personal security download froze up my computer

We can remove OTMoveIt now.

• Please double-click OTM.exe to run it again.
  
• Press the green CleanUp! button.
  
• Press Yes cleanup process prompt, do the same for the reboot prompt.
  

How is the machine running now?

i havent tried taking it off safe mode. i'll do that now

I ran the OTM.exe like you said and it rebooted. When it came back on it was going really slow it took along time to load from the welcome screen. When it came on the desktop icons were there but the screen was white. It showed loading for ever then i realized it froze cause the time was 10 minutes off and wasnt moving. I rebooted again and same thing but when it finally came on a pop up tab said wkcalrem.exe-application error instructions at "0X77c472e3" referenced memory at "0X0014600" The memory could not be "read" click on ok to terminate click on cancel to debug the program. . . . . i hit ok and tried to open internet and a pop up tab said this page has an unspecified potential security risk would you like to continue. then it froze again i rebooted in safe mode and i checked the add and delete programs personal security is still in there should it be?? Im sorry its so long i didnt know what you needed to know. I didnt want to leave something important out.

I got that potential security risk alot before when it first started freezin up oh i noticed after i already hit the cleanup button that the last line said something about delete failed but that was for deleting the OTM.exe on reboot. as far as i saw it said delete complete for everything else. I didnt really look at it before i hit cleanup jus glanced at it after i hit the button. Im sorry i didnt look cause i knew i wouldnt understand it anyway.

Hello.

• Download combofix from here
  Link 1
  Link 2
  
  1. If you are using Firefox, make sure that your download settings are as follows:
  
  * Tools->Options->Main tab
  * Set to "Always ask me where to Save the files".
  
  2. During the download, rename Combofix to Combo-Fix as follows:
  
  
  
  
  
  3. It is important you rename Combofix during the download, but not after.
  4. Please do not rename Combofix to other names, but only to the one indicated.
  5. Close any open browsers.
  6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  
  
• We need to disable your local AV (Anti-virus) before running Combofix.
  
• See HERE for how to disable your AV.
  
• Double click on ComboFix.exe.
  
• Follow the prompts. NOTE:
  
• ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
  ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***
  
  **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.
  
  
  
• The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.
  
  
  
  
• Allow ComboFix to download the Recovery Console.
  
• Accept the End-User License Agreement.
  
• The Recovery Console will be installed.
  
• You will then get this next prompt that asks if you want to continue the malware scan, select yes
  
  
  
  
• Allow combofix to run
  
• Post C:\combofix.txt back here.
  
  Note:
  Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
  

link 1 is saying some installation files are corrupt. please download a fresh copy and retry the installation. i have little mini combo boxes from trying to run stuck on my desktop? along with 2 bars at bottom with just a red circle that i cant close. (boxes dont have a X to close either). link2 says Internet Explorer cannot display the web page.

oh save. . .sorry ill try again man i feel dumb

i removed eset nod watever it was and disabled my windows firewall and my McAfee. Norton was already disabled. I renamed the file like you said Combo-Fix and when i try to run it i still get that message every time about files are corrupt and get fresh copy???? i tried to run reg. snd in safe mode it still says that. what am i doing wrong?

Does Combofix warn of Virut?

no when i try to run it it just says some installation files are corrupt download a fresh copy and try again.

would it do that if my norton security was still on? norton wont open for me its just a pop up box i think awhile back when i got McAfee i may have deleted some of norton. it wont hurt if i delete norton from the control panel right? the pop up security center thing shows virus protection in green active also firewall in green. no matter how i try to get in to norton it wont let me.

Hello.
Possibly, try uninstalling Norton.

I cant remove any thing while in safe mode so i restarted the computer when i tried to go to add and remove it kept popping up saying Application cannot be executed. The file rundll32.exe is infected. Do you want to Activate your Anti virus Software now? I tried to get in there several times. Then when i went to restart computer it popped up and said Application cannot be executed mcupdate.exe is infected. . . .also when i rebooted and went back into safe mode explorer wasnt workin right for me i ended up having to go to firefox.

My browser was up but when i tried to use my favorites or google that page that says web page is unavailable kept comin up.

Are you in normal Safe Mode or Safe Mode with networking?

im in safe mode with networking usually, that is the only one that lets me on the internet. I tried running that in both safe modes and i tried without safe mode on i always get that same message. and every time i go on without safe mode it scews up my explorer connection. earlier today i had to call 2 different comcast reps to help me figure out how to get my connection back online.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 12/15/2009 5:43:30 PM
System Uptime: 1/20/2010 9:33:48 AM (3 hours ago)

Motherboard: ASUSTek Computer INC. | | Kelut
Processor: AMD Athlon(tm) XP 3200+ | Socket A | 2200/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 149 GiB total, 127.949 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 12/16/2009 12:39:25 AM - Software Distribution Service 3.0
RP2: 12/16/2009 3:47:28 PM - Installed DirectX
RP3: 12/16/2009 3:51:05 PM - Installed Windows XP WIC.
RP4: 12/16/2009 3:54:56 PM - Installed Windows KB954550-v5.
RP5: 12/16/2009 3:55:04 PM - Printer Driver Microsoft XPS Document Writer Installed
RP6: 12/16/2009 3:55:16 PM - Printer Driver Microsoft XPS Document Writer Installed
RP7: 12/16/2009 4:08:10 PM - Installed Windows XP KB938759.
RP8: 12/16/2009 4:27:37 PM - Installed DirectX
RP9: 12/16/2009 4:37:21 PM - Installed DirectX
RP10: 12/16/2009 4:51:15 PM - Installed DirectX
RP11: 12/16/2009 4:54:17 PM - Installed Steam
RP12: 12/16/2009 5:14:31 PM - Software Distribution Service 3.0
RP13: 12/16/2009 5:17:16 PM - Installed Windows XP KB915865.
RP14: 12/16/2009 5:17:37 PM - Installed Windows NLSDownlevelMapping.
RP15: 12/16/2009 5:17:53 PM - Installed Windows IDNMitigationAPIs.
RP16: 12/16/2009 5:19:01 PM - Installed Windows Internet Explorer 7.
RP17: 12/16/2009 5:19:51 PM - Software Distribution Service 3.0
RP18: 12/16/2009 6:36:09 PM - Software Distribution Service 3.0
RP19: 12/17/2009 7:06:57 PM - System Checkpoint
RP20: 12/18/2009 12:16:02 AM - Software Distribution Service 3.0
RP21: 12/19/2009 10:29:35 PM - System Checkpoint
RP22: 12/22/2009 10:16:39 AM - System Checkpoint
RP23: 12/24/2009 1:02:49 PM - System Checkpoint
RP24: 12/25/2009 3:00:06 PM - Installed Open Season
RP25: 12/25/2009 3:31:01 PM - Installed Open Season
RP26: 12/25/2009 3:38:17 PM - Installed DirectX
RP27: 12/25/2009 4:00:20 PM - Application kill.
RP28: 12/25/2009 4:00:32 PM - Installation
RP29: 12/25/2009 4:29:00 PM - Installation
RP30: 12/25/2009 4:37:23 PM - Installation
RP31: 12/25/2009 5:02:30 PM - Installed Free Ride Games Player
RP32: 12/29/2009 9:07:12 AM - Installed Windows Media Player 11
RP33: 12/29/2009 9:07:44 AM - Software Distribution Service 3.0
RP34: 12/30/2009 12:29:32 AM - Software Distribution Service 3.0
RP35: 12/30/2009 9:08:23 PM - Installed Java(TM) 6 Update 17
RP36: 12/30/2009 10:33:08 PM - Software Distribution Service 3.0
RP37: 12/31/2009 12:13:20 PM - Removed Microsoft Games for Windows - LIVE Redistributable
RP38: 12/31/2009 12:16:04 PM - Removed Microsoft Plus! Dancer LE
RP39: 12/31/2009 12:24:24 PM - Removed Tinker
RP40: 12/31/2009 12:26:58 PM - Removed Microsoft Games for Windows - LIVE Redistributable
RP41: 12/31/2009 12:27:53 PM - Removed Microsoft Games for Windows - LIVE
RP42: 12/31/2009 12:30:05 PM - Removed Google Gears
RP43: 1/3/2010 3:26:56 PM - Installed Windows Media Player 11
RP44: 1/3/2010 3:30:05 PM - Installed Windows XP MSCompPackV1.
RP45: 1/3/2010 3:30:44 PM - Installed Windows XP KB926239.
RP46: 1/3/2010 3:37:32 PM - Software Distribution Service 3.0
RP47: 1/4/2010 6:11:49 PM - System Checkpoint
RP48: 1/4/2010 9:02:04 PM - Removed Open Season
RP49: 1/4/2010 9:04:46 PM - Removed Steam
RP50: 1/4/2010 9:06:35 PM - Removed Steam
RP51: 1/4/2010 10:38:18 PM - Software Distribution Service 3.0
RP52: 1/6/2010 2:24:21 PM - Installed ESET NOD32 Antivirus
RP53: 1/19/2010 8:20:42 AM - Restore Operation

==== Installed Programs ======================

3D Falling Leaves Animated Wallpaper
555 Games XP Championship
Adobe Acrobat - Reader 6.0.2 Update
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 6.0.1
Agere Systems PCI Soft Modem
Akamai NetSession Interface
blinkx beat
CA Pest Patrol Realtime Protection
Canon MP Navigator EX 3.0
Canon MP250 series MP Drivers
Canon Utilities My Printer
Comcast High-Speed Internet Install Wizard
Comcast Toolbar 3.0
CommentsBar Toolbar
Compaq Connections
Crawler Slideshow Screensaver
Cucusoft DVD to iPod Converter 8.01
Easy Internet Sign-up
Free Ride Games Player
Help and Support Additions
High Definition Audio Driver Package - KB835221
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB938759)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976098-v2)
HpSdpAppCoreApp
iCopyExpert 3.1.2
InterVideo WinDVD Player
iTunes
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 17
KBD
LimeWire 5.3.6
LiveUpdate 1.90 (Symantec Corporation)
McAfee SecurityCenter
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works 7.0
Move Media Player
Mozilla Firefox (3.6)
MSN
MSXML 6 Service Pack 2 (KB973686)
Norton Security Center
Norton WMI Update
Python 2.2 combined Win32 extensions
Python 2.2.1
QuickTime
Refresher Pro 1.3
S3 S3Display
S3 S3Gamma2
S3 S3Info2
S3 S3Overlay
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB976325)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Sonic RecordNow!
Success Story
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB898461)
Update for Windows XP (KB904942)
Update for Windows XP (KB925720)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VIA Rhine-Family Fast Ethernet Adapter
VIA/S3G Display Driver
Virtual Villagers 2
VIVA MEDIA GAME CENTER
Wallery
WeatherBug
WebFldrs XP
Wedding Dash - Ready, Aim, Love!
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Player 11
Word Challenge Extreme
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Mail Advisor
Yahoo! Messenger
Yahoo! Search Protection
Yahoo! Software Update
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

1/19/2010 9:37:00 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097}
1/19/2010 3:51:14 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.
1/19/2010 10:14:11 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service iPodService with arguments "-Service" in order to run the server: {7A7FB085-6068-4898-8CCA-480A9187277C}
1/18/2010 9:51:25 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service McShield with arguments "" in order to run the server: {DC7EF8E1-824F-4110-AB43-1604DA9B4F40}
1/18/2010 8:06:12 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service SymWSC with arguments "" in order to run the server: {9F92FFA3-40D1-475A-9323-A39C705DAB86}
1/18/2010 7:39:55 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service McNASvc with arguments "" in order to run the server: {24F616A1-B755-4053-8018-C3425DC8B68A}
1/18/2010 7:39:25 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK7 Fips mfehidk
1/18/2010 7:13:03 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
1/18/2010 6:37:09 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
1/18/2010 5:49:36 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
1/18/2010 3:53:03 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK7 ehdrv Fips mfehidk
1/18/2010 10:07:12 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
1/16/2010 4:17:56 PM, error: Service Control Manager [7000] - The McAfee SystemGuards service failed to start due to the following error: Access is denied.
1/16/2010 4:17:05 PM, error: DCOM [10000] - Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}. The error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe -secured -Embedding
1/16/2010 4:16:36 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the IMAPI CD-Burning COM Service service to connect.
1/16/2010 4:16:36 PM, error: Service Control Manager [7000] - The IMAPI CD-Burning COM Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/16/2010 4:16:36 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/16/2010 4:16:35 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect.
1/16/2010 4:00:36 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the iPod Service service to connect.
1/16/2010 4:00:36 PM, error: DCOM [10005] - DCOM got error "%1053" attempting to start the service iPodService with arguments "-Service" in order to run the server: {7A7FB085-6068-4898-8CCA-480A9187277C}

==== End Of File ===========================

DDS (Ver_09-12-01.01) - NTFSx86 NETWORK
Run by Compaq_Owner at 12:47:10.18 on Wed 01/20/2010
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.66 [GMT -5:00]

AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Owner\My Documents\dds.pif

============== Pseudo HJT Report ===============

uSearch Bar = hxxp://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uStart Page = hxxp://www.shinysearch.com/myhome.php?style=dark-angel<ext=MY%20COOL%20GEEKPOLICE
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride =
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll
BHO: CommentsBar Toolbar: {71d2cf9e-34e4-4401-8841-f4fc3f3edc32} - c:\program files\commentsbar\tbComm.dll
BHO: Comcast Toolbar: {79ceea4e-c231-4614-9e3b-53b2a02f39b7} - c:\program files\comcasttb\comcastdx.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: Comcast Toolbar: {79ceea4e-c231-4614-9e3b-53b2a02f39b7} - c:\program files\comcasttb\comcastdx.dll
TB: CommentsBar Toolbar: {71d2cf9e-34e4-4401-8841-f4fc3f3edc32} - c:\program files\commentsbar\tbComm.dll
TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
uRun: [Search Protection] c:\program files\yahoo!\search protection\SearchProtection.exe
uRun: [YSearchProtection] c:\program files\yahoo!\search protection\SearchProtection.exe
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messen~1\YAHOOM~1.EXE" -quiet
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Weather] c:\program files\aws\weatherbug\Weather.exe 1
uRun: [DesktopWallpaper] c:\windows\web\wallpa~1\wallery\DESKTO~1.EXE
uRun: [Exetender] "c:\program files\free ride games\GPlayer.exe" /runonstartup
uRun: [ComcastAntispyClient] "c:\program files\comcasttb\comcastspywarescan\ComcastAntispy.exe" /hide
uRun: [PersonalSec] c:\program files\personalsec\psecurity.exe
uRun: [xggvkbpj] c:\documents and settings\compaq_owner\local settings\application data\bipcoc\gvbgsysguard.exe
mRun: [hpsysdrv] c:\windows\system\hpsysdrv.exe
mRun: [KBD] c:\hp\kbd\KBD.EXE
mRun: [iTunesHelper] c:\program files\itunes\iTunesHelper.exe
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [VTTimer] VTTimer.exe
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [PS2] c:\windows\system32\ps2.exe
mRun: [YMailAdvisor] "c:\program files\yahoo!\common\YMailAdvisor.exe"
mRun: [YSearchProtection] "c:\program files\yahoo!\search protection\SearchProtection.exe"
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
dRun: [Exetender] "c:\program files\free ride games\GPlayer.exe /runonstartup"
StartupFolder: c:\docume~1\compaq~1\startm~1\programs\startup\limewi~1.lnk - c:\program files\limewire\LimeWire.exe
StartupFolder: c:\docume~1\compaq~1\startm~1\programs\startup\wkcalrem.lnk - c:\program files\common files\microsoft shared\works shared\WkCalRem.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\compaq~1.lnk - c:\program files\compaq connections\6750491\program\Compaq Connections.exe
IE: {CDAFD956-97BE-443D-8EF7-F4F094EB5766} - c:\program files\crawler\ssaver\CSSaver.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} -
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - hxxp://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5847/mcfscan.cab
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\compaq~1\applic~1\mozilla\firefox\profiles\b18tjpkg.default\
FF - plugin: c:\documents and settings\compaq_owner\application data\move networks\plugins\npqmp071705000014.dll
FF - plugin: c:\program files\free ride games\npExentCtl.dll
FF - hȋdden: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

S1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-11-4 214664]
S2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2004-8-8 14336]
S2 AntiSpywareService;Comcast AntiSpyware;c:\program files\comcasttb\comcastspywarescan\ComcastAntiSpyService.exe [2009-6-17 616408]
S2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2009-12-30 359952]
S2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-12-30 144704]
S2 X4HS32Ex;X4HS32Ex;c:\program files\free ride games\X4HS32Ex.sys [2009-12-25 53280]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-12-30 606736]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2009-12-30 79816]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-12-30 35272]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-12-30 34248]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-12-30 40552]

=============== Created Last 30 ================

2010-01-20 15:11:08 0 d-----w- c:\documents and settings\compaq_owner\dwhelper
2010-01-20 04:30:20 54156 ---ha-w- c:\windows\QTFont.qfn
2010-01-20 04:30:20 1409 ----a-w- c:\windows\QTFont.for
2010-01-19 21:00:41 8212 ----a-w- c:\windows\mfebcdata
2010-01-19 17:25:36 209192 ----a-w- c:\windows\system32\TABCTL32.OCX
2010-01-19 17:25:35 851968 ----a-w- c:\windows\system32\sendsit.dll
2010-01-19 17:25:35 81920 ----a-w- c:\windows\system32\Balloon.ocx
2010-01-19 17:25:35 647872 ----a-w- c:\windows\system32\mscomct2.ocx
2010-01-19 17:25:35 203576 ----a-w- c:\windows\system32\RICHTX32.OCX
2010-01-19 17:25:35 180224 ----a-w- c:\windows\system32\alcrypto3.dll
2010-01-19 17:25:35 115920 ----a-w- c:\windows\system32\MSINET.OCX
2010-01-19 17:25:35 1097728 ----a-w- c:\windows\system32\SCGrid.ocx
2010-01-19 17:25:35 108336 ----a-w- c:\windows\system32\MSWINSCK.OCX
2010-01-19 17:25:35 0 d-----w- C:\Refresher Pro 1.3
2010-01-19 16:19:52 0 d-----w- c:\program files\iCopyExpert
2010-01-19 16:19:52 0 d-----w- c:\docume~1\compaq~1\applic~1\iCopyExpert
2010-01-19 13:19:37 0 d-----w- c:\docume~1\compaq~1\applic~1\Malwarebytes
2010-01-19 13:18:54 0 d-----w- c:\program files\luly
2010-01-19 13:18:53 0 d-----w- c:\program files\Conduit
2010-01-19 13:18:03 0 d-----w- c:\docume~1\compaq~1\applic~1\GetRightToGo
2010-01-19 13:18:02 0 d--h--w- c:\docume~1\alluse~1\applic~1\CanonIJEGV
2010-01-16 22:27:26 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-01-06 19:06:44 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-01-04 15:04:03 0 d-----w- c:\docume~1\compaq~1\applic~1\Exent Technologies
2010-01-04 07:10:23 0 d-----w- c:\program files\CommentsBar
2010-01-03 19:31:47 215920 ----a-w- c:\windows\system32\muweb.dll
2010-01-03 19:31:45 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2010-01-03 19:31:44 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-01-03 02:43:45 499712 ----a-w- c:\windows\system32\MSVCP71.DLL
2010-01-03 02:43:45 348160 ----a-w- c:\windows\system32\MSVCR71.DLL
2010-01-03 02:43:45 1060864 ----a-w- c:\windows\system32\MFC71.DLL
2010-01-03 02:43:44 516096 ----a-w- c:\windows\system32\CLVSDS.ax
2010-01-03 02:43:43 348160 ----a-w- c:\windows\system32\cdga.dll
2010-01-03 02:43:43 270336 ----a-w- c:\windows\system32\cdg.dll
2010-01-03 02:43:43 14909 ----a-w- c:\windows\system32\A_reg.reg
2010-01-03 02:43:43 110592 ----a-w- c:\windows\system32\PropListCtrl.ocx
2010-01-03 02:43:40 0 d-----w- c:\program files\Cucusoft
2010-01-02 00:18:55 303104 ----a-w- c:\windows\system32\CNC250L.dll
2010-01-02 00:18:55 15872 ----a-w- c:\windows\system32\CNHMCA.dll
2010-01-02 00:18:55 1310720 ----a-w- c:\windows\system32\CNC250C.dll
2010-01-02 00:18:55 12288 ----a-w- c:\windows\system32\CNC173AD.TBL
2010-01-02 00:18:55 110592 ----a-w- c:\windows\system32\CNC250I.dll
2010-01-02 00:18:55 106496 ----a-w- c:\windows\system32\CNC250U.dll
2010-01-02 00:18:54 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-01-02 00:18:54 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-01-01 23:44:57 272384 ----a-w- c:\windows\system32\CNMLM9W.DLL
2010-01-01 23:44:47 90112 ----a-w- c:\windows\system32\CNC250O.dll
2010-01-01 23:44:45 178176 ----a-w- c:\windows\system32\CNMIU9W.DLL
2010-01-01 23:39:12 0 d-----w- c:\program files\Canon
2010-01-01 14:12:29 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2010-01-01 14:12:29 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-12-31 04:57:05 12169 ----a-w- c:\windows\system32\Config.MPF
2009-12-31 04:48:27 40552 ----a-w- c:\windows\system32\drivers\mfesmfk.sys
2009-12-31 04:48:27 35272 ----a-w- c:\windows\system32\drivers\mfebopk.sys
2009-12-31 04:48:26 79816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys
2009-12-31 04:48:17 120136 ----a-w- c:\windows\system32\drivers\Mpfp.sys
2009-12-31 04:46:54 0 d-----w- c:\program files\common files\McAfee
2009-12-31 04:46:50 0 d-----w- c:\program files\McAfee.com
2009-12-31 04:45:56 0 d-----w- c:\program files\McAfee
2009-12-31 04:39:18 34248 ----a-w- c:\windows\system32\drivers\mferkdk.sys
2009-12-31 03:45:15 0 d-----w- c:\windows\McAfee.com
2009-12-30 18:06:53 0 d-----w- c:\program files\Freeze.com
2009-12-30 17:32:02 0 d-----w- c:\docume~1\compaq~1\applic~1\CallingID
2009-12-30 17:31:44 0 d-----w- c:\program files\common files\scanner
2009-12-30 17:31:31 0 d-----w- c:\program files\CA
2009-12-30 17:31:03 0 d-----w- c:\docume~1\compaq~1\applic~1\comcasttb
2009-12-30 17:30:58 0 d-----w- c:\program files\comcasttb
2009-12-29 22:30:50 0 d-----w- c:\program files\Selectsoft
2009-12-29 22:29:58 0 d-----w- c:\program files\OXXOGames
2009-12-29 14:10:45 0 d-----w- c:\program files\Windows Media Connect 2
2009-12-29 14:08:36 0 d-----w- c:\windows\system32\LogFiles
2009-12-28 20:48:12 0 d-----w- c:\program files\common files\Akamai
2009-12-26 01:45:38 3145782 ----a-w- c:\windows\CrawlerWallpaper.bmp
2009-12-26 01:45:37 24576 ----a-w- c:\windows\Slideshow Screensaver.scr
2009-12-26 00:38:54 0 d-----w- c:\program files\Crawler
2009-12-25 22:03:18 64 ----a-w- c:\windows\GPlrLanc.dat
2009-12-25 22:03:18 37033 ------w- c:\windows\FRGT.ico
2009-12-25 22:02:56 0 d-----w- c:\docume~1\alluse~1\applic~1\Free Ride Games
2009-12-25 22:02:45 53314 ------w- c:\windows\ExentInfo.exe
2009-12-25 22:02:36 0 d-----w- c:\program files\Free Ride Games
2009-12-25 22:02:30 0 d-----w- C:\Remote Programs
2009-12-25 22:01:35 0 d-----w- c:\docume~1\compaq~1\applic~1\WeatherBug
2009-12-25 22:01:32 0 d-----w- c:\program files\AWS
2009-12-25 21:56:07 0 d-----w- c:\docume~1\compaq~1\applic~1\blinkx
2009-12-25 21:56:06 0 d-----w- c:\program files\Blinkx
2009-12-25 21:40:17 218416 ----a-w- C:\AnalysisLog.sr0
2009-12-25 21:01:17 0 d-----w- c:\program files\eGames
2009-12-25 20:57:57 98304 ----a-w- c:\windows\system32\CmdLineExt.dll

==================== Find3M ====================

2009-12-15 22:44:44 4206 --sha-r- c:\windows\system32\drivers\HP_PJ518AA-ABA SR1230NX NA440_YC_Pres_QCNH444_E44NAheRAS2_4_IKelut_SASUSTek Computer INC._V2.02_B3.11_T040902_WXH2_L409_M448_J160_7AMD_8Athlon XP 3200+_92.2_111063044_N11063065_P_Z11C1048C_K_A11063059_U11063038_G11067205.MRK
2009-10-29 07:46:59 832512 ----a-w- c:\windows\system32\wininet.dll
2009-10-29 07:46:52 78336 ------w- c:\windows\system32\ieencode.dll
2009-10-29 07:46:50 17408 ----a-w- c:\windows\system32\corpol.dll
2009-10-22 19:14:04 458752 ----a-w- c:\windows\system32\ssblinkx.scr

============= FINISH: 12:47:34.20 ===============

i wanted to post a new dds because i went into add and remove and when i went to personal security it said something about it already being uninstalled and did i want to remove its name or watever from my list i hit yes its gone. so is it gone? whats messing up my computer then? I'm sorry i know you're very busy i'm sure i'm drivin u nuts Thanx for helpin me

Hello.

Please download the OTMoveIt by OldTimer.

• Save it to your desktop.
  
• Please double-click OTM.exe to run it.
  
• Copy the bolded text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  
  :files
  c:\program files\personalsec
  c:\documents and settings\compaq_owner\local settings\application data\bipcoc
  c:\program files\Conduit
  c:\program files\Freeze.com
  c:\program files\Crawler
  
  :reg
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "PersonalSec"=-
  "xggvkbpj"=-
  
  
  
• Return to OTMoveIt, right click in the "Paste instructions for items to be Moved" window (under the light blue bar) and choose Paste.
  
• Click the red Moveit! button.
  
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  
• Close OTMoveIt
  

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post the OTMoveIt log.

File/Folder c:\program files\personalsec not found.
c:\documents and settings\compaq_owner\local settings\application data\bipcoc folder moved successfully.
c:\program files\Conduit\Community Alerts folder moved successfully.
c:\program files\Conduit folder moved successfully.
c:\program files\Freeze.com\3D Falling Leaves Animated Wallpaper folder moved successfully.
c:\program files\Freeze.com folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\_playin in the s folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\_dsi pics folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Winter folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Wildlife folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Waterfalls folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Wallpapers folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Trees folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Reptiles folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Martin Luther King Day folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Lakes folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Insect folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Horses folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Farmlife folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Exotic folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Dolphins folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Dogs folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Cats folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Buildings folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Birds folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Bears folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Apes folder moved successfully.
c:\program files\Crawler\SSaver\imggallery\Amphibians folder moved successfully.
c:\program files\Crawler\SSaver\imggallery folder moved successfully.
c:\program files\Crawler\SSaver\Download folder moved successfully.
c:\program files\Crawler\SSaver\bin\2Dsaver\ssfxmodul folder moved successfully.
c:\program files\Crawler\SSaver\bin\2Dsaver\imggallery folder moved successfully.
c:\program files\Crawler\SSaver\bin\2Dsaver folder moved successfully.
c:\program files\Crawler\SSaver\bin folder moved successfully.
c:\program files\Crawler\SSaver folder moved successfully.
c:\program files\Crawler\Shared folder moved successfully.
c:\program files\Crawler folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\PersonalSec deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\xggvkbpj deleted successfully.

OTM by OldTimer - Version 3.1.6.0 log created on 01202010_193559

so does that mean it moved my dsi pictures? UM does that mean my screensaver is gone? Do i hit clean up, or just close?

Freeze.com is well known adware.

oh sorry,this is my first computer i didnt know that. Did you want me to hit clean up?

It seems to be alot better except for running really slow and not letting me on internet explorer. I'm not in safe mode and its not freezing. I deleted some things i was wondering is wallery safe? Also before when i tried to hit fix on McAfee it couldnt. When i went in McAfee and hit fix everything went green For some reason i think my firewall settings are why i'm not getting on Explorer. Thank you for all your help

Could be, can you try Mozilla Firefox?

firefox works fine but my explorer wont open it just says page cant be displayed. comcast keeps sayin its the computer and to call microsoft. I called them but never got through. when i run a diagnostics it says to check my firewall settings but i dont know what they should be. Thank you for fixing my computer I will be making a donation soon i never woulda been able to afford taking it to someone. Its nice knowing i can trust the sites and downloads your site posts.