17 replies to this topic

[SacredCultivator]

Dear Helpers,

Here is my log, I just want to see if everything is okay or not.. I am not really expereincing any problems except occasionally (Don't know how to replicate it) but my desktop freezes (I can still alt+tab to other running programs, but can't open up 'start' or access anything on the desktop)

The thing that causes it and when I 'End Process' is 'drwtsn32.exe'

So dunno if that will show in my HiJack Log, thank you in advance.

------------

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:15:33 AM, on 4/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Stardock\CursorXP\CursorXP.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\WallMaster\wallmast.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\uTorrent\uTorrent.exe
c:\program files\winamp\winamp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Chris La\Desktop\asdf\HiJackThis_v2\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [SetDefPrt] "C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe"
O4 - HKLM\..\Run: [ControlCenter2.0] "C:\Program Files\Brother\ControlCenter2\brctrcen.exe" /autorun
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CursorXP] "C:\Program Files\Stardock\CursorXP\CursorXP.exe" -s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Startup: WallMaster Pro.lnk = C:\Program Files\WallMaster\wallmast.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: &Download all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Download selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1171828596312
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1171832473421
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

[rridgely]

Welcome to the forum.

Just to make sure I'm getting what your saying, your problems start after you end drwtsn32.exe ?

[SacredCultivator]

No no... I am not sure what the problem is.. but sometimes my desktop just 'freezes' and to 'unfreeze' it I have to end 'drwtsn32.exe' and then it just 'refreshes' the desktop.. Sorry if I am not using the right words.. And I usually have like 3 of them whenever my desktop freezes.. 2 are around 3,000k and one is around 6,000k.


PS: Thanks for the Welcome, and to not, when everything is normal I have two 'drwtsn32.exe' running, 1=3,000k, other =6000k


Sorry to go off topic here but quick question when I run CCleaner, sometimes i get a DC97, DC01 DC-##... NOt sure what causes that...

[rridgely]

That makes sense, drwtsn32.exe is a debugger service. More info on that here:
http://support.microsoft.com/kb/308538

Do you get any kind of error messages or can you narrow down at all what you think is causing it? Any new software installations or changes in anything?

Download this program:
http://wiki.djlizard.net/Dial-a-fix#Mirror...2C_and_articles

Unzip dial a fix and open up the program. Click the green checkmarks and then press go.
It will fix general windows errors so maybe that might fix your problems. Let me know how it goes.

[SacredCultivator]

Thank you shall give it a go right now.. and also check my last post added something.

Nice application there, this isn't something I need to always run now and there is it? As I am not even wsure what it does =X

[rridgely]

So how do things seem now? Still having the same problems?
Dial a fix shouldn't need to be run unless your computer is having problems.(no need to run it once a week or anything like that)

If you can take a screenshot of the CCleaner error that would be great.

[SacredCultivator]

Bah the Dial-a-fix didn't fix it as 2 hours after the problem occurred again... Will get back to you on those screenshots.

Alrights just deleted a fw things so here is the screenshot:


While this error is displayed the progress bar continues to progress and when I click okay.. it quits but then my Recycle Bin still shows files in it, and if I re-run CC then I don't get an error and it empties it.

[rridgely]

Try and search for a folder called dc2. Let me know if you find it.

[SacredCultivator]

Nope don't find any and the numbers do range by Dc##, but all start with Dc... So not too sure on that.

[rridgely]

Run Kaspersky WebScanner

• Please go HERE and click Kaspersky Online Scanner
  
• Read and Accept the Agreement
  
• You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  
• If you see a Windows dialog asking if you want to install this software, click the Install button.
  
• The program will launch and then begin downloading the latest definition files,
  
• When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
  
• Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
  
• Under "Please select a target to scan:", click My Computer to start the scan.
  
• When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
  
• Paste kaspersky log onto forum.

[SacredCultivator]

Will do..

But so far found on thing that affects 3 items... Strange as I know I do have something but I have it set to ignore (SpySweeper) but it only affects 1 file.. as it is a keygen =X

Will post up when done...

Bah sucks that nod32 didn't pick up on it...


EDIT: Here is the log.. I am shocked ><

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, April 21, 2007 10:51:52 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 21/04/2007
Kaspersky Anti-Virus database records: 300228
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\

Scan Statistics:
Total number of scanned objects: 48731
Number of viruses found: 2
Number of infected objects: 6 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:07:42

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\cert8.db Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\formhistory.dat Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\history.dat Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\key3.db Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\parent.lock Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\search.sqlite Object is locked skipped
C:\Documents and Settings\Chris La\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Chris La\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Chris La\Desktop\asdf\vrl-mirc62\mirc621.exe/stream/data0008 Infected: not-a-virus:Client-IRC.Win32.mIRC.621 skipped
C:\Documents and Settings\Chris La\Desktop\asdf\vrl-mirc62\mirc621.exe/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.621 skipped
C:\Documents and Settings\Chris La\Desktop\asdf\vrl-mirc62\mirc621.exe NSIS: infected - 2 skipped
C:\Documents and Settings\Chris La\Desktop\GAM - Thanks(Test).avi Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\AOL OCP\AIM\Storage\All Users\localStorage\common.cls Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\AOL OCP\AIM\Storage\data\sacredcultivator\localStorage\common.cls Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Messenger\LilAznCultivator@gmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Messenger\LilAznCultivator@gmail.com\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Messenger\LilAznCultivator@gmail.com\SharingMetadata\Working\database_CEE8_901D_E890_63D\dfsr.db Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Messenger\LilAznCultivator@gmail.com\SharingMetadata\Working\database_CEE8_901D_E890_63D\fsr.log Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Messenger\LilAznCultivator@gmail.com\SharingMetadata\Working\database_CEE8_901D_E890_63D\fsrtmp.log Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Messenger\LilAznCultivator@gmail.com\SharingMetadata\Working\database_CEE8_901D_E890_63D\tmp.edb Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Windows Live Contacts\LilAznCultivator@gmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Microsoft\Windows Live Contacts\LilAznCultivator@gmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Application Data\Mozilla\Firefox\Profiles\yrmdzspf.Chris La\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\History\History.IE5\MSHist012007042120070422\index.dat Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temp\~DF3072.tmp Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temp\~DF3129.tmp Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temp\~DF72B9.tmp Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temp\~DFBF6.tmp Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temp\~DFD191.tmp Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temp\~DFD1C0.tmp Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Chris La\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Chris La\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Chris La\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2007-04-16.11-52-20.log Object is locked skipped
C:\Program Files\ESET\cache\CACHE.NDB Object is locked skipped
C:\Program Files\ESET\logs\virlog.dat Object is locked skipped
C:\Program Files\ESET\logs\warnlog.dat Object is locked skipped
C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edbtmp.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\Keepers\Nero 6.6.1.5\Nero-6.6.1.15.exe/Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
D:\Keepers\Nero 6.6.1.5\Nero-6.6.1.15.exe RAR: infected - 1 skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

[rridgely]

None of that stuff is really bad, so don't worry about it.
Lets see what pc pit stop has to say:

Visit PCPitStop
Click Test this system, it then may prompt you to install a ActiveX control , click Install if you get the option, then click Let's Go. When the tests are complete, a results page will pop up. Click Share these results with TechExpress on the menu then copy the URL provided and post it back, It should look like this:

Quote

TechExpress link for your current results:

http://www.pcpitstop.com/techexpress.asp?i...HK0WE3HLEWRE99Q

[SacredCultivator]

Alrights here is it:


http://www.pcpitstop...11SHW19K9WSNCXW

[rridgely]

So nothing bad was found there either. I guess we could try an error check to see if it makes things any better.

run the system file checking feature to make sure none of the protected Windows files are damaged or corrupt.

Goto Start Menu -> Run -> type

SFC /SCANNOW

(There's a space after SFC) , Press OK and it will run the System File Checker. Follow the prompts, and insert your Windows installation CD if requested then reboot the computer after it has finished.

[SacredCultivator]

Is the rebooting a must? As I can't really do so at the moment... got lots of stuff going on =X

[rridgely]

Yeah, if you can't reboot then wait until you can to run the check.

[SacredCultivator]

Alright then, dunno when it'll be but shall do it and let you know asap.

[SacredCultivator]

Sorry for the Double Post,

But I just ran it and am just waiting to see if any problems come up.

EDIT: Nope problem still occurs.