# XP shuts down. No error codes. No blue screen.

Page 2 of 3   1, 2, 3

## XP shuts down. No error codes. No blue screen.

First topic message reminder :

Re: XP shuts down. No error codes. No blue screen.
by flyinskwurl Yesterday at 7:53 am

.Sorry I gave misleading info. The problem I am having is with my desk top computer. I have opened the case and cleaned out the air intakes, fans and processor. That didn't change anything. Ventilation seems good.
I have discovered that I can boot up in Safe Mode and it keeps running...but as soon as I boot up in normal mode it will let me sign in and then shuts down to just a black screen. The HD seems to keep running.. seems like only the os is shutting down..
I have been able to run Malwarebytes and Ad-Aware(Safe Mode) and found nothing. I have ESET 4 installed as well as Spy Sweeper.
flyinskwurl

Newbie Surfer

Posts: 12
Joined: 2009-09-22
Operating System: windows xp home sp3

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3

## Re: XP shuts down. No error codes. No blue screen.

Please re-open Malwarebytes, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan. Remove selected, and post the log in your next reply.

[You must be registered and logged in to see this link.] - Get $30 off Kaspersky products. ~DMJ GeekPolice Academy Manager Donations/Contributions DragonMaster Jay Manager | Tech Officer Posts : 13451 Joined : 2009-09-07 Operating System : Windows 7 Ultimate ## Re: XP shuts down. No error codes. No blue screen. Malwarebytes' Anti-Malware 1.42 Database version: 3352 Windows 5.1.2600 Service Pack 3 (Safe Mode) Internet Explorer 8.0.6001.18702 12/13/2009 08:43:43 AM mbam-log-2009-12-13 (08-43-43).txt Scan type: Quick Scan Objects scanned: 111323 Time elapsed: 4 minute(s), 15 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. Machine still only runs in Safe Mode... flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. Now how is your computer running? [You must be registered and logged in to see this link.] - Get$30 off Kaspersky products.

~DMJ

Donations/Contributions

DragonMaster Jay

Manager | Tech Officer

Posts : 13451
Joined : 2009-09-07
Operating System : Windows 7 Ultimate

## Re: XP shuts down. No error codes. No blue screen.

I am still having the same problem I had from the start. My computer will not start XP in normal mode. If it does start it will shut down as the desktop icons are populating. When it shuts down the screen just goes black. It gives no error codes and it does not display the Blue Screen of Death. It just will not start up and run in Normal Mode. It only runs in Safe Mode with Networking. The fans and hard drive keep running in the tower..but xp Normal Mode will not start and run...

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3

## Re: XP shuts down. No error codes. No blue screen.

Please Go to Start and then to Run
Type in Chkdsk /r << Please Note the space between k and /
Hit Enter ...It will ask if you want to do this on the next reboot...please press Y

Please make sure it reboots. On reboot the system will start the Check Disk operation.

Note... there are 5 stages...
It may appear to hang at a certain percent, but this is normal.
Please allow it to run and finish.
When completed it will boot the system back into Windows.

Please let me know if this fixes the problem, or if it does not function.

If this did not work, please try again in Safe Mode the following: CHKDSK. << No parameters like earlier.

Then, attempt to boot in to Normal Mode.

[You must be registered and logged in to see this link.] - Get $30 off Kaspersky products. ~DMJ GeekPolice Academy Manager Donations/Contributions DragonMaster Jay Manager | Tech Officer Posts : 13451 Joined : 2009-09-07 Operating System : Windows 7 Ultimate ## Re: XP shuts down. No error codes. No blue screen. I had to run the check in Safe Mode. It didn't change anything. The computer will still only boot in Safe Mode.. flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. Go Start and then to Run, Type in: sfc /scannow Click OK. Have Windows CD/DVD handy. If System File Checker (sfc) finds any errors, it may ask you for the CD/DVD. If sfc does not find any errors in Windows XP, it will simply quit, without any message. If you don't have Windows CD.... Go Start and then Run type in regedit and click OK Navigate to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup On the right hand side, find: SourcePath It probably has an entry pointing to your CD-ROM drive, usually D and that is why it is asking for the XP CD. All we need to do is change it to: C: Now, double click the SourcePath setting and a new box will pop up. Change the drive letter from your CD drive to your root drive, usually C: Close Registry Editor. Now restart your computer and try sfc /scannow again! After the first run, reboot your computer. Do a second run. Now the scan and fix is finished. [You must be registered and logged in to see this link.] - Get$30 off Kaspersky products.

~DMJ

Donations/Contributions

DragonMaster Jay

Manager | Tech Officer

Posts : 13451
Joined : 2009-09-07
Operating System : Windows 7 Ultimate

## Re: XP shuts down. No error codes. No blue screen.

I followed your instructions. All I could get from either method was a quick flash on the screen that looked like a Log information box but it went away immediately. I don't think it scanned with either method....

However...I did manage to get my computer to respond to the XP disk and got it into Recovery Console. It was doing the Set Up and a warning popped up that said "file symc810.sys is corrupted" That is as far as it would go. I tried it several times and it gets to that same point with the same warning message and will not go beyond that point.

Last edited by flyinskwurl on Mon 14 Dec 2009, 11:33 pm; edited 1 time in total (Reason for editing : Additional Info.)

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3

## Re: XP shuts down. No error codes. No blue screen.

• Right-click on SpiderKill.zip and click Extract All. Follow the prompts and read carefully, to save it to your Desktop.
• Double-click on the SpiderKill folder, and then double-click on SpiderKill.bat and follow all the prompts in the program.
• Within a minute, it will save its log titled SpiderKill.txt. Please post that in your next reply. You may have to use two or three posts to be able to fit the information in.

[You must be registered and logged in to see this link.] - Get $30 off Kaspersky products. ~DMJ GeekPolice Academy Manager Donations/Contributions DragonMaster Jay Manager | Tech Officer Posts : 13451 Joined : 2009-09-07 Operating System : Windows 7 Ultimate ## Re: XP shuts down. No error codes. No blue screen. SpiderKill by DragonMaster Jay ( Oct 2009 ) Microsoft Windows XP [Version 5.1.2600] ********************Drivers list******************** Volume in drive C has no label. Volume Serial Number is 7CE0-328E Directory of C:\Windows\System32\Drivers 12/13/2009 08:15 AM . 12/13/2009 08:15 AM .. 04/13/2008 01:46 PM 53,376 1394bus.sys 04/13/2008 01:36 PM 187,776 acpi.sys 02/28/2006 07:00 AM 11,648 acpiec.sys 04/13/2008 07:11 PM 4,255 adv01nt5.dll 04/13/2008 07:11 PM 3,967 adv02nt5.dll 04/13/2008 07:11 PM 3,615 adv05nt5.dll 04/13/2008 07:11 PM 3,647 adv07nt5.dll 04/13/2008 07:11 PM 3,135 adv08nt5.dll 04/13/2008 07:11 PM 3,711 adv09nt5.dll 04/13/2008 07:11 PM 3,775 adv11nt5.dll 04/13/2008 11:39 AM 142,592 aec.sys 08/14/2008 05:04 AM 138,496 afd.sys 04/13/2008 01:36 PM 42,368 agp440.sys 04/13/2008 01:36 PM 44,928 agpcpq.sys 01/25/2006 04:24 PM 1,149,888 AGRSM.sys 02/08/2006 02:44 PM 3,846,016 alcxwdm.sys 04/13/2008 01:36 PM 42,752 alim1541.sys 04/13/2008 01:36 PM 43,008 amdagp.sys 04/13/2008 01:31 PM 37,376 amdk6.sys 04/13/2008 01:31 PM 37,760 amdk7.sys 04/13/2008 01:51 PM 60,800 arp1394.sys 04/13/2008 01:57 PM 14,336 asyncmac.sys 04/13/2008 01:40 PM 96,512 atapi.sys 08/03/2004 09:29 PM 56,623 ati1btxx.sys 08/03/2004 09:29 PM 11,615 ati1mdxx.sys 08/03/2004 09:29 PM 12,047 ati1pdxx.sys 08/03/2004 09:29 PM 30,671 ati1raxx.sys 08/03/2004 09:29 PM 63,663 ati1rvxx.sys 08/03/2004 09:29 PM 26,367 ati1snxx.sys 08/03/2004 09:29 PM 21,343 ati1ttxx.sys 08/03/2004 09:29 PM 36,463 ati1tuxx.sys 08/03/2004 09:29 PM 29,455 ati1xbxx.sys 08/03/2004 09:29 PM 34,735 ati1xsxx.sys 08/03/2004 09:29 PM 327,040 ati2mtaa.sys 08/03/2004 09:29 PM 701,440 ati2mtag.sys 08/03/2004 09:29 PM 57,856 atinbtxx.sys 08/03/2004 09:29 PM 13,824 atinmdxx.sys 08/03/2004 09:29 PM 14,336 atinpdxx.sys 08/03/2004 09:29 PM 52,224 atinraxx.sys 08/03/2004 09:29 PM 104,960 atinrvxx.sys 08/03/2004 09:29 PM 28,672 atinsnxx.sys 08/03/2004 09:29 PM 13,824 atinttxx.sys 08/03/2004 09:29 PM 73,216 atintuxx.sys 08/03/2004 09:29 PM 31,744 atinxbxx.sys 08/03/2004 09:29 PM 63,488 atinxsxx.sys 07/17/2004 10:36 AM 64,352 ativmc20.cod 04/13/2008 01:51 PM 59,904 atmarpc.sys 02/28/2006 07:00 AM 31,360 atmepvc.sys 04/13/2008 01:51 PM 55,808 atmlane.sys 02/28/2006 07:00 AM 352,256 atmuni.sys 04/13/2008 07:11 PM 21,183 atv01nt5.dll 04/13/2008 07:11 PM 11,359 atv02nt5.dll 04/13/2008 07:11 PM 25,471 atv04nt5.dll 04/13/2008 07:11 PM 14,143 atv06nt5.dll 04/13/2008 07:11 PM 17,279 atv10nt5.dll 08/17/2001 08:59 AM 3,072 audstub.sys 02/28/2006 07:00 AM 4,224 beep.sys 04/13/2008 01:53 PM 71,552 bridge.sys 04/13/2008 01:46 PM 17,024 bthenum.sys 04/13/2008 01:46 PM 37,888 bthmodem.sys 04/13/2008 01:51 PM 101,120 bthpan.sys 06/13/2008 06:05 AM 272,128 bthport.sys 04/13/2008 01:46 PM 36,480 bthprint.sys 04/13/2008 01:46 PM 18,944 bthusb.sys 02/28/2006 07:00 AM 13,952 cbidf2k.sys 04/13/2008 01:46 PM 17,024 ccdecode.sys 02/28/2006 07:00 AM 18,688 cdaudio.sys 04/13/2008 02:14 PM 63,744 cdfs.sys 03/22/2008 11:00 AM 2,432 cdr4_xp.sys 03/22/2008 11:00 AM 2,560 cdralw2k.sys 04/13/2008 01:40 PM 62,976 cdrom.sys 04/13/2008 07:11 PM 15,423 ch7xxnt5.dll 02/28/2006 07:00 AM 262,528 cinemst2.sys 04/13/2008 02:16 PM 49,536 classpnp.sys 08/31/2006 04:03 PM 10,368 CLBStor.sys 08/31/2006 04:03 PM 182,272 CLBUDF.sys 02/28/2006 07:00 AM 11,776 cpqdap01.sys 04/13/2008 01:31 PM 36,736 crusoe.sys 07/17/2004 09:55 PM 129,045 cxthsfs2.cty 10/22/2007 11:23 AM disdn 04/13/2008 01:40 PM 36,352 disk.sys 04/13/2008 01:40 PM 14,208 diskdump.sys 12/04/2001 09:26 AM 32,256 DM9PCI5.SYS 12/28/2006 10:41 PM 54,272 dm9usb.sys 04/13/2008 01:44 PM 799,744 dmboot.sys 04/13/2008 01:44 PM 153,344 dmio.sys 02/28/2006 07:00 AM 5,888 dmload.sys 04/13/2008 01:45 PM 52,864 dmusic.sys 04/13/2008 01:45 PM 60,160 drmk.sys 04/13/2008 01:45 PM 2,944 drmkaud.sys 02/28/2006 07:00 AM 10,496 dxapi.sys 04/13/2008 01:38 PM 71,168 dxg.sys 02/28/2006 07:00 AM 3,328 dxgthk.sys 10/31/2006 01:15 PM 165,760 e100b325.sys 02/06/2009 10:53 AM 113,448 eamon.sys 02/06/2009 10:56 AM 106,208 ehdrv.sys 08/17/2001 08:46 AM 6,400 enum1394.sys 02/06/2009 10:58 AM 93,336 epfwtdir.sys 12/07/2009 02:29 PM etc 04/13/2008 02:14 PM 143,744 fastfat.sys 04/13/2008 01:40 PM 27,392 fdc.sys 04/13/2008 01:33 PM 44,544 fips.sys 04/13/2008 01:40 PM 20,480 flpydisk.sys 04/13/2008 01:32 PM 129,792 fltmgr.sys 02/28/2006 07:00 AM 12,160 fsvga.sys 02/28/2006 07:00 AM 7,936 fs_rec.sys 02/28/2006 07:00 AM 125,056 ftdisk.sys 04/13/2008 01:36 PM 46,464 gagp30kx.sys 09/19/2006 02:44 PM 15,664 GEARAspiWDM.sys 02/28/2006 07:00 AM 3,440,660 gm.dls 02/28/2006 07:00 AM 646 gmreadme.txt 07/14/2006 06:10 PM 17,536 grmn0200.sys 07/14/2006 06:12 PM 16,512 grmn0400.sys 07/11/2006 03:50 PM 11,776 grmn1200.sys 03/08/2007 09:18 PM 18,432 grmngen.sys 03/08/2007 09:18 PM 8,320 grmnusb.sys 04/13/2008 11:36 AM 144,384 hdaudbus.sys 01/07/2005 04:07 PM 145,920 Hdaudio.sys 04/13/2008 01:46 PM 25,600 hidbth.sys 04/13/2008 01:45 PM 36,864 hidclass.sys 04/13/2008 01:45 PM 19,200 hidir.sys 04/13/2008 01:45 PM 24,960 hidparse.sys 04/13/2008 01:45 PM 10,368 hidusb.sys 08/03/2004 09:41 PM 220,032 hsfbs2s2.sys 08/03/2004 09:41 PM 685,056 hsfcxts2.sys 08/03/2004 09:41 PM 1,041,536 hsfdpsp2.sys 04/13/2008 01:53 PM 264,832 http.sys 04/13/2008 02:18 PM 52,480 i8042prt.sys 04/13/2008 01:40 PM 42,112 imapi.sys 04/13/2008 01:40 PM 5,504 intelide.sys 04/13/2008 01:31 PM 36,352 intelppm.sys 04/13/2008 01:53 PM 36,608 ip6fw.sys 02/28/2006 07:00 AM 32,896 ipfltdrv.sys 04/13/2008 01:57 PM 20,864 ipinip.sys 04/13/2008 01:57 PM 152,832 ipnat.sys 04/13/2008 02:19 PM 75,264 ipsec.sys 11/15/2006 06:40 AM 31,072 iqvw32.sys 04/13/2008 01:54 PM 11,264 irenum.sys 04/13/2008 01:36 PM 37,248 isapnp.sys 05/21/2009 02:22 PM 18,384 JeppDG2.sys 04/13/2008 01:39 PM 24,576 kbdclass.sys 04/13/2008 01:39 PM 14,592 kbdhid.sys 04/13/2008 01:45 PM 172,416 kmixer.sys 04/13/2008 02:16 PM 141,056 ks.sys 06/24/2009 06:18 AM 92,928 ksecdd.sys 06/05/2009 07:51 AM 64,160 Lbd.sys 08/11/2008 12:40 PM 10,144 lmimirr.sys 08/11/2008 12:41 PM 47,640 LMIRfsDriver.sys 12/03/2009 04:13 PM 19,160 mbam.sys 12/03/2009 04:14 PM 38,224 mbamswissarmy.sys 02/28/2006 07:00 AM 7,680 mcd.sys 08/03/2004 09:41 PM 11,868 mdmxsdk.sys 04/13/2008 01:36 PM 63,744 mf.sys 02/28/2006 07:00 AM 4,224 mnmdd.sys 04/13/2008 02:00 PM 30,080 modem.sys 06/18/2007 01:18 PM 23,680 motmodem.sys 04/13/2008 01:39 PM 23,040 mouclass.sys 08/17/2001 01:48 PM 12,160 mouhid.sys 04/13/2008 01:39 PM 42,368 mountmgr.sys 04/13/2008 01:32 PM 180,608 mrxdav.sys 10/24/2008 06:21 AM 455,296 mrxsmb.sys 04/13/2008 01:32 PM 19,072 msfs.sys 04/13/2008 01:56 PM 35,072 msgpc.sys 04/13/2008 01:39 PM 7,552 mskssrv.sys 04/13/2008 01:39 PM 5,376 mspclock.sys 04/13/2008 01:39 PM 4,992 mspqm.sys 04/13/2008 01:36 PM 15,488 mssmbios.sys 04/13/2008 01:39 PM 5,504 mstee.sys 08/03/2004 09:41 PM 126,686 mtlmnt5.sys 08/03/2004 09:41 PM 1,309,184 mtlstrm.sys 08/03/2004 09:29 PM 452,736 mtxparhm.sys 04/13/2008 02:17 PM 105,344 mup.sys 04/13/2008 01:43 PM 12,672 mutohpen.sys 04/13/2008 01:46 PM 85,248 nabtsfec.sys 04/13/2008 02:20 PM 182,656 ndis.sys 04/13/2008 01:46 PM 10,880 ndisip.sys 04/13/2008 01:57 PM 10,112 ndistapi.sys 04/13/2008 01:55 PM 14,592 ndisuio.sys 04/13/2008 02:20 PM 91,520 ndiswan.sys 04/13/2008 01:57 PM 40,576 ndproxy.sys 04/13/2008 01:56 PM 34,688 netbios.sys 04/13/2008 02:21 PM 162,816 netbt.sys 07/17/2004 10:35 AM 67,866 netwlan5.img 04/13/2008 01:51 PM 61,824 nic1394.sys 02/28/2006 07:00 AM 12,032 nikedrv.sys 04/13/2008 01:53 PM 40,320 nmnt.sys 04/13/2008 01:32 PM 30,848 npfs.sys 04/13/2008 02:15 PM 574,976 ntfs.sys 08/03/2004 09:41 PM 180,360 ntmtlfax.sys 02/28/2006 07:00 AM 2,944 null.sys 06/15/2005 04:20 PM 3,200,256 nv4_mini.sys 02/28/2006 07:00 AM 12,416 nwlnkflt.sys 02/28/2006 07:00 AM 32,512 nwlnkfwd.sys 04/13/2008 01:56 PM 88,320 nwlnkipx.sys 02/28/2006 07:00 AM 63,232 nwlnknb.sys 02/28/2006 07:00 AM 55,936 nwlnkspx.sys 04/13/2008 01:46 PM 61,696 ohci1394.sys 02/28/2006 07:00 AM 3,456 oprghdlr.sys 04/13/2008 01:31 PM 42,752 p3.sys 04/13/2008 01:40 PM 80,128 parport.sys 04/13/2008 01:40 PM 19,712 partmgr.sys 02/28/2006 07:00 AM 6,784 parvdm.sys 04/13/2008 01:36 PM 68,224 pci.sys 02/28/2006 07:00 AM 3,328 pciide.sys 04/13/2008 01:40 PM 24,960 pciidex.sys 04/13/2008 01:36 PM 120,192 pcmcia.sys 05/15/2003 06:41 PM 19,072 point32.sys 04/13/2008 02:19 PM 146,048 portcls.sys 04/13/2008 01:31 PM 35,840 processr.sys 04/13/2008 01:56 PM 69,120 psched.sys 02/28/2006 07:00 AM 17,792 ptilink.sys 03/22/2008 11:00 AM 36,624 PxHelp20.sys 02/28/2006 07:00 AM 8,832 rasacd.sys 04/13/2008 02:19 PM 51,328 rasl2tp.sys 04/13/2008 01:57 PM 41,472 raspppoe.sys 04/13/2008 02:19 PM 48,384 raspptp.sys 02/28/2006 07:00 AM 16,512 raspti.sys 02/28/2006 07:00 AM 34,432 rawwan.sys 04/13/2008 02:28 PM 175,744 rdbss.sys 02/28/2006 07:00 AM 4,224 rdpcdd.sys 04/13/2008 01:32 PM 196,224 rdpdr.sys 04/13/2008 07:13 PM 139,656 rdpwd.sys 08/03/2004 09:41 PM 13,776 recagent.sys 04/13/2008 01:40 PM 57,600 redbook.sys 04/13/2008 01:46 PM 59,136 rfcomm.sys 02/28/2006 07:00 AM 12,032 rio8drv.sys 02/28/2006 07:00 AM 12,032 riodrv.sys 05/08/2008 09:02 AM 203,136 rmcast.sys 04/13/2008 01:56 PM 30,592 rndismp.sys 04/13/2008 01:56 PM 30,592 rndismpx.sys 02/28/2006 07:00 AM 5,888 rootmdm.sys 11/08/2006 03:51 AM 62,336 rspndr.sys 04/11/2008 07:49 AM 8 RTKHDAUD.DAT 03/01/2007 04:27 PM 4,484,608 RtkHDAud.sys 08/03/2004 09:29 PM 166,912 s3gnbm.sys 04/13/2008 01:40 PM 96,384 scsiport.sys 04/13/2008 01:36 PM 79,232 sdbus.sys 11/13/2007 05:25 AM 20,480 secdrv.sys 04/13/2008 01:40 PM 15,744 serenum.sys 04/13/2008 02:15 PM 64,512 serial.sys 04/13/2008 01:40 PM 11,904 sffdisk.sys 04/13/2008 01:40 PM 10,240 sffp_mmc.sys 04/13/2008 01:40 PM 11,008 sffp_sd.sys 04/13/2008 01:40 PM 11,392 sfloppy.sys 04/13/2008 07:12 PM 3,901 siint5.dll 04/13/2008 01:36 PM 40,960 sisagp.sys 04/13/2008 01:46 PM 11,136 slip.sys 08/03/2004 09:41 PM 129,535 slnt7554.sys 08/03/2004 09:41 PM 404,990 slntamr.sys 08/03/2004 09:41 PM 95,424 slnthal.sys 08/03/2004 09:41 PM 13,240 slwdmsup.sys 04/13/2008 01:36 PM 5,888 smbali.sys 02/28/2006 07:00 AM 14,592 smclib.sys 04/13/2008 01:46 PM 25,344 sonydcam.sys 04/13/2008 01:45 PM 6,272 splitter.sys 04/13/2008 01:36 PM 73,472 sr.sys 12/11/2008 05:57 AM 333,952 srv.sys 11/06/2009 12:00 PM 29,808 ssfs0bbc.sys 11/06/2009 12:00 PM 23,152 sshrmd.sys 11/06/2009 12:00 PM 176,752 ssidrv.sys 04/13/2008 01:45 PM 49,408 stream.sys 04/13/2008 01:46 PM 15,232 streamip.sys 04/13/2008 01:39 PM 4,352 swenum.sys 04/13/2008 01:45 PM 56,576 swmidi.sys 04/13/2008 02:15 PM 60,800 sysaudio.sys 04/13/2008 01:40 PM 14,976 tape.sys 06/20/2008 06:51 AM 361,600 tcpip.sys 06/20/2008 06:08 AM 225,856 tcpip6.sys 04/13/2008 02:00 PM 19,072 tdi.sys 04/13/2008 07:13 PM 12,040 tdpipe.sys 04/13/2008 07:13 PM 21,896 tdtcp.sys 04/13/2008 07:13 PM 40,840 termdd.sys 02/28/2006 07:00 AM 51,712 tosdvd.sys 02/28/2006 07:00 AM 21,376 tsbvcap.sys 04/13/2008 01:56 PM 12,288 tunmp.sys 06/13/2008 04:17 PM 23,600 TVICHW32.SYS 04/13/2008 01:36 PM 44,672 uagp35.sys 04/13/2008 01:32 PM 66,048 udfs.sys 11/11/2007 08:13 AM UMDF 04/13/2008 01:39 PM 384,768 update.sys 04/13/2008 01:56 PM 12,800 usb8023.sys 04/13/2008 01:56 PM 12,800 usb8023x.sys 04/13/2008 01:45 PM 60,032 usbaudio.sys 04/13/2008 01:45 PM 25,600 usbcamd.sys 04/13/2008 01:45 PM 25,728 usbcamd2.sys 04/13/2008 01:45 PM 32,128 usbccgp.sys 02/28/2006 07:00 AM 4,736 usbd.sys 04/13/2008 01:45 PM 30,208 usbehci.sys 04/13/2008 01:45 PM 59,520 usbhub.sys 04/13/2008 01:45 PM 15,872 usbintel.sys 04/13/2008 01:45 PM 143,872 usbport.sys 04/13/2008 01:47 PM 25,856 usbprint.sys 04/13/2008 01:45 PM 15,104 usbscan.sys 04/13/2008 01:45 PM 26,368 usbstor.sys 04/13/2008 01:45 PM 20,608 usbuhci.sys 04/13/2008 01:46 PM 121,984 usbvideo.sys 06/11/2007 12:01 AM 142,656 V0400Afx.sys 09/19/2006 12:56 PM 57,656 V0400PC.bmp 03/05/2007 05:45 PM 7,424 V0400Vfx.sys 06/07/2007 12:01 AM 166,720 V0400Vid.sys 04/13/2008 07:12 PM 11,325 vchnt5.dll 02/28/2006 07:00 AM 58,112 vdmindvd.sys 04/13/2008 01:44 PM 20,992 vga.sys 04/13/2008 01:36 PM 42,240 viaagp.sys 04/13/2008 01:44 PM 81,664 videoprt.sys 04/13/2008 01:41 PM 52,352 volsnap.sys 04/13/2008 01:43 PM 14,208 wacompen.sys 08/03/2004 09:29 PM 11,807 wadv07nt.sys 08/03/2004 09:29 PM 11,295 wadv08nt.sys 08/03/2004 09:29 PM 11,871 wadv09nt.sys 08/03/2004 09:29 PM 11,935 wadv11nt.sys 04/13/2008 01:57 PM 34,560 wanarp.sys 08/03/2004 09:29 PM 22,271 watv06nt.sys 08/03/2004 09:29 PM 25,471 watv10nt.sys 11/06/2006 05:04 PM 28,672 wceusbsh.sys 11/02/2006 06:22 AM 492,000 wdf01000.sys 11/02/2006 06:22 AM 32,224 wdfldr.sys 04/13/2008 02:17 PM 83,072 wdmaud.sys 02/28/2006 07:00 AM 4,352 wmilib.sys 10/18/2006 08:00 PM 38,528 wpdusb.sys 02/28/2006 07:00 AM 12,032 ws2ifsl.sys 04/13/2008 01:46 PM 19,200 wstcodec.sys 09/28/2006 06:55 PM 77,568 WudfPf.sys 09/28/2006 07:00 PM 82,944 WudfRd.sys 321 File(s) 39,649,101 bytes Directory of C:\Windows\System32\Drivers\disdn 10/22/2007 11:23 AM . 10/22/2007 11:23 AM .. 0 File(s) 0 bytes Directory of C:\Windows\System32\Drivers\etc 12/07/2009 02:29 PM . 12/07/2009 02:29 PM .. 12/07/2009 02:29 PM 27 hosts 02/28/2006 07:00 AM 3,683 lmhosts.sam 02/28/2006 07:00 AM 407 networks 02/28/2006 07:00 AM 799 protocol 02/28/2006 07:00 AM 7,116 services 5 File(s) 12,032 bytes Directory of C:\Windows\System32\Drivers\UMDF 11/11/2007 08:13 AM . 11/11/2007 08:13 AM .. 10/18/2006 09:47 PM 671,232 wpdmtpdr.dll 1 File(s) 671,232 bytes Total Files Listed: 327 File(s) 40,332,365 bytes 11 Dir(s) 44,941,484,032 bytes free ***********************Hidden Drivers******************** Volume in drive C has no label. Volume Serial Number is 7CE0-328E Directory of C:\Windows\System32\Drivers 06/14/2008 11:25 AM 0 MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 06/14/2008 11:25 AM 0 Msft_Kernel_motmodem_01005.Wdf 2 File(s) 0 bytes 0 Dir(s) 44,941,496,320 bytes free *********************Processes******************* PROCESS PID PRIO PATH smss.exe 384 Normal C:\WINDOWS\System32\smss.exe csrss.exe 444 Normal C:\WINDOWS\system32\csrss.exe winlogon.exe 468 High C:\WINDOWS\system32\winlogon.exe services.exe 512 Normal C:\WINDOWS\system32\services.exe lsass.exe 524 Normal C:\WINDOWS\system32\lsass.exe WRConsumerService.exe 676 Normal C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe svchost.exe 700 Normal C:\WINDOWS\system32\svchost.exe svchost.exe 788 Normal C:\WINDOWS\system32\svchost.exe MsMpEng.exe 856 Normal C:\Program Files\Windows Defender\MsMpEng.exe svchost.exe 932 Normal C:\WINDOWS\system32\svchost.exe svchost.exe 956 Normal C:\WINDOWS\system32\svchost.exe svchost.exe 1084 Normal C:\WINDOWS\system32\svchost.exe AAWService.exe 1148 Normal C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe SpySweeper.exe 1720 Normal C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe unsecapp.exe 400 Normal C:\WINDOWS\system32\wbem\unsecapp.exe Explorer.EXE 572 Normal C:\WINDOWS\Explorer.EXE wmiprvse.exe 924 Normal C:\WINDOWS\system32\wbem\wmiprvse.exe iexplore.exe 1384 Normal C:\Program Files\internet explorer\iexplore.exe iexplore.exe 1468 Normal C:\Program Files\internet explorer\iexplore.exe ctfmon.exe 1536 Normal C:\WINDOWS\system32\ctfmon.exe AAWTray.exe 1976 Normal C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe explorer.exe 1908 High C:\WINDOWS\explorer.exe cmd.exe 1628 Normal C:\WINDOWS\system32\cmd.exe processes.exe 268 Normal C:\Documents and Settings\Eddie\Desktop\SpiderKill\SpiderKill\processes.exe Module information for 'Explorer.EXE'(572) MODULE BASE SIZE PATH Explorer.EXE 1000000 1044480 C:\WINDOWS\Explorer.EXE 6.00.2900.5512 (xpsp.080413-2105) Windows Explorer ntdll.dll 7c900000 729088 C:\WINDOWS\system32\ntdll.dll 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) NT Layer DLL kernel32.dll 7c800000 1007616 C:\WINDOWS\system32\kernel32.dll 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317) Windows NT BASE API Client DLL ADVAPI32.dll 77dd0000 634880 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) Advanced Windows 32 Base API RPCRT4.dll 77e70000 598016 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241) Remote Procedure Call Runtime Secur32.dll 77fe0000 69632 C:\WINDOWS\system32\Secur32.dll 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305) Security Support Provider Interface BROWSEUI.dll 75f80000 1036288 C:\WINDOWS\system32\BROWSEUI.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Browser UI Library GDI32.dll 77f10000 299008 C:\WINDOWS\system32\GDI32.dll 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932) GDI Client DLL USER32.dll 7e410000 593920 C:\WINDOWS\system32\USER32.dll 5.1.2600.5512 (xpsp.080413-2105) Windows XP USER API Client DLL msvcrt.dll 77c10000 360448 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.5512 (xpsp.080413-2111) Windows NT CRT DLL ole32.dll 774e0000 1298432 C:\WINDOWS\system32\ole32.dll 5.1.2600.5512 (xpsp.080413-2108) Microsoft OLE for Windows SHLWAPI.dll 77f60000 483328 C:\WINDOWS\system32\SHLWAPI.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Light-weight Utility Library OLEAUT32.dll 77120000 569344 C:\WINDOWS\system32\OLEAUT32.dll 5.1.2600.5512 5.1.2600.5512 SHDOCVW.dll 7e290000 1511424 C:\WINDOWS\system32\SHDOCVW.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Doc Object and Control Library CRYPT32.dll 77a80000 610304 C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.5512 (xpsp.080413-2113) Crypto API32 MSASN1.dll 77b20000 73728 C:\WINDOWS\system32\MSASN1.dll 5.1.2600.5875 (xpsp_sp3_gdr.090904-1413) ASN.1 Runtime APIs CRYPTUI.dll 754d0000 524288 C:\WINDOWS\system32\CRYPTUI.dll 5.131.2600.5512 (xpsp.080413-2113) Microsoft Trust UI Provider NETAPI32.dll 5b860000 348160 C:\WINDOWS\system32\NETAPI32.dll 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312) Net Win32 API DLL VERSION.dll 77c00000 32768 C:\WINDOWS\system32\VERSION.dll 5.1.2600.5512 (xpsp.080413-2105) Version Checking and File Installation Libraries WININET.dll 3d930000 942080 C:\WINDOWS\system32\WININET.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) Internet Extensions for Win32 Normaliz.dll 400000 36864 C:\WINDOWS\system32\Normaliz.dll 6.0.5441.0 (winmain(wmbla).060628-1735) Unicode Normalization DLL urlmon.dll 78130000 1253376 C:\WINDOWS\system32\urlmon.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) OLE32 Extensions for Win32 iertutil.dll 3dfd0000 1998848 C:\WINDOWS\system32\iertutil.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) Run time utility for Internet Explorer WINTRUST.dll 76c30000 188416 C:\WINDOWS\system32\WINTRUST.dll 5.131.2600.5512 (xpsp.080413-2113) Microsoft Trust Verification APIs IMAGEHLP.dll 76c90000 163840 C:\WINDOWS\system32\IMAGEHLP.dll 5.1.2600.5512 (xpsp.080413-2105) Windows NT Image Helper WLDAP32.dll 76f60000 180224 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.5512 (xpsp.080413-2113) Win32 LDAP API DLL SHELL32.dll 7c9c0000 8482816 C:\WINDOWS\system32\SHELL32.dll 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319) Windows Shell Common Dll UxTheme.dll 5ad70000 229376 C:\WINDOWS\system32\UxTheme.dll 6.00.2900.5512 (xpsp.080413-2105) Microsoft UxTheme Library ShimEng.dll 5cb70000 155648 C:\WINDOWS\system32\ShimEng.dll 5.1.2600.5512 (xpsp.080413-2105) Shim Engine DLL AcGenral.DLL 6f880000 1875968 C:\WINDOWS\AppPatch\AcGenral.DLL 5.1.2600.5512 (xpsp.080413-2105) Windows Compatibility DLL WINMM.dll 76b40000 184320 C:\WINDOWS\system32\WINMM.dll 5.1.2600.5512 (xpsp.080413-0845) MCI API DLL MSACM32.dll 77be0000 86016 C:\WINDOWS\system32\MSACM32.dll 5.1.2600.5512 (xpsp.080413-0845) Microsoft ACM Audio Filter USERENV.dll 769c0000 737280 C:\WINDOWS\system32\USERENV.dll 5.1.2600.5512 (xpsp.080413-2113) Userenv IMM32.DLL 76390000 118784 C:\WINDOWS\system32\IMM32.DLL 5.1.2600.5512 (xpsp.080413-2105) Windows XP IMM32 API Client DLL comctl32.dll 773d0000 1060864 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll 6.0 (xpsp.080413-2105) User Experience Controls Library comctl32.dll 5d090000 630784 C:\WINDOWS\system32\comctl32.dll 5.82 (xpsp.080413-2105) Common Controls Library apphelp.dll 77b40000 139264 C:\WINDOWS\system32\apphelp.dll 5.1.2600.5512 (xpsp.080413-2105) Application Compatibility Client Library msctfime.ime 755c0000 188416 C:\WINDOWS\system32\msctfime.ime 5.1.2600.5512 (xpsp.080413-2105) Microsoft Text Frame Work Service IME CLBCATQ.DLL 76fd0000 520192 C:\WINDOWS\system32\CLBCATQ.DLL 2001.12.4414.700 2001.12.4414.700 COMRes.dll 77050000 806912 C:\WINDOWS\system32\COMRes.dll 2001.12.4414.700 2001.12.4414.700 CtxMenu_1_0_0_10.dll 10000000 249856 C:\Program Files\Webroot\Spy Sweeper\Backup\CtxMenu_1_0_0_10.dll 1.0.0.10 CtxMenu DLL OLEACC.dll 74c80000 180224 C:\WINDOWS\system32\OLEACC.dll 4.2.5406.0 (xpclient.010817-1148) Active Accessibility Core Component MSVCP60.dll 76080000 413696 C:\WINDOWS\system32\MSVCP60.dll 6.02.3104.0 Microsoft (R) C++ Runtime Library WINSPOOL.DRV 73000000 155648 C:\WINDOWS\system32\WINSPOOL.DRV 5.1.2600.5512 (xpsp.080413-0852) Windows Spooler Driver msxml3.dll 74980000 1191936 C:\WINDOWS\system32\msxml3.dll 8.100.1051.0 MSXML 3.0 SP10 cscui.dll 77a20000 344064 C:\WINDOWS\System32\cscui.dll 5.1.2600.5512 (xpsp.080413-2105) Client Side Caching UI CSCDLL.dll 76600000 118784 C:\WINDOWS\System32\CSCDLL.dll 5.1.2600.5512 (xpsp.080413-2111) Offline Network Agent themeui.dll 5ba60000 462848 C:\WINDOWS\system32\themeui.dll 6.00.2900.5512 (xpsp.080413-2105) Windows Theme API MSIMG32.dll 76380000 20480 C:\WINDOWS\system32\MSIMG32.dll 5.1.2600.5512 (xpsp.080413-2105) GDIEXT Client DLL xpsp2res.dll 1500000 2904064 C:\WINDOWS\system32\xpsp2res.dll 5.1.2600.5512 (xpsp.080413-2113) Service Pack 2 Messages SAMLIB.dll 71bf0000 77824 C:\WINDOWS\system32\SAMLIB.dll 5.1.2600.5512 (xpsp.080413-2113) SAM Library DLL ieframe.dll 3e1c0000 11087872 C:\WINDOWS\system32\ieframe.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) Internet Explorer MLANG.dll 75cf0000 593920 C:\WINDOWS\system32\MLANG.dll 6.00.2900.5512 (xpsp.080413-2105) Multi Language Support DLL LINKINFO.dll 76980000 32768 C:\WINDOWS\system32\LINKINFO.dll 5.1.2600.5512 (xpsp.080413-2105) Windows Volume Tracking ntshrui.dll 76990000 151552 C:\WINDOWS\system32\ntshrui.dll 5.1.2600.5512 (xpsp.080413-2105) Shell extensions for sharing ATL.DLL 76b20000 69632 C:\WINDOWS\system32\ATL.DLL 3.05.2284 ATL Module for Windows XP (Unicode) SETUPAPI.dll 77920000 995328 C:\WINDOWS\system32\SETUPAPI.dll 5.1.2600.5512 (xpsp.080413-2111) Windows Setup API WINSTA.dll 76360000 65536 C:\WINDOWS\system32\WINSTA.dll 5.1.2600.5512 (xpsp.080413-2111) Winstation Library NETSHELL.dll 76400000 1724416 C:\WINDOWS\system32\NETSHELL.dll 5.1.2600.5512 (xpsp.080413-0852) Network Connections Shell credui.dll 76c00000 188416 C:\WINDOWS\system32\credui.dll 5.1.2600.5512 (xpsp.080413-2113) Credential Manager User Interface dot3api.dll 478c0000 40960 C:\WINDOWS\system32\dot3api.dll 5.1.2600.5512 (xpsp.080413-0852) 802.3 Autoconfiguration API rtutils.dll 76e80000 57344 C:\WINDOWS\system32\rtutils.dll 5.1.2600.5512 (xpsp.080413-0852) Routing Utilities dot3dlg.dll 736d0000 24576 C:\WINDOWS\system32\dot3dlg.dll 5.1.2600.5512 (xpsp.080413-0852) 802.3 UI Helper OneX.DLL 5dca0000 163840 C:\WINDOWS\system32\OneX.DLL 5.1.2600.5512 (xpsp.080413-0852) IEEE 802.1X supplicant library WTSAPI32.dll 76f50000 32768 C:\WINDOWS\system32\WTSAPI32.dll 5.1.2600.5512 (xpsp.080413-2111) Windows Terminal Server SDK APIs eappcfg.dll 745b0000 139264 C:\WINDOWS\system32\eappcfg.dll 5.1.2600.5512 (xpsp.080413-0852) Eap Peer Config eappprxy.dll 5dcd0000 57344 C:\WINDOWS\system32\eappprxy.dll 5.1.2600.5512 (xpsp.080413-0852) Microsoft EAPHost Peer Client DLL iphlpapi.dll 76d60000 102400 C:\WINDOWS\system32\iphlpapi.dll 5.1.2600.5512 (xpsp.080413-0852) IP Helper API WS2_32.dll 71ab0000 94208 C:\WINDOWS\system32\WS2_32.dll 5.1.2600.5512 (xpsp.080413-0852) Windows Socket 2.0 32-Bit DLL WS2HELP.dll 71aa0000 32768 C:\WINDOWS\system32\WS2HELP.dll 5.1.2600.5512 (xpsp.080413-0852) Windows Socket 2.0 Helper for Windows NT MSCTF.dll 74720000 311296 C:\WINDOWS\system32\MSCTF.dll 5.1.2600.5512 (xpsp.080413-2105) MSCTF Server DLL msi.dll 7d1e0000 2867200 C:\WINDOWS\system32\msi.dll 3.1.4001.5512 Windows Installer SXS.DLL 7e720000 720896 C:\WINDOWS\system32\SXS.DLL 5.1.2600.5512 (xpsp.080413-2111) Fusion 2.5 MPR.dll 71b20000 73728 C:\WINDOWS\system32\MPR.dll 5.1.2600.5512 (xpsp.080413-0852) Multiple Provider Router DLL drprov.dll 75f60000 28672 C:\WINDOWS\System32\drprov.dll 5.1.2600.5512 (xpsp.080413-2111) Microsoft Terminal Server Network Provider ntlanman.dll 71c10000 57344 C:\WINDOWS\System32\ntlanman.dll 5.1.2600.5512 (xpsp.080413-2108) Microsoft® Lan Manager NETUI0.dll 71cd0000 94208 C:\WINDOWS\System32\NETUI0.dll 5.1.2600.5512 (xpsp.080413-2108) NT LM UI Common Code - GUI Classes NETUI1.dll 71c90000 262144 C:\WINDOWS\System32\NETUI1.dll 5.1.2600.5512 (xpsp.080413-2108) NT LM UI Common Code - Networking classes NETRAP.dll 71c80000 28672 C:\WINDOWS\System32\NETRAP.dll 5.1.2600.5512 (xpsp.080413-2113) Net Remote Admin Protocol DLL davclnt.dll 75f70000 40960 C:\WINDOWS\System32\davclnt.dll 5.1.2600.5512 (xpsp.080413-2111) Web DAV Client DLL LMIRfsClientNP.dll d10000 81920 C:\WINDOWS\system32\LMIRfsClientNP.dll 2.1.3.0 LogMeIn Rfs Client Network Provider browselc.dll 71600000 73728 C:\WINDOWS\system32\browselc.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Browser UI Library zipfldr.dll 73380000 356352 C:\WINDOWS\system32\zipfldr.dll 6.00.2900.5512 (xpsp.080413-2105) Compressed (zipped) Folders SHELLW~1.DLL 2770000 167936 C:\PROGRA~1\COMMON~1\WEBROO~1\SHELLW~1.DLL 6.0.1.409 Window Washer Shredding Shell Extension SSCtxMnu.dll 2a40000 512000 C:\PROGRA~1\Webroot\SPYSWE~1\SSCtxMnu.dll 6,1,0,145 Spy Sweeper Client Executable mscoree.dll 79000000 286720 C:\WINDOWS\system32\mscoree.dll 2.0.50727.3053 (netfxsp.050727-3000) Microsoft .NET Runtime Execution Engine mscorwks.dll 79e70000 5832704 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll 2.0.50727.3603 (GDR.050727-3600) Microsoft .NET Runtime Common Language Runtime - WorkStation MSVCR80.dll 3080000 634880 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll 8.00.50727.3053 Microsoft® C Runtime Library mscorlib.ni.dll 790c0000 11497472 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll 2.0.50727.3603 (GDR.050727-3600) Microsoft Common Language Runtime Class Library rsaenh.dll 68000000 221184 C:\WINDOWS\system32\rsaenh.dll 5.1.2600.5507 (xpsp.080318-1711) Microsoft Enhanced Cryptographic Provider mscorsec.dll 64020000 77824 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll 2.0.50727.3053 (netfxsp.050727-3000) Microsoft .NET Security module cryptnet.dll 75e60000 77824 C:\WINDOWS\system32\cryptnet.dll 5.131.2600.5512 (xpsp.080413-2113) Crypto Network Related API PSAPI.DLL 76bf0000 45056 C:\WINDOWS\system32\PSAPI.DLL 5.1.2600.5512 (xpsp.080413-2105) Process Status Helper SensApi.dll 722b0000 20480 C:\WINDOWS\system32\SensApi.dll 5.1.2600.5512 (xpsp.080413-2108) SENS Connectivity API DLL WINHTTP.dll 4d4f0000 364544 C:\WINDOWS\system32\WINHTTP.dll 5.1.2600.5727 (xpsp_sp3_gdr.081215-1359) Windows HTTP Services SOSClientApi.dll 11000000 40960 C:\Program Files\Webroot\Spy Sweeper\Backup\SOSClientApi.dll 4.3.17.3 SOS Client API mscorjit.dll 79060000 372736 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll 2.0.50727.3082 (QFE.050727-3000) Microsoft .NET Runtime Just-In-Time Compiler SOSTools.dll 55b0000 131072 C:\Program Files\Webroot\Spy Sweeper\Backup\SOSTools.dll 4.3.17.3 SOS Online Backup System.Xml.dll 637a0000 2064384 C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll 2.0.50727.3082 (QFE.050727-3000) .NET Framework System.ni.dll 7a440000 7884800 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll 2.0.50727.3053 (netfxsp.050727-3000) .NET Framework mbamext.dll 5860000 98304 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll 1, 3, 0, 0 Malwarebytes' Anti-Malware ShellExt.dll 5890000 94208 C:\Program Files\Lavasoft\Ad-Aware\ShellExt.dll 1.0.0.1 Shell Extension MSVCP90.dll 78480000 581632 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCP90.dll 9.00.30729.1 Microsoft® C++ Runtime Library MSVCR90.dll 78520000 667648 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\MSVCR90.dll 9.00.30729.1 Microsoft® C Runtime Library ATL90.DLL 78e20000 172032 C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\ATL90.DLL 9.00.30729.01 ATL Module for Windows (Unicode) shellExt.dll 22000000 200704 C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll 4.0.314 Shell Extension mydocs.dll 72410000 106496 C:\WINDOWS\system32\mydocs.dll 6.00.2900.5512 (xpsp.080413-2105) My Documents Folder UI PDFShell.dll 5aa0000 372736 C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll 9.1.0.2009022700 PDF Shell Extension MpOAv.dll 5f800000 86016 C:\PROGRA~1\WIFD1F~1\MpOAv.dll 1.1.1593.0 IOfficeAntiVirus Module MSVCP80.dll 7c420000 552960 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll 8.00.50727.3053 Microsoft® C++ Runtime Library MpShHook.dll 5990000 90112 C:\PROGRA~1\WIFD1F~1\MpShHook.dll 1.1.1593.0 Shell Execution Monitor Module information for 'explorer.exe'(1908) MODULE BASE SIZE PATH explorer.exe 1000000 1044480 C:\WINDOWS\explorer.exe 6.00.2900.5512 (xpsp.080413-2105) Windows Explorer ntdll.dll 7c900000 729088 C:\WINDOWS\system32\ntdll.dll 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) NT Layer DLL kernel32.dll 7c800000 1007616 C:\WINDOWS\system32\kernel32.dll 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317) Windows NT BASE API Client DLL ADVAPI32.dll 77dd0000 634880 C:\WINDOWS\system32\ADVAPI32.dll 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) Advanced Windows 32 Base API RPCRT4.dll 77e70000 598016 C:\WINDOWS\system32\RPCRT4.dll 5.1.2600.5795 (xpsp_sp3_gdr.090415-1241) Remote Procedure Call Runtime Secur32.dll 77fe0000 69632 C:\WINDOWS\system32\Secur32.dll 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305) Security Support Provider Interface BROWSEUI.dll 75f80000 1036288 C:\WINDOWS\system32\BROWSEUI.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Browser UI Library GDI32.dll 77f10000 299008 C:\WINDOWS\system32\GDI32.dll 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932) GDI Client DLL USER32.dll 7e410000 593920 C:\WINDOWS\system32\USER32.dll 5.1.2600.5512 (xpsp.080413-2105) Windows XP USER API Client DLL msvcrt.dll 77c10000 360448 C:\WINDOWS\system32\msvcrt.dll 7.0.2600.5512 (xpsp.080413-2111) Windows NT CRT DLL ole32.dll 774e0000 1298432 C:\WINDOWS\system32\ole32.dll 5.1.2600.5512 (xpsp.080413-2108) Microsoft OLE for Windows SHLWAPI.dll 77f60000 483328 C:\WINDOWS\system32\SHLWAPI.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Light-weight Utility Library OLEAUT32.dll 77120000 569344 C:\WINDOWS\system32\OLEAUT32.dll 5.1.2600.5512 5.1.2600.5512 SHDOCVW.dll 7e290000 1511424 C:\WINDOWS\system32\SHDOCVW.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Doc Object and Control Library CRYPT32.dll 77a80000 610304 C:\WINDOWS\system32\CRYPT32.dll 5.131.2600.5512 (xpsp.080413-2113) Crypto API32 MSASN1.dll 77b20000 73728 C:\WINDOWS\system32\MSASN1.dll 5.1.2600.5875 (xpsp_sp3_gdr.090904-1413) ASN.1 Runtime APIs CRYPTUI.dll 754d0000 524288 C:\WINDOWS\system32\CRYPTUI.dll 5.131.2600.5512 (xpsp.080413-2113) Microsoft Trust UI Provider NETAPI32.dll 5b860000 348160 C:\WINDOWS\system32\NETAPI32.dll 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312) Net Win32 API DLL VERSION.dll 77c00000 32768 C:\WINDOWS\system32\VERSION.dll 5.1.2600.5512 (xpsp.080413-2105) Version Checking and File Installation Libraries WININET.dll 3d930000 942080 C:\WINDOWS\system32\WININET.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) Internet Extensions for Win32 Normaliz.dll 400000 36864 C:\WINDOWS\system32\Normaliz.dll 6.0.5441.0 (winmain(wmbla).060628-1735) Unicode Normalization DLL urlmon.dll 78130000 1253376 C:\WINDOWS\system32\urlmon.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) OLE32 Extensions for Win32 iertutil.dll 3dfd0000 1998848 C:\WINDOWS\system32\iertutil.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) Run time utility for Internet Explorer WINTRUST.dll 76c30000 188416 C:\WINDOWS\system32\WINTRUST.dll 5.131.2600.5512 (xpsp.080413-2113) Microsoft Trust Verification APIs IMAGEHLP.dll 76c90000 163840 C:\WINDOWS\system32\IMAGEHLP.dll 5.1.2600.5512 (xpsp.080413-2105) Windows NT Image Helper WLDAP32.dll 76f60000 180224 C:\WINDOWS\system32\WLDAP32.dll 5.1.2600.5512 (xpsp.080413-2113) Win32 LDAP API DLL SHELL32.dll 7c9c0000 8482816 C:\WINDOWS\system32\SHELL32.dll 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319) Windows Shell Common Dll UxTheme.dll 5ad70000 229376 C:\WINDOWS\system32\UxTheme.dll 6.00.2900.5512 (xpsp.080413-2105) Microsoft UxTheme Library ShimEng.dll 5cb70000 155648 C:\WINDOWS\system32\ShimEng.dll 5.1.2600.5512 (xpsp.080413-2105) Shim Engine DLL AcGenral.DLL 6f880000 1875968 C:\WINDOWS\AppPatch\AcGenral.DLL 5.1.2600.5512 (xpsp.080413-2105) Windows Compatibility DLL WINMM.dll 76b40000 184320 C:\WINDOWS\system32\WINMM.dll 5.1.2600.5512 (xpsp.080413-0845) MCI API DLL MSACM32.dll 77be0000 86016 C:\WINDOWS\system32\MSACM32.dll 5.1.2600.5512 (xpsp.080413-0845) Microsoft ACM Audio Filter USERENV.dll 769c0000 737280 C:\WINDOWS\system32\USERENV.dll 5.1.2600.5512 (xpsp.080413-2113) Userenv IMM32.DLL 76390000 118784 C:\WINDOWS\system32\IMM32.DLL 5.1.2600.5512 (xpsp.080413-2105) Windows XP IMM32 API Client DLL comctl32.dll 773d0000 1060864 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll 6.0 (xpsp.080413-2105) User Experience Controls Library comctl32.dll 5d090000 630784 C:\WINDOWS\system32\comctl32.dll 5.82 (xpsp.080413-2105) Common Controls Library SETUPAPI.dll 77920000 995328 C:\WINDOWS\system32\SETUPAPI.dll 5.1.2600.5512 (xpsp.080413-2111) Windows Setup API MSCTF.dll 74720000 311296 C:\WINDOWS\system32\MSCTF.dll 5.1.2600.5512 (xpsp.080413-2105) MSCTF Server DLL msctfime.ime 755c0000 188416 C:\WINDOWS\system32\msctfime.ime 5.1.2600.5512 (xpsp.080413-2105) Microsoft Text Frame Work Service IME appHelp.dll 77b40000 139264 C:\WINDOWS\system32\appHelp.dll 5.1.2600.5512 (xpsp.080413-2105) Application Compatibility Client Library CLBCATQ.DLL 76fd0000 520192 C:\WINDOWS\system32\CLBCATQ.DLL 2001.12.4414.700 2001.12.4414.700 COMRes.dll 77050000 806912 C:\WINDOWS\system32\COMRes.dll 2001.12.4414.700 2001.12.4414.700 ieframe.dll 3e1c0000 11087872 C:\WINDOWS\system32\ieframe.dll 8.00.6001.18828 (longhorn_ie8_gdr.090826-1700) Internet Explorer xpsp2res.dll d10000 2904064 C:\WINDOWS\system32\xpsp2res.dll 5.1.2600.5512 (xpsp.080413-2113) Service Pack 2 Messages msi.dll 7d1e0000 2867200 C:\WINDOWS\system32\msi.dll 3.1.4001.5512 Windows Installer SXS.DLL 7e720000 720896 C:\WINDOWS\system32\SXS.DLL 5.1.2600.5512 (xpsp.080413-2111) Fusion 2.5 browselc.dll 71600000 73728 C:\WINDOWS\system32\browselc.dll 6.00.2900.5512 (xpsp.080413-2105) Shell Browser UI Library ws2_32.dll 71ab0000 94208 C:\WINDOWS\system32\ws2_32.dll 5.1.2600.5512 (xpsp.080413-0852) Windows Socket 2.0 32-Bit DLL WS2HELP.dll 71aa0000 32768 C:\WINDOWS\system32\WS2HELP.dll 5.1.2600.5512 (xpsp.080413-0852) Windows Socket 2.0 Helper for Windows NT CtxMenu_1_0_0_10.dll 10000000 249856 C:\Program Files\Webroot\Spy Sweeper\Backup\CtxMenu_1_0_0_10.dll 1.0.0.10 CtxMenu DLL OLEACC.dll 74c80000 180224 C:\WINDOWS\system32\OLEACC.dll 4.2.5406.0 (xpclient.010817-1148) Active Accessibility Core Component MSVCP60.dll 76080000 413696 C:\WINDOWS\system32\MSVCP60.dll 6.02.3104.0 Microsoft (R) C++ Runtime Library WINSPOOL.DRV 73000000 155648 C:\WINDOWS\system32\WINSPOOL.DRV 5.1.2600.5512 (xpsp.080413-0852) Windows Spooler Driver msxml3.dll 74980000 1191936 C:\WINDOWS\system32\msxml3.dll 8.100.1051.0 MSXML 3.0 SP10 cscui.dll 77a20000 344064 C:\WINDOWS\System32\cscui.dll 5.1.2600.5512 (xpsp.080413-2105) Client Side Caching UI CSCDLL.dll 76600000 118784 C:\WINDOWS\System32\CSCDLL.dll 5.1.2600.5512 (xpsp.080413-2111) Offline Network Agent ntshrui.dll 76990000 151552 C:\WINDOWS\system32\ntshrui.dll 5.1.2600.5512 (xpsp.080413-2105) Shell extensions for sharing ATL.DLL 76b20000 69632 C:\WINDOWS\system32\ATL.DLL 3.05.2284 ATL Module for Windows XP (Unicode) PDFShell.dll 1cb0000 372736 C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll 9.1.0.2009022700 PDF Shell Extension MSVCR80.dll 1d10000 634880 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll 8.00.50727.3053 Microsoft® C Runtime Library MpShHook.dll 5f800000 90112 C:\PROGRA~1\WIFD1F~1\MpShHook.dll 1.1.1593.0 Shell Execution Monitor MSVCP80.dll 7c420000 552960 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll 8.00.50727.3053 Microsoft® C++ Runtime Library rsaenh.dll 68000000 221184 C:\WINDOWS\system32\rsaenh.dll 5.1.2600.5507 (xpsp.080318-1711) Microsoft Enhanced Cryptographic Provider MSNLNamespaceMgr.dll 1fc0000 315392 C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll 7.00.6001.18260 (vistasp1_gdr_oobsvc.090524-1500) Windows Search Namespace Manager ****************************************** EOF flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. Please download F-Secure's Blacklight from F-Secure.com • Save it to your Desktop • Double-click blbeta.exe then accept the agreement. • click > scan then > next, • You'll see a list of all items found. • Don't choose for rename yet! I want to see the log first, because legit items can also be present there... • There must be also a log on your desktop with the name fsbl.xxxxxxx.log (the xxxxxxx stand for numbers) • Post the contents of the log in your next reply. [You must be registered and logged in to see this link.] - Get$30 off Kaspersky products.

~DMJ

Donations/Contributions

DragonMaster Jay

Manager | Tech Officer

Posts : 13451
Joined : 2009-09-07
Operating System : Windows 7 Ultimate

## Re: XP shuts down. No error codes. No blue screen.

I downloaded F-Secure BackLight to the desktop and got a warning message saying it cannot be run in Safe Mode Please restart in Normal Mode....I can only get my computer to boot on Safe Mode...It will not boot up in Normal mode..That is the biggest issue we are having at this point.

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3

## Re: XP shuts down. No error codes. No blue screen.

Let us search for the culprit here:

Please begin by clicking Start > Control Panel > System > Hardware > Device Manager > View > Show hȋdden Devices

• Scroll down to Non-plug and Play Drivers and click the plus icon to open those drivers.
• Then search forTDSSserv.sys
• Let us know if you find this or not.
• If you do find it, right click on it, and select Disable. Do not try to uninstall it.
• Also if TDSSserv.sys is found and you disable it, then you must reboot immediately.
• After reboot continue on with other cleaning instructions you may have been having problems running.

Then, let me know if you can get in to Normal Mode.

[You must be registered and logged in to see this link.] - Get $30 off Kaspersky products. ~DMJ GeekPolice Academy Manager Donations/Contributions DragonMaster Jay Manager | Tech Officer Posts : 13451 Joined : 2009-09-07 Operating System : Windows 7 Ultimate ## Re: XP shuts down. No error codes. No blue screen. TDSServe.sys is not present under Non-Plug and Play Drivers on my computer. Also it is getting harder to get my machine to boot. Before I can get it to Safe Mode it now beeps from the CPU.... 2 quick beeps and 7 or 8 steady beeps and it takes several trys to get it started... I don't know what that's all about. flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. Right-click on My Computer and click Manage. Click the Device Manager on the left. List any entries that have a yellow triangle or red x beside them. [You must be registered and logged in to see this link.] - Get$30 off Kaspersky products.

~DMJ

Donations/Contributions

DragonMaster Jay

Manager | Tech Officer

Posts : 13451
Joined : 2009-09-07
Operating System : Windows 7 Ultimate

## Re: XP shuts down. No error codes. No blue screen.

Under Network adapters I found only 1 item with a red X.
Intel(R) PRO/100 VE Network Connection

There was no yellow triangles

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3

## Re: XP shuts down. No error codes. No blue screen.

Have you installed any new hardware recently, or remove any?

Do you hear weird noises come from the internals of the computer, smell anything out of the ordinary?

What is all the hardware attached to the outside of the system? (Such as keyboards, mouse, gaming controllers, printers, cameras, video editing device, etc).

Do you know what is inside? (Such as CD or DVD drive, USB 2.0 adapter, floppy disk drive, type of video card, amount of RAM, how many sticks of RAM, etc).

[You must be registered and logged in to see this link.] - Get $30 off Kaspersky products. ~DMJ GeekPolice Academy Manager Donations/Contributions DragonMaster Jay Manager | Tech Officer Posts : 13451 Joined : 2009-09-07 Operating System : Windows 7 Ultimate ## Re: XP shuts down. No error codes. No blue screen. My computer is a custom built one. It has an Intel DesktopBoard D915PLB Intel Pentium 4 Processor 3.0GHz GeForce 6200 Graphics Accelerator It has one DVD/CD drive deck (AOpen)52X It has one Floppy Drive..1.44MB 3.5" 512 meg DDR2 533 RAM 80.0 GB HDD I have a USB Key Board No unusual odors The only noises I have heard is the beeping coming from the tower when I try to boot up...causing me to retry several times before it will start. USB wireless MS mouse 1 Belkin 7 port aux. USB hub Lexmark 2500 all in one printer 1 usb Trendnet fax modem AccuSync LCD 72v monitor I have not installed any new hardware recently I have not uninstalled any hardware lately. I was downloading and transfering cell phone app. via AccuSync when I noticed the maching shutting down and restarting on it's own. It finally got to the point that it would not restart. When I tried to reboot it it would try to start up and then shut down when the desktop icons would start populating. That has degraded to only being to run in safe mode with networking. Now it is having trouble starting at all. The tower beeps several times causing me to have to crash the machine and try to restart several times before it finally starts in safe mode. Whatever is going on seems to know I'm trying to find it and it is just getting worse...Who Knows??!! I unplugged all the usb devices, and a/c powered speakers....nothing left pluged in except the monitor and network cable. turned off the power and unpluged the a/c power cord. I plugged the power cord back in and turned on the power switch and tried to boot....but it still won't start in normal mode. Last edited by flyinskwurl on Wed 16 Dec 2009, 1:28 pm; edited 1 time in total (Reason for editing : Additional info.) flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. How many beeps are there on startup? This indicates a hardware issue. For most beeps, they are in a pattern. For example: 1-2-1-1 [You must be registered and logged in to see this link.] - Get$30 off Kaspersky products.

~DMJ

Donations/Contributions

DragonMaster Jay

Manager | Tech Officer

Posts : 13451
Joined : 2009-09-07
Operating System : Windows 7 Ultimate

## Re: XP shuts down. No error codes. No blue screen.

The start up beeps are 2 quick beeps followed by 8 beeps in a row.

1+1 1-1-1-1-1-1-1-1

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3

## Re: XP shuts down. No error codes. No blue screen.

Then, let me know if you get anymore beeps.

[You must be registered and logged in to see this link.] - Get $30 off Kaspersky products. ~DMJ GeekPolice Academy Manager Donations/Contributions DragonMaster Jay Manager | Tech Officer Posts : 13451 Joined : 2009-09-07 Operating System : Windows 7 Ultimate ## Re: XP shuts down. No error codes. No blue screen. I followed the instructions for cleaning the inside of the computer. Although I had done that earlier..I did it again there were some places that were missed on the first cleaning. The computer still only boots up into Safe Mode. It beeped for the first two times but the beeping has stopped and now back to only booting in Safe Mode. The machine has made 8 start ups with no beeping. flyinskwurl Newbie Surfer Posts : 44 Joined : 2009-09-22 Operating System : windows xp home sp3 ## Re: XP shuts down. No error codes. No blue screen. Please download ComboFix from here: [You must be registered and logged in to see this link.] Rename ComboFix.exe to commy.exe before you save it to your Desktop • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here • Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware. • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message: • Click on Yes, to continue scanning for malware. • When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply. [You must be registered and logged in to see this link.] - Get$30 off Kaspersky products.

~DMJ

Donations/Contributions

DragonMaster Jay

Manager | Tech Officer

Posts : 13451
Joined : 2009-09-07
Operating System : Windows 7 Ultimate

## Re: XP shuts down. No error codes. No blue screen.

I guess we are at the end of the line with this one. The computer won't boot at all. I can't even get it to boot with the XP disk.
Looks like a trip to the repair shop...or maybe just put it out of service.

Thank you for all your help. I really don't think it's worth spending any more time on..

Marry Christmas..Thanks again for your effort...

flyinskwurl

Newbie Surfer

Posts : 44
Joined : 2009-09-22
Operating System : windows xp home sp3