101 replies to this topic

[cgrammie2]

I've been fighting malware/viruses for the past 3 weeks using Malwarebytes, McAfee Antivirus, Spybot, Microsoft Malicious Software Removal Tool and yesterday and today Kaspersky - today I ran full scans using all but Spybot (ran Spybot yesterday) with no infections detected on any of them. The only thing I'm still troubled with is google redirects - due to virus? Microsoft technician told me that the google toolbar has been experiencing problems and to use bing.com for searches. Can I assume my computer is clean? Last monday I had a call from my bank alerting me of an attempted fraudulent wire transfer - unsuccessful thankfully but I am very paranoid now with all that has occurred! Any recommendations? Thanks in advance for your help!

[Maniac]

Hello cgrammie2! Welcome to MalwareBytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
• Instructions that I give are for your system only!
• If you don't know or can't understand something please ask.
• Do not install or uninstall any software or hardware, while work on.

The only thing I'm still troubled with is google redirects - due to virus?

Yes, your system is still infected.

Microsoft technician told me that the google toolbar has been experiencing problems and to use bing.com for searches.

Typically, in their style.

Can I assume my computer is clean?

I'm not sure. Please follow these instructions and post the resaults in your next reply:
http://forums.malwar...?showtopic=9573

[cgrammie2]

Hello cgrammie2! Welcome to MalwareBytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we begin, please note the following:

• The process of cleaning your system may take some time, so please be patient.
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
• Instructions that I give are for your system only!
• If you don't know or can't understand something please ask.
• Do not install or uninstall any software or hardware, while work on.

Yes, your system is still infected.



Typically, in their style.



I'm not sure. Please follow these instructions and post the resaults in your next reply:
http://forums.malwar...?showtopic=9573

[cgrammie2]

Hello Borislav - thank you for your reply - I will implement the steps suggested - I have a question - When I typed in the web address http://www.malwareby...am-download.php I was directed to majorgeeks.com website for downloading - Is this legitimate or another of my redirects due to virus?

[Maniac]

Yes, it's a legitimate.

[cgrammie2]

Yes, it's a legitimate.

Hello again Borislav - Help!

Once again when I typed in http://www.malwareby...am-download.php I've been redirected to yet another website. First it was majorgeeks.com and now it's http://fileforum.bet...tes-AntiMalware. Is this a legitimate site to download as you instructed? I'm sorry to be so paranoid but I've had too many problems for weeks now! I can't seem to even get past step one in trying to clean up my computer. Please let me know as soon as possible (I realize there's a huge time difference).

[Maniac]

Yes, it's a legitimate too.

[cgrammie2]

Yes, it's a legitimate too.

Hello!

I have progressed to the disable CD-ROM Emulation step - however DeFogger did not prompt me to reboot my machine - I've been waiting about 10 minutes. Here is the log.

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 05:34 on 01/06/2010 (Linda Cross)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-



what is my next step? Thank you!

[Maniac]

The other instructions here:
http://forums.malwar...?showtopic=9573

[cgrammie2]

The other instructions here:
http://forums.malwar...?showtopic=9573

I have completed these steps and in a new post sent in the logs as instructed. please let me know what to do next. Should I re-enable DeFogger? I won't proceed until hearing from you. I'll be going out of town Thursday (for several days) and would like to have this cleaned up before then if possible. My roommate has no computer knowledge and won't be able to work on this in my absence.

[cgrammie2]

I have completed these steps and in a new post sent in the logs as instructed. please let me know what to do next. Should I re-enable DeFogger? I won't proceed until hearing from you. I'll be going out of town Thursday (for several days) and would like to have this cleaned up before then if possible. My roommate has no computer knowledge and won't be able to work on this in my absence.

I have one more concern - I've just received a red alert from the Kaspersky removal tool on my computer indicating a malicious object has been detected. Is it safe to go ahead and run the scan with everything else I've been working on today (see my previous posts)? Thank you!!

[Maniac]

I have completed these steps and in a new post sent in the logs as instructed

Where? What about GMER log? What about DDS log witth Attach.txt?

You post Defogger log only.

[cgrammie2]

Where? What about GMER log? What about DDS log witth Attach.txt?

You post Defogger log only.

My apologies! This is info I posted yesterday -

This is the most recent Malwarebytes log I have - dated 5/24/10 - despite the fact that I've run scans almost daily - in fact I ran a full scan this morning - no log - no infections detected. My most recent mbam logs were directed to C:\Program Files\Malwarebytes' Antimalware\mbam-log-2010-05-24 (19-14-05) - sorry there are no more recent mbam logs - I know this info no longer applies. Thank you for your help! DDS and GMER logs follow below.

-------------------------------------------------------

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4140

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/24/2010 7:14:05 PM
mbam-log-2010-05-24 (19-14-05).txt

Scan type: Full scan (C:\|)
Objects scanned: 214792
Time elapsed: 1 hour(s), 6 minute(s), 52 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\Data Protection (Rogue.DataProtection) -> No action taken.

Files Infected:
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2009\A0293236.dll (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2011\A0293390.dll (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2011\A0293391.dll (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2011\A0293395.exe (Malware.Packer.Gen) -> No action taken.

----------------------------------------------------------------------------

DDS (Ver_10-03-17.01) - NTFSx86
Run by Linda Cross at 9:43:09.06 on Tue 06/01/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.199 [GMT -7:00]

AV: Data Protection *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}
AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Documents and Settings\Linda Cross\Desktop\Virus Removal Tool1\setup_9.0.0.722_01.06.2010_09-31[1]\setup_9.0.0.722_01.06.2010_09-31[1].exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Linda Cross\Local Settings\Temporary Internet Files\Content.IE5\V4J5P2X8\dds[1].scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://phoenix.cox.net/cci/home
uDefault_Search_URL = hxxp://www.earthlink.net/partner/more/msie/button/search.html
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
mURLSearchHooks: H - No File
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
EB: &Discuss: {bdeade7f-c265-11d0-bced-00a0c90ab50f} - shdocvw.dll
EB: {FE54FA40-D68C-11D2-98FA-00C0F0318AFE} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
StartupFolder: c:\docume~1\lindac~1\startm~1\programs\startup\setup_~2.lnk - c:\documents and settings\linda cross\desktop\virus removal tool1\setup_9.0.0.722_01.06.2010_09-31[1]\startup.exe
StartupFolder: c:\docume~1\lindac~1\startm~1\programs\startup\setup_~1.lnk - c:\documents and settings\linda cross\desktop\virus removal tool\setup_9.0.0.722_28.05.2010_11-31\startup.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - c:\progra~1\yahoo!\messen~1\YPager.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: alpineaccess.com
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: musicmatch.com\online
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://support.microsoft.com/OAS/ActiveX/MSDcode.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - hxxp://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1238559981937
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - hxxp://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - hxxp://download.mcafee.com/molbin/iss-loc/mcfscan/3,0,0,5957/mcfscan.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll
mASetup: {33E00BF6-D344-4362-838B-2F9790234042} - rundll32 qfoneu71.dll,laspi

============= SERVICES / DRIVERS ===============

R0 00164472;00164472 Boot Guard Driver;c:\windows\system32\drivers\00164472.sys [2010-5-28 37392]
R0 11906432;11906432 Boot Guard Driver;c:\windows\system32\drivers\11906432.sys [2010-5-31 37392]
R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-10-5 385536]
R1 00164471;00164471;c:\windows\system32\drivers\00164471.sys [2010-5-28 128016]
R1 11906431;11906431;c:\windows\system32\drivers\11906431.sys [2010-5-31 128016]
R1 bfbe;bfbe;c:\windows\system32\bfbe.sys [2010-4-21 75264]
R1 setup_9.0.0.722_01.06.2010_09-31[1]drv;setup_9.0.0.722_01.06.2010_09-31[1]drv;c:\windows\system32\drivers\1190643.sys [2010-5-31 315408]
R1 setup_9.0.0.722_28.05.2010_11-31drv;setup_9.0.0.722_28.05.2010_11-31drv;c:\windows\system32\drivers\0016447.sys [2010-5-28 315408]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2010-5-12 203280]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2010-5-12 359952]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2010-5-12 144704]
R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2010-5-12 606736]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-4-16 79816]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-10-5 35272]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-10-5 40552]
S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys --> c:\windows\system32\drivers\Lbd.sys [?]
S1 MpKsla3c22b50;MpKsla3c22b50;\??\c:\windows\system32\mpenginestore\mpksla3c22b50.sys --> c:\windows\system32\mpenginestore\MpKsla3c22b50.sys [?]
S2 Symantec Core LC;Symantec Core LC;"c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe" --> c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [?]
S3 diskchk;diskchk;\??\c:\windows\system32\diskchk.sys --> c:\windows\system32\diskchk.sys [?]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-10-5 34248]
S3 utqxodiy;AVZ Kernel Driver;c:\windows\system32\drivers\utqxodiy.sys [2010-6-1 7168]

=============== Created Last 30 ================

2010-06-01 12:34:50 0 ----a-w- c:\documents and settings\linda cross\defogger_reenable
2010-06-01 07:14:37 7168 ----a-w- c:\windows\system32\drivers\utqxodiy.sys
2010-06-01 06:56:46 37392 ----a-w- c:\windows\system32\drivers\11906432.sys
2010-06-01 06:56:46 315408 ----a-w- c:\windows\system32\drivers\1190643.sys
2010-06-01 06:56:46 128016 ----a-w- c:\windows\system32\drivers\11906431.sys
2010-05-28 17:52:33 3247 ----a-w- c:\windows\system32\wbem\Outlook_01cafe8e8cb9d7e2.mof
2010-05-28 08:18:40 37392 ----a-w- c:\windows\system32\drivers\00164472.sys
2010-05-28 08:18:40 315408 ----a-w- c:\windows\system32\drivers\0016447.sys
2010-05-28 08:18:40 128016 ----a-w- c:\windows\system32\drivers\00164471.sys
2010-05-28 07:35:09 0 d-----w- C:\ea
2010-05-24 22:27:36 4224 ----a-w- c:\windows\system32\drivers\RDPCDD.SYS
2010-05-24 19:59:52 0 d-----w- c:\windows\system32\MpEngineStore
2010-05-22 12:50:35 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-20 21:02:22 10218 ----a-w- c:\windows\system32\rof
2010-05-20 21:02:21 67584 ----a-w- c:\windows\system32\klgd.bmp
2010-05-20 12:47:38 7304 ----a-w- c:\windows\system32\drivers\kgpcpy.cfg
2010-05-20 01:55:16 0 d-----w- c:\docume~1\alluse~1\applic~1\SITEguard
2010-05-20 01:55:10 7000064 ---ha-w- C:\SZKGFS.dat
2010-05-20 01:53:50 0 d-----w- c:\program files\common files\iS3
2010-05-20 01:53:48 0 d-----w- c:\docume~1\alluse~1\applic~1\STOPzilla!
2010-05-17 21:28:35 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-17 21:28:31 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-17 00:54:32 0 ----a-w- C:\debug
2010-05-17 00:40:39 112 ----a-w- c:\docume~1\alluse~1\applic~1\JOJr2m.dat
2010-05-15 19:13:29 0 d-----w- c:\program files\RegWork
2010-05-12 17:14:47 13169 ----a-w- c:\windows\system32\Config.MPF
2010-05-12 16:28:51 120136 ----a-w- c:\windows\system32\drivers\Mpfp.sys
2010-05-12 16:28:02 0 d-----w- c:\program files\common files\McAfee
2010-05-12 13:52:53 0 d-----w- C:\mb
2010-05-12 13:40:42 0 d-----w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-05-11 06:32:42 0 d-----w- c:\windows\system32\NtmsData

==================== Find3M ====================

2010-05-12 18:21:16 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-04-29 02:51:30 10752 ----a-w- C:\exefix_xp.com
2010-04-26 22:58:12 256512 ----a-w- c:\windows\PEV.exe
2010-04-21 17:15:23 75264 ----a-w- c:\windows\system32\bfbe.sys
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\dllcache\vbscript.dll
2008-07-26 20:59:27 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008072620080727\index.dat

============= FINISH: 9:47:02.21 ===============


Attach.txt.zip ( 11.17K ) Number of downloads: 4
29 May 2010

--------------------------------------------------

After GMER completed I clicked on Internet Explorer so that I could post the logs - a blue screen appeared with the following information:

STOP.c0000145 {Application Error} the application failed to initialize properly (0xc0000005). Click on OK to terminate the application.

Beginning dump of physical memory
Physical memory dump complete. Contact your system administrator or technical support group for futher assistance.

At this point I restarted my machine and received the following error message:

Microsoft Windows error message -
The system has recovered from a serious error. A log of this error has been created - for more information click here. The is the information that came up when I clicked:

Error signature
BC Code: c0000145
BCP1: C0000005
BCP2: 00000000
BCP3: 00000000
BCP4: 00000000
OS Ver: 5_1_2600
SP: 3_0
PRODUCT: 768_1

To view technical information about the error report, click here:

Error Report Contents:
The following files will be included in this error report:
c:\DOCUME~1\LINDAC~1\Temp\WERaff5.dir00\Mini060110-01.dmp
c:\DOCUME~1\LINDAC~1\Temp\WERaff5.dir00\sysdata

[Maniac]

Your database version of Malwarebytes' Anti-Malware is 4140 , but the current is 4163 , so please:

• Launch Malwarebytes' Anti-Malware
• Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
• Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.


In your next reply, please include these log(s) in this sequence:

• MalwareBytes' Anti-Malware log
• a new fresh DDS log with Attach.txt

[cgrammie2]

Your database version of Malwarebytes' Anti-Malware is 4140 , but the current is 4163 , so please:

• Launch Malwarebytes' Anti-Malware
• Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
• Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

In your next reply, please include these log(s) in this sequence:

• MalwareBytes' Anti-Malware log
• a new fresh DDS log with Attach.txt

Hello -

I have updated my Malwarebytes to the latest version and have run 3 quick scans this morning. Still no logs. Here are two messages I receive:

1) Windows can't find s:mbamlog.txt. Make sure you typed the name correctly and then try again. To search for a file click the start button and then click search.

2) The scan completed successfully. No malicious items were detected. A log file has been saved to the logs folder.

I'll be running DDS as instructed to get a fresh log but I need your help to resolve the mbam log problem. Thank you!

[Maniac]

Please do the following to see if it resolves the issue.

Temporarily disable your Anti-Virus and other security software while installing and running.

Windows XP:

• Click on Start and select Control Panel
• Open Add/Remove Programs
• Uninstall Malwarebytes' Anti-Malware
• Restart your computer very important
• Download and run mbam-clean.exe from here
• It will ask to restart your computer, please allow it to do so very important
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
• Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
• Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
  Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or post to ask and we'll explain how to do it.

[cgrammie2]

Please do the following to see if it resolves the issue.

Temporarily disable your Anti-Virus and other security software while installing and running.

Windows XP:

• Click on Start and select Control Panel
• Open Add/Remove Programs
• Uninstall Malwarebytes' Anti-Malware
• Restart your computer very important
• Download and run mbam-clean.exe from here
• It will ask to restart your computer, please allow it to do so very important
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
• Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
• Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
  Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or post to ask and we'll explain how to do it.

-------------------------------

Hello!

Here are fresh logs as requested (sending GMER log in a separate post). I will be leaving tomorrow (Thursday) for several days and unable to respond further until I return. I will contact you again at that time. Please let me know what my next step will be and when to re-enable DeFogger. Thank you for your help!

--------------------------------------

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4165

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

6/2/2010 4:20:38 PM
mbam-log-2010-06-02 (16-20-38).txt

Scan type: Quick scan
Objects scanned: 144591
Time elapsed: 14 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

-------------------------------------------------------------------

DDS (Ver_10-03-17.01) - NTFSx86
Run by Linda Cross at 19:28:04.21 on Wed 06/02/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.362 [GMT -7:00]

AV: Data Protection *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}
AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Linda Cross\Local Settings\Temporary Internet Files\Content.IE5\S9DAR1JF\dds[1].scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://phoenix.cox.net/cci/home
uDefault_Search_URL = hxxp://www.earthlink.net/partner/more/msie/button/search.html
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
mURLSearchHooks: H - No File
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File
TB: {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No File
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
EB: &Discuss: {bdeade7f-c265-11d0-bced-00a0c90ab50f} - shdocvw.dll
EB: {FE54FA40-D68C-11D2-98FA-00C0F0318AFE} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
StartupFolder: c:\docume~1\lindac~1\startm~1\programs\startup\setup_~1.lnk - c:\documents and settings\linda cross\desktop\virus removal tool\setup_9.0.0.722_28.05.2010_11-31\startup.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - c:\progra~1\yahoo!\messen~1\YPager.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: alpineaccess.com
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: musicmatch.com\online
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://support.microsoft.com/OAS/ActiveX/MSDcode.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - hxxp://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1238559981937
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - hxxp://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - hxxp://download.mcafee.com/molbin/iss-loc/mcfscan/3,0,0,5957/mcfscan.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\wifd1f~1\MpShHook.dll
mASetup: {33E00BF6-D344-4362-838B-2F9790234042} - rundll32 qfoneu71.dll,laspi

============= SERVICES / DRIVERS ===============

R0 00164472;00164472 Boot Guard Driver;c:\windows\system32\drivers\00164472.sys [2010-5-28 37392]
R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-10-5 385536]
R1 00164471;00164471;c:\windows\system32\drivers\00164471.sys [2010-5-28 128016]
R1 bfbe;bfbe;c:\windows\system32\bfbe.sys [2010-4-21 75264]
R1 setup_9.0.0.722_28.05.2010_11-31drv;setup_9.0.0.722_28.05.2010_11-31drv;c:\windows\system32\drivers\0016447.sys [2010-5-28 315408]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2010-5-12 203280]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2010-5-12 359952]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2010-5-12 144704]
R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-6-2 38224]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2010-5-12 606736]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-4-16 79816]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-10-5 35272]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-10-5 40552]
S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys --> c:\windows\system32\drivers\Lbd.sys [?]
S1 MpKsla3c22b50;MpKsla3c22b50;\??\c:\windows\system32\mpenginestore\mpksla3c22b50.sys --> c:\windows\system32\mpenginestore\MpKsla3c22b50.sys [?]
S2 Symantec Core LC;Symantec Core LC;"c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe" --> c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [?]
S3 diskchk;diskchk;\??\c:\windows\system32\diskchk.sys --> c:\windows\system32\diskchk.sys [?]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-10-5 34248]
S3 utqxodiy;AVZ Kernel Driver;c:\windows\system32\drivers\utqxodiy.sys [2010-6-1 7168]

=============== Created Last 30 ================

2010-06-02 23:04:33 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-02 23:04:28 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-01 12:34:50 0 ----a-w- c:\documents and settings\linda cross\defogger_reenable
2010-06-01 07:14:37 7168 ----a-w- c:\windows\system32\drivers\utqxodiy.sys
2010-05-28 17:52:33 3247 ----a-w- c:\windows\system32\wbem\Outlook_01cafe8e8cb9d7e2.mof
2010-05-28 08:18:40 37392 ----a-w- c:\windows\system32\drivers\00164472.sys
2010-05-28 08:18:40 315408 ----a-w- c:\windows\system32\drivers\0016447.sys
2010-05-28 08:18:40 128016 ----a-w- c:\windows\system32\drivers\00164471.sys
2010-05-28 07:35:09 0 d-----w- C:\ea
2010-05-24 22:27:36 4224 ----a-w- c:\windows\system32\drivers\RDPCDD.SYS
2010-05-24 19:59:52 0 d-----w- c:\windows\system32\MpEngineStore
2010-05-22 12:50:35 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-20 21:02:22 10218 ----a-w- c:\windows\system32\rof
2010-05-20 21:02:21 67584 ----a-w- c:\windows\system32\klgd.bmp
2010-05-20 12:47:38 7304 ----a-w- c:\windows\system32\drivers\kgpcpy.cfg
2010-05-20 01:55:16 0 d-----w- c:\docume~1\alluse~1\applic~1\SITEguard
2010-05-20 01:55:10 7000064 ---ha-w- C:\SZKGFS.dat
2010-05-20 01:53:50 0 d-----w- c:\program files\common files\iS3
2010-05-20 01:53:48 0 d-----w- c:\docume~1\alluse~1\applic~1\STOPzilla!
2010-05-17 00:54:32 0 ----a-w- C:\debug
2010-05-17 00:40:39 112 ----a-w- c:\docume~1\alluse~1\applic~1\JOJr2m.dat
2010-05-15 19:13:29 0 d-----w- c:\program files\RegWork
2010-05-12 17:14:47 13155 ----a-w- c:\windows\system32\Config.MPF
2010-05-12 16:28:51 120136 ----a-w- c:\windows\system32\drivers\Mpfp.sys
2010-05-12 16:28:02 0 d-----w- c:\program files\common files\McAfee
2010-05-12 13:52:53 0 d-----w- C:\mb
2010-05-12 13:40:42 0 d-----w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-05-11 06:32:42 0 d-----w- c:\windows\system32\NtmsData

==================== Find3M ====================

2010-05-12 18:21:16 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-04-29 02:51:30 10752 ----a-w- C:\exefix_xp.com
2010-04-26 22:58:12 256512 ----a-w- c:\windows\PEV.exe
2010-04-21 17:15:23 75264 ----a-w- c:\windows\system32\bfbe.sys
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\dllcache\vbscript.dll
2008-07-26 20:59:27 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008072620080727\index.dat

============= FINISH: 19:31:30.76 ===============


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 5/11/2003 6:17:18 PM
System Uptime: 6/2/2010 12:52:42 PM (7 hours ago)

Motherboard: Dell Computer Corporation | | 07W080
Processor: Intel® Pentium® 4 CPU 2.20GHz | Socket 478 | 2193/400mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 56 GiB total, 39.103 GiB free.
D: is CDROM ()
E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP2000: 5/15/2010 12:01:39 PM - System Checkpoint
RP2001: 5/15/2010 12:13:28 PM - Installed RegWork.
RP2002: 5/16/2010 1:06:57 PM - System Checkpoint
RP2003: 5/16/2010 8:22:15 PM - Removed RegWork.
RP2004: 5/17/2010 5:41:45 PM - Installed SUPERAntiSpyware Free Edition
RP2005: 5/19/2010 6:11:31 PM - System Checkpoint
RP2006: 5/19/2010 6:53:37 PM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
RP2007: 5/19/2010 7:20:33 PM - Removed SUPERAntiSpyware Free Edition
RP2008: 5/20/2010 6:37:00 AM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
RP2009: 5/21/2010 8:04:06 AM - System Checkpoint
RP2010: 5/22/2010 8:27:42 AM - System Checkpoint
RP2011: 5/23/2010 9:18:17 AM - System Checkpoint
RP2012: 5/24/2010 9:59:23 AM - System Checkpoint
RP2013: 5/24/2010 4:01:48 PM - Software Distribution Service 3.0
RP2014: 5/25/2010 4:12:58 PM - Software Distribution Service 3.0
RP2015: 5/26/2010 7:21:19 PM - System Checkpoint
RP2016: 5/27/2010 10:24:28 PM - Software Distribution Service 3.0
RP2017: 5/28/2010 10:48:39 AM - Printer Driver Microsoft Office Document Image Writer Installed
RP2018: 5/29/2010 11:49:20 AM - System Checkpoint
RP2019: 5/30/2010 1:07:57 PM - System Checkpoint
RP2020: 5/31/2010 1:44:05 PM - System Checkpoint
RP2021: 6/1/2010 1:19:11 AM - Software Distribution Service 3.0
RP2022: 6/2/2010 9:54:15 AM - System Checkpoint

==== Installed Programs ======================

Adobe Flash Player 10 ActiveX
Adobe Reader 8.2.2
Adobe Shockwave Player
Adobe® Photoshop® Album Starter Edition 3.0
BACS
Banctec Service Agreement
BCM V.92 56K Modem
Britannica Ready Reference
Broadcom Advanced Control Suite
Critical Update for Windows Media Player 11 (KB959772)
DAO
Dell Picture Studio - Dell Image Expert
Dell ResourceCD
Dell Solution Center
DellSupport
EarthLink Free Trial
Easy CD Creator 5 Basic
Google Toolbar for Internet Explorer
Help and Support Customization
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Intel® Extreme Graphics Driver
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 9
Java™ 6 Update 2
Java™ 6 Update 3
Java™ SE Runtime Environment 6 Update 1
Lexmark X1100 Series
Malwarebytes' Anti-Malware
McAfee SecurityCenter
McAfee Virtual Technician
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft .NET Framework 1.0 Hotfix (KB928367)
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Publisher 2002
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Modem Helper
Musicmatch® Jukebox
My Kazaa Gold
Paint Shop Pro 7
QuickTime
Rhapsody
Rhapsody Player Engine
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980232)
Spybot - Search & Destroy
Symantec KB-DocID:2003093015493306
Update for Windows Internet Explorer 8 (KB972636)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VoiceScribe 8.0
VoiceScribe Typing Module for Word 8.0
Watchtower Library 2006 - English Edition
Watchtower Library 2008 - English
WebFldrs XP
Windows Defender
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage v1.3.0254.0
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinZip
Yahoo! Messenger

==== Event Viewer Messages From Past Week ========

6/2/2010 12:39:55 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file runonce.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 6.0.2900.5512.
6/1/2010 12:43:58 PM, error: System Error [1003] - Error code c0000145, parameter1 c0000005, parameter2 00000000, parameter3 00000000, parameter4 00000000.
6/1/2010 12:34:24 PM, error: Service Control Manager [7031] - The McAfee Services service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
6/1/2010 12:34:24 PM, error: Service Control Manager [7031] - The McAfee Personal Firewall Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Run the configured recovery program.
6/1/2010 12:34:24 PM, error: Service Control Manager [7031] - The McAfee Network Agent service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
5/29/2010 8:00:01 AM, error: Schedule [7901] - The At57.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At369.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At345.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At33.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At321.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At297.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At273.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At249.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At225.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At201.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At177.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At153.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At129.job command failed to start due to the following error: %%2147942402
5/29/2010 8:00:00 AM, error: Schedule [7901] - The At105.job command failed to start due to the following error: %%2147942402
5/29/2010 7:35:00 AM, error: Schedule [7901] - The At8.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:02 AM, error: Schedule [7901] - The At80.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:02 AM, error: Schedule [7901] - The At56.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:02 AM, error: Schedule [7901] - The At368.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:02 AM, error: Schedule [7901] - The At344.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:02 AM, error: Schedule [7901] - The At320.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:02 AM, error: Schedule [7901] - The At32.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:01 AM, error: Schedule [7901] - The At296.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:01 AM, error: Schedule [7901] - The At272.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:01 AM, error: Schedule [7901] - The At248.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:01 AM, error: Schedule [7901] - The At224.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:01 AM, error: Schedule [7901] - The At200.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:00 AM, error: Schedule [7901] - The At176.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:00 AM, error: Schedule [7901] - The At152.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:00 AM, error: Schedule [7901] - The At128.job command failed to start due to the following error: %%2147942402
5/29/2010 7:00:00 AM, error: Schedule [7901] - The At104.job command failed to start due to the following error: %%2147942402
5/29/2010 6:52:13 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: cdudf_xp Lbd
5/29/2010 6:51:31 AM, error: Service Control Manager [7000] - The Symantec Core LC service failed to start due to the following error: The system cannot find the file specified.
5/29/2010 6:51:31 AM, error: Service Control Manager [7000] - The MBAMService service failed to start due to the following error: The system cannot find the file specified.
5/28/2010 9:35:00 PM, error: Schedule [7901] - The At22.job command failed to start due to the following error: %%2147942402
5/28/2010 9:35:00 AM, error: Schedule [7901] - The At10.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 PM, error: Schedule [7901] - The At94.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 PM, error: Schedule [7901] - The At70.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 PM, error: Schedule [7901] - The At46.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 PM, error: Schedule [7901] - The At382.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 PM, error: Schedule [7901] - The At358.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 AM, error: Schedule [7901] - The At82.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:01 AM, error: Schedule [7901] - The At58.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At334.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At310.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At286.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At262.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At238.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At214.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At190.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At166.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At142.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 PM, error: Schedule [7901] - The At118.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At370.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At346.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At34.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At322.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At298.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At274.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At250.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At226.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At202.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At178.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At154.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At130.job command failed to start due to the following error: %%2147942402
5/28/2010 9:00:00 AM, error: Schedule [7901] - The At106.job command failed to start due to the following error: %%2147942402
5/28/2010 8:35:00 PM, error: Schedule [7901] - The At21.job command failed to start due to the following error: %%2147942402
5/28/2010 8:35:00 AM, error: Schedule [7901] - The At9.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:01 PM, error: Schedule [7901] - The At93.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:01 PM, error: Schedule [7901] - The At69.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:01 PM, error: Schedule [7901] - The At45.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:01 PM, error: Schedule [7901] - The At381.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At357.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At333.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At309.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At285.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At261.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At237.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At213.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At189.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At165.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At141.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 PM, error: Schedule [7901] - The At117.job command failed to start due to the following error: %%2147942402
5/28/2010 8:00:00 AM, error: Schedule [7901] - The At81.job command failed to start due to the following error: %%2147942402
5/28/2010 7:35:00 PM, error: Schedule [7901] - The At20.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At92.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At68.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At44.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At380.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At356.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At332.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At308.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At284.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At260.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At236.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At212.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At188.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At164.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At140.job command failed to start due to the following error: %%2147942402
5/28/2010 7:00:00 PM, error: Schedule [7901] - The At116.job command failed to start due to the following error: %%2147942402
5/28/2010 6:45:17 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
5/28/2010 6:35:00 PM, error: Schedule [7901] - The At19.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At91.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At67.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At43.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At379.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At355.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At331.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At307.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At283.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At259.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At235.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At211.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At187.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At163.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At139.job command failed to start due to the following error: %%2147942402
5/28/2010 6:00:00 PM, error: Schedule [7901] - The At115.job command failed to start due to the following error: %%2147942402
5/28/2010 5:35:00 PM, error: Schedule [7901] - The At18.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At90.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At66.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At42.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At378.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At354.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At330.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At306.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At282.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At258.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At234.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At210.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At186.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At162.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At138.job command failed to start due to the following error: %%2147942402
5/28/2010 5:00:00 PM, error: Schedule [7901] - The At114.job command failed to start due to the following error: %%2147942402
5/28/2010 4:35:00 PM, error: Schedule [7901] - The At17.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At89.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At65.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At41.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At377.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At353.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At329.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At305.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At281.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At257.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At233.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At209.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At185.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At161.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At137.job command failed to start due to the following error: %%2147942402
5/28/2010 4:00:00 PM, error: Schedule [7901] - The At113.job command failed to start due to the following error: %%2147942402
5/28/2010 3:35:00 PM, error: Schedule [7901] - The At16.job command failed to start due to the following error: %%2147942402
5/28/2010 3:03:44 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At88.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At64.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At40.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At376.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At352.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At328.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At304.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At280.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At256.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At232.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At208.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At184.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At160.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At136.job command failed to start due to the following error: %%2147942402
5/28/2010 3:00:00 PM, error: Schedule [7901] - The At112.job command failed to start due to the following error: %%2147942402
5/28/2010 2:35:00 PM, error: Schedule [7901] - The At15.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At87.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At63.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At39.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At375.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At351.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At327.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At303.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At279.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At255.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At231.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At207.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At183.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At159.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At135.job command failed to start due to the following error: %%2147942402
5/28/2010 2:00:00 PM, error: Schedule [7901] - The At111.job command failed to start due to the following error: %%2147942402
5/28/2010 12:35:55 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
5/28/2010 12:35:00 PM, error: Schedule [7901] - The At13.job command failed to start due to the following error: %%2147942402
5/28/2010 12:30:15 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service McNASvc with arguments "" in order to run the server: {24F616A1-B755-4053-8018-C3425DC8B68A}
5/28/2010 12:29:29 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: cdudf_xp Fips intelppm Lbd
5/28/2010 12:24:00 AM, error: Schedule [7901] - The At121.job command failed to start due to the following error: %%2147942402
5/28/2010 12:23:00 AM, error: Schedule [7901] - The At337.job command failed to start due to the following error: %%2147942402
5/28/2010 12:20:00 AM, error: Schedule [7901] - The At193.job command failed to start due to the following error: %%2147942402
5/28/2010 12:08:00 AM, error: Schedule [7901] - The At73.job command failed to start due to the following error: %%2147942402
5/28/2010 12:07:00 AM, error: Schedule [7901] - The At145.job command failed to start due to the following error: %%2147942402
5/28/2010 12:06:00 AM, error: Schedule [7901] - The At97.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At85.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At61.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At373.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At37.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At349.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At325.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At301.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At277.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At253.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At229.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At205.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At181.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At157.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At133.job command failed to start due to the following error: %%2147942402
5/28/2010 12:00:00 PM, error: Schedule [7901] - The At109.job command failed to start due to the following error: %%2147942402
5/28/2010 11:35:00 AM, error: Schedule [7901] - The At12.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At84.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At60.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At372.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At36.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At348.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At324.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At300.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At276.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At252.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At228.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At204.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At180.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At156.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At132.job command failed to start due to the following error: %%2147942402
5/28/2010 11:00:00 AM, error: Schedule [7901] - The At108.job command failed to start due to the following error: %%2147942402
5/28/2010 10:35:00 AM, error: Schedule [7901] - The At11.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At95.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At71.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At47.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At383.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At359.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At335.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:01 PM, error: Schedule [7901] - The At311.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At287.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At263.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At239.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At215.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At191.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At167.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At143.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 PM, error: Schedule [7901] - The At119.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At83.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At59.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At371.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At35.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At347.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At323.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At299.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At275.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At251.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At227.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At203.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At179.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At155.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At131.job command failed to start due to the following error: %%2147942402
5/28/2010 10:00:00 AM, error: Schedule [7901] - The At107.job command failed to start due to the following error: %%2147942402
5/28/2010 1:35:00 PM, error: Schedule [7901] - The At14.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At86.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At62.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At38.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At374.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At350.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At326.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At302.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At278.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At254.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At230.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At206.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At182.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At158.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At134.job command failed to start due to the following error: %%2147942402
5/28/2010 1:00:00 PM, error: Schedule [7901] - The At110.job command failed to start due to the following error: %%2147942402
5/27/2010 6:35:00 AM, error: Schedule [7901] - The At7.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At79.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At55.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At367.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At343.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At319.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At31.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At295.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At271.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At247.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At223.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At199.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At175.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At151.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At127.job command failed to start due to the following error: %%2147942402
5/27/2010 6:00:00 AM, error: Schedule [7901] - The At103.job command failed to start due to the following error: %%2147942402
5/27/2010 5:35:00 AM, error: Schedule [7901] - The At6.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:01 AM, error: Schedule [7901] - The At78.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:01 AM, error: Schedule [7901] - The At54.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:01 AM, error: Schedule [7901] - The At366.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:01 AM, error: Schedule [7901] - The At342.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:01 AM, error: Schedule [7901] - The At318.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At30.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At294.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At270.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At246.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At222.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At198.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At174.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At150.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At126.job command failed to start due to the following error: %%2147942402
5/27/2010 5:00:00 AM, error: Schedule [7901] - The At102.job command failed to start due to the following error: %%2147942402
5/27/2010 4:35:00 AM, error: Schedule [7901] - The At5.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:01 AM, error: Schedule [7901] - The At77.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:01 AM, error: Schedule [7901] - The At53.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:01 AM, error: Schedule [7901] - The At365.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:01 AM, error: Schedule [7901] - The At341.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At317.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At293.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At29.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At269.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At245.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At221.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At197.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At173.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At149.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At125.job command failed to start due to the following error: %%2147942402
5/27/2010 4:00:00 AM, error: Schedule [7901] - The At101.job command failed to start due to the following error: %%2147942402
5/27/2010 3:35:00 AM, error: Schedule [7901] - The At4.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:01 AM, error: Schedule [7901] - The At76.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:01 AM, error: Schedule [7901] - The At52.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:01 AM, error: Schedule [7901] - The At364.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:01 AM, error: Schedule [7901] - The At340.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:01 AM, error: Schedule [7901] - The At316.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At292.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At28.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At268.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At244.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At220.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At196.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At172.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At148.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At124.job command failed to start due to the following error: %%2147942402
5/27/2010 3:00:00 AM, error: Schedule [7901] - The At100.job command failed to start due to the following error: %%2147942402
5/27/2010 2:35:00 AM, error: Schedule [7901] - The At3.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:02 AM, error: Schedule [7901] - The At99.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:02 AM, error: Schedule [7901] - The At75.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:02 AM, error: Schedule [7901] - The At51.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:02 AM, error: Schedule [7901] - The At363.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:02 AM, error: Schedule [7901] - The At339.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:02 AM, error: Schedule [7901] - The At315.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:01 AM, error: Schedule [7901] - The At291.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:01 AM, error: Schedule [7901] - The At27.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:01 AM, error: Schedule [7901] - The At267.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:01 AM, error: Schedule [7901] - The At243.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:01 AM, error: Schedule [7901] - The At219.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:00 AM, error: Schedule [7901] - The At195.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:00 AM, error: Schedule [7901] - The At171.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:00 AM, error: Schedule [7901] - The At147.job command failed to start due to the following error: %%2147942402
5/27/2010 2:00:00 AM, error: Schedule [7901] - The At123.job command failed to start due to the following error: %%2147942402
5/27/2010 12:57:00 AM, error: Schedule [7901] - The At169.job command failed to start due to the following error: %%2147942402
5/27/2010 12:56:00 AM, error: Schedule [7901] - The At25.job command failed to start due to the following error: %%2147942402
5/27/2010 12:51:00 AM, error: Schedule [7901] - The At49.job command failed to start due to the following error: %%2147942402
5/27/2010 12:48:00 AM, error: Schedule [7901] - The At313.job command failed to start due to the following error: %%2147942402
5/27/2010 12:47:00 AM, error: Schedule [7901] - The At241.job command failed to start due to the following error: %%2147942402
5/27/2010 12:46:00 AM, error: Schedule [7901] - The At265.job command failed to start due to the following error: %%2147942402
5/27/2010 12:41:00 AM, error: Schedule [7901] - The At361.job command failed to start due to the following error: %%2147942402
5/27/2010 12:40:00 AM, error: Schedule [7901] - The At217.job command failed to start due to the following error: %%2147942402
5/27/2010 12:35:00 AM, error: Schedule [7901] - The At1.job command failed to start due to the following error: %%2147942402
5/27/2010 12:31:00 AM, error: Schedule [7901] - The At289.job command failed to start due to the following error: %%2147942402
5/27/2010 11:35:00 PM, error: Schedule [7901] - The At24.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At96.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At72.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At48.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At384.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At360.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At336.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At312.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At288.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At264.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At240.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At216.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At192.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At168.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At144.job command failed to start due to the following error: %%2147942402
5/27/2010 11:00:00 PM, error: Schedule [7901] - The At120.job command failed to start due to the following error: %%2147942402
5/27/2010 10:35:00 PM, error: Schedule [7901] - The At23.job command failed to start due to the following error: %%2147942402
5/27/2010 1:35:00 AM, error: Schedule [7901] - The At2.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At98.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At74.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At50.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At362.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At338.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At314.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At290.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:01 AM, error: Schedule [7901] - The At266.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At26.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At242.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At218.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At194.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At170.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At146.job command failed to start due to the following error: %%2147942402
5/27/2010 1:00:00 AM, error: Schedule [7901] - The At122.job command failed to start due to the following error: %%2147942402

==== End Of File ===========================

[Maniac]

**Note: If you need more detailed information, please visit the web page of ComboFix in BleepingComputer. **

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper.

Please download ComboFix from
Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

• If you are using Firefox, make sure that your download settings are as follows:
  
  • Open Tools -> Options -> Main tab
  • Set to Always ask me where to Save the files.
• During the download, rename Combofix to Combo-Fix as follows:
  
  
  
  
  
  
• It is important you rename Combofix during the download, but not after.
• Please do not rename Combofix to other names, but only to the one indicated.
• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  

  -----------------------------------------------------------

  
  
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause unpredictable results.
  • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    

    -----------------------------------------------------------

  • Close any open browsers.
  • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
  • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

  -----------------------------------------------------------

• Double click on combo-Fix.exe & follow the prompts.
• When finished, it will produce a report for you.
• Please post the C:\Combo-Fix.txt for further review.

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

[cgrammie2]

**Note: If you need more detailed information, please visit the web page of ComboFix in BleepingComputer. **

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper.

Please download ComboFix from
Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

• If you are using Firefox, make sure that your download settings are as follows:
  
  • Open Tools -> Options -> Main tab
  • Set to Always ask me where to Save the files.
• During the download, rename Combofix to Combo-Fix as follows:
  
  
  
  
  
  
• It is important you rename Combofix during the download, but not after.
• Please do not rename Combofix to other names, but only to the one indicated.
• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  

  -----------------------------------------------------------

  
  
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause unpredictable results.
  • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    

    -----------------------------------------------------------

  • Close any open browsers.
  • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
  • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

  -----------------------------------------------------------

• Double click on combo-Fix.exe & follow the prompts.
• When finished, it will produce a report for you.
• Please post the C:\Combo-Fix.txt for further review.

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

---------------------------------------

Hello Borislav -

I am leaving for several days and won't be able to try this combofix until I return. PLEASE do not close out my ticket. I will respond back to you when I return. Thanks!

[Maniac]

Thanks for update!

Don't worry!