Solved ERROR WHEN I CONNECT A FLASH DRIVE

[Sexy Devil]

Hello,
Whenever I connect a pendrive/flash drive to my laptop I get this error message.But the most irritating thing is that it does not go !!. CLICK, CONTINUE or TRY AGAIN it wont go. It wont go. Even after I disconnect my drive it shows error. I have to take that error window below the date to it. It came 7 time while I was typing this thread.

 

[Commodore Pet]

Can you post a picture of device manager with the Universal Serial Bus Controller section open please.

 

[Sexy Devil]

yup... here is it.....Thanks for your reply..

 

[pooch]

Hello,
Whenever I connect a pendrive/flash drive to my laptop I get this error message.But the most irritating thing is that it does not go !!. CLICK, CONTINUE or TRY AGAIN it wont go. It wont go. Even after I disconnect my drive it shows error. I have to take that error window below the date to it. It came 7 time while I was typing this thread.

IDMan.exe appears to be a program called Internet download manager you should be able to stop this program starting with Windows (msconfig.exe) or even uninstall it.
If you have no such program installed I would recomend scanning for Malware
Malwarebytes' Anti-Malware Free Download and Reviews - Fileforum

 

[Sexy Devil]

I have got many virus in my laptop.. How do I move them ?? What do I do ???

 

[pooch]

I will ask one of the experts to have a look, but I think you might have to reinstall

 

[Carolyn]

Hi,

Please run a Full Scan using Malwarebytes' and allow it to remove what it finds. Post the resulting Malwarebytes' log here for my review.

Next,

Please download DDS by sUBs from one of the links below, save it to your Desktop (It must be in this location).
Link1
Link2
Please disable any anti-malware program that will block scripts from running before running DDS.

• Right-Click on dds.scr And select " Run as administrator "... and a command window will appear. This is normal.
• Shortly after two logs will appear:
  • DDS.txt
  • Attach.txt
• A window will open instructing you save & post the logs
• Save the logs to a convenient place such as your desktop
• Copy the contents of both logs & post in your next reply

 

[Sexy Devil]

Hello Carolyn .. I've done as you said
1) Malwarebytes' Log
2)DDS.txt(Compressed) {I compressed it because I got a message to do it after the scan}
3)Attach.txt(Compressed)

Thank you..

 

[Carolyn]

Hello Carolyn .. I've done as you said
1) Malwarebytes' Log
2)DDS.txt(Compressed) {I compressed it because I got a message to do it after the scan}
3)Attach.txt(Compressed)

Thank you..

Thank you, but could you do me a favor please. Copy and paste the contents of DDS.txt and Attach.txt and post that. I prefer not to download files to my computer.

 

[Sexy Devil]

DDS.txt -
.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by SHARON LEONG BF at 21:36:03.48 on Fri 04/29/2011
Internet Explorer: 9.0.8112.16421
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2990.1488 [GMT 5.5:30]
.
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files (x86)\Internet Download Manager\IDMan.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files (x86)\Virtual Router\VirtualRouterClient.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\eLitecore\Cyberoam Client for 24Online\CyberoamClient.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Users\SHARON~1\AppData\Local\Temp\winypna.exe
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\SHARON LEONG BF\Desktop\dds.EXE
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
mWinlogon: Userinit=userinit.exe
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
uRun: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
uRun: [Google Update] "C:\Users\SHARON LEONG BF\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\24ONLI~1.LNK - C:\Program Files (x86)\eLitecore\Cyberoam Client for 24Online\CyberoamClient.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\VIRTUA~1.LNK - C:\Windows\Installer\{8DB05F7E-1F7A-4CC0-882F-375B97F04CD4}\_E6D9769DD20AF384865041.exe
uPolicies-system: DisableTaskMgr = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
IE: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: {0D548D23-0F47-4DC8-809B-4EE335871805} = 192.168.100.1
Notify: VESWinlogon - VESWinlogon.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\SHARON~1\AppData\Roaming\Mozilla\Firefox\Profiles\324ocki5.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.moneycontrol.com/stocksmarketsindia/
FF - plugin: C:\Users\SHARON LEONG BF\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Users\SHARON LEONG BF\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\SHARON LEONG BF\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: C:\Windows\system32\Wat\npWatWeb.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-14 59904]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-3-21 202752]
R2 IDMWFP;IDMWFP;C:\Windows\System32\drivers\idmwfp.sys [2011-4-5 146568]
R2 rimspci;rimspci;C:\Windows\System32\drivers\rimssne64.sys [2010-3-21 93696]
R2 risdsnpe;risdsnpe;C:\Windows\System32\drivers\risdsne64.sys [2010-3-21 75776]
R2 Virtual Router;VirtualRouterService;C:\Program Files (x86)\Virtual Router\VirtualRouterService.exe [2009-11-18 12288]
R2 VSNService;VSNService;C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2010-3-21 821760]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\System32\drivers\SFEP.sys [2010-3-21 11392]
R3 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-3-21 571248]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-14 17920]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2010-3-21 395264]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-3-21 35104]
S3 UfasoftSnifDriver4;Ufasoft Snif Driver v4;C:\Program Files (x86)\Ufasoft\Snif\usft_sn4-64.sys [2011-1-31 66176]
S3 UfasoftSnifDriver6;Ufasoft Snif Filter Driver;C:\Windows\System32\drivers\usft_flt6-64.sys [2011-1-31 60336]
S3 UfasoftWiFiDriver;UfasoftWiFiDriver;C:\Program Files (x86)\Ufasoft\Snif\usft_wifi-64.sys [2011-1-31 736152]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-4-3 1255736]
.
=============== Created Last 30 ================
.
2011-04-27 10:21:21 737072 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll
2011-04-27 10:20:39 4283672 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2011-04-27 10:07:48 42776 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2011-04-27 10:07:38 539968 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-04-26 17:34:13 -------- d-----w- C:\Users\SHARON~1\AppData\Roaming\Malwarebytes
2011-04-26 17:34:10 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
2011-04-26 17:34:09 -------- d-----w- C:\PROGRA~3\Malwarebytes
2011-04-26 17:34:07 24152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-04-26 17:34:07 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-04-23 14:53:07 -------- d-----w- C:\Program Files (x86)\NCH Software
2011-04-22 04:13:23 737072 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2011-04-22 04:05:57 4283672 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2011-04-22 04:02:59 42776 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2011-04-22 04:02:54 539968 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-04-21 07:51:16 982912 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2011-04-16 10:20:31 -------- d-----w- C:\Users\SHARON~1\AppData\Local\Google
2011-04-16 10:19:18 -------- d-----w- C:\Users\SHARON~1\AppData\Local\Deployment
2011-04-16 10:19:18 -------- d-----w- C:\Users\SHARON~1\AppData\Local\Apps
2011-04-15 10:47:45 -------- d-----w- C:\Program Files (x86)\Common Files\Sandlot Shared
2011-04-15 10:47:45 -------- d-----w- C:\PROGRA~3\Sandlot Games
2011-04-14 14:30:59 -------- d-----w- C:\Program Files (x86)\TeamViewer
2011-04-07 05:53:41 521448 ----a-w- C:\Windows\System32\deployJava1.dll
2011-04-06 15:31:30 122880 ----a-w- C:\Windows\UnGins.exe
2011-04-06 15:31:30 -------- d-----w- C:\Program Files (x86)\eLitecore
2011-04-05 18:01:01 146568 ----a-w- C:\Windows\System32\drivers\idmwfp.sys
2011-04-05 06:37:54 -------- d-----w- C:\Users\SHARON~1\AppData\Roaming\NCH Software
2011-04-04 07:55:57 -------- d-----w- C:\Users\SHARON~1\AppData\Local\Adobe
2011-04-03 16:03:36 -------- d-----w- C:\Program Files (x86)\GlideWrapper
2011-04-03 16:03:15 -------- d-----w- C:\Program Files (x86)\WinPcap
2011-04-03 05:43:10 -------- d-----w- C:\Program Files (x86)\Alcohol Soft
2011-04-03 05:40:36 503352 ----a-w- C:\Windows\System32\drivers\sptd.sys
2011-04-03 04:50:07 -------- d-----r- C:\Users\SHARON LEONG BF\Virtual Machines
2011-04-03 04:37:47 360712 ----a-w- C:\Windows\System32\drivers\vpcvmm.sys
2011-04-03 04:37:47 2264064 ----a-w- C:\Windows\System32\VPCWizard.exe
2011-04-03 04:37:46 4514816 ----a-w- C:\Windows\System32\vpc.exe
2011-04-03 04:37:46 1210368 ----a-w- C:\Windows\System32\VMWindow.exe
2011-04-03 04:22:00 66304 ----a-w- C:\Windows\System32\drivers\vpcnfltr.sys
2011-04-03 04:21:59 793600 ----a-w- C:\Windows\SysWow64\vmsal.exe
2011-04-03 04:08:48 -------- d-----w- C:\Windows\SysWow64\Wat
2011-04-03 04:08:47 -------- d-----w- C:\Windows\System32\Wat
2011-04-03 03:03:22 33792 ----a-w- C:\Windows\SysWow64\NPSExec.exe
2011-04-03 03:03:21 565760 ----a-w- C:\Windows\SysWow64\MSVCP50.DLL
2011-04-02 09:54:19 -------- d-----w- C:\Program Files (x86)\WinpkFilter
2011-04-02 09:54:16 -------- d-----w- C:\Program Files (x86)\Onlineeye
2011-04-01 16:29:35 243712 ----a-w- C:\Windows\System32\drivers\ks.sys
2011-04-01 13:52:13 463360 ----a-w- C:\Windows\System32\drivers\srv.sys
2011-04-01 13:52:13 402944 ----a-w- C:\Windows\System32\drivers\srv2.sys
2011-04-01 13:52:13 236032 ----a-w- C:\Windows\System32\srvsvc.dll
2011-04-01 13:52:13 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2011-04-01 13:52:12 9728 ----a-w- C:\Windows\SysWow64\sscore.dll
2011-04-01 13:37:52 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2011-04-01 13:37:52 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2011-04-01 13:37:52 153160 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2011-04-01 13:37:52 1446912 ----a-w- C:\Windows\System32\lsasrv.dll
2011-04-01 13:34:38 720896 ----a-w- C:\Windows\System32\odbc32.dll
2011-04-01 13:34:38 573440 ----a-w- C:\Windows\SysWow64\odbc32.dll
2011-04-01 13:34:37 987136 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msado15.dll
2011-04-01 13:34:37 495616 ----a-w- C:\Program Files\Common Files\System\ado\msadox.dll
2011-04-01 13:34:37 466944 ----a-w- C:\Program Files\Common Files\System\ado\msadomd.dll
2011-04-01 13:34:37 372736 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msadox.dll
2011-04-01 13:34:37 352256 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msadomd.dll
2011-04-01 13:34:37 258048 ----a-w- C:\Program Files\Common Files\System\msadc\msadco.dll
2011-04-01 13:34:37 208896 ----a-w- C:\Program Files (x86)\Common Files\System\msadc\msadco.dll
2011-04-01 13:34:37 1425408 ----a-w- C:\Program Files\Common Files\System\ado\msado15.dll
2011-04-01 13:34:10 112000 ----a-w- C:\Windows\System32\consent.exe
2011-04-01 13:21:46 8424784 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2011-04-01 13:21:42 8424784 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{F30408DC-53F0-4063-A310-113EC6399E11}\mpengine.dll
2011-04-01 13:21:42 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-04-01 11:49:19 -------- d-----w- C:\Users\SHARON~1\AppData\Local\Chris_Pietschmann_(http__
2011-04-01 11:48:08 -------- d-----w- C:\Program Files (x86)\Virtual Router
.
==================== Find3M ====================
.
2011-04-21 07:51:16 662528 ----a-w- C:\Windows\System32\XpsPrint.dll
2011-01-31 12:44:52 60336 ----a-w- C:\Windows\System32\drivers\usft_flt6-64.sys
.
============= FINISH: 21:36:33.91 ===============

 

[Sexy Devil]

Attach.txt -
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume2
Install Date: 11/5/2008 5:55:59 AM
System Uptime: 4/29/2011 7:29:34 PM (2 hours ago)
.
Motherboard: Sony Corporation | | VAIO
Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz | N/A | 2266/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 88 GiB total, 56.999 GiB free.
D: is FIXED (NTFS) - 98 GiB total, 85.59 GiB free.
E: is FIXED (NTFS) - 99 GiB total, 87.234 GiB free.
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP32: 4/4/2011 1:44:07 PM - Installed Adobe Reader X.
RP33: 4/7/2011 11:23:10 AM - Installed Java(TM) 6 Update 24 (64-bit)
RP34: 4/13/2011 2:38:51 PM - Installed Grand Theft Auto Vice City
RP35: 4/14/2011 9:49:52 PM - Installed Nanny Mania
RP36: 4/15/2011 4:16:54 PM - Installed Cake Mania - Back to the Bakery
RP37: 4/21/2011 1:20:50 PM - Windows Modules Installer
RP38: 4/21/2011 1:45:08 PM - Windows Modules Installer
.
==== Installed Programs ======================
.
.
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader X (10.0.1)
Cake Mania - Back to the Bakery
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Cyberoam Client for 24Online
Google Talk Plugin
Intel(R) Management Engine Components
Internet Download Manager
Malwarebytes' Anti-Malware
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox 4.0 (x86 en-US)
Nanny Mania
Need For Speed High Stakes
NFS HS Expansion Pack
Onlineeye Pro
Prism Video File Converter
Project IGI
Realtek HDMI Audio Driver for ATI
Realtek High Definition Audio Driver
Sandlot Games Client Services 1.2.2
Setting Utility Series
Total Overdose
Ufasoft Snif
VAIO Control Center
VAIO Event Service
VAIO Power Management
VAIO Smart Network
Virtual Router v0.9 Beta
WinPcap 4.1.1
WinpkFilter Runtime Libraries
WinRAR 4.00 (32-bit)
.
==== Event Viewer Messages From Past Week ========
.
4/29/2011 9:32:49 PM, Error: Microsoft-Windows-SharedAccess_NAT [31004] - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
4/29/2011 7:29:43 PM, Error: Application Popup [56] - Driver RISD returned invalid ID for a child device (0001).
4/29/2011 12:07:58 AM, Error: Service Control Manager [7023] - The Function Discovery Resource Publication service terminated with the following error: %%-2147014847
4/29/2011 12:07:58 AM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Resource Publication service which failed to start because of the following error: %%-2147014847
4/28/2011 9:46:41 AM, Error: Service Control Manager [7024] - The HomeGroup Provider service terminated with service-specific error %%-2147014847.
4/28/2011 9:44:24 AM, Error: Service Control Manager [7023] - The Windows Update service terminated with the following error: %%-2147467243
4/28/2011 9:44:04 AM, Error: bowser [8003] - The master browser has received a server announcement from the computer FRANSISCA that believes that it is the master browser for the domain on transport NetBT_Tcpip_{0D548D23-0F47-4DC8-809B-4EE335871805}. The master browser is stopping or an election is being forced.
4/28/2011 9:32:01 AM, Error: Service Control Manager [7038] - The WdiServiceHost service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
4/28/2011 9:32:01 AM, Error: Service Control Manager [7038] - The netprofm service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
4/28/2011 9:32:01 AM, Error: Service Control Manager [7000] - The Network List Service service failed to start due to the following error: The service did not start due to a logon failure.
4/28/2011 9:32:01 AM, Error: Service Control Manager [7000] - The Diagnostic Service Host service failed to start due to the following error: The service did not start due to a logon failure.
4/28/2011 9:32:01 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1069" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
4/28/2011 1:39:38 PM, Error: Microsoft-Windows-SharedAccess_NAT [34001] - The ICS_IPV6 failed to configure IPv6 stack.
4/24/2011 1:44:10 PM, Error: cdrom [11] - The driver detected a controller error on \Device\CdRom0.
.
==== End Of File ===========================

 

[Sexy Devil]

I hope these help me..

 

[Carolyn]

Before doing anything if you have not already done so, you should back up all your important documents, personal data files and photos to a CD or DVD drive as some infections may render your computer unbootable during or before the disinfection process. The safest practice is not to backup any files with the following file extensions: exe, .scr, .ini, .htm, .html, .php, .asp, .xml, .zip, .rar, .cab as they may be infected.

===========================

Download and Run ComboFix

• Please download ComboFix from one of the following links.
  
  Link 1.
  
  Link 2.
  
  **IMPORTANT !!! Save ComboFix.exe to your Desktop**
  
• Please disable any Antivirus or Firewall you have active, as shown in this topic. Please close all open application windows.
• Double click on ComboFix.exe & follow the prompts
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

• Click on Yes, to continue scanning for malware.
• When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply

A word of warning: Neither I nor sUBs are responsible for any damage you may cause to your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper

 

[Sexy Devil]

Hey, It will take some time for me to backup my photos and videos. They are huge about 90GB. Do I have to take all my data from drives C,D & E ?If yes then I will arrange for it and let you know after I have followed your steps. Please wait as it will take a lot of time(weeks ) to backup

 

[Carolyn]

Are these 3 physical drives or partitions of a single drive?

 

[jimbo45]

Hi there
I would suggest the following

1) copy your DATA (music, photos documents etc) to a CLEAN formatted external HDD -- do the FORMAT of this HDD ON ANOTHER UNINFECTED COMPUTER. Do not do it on your infected computer.

You will need to then SCAN these files for viruses ON AN UN-INFECTED computer -- running ANY program at all on an infected computer can't gurantee your safety. You can't know of course whether the scan program itself is infected or even if windows itself is operating properly.

2) Wipe the HDD containing Windows on your computer TOTALLY clean.

3) Re-install Windows

4) install MSE (free)

5) Be careful on how you surf and what you download from the Internet.

I would never trust a computer that's been infected unless the OS was totally re-installed again from scratch.


Once your computer is clean then TAKE REGULAR BACKUPS so you could always restore from an earlier period -- BUT ENSURE computer is virus free before taking the backup.

Cheers
jimbo

 

[Carolyn]

Good advice, jimbo45