referenced by [l:162{81}]"Package_17_for_KB948465~31bf3856ad364e35~amd64~~6.0.1.18005.948465-60_neutral_GDR"
2012-02-14 10:49:51, Info CSI 0000032a [SR] Repairing corrupted file [ml:520{260},l:64{32}]"\??\C:\Windows\PolicyDefinitions"\[l:24{12}]"inetres.admx" from store
2012-02-14 10:49:51, Info CSI 0000032d [SR] Repairing corrupted file [ml:520{260},l:76{38}]"\??\C:\Windows\PolicyDefinitions\en-US"\[l:24{12}]"InetRes.adml" from store
2012-02-14 10:49:51, Info CSI 00000330 [SR] Repair complete
2012-02-14 10:49:51, Info CSI 00000331 [SR] Committing transaction
2012-02-14 10:49:52, Info CSI 00000335 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired

What are you thinking is going on? Would it be easier if we chatted on a messenger?

~Jenn

#22
RKinner

Posted 14 February 2012 - 10:43 AM

Malware Expert

Expert
24,625 posts

Download and save the norton removal tool
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
Run the Norton Removal tool.

Reboot

Run OTL Quickscan and post the log.

#23
smuckerzs

Posted 14 February 2012 - 11:03 AM

Member

Topic Starter
Member
26 posts

OK here is the OTL Log

OTL logfile created on: 2/14/2012 11:55:43 AM - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\justin\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.99 Gb Total Physical Memory | 4.59 Gb Available Physical Memory | 76.55% Memory free
12.09 Gb Paging File | 10.73 Gb Available in Paging File | 88.74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 683.57 Gb Total Space | 523.04 Gb Free Space | 76.52% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 8.33 Gb Free Space | 55.56% Space Free | Partition Type: NTFS

Computer Name: RAHJA | User Name: justin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/02/13 23:20:36 | 000,909,152 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe
PRC - [2012/02/13 23:20:33 | 000,939,872 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
PRC - [2012/02/09 14:43:34 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\justin\Desktop\OTL.exe
PRC - [2012/01/24 17:24:26 | 002,416,480 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
PRC - [2012/01/07 03:56:05 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011/10/12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
PRC - [2011/08/02 06:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
PRC - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/09/30 10:03:14 | 000,820,464 | ---- | M] (Dell Inc.) -- c:\ProgramData\SingleClick Systems\Advanced Networking Service\hnm_svc.exe
PRC - [2008/09/23 22:09:52 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2007/01/12 11:57:28 | 000,292,336 | ---- | M] () -- C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe
PRC - [2007/01/04 16:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) -- C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe
PRC - [2006/09/12 23:00:00 | 000,045,056 | ---- | M] (brother Industries Ltd) -- C:\Windows\SysWOW64\brss01a.exe
PRC - [2004/06/13 23:00:00 | 000,057,344 | ---- | M] (brother Industries Ltd) -- C:\Windows\SysWOW64\brsvc01a.exe

========== Modules (No Company Name) ==========

MOD - [2012/02/13 23:20:33 | 000,939,872 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
MOD - [2012/01/07 03:56:05 | 002,124,760 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2007/01/12 11:57:28 | 000,292,336 | ---- | M] () -- C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe
MOD - [2006/09/06 05:13:14 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\Dell Photo AIO Printer 926\DLCXcfg.dll
MOD - [2006/08/08 14:54:18 | 000,278,528 | ---- | M] () -- C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxscw.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/09/22 17:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/06/22 15:49:11 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2008/10/06 07:07:34 | 000,088,576 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\AERTSr64.exe -- (AERTFilters)
SRV:64bit: - [2008/09/23 22:09:52 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV:64bit: - [2008/09/10 04:03:22 | 000,902,656 | ---- | M] (ATI Technologies Inc.) [Auto | Running] -- C:\Windows\SysNative\Ati2evxx.exe -- (Ati External Event Utility)
SRV:64bit: - [2008/01/20 21:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2006/11/03 18:07:28 | 000,566,152 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\dlcxcoms.exe -- (dlcx_device)
SRV - [2012/02/13 23:20:36 | 000,909,152 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe -- (vToolbarUpdater)
SRV - [2011/10/12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011/10/05 14:50:42 | 000,161,144 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist Express Customer\309\g2ax_service.exe -- (GoToAssist Express Customer)
SRV - [2011/08/02 06:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/23 10:27:05 | 000,288,112 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -- (Adobe Version Cue CS4)
SRV - [2009/10/14 00:04:40 | 000,394,608 | ---- | M] (SupportSoft, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Supportsoft\bin\ssrc.exe -- (SupportSoft RemoteAssist)
SRV - [2009/06/22 15:47:02 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/03/29 23:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/02/24 13:23:28 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)
SRV - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/09/30 10:03:14 | 000,820,464 | ---- | M] (Dell Inc.) [Auto | Running] -- c:\ProgramData\SingleClick Systems\Advanced Networking Service\hnm_svc.exe -- (hnmsvc)
SRV - [2007/01/04 16:38:08 | 000,024,652 | ---- | M] (Viewpoint Corporation) [Auto | Running] -- C:\Program Files (x86)\Viewpoint\Common\ViewpointService.exe -- (Viewpoint Manager Service)
SRV - [2006/10/11 16:48:50 | 000,532,480 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWow64\dlcxcoms.exe -- (dlcx_device)
SRV - [2004/06/13 23:00:00 | 000,057,344 | ---- | M] (brother Industries Ltd) [Auto | Running] -- C:\Windows\SysWOW64\brsvc01a.exe -- (Brother XP spl Service)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/10/07 06:23:46 | 000,283,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2011/09/13 06:30:08 | 000,037,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\DRIVERS\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2011/08/08 06:08:58 | 000,046,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\DRIVERS\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2011/07/11 01:14:36 | 000,375,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2011/07/11 01:13:56 | 000,029,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\AVGIDSFilter.Sys -- (AVGIDSFilter)
DRV:64bit: - [2011/07/11 01:13:54 | 000,026,704 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV:64bit: - [2011/07/11 01:13:52 | 000,120,400 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\AVGIDSDriver.Sys -- (AVGIDSDriver)
DRV:64bit: - [2011/07/06 11:44:00 | 000,034,288 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2010/12/03 04:05:34 | 000,069,152 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\SysNative\DRIVERS\Lbd.sys -- (Lbd)
DRV:64bit: - [2010/09/22 23:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2009/09/30 19:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009/09/01 20:44:50 | 000,086,584 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs)
DRV:64bit: - [2008/09/28 07:46:48 | 000,316,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\e1y60x64.sys -- (e1yexpress) Intel®
DRV:64bit: - [2008/09/28 03:22:14 | 000,402,456 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iastor.sys -- (iaStor)
DRV:64bit: - [2008/09/10 04:03:26 | 004,658,176 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (R300)
DRV:64bit: - [2008/09/10 04:03:26 | 004,658,176 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2008/06/18 17:48:54 | 000,029,184 | ---- | M] (SingleClick Systems) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\packet.sys -- (Packet)
DRV:64bit: - [2008/05/23 16:54:38 | 000,033,888 | ---- | M] (Intel Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\iqvw64e.sys -- (NAL)
DRV:64bit: - [2008/01/20 21:46:57 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2008/01/20 21:46:55 | 000,317,952 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\e1e6032e.sys -- (e1express) Intel®
DRV:64bit: - [2007/11/14 03:00:00 | 000,053,488 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2007/04/01 23:42:48 | 000,020,016 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2007/04/01 23:42:44 | 000,096,048 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2007/04/01 23:42:42 | 000,087,856 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2006/11/28 20:46:20 | 000,043,328 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\PCAMp50a64.sys -- (PCAMp50a64)
DRV:64bit: - [2006/11/28 20:46:20 | 000,041,280 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\PCASp50a64.sys -- (PCASp50a64)
DRV - [2009/09/01 20:44:50 | 000,086,584 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...er/fix_homepage
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.c...rch/search.html

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "My Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo....ch?fr=ffsp1&p="
FF - prefs.js..browser.search.selectedEngine: "My Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..keyword.URL: "http://isearch.avg.c...0:45&sap=ku&q="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files (x86)\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/01/07 03:56:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/02/10 10:02:52 | 000,000,000 | ---D | M]

[2011/03/06 10:32:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\justin\AppData\Roaming\mozilla\Extensions
[2010/10/19 20:14:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\justin\AppData\Roaming\mozilla\Extensions\[email protected]
[2012/02/10 10:06:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\justin\AppData\Roaming\mozilla\Firefox\Profiles\5738a74f.default\extensions
[2011/03/06 16:25:23 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\justin\AppData\Roaming\mozilla\Firefox\Profiles\5738a74f.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/12/21 08:10:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/01/07 03:56:05 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/05/04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012/02/13 23:20:20 | 000,003,747 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/01/07 03:56:04 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/01/07 03:56:04 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Yahoo! ()
CHR - default_search_provider: search_url = http://search.yahoo....p={searchTerms}
CHR - default_search_provider: suggest_url = http://ff.search.yah...d={searchTerms}

O1 HOSTS File: ([2012/02/13 18:40:02 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll File not found
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll ()
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Bluetooth HCI Monitor] C:\Windows\SysNative\HCIMNTR.DLL (Logitech Inc.)
O4:64bit: - HKLM..\Run: [DLCXCATS] C:\Windows\SysNative\spool\DRIVERS\x64\3\DLCXtime.DLL ()
O4:64bit: - HKLM..\Run: [dlcxmon.exe] C:\Program Files (x86)\Dell Photo AIO Printer 926\dlcxmon.exe ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html File not found
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: convergysworkathome.com ([www] http in Trusted sites)
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} http://download.micr...D0C/wmv9dmo.cab (Reg Error: Key error.)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} http://support.dell....r/SysProExe.CAB (WMI Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7A06CE5B-D159-4F47-8C64-F8325CD80315}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C4931226-4902-4CD5-BED1-D6CFD967BA78}: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9BB3FC6-A3FA-4A36-9F5C-5D4D39303058}: DhcpNameServer = 192.168.254.254
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll ()
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist Express Customer: DllName - (C:\Program Files (x86)\Citrix\GoToAssist Express Customer\309\g2ax_winlogonx64.dll) - C:\Program Files (x86)\Citrix\GoToAssist Express Customer\309\g2ax_winlogonx64.dll (Citrix Online, a division of Citrix Systems, Inc.)
O24 - Desktop WallPaper: C:\Users\justin\Pictures\Desktop Backs & Savers\summer.jpg
O24 - Desktop BackupWallPaper: C:\Users\justin\Pictures\Desktop Backs & Savers\summer.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...com [@ = ComFile] -- Reg Error: Key error. File not found

========== Files/Folders - Created Within 30 Days ==========

[2012/02/14 11:32:26 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Roaming\AVG
[2012/02/14 11:31:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC Tuneup 2011
[2012/02/14 05:01:40 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Roaming\AVG2012
[2012/02/13 23:22:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2012
[2012/02/13 23:20:39 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2012/02/13 23:20:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
[2012/02/13 23:20:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search
[2012/02/13 23:18:46 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\AVG
[2012/02/13 23:18:00 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2012
[2012/02/13 23:18:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\AVG
[2012/02/13 23:16:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
[2012/02/13 22:43:39 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012/02/13 22:42:37 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
[2012/02/13 22:36:42 | 003,968,384 | ---- | C] (AVG Technologies) -- C:\Users\justin\Desktop\avg_free_stb_all_2012_1913_cnet.exe
[2012/02/13 22:17:19 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Roaming\InstallShield
[2012/02/13 22:11:54 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Roaming\PeerNetworking
[2012/02/13 21:39:13 | 004,763,456 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Users\justin\Desktop\procexp.exe
[2012/02/13 18:43:51 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/02/13 18:43:51 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Local\temp
[2012/02/13 18:40:07 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2012/02/13 16:00:15 | 004,403,246 | R--- | C] (Swearware) -- C:\Users\justin\Desktop\ComboFix.exe
[2012/02/11 18:06:33 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\justin\Desktop\dds.com
[2012/02/11 07:37:33 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Roaming\Yahoo!
[2012/02/10 17:27:37 | 000,061,440 | ---- | C] ( ) -- C:\Users\justin\Desktop\VEW.exe
[2012/02/10 17:22:31 | 002,059,824 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\justin\Desktop\tdsskiller.exe
[2012/02/10 16:17:11 | 004,733,440 | ---- | C] (AVAST Software) -- C:\Users\justin\Desktop\aswMBR.exe
[2012/02/10 10:54:26 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/02/10 10:54:26 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/02/10 10:54:26 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/02/10 10:54:17 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2012/02/10 10:51:05 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/02/10 10:14:50 | 000,000,000 | ---D | C] -- C:\Users\justin\Desktop\geeks to go
[2012/02/10 10:06:23 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/02/09 22:36:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpywareBlaster
[2012/02/09 14:43:34 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\justin\Desktop\OTL.exe
[2012/01/30 14:26:00 | 000,000,000 | ---D | C] -- C:\Users\justin\AppData\Roaming\Masque
[2009/07/23 22:41:21 | 008,270,752 | ---- | C] (Dell, Inc. ) -- C:\Users\justin\AppData\Roaming\DataSafeDotNet.exe
[2009/03/04 21:34:36 | 000,413,696 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxinpa.dll
[2009/03/04 21:34:36 | 000,397,312 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxiesc.dll
[2009/03/04 21:34:35 | 000,643,072 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxpmui.dll
[2009/03/04 21:34:34 | 001,224,704 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxserv.dll
[2009/03/04 21:34:34 | 000,991,232 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxusb1.dll
[2009/03/04 21:34:34 | 000,696,320 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxhbn3.dll
[2009/03/04 21:34:34 | 000,585,728 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxlmpm.dll
[2009/03/04 21:34:34 | 000,380,928 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxih.exe
[2009/03/04 21:34:34 | 000,176,128 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxppls.exe
[2009/03/04 21:34:34 | 000,163,840 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxprox.dll
[2009/03/04 21:34:34 | 000,094,208 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxpplc.dll
[2009/03/04 21:34:33 | 000,684,032 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcomc.dll
[2009/03/04 21:34:33 | 000,532,480 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcoms.exe
[2009/03/04 21:34:33 | 000,421,888 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcomm.dll
[2009/03/04 21:34:33 | 000,381,832 | ---- | C] ( ) -- C:\Windows\SysWow64\dlcxcfg.exe
[1 C:\Users\justin\Desktop\*.tmp files -> C:\Users\justin\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/02/14 11:53:28 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/02/14 11:52:56 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/02/14 11:52:56 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/02/14 11:52:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/02/14 11:51:17 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/02/14 11:47:59 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/02/14 11:31:20 | 000,000,979 | ---- | M] () -- C:\Users\justin\Desktop\AVG PC Tuneup 2011.lnk
[2012/02/14 09:37:01 | 057,618,500 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm
[2012/02/14 09:36:02 | 000,031,970 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2012/02/14 09:27:07 | 000,000,010 | ---- | M] () -- C:\Windows\popcinfo.dat
[2012/02/13 23:22:14 | 000,000,874 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2012.lnk
[2012/02/13 23:18:46 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm
[2012/02/13 23:18:46 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
[2012/02/13 22:36:44 | 003,968,384 | ---- | M] (AVG Technologies) -- C:\Users\justin\Desktop\avg_free_stb_all_2012_1913_cnet.exe
[2012/02/13 22:11:54 | 000,023,604 | ---- | M] () -- C:\Users\justin\AppData\Roaming\UserTile.png
[2012/02/13 21:39:29 | 004,763,456 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\Users\justin\Desktop\procexp.exe
[2012/02/13 18:40:02 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012/02/13 16:00:19 | 004,403,246 | R--- | M] (Swearware) -- C:\Users\justin\Desktop\ComboFix.exe
[2012/02/13 15:42:42 | 003,294,824 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/02/12 14:45:20 | 000,027,836 | ---- | M] () -- C:\Windows\SysNative\LexFiles.ulf
[2012/02/11 18:06:34 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\justin\Desktop\dds.com
[2012/02/10 17:27:37 | 000,061,440 | ---- | M] ( ) -- C:\Users\justin\Desktop\VEW.exe
[2012/02/10 17:23:08 | 002,059,824 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\justin\Desktop\tdsskiller.exe
[2012/02/10 16:19:13 | 004,733,440 | ---- | M] (AVAST Software) -- C:\Users\justin\Desktop\aswMBR.exe
[2012/02/09 14:43:34 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\justin\Desktop\OTL.exe
[2012/01/19 12:09:08 | 000,716,990 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/01/19 12:09:08 | 000,613,032 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/01/19 12:09:08 | 000,107,990 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[1 C:\Users\justin\Desktop\*.tmp files -> C:\Users\justin\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/14 11:31:20 | 000,000,979 | ---- | C] () -- C:\Users\justin\Desktop\AVG PC Tuneup 2011.lnk
[2012/02/14 09:37:01 | 057,618,500 | ---- | C] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm
[2012/02/14 09:36:01 | 000,031,970 | ---- | C] () -- C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2012/02/13 23:22:14 | 000,000,874 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2012.lnk
[2012/02/13 23:18:46 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm
[2012/02/13 23:18:46 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
[2012/02/13 22:11:54 | 000,023,604 | ---- | C] () -- C:\Users\justin\AppData\Roaming\UserTile.png
[2012/02/10 10:54:26 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/02/10 10:54:26 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/02/10 10:54:26 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/02/10 10:54:26 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/02/10 10:54:26 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/12/21 15:01:02 | 000,000,680 | ---- | C] () -- C:\Users\justin\AppData\Local\d3d9caps.dat
[2011/05/18 17:00:37 | 000,001,940 | ---- | C] () -- C:\Users\justin\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2011/05/13 10:25:57 | 000,000,064 | ---- | C] () -- C:\Windows\SysWow64\rp_stats.dat
[2011/05/13 10:25:57 | 000,000,044 | ---- | C] () -- C:\Windows\SysWow64\rp_rules.dat
[2011/04/16 20:04:21 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011/04/02 12:30:22 | 000,000,030 | ---- | C] () -- C:\Windows\SysWow64\brss01a.ini
[2011/04/02 12:30:13 | 000,000,463 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011/04/02 12:30:13 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2011/04/02 12:29:11 | 000,000,312 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2011/04/02 12:29:11 | 000,000,161 | ---- | C] () -- C:\Windows\brpcfx.ini
[2011/04/02 12:24:34 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\BrMuSNMP.dll
[2011/04/02 12:24:34 | 000,000,009 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2011/04/02 12:16:25 | 000,027,019 | ---- | C] () -- C:\Windows\maxlink.ini
[2010/12/11 22:55:35 | 000,000,064 | ---- | C] () -- C:\Windows\GPlrLanc.dat
[2010/04/26 15:58:03 | 000,000,094 | ---- | C] () -- C:\Users\justin\AppData\Local\fusioncache.dat
[2010/04/25 10:56:05 | 000,721,356 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/01/17 15:13:29 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2009/12/17 14:41:41 | 000,000,010 | ---- | C] () -- C:\Windows\popcinfo.dat
[2009/11/22 09:42:50 | 000,002,516 | -HS- | C] () -- C:\Windows\SysWow64\KGyGaAvL.sys
[2009/09/16 21:39:29 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009/09/16 21:39:05 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/09/16 21:38:45 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/03/31 22:28:51 | 000,000,074 | ---- | C] () -- C:\Windows\st_affiliate.ini
[2009/03/04 21:34:36 | 000,274,432 | ---- | C] () -- C:\Windows\SysWow64\dlcxinst.dll
[2009/03/04 21:34:35 | 000,454,656 | ---- | C] () -- C:\Windows\SysWow64\dlcxutil.dll
[2009/03/04 21:34:35 | 000,176,128 | ---- | C] () -- C:\Windows\SysWow64\dlcxinsb.dll
[2009/03/04 21:34:35 | 000,176,128 | ---- | C] () -- C:\Windows\SysWow64\dlcxins.dll
[2009/03/04 21:34:35 | 000,139,264 | ---- | C] () -- C:\Windows\SysWow64\dlcxjswr.dll
[2009/03/04 21:34:35 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\dlcxinsr.dll
[2009/03/04 21:34:35 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\dlcxcub.dll
[2009/03/04 21:34:35 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\dlcxcu.dll
[2009/03/04 21:34:35 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\dlcxcur.dll
[2009/03/04 21:34:33 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\DLCXcfg.dll
[2009/02/24 21:04:20 | 000,010,240 | ---- | C] () -- C:\Users\justin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/02/11 22:48:18 | 002,463,976 | ---- | C] () -- C:\Windows\SysWow64\NPSWF32.dll
[2009/01/24 11:43:59 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/01/24 11:21:02 | 003,107,788 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.dat
[2009/01/24 09:01:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/01/24 03:56:06 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008/01/20 21:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 10:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006/11/02 07:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 07:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006/11/02 04:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2002/12/11 18:19:34 | 000,708,608 | ---- | C] () -- C:\Windows\SysWow64\ltcry13n.dll
[2002/12/11 18:19:34 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\lttls13n.dll
[2002/03/04 09:16:34 | 000,110,592 | R--- | C] () -- C:\Windows\SysWow64\Jpeg32.dll
[2000/04/12 16:28:12 | 000,118,784 | ---- | C] () -- C:\Windows\SysWow64\lfkodak.dll
[2000/04/12 16:24:10 | 000,338,944 | ---- | C] () -- C:\Windows\SysWow64\lffpx7.dll

========== LOP Check ==========

[2011/10/04 11:41:34 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\.myPANTONE palettes
[2009/03/18 17:37:24 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\888poker.net
[2010/03/25 11:52:41 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Absolutist
[2009/07/25 19:59:08 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\acccore
[2010/02/28 19:27:27 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Alawar
[2012/02/14 11:32:32 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\AVG
[2012/02/14 05:01:40 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\AVG2012
[2010/09/03 17:21:14 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/03/13 08:26:44 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\ElementalsTheMagicKey
[2010/02/25 15:02:04 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Fabulous Finds
[2010/01/08 22:05:16 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Farm Mania 2
[2011/04/30 07:33:34 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\funkitron
[2011/03/27 10:53:52 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\GAS Softwares
[2010/02/25 10:33:33 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Home Sweet Home
[2010/01/17 15:20:09 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\iWin
[2010/02/24 21:32:35 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Jane s Hotel Family Hero
[2009/08/10 10:07:26 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Ludia
[2012/01/30 23:05:43 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Masque
[2010/12/11 22:58:19 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Meridian93
[2010/02/26 10:57:07 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\My Games
[2010/12/01 21:01:13 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Old Castle
[2011/04/02 13:05:05 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\PC-FAX TX
[2012/02/13 22:11:54 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\PeerNetworking
[2010/02/25 21:29:24 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\PlayFirst
[2010/03/01 20:21:11 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Playrix Entertainment
[2010/02/23 13:45:01 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\PoBros
[2010/02/28 14:35:02 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Pogo Games
[2010/03/30 16:07:02 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Singlesnet
[2009/11/01 19:15:45 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\SpinTop
[2009/11/01 19:16:39 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\SpinTop Games
[2012/02/09 12:50:34 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Tific
[2010/02/23 16:17:42 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\TitanicMystery
[2010/02/25 10:11:12 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\Virtual City
[2009/06/12 08:20:33 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\VTExtra
[2009/06/30 21:52:18 | 000,000,000 | ---D | M] -- C:\Users\justin\AppData\Roaming\WeatherBug
[2012/02/14 11:51:18 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:0B4227B4
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5D432CE3
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:5C321E34

< End of report >

#24
smuckerzs

Posted 14 February 2012 - 11:05 AM

Member

Topic Starter
Member
26 posts

What are all the "C:\Users\justin\AppData\Roaming" because I see things in that list that i have not used in a very long time or that I thought I had deleted?

#25
RKinner

Posted 14 February 2012 - 11:33 AM

Malware Expert

Expert
24,625 posts

C:\Users\justin\AppData\Roaming is where programs store data. When you uninstall programs they always don't remove their data. If you see a folder for some program you don't have any more you can delete the folder.

Copy the text in the code box by highlighting and Ctrl + c


:processes
killallprocesses

:OTL
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html File not found
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} http://download.micr...D0C/wmv9dmo.cab (Reg Error: KeO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7A06CE5B-D159-4F47-8C64-F8325CD80315}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C4931226-4902-4CD5-BED1-D6CFD967BA78}: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9BB3FC6-A3FA-4A36-9F5C-5D4D39303058}: DhcpNameServer = 192.168.254.254

:files
ipconfig /all /c
tracert -d 8.8.8.8 /c
netstart -s /c
netstart -an /c
netstat -rn /c
nslookup att.com /c
type \Windows\SysWow64\tcpmon.ini /c

:Commands
[EMPTYFLASH]
[EMPTYJAVA]
[purity]
[Reboot]

then Rightclick on OTL and select Run As Administrator to start. Under the Custom Scans/Fixes box at the bottom, paste (ctrl +v) the text. Verify that you got it all and Then click the RUN FIX button (NOT THE QUICK SCAN button!) at the top
Let the program run unhindered, OTL will reboot the PC when it is done. Save the log and copy and paste it into a reply.

#26
smuckerzs

Posted 14 February 2012 - 11:43 AM

Member

Topic Starter
Member
26 posts

ugh im still getting the connection timed out and the server not found

========== PROCESSES ==========
All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Google Sidewiki...\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Google Sidewiki...\ not found.
Starting removal of ActiveX control {33564D57-9980-0010-8000-00AA00389B71}
C:\Windows\Downloaded Program Files\wmv9dmo.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-9980-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-9980-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-9980-0010-8000-00AA00389B71}\ not found.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer| /E : value set successfully!
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7A06CE5B-D159-4F47-8C64-F8325CD80315}\\DhcpNameServer| /E : value set successfully!
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C4931226-4902-4CD5-BED1-D6CFD967BA78}\\DhcpNameServer| /E : value set successfully!
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{E9BB3FC6-A3FA-4A36-9F5C-5D4D39303058}\\DhcpNameServer| /E : value set successfully!
========== FILES ==========
< ipconfig /all /c >
Windows IP Configuration
Host Name . . . . . . . . . . . . : Rahja
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : carolina.rr.com
Ethernet adapter Bluetooth Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 00-19-7E-E6-A6-41
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : carolina.rr.com
Description . . . . . . . . . . . : Intel® 82567LF-2 Gigabit Network Connection
Physical Address. . . . . . . . . : 00-21-9B-1E-53-CF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::7c84:1691:bbb7:1ab2%11(Preferred)
IPv4 Address. . . . . . . . . . . : 75.181.168.230(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.252.0
Lease Obtained. . . . . . . . . . : Tuesday, February 14, 2012 11:52:54 AM
Lease Expires . . . . . . . . . . : Tuesday, February 14, 2012 10:57:27 PM
Default Gateway . . . . . . . . . : 75.181.168.1
DHCP Server . . . . . . . . . . . : 10.216.128.1
DHCPv6 IAID . . . . . . . . . . . : 251666843
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-11-0C-8F-94-00-21-9B-1E-53-CF
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Local Area Connection* 6:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : carolina.rr.com
Description . . . . . . . . . . . : isatap.carolina.rr.com
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 7:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:1886:33eb:b44a:5719(Preferred)
Link-local IPv6 Address . . . . . : fe80::1886:33eb:b44a:5719%10(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter Local Area Connection* 12:
Connection-specific DNS Suffix . : carolina.rr.com
Description . . . . . . . . . . . : 6TO4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2002:4bb5:a8e6::4bb5:a8e6(Preferred)
Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter Local Area Connection* 14:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 15:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 17:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{DA84CFFB-B062-4CA5-A7CD-412AB71FA61F}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
< tracert -d 8.8.8.8 /c >
Tracing route to 8.8.8.8 over a maximum of 30 hops
1 75.181.168.230 reports: Destination host unreachable.
Trace complete.
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
< netstart -s /c >
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
< netstart -an /c >
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
< netstat -rn /c >
===========================================================================
Interface List
13 ...00 19 7e e6 a6 41 ...... Bluetooth Device (Personal Area Network)
11 ...00 21 9b 1e 53 cf ...... Intel® 82567LF-2 Gigabit Network Connection
1 ........................... Software Loopback Interface 1
22 ...00 00 00 00 00 00 00 e0 isatap.carolina.rr.com
10 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
23 ...00 00 00 00 00 00 00 e0 6TO4 Adapter
15 ...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter #2
16 ...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter #3
17 ...00 00 00 00 00 00 00 e0 isatap.{DA84CFFB-B062-4CA5-A7CD-412AB71FA61F}
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 75.181.168.1 75.181.168.230 20
75.181.168.0 255.255.252.0 On-link 75.181.168.230 276
75.181.168.230 255.255.255.255 On-link 75.181.168.230 276
75.181.171.255 255.255.255.255 On-link 75.181.168.230 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 75.181.168.230 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 75.181.168.230 276
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
23 1125 ::/0 2002:c058:6301::c058:6301
1 306 ::1/128 On-link
10 18 2001::/32 On-link
10 266 2001:0:4137:9e76:1886:33eb:b44a:5719/128
On-link
23 1025 2002::/16 On-link
23 281 2002:4bb5:a8e6::4bb5:a8e6/128
On-link
11 276 fe80::/64 On-link
10 266 fe80::/64 On-link
10 266 fe80::1886:33eb:b44a:5719/128
On-link
11 276 fe80::7c84:1691:bbb7:1ab2/128
On-link
1 306 ff00::/8 On-link
10 266 ff00::/8 On-link
11 276 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
< nslookup att.com /c >
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: fec0:0:0:ffff::1
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
< type \Windows\SysWow64\tcpmon.ini /c >
;
; Used by Standard TCP/IP Port Monitor to determine the type of port
;
;
; Section names should be less than 60 characters
;
[Ports]
"*SAVIN Network Printer C model*" = SAVIN_Cmodel
"*Gestetner Network Printer C model*" = Gestetner_Cmodel
"*NRG Network Printer C model*" = NRG_Cmodel
"*infotec Network Printer C model*" = infotec_Cmodel
"*LANIER Network Printer C model*" = LANIER_Cmodel
"*EasyLAN 10i2*" = IMC_10i2
"*EasyLAN Wireless*" = IMC_Wireless
"*Paxar*" = Paxar
"*ExtendNet 100zx" = TROY_100ZX
"*ExtendNet 100x" = TROY_100X
"*ExtendNet 100s" = TROY_100S
"*ExtendNet 100i" = TROY_100I
"*ExtendNet EIX" = TROY_EIX
"*ExtendNet SX" = TROY_SX
"*ExtendNet DX" = TROY_DX
"*ExtendNet MPX" = TROY_MPX
"*ExtendNet*" = TROY_GENERIC
"*PocketPr*" = TROY_PPRO
"*Pony com*" = TROY_PONY
"*Pony 100*" = TROY_P100
"*XJet*" = TROY_XJET
"*XConnectII*" = TROY_XC2
"*XConnect 100*" = TROY_4
"*EtherWind *Wireless*" = TROY_WIFI
"*TROY*" = TROY_GENERIC
"JC-CONNECT*" = silex_JC-CONNECT
"PRICOM*" = silex_PRICOM
"*PRICOM 7*" = silex_PRICOM_7000
"HP *J.sp.00*" = HP_JD_EX_1
"HP *B.*JETDIRECT EX*" = HP_JD_EX_1
"HP *JETDIRECT EX*B.*" = HP_JD_EX_1
"HP *JETDIRECT EX*E.*" = HP_JD_EX_1
"HP *JETDIRECT EX*F.*" = HP_JD_EX_1
"HP *JETDIRECT EX*H.*" = HP_JD_EX_1
"HP *JETDIRECT EX*" = HP_JD_EX
"HP *" = HP_Jetdirect
"Lexmark N4000e" = Lexmark_ex_USB_1
"Lexmark Optra *" = Lexmark_Optra
"Lexmark MarkNet XLe 30*" = Lexmark_ex_3
"MarkNet Pro 3*" = Lexmark_ex_3
"MarkNet Pro 1*" = Lexmark_ex_1
"Lexmark MarkNet XLe 20*" = Lexmark_ex_2
"MarkNet X203*" = Lexmark_ex_3
"MarkNet X201*" = Lexmark_ex_1
"Lexmark *" = Lexmark_Optra
"IBM Network*" = IBM_NP
"IBM InfoPrint*" = IBM_NP
"NetportExpress*PRO* 3-port*" = Intel_PRO_3
"NetportExpress*PRO* Single*" = Intel_PRO_1
"NetportExpress*PRO*External*" = Intel_PRO_3
"NetportExpress*PRO*Internal*" = Intel_PRO_MIO
"NetportExpress* 10* Single*" = Intel_486_1
"NetportExpress* 10* 3-port*" = Intel_486_3
"NetportExpress* 10/100" = Intel_486_1
"Canon Color Laser Beam Printer C LBP 460PS" = Canon_xjdirect
"CANON Network Color PS/PCL Board-A1" = Canon_xjprint
"CANON CP PS-A1" = Canon_xjprint
"CANON LBP-2260PS Ethernet Interface" = Canon_xjprint
"CANON Network Multi-PDL Printer Board-D1" = Canon_print_200_216
"CANON PS Network Printer Board-C1" = Canon_print_200_216
"CANON Network Printer Board-E1" = Canon_print_200_216
"Canon Network Printer Board-F1" = Canon_print_600_605
"Canon PS Network Printer Board-D1" = Canon_print_600_605
"Canon Network Multi-PDL Printer Board-H1" = Canon_print_300_405
"Canon PS Network Printer Board-E1" = Canon_print_300_405
"Canon Network Printer Board-K1" = Canon_print_300_405
"Canon MEDIO/Network Interface Board-E3J" = Canon_lpt1
"version 1" = Canon_lp
"Canon Network Interface Board-C1" = Canon_x
"NB-1" = Canon_x
"NB-2" = Canon_x
"Canon Inc., LBP-1760 Printer" = Canon_PASSTHRU_1
"Canon Inc., LBP-1760e Printer" = Canon_PASSTHRU_1
"Canon Inc., LBP-3260 Printer" = Canon_PASSTHRU_1
"Canon Inc., imageCLASS 4000 Printer" = Canon_PASSTHRU_1
"Network Printer Interface/E" = Canon_PASSTHRU_2
"Network Printer Interface/T" = Canon_PASSTHRU_2
"PS1300/ETX" = Canon_PASSTHRU_2
"Canon NB-*" = Canon_x
"Canon * /P*" = Canon_P9100
"Canon *" = Canon_z
"CASIO PAGEPRESTO *" = CASIO_NWIO
"CASIO *NW*" = CASIO_NW100
"CASIO *" = CASIO_NWIO
"NetQue*" = Emulex_ex
"NETJet*" = Emulex_MIO
"NQMATE*" = Emulex_ex_oneport
"PocketPS*" = Emulex_ex_oneport
"NQPro2*" = Emulex_ex_threeport
"*KYOCERA*" = Kyocera_EcoLAN
"Xerox Document Centre 240*" = Xerox_Document_Centre_240
"Xerox Document Centre 255*" = Xerox_Document_Centre_255
"Xerox Document Centre 265*" = Xerox_Document_Centre_265
"Xerox Document Centre*" = Xerox_DocumentCentre_Family
"1UP*" = Xerox_DocuCentre_240_255_265_L17
"E2D*" = Xerox_DocuCentre_240_255_265_L17
"R5F*" = Xerox_DocuCentre_240_255_265_L17
"R7F*" = Xerox_DocuCentre_240_255_265_L17
"3UP*" = Xerox_DocuCentre_240_255_265_L17
"E8D*" = Xerox_DocuCentre_240_255_265_L17
"T6C*" = Xerox_DocuCentre_240_255_265_L17
"T7C*" = Xerox_DocuCentre_240_255_265_L17
"E5C*" = Xerox_DocuCentre_240_255_265_L17
"E5D*" = Xerox_DocuCentre_240_255_265_L17
"E2C*" = Xerox_DocuCentre_240_255_265_L17
"R4F*" = Xerox_DocuCentre_240_255_265_L17
"R6F*" = Xerox_DocuCentre_240_255_265_L17
"2UP*" = Xerox_DocuCentre_240_255_265_L17
"E6D*" = Xerox_DocuCentre_240_255_265_L17
"181;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"131;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"132;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"191;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"192;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"161;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"162;*" = Xerox_DocuCentre_220_230_332_340_SESS121
"Xerox DocuPrint 4512*" = Xerox_docuprint_4512
"Xerox DocuPrint 4517*" = Xerox_docuprint_4517
"Xerox DocuPrint C55/C55mp*" = Xerox_docuprint_C55
"Xerox DocuPrint N24/N32*" = Xerox_docuprint_N24
"Xerox DocuPrint*" = Xerox_docuprint
"Xerox DocuTech 1*" = Xerox_DocuTech_100_120
"Xerox SESS SNMP Agent*" = Xerox_dcs
"Xerox Phaser*" = Xerox_Phaser
"Xerox WorkCentre*" = Xerox_WorkCentre
"Nuvera 120 LP*" = FX_Nuvera_120_LP
"Nuvera 1*" = Xerox_Nuvera_100_120
"Laser Press*" = FujiXerox_laserpress
"Able Model*" = FujiXerox_ablemodel
"DocuCentre*" = FujiXerox_docucentre
"FUJI XEROX Document Centre*" = FujiXerox_docucentre
"FUJI XEROX DocuCentre*" = FujiXerox_docucentre
"FUJI XEROX DocuColor*" = FujiXerox_docucolor
"FUJI XEROX DocuPrint*" = FujiXerox_docuprint
"FUJI XEROX ApeosPort*" = FujiXerox_apeosport
"Laser Wind*" = FujiXerox_laserwind
"Color Laser Wind*" = FujiXerox_colorlaserwind
"FUJI XEROX NIC*" = FujiXerox_NIC
"EPSON 3*" = Epson_Ex_3
"EPSON *" = Epson_Printer
"Brother NC*" = Brother_Print_Server
"Brother *" = Brother_Print_Server
"MFC-*" = Brother_NC8000
"Tektronix Phaser 300X*" = TEK_300X
"Tektronix*" = TEK
"OKI OkiLAN 6600g *" = OKIDATA2
"OKI OkiLAN 6500e *" = OKIDATA2
"OKI OkiLAN 5550e *" = OKIDATA3
"OKI OkiLAN 9200e *" = OKIDATA3
"OKI OkiLAN 6400e *" = OKIDATA3
"OKI OkiLAN 8150e *" = OKIDATA3
"OKI OkiLAN 8300e *" = OKIDATA3
"OKI OkiLAN 9100e *" = OKIDATA3
"OKI OkiLAN 8400e *" = OKIDATA3
"OKI OkiLAN 8450e *" = OKIDATA3
"OKI OkiLAN 8200e *" = OKIDATA3
"OKI OkiLAN 510w *" = OKIDATA3
"OKI OkiLAN 5540e *" = OKIDATA3
"OKI OkiLAN 5510e *" = OKIDATA3
"OKI OkiLAN 8100e *" = OKIDATA3
"OKI OkiLAN B62e *" = OKIDATA3
"OKI OkiLAN B63e *" = OKIDATA3
"OKI OkiLAN B83e *" = OKIDATA3
"OKI MLETB13 *" = OKIDATA3
"OKI MLETB14w *" = OKIDATA3
"OKI MLETB12 *" = OKIDATA3
"OkiLAN 6*" = Okidata_6100e
"OKILAN*" = OKIDATA
"Digital DNIC-E'Net*" = DIGITAL_LN17
"Digital DSTRP*" = DIGITAL_RP500
"Digital Laser Printer LN17+*" = DIGITAL_LN17
"DIGITAL Laser Printer LN20;*" = DIGITAL_LN20_LN40_LNC02
"DIGITAL Laser Printer LN40;*" = DIGITAL_LN20_LN40_LNC02
"DIGITAL Laser Printer LNC02;*" = DIGITAL_LN20_LN40_LNC02
"DIGITAL RP600 *" = DIGITAL_LN15
"Digital™ Printer Ethernet*" = DIGITAL_RP200
"Digital* PrintServer*" = DIGITAL_LPSxx
"PrintServer 32*" = DIGITAL_LPSxx
"turbo PrintServer20 *" = DIGITAL_LPSxx
"*imagio MF-P*" = RICOH_generic
"*imagio*" = RICOH_Cmodel
"IPSiO*" = RICOH_Cmodel
"NX-110*" = RICOH_Cmodel
"NX-210*" = RICOH_Cmodel
"NX-500*" = RICOH_Cmodel
"NX-1000*" = RICOH_Cmodel
"NX-510*" = RICOH_Cmodel
"*RICOH Network Printer C model*" = RICOH_Cmodel
"*RICOH Network Printer D model*" = RICOH_Dmodel
"*RICOH Network Printer E model*" = RICOH_Emodel
"*RICOH Network Printer H model*" = RICOH_Hmodel
"X Ricoh SPX*" = RICOH_Hmodel
"X Ricoh Inkjet*" = RICOH_Hmodel
"LinkCom*EIO*" = i-data_LinkCom_EIO
"LinkCom*MIO*" = i-data_LinkCom_MIO
"LinkCom*ISP*" = i-data_LinkCom_ISP
"LinkCom*" = i-data_LinkCom
"EasyCom*" = i-data_EasyCom
"PlusCom*" = i-data_PlusCom
"Minolta Network" = Minolta
"NEC870" = NEC_Network_Printer_PORT1
"NEC SuperScript *" = NEC_Network_Printer_PORT1
"NEC FastEthernet*" = NEC_Network_Printer
"NEC Ethernet *" = NEC_Network_Printer
"NEC *" = NEC_Network_Printer
"AXIS*(Ports 100)*" = AXIS_1P
"AXIS*(Ports 200)*" = AXIS_2P
"AXIS*(Ports 010)*" = AXIS_1U
"AXIS*(Ports 020)*" = AXIS_2U
"AXIS*(Ports 110)*" = AXIS_1P1U
"AXIS*(Ports 120)*" = AXIS_1P2U
"AXIS*(Ports 220)*" = AXIS_2P2U
"AXIS*(Ports 201)*" = AXIS_2P1S
"*(Ports 100)*" = NPS_1P
"*(Ports 200)*" = NPS_2P
"*(Ports 010)*" = NPS_1U
"*(Ports 020)*" = NPS_2U
"*(Ports 110)*" = NPS_1P1U
"*(Ports 120)*" = NPS_1P2U
"*(Ports 220)*" = NPS_2P2U
"*(Ports 201)*" = NPS_2P1S
"AXIS 1440*" = AXIS_1P
"AXIS 1620*" = AXIS_1P
"AXIS 18*" = AXIS_1P
"AXIS 540*542*" = AXIS_1P
"AXIS 5400*" = AXIS_1P
"AXIS 5470*" = AXIS_1P
"AXIS 640/642*" = AXIS_1P
"AXIS 560*" = AXIS_2P1S
"AXIS 570*" = AXIS_2P1S
"AXIS 660*" = AXIS_2P1S
"AXIS 670*" = AXIS_2P1S
"AXIS 5500*" = AXIS_1U
"AXIS 5550*" = AXIS_1P1U
"AXIS 5570*" = AXIS_1P1U
"AXIS 5670*" = AXIS_2P1S
"AXIS 5800*" = AXIS_2P
"AXIS 5900*" = AXIS_2P
"AXIS OfficeBasic USB*" = AXIS_1U
"AXIS OfficeBasic Parallel*" = AXIS_1P
"AXIS OfficeBasic Multiport*" = AXIS_2P
"AXIS OfficeBasic*" = AXIS_1P
"AXIS PrintPoint 1*" = AXIS_1P
"AXIS PrintPoint 5*" = AXIS_2P1S
"AXIS BT-840*" = AXIS_2P
"NPS 540*542*" = NPS_1P
"NPS 5400*" = NPS_1P
"NPS 5470*" = NPS_1P
"NPS 640/642*" = NPS_1P
"NPS 560*" = NPS_2P1S
"NPS 570*" = NPS_2P1S
"NPS 660*" = NPS_2P1S
"NPS 670*" = NPS_2P1S
"NPS 5500*" = NPS_1U
"NPS 5550*" = NPS_1P1U
"NPS 5570*" = NPS_1P1U
"NPS 5670*" = NPS_2P1S
"NPS 5800*" = NPS_2P
"NPS 5900*" = NPS_2P
"NPS OfficeBasic USB*" = NPS_1U
"NPS OfficeBasic Parallel*" = NPS_1P
"NPS OfficeBasic*" = NPS_1P
"NPS PrintPoint 1*" = NPS_1P
"NPS PrintPoint 5*" = NPS_2P1S
"Olivetti DP N*" = Olivetti_DP_N
"Compaq Laser Printer LNC02;*" = COMPAQ_LNC02
"Compaq Laser Printer LN*" = COMPAQ_LNxx
"GENICOM microLaser 200;*" = GENICOM_mL200_mL400_mLC4
"GENICOM microLaser 400;*" = GENICOM_mL200_mL400_mLC4
"GENICOM microLaser C4;*" = GENICOM_mL200_mL400_mLC4
"GENICOM microLaser *" = GENICOM_mLxxx
"GENICOM RP600*" = GENICOM_mL14
"QMS *" = QMS1
"Minolta-QMS *" = MINOLTA_QMS
"Oce digital 31x5*" = OCE_31x5
"Oce Power Print Controller Master*" = OCE_84x5_92xx
"Oce Power Print Controller*" = OCE_84x5
"Oce*" = OCE
"IC*2-*" = SEH_InterCon_Internal
"IC*11-*" = SEH_InterCon_Internal
"IC*7-*" = SEH_InterCon_EPSON
"IC*9-*" = SEH_InterCon_KYOCERA
"IC*5-*" = SEH_InterCon_POCKET
"IC*6-*" = SEH_InterCon_HP
"IC104-*" = SEH_InterCon_BOX1
"IC124-*" = SEH_InterCon_BOX1
"IC144-*" = SEH_InterCon_BOX1
"IC134-*" = SEH_InterCon_BOX2
"IC154-*" = SEH_InterCon_BOX2
"IC103-*" = SEH_InterCon_BOX3
"SB-*" = SEH_KYOCERA_SB
"XB-1*" = SEH_KYOCERA_XB1
"XB-3*" = SEH_KYOCERA_XB3
"NC-*" = SEH_KYOCERAMITA_NC
"PRINTSERVER*" = SEH_OEM
"Roland*" = SEH_ROLAND
"BaseLine*" = SEH_BaseLine
"PS01*" = SEH_InterCon_Internal
"PS03*" = SEH_InterCon_BOX3
"PS19*" = SEH_InterCon_KYOCERA
"PS23*" = SEH_InterCon_BOX3
"PS26*" = SEH_InterCon_HP
"PS34*" = SEH_InterCon_BOX2
"PS54*" = SEH_InterCon_BOX2
"PS102*" = SEH_InterCon_Internal
"PS104*" = SEH_InterCon_BOX1
"PS105*" = SEH_InterCon_POCKET
"PS112*" = SEH_InterCon_Internal
"PS113*" = SEH_InterCon_Internal
"PS152*" = SEH_InterCon_Internal
"SHARP MX*" = SHARP_MX
"SHARP AR*" = SHARP_AR
"SHARP FO*" = SHARP_FO
"Panasonic DP-C*" = Panasonic_Printer_RAW
"Panasonic KX*" = Panasonic_Printer_RAW
"Panasonic DP*" = Panasonic_Printer_LPR
"Panasonic UF*" = Panasonic_Printer_LPR
"Panafax*" = Panasonic_Printer_LPR
"*Panasonic*" = Panasonic_Printer_RAW
"Dell*" = Dell
"Samsung*" = SAMSUNG_PRINTER
"Toshiba e-STUDIO*" = Toshiba_e_STUDIO
[<Generic Network Card>]
PORTS = 1
NAME = "Generic Network Card"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[IMC_10i2]
NAME = "Intermec EasyLAN 10i2"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "?"
[IMC_Wireless]
NAME = "Intermec EasyLAN Wireless"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "?"
[PAXAR]
NAME = "PaxarNet"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "?"
[TROY_100ZX]
NAME = "TROY ExtendNet 100zx"
PORTS = 6
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Z-Link)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Z-Link)"
PROTOCOL3 = "RAW"
PORTNUMBER3 = 9102
SNMP3 = "?"
NAME3 = "Port 3 (Z-Link)"
PROTOCOL4 = "RAW"
PORTNUMBER4 = 9103
SNMP4 = "?"
NAME4 = "Port 4 (Z-Link)"
PROTOCOL5 = "RAW"
PORTNUMBER5 = 9104
SNMP5 = "?"
NAME5 = "Port 5 (Z-Link)"
PROTOCOL6 = "RAW"
PORTNUMBER6 = 9105
SNMP6 = "?"
NAME6 = "Port 6 (Z-Link)"
[TROY_100X]
NAME = "TROY ExtendNet 100x"
PORTS = 4
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Parallel)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Parallel)"
PROTOCOL3 = "RAW"
PORTNUMBER3 = 9102
SNMP3 = "?"
NAME3 = "Port 3 (Parallel)"
PROTOCOL4 = "RAW"
PORTNUMBER4 = 9103
SNMP4 = "?"
NAME4 = "Port 4 (ExtendedLink)"
[TROY_100S]
NAME = "TROY ExtendNet 100s"
PORTS = 2
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Parallel)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Serial)"
[TROY_100I]
NAME = "TROY ExtendNet 100i"
PORTS = 2
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (MIO)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Parallel)"
[TROY_EIX]
NAME = "TROY ExtendNet EIX"
PORTS = 2
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Parallel)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Parallel)"
[TROY_SX]
NAME = "TROY ExtendNet SX"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Parallel)"
[TROY_DX]
NAME = "TROY ExtendNet DX"
PORTS = 2
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Parallel)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Parallel)"
[TROY_MPX]
NAME = "TROY ExtendNet MPX"
PORTS = 4
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Port 1 (Parallel)"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Port 2 (Parallel)"
PROTOCOL3 = "RAW"
PORTNUMBER3 = 9102
SNMP3 = "?"
NAME3 = "Port 3 (ExtendedLink)"
PROTOCOL4 = "RAW"
PORTNUMBER4 = 9103
SNMP4 = "?"
NAME4 = "Port 4 (ExtendedLink)"
[TROY_GENERIC]
NAME = "TROY ExtendNet"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Port 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
[TROY_PPRO]
NAME = "TROY PocketPro"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Port 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
[TROY_PONY]
NAME = "TROY Pony"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "?"
[TROY_P100]
NAME = "TROY Pony 100"
PORTS = 2
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "?"
PROTOCOL2 = "RAW"
NAME2 = "Serial"
PORTNUMBER2 = 9101
SNMP2 = "?"
COMMUNITYNAME2 = "public2"
[TROY_XJET]
NAME = "TROY XJet"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[TROY_XC2]
NAME = "TROY XConnect II"
PORTS = 2
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "YES"
PROTOCOL2 = "RAW"
NAME2 = "Serial"
PORTNUMBER2 = 9101
SNMP2 = "?"
COMMUNITYNAME2 = "public2"
[TROY_4]
NAME = "TROY XConnect 100"
PORTS = 4
PROTOCOL1 = "RAW"
NAME1 = "Parallel 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
PROTOCOL2 = "RAW"
NAME2 = "Serial 1"
PORTNUMBER2 = 9101
SNMP2 = "?"
COMMUNITYNAME2 = "public2"
PROTOCOL3 = "RAW"
NAME3 = "Parallel 2"
PORTNUMBER3 = 9102
SNMP3 = "?"
COMMUNITYNAME3 = "public3"
PROTOCOL4 = "RAW"
NAME4 = "Serial 2"
PORTNUMBER4 = 9103
SNMP4 = "?"
COMMUNITYNAME4 = "public4"
[TROY_WIFI]
NAME = "TROY Wireless Print Server"
PORTS = 2
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "YES"
PROTOCOL2 = "RAW"
NAME2 = "Serial"
PORTNUMBER2 = 9101
SNMP2 = "?"
COMMUNITYNAME2 = "public2"
[silex_PRICOM]
Ports = 1
Name = "silex Print Server (PRICOM)"
Queue1 = "lp"
Protocol1 = "LPR"
SNMP1 = "No"
LPRDspool1 = 1
[silex_PRICOM_7000]
Ports = 5
Name = "silex Print Server (PRICOM 7000)"
Name1 = "USB port 1"
Queue1 = "lp_u1"
Protocol1 = "LPR"
SNMP1 = "No"
LPRDspool1 = 1
Name2 = "USB port 2"
Queue2 = "lp_u2"
Protocol2 = "LPR"
SNMP2 = "No"
LPRDspool2 = 1
Name3 = "USB port 3"
Queue3 = "lp_u3"
Protocol3 = "LPR"
SNMP3 = "No"
LPRDspool3 = 1
Name4 = "USB port 4"
Queue4 = "lp_u4"
Protocol4 = "LPR"
SNMP4 = "No"
LPRDspool4 = 1
Name5 = "parallel port"
Queue5 = "lp"
Protocol5 = "LPR"
SNMP5 = "No"
LPRDspool5 = 1
[silex_JC-CONNECT]
Ports = 1
Name = "silex Print Server (JC-CONNECT)"
Queue1 = "lp"
Protocol1 = "LPR"
SNMP1 = "No"
LPRDspool1 = 1
[Lexmark_ex_USB_1]
NAME = "Lexmark External Print Server (1 port USB)"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "USB 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.641.2.1.2.1.3.1"
[Lexmark_Optra]
PORTS = 1
NAME = "Lexmark Network Printer"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.641.2.1.2.1.3.1"
[Lexmark_ex_3]
NAME = "Lexmark External Print Server (3 port)"
PORTS = 3
PROTOCOL1 = "RAW"
NAME1 = "Parallel 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.641.2.1.2.1.3.1"
PROTOCOL2 = "RAW"
NAME2 = "Parallel 2"
PORTNUMBER2 = 9102
SNMP2 = "No"
PROTOCOL3 = "RAW"
NAME3 = "Serial"
PORTNUMBER3 = 9109
SNMP3 = "No"
[Lexmark_ex_2]
NAME = "Lexmark External Print Server (2 port)"
PORTS = 2
PROTOCOL1 = "RAW"
NAME1 = "Parallel 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.641.2.1.2.1.3.1"
PROTOCOL2 = "RAW"
NAME2 = "Parallel 2"
PORTNUMBER2 = 9102
SNMP2 = "No"
[Lexmark_ex_1]
NAME = "Lexmark External Print Server (1 port)"
PORTS = 1
PROTOCOL1 = "RAW"
NAME1 = "Parallel 1"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.641.2.1.2.1.3.1"
[HP_Jetdirect]
PORTS = 1
NAME = "Hewlett Packard Jet Direct"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.11.2.3.9.1.1.7.0"
[HP_JD_EX_1]
NAME = "Hewlett Packard JetDirect Ex (single port)"
PORTS = 1
NAME1 = "Parallel"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "No"
DEVICEIDOID1 = ".1.3.6.1.4.1.11.2.3.9.1.1.7.0"
[HP_JD_EX]
NAME = "Hewlett Packard JetDirect Ex (multi port)"
PORTS = 3
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
NAME1 = "Parallel 1"
DEVICEIDOID1 = ".1.3.6.1.4.1.11.2.3.9.1.1.7.0"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "?"
NAME2 = "Parallel 2"
COMMUNITYNAME2 = "public2"
PROTOCOL3 = "RAW"
PORTNUMBER3 = 9102
NAME3 = "Parallel 3"
SNMP3 = "?"
COMMUNITYNAME3 = "public3"
[IBM_NP]
PORTS = 1
NAME = "IBM Network Printer"
PROTOCOL1 = "LPR"
QUEUE1 = "PASS"
SNMP1 = "Yes"
[Intel_PRO_3]
NAME = "Intel NetportExpress PRO or PRO/100 3-port"
PORTS = 3
NAME1 = "Parallel 1"
QUEUE1 = "LPT1_PASSTHRU"
NAME2 = "Parallel 2"
QUEUE2 = "LPT2_PASSTHRU"
NAME3 = "Serial"
QUEUE3 = "COM1_PASSTHRU"
PROTOCOL1 = "LPR"
PROTOCOL2 = "LPR"
PROTOCOL3 = "LPR"
SNMP1 = "No"
SNMP2 = "No"
SNMP3 = "No"
[Intel_PRO_1]
NAME = "Intel NetportExpress PRO/100 Single-port"
PORTS = 1
NAME1 = "Parallel"
QUEUE1 = "LPT1_PASSTHRU"
PROTOCOL1 = "LPR"
SNMP1 = "No"
[Intel_PRO_MIO]
NAME = "Intel NetportExpress PRO Internal MIO"
PORTS = 1
NAME1 = "Internal"
QUEUE1 = "LPT1_PASSTHRU"
PROTOCOL1 = "LPR"
SNMP1 = "No"
[Intel_486_3]
NAME = "Intel NetportExpress 10 or 10/100 3-port"
PORTS = 3
NAME1 = "Parallel 1"
QUEUE1 = "LPT1_PASSTHRU"
NAME2 = "Parallel 2"
QUEUE2 = "LPT2_PASSTHRU"
NAME3 = "Serial"
QUEUE3 = "COM1_PASSTHRU"
PROTOCOL1 = "LPR"
PROTOCOL2 = "LPR"
PROTOCOL3 = "LPR"
SNMP1 = "?"
SNMP2 = "?"
SNMP3 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.343.2.4.14.3.5.1.1.12.1"
DEVICEIDOID2 = ".1.3.6.1.4.1.343.2.4.14.3.5.1.1.12.2"
[Intel_486_1]
NAME = "Intel NetportExpress 10 or 10/100 Single-port"
PORTS = 1
NAME1 = "Parallel"
QUEUE1 = "LPT1_PASSTHRU"
PROTOCOL1 = "LPR"
SNMP1 = "?"
[Canon_xjdirect]
NAME = "Canon Network Printing Device (E model-xjdirect)"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "xjdirect"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_xjprint]
NAME = "Canon Network Printing Device (E model-xjprint)"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "xjprint"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_print_200_216]
NAME = "Canon 2xx Series"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "print_200-216"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_print_600_605]
NAME = "Canon 6xx Series"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "print_600-605"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_print_300_405]
NAME = "Canon 3xx/4xx Series"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "print_300-405"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_lpt1]
NAME = "Canon MEDIO with NIB-E3J"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lpt1"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_x]
NAME = "Canon Network Printing Device(NT4.0 Compatible Mode)"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "x"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_lp]
NAME = "Canon Network Printer"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_PASSTHRU_1]
NAME = "Canon LBP with SNMP"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PASSTHRU"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_PASSTHRU_2]
NAME = "Canon LBP"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PASSTHRU"
SNMP1 = "Yes"
LPRDspool1 = 1
[Canon_P9100]
NAME = "Canon Network Printing Device with P9100"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[Canon_z]
NAME = "Canon Network Printing Device"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "z"
SNMP1 = "Yes"
[CASIO_NWIO]
NAME = "CASIO Network Printer (PAGEPRESTO compatible)"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "presto0"
SNMP1 = "?"
LPRDspool1 = 1
[CASIO_NW100]
NAME = "CASIO Network Printer"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "presto0"
SNMP1 = "Yes"
[Emulex_MIO]
NAME = "Emulex Internal MIO card"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PASSTHRU"
SNMP1 = "No"
[Emulex_ex]
NAME = "Emulex NetQue"
PORTS = 2
NAME1 = "Parallel"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 2501
SNMP1 = "No"
NAME2 = "Serial"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 2502
SNMP2 = "No"
[Emulex_ex_oneport]
NAME = "Emulex NetQue Pocket and NetQue Mate"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PASSTHRU"
SNMP1 = "No"
[Emulex_ex_threeport]
NAME = "Emulex NetQue Pro2"
PORTS = 3
NAME1 = "parallel1"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 2501
SNMP1 = "No"
NAME2 = "parallel2"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 2502
SNMP2 = "No"
NAME3 = "serial"
PROTOCOL3 = "RAW"
PORTNUMBER3 = 2503
SNMP3 = "No"
[Kyocera_EcoLAN]
NAME = "Kyocera Network Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[Xerox_DocuCentre_240_255_265_L17]
NAME = "Xerox Document Centre 240/255/265 ST/LP"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "No"
LPRDspool1 = 1
[Xerox_DocuCentre_220_230_332_340_SESS121]
NAME = "Xerox Document Centre 220/230/332/340"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[Xerox_Document_Centre_240]
NAME = "Xerox Document Centre 240 ST"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
[Xerox_Document_Centre_255]
NAME = "Xerox Document Centre 255 ST/LP"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
[Xerox_Document_Centre_265]
NAME = "Xerox Document Centre 265 ST/LP"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
[Xerox_DocumentCentre_Family]
NAME = "Xerox Document Centre Family"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
[Xerox_docuprint_4512]
NAME = "Xerox DocuPrint 4512"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PORT1"
SNMP1 = "Yes"
[Xerox_docuprint_4517]
NAME = "Xerox DocuPrint 4517"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PASSTHRU"
SNMP1 = "Yes"
[Xerox_docuprint_C55]
NAME = "Xerox DocuPrint C55/C55mp"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 2000
SNMP1 = "Yes"
[Xerox_docuprint_N24]
NAME = "Xerox DocuPrint N24/N32"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 2000
SNMP1 = "Yes"
[Xerox_docuprint]
NAME = "Xerox DocuPrint"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[Xerox_DocuTech_100_120]
NAME = "Xerox DocuTech 100/120"
PORTS = 2
NAME1 = "Socket Gateway (9100 Port)"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
NAME2 = "LPR Gateway"
PROTOCOL2 = "LPR"
QUEUE2 = "default"
SNMP2 = "Yes"
[Xerox_dcs]
NAME = "Xerox DCS"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "No"
[Xerox_Phaser]
NAME = "Xerox Phaser"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
DEVICEIDOID1 = ".1.3.6.1.4.1.253.8.51.1.2.1.20.1"
[Xerox_WorkCentre]
NAME = "Xerox WorkCentre"
PORTS = 1
PROTOCOL1 = "RAW"
QUEUE1 = "9100"
SNMP1 = "Yes"
DEVICEIDOID1 = ".1.3.6.1.4.1.253.8.51.1.2.1.20.1"
[Xerox_Nuvera_100_120]
Name = "Xerox Nuvera 100/120"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBERS1 = 9100
SNMP1 = "Yes"
[FX_Nuvera_120_LP]
Name = "Nuvera 120 LP"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBERS1 = 9100
SNMP1 = "Yes"
[FujiXerox_laserpress]
NAME = "Fuji Xerox Laser Press"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_ablemodel]
NAME = "Fuji Xerox Able Model"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_docucentre]
NAME = "Fuji Xerox DocuCentre"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_docucolor]
NAME = "Fuji Xerox DocuColor"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_docuprint]
NAME = "Fuji Xerox DocuPrint"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_apeosport]
NAME = "Fuji Xerox ApeosPort"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_laserwind]
NAME = "Fuji Xerox Laser Wind"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_colorlaserwind]
NAME = "Fuji Xerox Color Laser Wind"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[FujiXerox_NIC]
NAME = "Fuji Xerox NIC"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
LPRDspool1 = 1
[Epson_Printer]
NAME = "EPSON Network Printer"
PORTS = 1
PROTOCOL1 = "LPR"
SNMP1 = "?"
QUEUE1 = "PASSTHRU"
DEVICEIDOID1 = ".1.3.6.1.4.1.1248.1.2.2.1.1.1.1.1"
[Epson_Ex_3]
NAME = "EPSON External 3-port Print Server"
PORTS = 3
NAME1 = "Port1"
PROTOCOL1 = "LPR"
SNMP1 = "No"
QUEUE1 = "PORT1 PASSTHRU"
NAME2 = "Port2"
PROTOCOL2 = "LPR"
SNMP2 = "No"
QUEUE2 = "PORT2 PASSTHRU"
NAME3 = "Port3"
PROTOCOL3 = "LPR"
SNMP3 = "No"
QUEUE3 = "PORT3 PASSTHRU"
[Brother_Print_Server]
NAME = "Brother Print Server"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "BINARY_P1"
SNMP1 = "?"
LPRDspool1 = 1
DEVICEIDOID1 = ".1.3.6.1.4.1.2435.2.3.9.1.1.7.0"
[Brother_NC8000]
NAME = "Brother Print Server NC-8000"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "?"
LPRDspool1 = 1
DEVICEIDOID1 = ".1.3.6.1.4.1.2435.2.3.9.1.1.7.0"
[TEK_300X]
NAME = "Tektronix Phaser 300X"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "AUTO"
SNMP1 = "?"
LPRDspool1 = 1
[TEK]
NAME = "Tektronix Phaser Share"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[MINOLTA_QMS]
NAME = "Minolta-QMS Printer"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "crownnet"
SNMP1 = "Yes"
[QMS1]
NAME = "QMS printer"
PORTS = 1
PROTOCOL1 = "LPR"
LPRDspool1 = 1
QUEUE1 = "xxx"
SNMP1 = "?"
[RICOH_generic]
PORTS = 1
NAME = "RICOH Generic Network Printer"
PROTOCOL1 = "LPR"
LPRDspool1 = 1
QUEUE1 = "lp"
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[RICOH_Cmodel]
PORTS = 1
NAME = "RICOH Network Printer C model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[RICOH_Dmodel]
PORTS = 1
NAME = "RICOH Network Printer D model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 10001
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[RICOH_Emodel]
PORTS = 1
NAME = "RICOH Network Printer E model"
PROTOCOL1 = "LPR"
QUEUE1 = "PASSTHRU"
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[RICOH_Hmodel]
PORTS = 1
NAME = "RICOH Network Printer H model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[SAVIN_Cmodel]
PORTS = 1
NAME = "SAVIN Network Printer C model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[Gestetner_Cmodel]
PORTS = 1
NAME = "Gestetner Network Printer C model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[NRG_Cmodel]
PORTS = 1
NAME = "NRG Network Printer C model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[infotec_Cmodel]
PORTS = 1
NAME = "infotec Network Printer C model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[LANIER_Cmodel]
PORTS = 1
NAME = "LANIER Network Printer C model"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
DEVICEIDOID1 = ".1.3.6.1.4.1.367.3.2.1.1.1.11.0"
[i-data_LinkCom_EIO]
NAME = "i-data LinkCom EIO"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[i-data_LinkCom_MIO]
NAME = "i-data LinkCom MIO"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[i-data_LinkCom_ISP]
NAME = "i-data LinkCom ISP"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[i-data_LinkCom]
NAME = "i-data LinkCom"
PORTS = 2
NAME1 = "PAR1"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
NAME2 = "PAR2"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "Yes"
[i-data_PlusCom]
NAME = "i-data PlusCom"
PORTS = 2
NAME1 = "PAR1"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
NAME2 = "PAR2"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 9101
SNMP2 = "Yes"
[i-data_EasyCom]
NAME = "i-data EasyCom"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[Minolta]
NAME = "Minolta Network Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[NEC_Network_Printer]
PORTS = 1
NAME = "NEC Network Printer"
PROTOCOL1 = "LPR"
SNMP1 = "?"
LPRDspool1 = 1
[NEC_Network_Printer_PORT1]
PORTS = 1
NAME = "NEC Network Printer PORT1"
PROTOCOL1 = "LPR"
QUEUE1 = "PORT1"
SNMP1 = "?"
LPRDspool1 = 1
[AXIS_1P]
NAME = "Axis Print Server (1 Port - Parallel)"
PORTS = 1
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
[AXIS_1U]
NAME = "Axis Print Server (1 Port - USB)"
PORTS = 1
NAME1 = "USB1"
PROTOCOL1 = "LPR"
QUEUE1 = "USB1"
SNMP1 = "Yes"
[AXIS_2P]
NAME = "Axis Print Server (2 Ports - Parallel)"
PORTS = 2
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "LPT2"
PROTOCOL2 = "LPR"
QUEUE2 = "LPT2"
SNMP2 = "Yes"
[AXIS_2U]
NAME = "Axis Print Server (2 Ports - USB)"
PORTS = 2
NAME1 = "USB1"
PROTOCOL1 = "LPR"
QUEUE1 = "USB1"
SNMP1 = "Yes"
NAME2 = "USB2"
PROTOCOL2 = "LPR"
QUEUE2 = "USB2"
SNMP2 = "Yes"
[AXIS_1P1U]
NAME = "Axis Print Server (2 Ports - Parallel and USB)"
PORTS = 2
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "USB1"
PROTOCOL2 = "LPR"
QUEUE2 = "USB1"
SNMP2 = "Yes"
[AXIS_1P2U]
NAME = "Axis Print Server (3 Ports - 1 Parallel and 2 USB)"
PORTS = 3
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "USB1"
PROTOCOL2 = "LPR"
QUEUE2 = "USB1"
SNMP2 = "Yes"
NAME3 = "USB2"
PROTOCOL3 = "LPR"
QUEUE3 = "USB2"
SNMP3 = "Yes"
[AXIS_2P2U]
NAME = "Axis Print Server (4 Ports - 2 Parallel and 2 USB)"
PORTS = 4
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "LPT2"
PROTOCOL2 = "LPR"
QUEUE2 = "LPT2"
SNMP2 = "Yes"
NAME3 = "USB1"
PROTOCOL3 = "LPR"
QUEUE3 = "USB1"
SNMP3 = "Yes"
NAME4 = "USB2"
PROTOCOL4 = "LPR"
QUEUE4 = "USB2"
SNMP4 = "Yes"
[AXIS_2P1S]
NAME = "Axis Print Server (3 Ports - 2 Parallel and 1 Serial)"
PORTS = 3
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "LPT2"
PROTOCOL2 = "LPR"
QUEUE2 = "LPT2"
SNMP2 = "Yes"
NAME3 = "COM1"
PROTOCOL3 = "LPR"
QUEUE3 = "COM1"
SNMP3 = "Yes"
[NPS_1P]
NAME = "Network Print Server (1 Port - Parallel)"
PORTS = 1
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
[NPS_1U]
NAME = "Network Print Server (1 Port - USB)"
PORTS = 1
NAME1 = "USB1"
PROTOCOL1 = "LPR"
QUEUE1 = "USB1"
SNMP1 = "Yes"
[NPS_2P]
NAME = "Network Print Server (2 Ports - Parallel)"
PORTS = 2
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "LPT2"
PROTOCOL2 = "LPR"
QUEUE2 = "LPT2"
SNMP2 = "Yes"
[NPS_2U]
NAME = "Network Print Server (2 Ports - USB)"
PORTS = 2
NAME1 = "USB1"
PROTOCOL1 = "LPR"
QUEUE1 = "USB1"
SNMP1 = "Yes"
NAME2 = "USB2"
PROTOCOL2 = "LPR"
QUEUE2 = "USB2"
SNMP2 = "Yes"
[NPS_1P1U]
NAME = "Network Print Server (2 Ports - Parallel and USB)"
PORTS = 2
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "USB1"
PROTOCOL2 = "LPR"
QUEUE2 = "USB1"
SNMP2 = "Yes"
[NPS_1P2U]
NAME = "Network Print Server (3 Ports - 1 Parallel and 2 USB)"
PORTS = 3
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "USB1"
PROTOCOL2 = "LPR"
QUEUE2 = "USB1"
SNMP2 = "Yes"
NAME3 = "USB2"
PROTOCOL3 = "LPR"
QUEUE3 = "USB2"
SNMP3 = "Yes"
[NPS_2P2U]
NAME = "Network Print Server (4 Ports - 2 Parallel and 2 USB)"
PORTS = 4
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "LPT2"
PROTOCOL2 = "LPR"
QUEUE2 = "LPT2"
SNMP2 = "Yes"
NAME3 = "USB1"
PROTOCOL3 = "LPR"
QUEUE3 = "USB1"
SNMP3 = "Yes"
NAME4 = "USB2"
PROTOCOL4 = "LPR"
QUEUE4 = "USB2"
SNMP4 = "Yes"
[NPS_2P1S]
NAME = "Network Print Server (3 Ports - 2 Parallel and 1 Serial)"
PORTS = 3
NAME1 = "LPT1"
PROTOCOL1 = "LPR"
QUEUE1 = "LPT1"
SNMP1 = "Yes"
NAME2 = "LPT2"
PROTOCOL2 = "LPR"
QUEUE2 = "LPT2"
SNMP2 = "Yes"
NAME3 = "COM1"
PROTOCOL3 = "LPR"
QUEUE3 = "COM1"
SNMP3 = "Yes"
[Olivetti_DP_N]
NAME = "Olivetti DP"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "Yes"
[COMPAQ_LNC02]
NAME = "Compaq Laser Printer LNC02"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 6869
SNMP1 = "?"
[COMPAQ_LNxx]
NAME = "Compaq LN Series Laser Printer (most models)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[DIGITAL_LN15]
NAME = "DIGITAL LN15 Series Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 3001
SNMP1 = "No"
[DIGITAL_LN17]
NAME = "DIGITAL LN17 Series Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 2501
SNMP1 = "?"
[DIGITAL_LN20_LN40_LNC02]
NAME = "DIGITAL Laser Printer LN20, LN40, or LNC02"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 6869
SNMP1 = "?"
[DIGITAL_LPSxx]
NAME = "DIGITAL PrintServer Printer"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "xxx"
SNMP1 = "No"
LPRDspool1 = 1
[DIGITAL_RP200]
NAME = "DIGITAL RapidPrint 200 Server"
PORTS = 2
NAME1 = "Parallel"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 10001
SNMP1 = "No"
NAME2 = "Serial"
PROTOCOL2 = "RAW"
PORTNUMBER2 = 10002
SNMP2 = "No"
[DIGITAL_RP500]
NAME = "DIGITAL RapidPrint 500 Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 3001
SNMP1 = "No"
[GENICOM_mL14]
NAME = "GENICOM microLaser 14 Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 3001
SNMP1 = "No"
[GENICOM_mL200_mL400_mLC4]
NAME = "GENICOM microLaser 200, 400, or C4 Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 6869
SNMP1 = "?"
[GENICOM_mLxxx]
NAME = "GENICOM microLaser Series Printer (most models)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[OCE_31x5]
PORTS = 1
NAME = "Oce digital 31x5 Printer Port"
PROTOCOL1 = "LPR"
QUEUE1 = "LPQUEUE"
SNMP1 = "Yes"
[OCE_84x5]
PORTS = 1
NAME = "Oce 84x5 Printer Port"
PROTOCOL1 = "LPR"
QUEUE1 = "LPQUEUE"
SNMP1 = "Yes"
[OCE_84x5_92xx]
PORTS = 1
NAME = "Oce 84x5/92xx Printer Port"
PROTOCOL1 = "LPR"
QUEUE1 = "LPQUEUE"
SNMP1 = "No"
[OCE]
PORTS = 1
NAME = "Oce Printer Port"
PROTOCOL1 = "LPR"
QUEUE1 = "LPQUEUE"
SNMP1 = "No"
[SEH_InterCon_Internal]
NAME = "SEH InterCon Print Server (Internal Centronics)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_InterCon_HP]
NAME = "SEH InterCon Print Server (HP)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_InterCon_EPSON]
NAME = "SEH InterCon Print Server (EPSON)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_InterCon_KYOCERA]
NAME = "SEH InterCon Print Server (KYOCERA)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_InterCon_POCKET]
NAME = "SEH InterCon Print Server (POCKET)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_InterCon_BOX1]
NAME = "SEH InterCon Print Server (BOX)"
PORTS = 4
PROTOCOL1 = "RAW"
NAME1 = "Parallel 1"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
PROTOCOL2 = "RAW"
NAME2 = "Parallel 2"
PORTNUMBER2 = 9101
SNMP2 = "YES"
COMMUNITYNAME2 = "public"
PROTOCOL3 = "RAW"
NAME3 = "Parallel 3"
PORTNUMBER3 = 9102
COMMUNITYNAME3 = "public"
SNMP3 = "YES"
PROTOCOL4 = "RAW"
NAME4 = "COM 1"
PORTNUMBER4 = 9103
SNMP4 = "YES"
COMMUNITYNAME4 = "public"
[SEH_InterCon_BOX2]
NAME = "SEH InterCon Print Server (BOX)"
PORTS = 2
PROTOCOL1 = "RAW"
NAME1 = "Parallel"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
PROTOCOL2 = "RAW"
NAME2 = "USB"
PORTNUMBER2 = 9101
SNMP2 = "YES"
COMMUNITYNAME2 = "public"
[SEH_InterCon_BOX3]
NAME = "SEH InterCon Print Server (BOX)"
PORTS = 2
PROTOCOL1 = "RAW"
NAME1 = "USB1"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
PROTOCOL2 = "RAW"
NAME2 = "USB2"
PORTNUMBER2 = 9101
SNMP2 = "YES"
COMMUNITYNAME2 = "public"
[SEH_KYOCERA_SB]
NAME = "Kyocera Mita Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_KYOCERA_XB1]
NAME = "External Pocket Kyocera Mita Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_KYOCERA_XB3]
NAME = "External Box Kyocera Mita Print Server"
PORTS = 4
PROTOCOL1 = "RAW"
NAME1 = "Parallel 1"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
PROTOCOL2 = "RAW"
NAME2 = "Parallel 2"
PORTNUMBER2 = 9101
SNMP2 = "YES"
COMMUNITYNAME2 = "public"
PROTOCOL3 = "RAW"
NAME3 = "Parallel 3"
PORTNUMBER3 = 9102
SNMP3 = "YES"
COMMUNITYNAME3 = "public"
PROTOCOL4 = "RAW"
NAME4 = "COM 1"
PORTNUMBER4 = 9103
SNMP4 = "No"
[SEH_KYOCERAMITA_NC]
NAME = "Multiprotocol Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_OEM]
NAME = "Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_ROLAND]
NAME = "Roland Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
COMMUNITYNAME1 = "public"
[SEH_BaseLine]
NAME = "SEH BaseLine Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[SHARP_MX]
Ports = 1
Name = "SHARP MX"
Queue1 = "lp"
Protocol1 = "LPR"
SNMP1 = "No"
LPRDspool1 = 0
[SHARP_AR]
Ports = 1
Name = "SHARP AR"
Queue1 = "lp"
Protocol1 = "LPR"
SNMP1 = "No"
LPRDspool1 = 0
[SHARP_FO]
Ports = 1
Name = "SHARP FO"
Queue1 = "lp"
Protocol1 = "LPR"
SNMP1 = "No"
LPRDspool1 = 0
[Panasonic_Printer_RAW]
NAME = "Panasonic Network Printer RAW"
PORTS = 1
NAME1 = "RAW Port"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[Panasonic_Printer_LPR]
NAME = "Panasonic Network Printer LPR"
PORTS = 1
NAME1 = "LPR Port"
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
LPRDspool1 = 1
SNMP1 = "?"
[Dell]
NAME = "Dell Netowrk Printer"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "lp"
SNMP1 = "Yes"
[SAMSUNG_PRINTER]
PORTS = 1
NAME = "Samsung Printer"
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "No"
DEVICEIDOID1 = ".1.3.6.1.4.1.236.11.5.1.1.1.26.0"
[Toshiba_e_STUDIO]
NAME = "Toshiba e-STUDIO Series Network Printer"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "YES"
[OKIDATA]
NAME = "Okidata Network Printer"
PORTS = 1
PROTOCOL1 = "LPR"
QUEUE1 = "PORT_1"
SNMP1 = "No"
[Okidata_6100e]
NAME = "OKI 6000 Series Network Print Server"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
[OKIDATA2]
NAME = "OKI Network Print Device (9102)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9102
SNMP1 = "?"
[OKIDATA3]
NAME = "OKI Network Print Device (9100)"
PORTS = 1
PROTOCOL1 = "RAW"
PORTNUMBER1 = 9100
SNMP1 = "?"
C:\Users\justin\Desktop\cmd.bat deleted successfully.
C:\Users\justin\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: AppData

User: Default

User: Default User

User: justin
->Flash cache emptied: 470 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb

[EMPTYJAVA]

User: All Users

User: AppData

User: Default

User: Default User

User: justin
->Java cache emptied: 0 bytes

User: Public

Total Java Files Cleaned = 0.00 mb

OTL by OldTimer - Version 3.2.31.0 log created on 02142012_123734

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

#27
smuckerzs

Posted 14 February 2012 - 11:46 AM

Member

Topic Starter
Member
26 posts

#28
smuckerzs

Posted 14 February 2012 - 12:07 PM

Member

Topic Starter
Member
26 posts

Just got this error:

Windows Defender

application failed to initialize: 0x800106ba. A problem caused this program's service to stop. To start, restart your computer or search help and support for how to start a service manually.

I have restarted and have been unable to turn it on through security.

Also, in the manage computer, under event viewer, and applications, there is an error:

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

The COM+ Event System could not remove the EventSystem.EventSubscription object {CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The HRESULT was 80070005.

The entry <C:\USERS\JUSTIN\APPDATA\LOCAL\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\MSHIST012012021420120215> in the hash map cannot be updated.

Context: Application, SystemIndex Catalog

Details:
A device attached to the system is not functioning. (0x8007001f)

Activation context generation failed for "C:\Program Files (x86)\Adobe\Acrobat 9.0\Designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

The COM+ Event System could not remove the EventSystem.EventSubscription object {CEB8B221-89C5-41A8-98CE-79B413BF150B}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The HRESULT was 80070005.

Then Warnings:

The content source <iehistory://{s-1-5-21-2380949953-2287432058-1739909872-1000}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
The filtering was stopped because of a user action, such as stopping the crawl. (0x80040d54)

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
0 user registry handles leaked from \Registry\User\S-1-5-21-2380949953-2287432058-1739909872-1000:

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-2380949953-2287432058-1739909872-1000_Classes:
Process 1632 (\Device\HarddiskVolume3\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-2380949953-2287432058-1739909872-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache

There are also some errors under system to, no clue if any of this helps

#29
RKinner

Posted 14 February 2012 - 07:55 PM

Malware Expert

Expert
24,625 posts

It doesn't look like your network is working correctly.

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Type with an Enter after each line:

ping  75.181.168.1

You should get something like:

Pinging 75.181.168.1 with 32 bytes of data:
Reply from 75.181.168.1: bytes=32 time=2ms TTL=64
Reply from 75.181.168.1: bytes=32 time=2ms TTL=64
Reply from 75.181.168.1: bytes=32 time=2ms TTL=64
Reply from 75.181.168.1: bytes=32 time=2ms TTL=64

Ping statistics for 75.181.168.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 2ms, Average = 2ms