Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Virus Infection - Programmes Disabled

Started by elielieli , Nov 18 2015 05:37 AM

Please log in to reply

#1
elielieli

Posted 18 November 2015 - 05:37 AM

Member

Member
176 posts

hi folks

opened up my computer this morning and found that all the programs were missing.

to begin with they're all listed , but when you drag the cursor onto them it says they're empty.

then everything on the list disappears and so does everything on the desktop.

everything resumes on start up , only to be repeated.

basically , nothing works.

prior to this problem i'd 'd downloaded some programme called Free Ram xp Pro , via the cnet website.

this seemed to do nothing , but i did notice a green rectangular icon on the task bar that wasn't there before.

i removed it via 'add/remove programmes' in control panel.

it wasn't until restart that the problem manifested.

I've run malwarebytes and spybot in safe mode , with no positive results.

OS is XP

Asus laptop.

Please help!

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:18-11-2015

Ran by Asus (administrator) on ASUS-LAPTOP (19-11-2015 12:10:04)

Running from C:\Documents and Settings\Asus\Desktop

Loaded Profiles: Asus (Available Profiles: Asus)

Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)

Internet Explorer Version 6 (Default browser: IE)

Boot Mode: Safe Mode (minimal)

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ehTray] => C:\WINDOWS\ehome\ehtray.exe [59392 2004-08-10] (Microsoft Corporation)

HKLM\...\Run: [VersatoMs] => C:\Program Files\MagicMus\MulMouse.exe [282624 2004-06-17] ()

HKLM\...\Run: [SMSERIAL] => C:\WINDOWS\sm56hlpr.exe [544768 2006-01-20] (Motorola Inc.)

HKLM\...\Run: [IntelZeroConfig] => C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [1400832 2011-01-12] (Intel® Corporation)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1210640 2011-01-12] (Intel® Corporation)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)

HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\qttask.exe [421888 2012-10-25] (Apple Inc.)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1045720 2015-09-14] (Adobe Systems Incorporated)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [761945 2005-10-21] (Synaptics, Inc.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [15961088 2006-01-11] (Realtek Semiconductor Corp.)

HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)

HKLM\...\Run: [igfxhkcmd] => C:\WINDOWS\system32\hkcmd.exe [77824 2006-02-07] (Intel Corporation)

HKLM\...\Run: [igfxpers] => C:\WINDOWS\system32\igfxpers.exe [118784 2006-02-07] (Intel Corporation)

HKLM\...\Run: [DHAgent] => C:\Program Files\DriverHound\DHAgent.exe

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-07] (AVAST Software)

HKU\S-1-5-21-746137067-2052111302-725345543-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)

HKU\S-1-5-21-746137067-2052111302-725345543-1003\...\Run: [AmazonMP3DownloaderHelper] => C:\Documents and Settings\Asus\Local Settings\Application Data\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe

HKU\S-1-5-21-746137067-2052111302-725345543-1003\...\Run: [fastclean] => "C:\Program Files\FastClean PRO\fastcleanpro.exe"

HKU\S-1-5-21-746137067-2052111302-725345543-1003\...\Run: [OutfoxTV] => C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe

HKU\S-1-5-21-746137067-2052111302-725345543-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [9216 2008-04-14] (Microsoft Corporation)

AppInit_DLLs: c:\progra~1\settin~1\systemk\syskldr.dll => No File

IFEO\rjatydimofu.exe: [Debugger] tasklist.exe

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-10-15] (AVAST Software)

Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk [2014-12-15]

ShortcutTarget: CodecPackUpdateChecker.lnk -> C:\WINDOWS\system32\C2MP\UpdateChecker.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Tcpip\..\Interfaces\{B65CBEE6-C44B-4AFC-BAA5-B7F2838A178D}: [DhcpNameServer] 192.168.11.1

Internet Explorer:

==================

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

HKU\S-1-5-21-746137067-2052111302-725345543-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-746137067-2052111302-725345543-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-746137067-2052111302-725345543-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = www.google.com

www.google.com

URLSearchHook: HKU\S-1-5-21-746137067-2052111302-725345543-1003 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)

HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "www.google.com" <======= ATTENTION

SearchScopes: HKLM -> DefaultScope {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL =

SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL =

SearchScopes: HKU\S-1-5-21-746137067-2052111302-725345543-1003 -> DefaultScope {97BB2AF9-26DA-42C4-8077-CEBFDB665771} URL =

SearchScopes: HKU\S-1-5-21-746137067-2052111302-725345543-1003 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL =

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2012-10-09] (Oracle Corporation)

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-30] (AVAST Software)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-10-09] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-746137067-2052111302-725345543-1003 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)

FireFox:

========

FF ProfilePath: C:\Documents and Settings\Asus\Application Data\Mozilla\Firefox\Profiles\3uiblgot.default

FF DefaultSearchEngine: Yahoo!

FF SearchEngineOrder.1: default-search.net

FF SelectedSearchEngine: Yahoo!

FF Homepage: about:home

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-22] ()

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [No File]

FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2012-10-09] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.7.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2012-10-09] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll [No File]

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll [No File]

FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)

FF user.js: detected! => C:\Documents and Settings\Asus\Application Data\Mozilla\Firefox\Profiles\3uiblgot.default\user.js [2014-11-17]

FF SearchPlugin: C:\Documents and Settings\Asus\Application Data\Mozilla\Firefox\Profiles\3uiblgot.default\searchplugins\firefox-add-ons.xml [2013-09-23]

FF SearchPlugin: C:\Documents and Settings\Asus\Application Data\Mozilla\Firefox\Profiles\3uiblgot.default\searchplugins\startpage-https.xml [2015-11-18]

FF SearchPlugin: C:\Documents and Settings\Asus\Application Data\Mozilla\Firefox\Profiles\3uiblgot.default\searchplugins\youtube-video-search.xml [2014-08-08]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-11-04] [not signed]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-11-04] [not signed]

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-02-17] [not signed]

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-10-15] [not signed]

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2014-05-25]

Chrome:

=======

CHR Profile: C:\Documents and Settings\Asus\Local Settings\Application Data\Google\Chrome\User Data\Default

CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-06-04]

CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-04]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-15] (AVAST Software)

S2 ehRecvr; C:\WINDOWS\eHome\ehRecvr.exe [194560 2004-08-10] (Microsoft Corporation) [File not signed]

S2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [161768 2012-10-09] (Oracle Corporation)

S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

S3 MHN; C:\WINDOWS\System32\mhn.dll [85504 2004-08-10] (Microsoft Corporation) [File not signed]

S2 Mobile Broadband HL Service; C:\Documents and Settings\All Users\Application Data\MobileBrServ\mbbservice.exe [232288 2012-03-12] ()

S2 S24EventMonitor; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [966656 2011-01-12] (Intel® Corporation) [File not signed]

S2 Skype C2C Service; C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)

S3 UMWdf; C:\WINDOWS\system32\wdfmgr.exe [38912 2006-03-15] (Microsoft Corporation) [File not signed]

S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]

S2 OutfoxTvService; C:\Program Files\OutfoxTV\OutfoxTvService.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-10-15] (AVAST Software)

S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [76000 2015-10-15] (AVAST Software)

S1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-10-15] (AVAST Software)

S0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-10-15] (AVAST Software)

S1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [794952 2015-11-07] (AVAST Software)

S1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [435464 2015-11-07] (AVAST Software)

S3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [157888 2015-10-15] (AVAST Software)

S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-10-15] (AVAST Software)

S0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [208664 2015-10-15] (AVAST Software)

S3 DUBE100B; C:\WINDOWS\System32\DRIVERS\DUBE100B.sys [18560 2006-05-26] (D-Link Corporation)

S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)

S3 MHNDRV; C:\WINDOWS\System32\DRIVERS\mhndrv.sys [11008 2004-08-10] (Microsoft Corporation) [File not signed]

R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [5760 2007-08-28] ()

S2 MUsbFltr; C:\WINDOWS\System32\DRIVERS\MUsbFltr.sys [6528 2004-03-22] (Waytech Development, Inc.)

S3 NETwLx32; C:\WINDOWS\System32\DRIVERS\NETwLx32.sys [6609920 2010-10-07] (Intel Corporation)

S3 RTL8023xp; C:\WINDOWS\System32\DRIVERS\Rtlnicxp.sys [74496 2005-03-04] (Realtek Semiconductor Corporation )

S2 s24trans; C:\WINDOWS\System32\DRIVERS\s24trans.sys [13952 2010-05-19] (Intel Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

S4 IntelIde; no ImagePath

U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: MHN -> C:\Windows\System32\mhn.dll (Microsoft Corporation)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-19 12:10 - 2015-11-19 12:11 - 00015194 _____ C:\Documents and Settings\Asus\Desktop\FRST.txt

2015-11-19 12:07 - 2015-11-19 12:10 - 00000000 ____D C:\FRST

2015-11-19 12:07 - 2015-11-19 11:55 - 01378816 _____ (Farbar) C:\Documents and Settings\Asus\Desktop\FRST.exe

2015-11-19 01:42 - 2015-11-19 01:42 - 00000780 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk

2015-11-18 10:55 - 2015-11-18 10:59 - 117766424 _____ (Apple Inc.) C:\Documents and Settings\Asus\Desktop\iTunesSetup.exe

2015-11-18 10:42 - 2015-11-18 10:42 - 00000000 ___HD C:\WINDOWS\system32\Settings

2015-11-17 20:41 - 2015-11-17 22:19 - 00000000 ____D C:\Documents and Settings\Asus\Local Settings\Application Data\MalwareProtectionLive

2015-11-09 17:52 - 2015-11-09 17:52 - 00000000 ____D C:\Documents and Settings\Asus\Desktop\Walker Brothers - Make It Easy On Yourself

2015-11-09 17:35 - 2015-11-09 17:38 - 00000000 ____D C:\Documents and Settings\Asus\Desktop\2010 - Original Album Classics

2015-11-09 17:22 - 2015-11-09 19:35 - 00000000 ____D C:\Documents and Settings\Asus\Desktop\1966 - Portrait (Remastered 1998)

2015-11-05 18:44 - 2015-11-05 18:45 - 00000000 ____D C:\Documents and Settings\Asus\Desktop\Take it Easy With The Walker Brothers

2015-11-04 19:07 - 2015-11-04 19:55 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-10-26 17:00 - 2015-10-26 17:00 - 00000276 _____ C:\WINDOWS\Tasks\switchShakeIcon.job

2015-10-24 11:40 - 2011-01-24 01:24 - 00000000 ____D C:\Documents and Settings\Asus\Desktop\Tangerine Dream - Mystery Tracks (bootleg)

2015-10-23 11:07 - 2015-10-23 11:12 - 00000000 ____D C:\Program Files\Acro Software

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-19 12:11 - 2012-07-21 11:21 - 00000000 ____D C:\Documents and Settings\Asus\Local Settings\temp

2015-11-19 01:48 - 2012-05-25 14:42 - 00000178 ___SH C:\Documents and Settings\Asus\ntuser.ini

2015-11-19 01:48 - 2012-05-25 14:34 - 01732014 _____ C:\WINDOWS\WindowsUpdate.log

2015-11-19 01:43 - 2014-10-28 19:41 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-11-19 01:42 - 2014-10-28 19:41 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes Anti-Malware

2015-11-19 01:42 - 2014-10-28 19:40 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware

2015-11-18 23:39 - 2012-05-25 14:40 - 00032638 _____ C:\WINDOWS\SchedLgU.Txt

2015-11-18 23:39 - 2012-05-25 14:40 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-11-18 23:37 - 2014-12-15 13:04 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job

2015-11-18 23:32 - 2014-03-30 11:46 - 00000276 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-746137067-2052111302-725345543-1003.job

2015-11-18 23:32 - 2014-03-10 11:18 - 00000220 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job

2015-11-18 23:32 - 2013-04-13 21:59 - 00000882 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-11-18 23:32 - 2012-05-25 16:17 - 00000000 ____D C:\WINDOWS\system32\Lang

2015-11-18 19:03 - 2012-05-25 14:30 - 00000000 ____D C:\WINDOWS\Registration

2015-11-18 18:30 - 2013-04-13 21:59 - 00000886 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-11-18 18:27 - 2014-03-30 15:11 - 117518336 _____ C:\WINDOWS\MEMORY.DMP

2015-11-18 15:13 - 2013-02-11 14:40 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

2015-11-18 14:28 - 2012-06-01 07:36 - 00001324 _____ C:\WINDOWS\system32\d3d9caps.dat

2015-11-18 10:55 - 2012-05-25 14:42 - 00000000 ____D C:\Documents and Settings\Asus

2015-11-18 01:16 - 2014-02-20 12:50 - 00000000 ____D C:\Documents and Settings\Asus\Application Data\vlc

2015-11-18 01:13 - 2013-01-25 00:25 - 00000000 ____D C:\Documents and Settings\Asus\Application Data\Audacity

2015-11-18 01:12 - 2015-10-08 01:47 - 00000000 ____D C:\Program Files\Audacity

2015-11-16 10:44 - 2006-03-15 12:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl

2015-11-15 23:17 - 2012-05-28 22:31 - 00000000 ____D C:\Documents and Settings\Asus\Application Data\Media Player Classic

2015-11-15 12:51 - 2014-03-30 11:46 - 00000284 _____ C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-746137067-2052111302-725345543-1003.job

2015-11-12 20:24 - 2014-12-17 20:24 - 00000656 _____ C:\WINDOWS\Tasks\klcp_update.job

2015-11-09 14:50 - 2015-06-11 12:35 - 00000456 _____ C:\Documents and Settings\Asus\Desktop\jsa.txt

2015-11-08 15:00 - 2014-03-10 11:18 - 00000214 _____ C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job

2015-11-07 21:46 - 2014-12-15 13:03 - 00794952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys

2015-11-07 21:46 - 2014-12-15 13:03 - 00435464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys

2015-11-05 13:12 - 2012-05-28 16:13 - 00000000 ____D C:\Documents and Settings\Asus\Application Data\Azureus

2015-11-05 12:54 - 2012-07-20 11:44 - 00000754 ____C C:\WINDOWS\WORDPAD.INI

2015-11-05 10:57 - 2012-05-26 10:43 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2015-10-25 09:16 - 2012-05-25 15:21 - 00559976 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-10-24 18:22 - 2014-04-01 20:34 - 00000000 ____D C:\Program Files\Vuze

2015-10-23 10:56 - 2012-05-25 15:05 - 00000000 ___SD C:\Documents and Settings\Asus\UserData

2015-10-20 11:28 - 2012-05-26 10:16 - 00000000 ____D C:\Documents and Settings\Asus\My Documents\Life

==================== Files in the root of some directories =======

2013-06-28 21:24 - 2013-06-28 21:24 - 0000046 ____C () C:\Documents and Settings\Asus\Application Data\Camdata.ini

2013-06-28 21:24 - 2013-06-28 21:24 - 0000408 ____C () C:\Documents and Settings\Asus\Application Data\CamLayout.ini

2013-06-28 21:24 - 2013-06-28 21:24 - 0000408 ____C () C:\Documents and Settings\Asus\Application Data\CamShapes.ini

2013-06-28 21:17 - 2013-06-28 21:24 - 0004511 ____C () C:\Documents and Settings\Asus\Application Data\CamStudio.cfg

2012-08-27 18:19 - 2012-08-27 18:19 - 0027520 ____C () C:\Documents and Settings\Asus\Local Settings\Application Data\dt.dat

2012-07-20 00:15 - 2012-07-20 00:15 - 0000000 ____C () C:\Documents and Settings\Asus\Local Settings\Application Data\egwkduhn.log

2012-07-20 11:40 - 2012-07-21 11:05 - 0000000 ____C () C:\Documents and Settings\Asus\Local Settings\Application Data\gudearyg.log

2012-07-20 00:08 - 2012-07-21 11:05 - 0000024 ____C () C:\Documents and Settings\Asus\Local Settings\Application Data\idtioubt.log

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version:18-11-2015

Ran by Asus (2015-11-19 12:11:51)

Running from C:\Documents and Settings\Asus\Desktop

Microsoft Windows XP Professional Service Pack 3 (X86) (2012-05-25 14:39:24)

Boot Mode: Safe Mode (minimal)

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-746137067-2052111302-725345543-500 - Administrator - Enabled)

Asus (S-1-5-21-746137067-2052111302-725345543-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Asus

Guest (S-1-5-21-746137067-2052111302-725345543-501 - Limited - Disabled)

HelpAssistant (S-1-5-21-746137067-2052111302-725345543-1000 - Limited - Disabled)

SUPPORT_388945a0 (S-1-5-21-746137067-2052111302-725345543-1002 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: PC Cleaner Pro (Disabled - Up to date) {737A8864-C2D9-4337-B49A-B5E35815B9BB}

AV: AVG Internet Security 2012 (Enabled - Up to date) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

AV: avast! Antivirus (Enabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

FW: AVG Internet Security 2012 (Disabled) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.22beta (HKLM\...\7-Zip) (Version: - )

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)

Adobe Reader X (10.1.10) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)

Advertising Center (Version: 0.0.0.1 - Nero AG) Hidden

Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Audacity 2.1.1 (HKLM\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)

Avast Free Antivirus (HKLM\...\Avast) (Version: 10.4.2233 - AVAST Software)

Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 3.19 - Piriform)

Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Intel® Graphics Media Accelerator Driver (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: 6.14.10.4497 - )

Intel® PROSet/Wireless WiFi Software (HKLM\...\{0E95DA08-2514-4399-AD87-349C350FA9DE}) (Version: 13.05.0000 - Intel Corporation)

iTunes (HKLM\...\{0718A90E-93AA-49AF-A4FE-0165ACD91DF0}) (Version: 11.2.2.3 - Apple Inc.)

Java 7 Update 7 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217007FF}) (Version: 7.0.70 - Oracle)

JavaFX 2.1.0 (HKLM\...\{1111706F-666A-4037-7777-210328764D10}) (Version: 2.1.0 - Oracle Corporation)

K-Lite Codec Pack 10.9.0 Full (HKLM\...\KLiteCodecPack_is1) (Version: 10.9.0 - )

Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft .NET Framework 1.0 Hotfix (KB2604042) (HKLM\...\KB2604042) (Version: - Microsoft Corporation)

Microsoft .NET Framework 1.0 Hotfix (KB2656378) (HKLM\...\KB2656378) (Version: - Microsoft Corporation)

Microsoft .NET Framework 1.0 Hotfix (KB979904) (HKLM\...\KB979904) (Version: - Microsoft Corporation)

Microsoft .NET Framework 1.0 Security Update (KB2698035) (HKLM\...\KB2698035) (Version: - Microsoft Corporation)

Microsoft .NET Framework 1.0 Security Update (KB2742607) (HKLM\...\KB2742607) (Version: - Microsoft Corporation)

Microsoft .NET Framework 1.0 Security Update (KB2833951) (HKLM\...\KB2833951) (Version: - Microsoft Corporation)

Microsoft .NET Framework 1.0 Security Update (KB2904878) (HKLM\...\KB2904878) (Version: - Microsoft Corporation)

Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Mobile Broadband HL Service (HKLM\...\Mobile Broadband HL Service) (Version: 22.001.14.01.105 - Huawei Technologies Co.,Ltd)

Motorola SM56 Data Fax Modem (HKLM\...\SMSERIAL) (Version: - )

Mozilla Firefox 42.0 (x86 en-US) (HKLM\...\Mozilla Firefox 42.0 (x86 en-US)) (Version: 42.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Nero 9 Essentials (HKLM\...\{289bbce1-edf3-4639-8979-52ba09724f8c}) (Version: - Nero AG)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - )

QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)

REALTEK Gigabit and Fast Ethernet NIC Driver (HKLM\...\{94FB906A-CF42-4128-A509-D353026A607E}) (Version: 1.70 - REALTEK Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 2.03 - Realtek Semiconductor Corp.)

RICOH Media Driver ver.2.10.01.01 (HKLM\...\{2B818257-E6C7-4841-8C29-C5C9A982BCE5}) (Version: 2.10.01.01 - RICOH)

Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.13.13771 - Skype Technologies S.A.)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)

Switch Sound File Converter (HKLM\...\Switch) (Version: - NCH Software)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 8.2.0.0 - Synaptics)

ViewMate Desktop Mouse CC2201 Uninstaller (HKLM\...\VersatoMs) (Version: - )

VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)

Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.3.0.0 - Azureus Software, Inc.)

Vuze Remote Toolbar v8.9 (HKLM\...\{E2BDB56B-464B-49D7-AF12-B34C5E2E284B}) (Version: 8.9 - Spigot, Inc.) <==== ATTENTION

WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation)

Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)

Windows XP Media Center Edition 2005 KB973768 (HKLM\...\KB973768) (Version: - Microsoft Corporation)

Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031525 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-746137067-2052111302-725345543-1003_Classes\CLSID\{25FB7F49-2278-442E-9482-D1B54E88DA13}\InprocServer32 -> C:\Documents and Settings\All Users\Application Data\{1171BAF0-C6D4-4415-9FE3-88D9119F2F37}\amstream (the data entry has 15 more characters).

==================== Restore Points =========================

18-11-2015 10:42:14 Software Distribution Service 3.0

18-11-2015 11:26:32 System Checkpoint

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-03-15 12:00 - 2012-07-21 11:15 - 00000027 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\klcp_update.job => JL pF CMD /C sc create KLCPU binPath CMD /V /C SET \FILE \ ProgramFiles \ Lite Codec Pack Tools CodecTweakTool exe\\ IF EXIST FILE START \CTT\ FILE /verysilent /update /freq 30 type own type interact net start KLCPU sc delete KLCPU CMD Asus

Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job => C:\WINDOWS\system32\xp_eos.exe

Task: C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job => C:\WINDOWS\system32\xp_eos.exe

Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-746137067-2052111302-725345543-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-746137067-2052111302-725345543-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

Task: C:\WINDOWS\Tasks\SwitchDowngrade.job => C:\Program Files\NCH Software\Switch\switch.exe

Task: C:\WINDOWS\Tasks\SwitchReminder.job => C:\Program Files\NCH Software\Switch\switch.exe

Task: C:\WINDOWS\Tasks\switchShakeIcon.job => C:\Program Files\NCH Swift Sound\Switch\switch.exe

==================== Loaded Modules (Whitelisted) ==============

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-746137067-2052111302-725345543-1003\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\Asus\Local Settings\Application Data\Microsoft\Wallpaper2.bmp

DNS Servers: Media is not connected to internet.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

StandardProfile\AuthorizedApplications: [C:\Program Files\Bonjour\mDNSResponder.exe] => Enabled:Bonjour Service

StandardProfile\AuthorizedApplications: [C:\Program Files\AVG\AVG2012\avgmfapx.exe] => Enabled:AVG Installer

StandardProfile\AuthorizedApplications: [C:\Program Files\Skype\Phone\Skype.exe] => Enabled:Skype

StandardProfile\AuthorizedApplications: [C:\Program Files\Vuze\Azureus.exe] => Enabled:Vuze Launcher

StandardProfile\AuthorizedApplications: [C:\Program Files\iTunes\iTunes.exe] => Enabled:iTunes

StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:'Firefox' (C:\Program Files\Mozilla Firefox)

StandardProfile\AuthorizedApplications: [C:\Documents and Settings\Asus\Desktop\framxpro-66323830.exe] => Enabled:proinstaller

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (11/18/2015 11:35:26 PM) (Source: Media Center Scheduler) (EventID: 0) (User: )

Description: Recording Disk Monitor failure.

Error: (11/18/2015 11:35:26 PM) (Source: Media Center Scheduler) (EventID: 0) (User: )

Description: There are zero configured tuners on this machine, scheduling should not occur in this state!!!

Error: (11/18/2015 11:35:24 PM) (Source: Media Center Scheduler) (EventID: 0) (User: )

Description: Failed to build recording file list for folder.

Error: (11/18/2015 11:32:49 PM) (Source: Userenv) (EventID: 1041) (User: NT AUTHORITY)

Description: Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.

Error: (11/18/2015 11:32:49 PM) (Source: Userenv) (EventID: 1041) (User: NT AUTHORITY)

Description: Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE} and it will not be loaded. This is most likely caused by a faulty registration.

Error: (11/18/2015 11:32:49 PM) (Source: Userenv) (EventID: 1041) (User: NT AUTHORITY)

Description: Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D} and it will not be loaded. This is most likely caused by a faulty registration.

Error: (11/18/2015 11:32:49 PM) (Source: Userenv) (EventID: 1041) (User: NT AUTHORITY)

Description: Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE} and it will not be loaded. This is most likely caused by a faulty registration.

Error: (11/18/2015 07:03:28 PM) (Source: Media Center Scheduler) (EventID: 0) (User: )

Description: Flush: RecordingFile failed to write Invalid XML Operation.

Error: (11/18/2015 07:03:28 PM) (Source: Media Center Scheduler) (EventID: 0) (User: )

Description: RecordingHash in file differs from actual file.

Error: (11/18/2015 07:03:22 PM) (Source: Media Center Scheduler) (EventID: 0) (User: )

Description: Failed to build recording file list for folder.

System errors:

=============

Error: (11/19/2015 00:07:12 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)

Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments ""

in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (11/19/2015 00:07:11 PM) (Source: DCOM) (EventID: 10005) (User: ASUS-LAPTOP)

Description: DCOM got error "%%1084" attempting to start the service netman with arguments ""

in order to run the server:

{BA126AE5-2166-11D1-B1D0-00805FC1270E}

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: The following boot-start or system-start driver(s) failed to load:

AFD

aswRdr

aswRvrt

aswSnx

aswSP

aswVmm

Fips

intelppm

IPSec

MRxSmb

NetBIOS

NetBT

RasAcd

Rdbss

Tcpip

WS2IFSL

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:

%%31

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:

%%31

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:

%%31

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:

%%31

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:

%%31

Error: (11/19/2015 00:07:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:

%%31

Error: (11/19/2015 01:48:12 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)

Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments ""

in order to run the server:

{1BE1F766-5536-11D1-B726-00C04FB926AF}

==================== Memory info ===========================

Processor: Genuine Intel® CPU T2050 @ 1.60GHz

Percentage of memory in use: 22%

Total physical RAM: 1015.36 MB

Available physical RAM: 785.36 MB

Total Virtual: 2444.53 MB

Available Virtual: 2355.74 MB

==================== Drives ================================

Drive c: (HDD) (Fixed) (Total:44.77 GB) (Free:0.95 GB) NTFS ==>[drive with boot components (Windows XP)]

Drive d: (DATA) (Fixed) (Total:29.76 GB) (Free:28.57 GB) NTFS

Drive h: () (Fixed) (Total:74.51 GB) (Free:4.73 GB) FAT32

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows XP) (Size: 74.5 GB) (Disk ID: C455FAB8)

Partition 1: (Active) - (Size=44.8 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=29.8 GB) - (Type=OF Extended)

========================================================

Disk: 1 (Size: 74.5 GB) (Disk ID: 017832F0)

Partition 1: (Not Active) - (Size=74.5 GB) - (Type=0B)

==================== End of Addition.txt ============================

Edited by elielieli, 19 November 2015 - 06:48 AM.

#2
RKinner

Posted 20 November 2015 - 12:22 PM

Malware Expert

Expert
24,623 posts

Download the attached fixlist.txt to the same location as FRST

Run FRST and press Fix

A fix log will be generated please post that.

Run FRST again, check the Addition.txt box and the Shortcut.txt box.and then Scan. You will get 3 logs. Post all 3

#3
elielieli

Posted 21 November 2015 - 08:34 AM

Member

Topic Starter
Member
176 posts

Hi Rkinner

thanks for your assistance.

here it is.

Fix Log:

Fix result of Farbar Recovery Scan Tool (x86) Version:18-11-2015

Ran by Asus (2015-11-21 14:23:37) Run:1

Running from C:\Documents and Settings\Asus\Desktop

Loaded Profiles: Asus (Available Profiles: Asus)

Boot Mode: Safe Mode (minimal)

==============================================

fixlist content:

*****************