virus shuts down avg 8.5, commonpriv.log.lock

VirusHater · 06-04-2009, 04:01 PM

This morning my computer started running extremely slow and I noticed two files that continue to appear on my desktop even after deleting them, "commonpriv.log.lock" and a text file called "commonpriv". I normally use AVG 8.5, but it appears the virus I have won't let the AVG systemtray run so I cannot do a scan. I was, however, able to install Antivira Antivirus, update it and run a scan, but this scan did not find or remove the virus.

I even tried to run AVG 8.5 in safemode, and the commonpriv files came back and I was still unable to run AVG.

HELP!!!

I downloaded HiJack This and here is the log of what's happening...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:55:49 PM, on 6/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1138103518640
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcz_device - - C:\WINDOWS\system32\lxczcoms.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe

--
End of file - 4390 bytes

VirusHater · 06-04-2009, 05:11 PM

Just a note, that was run in SafeMode with Networking, not sure if that matters in your analysis. I am currently running through your 130 page word document to removing clutter and malware. Thank you for taking the time to help!

Osiris · 06-04-2009, 08:48 PM

When you are done with the guide let me know

VirusHater · 06-05-2009, 11:16 AM

Alright, I am done with the guide. I installed all of the programs on that list except AVG. I tried to uninstall it from my computer and do a reinstall, but it said there are 66 errors while trying to uninstall it and it still shows up in my Add/Remove Programs. I'm not really sure where to go next with AVG. Also, Antivira picked up on a virus called TR/Crack.D and I used a delete method to get rid of it, and it hasn't come back yet.

And I ran another HiJackThis after completing your Guide (this time in normal boot mode) and here it is...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:11:51, on 6/5/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxczcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1138103518640
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxcz_device - - C:\WINDOWS\system32\lxczcoms.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe (file missing)
O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe

--
End of file - 4391 bytes

Again, Thank you for your help! I really appreciate it!

VirusHater · 06-05-2009, 11:25 AM

Here is the SmitFraudFix log that you asked for in the guide.

SmitFraudFix v2.419

Scan done at 17:06:04.82, Thu 06/04/2009
Run from C:\Documents and Settings\Administrator\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix
S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Linksys Wireless-G PCI Adapter - Packet Scheduler Miniport
DNS Server Search Order: 208.67.222.222
DNS Server Search Order: 208.67.220.220

HKLM\SYSTEM\CCS\Services\Tcpip\..\{118503DE-E237-4C5F-88E2-7F76B0E8EE0A}: DhcpNameServer=208.67.222.222 208.67.220.220
HKLM\SYSTEM\CS1\Services\Tcpip\..\{118503DE-E237-4C5F-88E2-7F76B0E8EE0A}: DhcpNameServer=208.67.222.222 208.67.220.220
HKLM\SYSTEM\CS2\Services\Tcpip\..\{118503DE-E237-4C5F-88E2-7F76B0E8EE0A}: DhcpNameServer=208.67.222.222 208.67.220.220
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=208.67.222.222 208.67.220.220
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=208.67.222.222 208.67.220.220
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=208.67.222.222 208.67.220.220

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» RK.2
»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» End

VirusHater · 06-05-2009, 11:30 AM

Oops, I forgot to post my ComboFix log too.

ComboFix 09-06-04.04 - Ben Willmann 06/04/2009 18:07.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.551 [GMT -4:00]
Running from: c:\documents and settings\Ben Willmann\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\tmp.reg

.
((((((((((((((((((((((((( Files Created from 2009-05-04 to 2009-06-04 )))))))))))))))))))))))))))))))
.

2009-06-04 21:14 . 2009-06-04 21:14 -------- d-----w- c:\documents and settings\Ben Willmann\Application Data\Malwarebytes
2009-06-04 21:14 . 2009-05-26 17:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-04 21:14 . 2009-06-04 21:14 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-04 21:14 . 2009-06-04 21:14 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-06-04 21:14 . 2009-05-26 17:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-04 20:41 . 2009-06-04 20:41 -------- d-----w- c:\program files\CleanUp!
2009-06-04 20:29 . 2009-06-04 20:29 -------- d-----w- c:\program files\MSConfig CleanUp
2009-06-04 20:16 . 2009-06-04 20:16 69232 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-04 19:55 . 2009-06-04 19:55 -------- d-----w- c:\program files\Trend Micro
2009-06-04 19:46 . 2009-06-04 19:46 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2009-06-04 18:24 . 2009-03-30 14:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-06-04 18:24 . 2009-03-24 20:08 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-06-04 18:24 . 2009-02-13 16:29 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-06-04 18:24 . 2009-02-13 16:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-06-04 18:24 . 2009-06-04 18:24 -------- d-----w- c:\program files\Avira
2009-06-04 18:24 . 2009-06-04 18:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-05-23 19:43 . 2009-05-23 19:43 -------- d-----w- c:\documents and settings\Ben Willmann\Application Data\GlarySoft
2009-05-23 19:42 . 2009-05-23 19:42 -------- d-----w- c:\program files\Glary Utilities
2009-05-22 14:13 . 2009-05-22 14:13 20747 ----a-w- c:\windows\system32\drivers\AegisP.sys
2009-05-22 14:13 . 2005-10-27 19:06 356096 ----a-w- c:\windows\system32\rt61.sys
2009-05-22 14:13 . 2005-10-20 19:00 243328 ----a-w- c:\windows\system32\rt2500.sys
2009-05-22 14:13 . 2009-05-22 14:13 -------- d-----w- c:\program files\Linksys Wireless-G PCI Wireless Network Monitor
2009-05-22 06:37 . 2009-05-22 06:37 -------- d-sh--w- c:\documents and settings\Ben Willmann\PrivacIE
2009-05-22 06:16 . 2009-05-22 06:16 -------- d-sh--w- c:\documents and settings\Ben Willmann\IECompatCache
2009-05-19 04:57 . 2009-05-19 04:57 -------- d-----w- c:\program files\Realtek AC97
2009-05-18 19:20 . 2009-05-18 19:20 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2009-05-18 05:38 . 2009-05-22 06:50 -------- d--h--w- C:\$AVG8.VAULT$
2009-05-18 05:10 . 2009-05-18 05:10 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-05-18 05:10 . 2009-05-18 05:10 -------- d-sh--w- c:\documents and settings\Ben Willmann\IETldCache
2009-05-18 05:06 . 2009-05-18 05:06 -------- d-----w- c:\windows\ie8updates
2009-05-18 05:06 . 2009-04-25 05:30 102400 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-05-18 05:04 . 2009-05-18 05:05 -------- dc-h--w- c:\windows\ie8
2009-05-18 04:29 . 2009-05-18 04:29 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-05-18 04:29 . 2009-06-04 17:03 -------- d-----w- c:\windows\system32\drivers\Avg
2009-05-18 04:29 . 2009-05-18 04:29 325896 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-05-18 04:29 . 2009-05-18 04:29 -------- d-----w- c:\program files\AVG
2009-05-18 04:29 . 2009-05-18 04:29 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-05-18 04:28 . 2009-05-22 06:19 -------- d-----w- c:\program files\Driver Sweeper
2009-05-18 01:38 . 2009-05-01 02:02 457248 ----a-w- c:\windows\system32\nvudisp.exe
2009-05-18 01:37 . 2009-04-27 04:42 457248 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-05-18 01:30 . 2009-05-18 01:30 -------- d-----w- c:\program files\SystemRequirementsLab
2009-05-18 01:30 . 2009-05-18 01:30 -------- d-----w- c:\documents and settings\Ben Willmann\Application Data\SystemRequirementsLab
2009-05-18 01:30 . 2009-05-18 01:30 290816 ----a-w- c:\documents and settings\Ben Willmann\Application Data\SystemRequirementsLab\SRLProxy_nvd_4.dll
2009-05-18 01:30 . 2009-05-18 01:30 290816 ----a-w- c:\documents and settings\Ben Willmann\Application Data\SystemRequirementsLab\SRLProxy_nvd_3.dll
2009-05-18 01:30 . 2009-05-18 01:30 290816 ----a-w- c:\documents and settings\Ben Willmann\Application Data\SystemRequirementsLab\SRLProxy_nvd_2.dll
2009-05-18 01:30 . 2009-05-18 01:30 290816 ----a-w- c:\documents and settings\Ben Willmann\Application Data\SystemRequirementsLab\SRLProxy_nvd_1.dll
2009-05-15 23:03 . 2009-05-15 23:03 -------- d-----w- c:\program files\Ventrilo
2009-05-15 23:03 . 2009-05-15 23:03 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-05-14 06:30 . 2009-05-14 06:30 -------- d-----w- C:\a23bf263887955dc324207
2009-05-11 00:17 . 2009-05-11 00:17 -------- d-----w- c:\documents and settings\Ben Willmann\Local Settings\Application Data\Blizzard Entertainment
2009-05-10 19:09 . 2009-06-04 19:19 -------- d-----w- c:\program files\Lavasoft
2009-05-10 18:59 . 2009-05-10 19:21 -------- d-----w- c:\program files\Adware Professional
2009-05-10 01:07 . 2009-05-10 01:07 -------- d-----w- c:\windows\system32\XPSViewer
2009-05-10 01:07 . 2009-05-10 01:07 -------- d-----w- c:\program files\Reference Assemblies
2009-05-10 01:05 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintpr oc.dll
2009-05-10 01:05 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-05-10 01:05 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-05-10 01:05 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-05-10 01:05 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesv c.exe
2009-05-10 01:05 . 2009-05-10 01:06 -------- d-----w- C:\d9714206bd5ba7ea6117
2009-05-10 01:05 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-05-10 01:05 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-05-10 01:05 . 2009-05-10 06:12 -------- d-----w- c:\windows\SxsCaPendDel
2009-05-10 00:22 . 2009-05-10 00:22 -------- d-----w- c:\windows\system32\scripting
2009-05-10 00:22 . 2009-05-10 00:22 -------- d-----w- c:\windows\l2schemas
2009-05-10 00:22 . 2009-05-10 00:22 -------- d-----w- c:\windows\system32\en
2009-05-09 22:11 . 2008-04-14 00:12 276992 ------w- c:\windows\system32\wmphoto.dll
2009-05-09 22:11 . 2008-04-14 00:12 69120 ------w- c:\windows\system32\wlanapi.dll
2009-05-09 22:11 . 2008-04-14 00:12 346112 ------w- c:\windows\system32\windowscodecsext.dll
2009-05-09 22:11 . 2008-04-14 00:12 712704 ------w- c:\windows\system32\windowscodecs.dll
2009-05-09 22:11 . 2008-04-14 00:12 53248 ------w- c:\windows\system32\tsgqec.dll
2009-05-09 22:11 . 2008-04-14 00:12 50688 ------w- c:\windows\system32\tspkg.dll
2009-05-09 22:11 . 2008-04-14 00:12 32768 ------w- c:\windows\system32\setupn.exe
2009-05-09 22:11 . 2008-04-13 18:40 10240 ------w- c:\windows\system32\drivers\sffp_mmc.sys
2009-05-09 22:09 . 2008-04-14 00:12 10752 ------w- c:\windows\system32\smtpapi.dll
2009-05-09 21:51 . 2009-05-09 21:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard
2009-05-09 21:46 . 2009-05-09 21:46 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-05-09 21:45 . 2009-05-09 21:45 152576 ----a-w- c:\documents and settings\Ben Willmann\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-05-09 21:31 . 2009-03-06 14:22 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-05-09 21:31 . 2009-02-09 12:10 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-05-09 21:31 . 2009-02-09 12:10 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-05-09 21:31 . 2009-02-06 11:11 110592 -c----w- c:\windows\system32\dllcache\services.exe
2009-05-09 21:31 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-05-09 21:31 . 2009-02-09 12:10 729088 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-05-09 21:31 . 2009-02-09 12:10 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-05-09 21:31 . 2009-02-09 12:10 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-05-09 21:31 . 2009-02-09 12:10 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-05-09 21:31 . 2009-02-06 11:06 2145280 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-05-09 21:31 . 2009-02-06 11:08 2189056 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-05-09 21:31 . 2009-02-06 10:32 2023936 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-05-09 21:30 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-05-09 21:30 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-05-09 21:30 . 2008-10-15 16:34 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-05-09 21:30 . 2008-09-04 17:15 1106944 -c----w- c:\windows\system32\dllcache\msxml3.dll
2009-05-09 21:30 . 2008-05-03 11:55 2560 ------w- c:\windows\system32\xpsp4res.dll
2009-05-09 21:30 . 2008-04-21 12:08 215552 -c----w- c:\windows\system32\dllcache\wordpad.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-06-04 19:13 . 2006-01-27 21:43 -------- d-----w- c:\program files\Starcraft
2009-05-22 14:13 . 2006-01-24 22:53 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-22 06:20 . 2007-08-23 11:02 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-05-22 06:19 . 2007-10-11 15:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-05-22 06:19 . 2006-09-27 13:50 -------- d-----w- c:\program files\DivX
2009-05-21 22:54 . 2006-01-25 16:47 -------- d-----w- c:\program files\Steam
2009-05-18 04:29 . 2007-01-14 21:40 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-05-15 23:19 . 2006-01-24 00:32 -------- d-----w- c:\documents and settings\Ben Willmann\Application Data\Ventrilo
2009-05-10 19:09 . 2008-05-14 13:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-05-10 18:55 . 2006-02-01 20:33 -------- d-----w- c:\program files\AIM
2009-05-10 18:55 . 2006-02-01 20:33 -------- d-----w- c:\documents and settings\Ben Willmann\Application Data\Aim
2009-05-10 18:48 . 2006-01-24 22:07 69232 ----a-w- c:\documents and settings\Ben Willmann\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-10 01:07 . 2008-08-03 15:03 -------- d-----w- c:\program files\MSBuild
2009-05-10 00:26 . 2006-01-23 23:18 86327 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2009-05-09 21:49 . 2006-09-28 19:35 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2009-05-09 21:46 . 2006-02-07 21:09 -------- d-----w- c:\program files\Java
2009-05-09 21:44 . 2007-03-06 03:51 -------- d-----w- c:\program files\CCleaner
2009-05-01 04:31 . 2009-05-01 04:31 1657376 ----a-w- c:\windows\system32\nwiz.exe
2009-05-01 04:31 . 2009-05-01 04:31 449056 ----a-w- c:\windows\system32\nvappbar.exe
2009-05-01 04:31 . 2009-05-01 04:31 436768 ----a-w- c:\windows\system32\keystone.exe
2009-05-01 04:31 . 2009-05-01 04:31 466944 ----a-w- c:\windows\system32\nvshell.dll
2009-05-01 04:31 . 2009-05-01 04:31 1724416 ----a-w- c:\windows\system32\nvwdmcpl.dll
2009-05-01 04:31 . 2009-05-01 04:31 1507328 ----a-w- c:\windows\system32\nview.dll
2009-05-01 04:31 . 2009-05-01 04:31 1101824 ----a-w- c:\windows\system32\nvwimg.dll
2009-05-01 02:02 . 2009-05-01 02:02 9994240 ----a-w- c:\windows\system32\nvoglnt.dll
2009-05-01 02:02 . 2009-05-01 02:02 806912 ----a-w- c:\windows\system32\nvapi.dll
2009-05-01 02:02 . 2009-05-01 02:02 663552 ----a-w- c:\windows\system32\nvcuvid.dll
2009-05-01 02:02 . 2009-05-01 02:02 1720320 ----a-w- c:\windows\system32\nvcuda.dll
2009-05-01 02:02 . 2009-05-01 02:02 1579630 ----a-w- c:\windows\system32\nvdata.bin
2009-05-01 02:02 . 2009-05-01 02:02 143360 ----a-w- c:\windows\system32\nvcodins.dll
2009-05-01 02:02 . 2009-05-01 02:02 143360 ----a-w- c:\windows\system32\nvcod.dll
2009-05-01 02:02 . 2009-05-01 02:02 1314816 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-05-01 02:02 . 2005-12-10 08:06 8055584 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2009-05-01 02:02 . 2005-12-10 08:06 5896320 ----a-w- c:\windows\system32\nv4_disp.dll
2009-03-08 08:34 . 2005-10-21 17:51 914944 ----a-w- c:\windows\system32\wininet.dll
2009-03-08 08:34 . 2003-03-31 12:00 43008 ----a-w- c:\windows\system32\licmgr10.dll
2009-03-08 08:33 . 2003-03-31 12:00 18944 ----a-w- c:\windows\system32\corpol.dll
2009-03-08 08:33 . 2003-03-31 12:00 420352 ----a-w- c:\windows\system32\vbscript.dll
2009-03-08 08:32 . 2003-03-31 12:00 72704 ----a-w- c:\windows\system32\admparse.dll
2009-03-08 08:32 . 2003-03-31 12:00 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-03-08 08:31 . 2003-03-31 12:00 34816 ----a-w- c:\windows\system32\imgutil.dll
2009-03-08 08:31 . 2003-03-31 12:00 48128 ----a-w- c:\windows\system32\mshtmler.dll
2009-03-08 08:31 . 2003-03-31 12:00 45568 ----a-w- c:\windows\system32\mshta.exe
2009-03-08 08:22 . 2003-03-31 12:00 156160 ----a-w- c:\windows\system32\msls31.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-05-18 1947928]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-05-01 13750272]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-05-18 04:29 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Starcraft\\StarCraft.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\ \SAGENT4.EXE"=
"c:\\Program Files\\Steam\\SteamApps\\duckhuntinpro\\day of defeat source\\hl2.exe"=
"c:\\World of Warcraft\\BackgroundDownloader.exe"=
"c:\\Program Files\\Steam\\SteamApps\\special-ops158\\counter-strike source\\hl2.exe"=
"c:\\World of Warcraft\\WoW-2.0.3-enUS-downloader.exe"=
"c:\\World of Warcraft\\WoW-2.0.3.6299-to-2.0.7.6383-enUS-downloader.exe"=
"c:\\World of Warcraft\\WoW-2.0.7.6383-to-2.0.8.6403-enUS-downloader.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\World of Warcraft\\WoW-2.0.8.6403-to-2.0.10.6448-enUS-downloader.exe"=
"c:\\World of Warcraft\\WoW-2.0.10.6448-to-2.0.12.6546-enUS-downloader.exe"=
"c:\\Program Files\\Steam\\SteamApps\\special-ops158\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 1942\\BF1942.exe"=
"c:\\WINDOWS\\system32\\lxczcoms.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\World of Warcraft\\Launcher.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [5/18/2009 12:29 AM 325896]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [6/4/2009 2:24 PM 108289]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [5/18/2009 12:29 AM 298776]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSe tup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-05-23 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 18:57]

2009-06-04 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-05-23 15:50]
.
- - - - ORPHANS REMOVED - - - -

HKU-Default-Run-ALUAlert - c:\program files\Symantec\LiveUpdate\ALUNotify.exe
SafeBoot-procexp90.Sys

.
------- Supplementary Scan -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.

************************************************** ************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-06-04 18:09
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
Completion time: 2009-06-04 18:11
ComboFix-quarantined-files.txt 2009-06-04 22:11

Pre-Run: 28,583,034,880 bytes free
Post-Run: 28,587,954,176 bytes free

234 --- E O F --- 2009-05-10 06:15

Osiris · 06-05-2009, 02:03 PM

Well the log looks good

VirusHater · 06-05-2009, 06:09 PM

Do you have any idea what could be causing this commonpriv.log.lock? It shows up whenever I try to do something with AVG (which isn't functioning correctly right now). I deleted the old AVG icon and it appeared, also when I try to run an uninstall it does the same type of thing.

Any tips on how to get this thing fully uninstalled / reinstalled to get AVG working again?

Thanks!

VirusHater · 06-05-2009, 06:25 PM

This is what the error says for AVG uninstall by the way...
Local machine: prepared for the installation
Initialization:
Warning: Checking of state of the item directory scanlogs failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\scanlogs"
Warning: Checking of state of the item directory update failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\update"
Warning: Checking of state of the item directory download failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\update\download"
Warning: Checking of state of the item directory emc failed.
Error 0x80070017 %PATH% = ""
Warning: Checking of state of the item directory AvgAm failed.
Error 0x80070017 %PATH% = ""
Warning: Checking of state of the item directory AvgApi failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\AvgApi"
Warning: Checking of state of the item directory admincli failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\admincli"
Warning: Checking of state of the item directory Antispam failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Antispam"
Warning: Checking of state of the item file spamcatcher.conf failed.
Error 0x80070017 %PATH% = "H¼£ocuments and Settings\All Users\Application Data\avg8\Antispam\spamcatcher.conf"
Warning: Checking of state of the item file scbin.txt failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Antispam\scbin.txt"
Warning: Checking of state of the item file sc1.bin.full failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc1.bin.full"
Warning: Checking of state of the item file sc2.bin.full failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc2.bin.full"
Warning: Checking of state of the item file sc5.bin.full failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc5.bin.full"
Warning: Checking of state of the item file sc6.bin.full failed.
Error 0x80070017 %PATH% = "Xó£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc6.bin.full"
Warning: Checking of state of the item file sc14.bin.full failed.
Error 0x80070017 %PATH% = "H¼£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc14.bin.full"
Warning: Checking of state of the item file sc9.bin.full failed.
Error 0x80070017 %PATH% = "Xó£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc9.bin.full"
Warning: Checking of state of the item file sc10.bin.full failed.
Error 0x80070017 %PATH% = "H¼£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc10.bin.full"
Warning: Checking of state of the item file sc11.bin.full failed.
Error 0x80070017 %PATH% = "H¼£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc11.bin.full"
Warning: Checking of state of the item file sc12.bin.full failed.
Error 0x80070017 %PATH% = "H¼£ocuments and Settings\All Users\Application Data\avg8\Antispam\sc12.bin.full"
Warning: Checking of state of the item directory Lsdb failed.
Error 0x80070017 %PATH% = ""
Warning: Checking of state of the item directory Prev failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\Prev"
Warning: Checking of state of the item file old_sc.dat failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\sc.dat"
Warning: Checking of state of the item file old_sb.dat failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\sb.dat"
Warning: Checking of state of the item file old_sb2.dat failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\sb2.dat"
Warning: Checking of state of the item file old_ph.dat failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\ph.dat"
Warning: Checking of state of the item file old_cf.dat failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\cf.dat"
Warning: Checking of state of the item file old_sb.dat.xcd failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\sb.dat.xcd"
Warning: Checking of state of the item file old_sc.dat.xcd failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Lsdb\sc.dat.xcd"
Warning: Checking of state of the item directory Cfg failed.
Error 0x80070017 %PATH% = ""
Warning: Checking of state of the item directory Avg7Fw failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Cfg\Avg7Fw"
Warning: Checking of state of the item file updatecomps.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Cfg\updatecomps.cfg"
Warning: Checking of state of the item file setup.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Cfg\setup.cfg"
Warning: Checking of state of the item file admin.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Cfg\admin.cfg"
Warning: Checking of state of the item directory CfgAll failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\CfgAll"
Warning: Checking of state of the item directory Log failed.
Error 0x80070017 %PATH% = ""
Warning: Checking of state of the item file adminclilog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\adminclilog.cfg"
Warning: Checking of state of the item file avguilog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\avguilog.cfg"
Warning: Checking of state of the item file cfglog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\cfglog.cfg"
Warning: Checking of state of the item file cfgexlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\cfgexlog.cfg"
Warning: Checking of state of the item file lnglog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\lnglog.cfg"
Warning: Checking of state of the item file privlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\privlog.cfg"
Warning: Checking of state of the item file publog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\publog.cfg"
Warning: Checking of state of the item file rslog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\rslog.cfg"
Warning: Checking of state of the item file scanlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\scanlog.cfg"
Warning: Checking of state of the item file schedlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\schedlog.cfg"
Warning: Checking of state of the item file updlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\updlog.cfg"
Warning: Checking of state of the item file wdlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\wdlog.cfg"
Warning: Checking of state of the item file wdsvclog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\wdsvclog.cfg"
Warning: Checking of state of the item file nslog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\nslog.cfg"
Warning: Checking of state of the item file corelog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\corelog.cfg"
Warning: Checking of state of the item file systoolslog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\systoolslog.cfg"
Warning: Checking of state of the item file amlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\amlog.cfg"
Warning: Checking of state of the item file srmlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\srmlog.cfg"
Warning: Checking of state of the item file vaultlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\vaultlog.cfg"
Warning: Checking of state of the item file ldrlog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\ldrlog.cfg"
Warning: Checking of state of the item file astalog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\astalog.cfg"
Warning: Checking of state of the item file astaplog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\astaplog.cfg"
Warning: Checking of state of the item file asfllog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\asfllog.cfg"
Warning: Checking of state of the item file asflplog.cfg failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\asflplog.cfg"
Warning: Checking of state of the item file avgnetscan.log failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\avgnetscan.log"
Warning: Checking of state of the item file avgcfg.log failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\avgcfg.log"
Warning: Checking of state of the item file avgsched.log failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\avgsched.log"
Warning: Checking of state of the item file avgwd.log failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\avgwd.log"
Warning: Checking of state of the item file avgwdwsc.log failed.
Error 0x80070017 %PATH% = "øð£ocuments and Settings\All Users\Application Data\avg8\Log\avgwdwsc.log"
Warning: Checking of state of the item directory Temp failed.
Error 0x80070017 %PATH% = ""
Warning: Checking of state of the item directory Dumps failed.
Error 0x80070017 %PATH% = ""

Osiris · 06-05-2009, 09:21 PM

Can you run malwarebytes and post its log?

Member Login