[Inactive] Parents computer infected with Thinkpoint
My parents computer somehow got the rogue Thinkpoint fake scanner. I was hoping someone can take a look and see if I done everything to get rid of this
Here are the steps taken on the infected computer.
I opened Task Manager to quit the Thinkpoint, on the Processes tab, I scrolled down to find 'hotfixes' from the list and ended the task. Then I opened new task 'explorer' to bring up the Desktop. Then downloaded Antimalwarebytes and updated the program and scanned the entire C drive. Here are the logs below.
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 5214
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
11/29/2010 9:06:38 AM
mbam-log-2010-11-29 (09-06-38).txt
Scan type: Full scan (C:\|)
Objects scanned: 316379
Time elapsed: 55 minute(s), 42 second(s)
Memory Processes Infected: 3
Memory Modules Infected: 1
Registry Keys Infected: 3
Registry Values Infected: 3
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 17
Memory Processes Infected:
C:\Documents and Settings\CrossFamily\Local Settings\Temp\dwm.exe (Trojan.Agent.Gen) -> Unloaded process successfully.
C:\Documents and Settings\CrossFamily\Application Data\Microsoft\svchost.exe (Trojan.Agent.Gen) -> Unloaded process successfully.
C:\Documents and Settings\CrossFamily\Application Data\Microsoft\Windows\shell.exe (Trojan.Agent.Gen) -> Unloaded process successfully.
Memory Modules Infected:
C:\WINDOWS\bdlsypia.dll (Trojan.Hiloti) -> Delete on reboot.
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ugeduxekuvayadep (Trojan.Hiloti) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load (Trojan.Agent) -> Quarantined and deleted successfully.
Registry Data Items Infected:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (explorer.exe,C:\Documents and Settings\CrossFamily\Application Data\Microsoft\Windows\shell.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
C:\WINDOWS\bdlsypia.dll (Trojan.Hiloti) -> Delete on reboot.
C:\Documents and Settings\CrossFamily\Local Settings\Temp\dwm.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Application Data\Microsoft\svchost.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Application Data\Microsoft\Windows\shell.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Application Data\hotfix.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Local Settings\Application Data\654046.exe (Trojan.Hiloti) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Local Settings\Application Data\654047.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Local Settings\Application Data\657250.exe (Trojan.Hiloti) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Local Settings\Application Data\657251.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Local Settings\Temp\0.7416719995579742.exe (Trojan.Hiloti) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{56C980A5-EEB0-41BA-8431-59CDB4E7BA24}\RP1035\A0186406.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{56C980A5-EEB0-41BA-8431-59CDB4E7BA24}\RP1037\A0186477.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{56C980A5-EEB0-41BA-8431-59CDB4E7BA24}\RP1038\A0186528.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\TMP00000012D2DD7B85DE190882 (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Application Data\Microsoft\stor.cfg (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Desktop\ThinkPoint.lnk (Rogue.ThinkPoint) -> Quarantined and deleted successfully.
C:\Documents and Settings\CrossFamily\Start Menu\Programs\ThinkPoint.lnk (Rogue.ThinkPoint) -> Quarantined and deleted successfully.
DDS (Ver_10-11-10.01) - NTFSx86
Run by CrossFamily at 9:18:13.01 on Mon 11/29/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.524 [GMT -6:00]
AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
============== Running Processes ===============
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Photo Scanner\DigiPhoto.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\Webshots\Webshots.scr
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\CrossFamily\Local Settings\Temporary Internet Files\Content.IE5\UWFIZBAF\dds[1].pif
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.yahoo.com/?ilc=1
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: My.Freeze.com Toolbar: {0bd6f992-62ad-47f7-aca6-299729be4e2b} - c:\program files\myfreezetoolbar\myfreezedx.dll
BHO: Dictionary.com: {11359f4a-b191-42d7-905a-594f8cf0387b} - c:\windows\downloaded program files\conflict.1\lexbar.dll
BHO: Shop to Win 2: {20fec4e7-f7b7-438b-8191-33d2efc5ebea} - c:\program files\shop to win 2\ShoppingBHO.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
BHO: Updater For My.Freeze.com Toolbar: {c26cd490-5f01-41e3-b150-eb29f19da056} - c:\program files\myfreezetoolbar\auxi\myfreezetoolbAu.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
BHO: {CC3C8D60-29D6-4880-B9D8-443C4CBA2BEC} - No File
BHO: MSN Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.1125.0\msneshellx.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Dictionary.com: {11359f4a-b191-42d7-905a-594f8cf0387b} - c:\windows\downloaded program files\conflict.1\lexbar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MSN Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.1125.0\msneshellx.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: My.Freeze.com Toolbar: {0bd6f992-62ad-47f7-aca6-299729be4e2b} - c:\program files\myfreezetoolbar\myfreezedx.dll
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Weather] c:\program files\aws\weatherbug\Weather.exe 1
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [P17Helper] Rundll32 P17.dll,P17Helper
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe
mRun: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide -runkey
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
StartupFolder: c:\docume~1\crossf~1\startm~1\programs\startup\webshots.lnk - c:\program files\webshots\Launcher.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digiph~1.lnk - c:\program files\photo scanner\DigiPhoto.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\microt~1.lnk - c:\program files\microtek\scanwizard 5\ScannerFinder.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office12\EXCEL.EXE/3000
IE: Search &Dictionary - c:\program files\lexico\toolbar\dictionary.htm
IE: Search &Thesaurus - c:\program files\lexico\toolbar\thesaurus.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper200711281.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://zone.msn.com/bingame/popcaploader_v10.cab
DPF: {F0E2D69A-DC2F-4E9B-A993-684FB1C21DBC} - hxxp://dictionary.reference.com/tools/toolbar/lexico.cab
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
============= SERVICES / DRIVERS ===============
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-3-25 151216]
S3 BFAIFILT;BFAIFILT;c:\windows\system32\drivers\BFAIFILT.SYS [2008-12-24 3264]
S3 U2KG54;BUFFALO WLI-U2-KG54 Wireless LAN Adapter Service;c:\windows\system32\drivers\U2KG54.SYS [2008-12-24 245376]
=============== Created Last 30 ================
2010-11-29 14:09:34 -------- d-----w- c:\docume~1\crossf~1\applic~1\Malwarebytes
2010-11-29 14:09:27 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-29 14:09:26 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-29 14:09:26 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-11-29 14:09:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-29 12:12:26 854 ----a-w- c:\windows\ijazeyes.dll
2010-11-29 12:10:32 278 ----a-w- c:\docume~1\crossf~1\applic~1\agtyjkj.bat
2010-11-29 01:05:07 6273872 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{87cd2c43-a06f-4c10-b14f-0c22a217aca4}\mpengine.dll
2010-11-25 01:47:08 -------- d-----w- c:\docume~1\crossf~1\locals~1\applic~1\Yahoo
==================== Find3M ====================
2010-10-19 20:51:33 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-09-18 17:23:26 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53:25 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53:25 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53:25 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:58:08 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:58:06 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:58:06 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:51:14 285824 ----a-w- c:\windows\system32\atmfd.dll
============= FINISH: 9:19:02.70 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-11-10.01)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/27/2007 4:22:20 PM
System Uptime: 11/29/2010 9:08:32 AM (0 hours ago)
Motherboard: Dell Inc. | | 0J3492
Processor: Intel(R) Pentium(R) 4 CPU 3.40GHz | Microprocessor | 3391/800mhz
==== Disk Partitions =========================
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 264.453 GiB free.
D: is CDROM ()
E: is CDROM ()
==== Disabled Device Manager Items =============
Class GUID: TI Technologies Inc.
Description: RADEON X300 Series Secondary
Device ID: PCI\VEN_1002&DEV_5B70&SUBSYS_03031002&REV_00\4&16EC1A1&0&0108
Manufacturer: ATI Technologies Inc.
Name: RADEON X300 Series Secondary
PNP Device ID: PCI\VEN_1002&DEV_5B70&SUBSYS_03031002&REV_00\4&16EC1A1&0&0108
Service: ati2mtag
==== System Restore Points ===================
RP940: 8/31/2010 9:05:30 AM - Software Distribution Service 3.0
RP941: 9/1/2010 9:50:53 AM - System Checkpoint
RP942: 9/2/2010 6:57:58 AM - Software Distribution Service 3.0
RP943: 9/3/2010 7:01:08 AM - System Checkpoint
RP944: 9/4/2010 6:00:12 AM - Software Distribution Service 3.0
RP945: 9/5/2010 6:55:38 AM - System Checkpoint
RP946: 9/6/2010 4:57:44 AM - Software Distribution Service 3.0
RP947: 9/7/2010 5:35:09 AM - Software Distribution Service 3.0
RP948: 9/8/2010 5:56:08 AM - Software Distribution Service 3.0
RP949: 9/9/2010 6:57:24 AM - Software Distribution Service 3.0
RP950: 9/10/2010 7:17:41 AM - System Checkpoint
RP951: 9/10/2010 3:05:26 PM - Software Distribution Service 3.0
RP952: 9/11/2010 3:54:07 PM - System Checkpoint
RP953: 9/12/2010 5:53:16 AM - Software Distribution Service 3.0
RP954: 9/13/2010 6:21:40 AM - System Checkpoint
RP955: 9/14/2010 5:07:27 AM - Software Distribution Service 3.0
RP956: 9/14/2010 5:16:20 AM - Software Distribution Service 3.0
RP957: 9/15/2010 5:48:20 AM - Software Distribution Service 3.0
RP958: 9/15/2010 8:25:54 PM - Software Distribution Service 3.0
RP959: 9/16/2010 8:30:47 PM - System Checkpoint
RP960: 9/17/2010 5:12:45 AM - Software Distribution Service 3.0
RP961: 9/18/2010 5:07:41 AM - Software Distribution Service 3.0
RP962: 9/19/2010 5:10:53 AM - System Checkpoint
RP963: 9/20/2010 5:01:22 AM - Software Distribution Service 3.0
RP964: 9/21/2010 5:49:29 AM - Software Distribution Service 3.0
RP965: 9/22/2010 6:00:53 AM - System Checkpoint
RP966: 9/22/2010 9:45:41 AM - Software Distribution Service 3.0
RP967: 9/23/2010 10:26:30 AM - System Checkpoint
RP968: 9/24/2010 10:35:13 AM - System Checkpoint
RP969: 9/25/2010 5:25:53 AM - Software Distribution Service 3.0
RP970: 9/26/2010 6:20:00 AM - Software Distribution Service 3.0
RP971: 9/27/2010 6:24:04 AM - System Checkpoint
RP972: 9/28/2010 4:58:51 AM - Software Distribution Service 3.0
RP973: 9/29/2010 5:13:18 AM - Software Distribution Service 3.0
RP974: 9/29/2010 8:06:52 PM - Software Distribution Service 3.0
RP975: 9/30/2010 5:23:03 AM - Software Distribution Service 3.0
RP976: 10/1/2010 5:49:26 AM - Software Distribution Service 3.0
RP977: 10/2/2010 6:14:17 AM - Software Distribution Service 3.0
RP978: 10/3/2010 7:15:30 AM - Software Distribution Service 3.0
RP979: 10/4/2010 7:20:05 AM - System Checkpoint
RP980: 10/5/2010 6:35:52 AM - Software Distribution Service 3.0
RP981: 10/5/2010 8:10:08 PM - Software Distribution Service 3.0
RP982: 10/7/2010 5:19:20 AM - Software Distribution Service 3.0
RP983: 10/8/2010 5:36:34 AM - Software Distribution Service 3.0
RP984: 10/9/2010 5:57:52 AM - Software Distribution Service 3.0
RP985: 10/10/2010 9:26:23 AM - Software Distribution Service 3.0
RP986: 10/11/2010 9:21:08 AM - Software Distribution Service 3.0
RP987: 10/12/2010 9:54:16 AM - System Checkpoint
RP988: 10/13/2010 6:03:25 AM - Software Distribution Service 3.0
RP989: 10/14/2010 3:00:21 AM - Software Distribution Service 3.0
RP990: 10/15/2010 6:33:38 AM - Software Distribution Service 3.0
RP991: 10/16/2010 7:31:42 AM - System Checkpoint
RP992: 10/17/2010 6:46:51 AM - Software Distribution Service 3.0
RP993: 10/18/2010 7:11:36 AM - Software Distribution Service 3.0
RP994: 10/19/2010 7:36:40 AM - System Checkpoint
RP995: 10/20/2010 7:04:55 AM - Software Distribution Service 3.0
RP996: 10/21/2010 7:22:55 AM - System Checkpoint
RP997: 10/22/2010 6:36:57 AM - Software Distribution Service 3.0
RP998: 10/23/2010 7:10:15 AM - System Checkpoint
RP999: 10/23/2010 7:57:56 AM - Software Distribution Service 3.0
RP1000: 10/24/2010 8:52:21 AM - System Checkpoint
RP1001: 10/25/2010 5:16:38 AM - Software Distribution Service 3.0
RP1002: 10/26/2010 6:48:40 AM - Software Distribution Service 3.0
RP1003: 10/27/2010 7:28:20 AM - Software Distribution Service 3.0
RP1004: 10/28/2010 7:53:45 AM - System Checkpoint
RP1005: 10/29/2010 7:16:08 AM - Software Distribution Service 3.0
RP1006: 10/30/2010 7:40:10 AM - Software Distribution Service 3.0
RP1007: 10/31/2010 8:38:21 AM - System Checkpoint
RP1008: 11/1/2010 7:16:00 AM - Software Distribution Service 3.0
RP1009: 11/2/2010 7:21:59 AM - System Checkpoint
RP1010: 11/3/2010 6:32:07 AM - Software Distribution Service 3.0
RP1011: 11/4/2010 7:16:55 AM - System Checkpoint
RP1012: 11/5/2010 5:43:09 AM - Software Distribution Service 3.0
RP1013: 11/6/2010 6:48:36 AM - Software Distribution Service 3.0
RP1014: 11/7/2010 6:59:21 AM - Software Distribution Service 3.0
RP1015: 11/8/2010 7:11:20 AM - System Checkpoint
RP1016: 11/9/2010 5:05:12 AM - Software Distribution Service 3.0
RP1017: 11/10/2010 6:10:08 AM - Software Distribution Service 3.0
RP1018: 11/10/2010 7:06:53 PM - Software Distribution Service 3.0
RP1019: 11/11/2010 6:58:56 AM - Software Distribution Service 3.0
RP1020: 11/12/2010 7:30:41 AM - System Checkpoint
RP1021: 11/13/2010 7:22:38 AM - Software Distribution Service 3.0
RP1022: 11/14/2010 7:42:31 AM - System Checkpoint
RP1023: 11/15/2010 5:23:45 AM - Software Distribution Service 3.0
RP1024: 11/16/2010 6:45:09 AM - Software Distribution Service 3.0
RP1025: 11/17/2010 7:27:29 AM - System Checkpoint
RP1026: 11/18/2010 6:06:19 AM - Software Distribution Service 3.0
RP1027: 11/19/2010 7:09:47 AM - Software Distribution Service 3.0
RP1028: 11/20/2010 7:18:50 AM - System Checkpoint
RP1029: 11/21/2010 6:18:07 AM - Software Distribution Service 3.0
RP1030: 11/21/2010 8:51:05 AM - Software Distribution Service 3.0
RP1031: 11/22/2010 8:58:35 AM - System Checkpoint
RP1032: 11/23/2010 6:55:12 AM - Software Distribution Service 3.0
RP1033: 11/24/2010 7:05:01 AM - Software Distribution Service 3.0
RP1034: 11/25/2010 7:27:14 AM - System Checkpoint
RP1035: 11/26/2010 7:26:48 AM - Software Distribution Service 3.0
RP1036: 11/27/2010 7:51:58 AM - System Checkpoint
RP1037: 11/27/2010 9:27:56 AM - Software Distribution Service 3.0
RP1038: 11/28/2010 9:24:40 AM - Software Distribution Service 3.0
RP1039: 11/28/2010 7:05:04 PM - Software Distribution Service 3.0
RP1040: 11/29/2010 8:01:56 AM - Installed Connect Service
==== Installed Programs ======================
ABBYY FineReader 5.0 Sprint
ABBYY FineReader 6.0
ABBYY FineReader OCR Engine for Microtek
Adobe Flash Player 10 ActiveX
Adobe Reader 8.1.5
Adobe Shockwave Player 11.5
Adobe® Photoshop® Album Starter Edition 3.2
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft Print Creations
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Funhouse
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ATI - Software Uninstall Utility
ATI Control Panel
ATI Display Driver
Audacity 1.2.6
Big Fish Games Client
Bonjour
Broadcom Gigabit Integrated Controller
CCScore
Creative MediaSource
Critical Update for Windows Media Player 11 (KB959772)
Dell ResourceCD
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESSini
ESSPCD
ESSPDock
ESSTOOLS
essvatgt
Family Tree Maker Version 16
fflink
Google Toolbar for Internet Explorer
Google Updater
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB932716-v2)
Hotfix for Windows XP (KB945060-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Information Please Almanac
InstallMgr
Intel(R) 537EP V9x DF PCI Modem
iTunes
Java(TM) 6 Update 15
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
KB408682
Kodak EasyShare software
LG USB Modem driver
Malwarebytes' Anti-Malware
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Default Manager
Microsoft IntelliPoint 6.3
Microsoft IntelliType Pro 6.3
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft MapPoint North America 2006
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Search Enhancement Pack
Microsoft Security Essentials
Microsoft Silverlight
Microsoft Software Update for Web Folders (English) 12
Microsoft Streets and Trips 2004
Microsoft User-Mode Driver Framework Feature Pack 1.0
Mozilla Thunderbird (2.0.0.24)
MSN Toolbar
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP2 Parser and SDK
Music Oasis
My.Freeze.com Toolbar (Remove Toolbar Only)
MyDVD
netbrdg
OfotoXMI
OGA Notifier 2.0.0048.0
OpenOffice.org Installer 1.0
Photo Scanner Software
PowerDVD
QuickTime
RealPlayer
Rhapsody Player Engine
ScanWizard 5
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB982124)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 7 (KB974455)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
SFR
SHASTA
Shop to Win 2
skin0001
SKINXSDK
Sonic DLA
Sound Blaster Live! 24-bit
SpywareBlaster 4.1
staticcr
The Merriam-Webster Reference Library
tooltips
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Outlook 2007 Junk Email Filter (KB2443839)
Update for Windows Internet Explorer 7 (KB976749)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
V CAST Music with Rhapsody
Visual C++ 8.0 ATL (x86) WinSXS MSM
Visual C++ 8.0 CRT (x86) WinSXS MSM
VPRINTOL
WeatherBug
WebFldrs XP
Webshots Desktop
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WIRELESS
Yahoo! Install Manager
Yahoo! Software Update
Yahoo! Toolbar
==== Event Viewer Messages From Past Week ========
11/29/2010 9:09:18 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde
11/29/2010 8:01:40 AM, error: System Error [1003] - Error code 00008086, parameter1 00000000, parameter2 00000000, parameter3 00000000, parameter4 00000000.
11/29/2010 8:00:27 AM, error: Service Control Manager [7000] - The MCSTRM service failed to start due to the following error: The system cannot find the file specified.
11/29/2010 7:44:51 AM, error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.3 with the system having network hardware address 00:07:E9:7B:E3:78. Network operations on this system may be disrupted as a result.
11/29/2010 7:07:26 AM, error: Dhcp [1002] - The IP address lease 192.168.1.4 for the Network Card with network address 0011116458C5 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
==== End Of File ===========================
