![]() |
| ||
| Unable to access control panel Hi I'm Nackio and not very tech savvy. I can't access my control panel on my Acer Aspire Windows Vista laptop. I already did some of the steps I saw outlined in previous threads. Here is my Combo fix report log: ComboFix 08-12-12.05 - Nadia&Shaq 2008-12-13 12:17:10.1 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1013.243 [GMT -5:00] Running from: c:\users\Nadia&Shaq\Downloads\ComboFix.exe * Created a new restore point . Error: Cfiles.dat ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\Nadia&Shaq\AppData\Roaming\.# . ((((((((((((((((((((((((( Files Created from 2008-11-13 to 2008-12-13 ))))))))))))))))))))))))))))))) . 2008-12-13 09:54 . 2008-12-13 09:54 <DIR> d-------- c:\users\Nadia&Shaq\AppData\Roaming\Uniblue 2008-12-13 00:12 . 2008-12-13 00:12 <DIR> d-------- c:\program files\Trend Micro 2008-12-12 10:52 . 2008-10-21 20:22 2,048 --a------ c:\windows\System32\tzres.dll 2008-12-11 21:58 . 2008-10-31 20:21 4,240,384 --a------ c:\windows\System32\GameUXLegacyGDFs.dll 2008-12-11 21:58 . 2008-10-21 00:25 296,960 --a------ c:\windows\System32\gdi32.dll 2008-12-11 21:58 . 2008-10-31 22:44 28,672 --a------ c:\windows\System32\Apphlpdm.dll 2008-12-08 17:58 . 2008-12-08 17:58 <DIR> d-------- c:\users\All Users\LogMeIn 2008-12-08 17:58 . 2008-12-08 17:58 <DIR> d-------- c:\programdata\LogMeIn 2008-12-08 17:56 . 2008-10-16 20:35 87,352 --a------ c:\windows\System32\LMIinit.dll 2008-12-08 17:56 . 2008-10-16 20:35 83,288 --a------ c:\windows\System32\LMIRfsClientNP.dll 2008-12-08 17:56 . 2008-07-24 18:46 47,640 --a------ c:\windows\System32\drivers\LMIRfsDriver.sys 2008-12-08 17:56 . 2008-10-16 20:35 28,984 --a------ c:\windows\System32\LMIport.dll 2008-12-08 17:56 . 2008-12-08 17:56 1,024 --a------ C:\.rnd 2008-12-08 17:55 . 2008-12-13 00:08 <DIR> d-------- c:\program files\LogMeIn 2008-12-08 15:43 . 2008-12-08 15:43 <DIR> d-------- c:\program files\Microsoft Easy Assist 2008-12-08 15:42 . 2008-12-08 15:42 <DIR> d-------- c:\users\All Users\Applications 2008-12-08 15:42 . 2008-12-08 15:42 <DIR> d-------- c:\programdata\Applications 2008-12-08 14:56 . 2008-12-08 14:56 <DIR> d-------- c:\users\All Users\Citrix 2008-12-08 14:56 . 2008-12-08 14:56 <DIR> d-------- c:\programdata\Citrix 2008-12-08 14:38 . 2008-12-08 14:38 61,224 --a------ c:\users\Nadia&Shaq\GoToAssistDownloadHelper.exe 2008-12-08 14:28 . 2008-12-08 14:28 <DIR> d-------- c:\users\Nadia&Shaq\AppData\Roaming\McAfee 2008-12-03 23:42 . 2008-12-04 06:47 <DIR> d-------- c:\program files\3D LOTR Sauron Eye 2008-12-03 23:42 . 2008-12-04 06:46 65,879 --a------ c:\windows\System32\3D LOTR SAURON EYE.scr 2008-12-03 23:18 . 2008-12-03 23:20 <DIR> d-------- c:\users\Nadia&Shaq\AppData\Roaming\vlc 2008-12-03 23:16 . 2008-12-03 23:16 <DIR> d-------- c:\program files\VideoLAN 2008-12-03 21:48 . 2008-12-03 21:48 <DIR> d-------- c:\program files\uTorrent 2008-12-03 21:47 . 2008-12-09 07:32 <DIR> d-------- c:\users\Nadia&Shaq\AppData\Roaming\uTorrent 2008-11-30 00:13 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Searches 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Videos 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Saved Games 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Pictures 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Music 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Links 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Downloads 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> dr------- c:\users\Guest\Documents 2008-11-30 00:12 . 2008-11-30 00:12 <DIR> dr------- c:\users\Guest\Contacts 2008-11-30 00:12 . 2006-11-02 07:37 <DIR> d-------- c:\users\Guest\AppData\Roaming\Media Center Programs 2008-11-30 00:12 . 2008-03-20 12:07 <DIR> d-------- c:\users\Guest\AppData\Roaming\Acer GameZone Console 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> d--h----- c:\users\Guest\AppData 2008-11-30 00:12 . 2008-11-30 00:13 <DIR> d-------- c:\users\Guest 2008-11-29 14:45 . 2008-11-29 14:45 <DIR> d-------- c:\users\All Users\Google 2008-11-29 14:43 . 2008-12-13 00:18 <DIR> d-------- c:\users\All Users\Google Updater 2008-11-29 14:43 . 2008-12-13 00:18 <DIR> d-------- c:\programdata\Google Updater 2008-11-29 14:43 . 2008-11-29 15:05 <DIR> d-------- c:\program files\Google 2008-11-29 13:29 . 2008-12-08 23:42 <DIR> d-------- c:\users\Nadia&Shaq\AppData\Roaming\LimeWire 2008-11-29 13:25 . 2008-11-29 13:24 410,976 --a------ c:\windows\System32\deploytk.dll 2008-11-29 13:24 . 2008-11-29 13:24 <DIR> d-------- c:\program files\Java 2008-11-29 13:04 . 2008-11-29 13:14 <DIR> d-------- c:\program files\Windows Live Toolbar 2008-11-29 12:59 . 2008-11-29 12:59 <DIR> d-------- c:\program files\MSN Messenger 2008-11-29 11:28 . 2008-11-29 11:32 <DIR> d-------- c:\users\All Users\Yahoo! 2008-11-29 11:28 . 2008-11-29 11:32 <DIR> d-------- c:\programdata\Yahoo! 2008-11-28 23:01 . 2008-11-28 23:01 <DIR> d-------- c:\program files\MSXML 4.0 2008-11-28 22:48 . 2008-06-25 20:45 12,240,896 --a------ c:\windows\System32\NlsLexicons0007.dll 2008-11-28 22:48 . 2008-06-25 20:45 2,644,480 --a------ c:\windows\System32\NlsLexicons0009.dll 2008-11-28 22:48 . 2008-08-05 04:49 428,544 --a------ c:\windows\System32\EncDec.dll 2008-11-28 22:48 . 2008-08-05 04:49 293,376 --a------ c:\windows\System32\psisdecd.dll 2008-11-28 22:48 . 2008-08-05 04:48 217,088 --a------ c:\windows\System32\psisrndr.ax 2008-11-28 22:48 . 2008-08-05 04:48 177,664 --a------ c:\windows\System32\mpg2splt.ax 2008-11-28 22:48 . 2008-08-05 04:48 80,896 --a------ c:\windows\System32\MSNP.ax 2008-11-28 22:48 . 2008-04-22 23:41 57,856 --a------ c:\windows\System32\MSDvbNP.ax 2008-11-28 22:47 . 2008-06-25 22:29 801,280 --a------ c:\windows\System32\NaturalLanguage6.dll 2008-11-28 22:42 . 2008-02-29 02:11 988,216 --a------ c:\windows\System32\winload.exe 2008-11-28 22:42 . 2008-02-29 02:11 927,288 --a------ c:\windows\System32\winresume.exe 2008-11-28 22:42 . 2008-02-22 00:05 615,992 --a------ c:\windows\System32\ci.dll 2008-11-28 22:42 . 2008-02-29 02:14 19,000 --a------ c:\windows\System32\kd1394.dll 2008-11-28 22:41 . 2008-02-29 01:53 378,368 --a------ c:\windows\System32\srcore.dll 2008-11-28 22:41 . 2008-02-28 23:12 318,464 --a------ c:\windows\System32\rstrui.exe 2008-11-28 22:41 . 2008-02-29 01:53 46,592 --a------ c:\windows\System32\setbcdlocale.dll 2008-11-28 22:41 . 2008-02-29 01:53 40,960 --a------ c:\windows\System32\srclient.dll 2008-11-28 22:41 . 2008-02-28 23:12 14,848 --a------ c:\windows\System32\srdelayed.exe 2008-11-28 22:41 . 2008-02-29 01:35 6,656 --a------ c:\windows\System32\kbd106n.dll 2008-11-28 22:39 . 2008-03-07 23:21 1,695,744 --a------ c:\windows\System32\gameux.dll 2008-11-28 22:39 . 2008-10-21 00:25 1,645,568 --a------ c:\windows\System32\connect.dll 2008-11-28 22:39 . 2008-09-09 22:40 1,334,272 --a------ c:\windows\System32\msxml6.dll 2008-11-28 22:39 . 2008-04-26 03:26 891,448 --a------ c:\windows\System32\drivers\tcpip.sys 2008-11-28 22:39 . 2008-04-11 22:32 784,896 --a------ c:\windows\System32\rpcrt4.dll 2008-11-28 22:39 . 2008-06-18 22:31 361,984 --a------ c:\windows\System32\IPSECSVC.DLL 2008-11-28 22:39 . 2008-10-21 22:57 241,152 --a------ c:\windows\System32\PortableDeviceApi.dll 2008-11-28 22:39 . 2008-04-04 20:21 72,192 --a------ c:\windows\System32\drivers\pacer.sys 2008-11-28 22:39 . 2008-04-04 22:34 15,360 --a------ c:\windows\System32\pacerprf.dll 2008-11-28 22:38 . 2008-09-17 21:16 2,032,640 --a------ c:\windows\System32\win32k.sys 2008-11-28 22:38 . 2008-06-25 22:29 303,616 --a------ c:\windows\System32\wmpeffects.dll 2008-11-28 22:38 . 2008-04-18 00:48 269,312 --a------ c:\windows\System32\es.dll 2008-11-28 22:38 . 2008-08-26 20:05 212,480 --a------ c:\windows\System32\drivers\mrxsmb10.sys 2008-11-28 22:37 . 2008-04-26 03:08 1,314,816 --a------ c:\windows\System32\quartz.dll 2008-11-28 22:37 . 2008-09-05 00:14 1,191,936 --a------ c:\windows\System32\msxml3.dll 2008-11-28 22:37 . 2008-08-27 22:40 712,704 --a------ c:\windows\System32\WindowsCodecs.dll 2008-11-28 22:37 . 2008-08-27 22:40 425,472 --a------ c:\windows\System32\PhotoMetadataHandler.dll 2008-11-28 22:37 . 2008-08-27 22:40 347,136 --a------ c:\windows\System32\WindowsCodecsExt.dll 2008-11-28 22:37 . 2008-08-26 20:06 288,768 --a------ c:\windows\System32\drivers\srv.sys 2008-11-28 22:37 . 2008-09-17 23:56 147,456 --a------ c:\windows\System32\Faultrep.dll 2008-11-28 22:36 . 2008-08-11 22:39 443,392 --a------ c:\windows\System32\win32spl.dll 2008-11-28 22:36 . 2008-05-08 16:59 430,080 --a------ c:\windows\System32\vbscript.dll 2008-11-28 22:36 . 2008-05-08 16:59 180,224 --a------ c:\windows\System32\scrobj.dll 2008-11-28 22:36 . 2008-05-08 16:59 172,032 --a------ c:\windows\System32\scrrun.dll 2008-11-28 22:36 . 2008-05-08 16:59 155,648 --a------ c:\windows\System32\wscript.exe 2008-11-28 22:36 . 2008-05-08 16:58 135,168 --a------ c:\windows\System32\wshom.ocx 2008-11-28 22:36 . 2008-05-08 16:58 135,168 --a------ c:\windows\System32\cscript.exe 2008-11-28 22:36 . 2008-09-17 23:56 125,952 --a------ c:\windows\System32\wersvc.dll 2008-11-28 22:36 . 2008-05-08 16:59 90,112 --a------ c:\windows\System32\wshext.dll 2008-11-28 22:35 . 2008-04-10 00:12 738,304 --a------ c:\windows\System32\inetcomm.dll 2008-11-28 22:35 . 2008-08-01 20:01 625,152 --a------ c:\windows\System32\drivers\dxgkrnl.sys 2008-11-28 22:35 . 2008-06-25 22:29 565,248 --a------ c:\windows\System32\emdmgmt.dll 2008-11-28 22:35 . 2008-05-19 21:07 148,480 --a------ c:\windows\System32\drivers\nwifi.sys 2008-11-28 22:35 . 2008-05-09 20:33 113,664 --a------ c:\windows\System32\drivers\rmcast.sys 2008-11-28 22:35 . 2008-06-25 22:29 45,056 --a------ c:\windows\System32\dataclen.dll 2008-11-28 22:35 . 2008-08-01 22:26 36,864 --a------ c:\windows\System32\cdd.dll 2008-11-28 22:34 . 2008-09-18 00:09 3,601,464 --a------ c:\windows\System32\ntkrnlpa.exe 2008-11-28 22:34 . 2008-09-18 00:09 3,549,240 --a------ c:\windows\System32\ntoskrnl.exe 2008-11-28 22:26 . 2008-11-28 22:26 <DIR> d-------- c:\program files\Convesoft 2008-11-28 22:11 . 2008-10-16 16:13 1,809,944 --a------ c:\windows\System32\wuaueng.dll 2008-11-28 22:11 . 2008-10-16 15:56 1,524,736 --a------ c:\windows\System32\wucltux.dll 2008-11-28 22:11 . 2008-10-16 16:09 51,224 --a------ c:\windows\System32\wuauclt.exe 2008-11-28 22:11 . 2008-10-16 16:09 43,544 --a------ c:\windows\System32\wups2.dll 2008-11-28 22:10 . 2008-10-16 16:12 561,688 --a------ c:\windows\System32\wuapi.dll 2008-11-28 22:10 . 2008-10-16 14:08 162,064 --a------ c:\windows\System32\wuwebv.dll 2008-11-28 22:10 . 2008-10-16 15:55 83,456 --a------ c:\windows\System32\wudriver.dll 2008-11-28 22:10 . 2008-10-16 16:08 34,328 --a------ c:\windows\System32\wups.dll 2008-11-28 22:10 . 2008-10-16 13:56 31,232 --a------ c:\windows\System32\wuapp.exe 2008-11-23 15:37 . 2008-11-23 15:37 <DIR> d-------- c:\program files\VirtualDJ 2008-11-20 09:16 . 2008-11-20 09:16 <DIR> dr------- c:\windows\System32\config\systemprofile\Music 2008-11-20 08:42 . 2008-11-20 08:42 <DIR> d-------- c:\users\Nadia&Shaq\AppData\Roaming\Yahoo! 2008-11-20 08:42 . 2008-12-08 14:32 <DIR> d-------- c:\users\All Users\Yahoo! Companion 2008-11-20 08:42 . 2008-12-08 14:32 <DIR> d-------- c:\programdata\Yahoo! Companion 2008-11-20 08:37 . 2008-11-20 08:37 <DIR> d-------- c:\windows\A5W_DATA . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-13 14:48 --------- d-----w c:\program files\McAfee 2008-12-12 16:07 --------- d-----w c:\program files\Windows Mail 2008-12-12 15:55 --------- d-----w c:\programdata\Microsoft Help 2008-12-11 16:08 --------- d-----w c:\program files\Common Files\Adobe 2008-12-08 19:29 --------- d-----w c:\programdata\McAfee 2008-12-01 02:09 --------- d-----w c:\program files\Microsoft Works 2008-11-29 16:28 --------- d-----w c:\program files\Yahoo! 2008-11-29 16:12 --------- d-----w c:\programdata\SiteAdvisor 2008-11-01 03:44 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll 2008-11-01 03:44 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll 2008-11-01 03:44 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll 2008-11-01 03:44 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll 2008-11-01 03:44 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll 2008-10-29 06:29 2,927,104 ----a-w c:\windows\explorer.exe 2008-10-17 01:35 23,736 ----a-w c:\windows\System32\lmimirr.dll 2008-10-17 01:35 10,040 ----a-w c:\windows\System32\lmimirr2.dll 2008-10-16 04:47 827,392 ----a-w c:\windows\System32\wininet.dll 2008-09-30 21:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll 2008-01-21 02:43 174 --sha-w c:\program files\desktop.ini . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}] 2008-07-28 05:47 160496 --a------ c:\progra~1\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-01-03 04:00 39472 --a------ c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-20 1233920] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-20 125952] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-20 202240] "Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2008-11-05 4347120] "MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-11-29 39408] "WindowsWelcomeCenter"="oobefldr.dll" [2008-01-20 c:\windows\System32\oobefldr.dll] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2007-08-04 582992] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-05 525360] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-01-22 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-01-22 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-01-22 133656] "PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208] "PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704] "LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-01-04 768520] "PlayMovie"="c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2008-01-22 200704] "Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-07-21 159744] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-29 136600] "LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2008-07-24 63048] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792] "RtHDVCpl"="RtHDVCpl.exe" [2008-03-11 c:\windows\RtHDVCpl.exe] "Skytel"="Skytel.exe" [2007-11-20 c:\windows\SkyTel.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-03-20 535336] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\disallowrun] "1"= command.com [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{FC1EF117-9858-44F7-95CC-A3DC4313EAE0}"= Profile=Private|Profile=Public|c:\program files\Common Files\Mcafee\MNA\McNaSvc.exe:McAfee Network Agent "{ED2FC4EB-32A1-4E56-904D-4EA0614FD500}"= c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe "{33EEE166-85DE-46AC-87E1-E20A5A5434EB}"= c:\program files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician "{BDA5D874-16EF-4B10-8BA6-5856E0B56CE3}"= c:\program files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia "{0FDC3C5C-F4E1-4111-B538-9BCA586D69A3}"= c:\program files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard "{6C8BF0A6-8497-4690-A024-11A85EAD1B0E}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{7E422C72-CDB8-4FA4-A345-DC20BD82DD47}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{78033C92-06D3-4A55-913A-B06406669F70}"= c:\program files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine "{3812D509-2657-457B-AD54-B5D98534A92A}"= c:\program files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie "{43BB7FD7-AE73-486E-A17E-032081D8B1A6}"= c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program "{F6398282-9C3E-4A5F-B203-206AF22BF206}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger "{C5371192-20E5-44BF-8B0E-75ED1AA54FF7}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger "{36DEF293-BB86-42EA-AACA-27FED8C4BB37}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{DC34A87D-33C2-43DD-9632-C256E6DCA0DD}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In) "{D28E8693-C2E2-41DE-92D4-F7300677E353}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List] "c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDSfsu.exe:*:Enabled:eDSfsu "c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\encryption.exe:*:Enabled:encryption "c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\decryption.exe:*:Enabled:decryption "c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDSMgr.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDSMgr.exe:*:Enabled:eDSMgr "c:\\Acer\\Empowering Technology\\eDataSecurity\\x86\\eDStbmngr.exe"= c:\acer\Empowering Technology\eDataSecurity\x86\eDStbmngr.exe:*:Enabled:eDStbmngr "c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDSfsu.exe:*:Enabled:eDSfsu "c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\encryption.exe:*:Enabled:encryption "c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\decryption.exe:*:Enabled:decryption "c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDSMgr.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDSMgr.exe:*:Enabled:eDSMgr "c:\\Acer\\Empowering Technology\\eDataSecurity\\x64\\eDStbmngr.exe"= c:\acer\Empowering Technology\eDataSecurity\x64\eDStbmngr.exe:*:Enabled:eDStbmngr R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [2008-06-06 23:22:38 41456] R2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [2008-03-20 51200] R2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\LogMeIn\x86\RaInfo.sys [2008-07-24 12856] R2 LMIRfsDriver;LogMeIn Remote File System Driver;\??\c:\windows\system32\drivers\LMIRfsDriver.sys [2008-12-08 47640] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\McAfee\SiteAdvisor\McSACore.exe" [2008-11-29 203280] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2008-03-20 180736] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a0558cc-b999-11dd-bb5c-d641401f22e2}] \shell\AutoRun\command - G:\LaunchU3.exe -a *Newly Created Service* - PROCEXP90 . Contents of the 'Scheduled Tasks' folder 2008-12-13 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2006-09-27 17:39] 2008-03-20 c:\windows\Tasks\McDefragTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32] 2008-03-20 c:\windows\Tasks\McQcTask.job - c:\progra~1\mcafee\mqc\QcConsol.exe [2007-12-04 13:32] . - - - - ORPHANS REMOVED - - - - WebBrowser-{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - (no file) HKCU-Run-000 - c:\users\Nadia&Shaq\AppData\Roaming\csrss.exe HKCU-Run-Uniblue RegistryBooster 2009 - c:\program files\uniblue\registrybooster\StartRegistryBooster.exe HKLM-Run-ALaunch - c:\acer\ALaunch\AlaunchClient.exe HKLM-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe HKLM-Run-SetPanel - c:\acer\APanel\APanel.cmd HKLM-Run-eRecoveryService - (no file) ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-13 12:20:04 Windows 6.0.6001 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-12-13 12:24:18 ComboFix-quarantined-files.txt 2008-12-13 17:24:13 Pre-Run: 17,242,034,176 bytes free Post-Run: 17,022,099,456 bytes free 281 --- E O F --- 2008-12-12 15:55:46 And here is the Hijack this version 2.0.2. report: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:15:36 AM, on 12/13/2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\RtHDVCpl.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Program Files\LogMeIn\x86\LogMeInSystray.exe C:\Windows\System32\igfxpers.exe C:\Windows\PLFSetI.exe C:\Program Files\LogMeIn\x86\LMIGuardian.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Launch Manager\LManager.exe C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe C:\Program Files\Apoint2K\Apoint.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Users\NADIA&~1\AppData\Local\Temp\RtkBtMnt.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\igfxext.exe C:\Windows\system32\igfxsrvc.exe C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE C:\Windows\ehome\ehmsas.exe C:\Program Files\Apoint2K\ApMsgFwd.exe C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\Apoint2K\Apntex.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\wuauclt.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://en.uk.acer.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://en.uk.acer.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll O1 - Hosts: ::1 localhost O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.0983.0\msneshellx.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.0983.0\msneshellx.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [PLFSetL] C:\Windows\PLFSetL.exe O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe" O4 - HKLM\..\Run: [Skytel] Skytel.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe O4 - HKLM\..\Run: [SetPanel] C:\Acer\APanel\APanel.cmd O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [000] C:\Users\Nadia&Shaq\AppData\Roaming\csrss.exe O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user') O4 - Startup: Orion.lnk = C:\Convesoft\Orion\Messenger.exe O4 - Global Startup: Empowering Technology Launcher.lnk = ? O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O15 - Trusted Zone: http://*.mcafee.com O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-03.sun.com/s/ESD5/JSC...ws-i586-jc.cab O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 11839 bytes Please assist in any way possible! |
| ||
| Re: Unable to access control panel Hi dragz and welcome to daniweb. We certainly need to see more than a combofix log. We need to see logs from Quote:
It is truly never advisable to use combofix unless First instructed to do so by somebody helping you on a forum. This is generally only used when certain clean up steps are not successful or seem to be successful but the problem returns. It is a VERY POWERFUL program which can, when used either improperly or at the wrong time can damage key files on a computer. Please post back with all the requested logs and maybe we can figure out what the problem may be. Judy |
| All times are GMT -4. The time now is 6:39 pm. |
Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC